last executing test programs: 10.325588151s ago: executing program 2 (id=575): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x8}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000700)) r4 = syz_open_procfs(0x0, &(0x7f0000002500)='net/wireless\x00') read$FUSE(r4, &(0x7f00000046c0)={0x2020}, 0x2021) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x729) 9.261243313s ago: executing program 1 (id=580): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r1 = openat$ttyprintk(0xffffff9c, &(0x7f0000000080), 0x2a02, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x4000}) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0x6, 0x83, 0x7, 0x7, 0x8, "0066efa15c461b84b88ecb8f77f4521b8542fb", 0x8, 0xffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='uid', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004500)={0x2020}, 0x2020) lseek(r2, 0xfffffffffffffff5, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xf802bd648bd5f590, 0x0, @val=@iter={0x0}}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) r4 = syz_open_dev$video(&(0x7f0000000040), 0x3ff, 0x0) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000200)=0x1) 9.135769545s ago: executing program 0 (id=581): socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) r3 = dup(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x10, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x800) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x3, 0x0, &(0x7f00000000c0)) 7.74971605s ago: executing program 0 (id=585): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x80401, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0xa, @pix={0x0, 0x3, 0x0, 0x3, 0x0, 0x4, 0x9, 0xfeedcafe, 0x3, 0x0, 0x8002, 0x4}}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f000000a300)={{0x80000000, 0x0, 0x2, [0x80000001, 0x8]}, {0x80000000, 0x0, 0x6, [0x2, 0x3]}, 0x0, [0x7d, 0x8]}) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) dup(r0) 7.558259747s ago: executing program 2 (id=586): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket(0x11, 0x2, 0xffc) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, r1, 0x25, 0x2, @val=@netfilter={0x0, 0x3, 0x2018}}, 0x20) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@canfd={0xd, {{0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "0db6542e8f8a5b5766f2ac3114f416e8650d33d6047fadff3af1aae26071376071a5a5068ff8afcccad827e1733feb1322833d40f069a1d592402a4bde185621"}}}}, 0x0) 6.939654421s ago: executing program 1 (id=588): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000000c0)=@llc={0x1a, 0x204, 0x7, 0x10, 0xf, 0xa6}, 0x80, 0x0}, 0x8012) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x20, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x4}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.932539747s ago: executing program 2 (id=589): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000000)={0x30, 0x6f, 0x1, {0x3, [{0x8, 0x0, 0x1}, {0x4, 0x0, 0x3}, {0x80, 0x1, 0x2}]}}, 0x30) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040010) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r4, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r5, 0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000001340)={0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 6.787474249s ago: executing program 0 (id=590): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$nci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="30b7810944bf03de"], 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r6}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r6, &(0x7f00000004c0)}, 0x20) 5.740775342s ago: executing program 0 (id=591): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000440), &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc1}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x66, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x5e, 0x30, 0x64, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000940), &(0x7f0000000ac0)={'syz', 0x1}, &(0x7f0000000980)="c5", 0x1, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x38, 0x30, 0x30, 0x63, 0x30, 0x30, 0x63, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @desc3}, &(0x7f00000008c0)={0x0, "18817cd3951197ee3b9d8783bb6f4fcbf211ff4699390ed1e9af20be014fddfc4777e8781b728c03db5f43332641914dea56c4e77e8a513068b4a5f87fa5d809", 0x21}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x34, 0x64, 0x30, 0x30, 0x33, 0x30, 0x30, 0x66, 0x36, 0x30, 0x30, 0x30, 0x75a52dfb969e39f, 0x61, 0x30, 0x61]}, &(0x7f00000009c0)={0x0, "0011223344556677000001000000000000112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x440}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000740)={'fscrypt:', @auto=[0x30, 0x38, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x53, 0x30, 0x30, 0x0, 0x30, 0x30, 0x36, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x39}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f0000000400)={'fscrypt:', @auto=[0x65, 0x61, 0x31, 0x35, 0x35, 0x63, 0x62, 0x38, 0x38, 0x39, 0x31, 0x62, 0x0, 0xf, 0x62, 0x39]}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) 5.043634166s ago: executing program 2 (id=593): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="12010000c6700610f71400058544010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000140)={&(0x7f0000000040)=[{0x4, 0x1, 0x0, 0x0}, {0x204, 0xfa11, 0x0, 0x0}], 0x2}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xf, 0x3, 0x2) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e640000", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0xfffffffffffffce6}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_GROUP={0x8, 0x1b, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x8000) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 4.993961557s ago: executing program 3 (id=594): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) write$P9_RWALK(r3, &(0x7f0000000000)={0x30, 0x6f, 0x1, {0x3, [{0x8, 0x0, 0x1}, {0x4, 0x0, 0x3}, {0x80, 0x1, 0x2}]}}, 0x30) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040010) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r5, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r5, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r6, 0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000001340)={0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 4.946907467s ago: executing program 1 (id=595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x40) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800010000000000040004800800020001000000180008801400078008"], 0x40}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = dup(0xffffffffffffffff) write$binfmt_elf32(r5, &(0x7f0000000bc0)=ANY=[], 0x58) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0xa, 0x5, 0x0) getsockopt$bt_hci(r6, 0x84, 0x1, &(0x7f00000020c0)=""/4052, &(0x7f0000000000)=0xfd4) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) 4.751421003s ago: executing program 4 (id=596): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000000c0)=@llc={0x1a, 0x204, 0x7, 0x10, 0xf, 0xa6}, 0x80, 0x0}, 0x8012) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.715507165s ago: executing program 3 (id=597): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='wwnn=0x1111111111111111,wwpn=0x2222222222222222\x00', 0x2f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000240), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000500)='1\n', 0x2) 4.12957942s ago: executing program 3 (id=598): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) shmget(0x2, 0x1000, 0x7800010c, &(0x7f0000ffd000/0x1000)=nil) r3 = io_uring_setup(0x2a6a, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x3, {0x11, 0x0, 0x0, '\x00', {0x9ca7a16b958dcf33, 0xf602, 0x6, 0xfffffff3, 0x0, 0x0, 0x6000, '\x00', 0xfffffffffffffffe, 0xfffffffffffffffe, 0x200, 0x0, {}, {0x5, 0x402}, {0xfffffffffffffffb, 0x4}, {0x5}, 0x60, 0x0, 0x7fff}}}}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) write$P9_RSTATu(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="390200000200000005f8000000000000000000000000000000000000000000000000000000000300000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007d351f5bde054000000000187b8200b500fb2a595fcb14034354b9fd9ef196a51cd5157adc8103b494e11d00d299988014986ce982", @ANYRES32=0x0, @ANYRES32=0x0], 0x239) 4.120810251s ago: executing program 4 (id=599): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket(0x11, 0x2, 0xffc) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, r1, 0x25, 0x2, @val=@netfilter={0x0, 0x3, 0x2018}}, 0x20) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@canfd={0xd, {{0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "0db6542e8f8a5b5766f2ac3114f416e8650d33d6047fadff3af1aae26071376071a5a5068ff8afcccad827e1733feb1322833d40f069a1d592402a4bde185621"}}}}, 0x0) 3.929348897s ago: executing program 1 (id=600): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000000)={0x2, 0x1, 0x3, 0x2, 0x4}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffff1000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) socket(0x1e, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x20, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) 3.462015091s ago: executing program 4 (id=601): syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) shutdown(0xffffffffffffffff, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r4 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f0000000100)=@tipc=@id={0x1e, 0x3, 0x2}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x220}, 0x0) recvmsg$kcm(r4, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) 3.385675776s ago: executing program 0 (id=602): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000440), &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc1}, &(0x7f00000007c0)={0x0, "019af2614ba26291c38206ed71472d664f913df34e60a3f34636d6ee89c849cabd912b106409cfa2bdcb914279bc39e5bf797c6c8e61ec8cfce597ddec4540e5", 0x1a}, 0x48, r0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x66, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x5e, 0x30, 0x64, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000940), &(0x7f0000000ac0)={'syz', 0x1}, &(0x7f0000000980)="c5", 0x1, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x38, 0x30, 0x30, 0x63, 0x30, 0x30, 0x63, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @desc3}, &(0x7f00000008c0)={0x0, "18817cd3951197ee3b9d8783bb6f4fcbf211ff4699390ed1e9af20be014fddfc4777e8781b728c03db5f43332641914dea56c4e77e8a513068b4a5f87fa5d809", 0x21}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x34, 0x64, 0x30, 0x30, 0x33, 0x30, 0x30, 0x66, 0x36, 0x30, 0x30, 0x30, 0x75a52dfb969e39f, 0x61, 0x30, 0x61]}, &(0x7f00000009c0)={0x0, "0011223344556677000001000000000000112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x440}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000740)={'fscrypt:', @auto=[0x30, 0x38, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x53, 0x30, 0x30, 0x0, 0x30, 0x30, 0x36, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x39}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f0000000400)={'fscrypt:', @auto=[0x65, 0x61, 0x31, 0x35, 0x35, 0x63, 0x62, 0x38, 0x38, 0x39, 0x31, 0x62, 0x0, 0xf, 0x62, 0x39]}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) 3.197826655s ago: executing program 3 (id=603): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x1a8, 0x111, 0x4b4, 0x0, 0x700, 0x2b0, 0x278, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) r4 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r4, 0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1f, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) 2.685696748s ago: executing program 0 (id=604): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000208)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000220)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000224)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setopts(0x4200, r3, 0x0, 0x1) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0x4212, r3, 0x58, &(0x7f0000000080)) 2.131981272s ago: executing program 4 (id=605): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='wwnn=0x1111111111111111,wwpn=0x2222222222222222\x00', 0x2f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000240), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000600)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000006c0)='fc\n', 0x3) write(0xffffffffffffffff, &(0x7f0000000740)='fc\n', 0x3) 2.044112291s ago: executing program 1 (id=606): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000100), 0x80, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x103902, 0x0) ioctl$TCSETS(r1, 0x5402, 0x0) r2 = dup(r1) write$UHID_INPUT(r2, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) clock_gettime(0x4, &(0x7f00000001c0)) close_range(r3, r3, 0x2) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffe, r4, 0x0) 1.447797666s ago: executing program 3 (id=607): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e20, @remote}, 0x2, 0x7, 0x3, 0x1}}, 0x2e) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x6, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000080000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000048000000060a0104000000000000000001000000200004801c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000"], 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 978.978828ms ago: executing program 4 (id=608): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r1}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x30, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000002c0)={0x20, r3}, 0x0) landlock_restrict_self(r2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0) 794.206125ms ago: executing program 2 (id=609): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='wwnn=0x1111111111111111,wwpn=0x2222222222222222\x00', 0x2f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000240), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000500)='1\n', 0x2) 237.151164ms ago: executing program 2 (id=610): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000000c0)=@llc={0x1a, 0x204, 0x7, 0x10, 0xf, 0xa6}, 0x80, 0x0}, 0x8012) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x20, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x4}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 234.665133ms ago: executing program 1 (id=611): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket(0x11, 0x2, 0xffc) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r1, 0x25, 0x2, @val=@netfilter={0x0, 0x3, 0x2018}}, 0x20) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@canfd={0xd, {{0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "0db6542e8f8a5b5766f2ac3114f416e8650d33d6047fadff3af1aae26071376071a5a5068ff8afcccad827e1733feb1322833d40f069a1d592402a4bde185621"}}}}, 0x0) 216.451167ms ago: executing program 4 (id=612): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') socket(0x15, 0x80005, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1b3, r2) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080)={r3}, &(0x7f00000000c0)=ANY=[@ANYBLOB="656e633d6f6165702068d709345265686162682d636c6d81683f6f45d3398d00"/74], 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0xc000, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0x2, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4004, 0x8, 0x200003ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xff, 0x8000012f, 0x8004, 0x5, 0xffff7fe3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x5, 0xfc, 0x5, 0x1000003, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x0, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xc, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0xa, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120000, 0x5, 0x3, 0x2, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x934, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffc, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x54, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) lseek(r0, 0x9, 0x0) 0s ago: executing program 3 (id=613): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa90d, 0x1f480, 0x2, 0x254}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) fsopen(&(0x7f0000000100)='vfat\x00', 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='wusb3801 0x4a\x00', 0xe) kernel console output (not intermixed with test programs): 185102][ T31] audit: type=1400 audit(1789527483.393:317): avc: denied { name_bind } for pid=6046 comm="syz.3.62" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 104.717376][ T5698] usb 40-1: device descriptor read/8, error -110 [ 105.761777][ T5720] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 106.142924][ T5698] usb usb40-port1: attempt power cycle [ 106.255898][ T6087] netlink: 20 bytes leftover after parsing attributes in process `syz.4.70'. [ 106.658905][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 106.658924][ T31] audit: type=1400 audit(1789527488.573:327): avc: denied { getopt } for pid=6083 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.892153][ T5698] usb usb40-port1: unable to enumerate USB device [ 107.908569][ T6089] gadgetfs: bound to dummy_udc driver [ 108.218575][ T6087] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 108.218599][ T6087] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 108.218930][ T6087] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 109.048716][ T31] audit: type=1800 audit(1789527490.473:328): pid=6087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.4.70" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 109.048769][ T31] audit: type=1400 audit(1789527490.473:329): avc: denied { firmware_load } for pid=6079 comm="syz.4.70" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 109.048800][ T31] audit: type=1400 audit(1789527490.473:330): avc: denied { firmware_load } for pid=6079 comm="syz.4.70" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 109.385086][ T6098] syz.4.76 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 111.597833][ T31] audit: type=1400 audit(1789527493.853:331): avc: denied { unmount } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 113.138832][ T31] audit: type=1400 audit(1789527494.883:332): avc: denied { create } for pid=6111 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.138882][ T31] audit: type=1400 audit(1789527494.893:333): avc: denied { write } for pid=6111 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.138916][ T31] audit: type=1400 audit(1789527494.893:334): avc: denied { nlmsg_write } for pid=6111 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.481577][ T31] audit: type=1400 audit(1789527495.733:335): avc: denied { mount } for pid=6118 comm="syz.2.74" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 114.072186][ T31] audit: type=1400 audit(1789527495.973:336): avc: denied { create } for pid=6121 comm="syz.4.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 114.072234][ T31] audit: type=1400 audit(1789527495.973:337): avc: denied { write } for pid=6121 comm="syz.4.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 114.266802][ T6126] process 'syz.1.81' launched './file2' with NULL argv: empty string added [ 114.268289][ T31] audit: type=1400 audit(1789527496.513:338): avc: denied { execute } for pid=6120 comm="syz.1.81" name="file2" dev="tmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 114.276652][ T31] audit: type=1400 audit(1789527496.523:339): avc: denied { execute_no_trans } for pid=6120 comm="syz.1.81" path="/12/file2" dev="tmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 114.288732][ T31] audit: type=1400 audit(1789527496.543:340): avc: denied { create } for pid=6120 comm="syz.1.81" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 114.371145][ T31] audit: type=1400 audit(1789527496.623:341): avc: denied { unlink } for pid=6120 comm="syz.1.81" name="file0" dev="tmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 114.530719][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'. [ 114.566165][ T6126] ip6erspan0: entered allmulticast mode [ 114.581665][ T6127] ICMPv6: NA: ff:ff:ff:ff:ff:ff advertised our address fe80::aa on syz_tun! [ 116.232362][ T6141] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 116.924389][ T6144] ubi0: attaching mtd0 [ 116.944459][ T6144] ubi0: scanning is finished [ 116.944507][ T6144] ubi0: empty MTD device detected [ 117.582381][ T6144] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 117.918448][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.80'. [ 119.387127][ T6149] hsr_slave_1 (unregistering): left promiscuous mode [ 120.709292][ T12] IPVS: starting estimator thread 0... [ 120.743203][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 120.743220][ T31] audit: type=1400 audit(1789527502.993:354): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 120.796449][ T6166] IPVS: using max 74 ests per chain, 177600 per kthread [ 121.370807][ T6169] trusted_key: encrypted_key: insufficient parameters specified [ 121.998017][ T31] audit: type=1326 audit(1789527504.253:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6150 comm="syz.4.89" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657df9e159 code=0x7fc00000 [ 124.762235][ T31] audit: type=1400 audit(1789527507.013:356): avc: denied { append } for pid=6190 comm="syz.1.87" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 124.797920][ T31] audit: type=1400 audit(1789527507.053:357): avc: denied { append } for pid=6192 comm="syz.3.97" name="comedi0" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 125.287062][ T6198] netlink: 'syz.4.98': attribute type 2 has an invalid length. [ 125.288015][ T31] audit: type=1400 audit(1789527507.543:358): avc: denied { write } for pid=6197 comm="syz.4.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 125.288439][ T31] audit: type=1400 audit(1789527507.543:359): avc: denied { accept } for pid=6197 comm="syz.4.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 125.510106][ T6201] syz.3.99 uses obsolete (PF_INET,SOCK_PACKET) [ 126.439580][ T6208] NILFS (nullb0): couldn't find nilfs on the device [ 126.573593][ T6211] netlink: 'syz.3.101': attribute type 1 has an invalid length. [ 127.283645][ T6217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 127.283945][ T6217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 127.283996][ T6217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x48f4 instead [ 127.284056][ T6217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x2739 instead [ 127.284087][ T6217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 127.284118][ T6217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 127.284149][ T6217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 127.284197][ T6217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 127.284301][ T6217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 127.284396][ T6217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 127.284425][ T6217] jffs2: Further such events for this erase block will not be printed [ 127.286598][ T6217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 127.286647][ T6217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 127.286698][ T6217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x48f4 instead [ 127.286744][ T6217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x2739 instead [ 127.286772][ T6217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 127.286799][ T6217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 127.286827][ T6217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 127.286876][ T6217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 127.286967][ T6217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 127.287063][ T6217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 127.287091][ T6217] jffs2: Further such events for this erase block will not be printed [ 127.288733][ T6217] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 127.288754][ T6217] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 128.110980][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 128.111023][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 128.256073][ T6218] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 128.256096][ T6218] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 128.256596][ T6218] vhci_hcd vhci_hcd.0: Device attached [ 128.453332][ T6221] vhci_hcd: connection closed [ 128.490721][ T43] vhci_hcd vhci_hcd.0: stop threads [ 128.490752][ T43] vhci_hcd vhci_hcd.0: release socket [ 128.490824][ T43] vhci_hcd vhci_hcd.0: disconnect device [ 128.925977][ T5812] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 129.065895][ T31] audit: type=1400 audit(1789527511.193:360): avc: denied { sqpoll } for pid=6228 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 129.066053][ T31] audit: type=1400 audit(1789527511.293:361): avc: denied { ioctl } for pid=6228 comm="syz.4.104" path="socket:[11268]" dev="sockfs" ino=11268 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 129.403761][ T5812] usb 1-1: unable to get BOS descriptor or descriptor too short [ 129.403946][ T5812] usb 1-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 129.428341][ T5812] usb 1-1: config 4 has an invalid interface number: 4 but max is 0 [ 129.428408][ T5812] usb 1-1: config 4 has no interface number 0 [ 129.428494][ T5812] usb 1-1: config 4 interface 4 has no altsetting 0 [ 129.465542][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.466435][ T5812] usb 1-1: Product: syz [ 129.466500][ T5812] usb 1-1: Manufacturer: syz [ 129.466599][ T5812] usb 1-1: SerialNumber: syz [ 131.683789][ T31] audit: type=1400 audit(1789527513.933:362): avc: denied { getopt } for pid=6241 comm="syz.2.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 131.785306][ T31] audit: type=1400 audit(1789527514.033:363): avc: denied { read write } for pid=6249 comm="syz.2.110" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 131.796346][ T31] audit: type=1400 audit(1789527514.043:364): avc: denied { open } for pid=6249 comm="syz.2.110" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 131.975939][ T31] audit: type=1400 audit(1789527514.213:365): avc: denied { create } for pid=6249 comm="syz.2.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.975991][ T31] audit: type=1400 audit(1789527514.223:366): avc: denied { connect } for pid=6249 comm="syz.2.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.976025][ T31] audit: type=1400 audit(1789527514.223:367): avc: denied { read } for pid=6249 comm="syz.2.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.030093][ T31] audit: type=1400 audit(1789527514.283:368): avc: denied { bind } for pid=6249 comm="syz.2.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.050449][ T31] audit: type=1400 audit(1789527514.313:369): avc: denied { write } for pid=6249 comm="syz.2.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 133.175851][ T5812] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 133.179766][ T5812] gspca_sunplus: reg_w_riv err -71 [ 133.179838][ T5812] sunplus 1-1:4.4: probe with driver sunplus failed with error -71 [ 133.184828][ T5812] usb 1-1: USB disconnect, device number 2 [ 135.927942][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 135.927966][ T31] audit: type=1400 audit(1789527518.184:371): avc: denied { create } for pid=6271 comm="syz.1.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 136.003734][ T31] audit: type=1400 audit(1789527518.244:372): avc: denied { create } for pid=6271 comm="syz.1.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 136.003812][ T31] audit: type=1400 audit(1789527518.254:373): avc: denied { write } for pid=6271 comm="syz.1.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 136.382164][ T31] audit: type=1400 audit(1789527518.604:374): avc: denied { ioctl } for pid=6278 comm="syz.2.118" path="socket:[10979]" dev="sockfs" ino=10979 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 136.560485][ T31] audit: type=1400 audit(1789527518.814:375): avc: denied { bind } for pid=6285 comm="syz.2.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 138.366226][ T31] audit: type=1400 audit(1789527520.624:376): avc: denied { create } for pid=6293 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 138.370418][ T31] audit: type=1400 audit(1789527520.624:377): avc: denied { getopt } for pid=6293 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 139.514644][ T31] audit: type=1400 audit(1789527521.294:378): avc: denied { read write } for pid=6307 comm="syz.1.124" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 139.514695][ T31] audit: type=1400 audit(1789527521.304:379): avc: denied { open } for pid=6307 comm="syz.1.124" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 140.240962][ T31] audit: type=1400 audit(1789527522.494:380): avc: denied { write } for pid=6313 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 142.247433][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 142.247455][ T31] audit: type=1400 audit(1789527524.504:382): avc: denied { write } for pid=6318 comm="syz.2.128" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 142.249392][ T31] audit: type=1400 audit(1789527524.504:383): avc: denied { open } for pid=6318 comm="syz.2.128" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 143.938182][ T6329] evm: overlay not supported [ 144.528227][ T6329] ceph: No mds server is up or the cluster is laggy [ 144.879284][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 144.879384][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 145.875168][ T973] libceph: connect (1)[c::]:6789 error -101 [ 145.875322][ T973] libceph: mon0 (1)[c::]:6789 connect error [ 146.017522][ T6341] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 146.017551][ T6341] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 146.017569][ T6341] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x48f4 instead [ 146.017589][ T6341] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x2739 instead [ 146.017605][ T6341] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 146.017620][ T6341] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 146.017635][ T6341] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 146.017654][ T6341] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 146.017681][ T6341] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 146.017707][ T6341] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 146.017721][ T6341] jffs2: Further such events for this erase block will not be printed [ 146.018061][ T6341] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 146.018078][ T6341] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 146.018093][ T6341] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x48f4 instead [ 146.018110][ T6341] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x2739 instead [ 146.018124][ T6341] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 146.018138][ T6341] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 146.018168][ T6341] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 146.018187][ T6341] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 146.018231][ T6341] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 146.018258][ T6341] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 146.018273][ T6341] jffs2: Further such events for this erase block will not be printed [ 146.018591][ T6341] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 146.018599][ T6341] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 146.398321][ T973] libceph: connect (1)[c::]:6789 error -101 [ 146.398494][ T973] libceph: mon0 (1)[c::]:6789 connect error [ 147.675752][ T6352] ALSA: mixer_oss: invalid OSS volume '' [ 148.737067][ T6364] Invalid ELF header magic: != ELF [ 148.828282][ T31] audit: type=1400 audit(1789527530.994:384): avc: denied { module_load } for pid=6361 comm="syz.3.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 149.960386][ T6373] : renamed from bond_slave_0 [ 151.916326][ T1387] IPVS: starting estimator thread 0... [ 152.024468][ T6392] IPVS: using max 41 ests per chain, 98400 per kthread [ 154.997313][ T31] audit: type=1400 audit(1789527536.845:385): avc: denied { bind } for pid=6395 comm="syz.2.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 155.843469][ T31] audit: type=1400 audit(1789527537.855:386): avc: denied { write } for pid=6400 comm="syz.1.136" path="socket:[11174]" dev="sockfs" ino=11174 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.354371][ T5734] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 156.552557][ T5734] usb 1-1: unable to get BOS descriptor or descriptor too short [ 156.565515][ T5734] usb 1-1: not running at top speed; connect to a high speed hub [ 156.565547][ T5734] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 156.604623][ T5734] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 156.604653][ T5734] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 156.604671][ T5734] usb 1-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 156.604690][ T5734] usb 1-1: config 14 has no interface number 0 [ 156.604706][ T5734] usb 1-1: config 14 has no interface number 1 [ 156.604754][ T5734] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 156.604773][ T5734] usb 1-1: config 14 interface 228 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.604798][ T5734] usb 1-1: config 14 interface 57 has no altsetting 0 [ 156.604815][ T5734] usb 1-1: config 14 interface 228 has no altsetting 0 [ 156.733132][ T5734] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.733169][ T5734] usb 1-1: Product: syz [ 156.733307][ T5734] usb 1-1: Manufacturer: syz [ 156.733332][ T5734] usb 1-1: SerialNumber: syz [ 158.271135][ T5734] legousbtower 1-1:14.57: interrupt endpoints not found [ 158.359446][ T6419] warning: `syz.3.151' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 158.366338][ T6419] xt_CONNSECMARK: invalid mode: 0 [ 158.369875][ T31] audit: type=1400 audit(1789527540.595:387): avc: denied { write } for pid=6416 comm="syz.3.151" name="001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 158.679371][ T6407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.679727][ T6407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.135988][ T31] audit: type=1400 audit(1789527541.395:388): avc: denied { create } for pid=6424 comm="syz.3.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 159.174676][ T31] audit: type=1400 audit(1789527541.425:389): avc: denied { setopt } for pid=6424 comm="syz.3.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 159.241343][ T5734] legousbtower 1-1:14.228: interrupt endpoints not found [ 159.258424][ T5734] usb 1-1: USB disconnect, device number 3 [ 160.534556][ T31] audit: type=1400 audit(1789527542.785:390): avc: denied { mount } for pid=6442 comm="syz.1.157" name="/" dev="ramfs" ino=12406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 161.081479][ T31] audit: type=1400 audit(1789527543.335:391): avc: denied { execute } for pid=6442 comm="syz.1.157" name="file2" dev="ramfs" ino=12407 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 161.081507][ T31] audit: type=1400 audit(1789527543.335:392): avc: denied { execute_no_trans } for pid=6442 comm="syz.1.157" path="/file2" dev="ramfs" ino=12407 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 161.371042][ T31] audit: type=1400 audit(1789527543.625:393): avc: denied { map } for pid=6444 comm="syz.0.156" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 161.626365][ T6460] SELinux: policydb string length -366 does not match expected length 8 [ 161.626549][ T6460] SELinux: failed to load policy [ 161.626637][ T31] audit: type=1400 audit(1789527543.885:394): avc: denied { load_policy } for pid=6458 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 162.949999][ T6463] ALSA: mixer_oss: invalid OSS volume '' [ 164.624256][ T6455] syz.0.156 (6455): drop_caches: 2 [ 165.870843][ T31] audit: type=1400 audit(1789527548.125:395): avc: denied { ioctl } for pid=6482 comm="syz.0.166" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 169.260216][ T1001] Bluetooth: Error in BCSP hdr checksum [ 169.283629][ T31] audit: type=1400 audit(1789527551.535:396): avc: denied { name_bind } for pid=6496 comm="syz.3.167" src=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 169.451949][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'. [ 170.846083][ T6520] NILFS (nullb0): couldn't find nilfs on the device [ 171.338514][ T52] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 172.093298][ T31] audit: type=1400 audit(1789527554.296:397): avc: denied { bind } for pid=6524 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.683005][ T31] audit: type=1400 audit(1789527558.896:398): avc: denied { mount } for pid=6550 comm="syz.1.178" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 176.683179][ T31] audit: type=1400 audit(1789527558.906:399): avc: denied { write } for pid=6550 comm="syz.1.178" name="trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 177.295335][ T6560] 0x000000000000-0x000000020000 : "" [ 177.312972][ T31] audit: type=1400 audit(1789527559.566:400): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 177.381925][ T6560] ftl_cs: FTL header not found. [ 178.392677][ T31] audit: type=1400 audit(1789527560.646:401): avc: denied { create } for pid=6562 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 178.416730][ T31] audit: type=1400 audit(1789527560.676:402): avc: denied { bind } for pid=6562 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 178.419448][ T31] audit: type=1400 audit(1789527560.676:403): avc: denied { accept } for pid=6562 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 178.469669][ T31] audit: type=1400 audit(1789527560.726:404): avc: denied { setopt } for pid=6562 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 178.474312][ T31] audit: type=1400 audit(1789527560.726:405): avc: denied { write } for pid=6562 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 179.020139][ T6574] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 179.207361][ T6574] socket: no more sockets [ 179.207376][ T6574] Failed to initialize the IGMP autojoin socket (err -23) [ 180.390682][ T6572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.187'. [ 180.390717][ T6572] netlink: 20 bytes leftover after parsing attributes in process `syz.2.187'. [ 180.390919][ T31] audit: type=1400 audit(1789527562.646:406): avc: denied { listen } for pid=6570 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.493700][ T6599] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 182.493726][ T6599] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 182.493743][ T6599] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x48f4 instead [ 182.493762][ T6599] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x2739 instead [ 182.493778][ T6599] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 182.493793][ T6599] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 182.493808][ T6599] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 182.493828][ T6599] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 182.493857][ T6599] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 182.493884][ T6599] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 182.493898][ T6599] jffs2: Further such events for this erase block will not be printed [ 182.494246][ T6599] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 182.494263][ T6599] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 182.494280][ T6599] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x48f4 instead [ 182.494298][ T6599] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x2739 instead [ 182.494313][ T6599] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 182.494328][ T6599] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 182.494344][ T6599] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 182.494362][ T6599] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 182.494390][ T6599] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 182.494417][ T6599] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 182.494431][ T6599] jffs2: Further such events for this erase block will not be printed [ 182.494777][ T6599] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 182.494785][ T6599] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 184.788171][ T31] audit: type=1400 audit(1789527566.266:407): avc: denied { read } for pid=6605 comm="syz.1.195" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 184.788225][ T31] audit: type=1400 audit(1789527566.266:408): avc: denied { open } for pid=6605 comm="syz.1.195" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 184.788263][ T31] audit: type=1400 audit(1789527566.266:409): avc: denied { ioctl } for pid=6605 comm="syz.1.195" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 184.788302][ T31] audit: type=1400 audit(1789527566.466:410): avc: denied { create } for pid=6607 comm="syz.4.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 184.788337][ T31] audit: type=1400 audit(1789527566.476:411): avc: denied { sys_admin } for pid=6607 comm="syz.4.196" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 185.656432][ T6604] Bluetooth: hci0: command 0x0406 tx timeout [ 185.656487][ T6604] Bluetooth: hci1: command 0x0406 tx timeout [ 185.656508][ T6604] Bluetooth: hci3: command 0x0406 tx timeout [ 185.656536][ T6604] Bluetooth: hci2: command 0x0406 tx timeout [ 188.516857][ T31] audit: type=1400 audit(1789527570.747:412): avc: denied { create } for pid=6629 comm="syz.4.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 188.516938][ T31] audit: type=1400 audit(1789527570.777:413): avc: denied { bind } for pid=6629 comm="syz.4.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 188.763470][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.763517][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.790801][ T6636] ip_tables: iptables: counters copy to user failed while replacing table [ 189.072517][ T5720] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 189.234739][ T5720] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 189.239311][ T5720] usb 2-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 189.239406][ T5720] usb 2-1: config 1 interface 0 altsetting 64 endpoint 0x3 has invalid maxpacket 320, setting to 64 [ 189.239470][ T5720] usb 2-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 189.239540][ T5720] usb 2-1: config 1 interface 0 has no altsetting 0 [ 189.333740][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 189.333764][ T5720] usb 2-1: SerialNumber: syz [ 189.341716][ T6636] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 189.370994][ T5720] hub 2-1:1.0: bad descriptor, ignoring hub [ 189.371020][ T5720] hub 2-1:1.0: probe with driver hub failed with error -5 [ 189.371454][ T5720] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 189.579340][ T5720] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 189.613849][ T5720] usb 2-1: USB disconnect, device number 4 [ 190.209746][ T6645] netlink: 'syz.3.206': attribute type 2 has an invalid length. [ 192.326496][ T31] audit: type=1400 audit(1789527574.177:415): avc: denied { audit_write } for pid=6655 comm="syz.1.208" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 192.387845][ T31] audit: type=1400 audit(1789527573.717:414): avc: denied { create } for pid=6657 comm="syz.4.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 192.527699][ T6659] tipc: Enabling not permitted [ 192.527729][ T6659] tipc: Enabling of bearer rejected, failed to enable media [ 192.544667][ T31] audit: type=1400 audit(1789527574.797:416): avc: denied { setopt } for pid=6657 comm="syz.4.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 193.216637][ T6670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.670820][ T6668] FAULT_INJECTION: forcing a failure. [ 193.670820][ T6668] name fail_futex, interval 1, probability 0, space 0, times 1 [ 193.670853][ T6668] CPU: 0 UID: 0 PID: 6668 Comm: syz.3.211 Not tainted syzkaller #0 PREEMPT(full) [ 193.670875][ T6668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 193.670886][ T6668] Call Trace: [ 193.670893][ T6668] [ 193.670900][ T6668] dump_stack_lvl+0x100/0x190 [ 193.670930][ T6668] should_fail_ex.cold+0x5/0xa [ 193.670958][ T6668] get_futex_key+0x1d0/0x14f0 [ 193.670981][ T6668] ? __pfx_get_futex_key+0x10/0x10 [ 193.671003][ T6668] ? find_held_lock+0x2b/0x80 [ 193.671028][ T6668] ? futex_wake+0x4ea/0x5e0 [ 193.671063][ T6668] futex_wake+0xf4/0x5e0 [ 193.671094][ T6668] ? security_capable+0xbd/0x260 [ 193.671121][ T6668] ? __pfx_futex_wake+0x10/0x10 [ 193.671159][ T6668] do_futex+0x2b2/0x440 [ 193.671184][ T6668] ? __pfx_do_futex+0x10/0x10 [ 193.671213][ T6668] __x64_sys_futex+0x34f/0x4d0 [ 193.671241][ T6668] ? __pfx___x64_sys_futex+0x10/0x10 [ 193.671281][ T6668] do_syscall_64+0x123/0x790 [ 193.671312][ T6668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.671332][ T6668] RIP: 0033:0x7fd221d9e159 [ 193.671347][ T6668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.671364][ T6668] RSP: 002b:00007fd222ba80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 193.671382][ T6668] RAX: ffffffffffffffda RBX: 00007fd222025fa8 RCX: 00007fd221d9e159 [ 193.671394][ T6668] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd222025fac [ 193.671405][ T6668] RBP: 00007fd222025fa0 R08: 0000000000000001 R09: 0000000000000000 [ 193.671415][ T6668] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 193.671426][ T6668] R13: 00007fd222026038 R14: 00007ffd3136ebd0 R15: 00007ffd3136ecb8 [ 193.671451][ T6668] [ 194.179996][ T31] audit: type=1400 audit(1789527576.437:417): avc: denied { read } for pid=6656 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 194.536065][ T6680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.217'. [ 194.590369][ T6680] hsr_slave_1 (unregistering): left promiscuous mode [ 194.676779][ T6682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 194.676799][ T6682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 194.676809][ T6682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x48f4 instead [ 194.676819][ T6682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x2739 instead [ 194.676828][ T6682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 194.676837][ T6682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 194.676845][ T6682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 194.676857][ T6682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 194.676876][ T6682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 194.676893][ T6682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 194.676901][ T6682] jffs2: Further such events for this erase block will not be printed [ 194.677094][ T6682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 194.677103][ T6682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 194.677111][ T6682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x48f4 instead [ 194.677121][ T6682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x2739 instead [ 194.677129][ T6682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 194.677136][ T6682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 194.677144][ T6682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 194.677155][ T6682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 194.677171][ T6682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 194.677186][ T6682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 194.677194][ T6682] jffs2: Further such events for this erase block will not be printed [ 194.677413][ T6682] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 194.677417][ T6682] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 195.894781][ T5604] Bluetooth: hci4: command 0x0406 tx timeout [ 198.936950][ T6715] xt_CONNSECMARK: invalid mode: 0 [ 200.527971][ T6720] netlink: Conntrack attr has 8 unknown bytes [ 200.528070][ T6720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.525249][ T6734] syz.4.237 (6734) used greatest stack depth: 18232 bytes left [ 204.002402][ T6739] batman_adv: batadv0: Adding interface: dummy0 [ 204.002418][ T6739] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.002443][ T6739] batman_adv: batadv0: Interface activated: dummy0 [ 204.127496][ T31] audit: type=1400 audit(1789527586.387:418): avc: denied { ioctl } for pid=6735 comm="syz.1.239" path="socket:[13079]" dev="sockfs" ino=13079 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 204.609625][ T6736] batadv0: mtu less than device minimum [ 204.610561][ T6736] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.611951][ T6736] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.612871][ T6736] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.613775][ T6736] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.614672][ T6736] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.615546][ T6736] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.616423][ T6736] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 205.320582][ T6748] ceph: No mds server is up or the cluster is laggy [ 205.333491][ T5706] libceph: connect (1)[c::]:6789 error -101 [ 205.333632][ T5706] libceph: mon0 (1)[c::]:6789 connect error [ 205.595259][ T5706] libceph: connect (1)[c::]:6789 error -101 [ 205.597836][ T5706] libceph: mon0 (1)[c::]:6789 connect error [ 206.103916][ T5706] libceph: connect (1)[c::]:6789 error -101 [ 206.117883][ T5706] libceph: mon0 (1)[c::]:6789 connect error [ 209.492591][ T6774] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 209.492614][ T6774] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 209.492629][ T6774] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x48f4 instead [ 209.492646][ T6774] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x2739 instead [ 209.492659][ T6774] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 209.492671][ T6774] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 209.492685][ T6774] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 209.492701][ T6774] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 209.492727][ T6774] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 209.492752][ T6774] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 209.492765][ T6774] jffs2: Further such events for this erase block will not be printed [ 209.493058][ T6774] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 209.493076][ T6774] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 209.493091][ T6774] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x48f4 instead [ 209.493109][ T6774] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x2739 instead [ 209.493123][ T6774] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 209.493138][ T6774] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 209.493153][ T6774] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 209.493171][ T6774] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 209.493200][ T6774] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 209.493227][ T6774] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 209.493241][ T6774] jffs2: Further such events for this erase block will not be printed [ 209.493592][ T6774] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 209.493601][ T6774] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 210.335734][ T6780] xt_CONNSECMARK: invalid mode: 0 [ 213.399035][ T6804] tipc: Started in network mode [ 213.399053][ T6804] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 213.399076][ T6804] tipc: Enabling of bearer rejected, failed to enable media [ 213.496944][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.230'. [ 213.522441][ T6803] hsr_slave_1 (unregistering): left promiscuous mode [ 214.416279][ T6818] ovs-system: entered promiscuous mode [ 215.158465][ T5734] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 215.380784][ T5734] usb 5-1: Using ep0 maxpacket: 16 [ 215.407919][ T5734] usb 5-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 215.555809][ T5734] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 215.555843][ T5734] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 2047, setting to 1024 [ 215.642337][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.642364][ T5734] usb 5-1: Product: syz [ 215.642379][ T5734] usb 5-1: Manufacturer: syz [ 215.642392][ T5734] usb 5-1: SerialNumber: syz [ 217.265013][ T6830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36368 sclass=netlink_route_socket pid=6830 comm=syz.4.248 [ 218.142044][ T2288] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 218.301919][ T2288] usb 3-1: Using ep0 maxpacket: 32 [ 218.307142][ T2288] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 218.339000][ T2288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.550284][ T2288] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 219.172845][ T2288] gspca_nw80x: reg_w err -110 [ 219.173069][ T2288] nw80x 3-1:3.0: probe with driver nw80x failed with error -110 [ 219.746068][ T31] audit: type=1400 audit(1789527601.928:419): avc: denied { read write } for pid=6832 comm="syz.2.253" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 219.746126][ T31] audit: type=1400 audit(1789527601.938:420): avc: denied { open } for pid=6832 comm="syz.2.253" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 220.925981][ T5706] usb 3-1: USB disconnect, device number 2 [ 221.541601][ T6861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.258'. [ 221.580549][ T5720] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 221.740892][ T5720] usb 2-1: Using ep0 maxpacket: 32 [ 221.748046][ T5720] usb 2-1: unable to get BOS descriptor or descriptor too short [ 221.748215][ T5720] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 221.781746][ T5720] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 221.781777][ T5720] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 221.781804][ T5720] usb 2-1: config 14 has no interface number 0 [ 221.781846][ T5720] usb 2-1: config 14 has no interface number 1 [ 221.782222][ T5720] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 221.782252][ T5720] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 221.782319][ T5720] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 221.782370][ T5720] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 221.782431][ T5720] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 221.782505][ T5720] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.782535][ T5720] usb 2-1: config 14 interface 57 has no altsetting 0 [ 221.782577][ T5720] usb 2-1: config 14 interface 228 has no altsetting 0 [ 221.934941][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.934976][ T5720] usb 2-1: Product: syz [ 221.935013][ T5720] usb 2-1: Manufacturer: syz [ 221.935094][ T5720] usb 2-1: SerialNumber: syz [ 222.574613][ T5734] usb 5-1: USB disconnect, device number 4 [ 222.695790][ T6869] SELinux: policydb string length -366 does not match expected length 8 [ 222.695836][ T6869] SELinux: failed to load policy [ 222.960313][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 223.209561][ T6870] ALSA: mixer_oss: invalid OSS volume '' [ 223.570286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 223.670277][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 223.730270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 223.790264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 223.843294][ T6872] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 223.843313][ T6872] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 223.843327][ T6872] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x48f4 instead [ 223.843342][ T6872] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x2739 instead [ 223.843355][ T6872] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 223.843368][ T6872] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 223.843381][ T6872] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 223.843398][ T6872] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 223.843424][ T6872] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 223.843450][ T6872] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 223.843461][ T6872] jffs2: Further such events for this erase block will not be printed [ 223.843718][ T6872] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 223.843730][ T6872] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 223.843744][ T6872] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x48f4 instead [ 223.843758][ T6872] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x2739 instead [ 223.843770][ T6872] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 223.843782][ T6872] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 223.843794][ T6872] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 223.843809][ T6872] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 223.843833][ T6872] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 223.843856][ T6872] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 223.843868][ T6872] jffs2: Further such events for this erase block will not be printed [ 223.844174][ T6872] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 223.844181][ T6872] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 224.370340][ T2288] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 224.393799][ T5720] legousbtower 2-1:14.57: interrupt endpoints not found [ 224.419235][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.569568][ T2288] usb 1-1: Using ep0 maxpacket: 32 [ 224.633880][ T5720] legousbtower 2-1:14.228: get version request failed: -71 [ 224.634015][ T5720] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 224.701952][ T2288] usb 1-1: device descriptor read/all, error -71 [ 224.723891][ T5720] usb 2-1: USB disconnect, device number 5 [ 225.069239][ T6890] vlan2: entered promiscuous mode [ 225.071578][ T6890] bridge0: entered promiscuous mode [ 225.301755][ T6886] sctp: [Deprecated]: syz.0.267 (pid 6886) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.301755][ T6886] Use struct sctp_sack_info instead [ 225.309612][ T31] audit: type=1400 audit(1789527607.569:421): avc: denied { setopt } for pid=6883 comm="syz.0.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 225.327040][ T31] audit: type=1400 audit(1789527607.589:422): avc: denied { connect } for pid=6879 comm="syz.2.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 225.378197][ T31] audit: type=1400 audit(1789527607.639:423): avc: denied { write } for pid=6883 comm="syz.0.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 225.673165][ T31] audit: type=1400 audit(1789527607.939:424): avc: denied { create } for pid=6896 comm="syz.1.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 226.396699][ T31] audit: type=1400 audit(1789527608.659:425): avc: denied { connect } for pid=6896 comm="syz.1.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 226.536430][ T31] audit: type=1400 audit(1789527608.799:426): avc: denied { write } for pid=6896 comm="syz.1.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 227.832370][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.273'. [ 228.647962][ T6929] cgroup: Unknown subsys name 'cpuset' [ 229.000949][ T5604] Bluetooth: hci5: command 0x1003 tx timeout [ 229.007804][ T4930] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 229.230601][ T6938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.276'. [ 230.020010][ T5812] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 230.551057][ T1001] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.551170][ T1001] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.551224][ T1001] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.551283][ T1001] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.594918][ T31] audit: type=1400 audit(1789527612.859:427): avc: denied { nlmsg_read } for pid=6946 comm="syz.4.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 230.620738][ T5812] usb 3-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 230.621762][ T5812] usb 3-1: config 255 has an invalid interface number: 97 but max is 0 [ 230.621785][ T5812] usb 3-1: config 255 has no interface number 0 [ 230.621808][ T5812] usb 3-1: config 255 interface 97 has no altsetting 0 [ 230.623736][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.623756][ T5812] usb 3-1: Product: syz [ 230.623770][ T5812] usb 3-1: Manufacturer: syz [ 230.623783][ T5812] usb 3-1: SerialNumber: syz [ 230.864053][ T6939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.864473][ T6939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.120437][ T6956] netlink: 20 bytes leftover after parsing attributes in process `syz.0.283'. [ 231.386986][ T5812] rndis_host 3-1:255.97: ACM capabilities 01, not really RNDIS? [ 231.482071][ T6473] syz.4.158 (6473) used greatest stack depth: 16760 bytes left [ 231.504014][ T1387] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.504233][ T1001] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.504263][ T1001] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.504292][ T1001] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.565869][ T5812] usb 3-1: USB disconnect, device number 3 [ 232.370693][ T6968] SELinux: policydb string length -366 does not match expected length 8 [ 232.370737][ T6968] SELinux: failed to load policy [ 232.401372][ T6965] xt_CONNSECMARK: invalid mode: 0 [ 232.861837][ T6970] ALSA: mixer_oss: invalid OSS volume '' [ 233.456090][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.286'. [ 233.866888][ T6983] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5617] was attempted by ""[6983] [ 233.875929][ T6980] netlink: 'syz.3.290': attribute type 1 has an invalid length. [ 234.462365][ T6980] bond1: entered promiscuous mode [ 234.462572][ T6980] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.608022][ T6987] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.608345][ T6987] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 234.608362][ T6987] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 234.637426][ T6987] bond1: (slave gre1): making interface the new active one [ 234.637448][ T6987] gre1: entered promiscuous mode [ 234.656823][ T6987] bond1: (slave gre1): Enslaving as an active interface with an up link [ 235.596551][ T31] audit: type=1400 audit(1789527617.409:428): avc: denied { mount } for pid=6993 comm="syz.2.291" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 235.597413][ T31] audit: type=1400 audit(1789527617.859:429): avc: denied { unmount } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 235.646663][ T5812] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 235.943001][ T7001] xt_CONNSECMARK: invalid mode: 0 [ 236.190963][ T5812] usb 4-1: Using ep0 maxpacket: 32 [ 236.191467][ T5812] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 236.192316][ T5812] usb 4-1: config 0 has an invalid interface number: 37 but max is 1 [ 236.192338][ T5812] usb 4-1: config 0 has no interface number 1 [ 236.704640][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.295'. [ 236.705565][ T7004] netlink: 20 bytes leftover after parsing attributes in process `syz.0.295'. [ 237.425128][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 237.425153][ T5812] usb 4-1: Product: syz [ 237.839096][ T5812] usb 4-1: config 0 descriptor?? [ 237.844621][ T5812] usb 4-1: can't set config #0, error -71 [ 237.855693][ T5812] usb 4-1: USB disconnect, device number 3 [ 239.124780][ T31] audit: type=1400 audit(1789527621.389:430): avc: denied { read } for pid=7016 comm="syz.1.288" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 239.124832][ T31] audit: type=1400 audit(1789527621.389:431): avc: denied { open } for pid=7016 comm="syz.1.288" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 239.409439][ T5698] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 239.559537][ T5698] usb 2-1: Using ep0 maxpacket: 32 [ 239.687828][ T31] audit: type=1400 audit(1789527621.939:432): avc: denied { ioctl } for pid=7018 comm="syz.2.294" path="socket:[13771]" dev="sockfs" ino=13771 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 240.004330][ T5698] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 240.047990][ T5698] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.048013][ T5698] usb 2-1: config 0 has no interfaces? [ 240.066337][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.066361][ T5698] usb 2-1: Product: syz [ 240.066376][ T5698] usb 2-1: Manufacturer: syz [ 240.066391][ T5698] usb 2-1: SerialNumber: syz [ 240.068944][ T5698] usb 2-1: config 0 descriptor?? [ 240.895176][ T31] audit: type=1400 audit(1789527623.159:433): avc: denied { read } for pid=5269 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 240.901438][ T31] audit: type=1400 audit(1789527623.169:434): avc: denied { search } for pid=5269 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.901590][ T31] audit: type=1400 audit(1789527623.169:435): avc: denied { search } for pid=5269 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.901739][ T31] audit: type=1400 audit(1789527623.169:436): avc: denied { search } for pid=5269 comm="dhcpcd" name="data" dev="tmpfs" ino=26 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.901951][ T31] audit: type=1400 audit(1789527623.169:437): avc: denied { read } for pid=5269 comm="dhcpcd" name="n30" dev="tmpfs" ino=3056 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 240.902237][ T31] audit: type=1400 audit(1789527623.169:438): avc: denied { open } for pid=5269 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=3056 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 240.902468][ T31] audit: type=1400 audit(1789527623.169:439): avc: denied { getattr } for pid=5269 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=3056 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 241.004917][ T2288] usb 2-1: USB disconnect, device number 6 [ 241.130188][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.301'. [ 242.947361][ T7065] SELinux: policydb string length -366 does not match expected length 8 [ 242.947405][ T7065] SELinux: failed to load policy [ 243.434194][ T7067] ALSA: mixer_oss: invalid OSS volume '' [ 245.308622][ T7086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'. [ 245.884886][ T7093] netlink: 36 bytes leftover after parsing attributes in process `syz.2.309'. [ 245.888262][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 245.888293][ T31] audit: type=1400 audit(1789527628.140:454): avc: denied { bind } for pid=7085 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 245.888432][ T31] audit: type=1400 audit(1789527628.140:455): avc: denied { setopt } for pid=7085 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 246.854119][ T7086] hsr_slave_1 (unregistering): left promiscuous mode [ 246.882722][ T7106] netlink: 20 bytes leftover after parsing attributes in process `syz.2.312'. [ 246.959440][ T7109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.311'. [ 247.012163][ T31] audit: type=1400 audit(1789527629.280:456): avc: denied { write } for pid=7072 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1787 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.335545][ T31] audit: type=1400 audit(1789527629.600:457): avc: denied { write } for pid=7113 comm="rm" name="hook-state" dev="tmpfs" ino=1787 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.416349][ T7122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.313'. [ 247.432298][ T31] audit: type=1400 audit(1789527629.690:458): avc: denied { mount } for pid=7118 comm="syz.3.307" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 247.502705][ T31] audit: type=1400 audit(1789527629.770:459): avc: denied { ioctl } for pid=7125 comm="syz.4.315" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 247.624422][ T5698] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 247.772067][ T5698] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 247.775369][ T5698] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.775722][ T5698] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.775791][ T5698] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 247.775820][ T5698] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 247.846918][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.847084][ T5698] usb 3-1: Product: syz [ 247.847155][ T5698] usb 3-1: Manufacturer: syz [ 247.847191][ T5698] usb 3-1: SerialNumber: syz [ 248.683885][ T5698] usb 3-1: Not enough endpoints found in device, aborting! [ 248.779858][ T31] audit: type=1400 audit(1789527630.920:460): avc: denied { create } for pid=7115 comm="syz.2.314" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 248.779980][ T31] audit: type=1400 audit(1789527630.960:461): avc: denied { write } for pid=7115 comm="syz.2.314" name="file0" dev="tmpfs" ino=359 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 248.780196][ T31] audit: type=1400 audit(1789527630.960:462): avc: denied { open } for pid=7115 comm="syz.2.314" path="/62/file0" dev="tmpfs" ino=359 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 248.781505][ T31] audit: type=1400 audit(1789527631.010:463): avc: denied { name_connect } for pid=7115 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 249.782295][ T5698] usb 3-1: USB disconnect, device number 4 [ 250.148248][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.148317][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.771305][ T7157] xt_CONNSECMARK: invalid mode: 0 [ 250.922065][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 250.922077][ T31] audit: type=1400 audit(1789527633.190:466): avc: denied { unlink } for pid=5614 comm="syz-executor" name="file0" dev="tmpfs" ino=359 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 251.534395][ T7168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.327'. [ 253.518371][ T5698] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 253.904674][ T5698] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 253.906090][ T5698] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 253.906131][ T5698] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 253.908074][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.908093][ T5698] usb 5-1: Product: syz [ 253.908111][ T5698] usb 5-1: Manufacturer: syz [ 253.908123][ T5698] usb 5-1: SerialNumber: syz [ 254.021240][ T7185] xt_CONNSECMARK: invalid mode: 0 [ 254.149505][ T5698] usb 5-1: config 0 descriptor?? [ 254.151943][ T7177] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 254.152056][ T7177] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 254.360988][ T7189] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 254.361013][ T7189] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 254.361029][ T7189] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x48f4 instead [ 254.361067][ T7189] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x2739 instead [ 254.361082][ T7189] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 254.361096][ T7189] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 254.361116][ T7189] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 254.361134][ T7189] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 254.361160][ T7189] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 254.361204][ T7189] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 254.361219][ T7189] jffs2: Further such events for this erase block will not be printed [ 254.364647][ T7189] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 254.364668][ T7189] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 254.364684][ T7189] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x48f4 instead [ 254.364701][ T7189] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x2739 instead [ 254.364715][ T7189] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 254.364729][ T7189] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 254.364743][ T7189] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 254.364780][ T7189] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 254.364808][ T7189] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 254.364834][ T7189] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 254.364847][ T7189] jffs2: Further such events for this erase block will not be printed [ 254.365264][ T7189] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 254.365273][ T7189] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 254.437578][ T7177] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 254.437674][ T7177] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 254.665310][ T7192] xt_CONNSECMARK: invalid mode: 0 [ 254.924108][ T31] audit: type=1400 audit(1789527637.190:467): avc: denied { create } for pid=7196 comm="syz.1.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 254.927287][ T31] audit: type=1400 audit(1789527637.190:468): avc: denied { write } for pid=7196 comm="syz.1.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 256.438520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 256.728636][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.337'. [ 256.732198][ T5698] Error reading MAC address [ 256.762214][ T5698] usb 5-1: USB disconnect, device number 5 [ 256.972114][ T7215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.339'. [ 259.660245][ T7239] xt_CONNSECMARK: invalid mode: 0 [ 260.166966][ T7243] xt_CONNSECMARK: invalid mode: 0 [ 260.336935][ T31] audit: type=1400 audit(1789527642.591:469): avc: denied { mounton } for pid=7240 comm="syz.0.346" path="/68/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 260.501942][ T31] audit: type=1400 audit(1789527642.771:470): avc: denied { bind } for pid=7250 comm="syz.2.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 263.409986][ T7271] xt_CONNSECMARK: invalid mode: 0 [ 263.724211][ T7278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.354'. [ 264.050627][ T7282] xt_CONNSECMARK: invalid mode: 0 [ 266.055198][ T31] audit: type=1400 audit(1789527648.311:471): avc: denied { ioctl } for pid=7296 comm="syz.3.360" path="socket:[15357]" dev="sockfs" ino=15357 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 267.020689][ T7307] xt_CONNSECMARK: invalid mode: 0 [ 267.118316][ T5706] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 267.267950][ T5706] usb 1-1: Using ep0 maxpacket: 16 [ 267.268457][ T5706] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.02 [ 267.269375][ T5706] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 267.269388][ T5706] usb 1-1: config 0 has no interface number 0 [ 267.269402][ T5706] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 267.269420][ T5706] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 267.269435][ T5706] usb 1-1: config 0 interface 255 has no altsetting 0 [ 267.270734][ T5706] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=3 [ 267.270754][ T5706] usb 1-1: Manufacturer: syz [ 267.270768][ T5706] usb 1-1: SerialNumber: syz [ 267.272449][ T5706] usb 1-1: config 0 descriptor?? [ 267.273726][ T5706] ftdi_sio 1-1:0.255: FTDI USB Serial Device converter detected [ 267.275948][ T5706] usb 1-1: Detected SIO [ 267.393766][ T5706] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 267.463587][ T31] audit: type=1400 audit(1789527649.721:472): avc: denied { read } for pid=7311 comm="syz.3.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 267.677855][ T7319] UDC core: g1: couldn't find an available UDC or it's busy [ 267.718455][ T31] audit: type=1400 audit(1789527649.911:473): avc: denied { write } for pid=7309 comm="syz.4.363" name="usb_gadget" dev="configfs" ino=3234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 267.803427][ T31] audit: type=1400 audit(1789527650.051:474): avc: denied { mount } for pid=7310 comm="syz.1.362" name="/" dev="autofs" ino=15381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 267.949115][ T5720] usb 1-1: USB disconnect, device number 6 [ 267.961215][ T5720] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 267.961657][ T5720] ftdi_sio 1-1:0.255: device disconnected [ 268.016984][ T31] audit: type=1400 audit(1789527650.271:475): avc: denied { ioctl } for pid=7311 comm="syz.3.364" path="socket:[16427]" dev="sockfs" ino=16427 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 268.056679][ T7326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'. [ 268.937906][ T7334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.368'. [ 268.937947][ T7334] netlink: 20 bytes leftover after parsing attributes in process `syz.2.368'. [ 269.237796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 270.360781][ T7342] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 270.360806][ T7342] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 270.360822][ T7342] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x48f4 instead [ 270.360839][ T7342] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x2739 instead [ 270.360854][ T7342] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 270.360869][ T7342] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 270.360883][ T7342] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 270.360900][ T7342] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 270.360926][ T7342] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 270.360954][ T7342] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 270.360968][ T7342] jffs2: Further such events for this erase block will not be printed [ 270.361298][ T7342] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 270.361315][ T7342] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 270.361331][ T7342] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x48f4 instead [ 270.361350][ T7342] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x2739 instead [ 270.361365][ T7342] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 270.361379][ T7342] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 270.361393][ T7342] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 270.361411][ T7342] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 270.361442][ T7342] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 270.361470][ T7342] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 270.361483][ T7342] jffs2: Further such events for this erase block will not be printed [ 270.361830][ T7342] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 270.361839][ T7342] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 271.203728][ T31] audit: type=1400 audit(1789527653.461:476): avc: denied { connect } for pid=7353 comm="syz.4.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 271.259689][ T31] audit: type=1400 audit(1789527653.521:477): avc: denied { read } for pid=7353 comm="syz.4.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 271.299433][ T7354] input: syz0 as /devices/virtual/input/input7 [ 271.306757][ T31] audit: type=1400 audit(1789527653.561:478): avc: denied { read } for pid=4959 comm="acpid" name="event4" dev="devtmpfs" ino=2847 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 271.392948][ T31] audit: type=1400 audit(1789527653.651:479): avc: denied { open } for pid=4959 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2847 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 272.719372][ T7375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.383'. [ 272.719412][ T7375] netlink: 20 bytes leftover after parsing attributes in process `syz.0.383'. [ 273.364715][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.382'. [ 273.364787][ T7377] netlink: 20 bytes leftover after parsing attributes in process `syz.4.382'. [ 273.783787][ T7387] xt_CONNSECMARK: invalid mode: 0 [ 273.801287][ T7388] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 273.801315][ T7388] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 273.801341][ T7388] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x48f4 instead [ 273.801385][ T7388] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x2739 instead [ 273.801407][ T7388] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 273.801467][ T7388] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 273.801505][ T7388] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 273.801576][ T7388] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 273.801691][ T7388] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 273.801740][ T7388] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 273.801777][ T7388] jffs2: Further such events for this erase block will not be printed [ 273.803048][ T7388] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 273.803071][ T7388] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 273.803117][ T7388] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x48f4 instead [ 273.803160][ T7388] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x2739 instead [ 273.803202][ T7388] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 273.803239][ T7388] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 273.803277][ T7388] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 273.803318][ T7388] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 273.803425][ T7388] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 273.803550][ T7388] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 273.803589][ T7388] jffs2: Further such events for this erase block will not be printed [ 273.805228][ T7388] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 273.805262][ T7388] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 274.916110][ T31] audit: type=1400 audit(1789527657.171:480): avc: denied { write } for pid=7381 comm="syz.4.385" name="mice" dev="devtmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 275.018569][ T5713] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 275.037289][ T7400] xt_CONNSECMARK: invalid mode: 0 [ 275.177402][ T5713] usb 3-1: Using ep0 maxpacket: 16 [ 275.178991][ T5713] usb 3-1: New USB device found, idVendor=16d8, idProduct=7213, bcdDevice=b8.83 [ 275.250440][ T5713] usb 3-1: config 4 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 275.250470][ T5713] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 275.283451][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.283468][ T5713] usb 3-1: Product: syz [ 275.283477][ T5713] usb 3-1: Manufacturer: syz [ 275.283485][ T5713] usb 3-1: SerialNumber: syz [ 275.475697][ T140] Bluetooth: Error in BCSP hdr checksum [ 275.671000][ T5706] libceph: connect (1)[c::]:6789 error -101 [ 275.671119][ T5706] libceph: mon0 (1)[c::]:6789 connect error [ 275.695124][ T65] Bluetooth: Error in BCSP hdr checksum [ 275.706960][ T7386] ceph: No mds server is up or the cluster is laggy [ 275.786790][ T5713] usb 3-1: USB disconnect, device number 5 [ 275.948693][ T140] Bluetooth: Error in BCSP hdr checksum [ 277.327268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 277.489106][ T4930] Bluetooth: hci5: command 0x1003 tx timeout [ 277.511032][ T5604] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 278.454174][ T7439] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 278.456138][ T7439] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 278.457111][ T7439] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 278.459071][ T7439] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 278.465193][ T7439] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 278.466337][ T7439] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 278.467277][ T7439] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 278.468402][ T7439] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 278.469707][ T7439] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 278.471139][ T7439] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 278.610964][ T31] audit: type=1400 audit(1789527660.872:481): avc: denied { execmod } for pid=7438 comm="syz.1.397" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=15962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 281.010496][ T7457] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 281.010517][ T7457] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 281.010527][ T7457] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x48f4 instead [ 281.010539][ T7457] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x2739 instead [ 281.010547][ T7457] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 281.010556][ T7457] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 281.010565][ T7457] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 281.010576][ T7457] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 281.010594][ T7457] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 281.010612][ T7457] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 281.010620][ T7457] jffs2: Further such events for this erase block will not be printed [ 281.010848][ T7457] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 281.010859][ T7457] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 281.010868][ T7457] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x48f4 instead [ 281.010878][ T7457] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x2739 instead [ 281.010886][ T7457] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 281.010894][ T7457] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 281.010902][ T7457] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 281.010912][ T7457] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 281.010928][ T7457] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 281.010944][ T7457] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 281.010952][ T7457] jffs2: Further such events for this erase block will not be printed [ 281.011153][ T7457] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 281.011158][ T7457] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 281.862281][ T7463] zero sized request [ 282.067125][ T31] audit: type=1400 audit(1789527664.112:482): avc: denied { read write } for pid=7456 comm="syz.2.402" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 282.067310][ T31] audit: type=1400 audit(1789527664.122:483): avc: denied { open } for pid=7456 comm="syz.2.402" path="/76/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 282.067431][ T31] audit: type=1400 audit(1789527664.122:484): avc: denied { ioctl } for pid=7456 comm="syz.2.402" path="/76/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 282.344816][ T31] audit: type=1400 audit(1789527664.602:485): avc: denied { create } for pid=7466 comm="syz.1.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 283.047455][ T7470] xt_CONNSECMARK: invalid mode: 0 [ 284.269158][ T7480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.408'. [ 285.759656][ T7488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.395'. [ 285.759999][ T7488] netlink: 20 bytes leftover after parsing attributes in process `syz.3.395'. [ 288.342062][ T7511] wlan0 speed is unknown, defaulting to 1000 [ 288.343573][ T7511] wlan0 speed is unknown, defaulting to 1000 [ 288.344754][ T7511] wlan0 speed is unknown, defaulting to 1000 [ 288.345452][ T7511] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 288.345472][ T7511] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 288.345495][ T7511] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 288.349031][ T7511] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 288.354825][ T7511] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 288.384324][ T7511] wlan0 speed is unknown, defaulting to 1000 [ 288.386716][ T7511] wlan0 speed is unknown, defaulting to 1000 [ 288.387843][ T7511] wlan0 speed is unknown, defaulting to 1000 [ 288.389033][ T7511] wlan0 speed is unknown, defaulting to 1000 [ 288.390135][ T7511] wlan0 speed is unknown, defaulting to 1000 [ 288.391807][ T7511] wlan0 speed is unknown, defaulting to 1000 [ 290.203669][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.419'. [ 290.801303][ T7536] xt_CONNSECMARK: invalid mode: 0 [ 291.471983][ T7541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.247736][ T7550] xt_cgroup: invalid path, errno=-2 [ 292.493823][ T7551] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 293.415054][ T31] audit: type=1400 audit(1789527674.595:486): avc: denied { connect } for pid=7554 comm="syz.2.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 293.544653][ T31] audit: type=1400 audit(1789527674.805:487): avc: denied { create } for pid=7554 comm="syz.2.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 293.622174][ T31] audit: type=1400 audit(1789527674.835:488): avc: denied { write } for pid=7554 comm="syz.2.417" path="socket:[16902]" dev="sockfs" ino=16902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 294.561633][ T31] audit: type=1400 audit(1789527675.815:489): avc: denied { lock } for pid=7566 comm="syz.1.428" path="socket:[16142]" dev="sockfs" ino=16142 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 294.884793][ T7576] netlink: 'syz.0.430': attribute type 5 has an invalid length. [ 295.107693][ T7583] kvm [7577]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 295.107844][ T7583] kvm [7577]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 296.599010][ T7607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 296.599027][ T7607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 296.599037][ T7607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x48f4 instead [ 296.599048][ T7607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x2739 instead [ 296.599057][ T7607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 296.599066][ T7607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 296.599075][ T7607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 296.599087][ T7607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 296.599104][ T7607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 296.599122][ T7607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 296.599130][ T7607] jffs2: Further such events for this erase block will not be printed [ 296.599325][ T7607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 296.599334][ T7607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 296.599343][ T7607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x48f4 instead [ 296.599352][ T7607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x2739 instead [ 296.599360][ T7607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 296.599368][ T7607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 296.599377][ T7607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 296.599387][ T7607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 296.599403][ T7607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 296.599419][ T7607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 296.599427][ T7607] jffs2: Further such events for this erase block will not be printed [ 296.599653][ T7607] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 296.599657][ T7607] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 296.738921][ T7608] wlan0 speed is unknown, defaulting to 1000 [ 298.523025][ T7623] netlink: 20 bytes leftover after parsing attributes in process `syz.0.442'. [ 300.053910][ T7630] kvm [7629]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 300.070709][ T7630] kvm [7629]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 301.418876][ T31] audit: type=1400 audit(1789527682.226:490): avc: denied { mount } for pid=7643 comm="syz.3.447" name="/" dev="rpc_pipefs" ino=16374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 301.424653][ T31] audit: type=1400 audit(1789527682.686:491): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 302.102425][ T7653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.452'. [ 302.102450][ T7653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.452'. [ 302.166912][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.450'. [ 302.856992][ T7666] net_ratelimit: 12 callbacks suppressed [ 302.857012][ T7666] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:10 [ 302.964159][ T7671] xt_CONNSECMARK: invalid mode: 0 [ 305.379015][ T7684] tipc: Cannot configure node identity twice [ 305.455529][ T7685] FAULT_INJECTION: forcing a failure. [ 305.455529][ T7685] name failslab, interval 1, probability 0, space 0, times 0 [ 305.455598][ T7685] CPU: 1 UID: 0 PID: 7685 Comm: syz.2.453 Tainted: G L syzkaller #0 PREEMPT(full) [ 305.455628][ T7685] Tainted: [L]=SOFTLOCKUP [ 305.455634][ T7685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 305.455643][ T7685] Call Trace: [ 305.455650][ T7685] [ 305.455657][ T7685] dump_stack_lvl+0x100/0x190 [ 305.455691][ T7685] should_fail_ex.cold+0x5/0xa [ 305.455719][ T7685] should_failslab+0xc2/0x120 [ 305.455747][ T7685] __kmalloc_cache_noprof+0x91/0x6d0 [ 305.455776][ T7685] ? ceph_get_tree+0x188/0x1fd0 [ 305.455809][ T7685] ceph_get_tree+0x188/0x1fd0 [ 305.455836][ T7685] ? bpf_lsm_capable+0x9/0x10 [ 305.455877][ T7685] ? security_capable+0x80/0x260 [ 305.455909][ T7685] vfs_get_tree+0x92/0x320 [ 305.455942][ T7685] vfs_cmd_create+0xd7/0x2a0 [ 305.455964][ T7685] __do_sys_fsconfig+0x55a/0xcb0 [ 305.455988][ T7685] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 305.456020][ T7685] do_syscall_64+0x123/0x790 [ 305.456049][ T7685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.456068][ T7685] RIP: 0033:0x7f08a019e159 [ 305.456084][ T7685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.456102][ T7685] RSP: 002b:00007f089e3d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 305.456120][ T7685] RAX: ffffffffffffffda RBX: 00007f08a0426090 RCX: 00007f08a019e159 [ 305.456139][ T7685] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 305.456150][ T7685] RBP: 00007f08a023506b R08: 0000000000000000 R09: 0000000000000000 [ 305.456161][ T7685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.456172][ T7685] R13: 00007f08a0426128 R14: 00007f08a0426090 R15: 00007ffde3965038 [ 305.456202][ T7685] [ 306.295653][ T2288] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 306.540666][ T2288] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 306.558457][ T2288] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 306.558565][ T2288] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.558622][ T2288] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 306.558761][ T2288] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.633334][ T2288] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 306.634098][ T2288] usb 4-1: Product: syz [ 306.634378][ T2288] usb 4-1: Manufacturer: syz [ 306.770337][ T2288] cdc_wdm 4-1:1.0: skipping garbage [ 306.770358][ T2288] cdc_wdm 4-1:1.0: skipping garbage [ 306.805517][ T2288] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 306.805540][ T2288] cdc_wdm 4-1:1.0: Unknown control protocol [ 306.902477][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.459'. [ 306.940597][ T31] audit: type=1400 audit(1789527688.206:492): avc: denied { bind } for pid=7712 comm="syz.1.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 307.064654][ T31] audit: type=1400 audit(1789527688.316:493): avc: denied { read write } for pid=7689 comm="syz.3.461" name="cdc-wdm0" dev="devtmpfs" ino=2853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 307.064703][ T31] audit: type=1400 audit(1789527688.316:494): avc: denied { open } for pid=7689 comm="syz.3.461" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 307.073653][ T7691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.074025][ T7691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.856911][ T5706] usb 4-1: USB disconnect, device number 4 [ 307.979771][ T5720] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 309.013647][ T5720] usb 3-1: Using ep0 maxpacket: 32 [ 309.015247][ T5720] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 309.037264][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.082229][ T5720] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 309.095890][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 309.246322][ T25] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 309.247334][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.247375][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.294996][ T25] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 309.295231][ T25] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 309.295288][ T25] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 309.321327][ T25] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 309.321413][ T25] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 310.520467][ T25] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 310.520926][ T5720] gspca_nw80x: reg_r err -110 [ 310.520983][ T5720] nw80x 3-1:3.0: probe with driver nw80x failed with error -110 [ 310.584523][ T25] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 310.584594][ T25] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 310.821885][ T25] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 311.266290][ T25] usb 2-1: USB disconnect, device number 7 [ 311.309700][ T5713] usb 3-1: USB disconnect, device number 6 [ 311.894339][ T7753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.476'. [ 311.894391][ T7753] netlink: 20 bytes leftover after parsing attributes in process `syz.1.476'. [ 312.302935][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 312.302981][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.442425][ T25] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 312.465182][ T7752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.477'. [ 312.486348][ T25] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 312.486865][ T25] keyspan 2-1:1.0: device disconnected [ 314.863909][ T7777] ubi0: attaching mtd0 [ 314.878243][ T7777] ubi0: scanning is finished [ 319.210980][ T7777] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 319.356481][ T7816] xt_CONNSECMARK: invalid mode: 0 [ 321.267660][ T31] audit: type=1400 audit(1789527702.517:495): avc: denied { wake_alarm } for pid=7833 comm="syz.0.495" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 321.534889][ T30] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 321.614912][ T5604] Bluetooth: hci0: unexpected event for opcode 0x2012 [ 321.684885][ T30] usb 3-1: Using ep0 maxpacket: 16 [ 321.692993][ T30] usb 3-1: New USB device found, idVendor=16d8, idProduct=7213, bcdDevice=b8.83 [ 321.713950][ T30] usb 3-1: config 4 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 321.714012][ T30] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 321.744313][ T30] usb 3-1: string descriptor 0 read error: -22 [ 321.751681][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.172202][ T7840] ceph: No mds server is up or the cluster is laggy [ 322.180269][ T5706] libceph: connect (1)[c::]:6789 error -101 [ 322.181229][ T5706] libceph: mon0 (1)[c::]:6789 connect error [ 323.261866][ T31] audit: type=1400 audit(1789527701.523:496): avc: denied { read } for pid=7850 comm="syz.3.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 323.395796][ T7843] wlan0 speed is unknown, defaulting to 1000 [ 323.817067][ T973] usb 3-1: USB disconnect, device number 7 [ 325.884023][ T31] audit: type=1400 audit(1789527703.654:497): avc: denied { write } for pid=7855 comm="syz.2.499" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 325.884069][ T31] audit: type=1400 audit(1789527703.704:498): avc: denied { map } for pid=7855 comm="syz.2.499" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 326.138952][ T7863] xt_CONNSECMARK: invalid mode: 0 [ 328.849751][ T7894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.510'. [ 328.884841][ T7888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.509'. [ 330.035231][ T7906] ubi0: attaching mtd0 [ 330.055804][ T7906] ubi0: scanning is finished [ 330.674329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 332.165717][ T31] audit: type=1800 audit(1789527710.174:499): pid=7915 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.514" name="file0" dev="overlay" ino=593 res=0 errno=0 [ 332.270698][ T7904] xt_policy: too many policy elements [ 332.282654][ T7906] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 332.635943][ T7922] xt_CONNSECMARK: invalid mode: 0 [ 332.803149][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.517'. [ 334.091304][ T7929] syz.0.519 (7929): drop_caches: 2 [ 335.323298][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.521'. [ 339.357255][ T7976] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 339.466219][ T31] audit: type=1400 audit(1789527717.734:500): avc: denied { connect } for pid=7979 comm="syz.1.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 341.324464][ T7991] sctp_transport_update_pmtu: 45 callbacks suppressed [ 341.324479][ T7991] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 341.324710][ T7991] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 341.324935][ T7991] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 341.325871][ T7991] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 341.332484][ T7991] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 341.333933][ T7991] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 341.335278][ T7991] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 341.336676][ T7991] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 341.337744][ T7991] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 341.338828][ T7991] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 343.658182][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.537'. [ 345.657096][ T8017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.532'. [ 345.657172][ T8017] netlink: 20 bytes leftover after parsing attributes in process `syz.4.532'. [ 349.048822][ T31] audit: type=1800 audit(1789527727.285:501): pid=8051 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.541" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 349.974565][ T8057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.550'. [ 352.568774][ T31] audit: type=1400 audit(1789527730.445:502): avc: denied { getopt } for pid=8072 comm="syz.0.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 353.799983][ T8092] xt_CONNSECMARK: invalid mode: 0 [ 354.035936][ T5720] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 354.205122][ T5720] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 354.207802][ T5720] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 354.207848][ T5720] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 354.207918][ T5720] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 354.210063][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 354.210111][ T5720] usb 2-1: SerialNumber: syz [ 354.325549][ T5720] hub 2-1:1.0: bad descriptor, ignoring hub [ 354.326096][ T5720] hub 2-1:1.0: probe with driver hub failed with error -5 [ 354.410101][ T5720] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 356.173466][ T5720] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 356.324749][ T5720] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 356.326305][ T5720] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.326343][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.641626][ T31] audit: type=1800 audit(1789527734.885:503): pid=8126 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.568" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 357.439421][ T5720] wacom 0003:056A:033B.0001: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 357.461299][ T5720] wacom 0003:056A:033B.0001: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.3-1/input0 [ 357.642256][ T5720] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:056A:033B.0001/input/input8 [ 357.718352][ T31] audit: type=1400 audit(1789527735.985:504): avc: denied { ioctl } for pid=4959 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2879 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 357.756013][ T30] usb 2-1: USB disconnect, device number 8 [ 357.975119][ T8131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.980019][ T8131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.015601][ T5720] usb 4-1: USB disconnect, device number 5 [ 358.102168][ T8132] fido_id[8132]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 358.606822][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.576'. [ 359.378622][ T31] audit: type=1400 audit(1789527737.645:505): avc: denied { mount } for pid=8139 comm="syz.4.573" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 359.409939][ T8162] xt_CONNSECMARK: invalid mode: 0 [ 359.530131][ T8169] syz.1.580: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 359.530216][ T8169] CPU: 1 UID: 0 PID: 8169 Comm: syz.1.580 Tainted: G L syzkaller #0 PREEMPT(full) [ 359.530243][ T8169] Tainted: [L]=SOFTLOCKUP [ 359.530250][ T8169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 359.530264][ T8169] Call Trace: [ 359.530271][ T8169] [ 359.530280][ T8169] dump_stack_lvl+0x100/0x190 [ 359.530311][ T8169] warn_alloc.cold+0x9e/0xb2 [ 359.530341][ T8169] ? __pfx_warn_alloc+0x10/0x10 [ 359.530370][ T8169] ? __kasan_kmalloc+0xaa/0xb0 [ 359.530392][ T8169] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 359.530420][ T8169] ? xskq_create+0x52/0x290 [ 359.530442][ T8169] ? do_sock_setsockopt+0xf3/0x1d0 [ 359.530468][ T8169] ? do_syscall_64+0x123/0x790 [ 359.530492][ T8169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.530525][ T8169] ? xsk_setsockopt+0x743/0xab0 [ 359.530547][ T8169] __vmalloc_node_range_noprof+0x123b/0x1420 [ 359.530579][ T8169] ? xsk_setsockopt+0x743/0xab0 [ 359.530602][ T8169] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 359.530626][ T8169] ? kasan_save_track+0x14/0x30 [ 359.530644][ T8169] ? __kasan_kmalloc+0xaa/0xb0 [ 359.530665][ T8169] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 359.530694][ T8169] ? xskq_create+0x52/0x290 [ 359.530716][ T8169] ? xsk_setsockopt+0x743/0xab0 [ 359.530736][ T8169] xskq_create+0x18f/0x290 [ 359.530758][ T8169] ? xsk_setsockopt+0x743/0xab0 [ 359.530780][ T8169] xsk_setsockopt+0x743/0xab0 [ 359.530802][ T8169] ? __pfx_xsk_setsockopt+0x10/0x10 [ 359.530823][ T8169] ? find_held_lock+0x2b/0x80 [ 359.530846][ T8169] ? __fget_files+0x215/0x3d0 [ 359.530873][ T8169] ? selinux_socket_setsockopt+0x6a/0x80 [ 359.530893][ T8169] ? __pfx_xsk_setsockopt+0x10/0x10 [ 359.530915][ T8169] do_sock_setsockopt+0xf3/0x1d0 [ 359.530946][ T8169] __sys_setsockopt+0x195/0x220 [ 359.530972][ T8169] __x64_sys_setsockopt+0xbd/0x160 [ 359.530991][ T8169] ? do_syscall_64+0xae/0x790 [ 359.531016][ T8169] ? lockdep_hardirqs_on+0x7d/0x110 [ 359.531041][ T8169] do_syscall_64+0x123/0x790 [ 359.531069][ T8169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.531088][ T8169] RIP: 0033:0x7fb77579e159 [ 359.531104][ T8169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.531122][ T8169] RSP: 002b:00007fb776642028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 359.531141][ T8169] RAX: ffffffffffffffda RBX: 00007fb775a25fa0 RCX: 00007fb77579e159 [ 359.531153][ T8169] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 359.531164][ T8169] RBP: 00007fb77583506b R08: 0000000000000004 R09: 0000000000000000 [ 359.531175][ T8169] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.531187][ T8169] R13: 00007fb775a26038 R14: 00007fb775a25fa0 R15: 00007ffddbe4be38 [ 359.531212][ T8169] [ 359.531276][ T8169] Mem-Info: [ 359.532054][ T8169] active_anon:33682 inactive_anon:5496 isolated_anon:0 [ 359.532054][ T8169] active_file:755 inactive_file:61749 isolated_file:0 [ 359.532054][ T8169] unevictable:0 dirty:693 writeback:0 [ 359.532054][ T8169] slab_reclaimable:12026 slab_unreclaimable:92957 [ 359.532054][ T8169] mapped:33484 shmem:30465 pagetables:1316 [ 359.532054][ T8169] sec_pagetables:0 bounce:0 [ 359.532054][ T8169] kernel_misc_reclaimable:0 [ 359.532054][ T8169] free:1269541 free_pcp:9893 free_cma:0 [ 359.532102][ T8169] Node 0 active_anon:134728kB inactive_anon:21984kB active_file:3020kB inactive_file:246796kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:133936kB dirty:2764kB writeback:0kB shmem:121860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12564kB pagetables:5124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 359.532148][ T8169] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 359.532191][ T8169] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 359.532237][ T8169] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 359.532269][ T8169] Node 0 DMA32 free:1119884kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:134728kB inactive_anon:21984kB active_file:3020kB inactive_file:246796kB unevictable:0kB writepending:2764kB zspages:2520kB present:3129332kB managed:2530528kB mlocked:0kB bounce:0kB free_pcp:39572kB local_pcp:19032kB free_cma:0kB [ 359.532320][ T8169] lowmem_reserve[]: 0 0 0 0 0 [ 359.532358][ T8169] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:72kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 359.532409][ T8169] lowmem_reserve[]: 0 0 0 0 0 [ 359.532439][ T8169] Node 1 Normal free:3942952kB boost:0kB min:55908kB low:69884kB high:83860kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:8kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 359.532488][ T8169] lowmem_reserve[]: 0 0 0 0 0 [ 359.532519][ T8169] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 359.603670][ T8169] Node 0 DMA32: 1*4kB (U) 135*8kB (UME) 271*16kB (UE) 565*32kB (UME) 345*64kB (UME) 545*128kB (UM) 354*256kB (UM) 163*512kB (UME) 57*1024kB (UME) 17*2048kB (UM) 180*4096kB (UM) = 1119884kB [ 359.603835][ T8169] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 359.603925][ T8169] Node 1 Normal: 2*4kB (M) 4*8kB (UM) 6*16kB (UM) 7*32kB (UM) 9*64kB (UM) 5*128kB (UM) 4*256kB (UM) 2*512kB (M) 3*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3942952kB [ 359.604070][ T8169] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 359.604085][ T8169] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 359.604100][ T8169] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 359.604114][ T8169] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 359.604127][ T8169] 92347 total pagecache pages [ 359.604134][ T8169] 7 pages in swap cache [ 359.604140][ T8169] Free swap = 91648kB [ 359.604147][ T8169] Total swap = 124996kB [ 359.604154][ T8169] 2097051 pages RAM [ 359.604160][ T8169] 0 pages HighMem/MovableOnly [ 359.604166][ T8169] 432785 pages reserved [ 359.604173][ T8169] 0 pages cma reserved [ 359.735705][ T31] audit: type=1400 audit(1789527737.996:506): avc: denied { unmount } for pid=5617 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 360.713620][ T31] audit: type=1326 audit(1789527738.956:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8179 comm="syz.3.584" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd221d9e159 code=0x7ffc0000 [ 360.713772][ T31] audit: type=1326 audit(1789527738.956:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8179 comm="syz.3.584" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd221d9e159 code=0x7ffc0000 [ 360.713896][ T31] audit: type=1326 audit(1789527738.956:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8179 comm="syz.3.584" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd221d9e159 code=0x7ffc0000 [ 360.714024][ T31] audit: type=1326 audit(1789527738.956:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8179 comm="syz.3.584" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd221d9e159 code=0x7ffc0000 [ 360.714152][ T31] audit: type=1326 audit(1789527738.956:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8179 comm="syz.3.584" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd221d9e159 code=0x7ffc0000 [ 360.714278][ T31] audit: type=1326 audit(1789527738.956:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8179 comm="syz.3.584" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd221d9e159 code=0x7ffc0000 [ 361.704733][ T31] kauditd_printk_skb: 379 callbacks suppressed [ 361.704750][ T31] audit: type=1326 audit(1789527739.976:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8179 comm="syz.3.584" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd221d9e159 code=0x7ffc0000 [ 363.062193][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.589'. [ 363.163683][ T31] audit: type=1800 audit(1789527741.416:893): pid=8212 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.583" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 363.970581][ T8220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.594'. [ 364.114707][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.595'. [ 364.497442][ T31] audit: type=1400 audit(1789527742.766:894): avc: denied { write } for pid=8233 comm="syz.3.597" name="subsystems" dev="configfs" ino=520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 364.501075][ T31] audit: type=1400 audit(1789527742.766:895): avc: denied { write } for pid=8233 comm="syz.3.597" name="namespaces" dev="configfs" ino=20741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 364.501708][ T8234] nvmet: adding nsid 1 to subsystem testsubsys [ 364.532927][ T5812] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 364.783254][ T5812] usb 3-1: Using ep0 maxpacket: 16 [ 364.787594][ T5812] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 364.796246][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.796270][ T5812] usb 3-1: Product: syz [ 364.796283][ T5812] usb 3-1: Manufacturer: syz [ 364.796297][ T5812] usb 3-1: SerialNumber: syz [ 364.805037][ T5812] usb 3-1: config 0 descriptor?? [ 364.810123][ T5812] usb 3-1: selecting invalid altsetting 1 [ 364.810138][ T5812] technisat-usb2: could not set alternate setting to 0 [ 365.181839][ T5812] technisat-usb2: firmware version: 0.0 [ 365.181875][ T5812] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 365.631704][ T8252] netlink: 9 bytes leftover after parsing attributes in process `syz.4.601'. [ 365.924783][ T5812] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 365.925473][ T5812] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 365.925512][ T5812] usb 3-1: media controller created [ 365.926006][ T5812] technisat-usb2: i2c-error: out failed 53 = -22 [ 365.926114][ T5812] dvb-usb: MAC address reading failed. [ 365.934998][ T5812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 365.950465][ T8252] netlink: 9 bytes leftover after parsing attributes in process `syz.4.601'. [ 365.981848][ T8219] technisat-usb2: i2c-error: out failed 04 = -22 [ 365.998076][ T8219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.593'. [ 366.052649][ T8257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.593'. [ 366.105740][ T8219] 8021q: adding VLAN 0 to HW filter on device bond1 [ 366.373231][ T8219] dummy0: left promiscuous mode [ 366.416334][ T31] audit: type=1326 audit(1789527744.686:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8255 comm="syz.3.603" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd221d9e159 code=0x7fc00000 [ 366.625204][ T8257] netlink: 'syz.2.593': attribute type 10 has an invalid length. [ 366.625224][ T8257] netlink: 40 bytes leftover after parsing attributes in process `syz.2.593'. [ 366.631952][ T8219] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 366.632605][ T8257] dummy0: entered promiscuous mode [ 366.633887][ T5812] DVB: Unable to find symbol stv090x_attach() [ 366.647848][ T8257] bond1: (slave dummy0): Releasing backup interface [ 366.745410][ T5812] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 366.777740][ T31] audit: type=1400 audit(1789527745.046:897): avc: denied { write } for pid=8268 comm="syz.4.605" name="ports" dev="configfs" ino=521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 367.304351][ T31] audit: type=1326 audit(1789527745.326:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8255 comm="syz.3.603" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd221d9e159 code=0x7fc00000 [ 367.492462][ T5812] rc_core: IR keymap rc-technisat-usb2 not found [ 367.492481][ T5812] Registered IR keymap rc-empty [ 367.655711][ T5812] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 367.770033][ T5812] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input13 [ 367.806775][ T5812] dvb-usb: schedule remote query interval to 100 msecs. [ 367.807903][ T5812] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 367.809913][ T5812] usb 3-1: USB disconnect, device number 8 [ 368.852017][ T8261] [ 368.854367][ T8261] ====================================================== [ 368.861362][ T8261] WARNING: possible circular locking dependency detected [ 368.868345][ T8261] syzkaller #0 Tainted: G L [ 368.874292][ T8261] ------------------------------------------------------ [ 368.881272][ T8261] syz.0.604/8261 is trying to acquire lock: [ 368.887134][ T8261] ffff888058454698 (kn->active#72){++++}-{0:0}, at: __kernfs_remove+0x34c/0xb80 [ 368.896159][ T8261] [ 368.896159][ T8261] but task is already holding lock: [ 368.903507][ T8261] ffffffff904e2de0 (serio_mutex){+.+.}-{4:4}, at: serio_unregister_port+0x1b/0x40 [ 368.912697][ T8261] [ 368.912697][ T8261] which lock already depends on the new lock. [ 368.912697][ T8261] [ 368.923067][ T8261] [ 368.923067][ T8261] the existing dependency chain (in reverse order) is: [ 368.932060][ T8261] [ 368.932060][ T8261] -> #1 (serio_mutex){+.+.}-{4:4}: [ 368.939327][ T8261] lock_acquire+0x1d1/0x380 [ 368.944331][ T8261] __mutex_lock+0x1a4/0x1bd0 [ 368.949423][ T8261] drvctl_store+0x3c/0x350 [ 368.954331][ T8261] dev_attr_store+0x58/0x80 [ 368.959326][ T8261] sysfs_kf_write+0xf2/0x150 [ 368.964405][ T8261] kernfs_fop_write_iter+0x3e0/0x5f0 [ 368.970177][ T8261] vfs_write+0x6af/0x1050 [ 368.974994][ T8261] ksys_write+0x12a/0x250 [ 368.979812][ T8261] do_syscall_64+0x123/0x790 [ 368.984892][ T8261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.991277][ T8261] [ 368.991277][ T8261] -> #0 (kn->active#72){++++}-{0:0}: [ 368.998719][ T8261] check_prev_add+0xeb/0xe60 [ 369.003797][ T8261] __lock_acquire+0x1528/0x1f40 [ 369.009136][ T8261] lock_acquire+0x1d1/0x380 [ 369.014126][ T8261] kernfs_drain+0x4f0/0x600 [ 369.019121][ T8261] __kernfs_remove+0x34c/0xb80 [ 369.024377][ T8261] kernfs_remove_by_name_ns+0x7c/0x120 [ 369.030323][ T8261] remove_files+0x96/0x1c0 [ 369.035236][ T8261] sysfs_remove_group+0x8b/0x1b0 [ 369.040664][ T8261] sysfs_remove_groups+0x60/0xb0 [ 369.046093][ T8261] device_remove_attrs+0x192/0x290 [ 369.051693][ T8261] device_del+0x36e/0x9b0 [ 369.056510][ T8261] serio_destroy_port+0x47f/0x590 [ 369.062027][ T8261] serio_unregister_port+0x2b/0x40 [ 369.067635][ T8261] userio_char_release+0x91/0xe0 [ 369.073060][ T8261] __fput+0x3ff/0xb50 [ 369.077540][ T8261] task_work_run+0x150/0x240 [ 369.082623][ T8261] exit_to_user_mode_loop+0x1d8/0x700 [ 369.088484][ T8261] do_syscall_64+0x661/0x790 [ 369.093564][ T8261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.099946][ T8261] [ 369.099946][ T8261] other info that might help us debug this: [ 369.099946][ T8261] [ 369.110141][ T8261] Possible unsafe locking scenario: [ 369.110141][ T8261] [ 369.117558][ T8261] CPU0 CPU1 [ 369.122895][ T8261] ---- ---- [ 369.128234][ T8261] lock(serio_mutex); [ 369.132283][ T8261] lock(kn->active#72); [ 369.139015][ T8261] lock(serio_mutex); [ 369.145570][ T8261] lock(kn->active#72); [ 369.149784][ T8261] [ 369.149784][ T8261] *** DEADLOCK *** [ 369.149784][ T8261] [ 369.157893][ T8261] locks held by syz.0.604/8261: 1, last CPU#1: [ 369.164014][ T8261] #0: ffffffff904e2de0 (serio_mutex){+.+.}-{4:4}, at: serio_unregister_port+0x1b/0x40 [ 369.173636][ T8261] [ 369.173636][ T8261] stack backtrace: [ 369.179494][ T8261] CPU: 1 UID: 0 PID: 8261 Comm: syz.0.604 Tainted: G L syzkaller #0 PREEMPT(full) [ 369.190226][ T8261] Tainted: [L]=SOFTLOCKUP [ 369.194517][ T8261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 369.204542][ T8261] Call Trace: [ 369.207793][ T8261] [ 369.210697][ T8261] dump_stack_lvl+0x100/0x190 [ 369.215350][ T8261] print_circular_bug.cold+0x178/0x1be [ 369.220786][ T8261] check_noncircular+0x146/0x160 [ 369.225699][ T8261] check_prev_add+0xeb/0xe60 [ 369.230260][ T8261] __lock_acquire+0x1528/0x1f40 [ 369.235084][ T8261] lock_acquire+0x1d1/0x380 [ 369.239561][ T8261] ? __kernfs_remove+0x34c/0xb80 [ 369.244473][ T8261] ? kernfs_drain+0x4c7/0x600 [ 369.249135][ T8261] kernfs_drain+0x4f0/0x600 [ 369.253612][ T8261] ? __kernfs_remove+0x34c/0xb80 [ 369.258527][ T8261] ? __pfx_kernfs_drain+0x10/0x10 [ 369.263523][ T8261] ? find_held_lock+0x2b/0x80 [ 369.268177][ T8261] ? __kernfs_remove+0x224/0xb80 [ 369.273088][ T8261] ? __kernfs_remove+0x224/0xb80 [ 369.278009][ T8261] ? up_write+0x2dc/0x5b0 [ 369.282330][ T8261] __kernfs_remove+0x34c/0xb80 [ 369.287085][ T8261] kernfs_remove_by_name_ns+0x7c/0x120 [ 369.292513][ T8261] remove_files+0x96/0x1c0 [ 369.296991][ T8261] sysfs_remove_group+0x8b/0x1b0 [ 369.301902][ T8261] sysfs_remove_groups+0x60/0xb0 [ 369.306819][ T8261] device_remove_attrs+0x192/0x290 [ 369.311902][ T8261] ? __pfx_device_remove_attrs+0x10/0x10 [ 369.317509][ T8261] device_del+0x36e/0x9b0 [ 369.321809][ T8261] ? __pfx_device_del+0x10/0x10 [ 369.326630][ T8261] ? mark_held_locks+0x40/0x70 [ 369.331365][ T8261] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 369.337147][ T8261] serio_destroy_port+0x47f/0x590 [ 369.342169][ T8261] serio_unregister_port+0x2b/0x40 [ 369.347312][ T8261] userio_char_release+0x91/0xe0 [ 369.352219][ T8261] ? __pfx_userio_char_release+0x10/0x10 [ 369.357842][ T8261] __fput+0x3ff/0xb50 [ 369.361798][ T8261] task_work_run+0x150/0x240 [ 369.366366][ T8261] ? __pfx_task_work_run+0x10/0x10 [ 369.371452][ T8261] exit_to_user_mode_loop+0x1d8/0x700 [ 369.376797][ T8261] ? rcu_is_watching+0x13/0xc0 [ 369.381536][ T8261] do_syscall_64+0x661/0x790 [ 369.386103][ T8261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.391967][ T8261] RIP: 0033:0x7f4661b9e159 [ 369.396358][ T8261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.415935][ T8261] RSP: 002b:00007ffe42687558 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 369.424326][ T8261] RAX: 0000000000000000 RBX: 00007f4661e27da0 RCX: 00007f4661b9e159 [ 369.432272][ T8261] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 369.440229][ T8261] RBP: 00007f4661e27da0 R08: 0000000000000006 R09: 0000000000000000 [ 369.448178][ T8261] R10: 00007f4661e27cb0 R11: 0000000000000246 R12: 0000000000059fa4 [ 369.456129][ T8261] R13: 00007f4661e2609c R14: 0000000000059f72 R15: 00007f4661e26090 [ 369.464078][ T8261] [ 369.576837][ T8302] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 369.597612][ T8302] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 369.628256][ T5812] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 373.003309][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.003334][ T1307] ieee802154 phy1 wpan1: encryption failed: -22