last executing test programs: 23.419482479s ago: executing program 2 (id=460): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) socket(0x18, 0x1, 0x887) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) setresuid(0x0, 0xee00, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) r5 = syz_open_procfs(0x0, 0x0) read$FUSE(r5, &(0x7f00000047c0)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x801060, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) prctl$PR_GET_THP_DISABLE(0x2a) 22.008247364s ago: executing program 3 (id=463): socket$inet6(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdir(0x0, 0x65) inotify_init1(0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x1a2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x8, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 21.22310714s ago: executing program 4 (id=464): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x80000000000003) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a6000800fffc020000000000000000000000000000ff020000000000000000008000000001880001045a"], 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb4a4) 20.627272489s ago: executing program 1 (id=465): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() setrlimit(0xa, &(0x7f00000000c0)={0x9, 0x6}) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) write(r3, &(0x7f0000000000)="5a000300010003", 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r5, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) tkill(r4, 0x7) listen(r0, 0xffffffff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) 20.258440203s ago: executing program 3 (id=466): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) fspick(r1, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x2000009) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000240)=""/69, 0x45, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x14) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) recvmmsg(r3, 0x0, 0x0, 0x12141, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 19.769108255s ago: executing program 1 (id=467): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000000080)=0x9, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x403, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x100000, 0x400, {}, {0x0, 0x2, 0x0, 0x4, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x10, 0x5, {}, {0x1, 0xc, 0xd7, 0x7, 0x1, 0x3, "621a65f4"}, 0x1ff, 0x2, {0x0}, 0x6, 0x0, r6}) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x2c0) 18.853431939s ago: executing program 4 (id=469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x22008001) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x50) syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010d0000000708b5192100c7980000000109021b00022000ac000904000001070000090905", @ANYRES16], 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r2, 0x4}, 0x38) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x3, 0x8, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8000) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x8000) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r5}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2c2}) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000019580)="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") sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') 17.770046351s ago: executing program 3 (id=471): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./sys/bus/pci/rescan\x00', 0x1f7) syz_open_dev$usbfs(0x0, 0x80, 0x113201) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) write(r1, &(0x7f00000000c0)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffb", 0x8b) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x103000, 0x0) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f00000003c0)) 14.134046044s ago: executing program 2 (id=472): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) prlimit64(r1, 0xa, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=@newtfilter={0x94, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x5}}]}, 0x94}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x6b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xde, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r7, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32=r3, @ANYBLOB="000000006a162cb0000000000000002000000000", @ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="04000000050000000500"/28], 0x50) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000000)=@sr0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000012000000080003002d33fe014b3d8cff7433acc7085677bd15a073e595f87948d0d594a7a66efb1539337db0682637787e13661d705e245e7dfe64c47b9e15d04673750d926e8d055fd9db8705fae31c78b652c678485baf", @ANYRES32=r11, @ANYBLOB], 0x28}}, 0x0) 13.896221715s ago: executing program 1 (id=473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x22008001) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x50) syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010d0000000708b5192100c7980000000109021b00022000ac000904000001070000090905", @ANYRES16], 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r2, 0x4}, 0x38) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x3, 0x8, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8000) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x8000) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r5}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2c2}) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000019580)="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") syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') mount$tmpfs(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000440)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative'}}}]}) 13.796311935s ago: executing program 3 (id=474): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x40003) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000140)="09000000e7001400000000803500008100000088a80000000000504e7c6a59e468", 0x21, 0x4044804, &(0x7f00000001c0)={0x11, 0x88a8, r8, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x68}}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) 12.12426072s ago: executing program 2 (id=476): keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000026c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) pipe2(0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x4, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x8, 0x400, 0x4, 0x0, 0x8, 0x0, 0x6, 0x40000001, 0x7, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffa, 0x0, 0xffffffeb, 0x2004, 0x3, 0x7, 0xf253, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x9537, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x5, 0x2, 0x5, 0x2000000e, 0x2, 0x2, 0x8000006f, 0x8, 0x405, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0x3, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x9, 0x5], [0x7, 0x45cb, 0x3, 0x8000, 0xfffffffd, 0x3, 0x2, 0x25, 0xa, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x1, 0x10000, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x9, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x14, 0xfffffff7, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x4, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x20002, 0x0, 0x2, 0x9, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x5, 0x6, 0x6, 0x3, 0x1, 0xe, 0x20007, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x8001, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x3, 0x5, 0x80000001, 0xffff0000, 0x9, 0x1000, 0x0, 0x7fff, 0x6, 0xfffffff9, 0x0, 0x8001000, 0x80040101, 0x81, 0x8, 0x6, 0x200003, 0xfffffffe, 0x5, 0x80, 0x9, 0x8001, 0x12000, 0x4, 0x7, 0x400004, 0x3, 0x9, 0x3, 0x8, 0xb3d, 0xbf23, 0x6, 0x5, 0x956, 0x0, 0x3ff, 0x81, 0x6, 0x100dffd, 0x2005, 0x9, 0x4, 0x1000, 0x9, 0x7fffffff, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x80108e, 0xffff, 0x3, 0x3, 0x88, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x5, 0x5, 0x8, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x2, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4004, 0x20008, 0x8a5, 0x8003, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x7, 0xfffffff7, 0x7fff, 0xffff8a33, 0xfffffff8, 0x481, 0x0, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xffffffa3, 0x136, 0x7]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, &(0x7f00000001c0)) msgsnd(0x0, 0x0, 0x8, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0x80000) sendto$inet(r1, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/ports/1\x00', 0x200) 12.04286947s ago: executing program 3 (id=477): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)={0x1c, r2, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8090) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='ocfs2\x00', 0x0, &(0x7f0000000240)='acl') socket$xdp(0x2c, 0x3, 0x0) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70ad2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0x8, {0x10, 0x1}, {0x8f, 0x2}, @cond=[{0x1ff, 0xf000, 0x6f5, 0x800, 0x3, 0x2}, {0xffff, 0x5, 0x1, 0x47, 0x6, 0xfd}]}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f00000004c0)=0x1684, 0x4) r8 = syz_open_dev$dvb_frontend(0x0, 0x2000000, 0x20e82) ioctl$FE_SET_PROPERTY(r8, 0x40106f52, &(0x7f0000000400)={0x28, &(0x7f0000000280)=[{0x2f, '\x00', @buffer={"1f7f056a6feaa5550b7786aa0ce0fed68d20eedb4bcc6ce1707d5722cef30afc", 0x20}, 0x181edbd1}, {0x25, '\x00', @buffer={"bee85176ea91475f12943d4306bebf26f11ddf24100667420c7196102a5e6af8", 0x20}, 0x3}, {0x10, '\x00', @buffer={"d1dee8e4b030b445e79d3dc4b887d1943c07ec91e67b1923bec1c8f28779eb76", 0x20}, 0x1ff}]}) r9 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d000101008032090400000203000000092111010001222300090581034000"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x100, 0x0, 0x0, {[@mptcp=@generic={0xae, 0x2}]}}}}}}}}, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], 0x0}, 0x0) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) 8.291959107s ago: executing program 1 (id=480): modify_ldt$write2(0x11, &(0x7f0000000100)={0x5, 0x20001000, 0xffffffffffffffff, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_emit_ethernet(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40408c0}, 0x20000000) syz_clone(0x48020100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x5, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000180)={0x0, 0xf, 0xc, 0x1000, 0x4, "5a1c966bcd4b7448"}) write$UHID_INPUT(r1, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1006) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000300)=@ccm_128={{0x303}, "fa840e2fa1d09051", "efbf2ffdc02ad333eff00eeeae2c9bfc", "cc04abb3", "0c6dde20dea3b536"}, 0x28) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005a000d00"], 0x1c}], 0x1, 0x0, 0x0, 0x40804}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x3, 0x20000000, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000000040)=""/2, 0x2) 6.292247455s ago: executing program 2 (id=483): openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0x0) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x4140010, r0, 0x6444b000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) brk(0x5) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xec11}}, './gadget/dummy_udc\x00'}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x2000)=nil) ioctl$TIOCSTI(r1, 0x5412, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) 6.134188933s ago: executing program 4 (id=484): socketpair$unix(0x1, 0x4, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210009", 0x2d}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000480)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x8000000, 0x2, 0x3, 0x2, 0x1, 0x4}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x2, 0x0, 0x0, 0x40, 0x1}}, 0x50) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x202, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f0000000000)={0xc, r6}) ioctl$IOMMU_VFIO_SET_IOMMU(r5, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000020"]) 5.246861393s ago: executing program 0 (id=485): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x82002, 0x0) write$dsp(r2, &(0x7f0000000240)='F', 0x45) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0x10004) ioctl$XFS_IOC_FSGROWFSDATA(0xffffffffffffffff, 0x4010586e, &(0x7f00000002c0)={0x1, 0x1}) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0xc0, 0x0, 0x1000000}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) syz_emit_ethernet(0x36, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e04"], 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r4, &(0x7f0000000200), 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='0', 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x7, 0x9}}, './file0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x0, 0x4000, 0xdc0, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) 5.079618611s ago: executing program 4 (id=486): openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0x0) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x4140010, r0, 0x6444b000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) brk(0x5) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xec11}}, './gadget/dummy_udc\x00'}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x2000)=nil) ioctl$TIOCSTI(r1, 0x5412, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) 4.70280786s ago: executing program 0 (id=487): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) setpriority(0x1, r2, 0x7) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f04000000000048"], 0x0, 0x28}, 0x28) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r6, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000740)={0x0, @bt={0x40, 0x14cc, 0x1, 0x0, 0x2, 0x8bf4, 0x1, 0x3, 0x4, 0x5, 0x6, 0x9, 0x4, 0x81, 0xb, 0x4, {0x5, 0x3}, 0xfe, 0x7}}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r6, &(0x7f00000002c0)="304a188661b3b00e812e48e879d8184ad5693568c0b7db76120ba8df73a6f6c74cce87c4", &(0x7f0000000540)=""/138}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x104, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0xfff2}, {0x3, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xf7}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 4.654201133s ago: executing program 1 (id=488): memfd_create(&(0x7f0000000200)='}-]\x00', 0x6) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x2000, 0x190) sendmsg$NL80211_CMD_NEW_KEY(r0, 0x0, 0x20000090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x298, 0x200, 0x168, 0x168, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x2, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0xfffd, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) 4.531682264s ago: executing program 2 (id=489): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) clock_adjtime(0xffffffd1, &(0x7f0000000000)={0xb, 0x825, 0xfffffffffffffff7, 0xa000000, 0x8, 0x43, 0x52e6ac5d, 0x2000fff7ffff, 0x9655, 0xfffffffffffffffe, 0x40000000000009, 0x6, 0x5, 0x80000007, 0x80000000000003, 0x919, 0xfffffffffffffffd, 0x81, 0x8000000000000000, 0x6, 0x100000000, 0x5, 0x200000006, 0x4, 0x3, 0xa}) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) symlink(0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'veth1_to_hsr\x00', 'macvlan1\x00', {}, {}, 0x6, 0x0, 0x61}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x12, 0x0, 0x2}}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'macvlan0\x00', 'gretap0\x00', {}, {}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x5, 0x2, 0x6, 0x1, 0x0, 0x1], 0x3, 0x1}, {0x1, [0x4, 0x3, 0x6697e4e8f2a2b31b, 0x5, 0x5, 0x1], 0x4, 0xa}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000280)="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", 0x1d8, 0xffffffffffffffff) 3.603200901s ago: executing program 0 (id=490): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r1 = syz_open_procfs(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file1\x00'}) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0xd, 0x0, 0x0, 0x9, 0x1, 0x16c0, 0x5505, 0x8b, 0x1, 0x9, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) mkdir(&(0x7f0000000080)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f0000001380)='./cgroup/../file0\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='stack\x00') 3.446830994s ago: executing program 1 (id=491): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x22008001) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x50) syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010d0000000708b5192100c7980000000109021b00022000ac000904000001070000090905", @ANYRES16], 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r2, 0x4}, 0x38) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x3, 0x8, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8000) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x8000) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r5}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2c2}) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000019580)="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") sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') mount$tmpfs(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000440)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative'}}}]}) 3.284327135s ago: executing program 4 (id=492): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') fanotify_init(0x40, 0x101000) keyctl$clear(0x7, 0xfffffffffffffffb) io_setup(0x9, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 1.768130458s ago: executing program 0 (id=493): setns(0xc9, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000340)={0x0, 0x2, 0x1, [0x8070, 0xff, 0xfffffffffffffffd, 0x0, 0x6], [0x8000000002, 0x2, 0x80000000, 0x0, 0x7ffd, 0x56, 0x5, 0x2, 0x40000000000000c, 0x900000000000, 0x6, 0x21, 0x400, 0xfffffffffffffff4, 0x4a, 0x40000000000002, 0x10000fc, 0xc, 0xd9, 0x8000, 0x1, 0x202a9, 0x3, 0x8, 0x1, 0x9, 0xa, 0x2, 0x9, 0xa8, 0x2, 0x3, 0xffffffffffffff7f, 0xffffffeffffffffa, 0x9, 0x100, 0x80, 0x2000000000931, 0x101, 0x6, 0x0, 0x9, 0x7, 0x7, 0x104, 0x6, 0x1, 0x106, 0xf, 0x4000000c, 0xfff, 0x1, 0xda, 0x2, 0x0, 0x81, 0x8, 0x119ee, 0x2, 0x7b, 0x400000000000001, 0x98, 0x101, 0x5bc, 0x200, 0x225196c8, 0x8, 0x8000, 0x5f, 0x8, 0x1005, 0x970, 0x82c, 0x7ff, 0x80000002, 0xe3, 0xa, 0x4, 0x9, 0xc3e, 0x2, 0xfffffffffffffffd, 0x1, 0x8000000000000000, 0x9, 0x0, 0x4, 0x200, 0xe, 0x9, 0x100000001, 0x4, 0x0, 0x7, 0x9, 0x8000000000000, 0x7, 0x1000, 0x16d, 0x3, 0x68d, 0xffffffffffff47b0, 0x8, 0x20000000, 0xe, 0x0, 0x4, 0x3, 0x1000000000000004, 0x7, 0x3ff, 0x40000, 0x3ff, 0x4000002, 0x80000000, 0x40000000000, 0x2, 0x1, 0x4, 0xa, 0x80000000]}) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) write$binfmt_elf64(r1, &(0x7f00000005c0)=ANY=[], 0x78) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0xfffffffe, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6eab71c4"}, 0x0, 0x1, {0x0}, 0xea}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000400)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000040)={0x3, 0x8, 0x80, 0x0, 0xd}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0x44, 0x4, 0x578, 0xffffffff, 0x390, 0x240, 0x390, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x1f8, 0x240, 0x8502, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6erspan0\x00', {0x3ff, 0x2, 0x0, 0x2fff, 0x2fff, 0x849a, 0x1, 0x18, 0x18}, {0x8}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz0\x00', {0x2}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @local, [0xff000000, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'pimreg0\x00', 'team_slave_1\x00', {}, {0xff}, 0x3c, 0xd3, 0x4, 0x8}, 0x0, 0x128, 0x150, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'batadv_slave_0\x00', {0x8, 0x7, 0x101, 0x3, 0x4, 0x4, 0xfffffff8, 0x0, 0x78}, {0x9}}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x7, 0x81, 0x1, 0x0, "d13aea835ab25d2af06d2a594bd55044f3f8f4a6ee1c3d886408088b5319e5294d4192982093b0f1e78cdb4585b98822e00d4b509e74d3ebb43b153f2481c6e3"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x0, 0x188, 0xffffffff, 0x2a0, 0x0, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, {0x6}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x15, @empty, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key=0x85, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000140)=0x6) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x123443, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x20004, r5}) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f0000000040)=0x700) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 1.76702653s ago: executing program 4 (id=494): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000003600000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000100), &(0x7f0000000040)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r1, &(0x7f0000000180), &(0x7f00000002c0)=""/88}, 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4044080) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000080)=""/15, 0x2}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x0, 0x3, @udp='udp:syz1\x00'}}}}, 0x34}}, 0x20042000) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r7 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000080)={0x1, r7}) close(0x3) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'dvmrp0\x00', 0x4}, 0x18) 1.690687952s ago: executing program 3 (id=495): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e040000000000000000"], 0x0, 0x52}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x3, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x2}, 0x94) dup(0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) pwritev(r2, &(0x7f0000000880)=[{&(0x7f0000000040)="86", 0x1}], 0x1, 0x403, 0x20000000) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x1ff, 0x3ff, 0x7f, 0x20004, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffff, 0x3, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_disconnect(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_ethernet(0x42, &(0x7f0000000240)={@remote, @remote, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @broadcast, @loopback, @random="4d3f91828c8a", @private2}}}}, &(0x7f00000002c0)={0x1, 0x2, [0xf00, 0x7a0, 0x1e4, 0xf36]}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, 0x0, 0x40) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 1.679076551s ago: executing program 0 (id=496): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r2, &(0x7f00000002c0)=[{0x0}, {0x0}, {&(0x7f0000000200)=""/192, 0xc0}], 0x3, 0x1, 0x8) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000000)={0x2, 0x1, 0x3, 0x2, 0x4}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffff1000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) socket(0x1e, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x20, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) 1.590454725s ago: executing program 2 (id=497): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001", 0x21) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000010700000000004000000a000000060001001800000008000a"], 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) 0s ago: executing program 0 (id=498): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) recvmmsg(r3, &(0x7f0000000900), 0x0, 0x40, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x810, 0xffffffffffffffff, 0x173e000) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYRES16], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$sock_inet6_udp_SIOCINQ(r5, 0x541b, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080), 0x10) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000400)={0x4, 0x0, [{0x8da, 0x0, 0xfffffffffffffff8}, {0x9af, 0x0, 0x4}, {0x484, 0x0, 0x4}, {0x400000b0, 0x0, 0x6}]}) sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='\a\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r4], 0x5c}}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): utor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72ca59e159 code=0x7ffc0000 [ 99.426224][ T30] audit: type=1326 audit(1788791023.539:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6013 comm="syz.4.46" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72ca59e159 code=0x7ffc0000 [ 100.957366][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 100.963600][ T30] audit: type=1400 audit(1788791025.009:306): avc: denied { kexec_image_load } for pid=6030 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 101.221340][ T30] audit: type=1400 audit(1788791025.409:307): avc: denied { cmd } for pid=6029 comm="syz.4.57" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 101.245347][ T30] audit: type=1400 audit(1788791025.429:308): avc: denied { map } for pid=6029 comm="syz.4.57" path="/dev/ublkc0" dev="devtmpfs" ino=2914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.324404][ T30] audit: type=1400 audit(1788791025.519:309): avc: denied { read } for pid=6044 comm="syz.3.53" name="demux0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 101.347955][ T30] audit: type=1400 audit(1788791025.519:310): avc: denied { open } for pid=6044 comm="syz.3.53" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 101.348003][ T30] audit: type=1400 audit(1788791025.519:311): avc: denied { ioctl } for pid=6044 comm="syz.3.53" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=921 ioctlcmd=0x6f2b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 101.823218][ T6051] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.4.60:6051 [ 101.876248][ T30] audit: type=1400 audit(1788791025.899:312): avc: denied { name_connect } for pid=6045 comm="syz.0.59" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 101.878292][ T30] audit: type=1400 audit(1788791026.009:313): avc: denied { create } for pid=6050 comm="syz.4.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 101.879835][ T30] audit: type=1400 audit(1788791026.009:314): avc: denied { ioctl } for pid=6050 comm="syz.4.60" path="socket:[9742]" dev="sockfs" ino=9742 ioctlcmd=0x61f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 102.313644][ T30] audit: type=1400 audit(1788791026.499:315): avc: denied { listen } for pid=6027 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 103.254484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 105.714381][ T6069] sg_write: data in/out 417792/136 bytes for SCSI command 0x0-- guessing data in; [ 105.714381][ T6069] program syz.2.64 not setting count and/or reply_len properly [ 106.566322][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 106.566369][ T30] audit: type=1400 audit(1788791030.279:323): avc: denied { read write } for pid=6070 comm="syz.4.65" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 106.566402][ T30] audit: type=1400 audit(1788791030.289:324): avc: denied { open } for pid=6070 comm="syz.4.65" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 106.590157][ T30] audit: type=1400 audit(1788791030.779:325): avc: denied { ioctl } for pid=6067 comm="syz.3.66" path="/dev/uinput" dev="devtmpfs" ino=914 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 106.692233][ T6079] syzkaller0: entered promiscuous mode [ 106.692743][ T30] audit: type=1400 audit(1788791030.879:326): avc: denied { ioctl } for pid=6078 comm="syz.2.68" path="socket:[9763]" dev="sockfs" ino=9763 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.723728][ T6079] syzkaller0: entered allmulticast mode [ 106.756837][ T30] audit: type=1400 audit(1788791030.949:327): avc: denied { bind } for pid=6078 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.779299][ T30] audit: type=1400 audit(1788791030.969:328): avc: denied { setopt } for pid=6078 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.800352][ T30] audit: type=1400 audit(1788791030.989:329): avc: denied { map } for pid=6078 comm="syz.2.68" path="socket:[9768]" dev="sockfs" ino=9768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.800408][ T30] audit: type=1400 audit(1788791030.989:330): avc: denied { read write } for pid=6078 comm="syz.2.68" path="socket:[9768]" dev="sockfs" ino=9768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.854947][ T6072] input: syz0 as /devices/virtual/input/input5 [ 107.964457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.541451][ T30] audit: type=1400 audit(1788791032.729:331): avc: denied { execute } for pid=6086 comm="syz.1.71" path="/dev/audio1" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 108.619492][ T30] audit: type=1400 audit(1788791032.799:332): avc: denied { getopt } for pid=6086 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 108.870630][ T6106] Zero length message leads to an empty skb [ 108.906928][ T6103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.67'. [ 109.038588][ T6109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6109 comm=syz.4.67 [ 110.446407][ T6115] lo speed is unknown, defaulting to 1000 [ 110.446489][ T6115] lo speed is unknown, defaulting to 1000 [ 110.448920][ T6115] lo speed is unknown, defaulting to 1000 [ 110.449915][ T6115] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 110.449944][ T6115] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 110.449981][ T6115] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 110.453514][ T6115] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 110.610255][ T6112] netlink: 68 bytes leftover after parsing attributes in process `syz.1.74'. [ 111.732304][ T6115] lo speed is unknown, defaulting to 1000 [ 111.753875][ T6115] lo speed is unknown, defaulting to 1000 [ 111.764375][ T6115] lo speed is unknown, defaulting to 1000 [ 111.771872][ T6115] lo speed is unknown, defaulting to 1000 [ 113.438883][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 113.438916][ T30] audit: type=1400 audit(1788791037.629:339): avc: denied { mount } for pid=6133 comm="syz.1.79" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 113.472076][ T30] audit: type=1400 audit(1788791037.659:340): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 113.492575][ T6115] lo speed is unknown, defaulting to 1000 [ 113.993503][ T30] audit: type=1400 audit(1788791038.179:341): avc: denied { ioctl } for pid=6132 comm="syz.3.78" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 114.574713][ T5690] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 115.215995][ T2284] Process accounting resumed [ 116.229693][ T5690] usb 4-1: unable to get BOS descriptor or descriptor too short [ 116.229729][ T5690] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a56, bcdDevice= 0.40 [ 116.247941][ T5690] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 116.247969][ T5690] usb 4-1: can't read configurations, error -71 [ 116.288925][ T30] audit: type=1400 audit(1788791040.479:342): avc: denied { read } for pid=6150 comm="syz.4.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 116.300290][ T6152] netlink: 176 bytes leftover after parsing attributes in process `syz.4.82'. [ 116.396848][ T6146] xt_policy: too many policy elements [ 116.417608][ T30] audit: type=1400 audit(1788791040.609:343): avc: denied { write } for pid=6143 comm="syz.0.81" name="video6" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 117.577561][ T6163] lo speed is unknown, defaulting to 1000 [ 117.994240][ T30] audit: type=1400 audit(1788791042.169:344): avc: denied { create } for pid=6166 comm="syz.0.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 118.015082][ T30] audit: type=1400 audit(1788791042.199:345): avc: denied { bind } for pid=6166 comm="syz.0.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 118.015133][ T30] audit: type=1400 audit(1788791042.199:346): avc: denied { connect } for pid=6166 comm="syz.0.86" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.015167][ T30] audit: type=1400 audit(1788791042.199:347): avc: denied { write } for pid=6166 comm="syz.0.86" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.866369][ T1101] Bluetooth: Error in BCSP hdr checksum [ 120.144777][ T1101] Bluetooth: Error in BCSP hdr checksum [ 120.634201][ T30] audit: type=1400 audit(1788791044.739:348): avc: denied { mount } for pid=6181 comm="syz.0.90" name="/" dev="rpc_pipefs" ino=10100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 120.853926][ T30] audit: type=1400 audit(1788791045.039:349): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 122.145772][ T52] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 122.597564][ T6200] trusted_key: encrypted_key: key trusted:syz not found [ 122.602296][ T30] audit: type=1400 audit(1788791046.779:350): avc: denied { sqpoll } for pid=6193 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 122.972392][ T6203] jffs2: notice: (6203) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 122.991043][ T30] audit: type=1400 audit(1788791047.179:351): avc: denied { mount } for pid=6197 comm="syz.1.95" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 123.015739][ T30] audit: type=1400 audit(1788791047.209:352): avc: denied { write } for pid=6197 comm="syz.1.95" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.038540][ T30] audit: type=1400 audit(1788791047.209:353): avc: denied { add_name } for pid=6197 comm="syz.1.95" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.038581][ T30] audit: type=1400 audit(1788791047.209:354): avc: denied { create } for pid=6197 comm="syz.1.95" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 123.097670][ T30] audit: type=1400 audit(1788791047.289:355): avc: denied { write } for pid=6197 comm="syz.1.95" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.119704][ T30] audit: type=1400 audit(1788791047.289:356): avc: denied { write } for pid=6197 comm="syz.1.95" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.119747][ T30] audit: type=1400 audit(1788791047.289:357): avc: denied { remove_name } for pid=6197 comm="syz.1.95" name="file1" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.003652][ T5712] libceph: connect (1)[c::]:6789 error -101 [ 125.004047][ T5712] libceph: mon0 (1)[c::]:6789 connect error [ 125.302526][ T5690] libceph: connect (1)[c::]:6789 error -101 [ 125.308947][ T5690] libceph: mon0 (1)[c::]:6789 connect error [ 125.633315][ T6228] usb3503 0-0008: unknown mode is requested [ 125.633363][ T6228] usb3503 0-0008: usb3503_probe: probed in standby mode [ 125.635098][ T6228] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 125.817691][ T5719] libceph: connect (1)[c::]:6789 error -101 [ 125.822295][ T5719] libceph: mon0 (1)[c::]:6789 connect error [ 125.825077][ T6218] ceph: No mds server is up or the cluster is laggy [ 125.932168][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 125.932199][ T30] audit: type=1400 audit(1788791050.119:367): avc: denied { read } for pid=6229 comm="syz.2.94" name="sg0" dev="devtmpfs" ino=1126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 125.932239][ T30] audit: type=1400 audit(1788791050.119:368): avc: denied { open } for pid=6229 comm="syz.2.94" path="/dev/sg0" dev="devtmpfs" ino=1126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 125.969665][ T30] audit: type=1400 audit(1788791050.159:369): avc: denied { read } for pid=6229 comm="syz.2.94" dev="nsfs" ino=4026532939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 125.969725][ T30] audit: type=1400 audit(1788791050.159:370): avc: denied { open } for pid=6229 comm="syz.2.94" path="net:[4026532939]" dev="nsfs" ino=4026532939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 125.969756][ T30] audit: type=1400 audit(1788791050.159:371): avc: denied { create } for pid=6229 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.013790][ T30] audit: type=1400 audit(1788791050.199:372): avc: denied { connect } for pid=6229 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.137427][ T30] audit: type=1400 audit(1788791050.329:373): avc: denied { create } for pid=6231 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 126.145637][ T30] audit: type=1400 audit(1788791050.339:374): avc: denied { setopt } for pid=6231 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 126.146721][ T30] audit: type=1400 audit(1788791050.339:375): avc: denied { bind } for pid=6231 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 126.148232][ T30] audit: type=1400 audit(1788791050.339:376): avc: denied { name_bind } for pid=6231 comm="syz.3.101" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 127.294764][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.294846][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.119598][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 131.119632][ T30] audit: type=1400 audit(1788791055.309:396): avc: denied { read write } for pid=6252 comm="syz.3.105" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.119972][ T30] audit: type=1400 audit(1788791055.309:397): avc: denied { open } for pid=6252 comm="syz.3.105" path="/dev/raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.120409][ T30] audit: type=1400 audit(1788791055.309:398): avc: denied { ioctl } for pid=6252 comm="syz.3.105" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.354291][ T5712] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 131.508080][ T5712] usb 4-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 131.590068][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.684730][ T30] audit: type=1400 audit(1788791055.879:399): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 131.750825][ T5712] usb 4-1: config 0 descriptor?? [ 131.761581][ T5712] usb 4-1: Invalid firmware size=18. [ 131.914292][ T30] audit: type=1400 audit(1788791056.019:400): avc: denied { read write } for pid=6258 comm="syz.2.106" name="video8" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 131.914475][ T30] audit: type=1400 audit(1788791056.019:401): avc: denied { open } for pid=6258 comm="syz.2.106" path="/dev/video8" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 132.090386][ T6255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.104330][ T6255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.307078][ T6266] netlink: 20 bytes leftover after parsing attributes in process `syz.2.106'. [ 132.336096][ T30] audit: type=1400 audit(1788791056.529:402): avc: denied { read } for pid=6263 comm="syz.0.108" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 132.360594][ T30] audit: type=1400 audit(1788791056.529:403): avc: denied { open } for pid=6263 comm="syz.0.108" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 135.461643][ T30] audit: type=1400 audit(1788791059.219:404): avc: denied { write } for pid=6278 comm="syz.4.109" name="netlink" dev="proc" ino=4026533348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 135.583541][ T2284] usb 4-1: USB disconnect, device number 4 [ 136.124319][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 136.451374][ T30] audit: type=1400 audit(1788791060.639:405): avc: denied { read write } for pid=6292 comm="syz.4.111" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 136.451425][ T30] audit: type=1400 audit(1788791060.639:406): avc: denied { mount } for pid=6291 comm="syz.1.112" name="/" dev="configfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 136.451518][ T30] audit: type=1400 audit(1788791060.639:407): avc: denied { open } for pid=6292 comm="syz.4.111" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 136.691890][ T30] audit: type=1400 audit(1788791060.879:408): avc: denied { write } for pid=6292 comm="syz.4.111" name="sg0" dev="devtmpfs" ino=1126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 137.066537][ T30] audit: type=1400 audit(1788791061.149:409): avc: denied { create } for pid=6291 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 137.452899][ T6307] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 137.796929][ T5690] libceph: connect (1)[c::]:6789 error -101 [ 137.797069][ T5690] libceph: mon0 (1)[c::]:6789 connect error [ 137.808840][ T5690] libceph: connect (1)[c::]:6789 error -101 [ 137.809826][ T5690] libceph: mon0 (1)[c::]:6789 connect error [ 138.067741][ T5690] libceph: connect (1)[c::]:6789 error -101 [ 138.115600][ T5690] libceph: mon0 (1)[c::]:6789 connect error [ 138.247832][ T30] audit: type=1400 audit(1788791062.409:410): avc: denied { read write } for pid=5598 comm="syz-executor" name="loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 138.272634][ T30] audit: type=1400 audit(1788791062.419:411): avc: denied { open } for pid=5598 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 138.312385][ T30] audit: type=1400 audit(1788791062.419:412): avc: denied { ioctl } for pid=5598 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 138.367788][ T6303] ceph: No mds server is up or the cluster is laggy [ 138.494683][ T30] audit: type=1400 audit(1788791062.689:413): avc: denied { create } for pid=6308 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 138.529762][ T30] audit: type=1400 audit(1788791062.719:414): avc: denied { bind } for pid=6308 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 139.880467][ T6325] IPVS: sh: FWM 3 0x00000003 - no destination available [ 140.722322][ T6330] Illegal XDP return value 4294967294 on prog (id 8) dev syz_tun, expect packet loss! [ 141.778351][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 141.778394][ T30] audit: type=1400 audit(1788791065.549:446): avc: denied { mounton } for pid=6335 comm="syz.3.124" path="/23/file0" dev="tmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 141.778436][ T30] audit: type=1400 audit(1788791065.549:447): avc: denied { mount } for pid=6335 comm="syz.3.124" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 141.784030][ T30] audit: type=1400 audit(1788791065.969:448): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 141.876284][ T30] audit: type=1400 audit(1788791066.069:449): avc: denied { create } for pid=6339 comm="syz.4.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 141.902739][ T30] audit: type=1400 audit(1788791066.089:450): avc: denied { read write } for pid=6339 comm="syz.4.125" name="uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 141.927370][ T30] audit: type=1400 audit(1788791066.119:451): avc: denied { open } for pid=6339 comm="syz.4.125" path="/dev/uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 141.952302][ T30] audit: type=1400 audit(1788791066.139:452): avc: denied { ioctl } for pid=6339 comm="syz.4.125" path="/dev/uinput" dev="devtmpfs" ino=914 ioctlcmd=0x55c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 141.981843][ T30] audit: type=1400 audit(1788791066.169:453): avc: denied { write } for pid=6339 comm="syz.4.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 142.250484][ T6346] netlink: 'syz.4.125': attribute type 13 has an invalid length. [ 142.250572][ T6346] netlink: 'syz.4.125': attribute type 17 has an invalid length. [ 142.269344][ T30] audit: type=1400 audit(1788791066.459:454): avc: denied { create } for pid=6341 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 142.298478][ T30] audit: type=1400 audit(1788791066.489:455): avc: denied { connect } for pid=6341 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 142.307579][ T5613] Bluetooth: hci4: link tx timeout [ 142.307653][ T5613] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.337516][ T52] Bluetooth: hci4: link tx timeout [ 142.337555][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.339250][ T52] Bluetooth: hci4: link tx timeout [ 142.339288][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.344590][ T52] Bluetooth: hci4: link tx timeout [ 142.345281][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.353078][ T52] Bluetooth: hci4: link tx timeout [ 142.353116][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.353172][ T52] Bluetooth: hci4: link tx timeout [ 142.353209][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.356110][ T52] Bluetooth: hci4: link tx timeout [ 142.356146][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.356214][ T52] Bluetooth: hci4: link tx timeout [ 142.356247][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.357508][ T52] Bluetooth: hci4: link tx timeout [ 142.357544][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.357611][ T52] Bluetooth: hci4: link tx timeout [ 142.357644][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.357839][ T52] Bluetooth: hci4: link tx timeout [ 142.357870][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.357931][ T52] Bluetooth: hci4: link tx timeout [ 142.357939][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.379379][ T52] Bluetooth: hci4: link tx timeout [ 142.379405][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.387563][ T6348] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 142.888435][ T6340] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 142.889887][ T6340] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 142.890094][ T6340] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 142.890295][ T6340] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 142.890434][ T6340] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 142.890534][ T6340] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 142.890842][ T6340] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 142.891100][ T6340] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 142.891207][ T6340] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 143.129655][ T6346] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 143.479802][ T6358] netlink: 'syz.4.129': attribute type 12 has an invalid length. [ 144.406350][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 145.064216][ T31] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 145.747956][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 145.757691][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 145.765692][ T31] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 145.777668][ T31] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 145.787321][ T31] usb 1-1: config 0 has no interface number 0 [ 145.794731][ T31] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 145.806198][ T31] usb 1-1: config 0 interface 88 has no altsetting 0 [ 146.378009][ T31] usb 1-1: language id specifier not provided by device, defaulting to English [ 146.407645][ T31] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 146.407681][ T31] usb 1-1: Product: syz [ 146.407699][ T31] usb 1-1: SerialNumber: Љ [ 146.435638][ T31] usb 1-1: config 0 descriptor?? [ 146.449368][ T6366] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 146.848178][ T6386] sg_write: data in/out 417792/136 bytes for SCSI command 0x0-- guessing data in; [ 146.848178][ T6386] program syz.4.134 not setting count and/or reply_len properly [ 147.121466][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 147.121491][ T30] audit: type=1400 audit(1788791071.029:483): avc: denied { append } for pid=6381 comm="syz.4.134" name="sg0" dev="devtmpfs" ino=1126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 147.121558][ T30] audit: type=1400 audit(1788791071.039:484): avc: denied { open } for pid=6381 comm="syz.4.134" path="/dev/sg0" dev="devtmpfs" ino=1126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 147.178577][ T30] audit: type=1400 audit(1788791071.369:485): avc: denied { setopt } for pid=6383 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 147.217931][ T30] audit: type=1400 audit(1788791071.399:486): avc: denied { write } for pid=6383 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 147.219313][ T30] audit: type=1400 audit(1788791071.399:487): avc: denied { connect } for pid=6383 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 147.219468][ T30] audit: type=1400 audit(1788791071.399:488): avc: denied { name_connect } for pid=6383 comm="syz.3.126" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 147.304415][ T30] audit: type=1400 audit(1788791071.499:489): avc: denied { create } for pid=6364 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 147.656401][ T6366] vlan2: entered promiscuous mode [ 147.656428][ T6366] hsr0: entered promiscuous mode [ 147.664530][ T6366] vlan2: entered allmulticast mode [ 147.664576][ T6366] hsr0: entered allmulticast mode [ 147.664611][ T6366] hsr_slave_0: entered allmulticast mode [ 147.732353][ T30] audit: type=1400 audit(1788791071.919:490): avc: denied { ioctl } for pid=6364 comm="syz.0.131" path="socket:[11553]" dev="sockfs" ino=11553 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 147.740105][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.131'. [ 147.783879][ T6389] hsr_slave_0: left promiscuous mode [ 148.478696][ T2284] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 148.529229][ T30] audit: type=1400 audit(1788791072.719:491): avc: denied { create } for pid=6396 comm="syz.4.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 148.595731][ T31] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input7 [ 148.634116][ T2284] usb 3-1: Using ep0 maxpacket: 32 [ 148.781149][ T2284] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 148.804364][ T2284] usb 3-1: config 0 has no interfaces? [ 148.810126][ T2284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.853289][ T2284] usb 3-1: config 0 descriptor?? [ 148.864472][ T30] audit: type=1400 audit(1788791073.059:492): avc: denied { read } for pid=4953 comm="acpid" name="mouse1" dev="devtmpfs" ino=2929 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.990761][ T31] usb 1-1: USB disconnect, device number 2 [ 149.671740][ T6391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.681161][ T6391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.557109][ T6418] capability: warning: `syz.0.141' uses 32-bit capabilities (legacy support in use) [ 150.914597][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 151.150071][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.171462][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.189231][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 151.231613][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 151.231665][ T9] usb 1-1: SerialNumber: syz [ 151.317929][ T2284] usb 3-1: USB disconnect, device number 2 [ 152.778990][ T6422] binder: 6420:6422 ioctl c00c6211 0 returned -14 [ 152.779058][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 152.779108][ T30] audit: type=1400 audit(1788791076.969:496): avc: denied { ioctl } for pid=6420 comm="syz.3.153" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 152.919812][ T30] audit: type=1400 audit(1788791077.109:497): avc: denied { module_request } for pid=6420 comm="syz.3.153" kmod="netdev-syztnl2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 152.970364][ T30] audit: type=1400 audit(1788791077.159:498): avc: denied { create } for pid=6411 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 154.029844][ T9] hub 1-1:1.0: bad descriptor, ignoring hub [ 154.041446][ T30] audit: type=1400 audit(1788791078.229:499): avc: denied { sys_module } for pid=6420 comm="syz.3.153" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 154.044903][ T9] hub 1-1:1.0: probe with driver hub failed with error -5 [ 154.045299][ T9] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 154.045311][ T9] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 154.045326][ T9] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 154.129303][ T6425] lo speed is unknown, defaulting to 1000 [ 154.406256][ T5690] usb 1-1: USB disconnect, device number 3 [ 154.509686][ T30] audit: type=1400 audit(1788791078.699:500): avc: denied { getopt } for pid=6439 comm="syz.0.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 154.683265][ T6443] lo speed is unknown, defaulting to 1000 [ 154.997587][ T6445] lo speed is unknown, defaulting to 1000 [ 155.648926][ T30] audit: type=1400 audit(1788791079.839:501): avc: denied { mount } for pid=6453 comm="syz.1.149" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 155.734176][ T2284] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 155.826805][ T6459] serio: Serial port ttyS3 [ 156.188812][ T2284] usb 3-1: Using ep0 maxpacket: 32 [ 156.230634][ T2284] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 156.282017][ T2284] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 156.698626][ T6458] netlink: 'syz.3.150': attribute type 5 has an invalid length. [ 156.709427][ T2284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.709462][ T2284] usb 3-1: Product: syz [ 156.709486][ T2284] usb 3-1: Manufacturer: syz [ 156.709506][ T2284] usb 3-1: SerialNumber: syz [ 156.737035][ T2284] usb 3-1: config 0 descriptor?? [ 156.738401][ T6449] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 156.753136][ T2284] hub 3-1:0.0: bad descriptor, ignoring hub [ 156.753170][ T2284] hub 3-1:0.0: probe with driver hub failed with error -5 [ 156.768508][ T30] audit: type=1400 audit(1788791080.959:502): avc: denied { sqpoll } for pid=6451 comm="syz.3.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 156.834776][ T2284] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9 [ 156.942801][ T30] audit: type=1400 audit(1788791081.129:503): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 157.045068][ T2284] usb 3-1: USB disconnect, device number 3 [ 157.045135][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 157.087159][ T30] audit: type=1400 audit(1788791081.279:504): avc: denied { write } for pid=6464 comm="syz.0.151" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 157.103103][ T30] audit: type=1400 audit(1788791081.279:505): avc: denied { ioctl } for pid=6464 comm="syz.0.151" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 157.946870][ T6469] lo speed is unknown, defaulting to 1000 [ 158.133826][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 158.134364][ T30] audit: type=1400 audit(1788791082.319:511): avc: denied { read write } for pid=6472 comm="syz.1.154" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 158.136098][ T30] audit: type=1400 audit(1788791082.329:512): avc: denied { open } for pid=6472 comm="syz.1.154" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 158.160937][ T30] audit: type=1400 audit(1788791082.349:513): avc: denied { read write } for pid=6475 comm="syz.4.148" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 158.163136][ T30] audit: type=1400 audit(1788791082.349:514): avc: denied { open } for pid=6475 comm="syz.4.148" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 158.172514][ T30] audit: type=1400 audit(1788791082.359:515): avc: denied { mounton } for pid=6475 comm="syz.4.148" path="/33/file0/file0" dev="tmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 158.187950][ T30] audit: type=1400 audit(1788791082.379:516): avc: denied { mount } for pid=6475 comm="syz.4.148" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 158.237397][ T30] audit: type=1400 audit(1788791082.429:517): avc: denied { accept } for pid=6472 comm="syz.1.154" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.369118][ T6484] process 'syz.4.148' launched './file0' with NULL argv: empty string added [ 158.394983][ T30] audit: type=1400 audit(1788791082.579:518): avc: denied { unmount } for pid=6475 comm="syz.4.148" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 158.489195][ T6477] xt_policy: too many policy elements [ 158.612584][ T30] audit: type=1400 audit(1788791082.779:519): avc: denied { execute } for pid=6482 comm="syz.3.156" dev="tmpfs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 158.612776][ T30] audit: type=1400 audit(1788791082.779:520): avc: denied { execute_no_trans } for pid=6482 comm="syz.3.156" path=2F6D656D66643A5B0BDB58AE5B35A990FF631F1AA9FDFAADD16D64E7E27F9BD55210F3B6FF54BFD1C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 159.370256][ T6502] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 159.664270][ T5697] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 159.886475][ T6506] netlink: 'syz.1.161': attribute type 12 has an invalid length. [ 159.963555][ T5697] usb 3-1: Using ep0 maxpacket: 16 [ 159.985337][ T5697] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 159.987920][ T5697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 159.987944][ T5697] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 159.987961][ T5697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 159.987978][ T5697] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 159.987996][ T5697] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 224 [ 159.991482][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.991500][ T5697] usb 3-1: Product: syz [ 159.991511][ T5697] usb 3-1: Manufacturer: syz [ 159.991522][ T5697] usb 3-1: SerialNumber: syz [ 160.000081][ T5697] usb 3-1: config 0 descriptor?? [ 160.001174][ T6502] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 162.246830][ T5697] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 162.246887][ T5697] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 162.247215][ T5697] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 162.247380][ T5697] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 162.247516][ T5697] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 162.255771][ T5697] usb 3-1: USB disconnect, device number 4 [ 162.258648][ T5697] mcba_usb 3-1:0.0 can0: device disconnected [ 163.351070][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 163.351101][ T30] audit: type=1400 audit(1788791087.539:527): avc: denied { bind } for pid=6509 comm="syz.4.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 163.365161][ T6515] Bluetooth: MGMT ver 1.23 [ 163.393666][ T30] audit: type=1400 audit(1788791087.579:528): avc: denied { shutdown } for pid=6513 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 163.448346][ T30] audit: type=1400 audit(1788791087.639:529): avc: denied { create } for pid=6513 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 163.491019][ T30] audit: type=1400 audit(1788791087.679:530): avc: denied { write } for pid=6513 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 163.574735][ T6522] syz.1.167 uses obsolete (PF_INET,SOCK_PACKET) [ 163.585036][ T6522] netlink: 'syz.1.167': attribute type 1 has an invalid length. [ 163.594867][ T6522] netlink: 756 bytes leftover after parsing attributes in process `syz.1.167'. [ 163.819767][ T30] audit: type=1400 audit(1788791088.009:531): avc: denied { read } for pid=6523 comm="syz.2.169" name="sg0" dev="devtmpfs" ino=1126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 163.820291][ T30] audit: type=1400 audit(1788791088.009:532): avc: denied { create } for pid=6523 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 163.941282][ T30] audit: type=1400 audit(1788791088.109:533): avc: denied { create } for pid=6525 comm="syz.4.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 163.941510][ T30] audit: type=1400 audit(1788791088.109:534): avc: denied { getopt } for pid=6525 comm="syz.4.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 164.394356][ T30] audit: type=1400 audit(1788791088.589:535): avc: denied { bind } for pid=6523 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 164.396142][ T30] audit: type=1400 audit(1788791088.589:536): avc: denied { setopt } for pid=6523 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 165.890765][ T6544] batman_adv: batadv0: Interface activated: vxlan0 [ 166.054770][ T1111] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.078169][ T1111] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.144590][ T5848] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.153455][ T5848] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.943441][ T6557] netlink: 830 bytes leftover after parsing attributes in process `syz.2.173'. [ 168.117094][ T6573] IPVS: sh: FWM 3 0x00000003 - no destination available [ 172.793212][ T6611] comedi comedi1: Minor 2 could not be opened [ 173.049826][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 173.049874][ T30] audit: type=1400 audit(1788791097.239:549): avc: denied { read } for pid=6609 comm="syz.2.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 173.053718][ T30] audit: type=1400 audit(1788791097.239:550): avc: denied { write } for pid=6609 comm="syz.2.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.350107][ T30] audit: type=1400 audit(1788791098.539:551): avc: denied { mount } for pid=6613 comm="syz.4.189" name="/" dev="hugetlbfs" ino=10939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 176.440667][ T6626] lo speed is unknown, defaulting to 1000 [ 177.494184][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 177.781529][ T30] audit: type=1400 audit(1788791101.969:552): avc: denied { mount } for pid=6631 comm="syz.2.192" name="/" dev="configfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 177.782684][ T30] audit: type=1400 audit(1788791101.969:553): avc: denied { search } for pid=6631 comm="syz.2.192" name="/" dev="configfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 177.782996][ T30] audit: type=1400 audit(1788791101.969:554): avc: denied { search } for pid=6631 comm="syz.2.192" name="usb_gadget" dev="configfs" ino=1258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 177.785839][ T30] audit: type=1400 audit(1788791101.969:555): avc: denied { write search } for pid=6631 comm="syz.2.192" name="usb_gadget" dev="configfs" ino=1258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 177.809124][ T30] audit: type=1400 audit(1788791101.979:556): avc: denied { add_name } for pid=6631 comm="syz.2.192" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 177.809165][ T30] audit: type=1400 audit(1788791101.979:557): avc: denied { create } for pid=6631 comm="syz.2.192" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 177.809198][ T30] audit: type=1400 audit(1788791101.999:558): avc: denied { search } for pid=6631 comm="syz.2.192" name="/" dev="configfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 178.148718][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 178.148757][ T30] audit: type=1400 audit(1788791102.339:573): avc: denied { ioctl } for pid=6637 comm="syz.2.204" path="socket:[10994]" dev="sockfs" ino=10994 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 178.588065][ T30] audit: type=1400 audit(1788791102.769:574): avc: denied { create } for pid=6635 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 178.604524][ T30] audit: type=1400 audit(1788791102.789:575): avc: denied { name_connect } for pid=6637 comm="syz.2.204" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 179.536047][ T30] audit: type=1400 audit(1788791103.729:576): avc: denied { mount } for pid=6652 comm="syz.0.197" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 179.560321][ T30] audit: type=1400 audit(1788791103.749:577): avc: denied { search } for pid=6652 comm="syz.0.197" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 179.582559][ T30] audit: type=1400 audit(1788791103.769:578): avc: denied { read write } for pid=6652 comm="syz.0.197" name="dynamic_events" dev="tracefs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 179.582619][ T30] audit: type=1400 audit(1788791103.769:579): avc: denied { open } for pid=6652 comm="syz.0.197" path="/34/tracefs/dynamic_events" dev="tracefs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 179.616210][ T6655] syzkaller0: entered promiscuous mode [ 179.616229][ T6655] syzkaller0: entered allmulticast mode [ 181.336121][ T30] audit: type=1400 audit(1788791105.529:580): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 181.364266][ T6667] lo speed is unknown, defaulting to 1000 [ 182.614235][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 185.064977][ T5689] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 185.735430][ T5689] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 185.782284][ T5689] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 185.782343][ T5689] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.782376][ T5689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.187272][ T6685] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 186.297714][ T6692] overlayfs: missing 'lowerdir' [ 186.476584][ T5609] Bluetooth: hci2: command 0x0406 tx timeout [ 186.480381][ T5609] Bluetooth: hci1: command 0x0406 tx timeout [ 186.489615][ T5613] Bluetooth: hci0: command 0x0406 tx timeout [ 187.290453][ T5689] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 187.291321][ T5689] usb 5-1: invalid MIDI in EP 0 [ 187.362509][ T6685] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 187.451606][ T6685] IPVS: sh: FWM 3 0x00000003 - no destination available [ 187.668159][ T30] audit: type=1400 audit(1788791111.859:581): avc: denied { create } for pid=6695 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 187.697477][ T30] audit: type=1400 audit(1788791111.879:582): avc: denied { listen } for pid=6695 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 187.724482][ T30] audit: type=1400 audit(1788791111.919:583): avc: denied { connect } for pid=6695 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 187.759932][ T30] audit: type=1400 audit(1788791111.949:584): avc: denied { accept } for pid=6695 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 187.918430][ T5689] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 187.934816][ T5689] usb 5-1: USB disconnect, device number 3 [ 188.825753][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.856559][ T6704] lo speed is unknown, defaulting to 1000 [ 189.924853][ T30] audit: type=1400 audit(1788791114.059:585): avc: denied { mount } for pid=6709 comm="syz.2.220" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 189.947508][ T30] audit: type=1400 audit(1788791114.059:586): avc: denied { mount } for pid=6709 comm="syz.2.220" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 190.200559][ T6708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.268481][ T30] audit: type=1400 audit(1788791114.459:587): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 190.300518][ T30] audit: type=1400 audit(1788791114.489:588): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 190.606104][ T6726] IPVS: set_ctl: invalid protocol: 60 172.20.20.27:20002 [ 190.610839][ T30] audit: type=1400 audit(1788791114.799:589): avc: denied { setopt } for pid=6720 comm="syz.2.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 190.686858][ T6727] kernel profiling enabled (shift: 5) [ 190.834139][ T30] audit: type=1400 audit(1788791115.009:590): avc: denied { wake_alarm } for pid=6725 comm="syz.3.215" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 190.964558][ T5689] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 191.465018][ T5689] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 191.477795][ T5689] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 191.477851][ T5689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.672150][ T6738] CIFS: Attempting to mount //127.0.0.1/share [ 191.731205][ T6739] comedi comedi1: Minor 2 could not be opened [ 192.076015][ T5689] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 192.076057][ T5689] usb 1-1: Manufacturer: syz [ 192.130919][ T5689] usb 1-1: config 0 descriptor?? [ 192.204275][ T5689] rc_core: IR keymap rc-hauppauge not found [ 192.204303][ T5689] Registered IR keymap rc-empty [ 192.213628][ T5689] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 192.217003][ T5689] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10 [ 192.241910][ T6738] CIFS: VFS: Error connecting to socket. Aborting operation. [ 192.376940][ T6738] CIFS: VFS: cifs_mount failed w/return code = -4 [ 192.941686][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 192.947881][ T30] audit: type=1400 audit(1788791117.129:592): avc: denied { create } for pid=6722 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 192.954179][ T5690] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 192.966583][ T6724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.966915][ T6724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.003646][ T25] usb 1-1: USB disconnect, device number 4 [ 193.137436][ T5690] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 193.140451][ T5690] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.140471][ T5690] usb 4-1: config 0 has no interfaces? [ 193.140493][ T5690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.146754][ T30] audit: type=1400 audit(1788791117.329:593): avc: denied { mount } for pid=6748 comm="syz.1.218" name="/" dev="ramfs" ino=12413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 193.155014][ T5690] usb 4-1: config 0 descriptor?? [ 193.335497][ T6753] ======================================================= [ 193.335497][ T6753] WARNING: The mand mount option has been deprecated and [ 193.335497][ T6753] and is ignored by this kernel. Remove the mand [ 193.335497][ T6753] option from the mount to silence this warning. [ 193.335497][ T6753] ======================================================= [ 194.363938][ T30] audit: type=1400 audit(1788791118.549:594): avc: denied { setattr } for pid=6758 comm="syz.1.222" path="/dev/dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 194.393937][ T6763] netlink: 'syz.0.223': attribute type 5 has an invalid length. [ 194.499177][ T30] audit: type=1400 audit(1788791118.689:595): avc: denied { name_bind } for pid=6770 comm="syz.2.225" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 195.407250][ T30] audit: type=1400 audit(1788791119.599:596): avc: denied { create } for pid=6768 comm="syz.4.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 195.440859][ T30] audit: type=1400 audit(1788791119.629:597): avc: denied { write } for pid=6768 comm="syz.4.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 195.440914][ T30] audit: type=1400 audit(1788791119.629:598): avc: denied { nlmsg_write } for pid=6768 comm="syz.4.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 196.958168][ T6788] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 197.534353][ T983] usb 4-1: USB disconnect, device number 5 [ 198.184199][ T30] audit: type=1400 audit(1788791122.369:599): avc: denied { create } for pid=6793 comm="syz.3.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 198.482792][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 198.916353][ T25] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 198.957577][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.957633][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.246483][ T6807] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 199.308077][ T6807] rtrs_client L2095: : Failed to resolve address, err: -ENODEV [ 199.310716][ T6807] rtrs_client L2636: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 200.169453][ T25] wacom 0003:056A:033B.0002: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 200.678278][ T25] wacom 0003:056A:033B.0002: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.2-1/input0 [ 200.680320][ T25] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:056A:033B.0002/input/input11 [ 200.793718][ T6799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.794232][ T6799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.912138][ T30] audit: type=1400 audit(1788791125.099:600): avc: denied { append } for pid=6813 comm="syz.1.236" name="comedi1" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 201.213525][ T5697] usb 3-1: USB disconnect, device number 5 [ 202.483551][ T30] audit: type=1400 audit(1788791126.659:601): avc: denied { read write } for pid=6818 comm="syz.2.237" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 202.483607][ T30] audit: type=1400 audit(1788791126.659:602): avc: denied { open } for pid=6818 comm="syz.2.237" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 202.483652][ T30] audit: type=1400 audit(1788791126.659:603): avc: denied { ioctl } for pid=6818 comm="syz.2.237" path="/dev/ptp0" dev="devtmpfs" ino=1264 ioctlcmd=0x3d11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 202.599340][ T30] audit: type=1400 audit(1788791126.789:604): avc: denied { firmware_load } for pid=6818 comm="syz.2.237" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 202.828139][ T6836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.870944][ T6835] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.921169][ T6836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.999086][ T6820] syz.2.237 (6820) used greatest stack depth: 18704 bytes left [ 203.504374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 204.446729][ T30] audit: type=1400 audit(1788791128.329:605): avc: denied { bind } for pid=6843 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 204.446805][ T30] audit: type=1400 audit(1788791128.339:606): avc: denied { node_bind } for pid=6843 comm="syz.2.242" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 204.828651][ T6853] netlink: 24 bytes leftover after parsing attributes in process `syz.3.243'. [ 205.188254][ T6836] erspan0: entered promiscuous mode [ 205.188926][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'. [ 205.995065][ T30] audit: type=1400 audit(1788791130.189:607): avc: denied { read } for pid=6870 comm="syz.2.248" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 207.050184][ T30] audit: type=1400 audit(1788791131.239:608): avc: denied { open } for pid=6870 comm="syz.2.248" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 208.257632][ T6887] IPVS: set_ctl: invalid protocol: 60 172.20.20.27:20002 [ 209.707603][ T30] audit: type=1400 audit(1788791133.899:609): avc: denied { create } for pid=6884 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 210.194922][ T6898] xt_TCPMSS: Only works on TCP SYN packets [ 210.878105][ T6885] FAULT_INJECTION: forcing a failure. [ 210.878105][ T6885] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 210.878150][ T6885] CPU: 1 UID: 0 PID: 6885 Comm: syz.1.251 Not tainted syzkaller #0 PREEMPT(full) [ 210.878173][ T6885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 210.878191][ T6885] Call Trace: [ 210.878197][ T6885] [ 210.878210][ T6885] dump_stack_lvl+0x100/0x190 [ 210.878243][ T6885] should_fail_ex.cold+0x5/0xa [ 210.878271][ T6885] _copy_from_user+0x2e/0xd0 [ 210.878303][ T6885] __sys_bpf+0x2f5/0x4a30 [ 210.878328][ T6885] ? __pfx___sys_bpf+0x10/0x10 [ 210.878343][ T6885] ? find_held_lock+0x2b/0x80 [ 210.878368][ T6885] ? futex_wake+0x4ea/0x5e0 [ 210.878409][ T6885] ? rcu_read_lock_any_held+0x6a/0x90 [ 210.878434][ T6885] ? find_held_lock+0x2b/0x80 [ 210.878457][ T6885] ? ksys_write+0x190/0x250 [ 210.878474][ T6885] ? ksys_write+0x190/0x250 [ 210.878506][ T6885] ? __x64_sys_futex+0x34f/0x4d0 [ 210.878529][ T6885] ? __x64_sys_futex+0x358/0x4d0 [ 210.878557][ T6885] ? xfd_validate_state+0x129/0x190 [ 210.878580][ T6885] ? __x64_sys_bpf+0xce/0x140 [ 210.878597][ T6885] __x64_sys_bpf+0xce/0x140 [ 210.878615][ T6885] ? do_syscall_64+0xae/0x790 [ 210.878640][ T6885] do_syscall_64+0x123/0x790 [ 210.878666][ T6885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.878685][ T6885] RIP: 0033:0x7fca82d9e159 [ 210.878700][ T6885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.878717][ T6885] RSP: 002b:00007fca83c14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 210.878736][ T6885] RAX: ffffffffffffffda RBX: 00007fca83025fa0 RCX: 00007fca82d9e159 [ 210.878754][ T6885] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 210.878765][ T6885] RBP: 00007fca82e35024 R08: 0000000000000000 R09: 0000000000000000 [ 210.878777][ T6885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.878789][ T6885] R13: 00007fca83026038 R14: 00007fca83025fa0 R15: 00007ffeeab8fe98 [ 210.878815][ T6885] [ 211.581295][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 212.662600][ T9] usb 2-1: device descriptor read/64, error -71 [ 213.024324][ T5697] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 213.626942][ T30] audit: type=1400 audit(1788791137.819:610): avc: denied { bind } for pid=6912 comm="syz.1.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 213.627916][ T30] audit: type=1400 audit(1788791137.819:611): avc: denied { setopt } for pid=6912 comm="syz.1.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 213.704772][ T5697] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 213.952161][ T5697] usb 1-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 213.952199][ T5697] usb 1-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 213.952221][ T5697] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 213.952237][ T5697] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 213.952258][ T5697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.268842][ T30] audit: type=1400 audit(1788791138.449:612): avc: denied { mount } for pid=6922 comm="syz.3.260" name="/" dev="rpc_pipefs" ino=13601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 215.294948][ T30] audit: type=1400 audit(1788791139.439:613): avc: denied { read } for pid=6908 comm="syz.0.256" dev="sockfs" ino=13587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 215.522053][ T6928] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 215.641269][ T6935] lo speed is unknown, defaulting to 1000 [ 215.865486][ T6937] lo speed is unknown, defaulting to 1000 [ 216.377796][ T5697] usb 1-1: string descriptor 0 read error: -71 [ 216.427063][ T30] audit: type=1400 audit(1788791140.619:614): avc: denied { ioctl } for pid=6941 comm="syz.4.257" path="socket:[13638]" dev="sockfs" ino=13638 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 216.560716][ T6944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.257'. [ 216.850576][ T5697] usb 1-1: USB disconnect, device number 5 [ 217.453240][ T5590] udevd[5590]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.053837][ T6959] netlink: 'syz.2.265': attribute type 5 has an invalid length. [ 218.117171][ T6944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.117284][ T6944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.143800][ T6944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.143824][ T6944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.833228][ T6965] syz_tun: entered allmulticast mode [ 219.163751][ T6967] netlink: 16 bytes leftover after parsing attributes in process `syz.1.268'. [ 220.438109][ T5848] IPVS: starting estimator thread 0... [ 220.524190][ T6978] IPVS: using max 41 ests per chain, 98400 per kthread [ 222.370806][ T6992] tipc: Started in network mode [ 222.375826][ T6992] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 222.383534][ T6992] tipc: Enabled bearer , priority 0 [ 222.417028][ T6989] input: syz1 as /devices/virtual/input/input14 [ 222.546675][ T30] audit: type=1400 audit(1788791146.739:615): avc: denied { ioctl } for pid=6993 comm="syz.3.275" path="socket:[12865]" dev="sockfs" ino=12865 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 222.639746][ T6992] lo speed is unknown, defaulting to 1000 [ 223.583773][ T5697] tipc: Node number set to 43690 [ 224.723732][ T7017] syz.1.280 (7017): attempted to duplicate a private mapping with mremap. This is not supported. [ 224.907892][ T30] audit: type=1400 audit(1788791149.099:616): avc: denied { execute } for pid=7012 comm="syz.3.279" path="/syzcgroup/cpu/syz3/memory.limit_in_bytes" dev="cgroup" ino=308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 227.837909][ T7038] netlink: 'syz.1.283': attribute type 1 has an invalid length. [ 227.852343][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.283'. [ 227.944226][ T6280] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 228.154646][ T6280] usb 3-1: Using ep0 maxpacket: 32 [ 228.162738][ T6280] usb 3-1: unable to get BOS descriptor or descriptor too short [ 228.162796][ T6280] usb 3-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice= 0.40 [ 228.174325][ T52] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 228.180558][ T6280] usb 3-1: config 1 has an invalid interface number: 242 but max is 2 [ 228.180584][ T6280] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.180607][ T6280] usb 3-1: config 1 has no interface number 2 [ 228.218050][ T6280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.218084][ T6280] usb 3-1: Product: syz [ 228.218110][ T6280] usb 3-1: Manufacturer: syz [ 228.218127][ T6280] usb 3-1: SerialNumber: syz [ 228.325737][ T30] audit: type=1400 audit(1788791152.519:617): avc: denied { bind } for pid=7051 comm="syz.0.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 228.340355][ T30] audit: type=1400 audit(1788791152.529:618): avc: denied { listen } for pid=7051 comm="syz.0.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 228.399658][ T7058] netlink: 'syz.4.287': attribute type 5 has an invalid length. [ 228.501186][ T7042] warning: `syz.2.284' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 228.611143][ T7061] lo speed is unknown, defaulting to 1000 [ 228.687068][ T7042] input: syz0 as /devices/virtual/input/input15 [ 228.764320][ T983] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 228.914939][ T983] usb 1-1: Using ep0 maxpacket: 8 [ 228.915491][ T983] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 228.916098][ T983] usb 1-1: config 0 has no interfaces? [ 228.932416][ T983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.932439][ T983] usb 1-1: Product: syz [ 228.932452][ T983] usb 1-1: Manufacturer: syz [ 228.932464][ T983] usb 1-1: SerialNumber: syz [ 228.983899][ T983] usb 1-1: config 0 descriptor?? [ 228.997838][ T30] audit: type=1400 audit(1788791153.189:619): avc: denied { search } for pid=7069 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.029867][ T30] audit: type=1400 audit(1788791153.199:620): avc: denied { search } for pid=7069 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.029935][ T30] audit: type=1400 audit(1788791153.219:621): avc: denied { search } for pid=7069 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.029968][ T30] audit: type=1400 audit(1788791153.219:622): avc: denied { search } for pid=7069 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.094725][ T30] audit: type=1400 audit(1788791153.289:623): avc: denied { read } for pid=7073 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.100287][ T30] audit: type=1400 audit(1788791153.289:624): avc: denied { read open } for pid=7073 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.102040][ T30] audit: type=1400 audit(1788791153.289:625): avc: denied { getattr } for pid=7073 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.131386][ T30] audit: type=1400 audit(1788791153.319:626): avc: denied { getattr } for pid=7073 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1806 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 229.161253][ T6280] usb 3-1: USB disconnect, device number 6 [ 229.167538][ T7072] serio: Serial port ttyS3 [ 229.346999][ T5591] udevd[5591]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.660907][ T6280] libceph: connect (1)[c::]:6789 error -101 [ 229.683637][ T6280] libceph: mon0 (1)[c::]:6789 connect error [ 229.958129][ T5689] libceph: connect (1)[c::]:6789 error -101 [ 229.966308][ T5689] libceph: mon0 (1)[c::]:6789 connect error [ 230.440948][ T7082] ceph: No mds server is up or the cluster is laggy [ 230.496112][ T6280] libceph: connect (1)[c::]:6789 error -101 [ 230.496306][ T6280] libceph: mon0 (1)[c::]:6789 connect error [ 230.519613][ T7089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.290'. [ 230.580557][ T7089] bridge_slave_1: left allmulticast mode [ 230.580594][ T7089] bridge_slave_1: left promiscuous mode [ 230.581494][ T7089] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.901908][ T7089] bridge_slave_0: left allmulticast mode [ 231.901959][ T7089] bridge_slave_0: left promiscuous mode [ 231.902150][ T7089] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.062873][ T7099] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48000 [ 232.516562][ T7099] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 232.533660][ T7099] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 232.545475][ T7099] page_type: f5(slab) [ 232.550238][ T7099] raw: 00fff00000000040 ffff88801c034140 dead000000000100 dead000000000122 [ 232.550268][ T7099] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 232.560071][ T7099] head: 00fff00000000040 ffff88801c034140 dead000000000100 dead000000000122 [ 232.560085][ T7099] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 232.560096][ T7099] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 232.560105][ T7099] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 232.560112][ T7099] page dumped because: unmovable page [ 232.560118][ T7099] page_owner tracks the page as allocated [ 232.560122][ T7099] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6862, tgid 6862 (kworker/u8:20), ts 216774385951 [ 232.560144][ T7099] post_alloc_hook+0xfd/0x120 [ 232.560164][ T7099] get_page_from_freelist+0x110d/0x35d0 [ 232.560180][ T7099] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 232.560197][ T7099] new_slab+0xa9/0x6e0 [ 232.560212][ T7099] refill_objects+0xe3/0x410 [ 232.560229][ T7099] __pcs_replace_empty_main+0x35e/0x650 [ 232.560244][ T7099] __kmalloc_node_track_caller_noprof+0x6a8/0x870 [ 232.560257][ T7099] kmalloc_reserve+0xe8/0x350 [ 232.560271][ T7099] __alloc_skb+0x185/0x710 [ 232.560280][ T7099] nsim_dev_trap_report_work+0x2af/0xd20 [ 232.560293][ T7099] process_one_work+0xac7/0x1b10 [ 232.560308][ T7099] worker_thread+0x5ef/0xe50 [ 232.560322][ T7099] kthread+0x373/0x450 [ 232.560336][ T7099] ret_from_fork+0x730/0xd60 [ 232.560348][ T7099] ret_from_fork_asm+0x1a/0x30 [ 232.560360][ T7099] page last free pid 6944 tgid 6941 ts 216558104628 stack trace: [ 232.560368][ T7099] __free_frozen_pages+0x79f/0x10f0 [ 232.560382][ T7099] qlist_free_all+0x47/0xf0 [ 232.560392][ T7099] kasan_quarantine_reduce+0x1a0/0x1f0 [ 232.560403][ T7099] __kasan_slab_alloc+0x69/0x90 [ 232.560414][ T7099] kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 232.560425][ T7099] __alloc_skb+0x140/0x710 [ 232.560434][ T7099] netlink_alloc_large_skb+0x69/0x150 [ 232.560451][ T7099] netlink_sendmsg+0x680/0xda0 [ 232.560460][ T7099] ____sys_sendmsg+0xa4d/0xbe0 [ 232.560473][ T7099] ___sys_sendmsg+0x190/0x1e0 [ 232.560487][ T7099] __sys_sendmsg+0x160/0x210 [ 232.560499][ T7099] do_syscall_64+0x123/0x790 [ 232.560512][ T7099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.617245][ T5697] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 232.617263][ T5697] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 232.618862][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 232.834285][ T6969] syz_tun: left allmulticast mode [ 233.766595][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 233.766677][ T30] audit: type=1400 audit(1788791157.959:645): avc: denied { read } for pid=7114 comm="syz.3.296" name="vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 233.766717][ T30] audit: type=1400 audit(1788791157.959:646): avc: denied { open } for pid=7114 comm="syz.3.296" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 233.840698][ T30] audit: type=1400 audit(1788791157.959:647): avc: denied { ioctl } for pid=7114 comm="syz.3.296" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 234.171338][ T5782] usb 1-1: USB disconnect, device number 6 [ 234.184781][ T30] audit: type=1400 audit(1788791158.379:648): avc: denied { create } for pid=7126 comm="syz.4.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 234.498022][ T30] audit: type=1400 audit(1788791158.689:649): avc: denied { write } for pid=7117 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.586611][ T7142] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 234.617048][ T7142] CIFS: Attempting to mount //127.0.0.1/share [ 234.658621][ T7142] CIFS: VFS: Error connecting to socket. Aborting operation. [ 234.658807][ T7142] CIFS: VFS: cifs_mount failed w/return code = -111 [ 234.934095][ T5697] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 234.934132][ T5697] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 234.955815][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 235.871378][ T30] audit: type=1400 audit(1788791160.059:650): avc: denied { write } for pid=7153 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.776829][ T7163] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 236.820757][ T7163] rtrs_client L2095: : Failed to resolve address, err: -ENODEV [ 236.821225][ T7163] rtrs_client L2636: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 237.334602][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 237.334890][ T5697] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 237.334951][ T5697] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 238.358775][ T7175] /dev/nullb0: Can't open blockdev [ 238.377895][ T30] audit: type=1400 audit(1788791162.539:651): avc: denied { mounton } for pid=7171 comm="syz.4.307" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 240.054386][ T5602] Bluetooth: hci3: command 0x0406 tx timeout [ 240.054406][ T5697] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 240.056077][ T5697] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 240.071036][ T30] audit: type=1400 audit(1788791164.259:652): avc: denied { write } for pid=7195 comm="syz.1.313" name="functions" dev="configfs" ino=12049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 240.071895][ T7197] LUN: removable file: (no medium) [ 240.396337][ T5602] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 240.415817][ T30] audit: type=1400 audit(1788791164.609:653): avc: denied { write } for pid=7158 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.539405][ T7203] 9p: Bad value for 'rfdno' [ 241.182513][ T7207] bridge_slave_0: left allmulticast mode [ 241.182562][ T7207] bridge_slave_0: left promiscuous mode [ 241.182755][ T7207] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.239181][ T30] audit: type=1400 audit(1788791165.429:654): avc: denied { write } for pid=7210 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.273954][ T30] audit: type=1400 audit(1788791165.459:655): avc: denied { watch watch_reads } for pid=7206 comm="syz.3.316" path="/" dev="ramfs" ino=14144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 241.367585][ T30] audit: type=1400 audit(1788791165.559:656): avc: denied { connect } for pid=7204 comm="syz.0.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 241.401326][ T30] audit: type=1400 audit(1788791165.589:657): avc: denied { write } for pid=7204 comm="syz.0.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 241.506023][ T7207] bridge_slave_1: left allmulticast mode [ 241.507122][ T7207] bridge_slave_1: left promiscuous mode [ 241.508050][ T7207] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.872324][ T7207] bond0: (slave bond_slave_0): Releasing backup interface [ 241.897198][ T7207] bond0: (slave bond_slave_1): Releasing backup interface [ 241.927116][ T7207] team0: Port device team_slave_0 removed [ 241.943921][ T7207] team0: Port device team_slave_1 removed [ 241.951839][ T7207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.961732][ T7207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.979097][ T7207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.986819][ T7207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.013858][ T7207] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 242.144759][ T7214] team0: Port device xfrm0 added [ 242.149952][ T7220] tipc: Started in network mode [ 242.154941][ T7220] tipc: Node identity 7aebdd2ce37e, cluster identity 4711 [ 242.162462][ T7220] tipc: Enabled bearer , priority 0 [ 242.764616][ T30] audit: type=1400 audit(1788791166.949:658): avc: denied { bind } for pid=7243 comm="syz.4.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 242.800333][ T7244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.321'. [ 243.292620][ T30] audit: type=1400 audit(1788791167.219:659): avc: denied { write } for pid=7246 comm="syz.0.322" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 243.311834][ T5602] Bluetooth: hci4: command 0x0406 tx timeout [ 243.845979][ T5697] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 243.846019][ T5697] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 243.874068][ T5782] tipc: Node number set to 2576735532 [ 243.940743][ T7257] tipc: Enabling of bearer rejected, already enabled [ 244.155110][ T30] audit: type=1800 audit(1788791168.349:660): pid=7218 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.316" name="bus" dev="ramfs" ino=14145 res=0 errno=0 [ 244.327613][ T7262] lo speed is unknown, defaulting to 1000 [ 244.395332][ T30] audit: type=1400 audit(1788791168.589:661): avc: denied { read } for pid=7266 comm="syz.4.326" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 244.876373][ T7264] netlink: 68 bytes leftover after parsing attributes in process `syz.2.325'. [ 245.540750][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 245.547373][ T30] audit: type=1400 audit(1788791169.729:665): avc: denied { write } for pid=7232 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.677737][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.325'. [ 245.860224][ T30] audit: type=1400 audit(1788791170.049:666): avc: denied { write } for pid=7281 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.947875][ T30] audit: type=1400 audit(1788791173.139:667): avc: denied { write } for pid=7298 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.711503][ T30] audit: type=1400 audit(1788791173.899:668): avc: denied { accept } for pid=7309 comm="syz.2.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 250.374811][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.539462][ T30] audit: type=1400 audit(1788791174.729:669): avc: denied { write } for pid=7335 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.154498][ T30] audit: type=1400 audit(1788791175.309:670): avc: denied { bind } for pid=7345 comm="syz.1.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 251.238921][ T7351] netlink: 'syz.1.340': attribute type 11 has an invalid length. [ 251.240160][ T7351] netlink: 220 bytes leftover after parsing attributes in process `syz.1.340'. [ 251.249454][ T30] audit: type=1400 audit(1788791175.409:671): avc: denied { getopt } for pid=7345 comm="syz.1.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 251.559186][ T7341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.023677][ T30] audit: type=1400 audit(1788791176.209:672): avc: denied { name_bind } for pid=7345 comm="syz.1.340" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 252.046138][ T30] audit: type=1400 audit(1788791176.209:673): avc: denied { node_bind } for pid=7345 comm="syz.1.340" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 253.378896][ T30] audit: type=1400 audit(1788791176.659:674): avc: denied { audit_write } for pid=7358 comm="syz.3.342" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 253.400110][ T30] audit: type=1400 audit(1788791176.659:675): avc: denied { watch } for pid=7358 comm="syz.3.342" path="/65/bus" dev="tmpfs" ino=373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 253.422784][ T30] audit: type=1400 audit(1788791176.659:676): avc: denied { watch_sb watch_reads } for pid=7358 comm="syz.3.342" path="/65/bus" dev="tmpfs" ino=373 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 253.689699][ T5689] libceph: connect (1)[c::]:6789 error -101 [ 253.690675][ T5689] libceph: mon0 (1)[c::]:6789 connect error [ 253.730105][ T7374] ceph: No mds server is up or the cluster is laggy [ 254.010963][ T5689] libceph: connect (1)[c::]:6789 error -101 [ 254.053965][ T30] audit: type=1400 audit(1788791178.189:677): avc: denied { setopt } for pid=7373 comm="syz.2.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 254.100304][ T5689] libceph: mon0 (1)[c::]:6789 connect error [ 254.533271][ T7379] bridge0: port 1(syz_tun) entered blocking state [ 254.542652][ T7379] bridge0: port 1(syz_tun) entered disabled state [ 254.550203][ T7379] syz_tun: entered allmulticast mode [ 254.616336][ T7379] syz_tun: entered promiscuous mode [ 254.628650][ T7379] bridge0: port 1(syz_tun) entered blocking state [ 254.628756][ T7379] bridge0: port 1(syz_tun) entered listening state [ 254.670749][ T5860] bridge0: port 1(syz_tun) entered disabled state [ 254.679987][ T30] audit: type=1400 audit(1788791178.869:678): avc: denied { write } for pid=7347 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.435500][ T30] audit: type=1326 audit(1788791179.629:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7391 comm="syz.2.349" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3bf639e159 code=0x0 [ 255.771351][ T7402] netlink: 24 bytes leftover after parsing attributes in process `syz.1.350'. [ 255.962810][ T7395] fuse: Unknown parameter 'group_id00000000000000000000' [ 256.662463][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 256.670034][ T30] audit: type=1400 audit(1788791180.439:681): avc: denied { bind } for pid=7400 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 256.674131][ T30] audit: type=1400 audit(1788791180.449:682): avc: denied { write } for pid=7400 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 256.875003][ T5690] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 256.916565][ T30] audit: type=1400 audit(1788791181.109:683): avc: denied { write } for pid=7414 comm="syz.4.353" name="functions" dev="configfs" ino=12049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 256.948755][ T7415] UDC core: g1: couldn't find an available UDC or it's busy [ 256.961399][ T30] audit: type=1400 audit(1788791181.149:684): avc: denied { read } for pid=7414 comm="syz.4.353" name="id" dev="configfs" ino=14551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 256.969282][ T7420] ip_tables: iptables: counters copy to user failed while replacing table [ 257.029076][ T5690] usb 1-1: unable to get BOS descriptor or descriptor too short [ 257.039824][ T5690] usb 1-1: not running at top speed; connect to a high speed hub [ 257.048109][ T5690] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 257.061773][ T5690] usb 1-1: config 1 has an invalid descriptor of length 149, skipping remainder of the config [ 257.073788][ T5690] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 257.089954][ T5690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.090363][ T30] audit: type=1400 audit(1788791181.279:685): avc: denied { create } for pid=7418 comm="syz.3.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 257.100255][ T5690] usb 1-1: Product: syz [ 257.100318][ T5690] usb 1-1: Manufacturer: syz [ 257.100373][ T5690] usb 1-1: SerialNumber: syz [ 257.126265][ T30] audit: type=1400 audit(1788791181.289:686): avc: denied { write } for pid=7418 comm="syz.3.355" path="socket:[15637]" dev="sockfs" ino=15637 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 257.804055][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 257.904045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 258.074051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 258.348140][ T30] audit: type=1400 audit(1788791181.839:687): avc: denied { setopt } for pid=7424 comm="syz.4.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 258.500667][ T7428] netlink: 'syz.2.354': attribute type 1 has an invalid length. [ 258.522380][ T7428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.354'. [ 258.710215][ T5690] usb 1-1: USB disconnect, device number 7 [ 259.102515][ T30] audit: type=1400 audit(1788791183.279:688): avc: denied { getopt } for pid=7431 comm="syz.3.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 259.102595][ T30] audit: type=1400 audit(1788791183.279:689): avc: denied { mount } for pid=7431 comm="syz.3.358" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 262.401556][ T30] audit: type=1326 audit(1788791186.589:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7458 comm="syz.0.364" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa33d79e159 code=0x0 [ 262.829647][ T7463] fuse: Unknown parameter 'group_id00000000000000000000' [ 263.966456][ T7479] key id 00000004 not found [ 266.389410][ T30] audit: type=1400 audit(1788791190.579:691): avc: denied { watch } for pid=7489 comm="syz.1.373" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 266.500331][ T30] audit: type=1400 audit(1788791190.689:692): avc: denied { read write } for pid=7489 comm="syz.1.373" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 266.528482][ T30] audit: type=1400 audit(1788791190.689:693): avc: denied { open } for pid=7489 comm="syz.1.373" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 266.577443][ T30] audit: type=1400 audit(1788791190.769:694): avc: denied { read write } for pid=7489 comm="syz.1.373" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 266.601012][ T30] audit: type=1400 audit(1788791190.769:695): avc: denied { open } for pid=7489 comm="syz.1.373" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 266.624354][ T30] audit: type=1400 audit(1788791190.769:696): avc: denied { ioctl } for pid=7489 comm="syz.1.373" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 267.467089][ T30] audit: type=1400 audit(1788791191.659:697): avc: denied { checkpoint_restore } for pid=7489 comm="syz.1.373" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 267.573545][ T6280] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 267.744208][ T6280] usb 3-1: Using ep0 maxpacket: 16 [ 267.749887][ T6280] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 267.751688][ T6280] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 267.751816][ T6280] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 267.751889][ T6280] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 267.751958][ T6280] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 267.752079][ T6280] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 267.752155][ T6280] usb 3-1: config 0 has no interface number 0 [ 267.752346][ T6280] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 267.754144][ T6280] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 267.754164][ T6280] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 267.754190][ T6280] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 267.754211][ T6280] usb 3-1: config 0 interface 125 has no altsetting 0 [ 267.754226][ T6280] usb 3-1: config 0 interface 125 has no altsetting 2 [ 267.758707][ T6280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.758743][ T6280] usb 3-1: Product: syz [ 267.758754][ T6280] usb 3-1: Manufacturer: syz [ 267.758766][ T6280] usb 3-1: SerialNumber: syz [ 267.768445][ T6280] usb 3-1: config 0 descriptor?? [ 267.783727][ T6280] usb 3-1: selecting invalid altsetting 2 [ 268.708442][ T30] audit: type=1326 audit(1788791192.899:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7517 comm="syz.3.379" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f522919e159 code=0x0 [ 268.886723][ T6280] get_1284_register timeout [ 268.886867][ C1] usb 3-1: async_complete: urb error -104 [ 268.886975][ C1] usb 3-1: async_complete: urb error -104 [ 268.951070][ T7520] fuse: Bad value for 'user_id' [ 268.951110][ T7520] fuse: Bad value for 'user_id' [ 269.011249][ T30] audit: type=1400 audit(1788791193.199:699): avc: denied { map } for pid=7507 comm="syz.1.377" path="socket:[14848]" dev="sockfs" ino=14848 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 270.504460][ T5690] usb 3-1: USB disconnect, device number 7 [ 270.527396][ T30] audit: type=1400 audit(1788791194.719:700): avc: denied { setopt } for pid=7533 comm="syz.1.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 272.259003][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.386'. [ 272.295917][ T30] audit: type=1400 audit(1788791196.489:701): avc: denied { mount } for pid=7533 comm="syz.1.382" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 273.024454][ T30] audit: type=1400 audit(1788791196.819:702): avc: denied { create } for pid=7544 comm="syz.4.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 273.024520][ T30] audit: type=1400 audit(1788791196.869:703): avc: denied { sys_admin } for pid=7544 comm="syz.4.385" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 273.986382][ T30] audit: type=1400 audit(1788791198.179:704): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 274.136327][ T7560] netlink: 104 bytes leftover after parsing attributes in process `syz.0.387'. [ 274.168249][ T7560] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 274.168902][ T7560] tipc: Enabled bearer , priority 10 [ 274.235763][ T290] IPVS: starting estimator thread 0... [ 274.261810][ T30] audit: type=1326 audit(1788791198.449:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7566 comm="syz.2.391" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3bf639e159 code=0x0 [ 274.358927][ T7565] IPVS: using max 44 ests per chain, 105600 per kthread [ 274.789785][ T7569] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 274.853666][ T7573] fuse: Bad value for 'user_id' [ 274.853709][ T7573] fuse: Bad value for 'user_id' [ 274.889835][ T7571] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.890225][ T7571] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.966685][ T7571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.152336][ T30] audit: type=1400 audit(1788791199.339:706): avc: denied { write } for pid=7575 comm="syz.0.392" name="subsystems" dev="configfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 275.179319][ T30] audit: type=1400 audit(1788791199.369:707): avc: denied { write } for pid=7575 comm="syz.0.392" name="ports" dev="configfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 275.396812][ T7571] batman_adv: batadv0: Interface deactivated: vxlan0 [ 275.485923][ T1162] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.495121][ T1162] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.616192][ T5852] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.626574][ T5852] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.626724][ T5852] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.626775][ T5852] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.626891][ T5852] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.626922][ T5852] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.155809][ T7559] bonding: unable to delete non-existent b [ 276.210679][ T30] audit: type=1400 audit(1788791200.399:708): avc: denied { write } for pid=7580 comm="syz.2.395" name="001" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 276.303380][ T1162] IPVS: starting estimator thread 0... [ 276.314451][ T7581] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.395' sets config #1 [ 276.394117][ T7585] IPVS: using max 44 ests per chain, 105600 per kthread [ 277.438789][ T7594] loop3: detected capacity change from 0 to 7 [ 277.935773][ T30] audit: type=1400 audit(1788791202.129:709): avc: denied { connect } for pid=7596 comm="syz.2.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 278.923930][ T5711] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 279.165462][ T5711] usb 4-1: Using ep0 maxpacket: 16 [ 279.167604][ T5711] usb 4-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 279.170120][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.170141][ T5711] usb 4-1: Product: syz [ 279.170153][ T5711] usb 4-1: Manufacturer: syz [ 279.170166][ T5711] usb 4-1: SerialNumber: syz [ 279.396212][ T7594] Dev loop3: unable to read RDB block 7 [ 279.396262][ T7594] loop3: unable to read partition table [ 279.396434][ T7594] loop3: partition table beyond EOD, truncated [ 279.396458][ T7594] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 279.495560][ T7608] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.409653][ T5711] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 281.410612][ T5711] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 282.048126][ T5711] usb 4-1: USB disconnect, device number 6 [ 282.269403][ T30] audit: type=1326 audit(1788791206.459:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7622 comm="syz.3.405" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f522919e159 code=0x0 [ 282.319302][ T5588] udevd[5588]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.370101][ T7627] fuse: Bad value for 'user_id' [ 282.376200][ T7627] fuse: Bad value for 'user_id' [ 282.464267][ T6280] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 282.614154][ T6280] usb 3-1: Using ep0 maxpacket: 16 [ 282.621920][ T6280] usb 3-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.00 [ 282.634597][ T6280] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.646002][ T6280] usb 3-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 282.646043][ T6280] usb 3-1: config 0 interface 0 has no altsetting 0 [ 282.646173][ T6280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.831067][ T6280] usb 3-1: config 0 descriptor?? [ 283.319188][ T6280] apple 0003:05AC:0242.0003: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 283.320301][ T30] audit: type=1400 audit(1788791207.509:711): avc: denied { write } for pid=7639 comm="syz.3.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 283.328042][ T30] audit: type=1400 audit(1788791207.509:712): avc: denied { read write } for pid=7639 comm="syz.3.408" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 283.328334][ T30] audit: type=1400 audit(1788791207.509:713): avc: denied { open } for pid=7639 comm="syz.3.408" path="/81/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 283.347307][ T30] audit: type=1400 audit(1788791207.519:714): avc: denied { ioctl } for pid=7639 comm="syz.3.408" path="socket:[15871]" dev="sockfs" ino=15871 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 283.371826][ T30] audit: type=1400 audit(1788791207.549:715): avc: denied { ioctl } for pid=7639 comm="syz.3.408" path="/81/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 283.469585][ T6280] input: HID 05ac:0242 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:0242.0003/input/input16 [ 283.764418][ T30] audit: type=1400 audit(1788791207.909:716): avc: denied { accept } for pid=7641 comm="syz.0.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 284.461765][ T7640] device-mapper: table: 248:0: thi: unknown target type [ 284.462171][ T7640] device-mapper: ioctl: error adding target to table [ 284.544937][ T6280] apple 0003:05AC:0242.0003: input,hiddev0,hidraw0: USB HID vff.fc Device [HID 05ac:0242] on usb-dummy_hcd.2-1/input0 [ 284.698957][ T30] audit: type=1400 audit(1788791208.889:717): avc: denied { bind } for pid=7649 comm="syz.1.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 285.769130][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.412'. [ 286.061546][ T7669] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 286.559534][ T5690] usb 3-1: USB disconnect, device number 8 [ 287.200660][ T30] audit: type=1326 audit(1788791211.319:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7677 comm="syz.2.418" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3bf639e159 code=0x0 [ 287.238588][ T7684] fuse: Bad value for 'fd' [ 287.241679][ T30] audit: type=1400 audit(1788791211.429:719): avc: denied { watch watch_reads } for pid=7673 comm="syz.3.417" path="/83" dev="tmpfs" ino=465 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 288.393486][ T7700] netlink: 'syz.4.422': attribute type 11 has an invalid length. [ 288.393527][ T7700] netlink: 220 bytes leftover after parsing attributes in process `syz.4.422'. [ 288.821507][ T30] audit: type=1400 audit(1788791213.009:720): avc: denied { connect } for pid=7696 comm="syz.3.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 289.364843][ T6280] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 289.640782][ T6280] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 289.650744][ T6280] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.666383][ T6280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.666419][ T6280] usb 1-1: Product: syz [ 289.666451][ T6280] usb 1-1: Manufacturer: syz [ 289.666469][ T6280] usb 1-1: SerialNumber: syz [ 289.892989][ T30] audit: type=1400 audit(1788791214.069:721): avc: denied { mounton } for pid=7710 comm="syz.2.425" path="/79/file0" dev="tmpfs" ino=464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 289.995248][ T30] audit: type=1400 audit(1788791214.139:722): avc: denied { append } for pid=7710 comm="syz.2.425" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 290.271434][ T6280] usb 1-1: Cannot retrieve CPort count: -110 [ 290.271480][ T6280] usb 1-1: Cannot retrieve CPort count: -110 [ 290.271502][ T6280] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 290.631942][ T5690] lo speed is unknown, defaulting to 1000 [ 292.342048][ T30] audit: type=1400 audit(1788791216.289:723): avc: denied { unlink } for pid=7727 comm="syz.1.428" name="#1" dev="tmpfs" ino=532 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 292.342260][ T30] audit: type=1800 audit(1788791216.349:724): pid=7730 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.428" name="file0" dev="overlay" ino=534 res=0 errno=0 [ 292.656241][ T5690] usb 1-1: USB disconnect, device number 8 [ 294.553586][ T7740] batman_adv: batadv0: Adding interface: veth0 [ 294.560853][ T7740] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.586336][ T7740] batman_adv: batadv0: Interface activated: veth0 [ 294.612428][ T7740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.612454][ T7740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.635758][ T7740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.643363][ T7740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.652898][ T7740] batman_adv: batadv0: Interface deactivated: veth0 [ 294.659864][ T7740] batman_adv: batadv0: Removing interface: veth0 [ 294.944956][ T5782] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 295.035615][ T30] audit: type=1400 audit(1788791219.229:725): avc: denied { bind } for pid=7753 comm="syz.0.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 295.291200][ T5782] usb 5-1: device descriptor read/64, error -71 [ 296.061310][ T5782] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 296.244098][ T5782] usb 5-1: device descriptor read/64, error -71 [ 296.354480][ T5782] usb usb5-port1: attempt power cycle [ 296.767131][ T30] audit: type=1326 audit(1788791220.959:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.1.433" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca82d9e159 code=0x0 [ 296.794496][ T7761] netlink: 40 bytes leftover after parsing attributes in process `syz.3.436'. [ 296.891699][ T7759] fuse: Bad value for 'fd' [ 297.034208][ T5782] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 297.254324][ T5782] usb 5-1: device not accepting address 6, error -71 [ 297.913324][ T30] audit: type=1400 audit(1788791222.099:727): avc: denied { execute } for pid=7770 comm="syz.3.440" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 299.410738][ T30] audit: type=1400 audit(1788791223.599:728): avc: denied { ioctl } for pid=7770 comm="syz.3.440" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 299.835557][ T7788] misc userio: Invalid payload size [ 300.668060][ T7798] Bluetooth: MGMT ver 1.23 [ 300.776722][ T30] audit: type=1400 audit(1788791224.969:729): avc: denied { ioctl } for pid=7795 comm="syz.1.444" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 301.172363][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.447'. [ 301.254724][ T5782] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 301.434841][ T5782] usb 3-1: Using ep0 maxpacket: 8 [ 301.449838][ T5782] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 301.465853][ T5782] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.589891][ T7782] syz.3.440 (7782): drop_caches: 2 [ 302.019257][ T5782] pvrusb2: Hardware description: Terratec Grabster AV400 [ 302.019319][ T5782] pvrusb2: ********** [ 302.019386][ T5782] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 302.019422][ T5782] pvrusb2: Important functionality might not be entirely working. [ 302.019455][ T5782] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 302.019489][ T5782] pvrusb2: ********** [ 302.181954][ T2339] pvrusb2: Invalid write control endpoint [ 302.292220][ T30] audit: type=1400 audit(1788791226.479:730): avc: denied { read write } for pid=7812 comm="syz.3.448" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 302.317352][ T30] audit: type=1400 audit(1788791226.509:731): avc: denied { open } for pid=7812 comm="syz.3.448" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 302.430727][ T7805] pvrusb2: Invalid write control endpoint [ 303.188246][ T30] audit: type=1400 audit(1788791227.379:732): avc: denied { bind } for pid=7802 comm="syz.2.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 303.209991][ T5782] hid_parser_main: 28 callbacks suppressed [ 303.216088][ T5782] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 303.271337][ T5782] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 303.551520][ T2339] pvrusb2: Invalid write control endpoint [ 303.569280][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 303.569315][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 303.569326][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 303.569337][ T2339] pvrusb2: Device being rendered inoperable [ 303.687706][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 303.687763][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 303.981561][ T31] usb 3-1: USB disconnect, device number 9 [ 304.020556][ T2339] pvrusb2: Attached sub-driver cx25840 [ 304.020581][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 304.020610][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 304.081778][ T30] audit: type=1400 audit(1788791228.269:733): avc: denied { write } for pid=7837 comm="syz.4.453" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 304.082098][ T30] audit: type=1400 audit(1788791228.269:734): avc: denied { open } for pid=7837 comm="syz.4.453" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 304.322800][ T7840] 0x000000000006-0x000000020000 : "" [ 304.348863][ T7840] ftl_cs: FTL header corrupt! [ 304.455057][ T30] audit: type=1400 audit(1788791228.509:735): avc: denied { ioctl } for pid=7837 comm="syz.4.453" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 306.538386][ T7847] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 306.585151][ T59] Bluetooth: hci5: Frame reassembly failed (-84) [ 307.680256][ T7868] netlink: 20 bytes leftover after parsing attributes in process `syz.2.458'. [ 307.680321][ T7868] tipc: Invalid UDP bearer configuration [ 307.680436][ T7868] tipc: Enabling of bearer rejected, failed to enable media [ 309.093548][ T52] Bluetooth: hci5: command 0x1003 tx timeout [ 309.213141][ T5602] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 311.577459][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 313.782326][ T30] audit: type=1400 audit(1788791237.969:736): avc: denied { read write } for pid=7907 comm="syz.3.471" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 313.782571][ T30] audit: type=1400 audit(1788791237.969:737): avc: denied { open } for pid=7907 comm="syz.3.471" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 314.237150][ T7910] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 317.080889][ T30] audit: type=1400 audit(1788791240.509:738): avc: denied { append } for pid=7914 comm="syz.1.467" name="uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 317.743192][ T7927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.472'. [ 319.300974][ T31] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 319.539138][ T31] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 319.641419][ T31] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 319.641480][ T31] usb 2-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 319.641516][ T31] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 319.641544][ T31] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 319.641579][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.543563][ T7942] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 321.143161][ T31] usb 2-1: string descriptor 0 read error: -71 [ 321.257427][ T31] usb 2-1: USB disconnect, device number 5 [ 321.394548][ T5782] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 321.627940][ T5782] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 321.631915][ T5782] usb 5-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 321.632175][ T5782] usb 5-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 321.632233][ T5782] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 321.632291][ T5782] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 321.632474][ T5782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.720110][ T7952] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 323.953352][ T7955] lo speed is unknown, defaulting to 1000 [ 324.089783][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'. [ 324.147615][ T5782] usb 5-1: string descriptor 0 read error: -71 [ 324.693724][ T7964] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7964 comm=syz.3.477 [ 324.753354][ T5782] usb 5-1: USB disconnect, device number 8 [ 325.058243][ T30] audit: type=1400 audit(1788791249.249:739): avc: denied { setopt } for pid=7969 comm="syz.0.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 325.330250][ T30] audit: type=1400 audit(1788791249.519:740): avc: denied { ioctl } for pid=7969 comm="syz.0.482" path="socket:[16658]" dev="sockfs" ino=16658 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 325.438626][ T7980] netlink: 168 bytes leftover after parsing attributes in process `syz.4.484'. [ 326.144407][ T2284] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 326.317350][ T2284] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 326.331866][ T2284] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.331906][ T2284] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.331928][ T2284] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 326.331953][ T2284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.838729][ T2284] lg-g15 0003:046D:C222.0005: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 327.147068][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.487'. [ 327.147152][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.487'. [ 327.147271][ T8000] netlink: 'syz.0.487': attribute type 14 has an invalid length. [ 327.147313][ T8000] netlink: 'syz.0.487': attribute type 12 has an invalid length. [ 327.716058][ T2284] lg-g15 0003:046D:C222.0005: Error -38 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 327.831220][ T2284] usb 4-1: USB disconnect, device number 7 [ 328.088405][ T8003] fido_id[8003]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 329.561673][ T30] audit: type=1400 audit(1788791253.319:741): avc: denied { write } for pid=8011 comm="syz.4.492" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 329.642605][ T8016] xt_MASQUERADE: bad MAP_IPS. [ 329.714085][ T6280] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 329.865506][ T6280] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 329.875737][ T6280] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 329.885397][ T6280] usb 2-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 329.897195][ T6280] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 329.897252][ T6280] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 329.897348][ T6280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.349632][ T25] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 330.558622][ T25] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 330.585929][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.585975][ T25] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 330.586013][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.633847][ T8027] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 330.683156][ T25] as10x_usb: device has been detected [ 330.697060][ T25] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 331.052121][ T25] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 331.134143][ T6280] usb 2-1: string descriptor 0 read error: -71 [ 331.262692][ T30] audit: type=1400 audit(1788791255.429:742): avc: denied { name_bind } for pid=8023 comm="syz.2.497" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 331.539323][ T8026] ------------[ cut here ]------------ [ 331.539351][ T8026] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 331.539367][ T8026] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x944/0x1bd0, CPU#1: syz.3.495/8026 [ 331.560665][ T8026] Modules linked in: [ 331.564610][ T8026] CPU: 1 UID: 0 PID: 8026 Comm: syz.3.495 Tainted: G L syzkaller #0 PREEMPT(full) [ 331.575450][ T8026] Tainted: [L]=SOFTLOCKUP [ 331.579978][ T8026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 331.590122][ T8026] RIP: 0010:__mutex_lock+0x94b/0x1bd0 [ 331.595729][ T8026] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 c0 10 00 00 44 8b 05 88 3f 73 05 45 85 c0 75 13 48 8d 3d 8c 4a 76 05 48 c7 c6 c0 f4 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 331.615511][ T8026] RSP: 0000:ffffc9000451f6a0 EFLAGS: 00010246 [ 331.621598][ T8026] RAX: 0000000000000003 RBX: ffff88803d0e8010 RCX: 1ffffffff228a8a0 [ 331.629621][ T8026] RDX: 0000000000000000 RSI: ffffffff8beff4c0 RDI: ffffffff91485010 [ 331.637631][ T8026] RBP: ffffc9000451f810 R08: 0000000000000000 R09: 0000000000000000 [ 331.645748][ T8026] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 331.653765][ T8026] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88823be96320 [ 331.662053][ T8026] FS: 00007f522a0e96c0(0000) GS:ffff888123c5d000(0000) knlGS:0000000000000000 [ 331.671080][ T8026] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 331.677719][ T8026] CR2: 0000000000000000 CR3: 0000000033197000 CR4: 00000000003526f0 [ 331.685712][ T8026] Call Trace: [ 331.688981][ T8026] [ 331.691890][ T8026] ? as102_stream_ctrl+0x28/0xd0 [ 331.696846][ T8026] ? __pfx___mutex_lock+0x10/0x10 [ 331.701862][ T8026] ? irqentry_exit+0x24d/0xa10 [ 331.706641][ T8026] ? __pfx_as102_fe_ts_bus_ctrl+0x10/0x10 [ 331.712335][ T8026] ? as102_stream_ctrl+0x28/0xd0 [ 331.717300][ T8026] as102_stream_ctrl+0x28/0xd0 [ 331.722087][ T8026] ? __pfx_as102_fe_ts_bus_ctrl+0x10/0x10 [ 331.727854][ T8026] __dvb_frontend_open+0x122/0xf20 [ 331.732976][ T8026] dvb_frontend_open+0x77c/0x910 [ 331.738009][ T8026] ? find_held_lock+0x2b/0x80 [ 331.742705][ T8026] ? __pfx_dvb_frontend_open+0x10/0x10 [ 331.748202][ T8026] dvb_device_open+0x270/0x3b0 [ 331.752970][ T8026] ? __pfx_dvb_device_open+0x10/0x10 [ 331.758306][ T8026] chrdev_open+0x234/0x6a0 [ 331.762730][ T8026] ? __pfx_chrdev_open+0x10/0x10 [ 331.767721][ T8026] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 331.774116][ T8026] do_dentry_open+0x6ab/0x14d0 [ 331.778879][ T8026] ? __pfx_chrdev_open+0x10/0x10 [ 331.783797][ T8026] vfs_open+0x82/0x3f0 [ 331.787867][ T8026] path_openat+0x19fa/0x2440 [ 331.792435][ T8026] ? __pfx_path_openat+0x10/0x10 [ 331.797366][ T8026] do_file_open+0x20e/0x430 [ 331.801849][ T8026] ? __pfx_do_file_open+0x10/0x10 [ 331.806880][ T8026] ? __pfx___schedule+0x10/0x10 [ 331.811720][ T8026] ? _raw_spin_unlock+0x3e/0x50 [ 331.816681][ T8026] ? alloc_fd+0x471/0x7a0 [ 331.821010][ T8026] do_sys_openat2+0x10f/0x1e0 [ 331.825689][ T8026] ? __pfx_do_sys_openat2+0x10/0x10 [ 331.830868][ T8026] ? __sanitizer_cov_trace_switch+0x5a/0x90 [ 331.836769][ T8026] __x64_sys_openat+0x12d/0x210 [ 331.841693][ T8026] ? __pfx___x64_sys_openat+0x10/0x10 [ 331.847062][ T8026] do_syscall_64+0x123/0x790 [ 331.851641][ T8026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.857542][ T8026] RIP: 0033:0x7f522915e98e [ 331.861951][ T8026] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 331.881600][ T8026] RSP: 002b:00007f522a0e8b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 331.890054][ T8026] RAX: ffffffffffffffda RBX: 00007f522a0e96c0 RCX: 00007f522915e98e [ 331.898188][ T8026] RDX: 0000000000000802 RSI: 00007f522a0e8c00 RDI: ffffffffffffff9c [ 331.906225][ T8026] RBP: 00007f522a0e8c00 R08: 0000000000000000 R09: 0000000000000000 [ 331.914201][ T8026] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 331.922164][ T8026] R13: 00007f5229426128 R14: 00007f5229426090 R15: 00007fff24433708 [ 331.930169][ T8026] [ 331.933168][ T8026] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 331.940430][ T8026] CPU: 1 UID: 0 PID: 8026 Comm: syz.3.495 Tainted: G L syzkaller #0 PREEMPT(full) [ 331.951182][ T8026] Tainted: [L]=SOFTLOCKUP [ 331.955479][ T8026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 331.965524][ T8026] Call Trace: [ 331.968790][ T8026] [ 331.971697][ T8026] dump_stack_lvl+0x100/0x190 [ 331.976355][ T8026] vpanic+0x553/0x970 [ 331.980311][ T8026] ? __pfx_vpanic+0x10/0x10 [ 331.984798][ T8026] ? lock_release+0x24d/0x310 [ 331.989475][ T8026] panic+0xd1/0xe0 [ 331.993184][ T8026] ? __pfx_panic+0x10/0x10 [ 331.997586][ T8026] check_panic_on_warn.cold+0x19/0x34 [ 332.002941][ T8026] ? __mutex_lock+0x944/0x1bd0 [ 332.007701][ T8026] __warn.cold+0x191/0x318 [ 332.012107][ T8026] __report_bug+0x30f/0x440 [ 332.016590][ T8026] ? __mutex_lock+0x944/0x1bd0 [ 332.021332][ T8026] ? __pfx___report_bug+0x10/0x10 [ 332.026345][ T8026] ? finish_task_switch.isra.0+0x2ca/0x10d0 [ 332.032303][ T8026] report_bug_entry+0xe2/0x290 [ 332.037059][ T8026] ? __mutex_lock+0x94b/0x1bd0 [ 332.041802][ T8026] handle_bug+0x1cd/0x2a0 [ 332.046122][ T8026] exc_invalid_op+0x17/0x50 [ 332.050628][ T8026] asm_exc_invalid_op+0x1a/0x20 [ 332.055541][ T8026] RIP: 0010:__mutex_lock+0x94b/0x1bd0 [ 332.060901][ T8026] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 c0 10 00 00 44 8b 05 88 3f 73 05 45 85 c0 75 13 48 8d 3d 8c 4a 76 05 48 c7 c6 c0 f4 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 332.080488][ T8026] RSP: 0000:ffffc9000451f6a0 EFLAGS: 00010246 [ 332.086559][ T8026] RAX: 0000000000000003 RBX: ffff88803d0e8010 RCX: 1ffffffff228a8a0 [ 332.094533][ T8026] RDX: 0000000000000000 RSI: ffffffff8beff4c0 RDI: ffffffff91485010 [ 332.102491][ T8026] RBP: ffffc9000451f810 R08: 0000000000000000 R09: 0000000000000000 [ 332.110473][ T8026] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 332.118446][ T8026] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88823be96320 [ 332.126404][ T8026] ? as102_stream_ctrl+0x28/0xd0 [ 332.131333][ T8026] ? __pfx___mutex_lock+0x10/0x10 [ 332.136342][ T8026] ? irqentry_exit+0x24d/0xa10 [ 332.141113][ T8026] ? __pfx_as102_fe_ts_bus_ctrl+0x10/0x10 [ 332.146834][ T8026] ? as102_stream_ctrl+0x28/0xd0 [ 332.151776][ T8026] as102_stream_ctrl+0x28/0xd0 [ 332.156709][ T8026] ? __pfx_as102_fe_ts_bus_ctrl+0x10/0x10 [ 332.162421][ T8026] __dvb_frontend_open+0x122/0xf20 [ 332.167531][ T8026] dvb_frontend_open+0x77c/0x910 [ 332.172478][ T8026] ? find_held_lock+0x2b/0x80 [ 332.177169][ T8026] ? __pfx_dvb_frontend_open+0x10/0x10 [ 332.182620][ T8026] dvb_device_open+0x270/0x3b0 [ 332.187371][ T8026] ? __pfx_dvb_device_open+0x10/0x10 [ 332.192662][ T8026] chrdev_open+0x234/0x6a0 [ 332.197077][ T8026] ? __pfx_chrdev_open+0x10/0x10 [ 332.202002][ T8026] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 332.208333][ T8026] do_dentry_open+0x6ab/0x14d0 [ 332.213081][ T8026] ? __pfx_chrdev_open+0x10/0x10 [ 332.218010][ T8026] vfs_open+0x82/0x3f0 [ 332.222071][ T8026] path_openat+0x19fa/0x2440 [ 332.226647][ T8026] ? __pfx_path_openat+0x10/0x10 [ 332.231584][ T8026] do_file_open+0x20e/0x430 [ 332.236071][ T8026] ? __pfx_do_file_open+0x10/0x10 [ 332.241081][ T8026] ? __pfx___schedule+0x10/0x10 [ 332.245926][ T8026] ? _raw_spin_unlock+0x3e/0x50 [ 332.250767][ T8026] ? alloc_fd+0x471/0x7a0 [ 332.255075][ T8026] do_sys_openat2+0x10f/0x1e0 [ 332.259731][ T8026] ? __pfx_do_sys_openat2+0x10/0x10 [ 332.264935][ T8026] ? __sanitizer_cov_trace_switch+0x5a/0x90 [ 332.270818][ T8026] __x64_sys_openat+0x12d/0x210 [ 332.275658][ T8026] ? __pfx___x64_sys_openat+0x10/0x10 [ 332.281018][ T8026] do_syscall_64+0x123/0x790 [ 332.285601][ T8026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.291497][ T8026] RIP: 0033:0x7f522915e98e [ 332.295899][ T8026] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 332.315506][ T8026] RSP: 002b:00007f522a0e8b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 332.323932][ T8026] RAX: ffffffffffffffda RBX: 00007f522a0e96c0 RCX: 00007f522915e98e [ 332.331883][ T8026] RDX: 0000000000000802 RSI: 00007f522a0e8c00 RDI: ffffffffffffff9c [ 332.339843][ T8026] RBP: 00007f522a0e8c00 R08: 0000000000000000 R09: 0000000000000000 [ 332.347825][ T8026] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 332.355782][ T8026] R13: 00007f5229426128 R14: 00007f5229426090 R15: 00007fff24433708 [ 332.363751][ T8026] [ 332.367018][ T8026] Kernel Offset: disabled [ 332.371332][ T8026] Rebooting in 86400 seconds..