last executing test programs: 33m48.206797793s ago: executing program 4 (id=34): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000001c0)) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000001080)=@random={'user.', '/dev/ocfs2_control\x00'}, 0x0, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a20000/0x1000)=nil, 0x1000, 0x16) openat$comedi(0xffffffffffffff9c, 0x0, 0x109040, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x40, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x17, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) io_setup(0x7f, &(0x7f0000000080)) write$6lowpan_control(r1, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:10 2', 0x1b) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r5, &(0x7f0000000100)='$', 0x1, 0x20008005, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000580)=@gcm_128={{0x303}, "dbab597919c74d3f", "2e69d489eb27ba918fc6dce2035b1f6e", "22e66fd7", "7dfe381cf0263251"}, 0x28) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) ioctl$KVM_SET_PIT2(r6, 0x4070aea0, &(0x7f0000000000)={[{0x2, 0x2, 0x80, 0xd, 0x10, 0x1a, 0xb, 0x4, 0x2, 0x4, 0x1, 0x5}, {0xe9df, 0xff, 0x91, 0x7, 0x7, 0x1, 0x7, 0x0, 0xf1, 0x3, 0x8, 0x8, 0x4}, {0x3, 0x2cd9, 0x0, 0x66, 0x9, 0x10, 0x4f, 0xc2, 0x0, 0x1, 0x6, 0x3, 0x7}], 0x4}) 33m46.454357825s ago: executing program 4 (id=38): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0xfe}}}}, 0x108) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x9, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 33m42.222225473s ago: executing program 4 (id=45): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x6, @local, 0x6}, @in6={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x56}, @in={0x2, 0x4e20, @private=0xa010100}, @in6={0xa, 0x4e20, 0x800, @private2, 0x6}, @in6={0xa, 0x4e20, 0xd0cac62, @local, 0x8}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e22, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, @in6={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}, 0x3}, @in={0x2, 0x4e23, @broadcast}], 0xfffffffffffffeeb) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'batadv_slave_1\x00', 0x1000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000380)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) sendmsg$NFT_BATCH(r4, 0x0, 0x40) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 33m40.145406551s ago: executing program 4 (id=49): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x8}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xa7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x85}, 0x48040) 33m36.354646411s ago: executing program 4 (id=55): userfaultfd(0x801) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xff05, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$loop(0x0, 0x7, 0x10c062) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000080)=0x10000) close(r7) write(r6, &(0x7f00000002c0)='snd_aloop.0', 0xb) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000200), 0xfffffefd) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r5, 0x84, 0x2, 0x0, &(0x7f0000000100)=0xfffffffffffffff6) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 33m33.578408126s ago: executing program 4 (id=60): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x12, &(0x7f0000000240)={&(0x7f0000000280)={0x4c, 0x9, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) 33m18.50227223s ago: executing program 32 (id=60): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x12, &(0x7f0000000240)={&(0x7f0000000280)={0x4c, 0x9, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) 32m34.524541748s ago: executing program 5 (id=251): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfea8, 0xa) 32m34.333602623s ago: executing program 5 (id=253): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x30, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 32m33.841558883s ago: executing program 5 (id=257): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r2, &(0x7f0000000020)={0x2, 0x4e20, @loopback}, 0x10) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 32m33.662206781s ago: executing program 5 (id=258): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 32m33.459434574s ago: executing program 5 (id=261): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') socket$inet6_sctp(0xa, 0x5, 0x84) r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 32m32.308435994s ago: executing program 5 (id=262): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="2ef26f0f3566b842000f00d8b805000000b9a00000000f01c166baf80cb8b7351187ef66bafc0cb000ee0fde460b0f0130670f01c28fe868cfe20a", 0x3b}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 32m17.052543321s ago: executing program 33 (id=262): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="2ef26f0f3566b842000f00d8b805000000b9a00000000f01c166baf80cb8b7351187ef66bafc0cb000ee0fde460b0f0130670f01c28fe868cfe20a", 0x3b}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.708373648s ago: executing program 3 (id=5182): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0x4, 0x6, 0xb}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00006fc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') 5.836934489s ago: executing program 3 (id=5190): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000440)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="5000330080080e00ffffffffffff0802110000000802110000003800010000000000000005"], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) 4.346168378s ago: executing program 3 (id=5203): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f01000800000000000000042402000905810310"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_disconnect(r0) close(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000700)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x40045b17, 0x0) 4.34375402s ago: executing program 0 (id=5204): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000110001000000000000000000000000000000000000000000000000000800030068737230"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00'}) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) 4.214256753s ago: executing program 1 (id=5206): syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB="04020300c9"], 0x6) 4.037942062s ago: executing program 0 (id=5207): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 3.984306571s ago: executing program 0 (id=5208): r0 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000000040)='7', 0x1) syz_usb_disconnect(r0) 3.480242926s ago: executing program 6 (id=5210): setns(0xc9, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x7, 0x0, &(0x7f00000000c0)="279a004c6588d5", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.470869788s ago: executing program 1 (id=5211): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f0000000000), 0x0) 3.429216476s ago: executing program 1 (id=5212): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x40080) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000300)=ANY=[@ANYBLOB="030000000000000006000000000000000000"]) 3.352768327s ago: executing program 6 (id=5213): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x450001, 0x4c) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(r0, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x282422, &(0x7f0000000400)=ANY=[]) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="f8", 0x1}], 0x1}}], 0x1, 0x20008050) fsetxattr$security_ima(r2, &(0x7f0000000100), 0x0, 0x0, 0x3) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) 3.097937534s ago: executing program 0 (id=5214): timer_create(0x2, 0x0, &(0x7f0000000200)=0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(r0, 0x1, &(0x7f0000000140), 0x0) prlimit64(0x0, 0x0, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3017d000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 2.230528485s ago: executing program 1 (id=5215): r0 = socket$pptp(0x18, 0x1, 0x2) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x2}, 0x1c) sendmmsg$inet(r1, &(0x7f0000006d40), 0x0, 0x0) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xfff8, @multicast1}}, 0x1e) mkdir(&(0x7f0000000080)='./proc\x00', 0x1ff) openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x101501, 0x0) 2.133391475s ago: executing program 2 (id=5216): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x54, 0x30, 0xb, 0x70bd25, 0x0, {}, [{0xffffffffffffffc7, 0x1, [@m_gact={0x3c, 0x1, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x12e5, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000015}, 0xc844) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$nci(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="e87d1120c34370074c8c3159e585e1e7d9d64a51aed756c6943ef9fd32f2845cbdf2adf9b97e6be3d8dea2bee1471e88037c2ffb589116b46549ed728fa80200000000000000565d0879d80203c98a72320180f58b97c9e7006bc20e6abd9264e308eca7ef78d98a2d6b410d2b15e6e085cca6a169fd5801b79b5e5dd5ca55277a42df43f04fb6a3bcc1a6632b89f49f93df860c"], 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = inotify_init() inotify_add_watch(r3, 0x0, 0x850003d1) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) r4 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000680)=""/240) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) 2.023834345s ago: executing program 6 (id=5217): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.118222648s ago: executing program 1 (id=5218): syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write(r0, 0x0, 0x0) 1.072865116s ago: executing program 3 (id=5219): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 978.252909ms ago: executing program 2 (id=5220): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 883.304381ms ago: executing program 6 (id=5221): syz_emit_vhci(0x0, 0x6) 821.612998ms ago: executing program 3 (id=5222): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f0000000000), 0x0) 817.911567ms ago: executing program 2 (id=5223): setns(0xc9, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x7, 0x0, &(0x7f00000000c0)="279a004c6588d5", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 724.755028ms ago: executing program 6 (id=5224): r0 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000000040)='7', 0x1) syz_usb_disconnect(r0) 724.234221ms ago: executing program 2 (id=5225): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x40080) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000300)=ANY=[@ANYBLOB="030000000000000006000000000000000000"]) 663.136709ms ago: executing program 3 (id=5226): r0 = socket$netlink(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000040)='./proc\x00', 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x50, &(0x7f00000a2000)={0x0, 0x0}, 0x10) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000006c0), 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)={0x44, r3, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xd, 0xa9, @random="29695d8fd0879bc3e2"}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x6048800) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) 511.221561ms ago: executing program 1 (id=5227): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$char_usb(r1, &(0x7f0000000480)=""/74, 0x4a) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000000)=""/64, 0x40}], 0x1, 0x5, 0xffe) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 460.687472ms ago: executing program 0 (id=5228): pipe2(0x0, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfd, {{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast1, 0x4e23, 0x200, 0x4e20, 0x0, 0xcae7388a885de62c, 0xe0, 0x20, 0x3b}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, {0x9, 0x100000001, 0x6, 0x2, 0x1, 0x7, 0xc0d, 0x9}, {0xffffffff7fffffff, 0x0, 0x8000000000000, 0x2}, {0x7, 0x2000000, 0x488}, 0x70bd26, 0x3505, 0x2, 0x86fa708a8da4f410, 0x6, 0x82}, 0x0, 0xe}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x4040888) sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 458.954164ms ago: executing program 2 (id=5229): mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', 0x0, &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x8004587d, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) 336.306079ms ago: executing program 2 (id=5230): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 334.855992ms ago: executing program 0 (id=5231): sigaltstack(&(0x7f0000000180)={&(0x7f0000002880)=""/4118, 0x3, 0x1016}, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000200)=ANY=[]) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000500000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000100), 0x0}, 0x20) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r4 = dup3(r0, r3, 0x80000) ioctl$MON_IOCG_STATS(r4, 0xc0109207, &(0x7f0000000180)) 0s ago: executing program 6 (id=5232): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000280)) sync() kernel console output (not intermixed with test programs): lave_1) entered blocking state [ 1897.054486][T24975] bridge0: port 2(bridge_slave_1) entered disabled state [ 1897.054581][T24975] bridge_slave_1: entered allmulticast mode [ 1897.061691][T24975] bridge_slave_1: entered promiscuous mode [ 1897.195616][T24975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1897.223438][T24975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1897.283261][T24975] team0: Port device team_slave_0 added [ 1897.291889][T24975] team0: Port device team_slave_1 added [ 1897.328103][T24975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1897.335940][T24975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1897.363661][T24975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1897.379364][T24975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1897.388925][T24975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1897.389006][T24975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1897.648494][T24975] hsr_slave_0: entered promiscuous mode [ 1897.650737][T24975] hsr_slave_1: entered promiscuous mode [ 1897.654250][T24975] debugfs: 'hsr0' already exists in 'hsr' [ 1897.654268][T24975] Cannot create hsr debugfs directory [ 1898.352417][T24975] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1898.645582][ T5601] Bluetooth: hci3: command tx timeout [ 1898.840353][T24975] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1898.938123][T24975] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1899.056634][T24975] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1899.503518][T24975] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1899.536379][T24975] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1899.538995][T24975] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1899.567573][T24975] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1899.571461][T24975] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1899.601268][T24975] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1899.602079][T24975] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1899.615491][T24975] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1899.929859][T24975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1899.983866][T24975] 8021q: adding VLAN 0 to HW filter on device team0 [ 1899.997586][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 1899.997680][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1900.033722][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 1900.033870][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1901.445445][ T5601] Bluetooth: hci3: command tx timeout [ 1902.117061][T25090] Bluetooth: MGMT ver 1.23 [ 1902.856561][T24975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1904.458181][ T5601] Bluetooth: hci3: command tx timeout [ 1904.653743][ T31] audit: type=1326 audit(1788360498.759:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25111 comm="syz.0.4429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b519e159 code=0x7ffc0000 [ 1904.656975][ T31] audit: type=1326 audit(1788360498.769:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25111 comm="syz.0.4429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b519e159 code=0x7ffc0000 [ 1904.667391][ T31] audit: type=1326 audit(1788360498.769:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25111 comm="syz.0.4429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b519e159 code=0x7ffc0000 [ 1904.667433][ T31] audit: type=1326 audit(1788360498.769:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25111 comm="syz.0.4429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b519e159 code=0x7ffc0000 [ 1904.667899][ T31] audit: type=1326 audit(1788360498.769:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25111 comm="syz.0.4429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fe2b519e159 code=0x7ffc0000 [ 1904.667935][ T31] audit: type=1326 audit(1788360498.769:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25111 comm="syz.0.4429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b519e159 code=0x7ffc0000 [ 1904.667968][ T31] audit: type=1326 audit(1788360498.769:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25111 comm="syz.0.4429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b519e159 code=0x7ffc0000 [ 1904.668704][ T31] audit: type=1326 audit(1788360498.769:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25111 comm="syz.0.4429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe2b519e159 code=0x7ffc0000 [ 1904.668740][ T31] audit: type=1326 audit(1788360498.769:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25111 comm="syz.0.4429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe2b519e159 code=0x7ffc0000 [ 1905.581547][T24975] veth0_vlan: entered promiscuous mode [ 1905.628483][T24975] veth1_vlan: entered promiscuous mode [ 1905.749591][T24975] veth0_macvtap: entered promiscuous mode [ 1905.763726][T24975] veth1_macvtap: entered promiscuous mode [ 1905.829347][T24975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1905.857014][T24975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1906.068471][ T5826] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1906.068546][ T5826] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1906.068621][ T5826] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1906.068656][ T5826] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1908.179493][T15819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1908.179883][T15819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1908.374030][ T31] audit: type=1400 audit(1788360502.409:923): avc: denied { write } for pid=25135 comm="syz.2.4437" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1908.621232][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1908.621264][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1910.057543][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1910.063967][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1910.267896][ T5602] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1910.277572][ T5602] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1910.287178][ T5602] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1910.297771][ T5602] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1910.309351][ T5602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1910.379752][ T31] audit: type=1400 audit(1788360504.489:924): avc: denied { watch } for pid=25154 comm="syz.0.4440" path="pipe:[86880]" dev="pipefs" ino=86880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1911.995532][ T5826] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1912.404445][ T5602] Bluetooth: hci4: command tx timeout [ 1912.726882][ T31] audit: type=1326 audit(1788360506.829:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.1.4453" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447599e159 code=0x7ffc0000 [ 1912.756976][ T31] audit: type=1326 audit(1788360506.869:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.1.4453" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447599e159 code=0x7ffc0000 [ 1912.812051][ T31] audit: type=1326 audit(1788360506.919:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.1.4453" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447599e159 code=0x7ffc0000 [ 1912.812135][ T31] audit: type=1326 audit(1788360506.919:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.1.4453" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447599e159 code=0x7ffc0000 [ 1912.876487][ T31] audit: type=1326 audit(1788360506.989:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.1.4453" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f447595e98e code=0x7ffc0000 [ 1912.876549][ T31] audit: type=1326 audit(1788360506.989:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.1.4453" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447599e159 code=0x7ffc0000 [ 1912.876622][ T31] audit: type=1326 audit(1788360506.989:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.1.4453" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447599e159 code=0x7ffc0000 [ 1912.998794][ T31] audit: type=1326 audit(1788360507.099:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.1.4453" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f447599e159 code=0x7ffc0000 [ 1912.998882][ T31] audit: type=1326 audit(1788360507.099:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.1.4453" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f447599e159 code=0x7ffc0000 [ 1913.603740][ T5826] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1913.876300][ T5826] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1914.322049][ T5826] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1914.484115][ T5602] Bluetooth: hci4: command tx timeout [ 1914.540446][T25150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1914.544014][T25150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1914.544131][T25150] bridge_slave_0: entered allmulticast mode [ 1914.545231][T25150] bridge_slave_0: entered promiscuous mode [ 1914.556161][T25150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1914.560780][T25150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1914.560899][T25150] bridge_slave_1: entered allmulticast mode [ 1914.562045][T25150] bridge_slave_1: entered promiscuous mode [ 1914.701169][T25150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1914.723455][T25216] file system registered [ 1914.735765][T25150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1914.848915][T25218] 9p: Bad value for 'rfdno' [ 1914.941228][T25150] team0: Port device team_slave_0 added [ 1915.015099][T24329] ffs_data_put(): freeing [ 1915.198677][T25150] team0: Port device team_slave_1 added [ 1916.561865][T25150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1916.561900][T25150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1916.561926][T25150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1916.569038][ T5602] Bluetooth: hci4: command tx timeout [ 1916.630805][T25150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1916.630841][T25150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1916.630874][T25150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1916.916192][ T5826] bridge_slave_1: left allmulticast mode [ 1916.916236][ T5826] bridge_slave_1: left promiscuous mode [ 1916.916400][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 1916.942621][ T5826] bridge_slave_0: left allmulticast mode [ 1916.942665][ T5826] bridge_slave_0: left promiscuous mode [ 1916.942823][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1917.202482][ T5826] dummy0: left allmulticast mode [ 1917.202525][ T5826] dummy0: left promiscuous mode [ 1917.202723][ T5826] bridge6: port 1(dummy0) entered disabled state [ 1918.233612][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 1918.233665][ T31] audit: type=1400 audit(1788360511.769:938): avc: denied { setopt } for pid=25248 comm="syz.1.4472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1918.233726][ T31] audit: type=1400 audit(1788360511.769:939): avc: denied { mount } for pid=25248 comm="syz.1.4472" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1918.645736][ T5602] Bluetooth: hci4: command tx timeout [ 1918.829971][ T31] audit: type=1400 audit(1788360512.939:940): avc: denied { write } for pid=25239 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1919.046457][ T31] audit: type=1400 audit(1788360513.159:941): avc: denied { append } for pid=25267 comm="syz.3.4477" name="001" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1919.208499][ T31] audit: type=1400 audit(1788360513.319:942): avc: denied { write } for pid=25269 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1919.781514][ T5826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1919.816167][ T5826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1919.840197][ T5826] bond0 (unregistering): Released all slaves [ 1919.921546][T25150] hsr_slave_0: entered promiscuous mode [ 1919.926070][T25150] hsr_slave_1: entered promiscuous mode [ 1919.926510][T25150] debugfs: 'hsr0' already exists in 'hsr' [ 1919.926525][T25150] Cannot create hsr debugfs directory [ 1919.950865][ T5262] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1920.080459][ T5826] tipc: Left network mode [ 1920.421049][ T5826] IPVS: stopping backup sync thread 7825 ... [ 1922.272640][ T31] audit: type=1400 audit(1788360516.369:943): avc: denied { write } for pid=25281 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1922.405728][T25307] Bluetooth: MGMT ver 1.23 [ 1922.599917][ T31] audit: type=1400 audit(1788360516.709:944): avc: denied { write } for pid=25310 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1923.331748][ T31] audit: type=1400 audit(1788360517.439:945): avc: denied { execute } for pid=25318 comm="syz.0.4490" path="/27/file1" dev="tmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1923.812318][ T31] audit: type=1400 audit(1788360517.919:946): avc: denied { write } for pid=25325 comm="syz.3.4492" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1923.847012][ T31] audit: type=1400 audit(1788360517.959:947): avc: denied { mounton } for pid=25332 comm="syz.6.4494" path="/proc/34/cgroup" dev="proc" ino=88474 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1926.276700][T25150] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1926.571699][T25150] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1926.642088][T25150] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1926.672306][T25150] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1926.677184][ T31] audit: type=1400 audit(1788360520.779:948): avc: denied { write } for pid=25324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1926.704742][T25150] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1926.732964][T25150] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1926.833071][ T31] audit: type=1400 audit(1788360520.939:949): avc: denied { write } for pid=25367 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1926.834986][ T5826] hsr_slave_0: left promiscuous mode [ 1926.869122][ T5826] hsr_slave_1: left promiscuous mode [ 1926.869797][ T5826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1926.869814][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1926.949272][ T5826] veth1_macvtap: left promiscuous mode [ 1926.949331][ T5826] veth0_macvtap: left promiscuous mode [ 1926.949400][ T5826] veth1_vlan: left promiscuous mode [ 1926.949448][ T5826] veth0_vlan: left promiscuous mode [ 1927.996278][ T5826] team0 (unregistering): Port device team_slave_1 removed [ 1928.050077][ T5826] team0 (unregistering): Port device team_slave_0 removed [ 1928.051875][ T31] audit: type=1400 audit(1788360522.159:950): avc: denied { write } for pid=25371 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1928.259555][ T31] audit: type=1400 audit(1788360522.369:951): avc: denied { write } for pid=25397 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1928.769596][T25150] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1928.810880][T25150] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1929.086775][ T31] audit: type=1400 audit(1788360523.199:952): avc: denied { listen } for pid=25422 comm="syz.1.4513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1929.148603][ T31] audit: type=1400 audit(1788360523.259:953): avc: denied { write } for pid=25422 comm="syz.1.4513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1929.163406][ T31] audit: type=1400 audit(1788360523.259:954): avc: denied { accept } for pid=25422 comm="syz.1.4513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1929.176238][ T31] audit: type=1400 audit(1788360523.279:955): avc: denied { getopt } for pid=25422 comm="syz.1.4513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1929.237366][ T31] audit: type=1400 audit(1788360523.349:956): avc: denied { mount } for pid=25422 comm="syz.1.4513" name="/" dev="rpc_pipefs" ino=87651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1929.237761][T25150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1929.283339][ T31] audit: type=1400 audit(1788360523.389:957): avc: denied { read } for pid=25422 comm="syz.1.4513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1929.329878][T25150] 8021q: adding VLAN 0 to HW filter on device team0 [ 1929.385444][T22466] bridge0: port 1(bridge_slave_0) entered blocking state [ 1929.385535][T22466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1929.416962][ T5890] bridge0: port 2(bridge_slave_1) entered blocking state [ 1929.417059][ T5890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1929.572600][ T31] audit: type=1400 audit(1788360523.679:958): avc: denied { write } for pid=25408 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1931.140850][ T31] audit: type=1400 audit(1788360525.249:959): avc: denied { write } for pid=25445 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1931.593493][ T31] audit: type=1400 audit(1788360525.699:960): avc: denied { write } for pid=25457 comm="syz.3.4521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1931.614972][ T5601] Bluetooth: hci5: command 0x0406 tx timeout [ 1932.333531][T25150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1933.288674][T25150] veth0_vlan: entered promiscuous mode [ 1933.321268][T25150] veth1_vlan: entered promiscuous mode [ 1933.411624][T25481] 9pnet_virtio: no channels available for device syz [ 1933.460359][T25150] veth0_macvtap: entered promiscuous mode [ 1933.486627][T25150] veth1_macvtap: entered promiscuous mode [ 1933.836848][T25150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1933.856714][T25150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1933.895626][ T1098] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1933.895689][ T1098] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1933.895717][ T1098] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1933.895743][ T1098] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1934.128844][T25488] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4517'. [ 1934.128904][T25488] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4517'. [ 1934.348323][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1934.348361][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1934.507194][ T5826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1934.507228][ T5826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1935.998547][ T31] audit: type=1400 audit(1788360530.109:961): avc: denied { create } for pid=25499 comm="syz.0.4535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1936.335264][ T31] audit: type=1400 audit(1788360530.439:962): avc: denied { mount } for pid=25505 comm="syz.2.4537" name="/" dev="hugetlbfs" ino=89084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1936.621628][ T31] audit: type=1400 audit(1788360530.729:963): avc: denied { override_creds } for pid=25511 comm="syz.1.4528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1936.911171][ T31] audit: type=1400 audit(1788360531.019:964): avc: denied { setattr } for pid=25515 comm="syz.1.4541" name="SCTPv6" dev="sockfs" ino=87876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1936.954160][ T31] audit: type=1800 audit(1788360531.059:965): pid=25514 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.4540" name="westwood" dev="sda1" ino=2064 res=0 errno=0 [ 1937.294108][T23838] usb 4-1: new low-speed USB device number 50 using dummy_hcd [ 1937.374621][T25527] 9pnet_virtio: no channels available for device syz [ 1938.162356][ T5826] rpcbind: server 127.0.0.1 not responding, timed out [ 1938.169880][T23838] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1938.180039][T23838] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1938.180091][T23838] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1938.180122][T23838] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1938.180148][T23838] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1938.180176][T23838] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1938.237232][T23838] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1938.238194][T23838] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1938.238227][T23838] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1938.238252][T23838] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1938.238276][T23838] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1938.292653][T23838] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1938.300463][T23838] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1938.300504][T23838] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1938.300522][T23838] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1938.300545][T23838] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1938.348866][T23838] usb 4-1: string descriptor 0 read error: -22 [ 1938.355263][T23838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1938.405694][T23838] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1938.587036][T25531] vcan0: tx drop: invalid sa for name 0x0000800000000000 [ 1938.745558][T25150] ffs_data_put(): freeing [ 1941.977188][T25557] Cannot find set identified by id 0 to match [ 1942.478984][T25562] 9pnet_virtio: no channels available for device syz [ 1942.495858][T25562] overlayfs: missing 'lowerdir' [ 1944.357651][T24602] usb 4-1: USB disconnect, device number 50 [ 1946.151442][T25571] vivid-000: kernel_thread() failed [ 1946.881438][ T25] kernel write not supported for file /bus/input/handlers (pid: 25 comm: kworker/1:0) [ 1946.884009][ T31] audit: type=1400 audit(1788360539.709:966): avc: denied { execute_no_trans } for pid=25565 comm="syz.2.4558" path="/6/file2" dev="tmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1946.884049][ T31] audit: type=1400 audit(1788360540.089:967): avc: denied { accept } for pid=25565 comm="syz.2.4558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1946.980092][ T5601] Bluetooth: hci0: command 0x0406 tx timeout [ 1947.079681][ T31] audit: type=1400 audit(1788360541.189:968): avc: denied { mount } for pid=25580 comm="syz.6.4560" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1947.503549][ T31] audit: type=1400 audit(1788360541.609:969): avc: denied { unmount } for pid=24975 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1948.295692][T25595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1948.307895][T25595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1948.410329][T25592] overlayfs: workdir and upperdir must be separate subtrees [ 1952.026379][ T31] audit: type=1400 audit(1788360546.139:970): avc: denied { ioctl } for pid=25618 comm="syz.3.4561" path="socket:[90136]" dev="sockfs" ino=90136 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1953.517492][T25624] hub 8-0:1.0: USB hub found [ 1953.536968][T25624] hub 8-0:1.0: 1 port detected [ 1954.213241][T25628] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4573'. [ 1955.529846][T25642] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4576'. [ 1955.996552][T25654] loop2: detected capacity change from 0 to 2640 [ 1956.251316][T25608] Buffer I/O error on dev loop2, logical block 0, async page read [ 1956.309507][T25608] Buffer I/O error on dev loop2, logical block 0, async page read [ 1956.320404][T25608] Buffer I/O error on dev loop2, logical block 0, async page read [ 1956.414442][T25608] Buffer I/O error on dev loop2, logical block 0, async page read [ 1956.415077][T25608] Buffer I/O error on dev loop2, logical block 0, async page read [ 1960.594077][T25701] ipvlan2: entered allmulticast mode [ 1960.599479][T25701] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1960.614045][T25701] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1963.284692][ T12] IPVS: starting estimator thread 0... [ 1963.373942][T25722] IPVS: using max 49 ests per chain, 117600 per kthread [ 1964.427143][ T31] audit: type=1400 audit(1788360558.539:971): avc: denied { listen } for pid=25714 comm="syz.6.4601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1964.453070][ T31] audit: type=1400 audit(1788360558.559:972): avc: denied { read } for pid=25714 comm="syz.6.4601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1964.530986][ T31] audit: type=1400 audit(1788360558.639:973): avc: denied { write } for pid=25732 comm="syz.0.4608" name="usb_gadget" dev="configfs" ino=439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1964.554115][ T31] audit: type=1400 audit(1788360558.649:974): avc: denied { write } for pid=25732 comm="syz.0.4608" name="configs" dev="configfs" ino=90363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1964.577757][ T31] audit: type=1400 audit(1788360558.659:975): avc: denied { write } for pid=25732 comm="syz.0.4608" name="functions" dev="configfs" ino=90362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1964.644582][T25733] netlink: 'syz.0.4608': attribute type 11 has an invalid length. [ 1965.804022][T25751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4608'. [ 1965.804081][T25751] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1965.869708][T25744] bridge0: port 2(bridge_slave_1) entered disabled state [ 1965.870434][T25744] bridge0: port 1(bridge_slave_0) entered disabled state [ 1966.177084][T25744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1966.193218][T25744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1967.976354][T25739] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 1967.976395][T25739] mac80211_hwsim hwsim36 wlan0: entered allmulticast mode [ 1967.995321][T14075] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1967.996850][T14075] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1967.996881][T14075] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1967.996908][T14075] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1968.104494][T24507] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1968.426236][T25780] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4623'. [ 1968.883423][T24507] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1968.883481][T24507] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 1968.902870][T24507] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1968.902905][T24507] usb 4-1: can't read configurations, error -71 [ 1968.953997][ T31] audit: type=1400 audit(1788360563.059:976): avc: denied { create } for pid=25800 comm="syz.6.4620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1968.976934][ T31] audit: type=1400 audit(1788360563.089:977): avc: denied { read } for pid=25800 comm="syz.6.4620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1969.017957][ T31] audit: type=1400 audit(1788360563.129:978): avc: denied { write } for pid=25800 comm="syz.6.4620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1969.275286][ T31] audit: type=1400 audit(1788360563.299:979): avc: denied { getopt } for pid=25794 comm="syz.0.4629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1969.355435][T25799] bridge1: entered promiscuous mode [ 1969.355545][T25799] bridge1: entered allmulticast mode [ 1969.416814][ T31] audit: type=1400 audit(1788360563.529:980): avc: denied { connect } for pid=25803 comm="syz.2.4631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1969.724460][T25815] loop2: detected capacity change from 0 to 2640 [ 1969.737410][T25778] Buffer I/O error on dev loop2, logical block 0, async page read [ 1969.737739][T25778] Buffer I/O error on dev loop2, logical block 0, async page read [ 1969.754260][T25778] Buffer I/O error on dev loop2, logical block 0, async page read [ 1969.764181][T25778] Buffer I/O error on dev loop2, logical block 0, async page read [ 1969.772573][T25778] Buffer I/O error on dev loop2, logical block 0, async page read [ 1969.943238][T25815] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 1969.953336][T25815] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 1969.962983][T25815] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 1969.972397][T25815] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 1969.981752][T25815] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 1970.097398][T25823] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4638'. [ 1970.131293][T25829] netlink: 'syz.1.4637': attribute type 8 has an invalid length. [ 1970.503930][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1970.503996][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1971.631395][ T31] audit: type=1400 audit(1788360565.739:981): avc: denied { write } for pid=25839 comm="syz.3.4642" name="comms" dev="configfs" ino=14146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1971.681048][ T31] audit: type=1400 audit(1788360565.789:982): avc: denied { setopt } for pid=25835 comm="syz.1.4640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1971.701032][ T31] audit: type=1400 audit(1788360565.799:983): avc: denied { ioctl } for pid=25839 comm="syz.3.4642" path="socket:[90688]" dev="sockfs" ino=90688 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1971.701081][ T31] audit: type=1400 audit(1788360565.799:984): avc: denied { bind } for pid=25839 comm="syz.3.4642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1971.701114][ T31] audit: type=1400 audit(1788360565.799:985): avc: denied { write } for pid=25839 comm="syz.3.4642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1971.769688][ T31] audit: type=1400 audit(1788360565.869:986): avc: denied { bind } for pid=25835 comm="syz.1.4640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1971.790489][ T31] audit: type=1400 audit(1788360565.889:987): avc: denied { read } for pid=25835 comm="syz.1.4640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1971.832048][ T31] audit: type=1400 audit(1788360565.939:988): avc: denied { write } for pid=25835 comm="syz.1.4640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1971.887563][T25845] block nbd0: Receive control failed (result -32) [ 1972.241951][T25860] hub 8-0:1.0: USB hub found [ 1972.252890][T25860] hub 8-0:1.0: 1 port detected [ 1972.456902][T25871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1972.457276][T25871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1972.559217][T25867] netlink: 'syz.6.4649': attribute type 3 has an invalid length. [ 1972.809431][ T31] audit: type=1400 audit(1788360566.919:989): avc: denied { write } for pid=25856 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1972.833145][T25882] netlink: 'syz.3.4651': attribute type 10 has an invalid length. [ 1972.887146][T25882] team0 (unregistering): Port device team_slave_0 removed [ 1972.913547][T25882] team0 (unregistering): Port device team_slave_1 removed [ 1973.189637][ T31] audit: type=1400 audit(1788360567.299:990): avc: denied { write } for pid=25896 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1973.322885][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1973.322916][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1973.322948][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x5c99 instead [ 1973.322965][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x38dd instead [ 1973.322978][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1973.322991][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1973.323025][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1973.323043][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1973.323070][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1973.323094][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1973.323107][T25907] jffs2: Further such events for this erase block will not be printed [ 1973.323404][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1973.323436][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1973.323451][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x5c99 instead [ 1973.323467][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x38dd instead [ 1973.323480][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1973.323493][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1973.323506][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1973.323522][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1973.323548][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1973.323594][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1973.323607][T25907] jffs2: Further such events for this erase block will not be printed [ 1973.323952][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 1973.323965][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 1973.323997][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x5c99 instead [ 1973.324012][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x38dd instead [ 1973.324050][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 1973.324062][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 1973.324076][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x5c99 instead [ 1973.324090][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x38dd instead [ 1973.324142][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 1973.324156][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 1973.324170][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x5c99 instead [ 1973.324186][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x38dd instead [ 1973.324226][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 1973.324239][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 1973.326933][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x5c99 instead [ 1973.326953][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x38dd instead [ 1973.326993][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 1973.327009][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 1973.327040][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x5c99 instead [ 1973.327056][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x38dd instead [ 1973.327092][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 1973.327106][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 1973.327121][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x5c99 instead [ 1973.327137][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x38dd instead [ 1973.327198][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 1973.327212][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 1973.327226][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x5c99 instead [ 1973.327242][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x38dd instead [ 1973.327279][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 1973.327292][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 1973.327324][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x5c99 instead [ 1973.327341][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x38dd instead [ 1973.327379][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 1973.327392][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 1973.327406][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x5c99 instead [ 1973.327420][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x38dd instead [ 1973.327474][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 1973.327487][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 1973.327501][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x5c99 instead [ 1973.327516][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x38dd instead [ 1973.327552][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 1973.327565][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 1973.327596][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x5c99 instead [ 1973.327611][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x38dd instead [ 1973.327647][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 1973.327660][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 1973.327673][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x5c99 instead [ 1973.327688][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x38dd instead [ 1973.327742][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 1973.327756][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 1973.327770][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x5c99 instead [ 1973.327786][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x38dd instead [ 1973.327826][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 1973.327839][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 1973.327870][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x5c99 instead [ 1973.327886][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x38dd instead [ 1973.327922][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 1973.327935][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 1973.327948][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x5c99 instead [ 1973.327963][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x38dd instead [ 1973.328017][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 1973.328030][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 1973.328044][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x5c99 instead [ 1973.328061][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x38dd instead [ 1973.328099][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 1973.328114][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 1973.328145][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x5c99 instead [ 1973.328160][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x38dd instead [ 1973.328197][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 1973.328210][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 1973.328223][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x5c99 instead [ 1973.328238][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x38dd instead [ 1973.328292][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 1973.328306][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 1973.328319][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x5c99 instead [ 1973.328334][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x38dd instead [ 1973.328370][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 1973.328382][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 1973.328396][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x5c99 instead [ 1973.328429][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x38dd instead [ 1973.328465][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 1973.328478][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 1973.328492][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x5c99 instead [ 1973.328507][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x38dd instead [ 1973.328543][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 1973.332636][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 1973.332656][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x5c99 instead [ 1973.332673][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x38dd instead [ 1973.332715][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 1973.332748][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 1973.332763][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x5c99 instead [ 1973.332779][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x38dd instead [ 1973.332825][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 1973.332838][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 1973.332851][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x5c99 instead [ 1973.332884][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x38dd instead [ 1973.332920][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 1973.332933][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 1973.332947][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x5c99 instead [ 1973.332962][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x38dd instead [ 1973.332999][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 1973.333030][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 1973.333046][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x5c99 instead [ 1973.333061][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x38dd instead [ 1973.333097][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 1973.333110][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 1973.333124][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x5c99 instead [ 1973.333139][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x38dd instead [ 1973.333193][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 1973.333206][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 1973.333220][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x5c99 instead [ 1973.333235][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x38dd instead [ 1973.333271][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 1973.333283][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 1973.333315][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x5c99 instead [ 1973.333333][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x38dd instead [ 1973.333370][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 1973.333384][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 1973.333400][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x5c99 instead [ 1973.333419][T25907] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x38dd instead [ 1973.333471][T25907] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1973.333478][T25907] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1976.770236][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 1976.770253][ T31] audit: type=1400 audit(1788360570.879:995): avc: denied { watch watch_reads } for pid=25922 comm="syz.2.4663" path="/" dev="ramfs" ino=90883 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1977.003246][ T31] audit: type=1400 audit(1788360571.109:996): avc: denied { write } for pid=25911 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1977.827596][ T31] audit: type=1400 audit(1788360571.939:997): avc: denied { write } for pid=25937 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1978.329670][ T31] audit: type=1800 audit(1788360572.439:998): pid=25933 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.4663" name="bus" dev="ramfs" ino=90884 res=0 errno=0 [ 1979.565651][T25847] Bluetooth: hci4: link tx timeout [ 1979.565889][T25847] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.587228][T25963] Bluetooth: hci4: link tx timeout [ 1979.587286][T25963] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.589599][T25963] Bluetooth: hci4: link tx timeout [ 1979.589611][T25963] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.594789][T25846] Bluetooth: hci4: link tx timeout [ 1979.594802][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.596870][T25846] Bluetooth: hci4: link tx timeout [ 1979.596904][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.597122][T25846] Bluetooth: hci4: link tx timeout [ 1979.597156][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.597348][T25846] Bluetooth: hci4: link tx timeout [ 1979.597410][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.597599][T25846] Bluetooth: hci4: link tx timeout [ 1979.597633][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.597788][T25846] Bluetooth: hci4: link tx timeout [ 1979.597845][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.597888][T25846] Bluetooth: hci4: link tx timeout [ 1979.597921][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.598114][T25846] Bluetooth: hci4: link tx timeout [ 1979.598146][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.598456][T25846] Bluetooth: hci4: link tx timeout [ 1979.598490][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.598710][T25846] Bluetooth: hci4: link tx timeout [ 1979.598720][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.598916][T25846] Bluetooth: hci4: link tx timeout [ 1979.598975][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.599135][T25846] Bluetooth: hci4: link tx timeout [ 1979.599169][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.599277][T25846] Bluetooth: hci4: link tx timeout [ 1979.599308][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.601174][T25846] Bluetooth: hci4: link tx timeout [ 1979.601209][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.601469][T25846] Bluetooth: hci4: link tx timeout [ 1979.601501][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.601800][T25846] Bluetooth: hci4: link tx timeout [ 1979.601833][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.604430][T25846] Bluetooth: hci4: link tx timeout [ 1979.604465][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.604754][T25846] Bluetooth: hci4: link tx timeout [ 1979.604816][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.605053][T25846] Bluetooth: hci4: link tx timeout [ 1979.605108][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.605236][T25846] Bluetooth: hci4: link tx timeout [ 1979.605261][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.605536][T25846] Bluetooth: hci4: link tx timeout [ 1979.605568][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.605826][T25846] Bluetooth: hci4: link tx timeout [ 1979.605859][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.606051][T25846] Bluetooth: hci4: link tx timeout [ 1979.606113][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.606307][T25846] Bluetooth: hci4: link tx timeout [ 1979.606343][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.606530][T25846] Bluetooth: hci4: link tx timeout [ 1979.606564][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.606895][T25846] Bluetooth: hci4: link tx timeout [ 1979.606954][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.607022][T25846] Bluetooth: hci4: link tx timeout [ 1979.607055][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.607187][T25846] Bluetooth: hci4: link tx timeout [ 1979.607249][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.607418][T25846] Bluetooth: hci4: link tx timeout [ 1979.607452][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.607555][T25846] Bluetooth: hci4: link tx timeout [ 1979.607596][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.607644][T25846] Bluetooth: hci4: link tx timeout [ 1979.607678][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.667149][T25846] Bluetooth: hci4: link tx timeout [ 1979.667166][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.668837][T25846] Bluetooth: hci4: link tx timeout [ 1979.668848][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.677252][T25846] Bluetooth: hci4: link tx timeout [ 1979.677285][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.688028][T25846] Bluetooth: hci4: link tx timeout [ 1979.688042][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.688998][T25846] Bluetooth: hci4: link tx timeout [ 1979.689008][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.697468][T25846] Bluetooth: hci4: link tx timeout [ 1979.697480][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.699085][T25846] Bluetooth: hci4: link tx timeout [ 1979.699094][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.707563][T25846] Bluetooth: hci4: link tx timeout [ 1979.707575][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.709151][T25846] Bluetooth: hci4: link tx timeout [ 1979.709161][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.717622][T25846] Bluetooth: hci4: link tx timeout [ 1979.717632][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.719255][T25846] Bluetooth: hci4: link tx timeout [ 1979.719265][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.719545][T25846] Bluetooth: hci4: link tx timeout [ 1979.719554][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.729336][T25846] Bluetooth: hci4: link tx timeout [ 1979.729369][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.737813][T25846] Bluetooth: hci4: link tx timeout [ 1979.737846][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.742076][T25846] Bluetooth: hci4: link tx timeout [ 1979.742088][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.747921][T25846] Bluetooth: hci4: link tx timeout [ 1979.747934][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.749102][T25846] Bluetooth: hci4: link tx timeout [ 1979.749112][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.749516][T25846] Bluetooth: hci4: link tx timeout [ 1979.749525][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.763107][T25846] Bluetooth: hci4: link tx timeout [ 1979.763124][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.768320][T25846] Bluetooth: hci4: link tx timeout [ 1979.768334][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.777312][T25846] Bluetooth: hci4: link tx timeout [ 1979.777347][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.777907][T25846] Bluetooth: hci4: link tx timeout [ 1979.777917][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.782156][T25846] Bluetooth: hci4: link tx timeout [ 1979.782172][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.785054][T25846] Bluetooth: hci4: link tx timeout [ 1979.785067][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.788329][T25846] Bluetooth: hci4: link tx timeout [ 1979.788339][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.790601][T25846] Bluetooth: hci4: link tx timeout [ 1979.790611][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.800675][T25846] Bluetooth: hci4: link tx timeout [ 1979.800685][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.800792][T25846] Bluetooth: hci4: link tx timeout [ 1979.800801][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.803684][T25846] Bluetooth: hci4: link tx timeout [ 1979.804488][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.804511][T25846] Bluetooth: hci4: link tx timeout [ 1979.804667][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.810724][T25846] Bluetooth: hci4: link tx timeout [ 1979.810737][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.811914][T25846] Bluetooth: hci4: link tx timeout [ 1979.811956][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.812170][T25846] Bluetooth: hci4: link tx timeout [ 1979.812202][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.812428][T25846] Bluetooth: hci4: link tx timeout [ 1979.814962][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.816813][T25846] Bluetooth: hci4: link tx timeout [ 1979.816960][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.817117][T25846] Bluetooth: hci4: link tx timeout [ 1979.817150][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.817408][T25846] Bluetooth: hci4: link tx timeout [ 1979.817439][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.817535][T25846] Bluetooth: hci4: link tx timeout [ 1979.817568][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.817832][T25846] Bluetooth: hci4: link tx timeout [ 1979.817864][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.818120][T25846] Bluetooth: hci4: link tx timeout [ 1979.818130][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.818388][T25846] Bluetooth: hci4: link tx timeout [ 1979.818421][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.818612][T25846] Bluetooth: hci4: link tx timeout [ 1979.818672][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.818886][T25846] Bluetooth: hci4: link tx timeout [ 1979.818948][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.820382][T25846] Bluetooth: hci4: link tx timeout [ 1979.820417][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.820705][T25846] Bluetooth: hci4: link tx timeout [ 1979.820878][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.821035][T25846] Bluetooth: hci4: link tx timeout [ 1979.821069][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.821294][T25846] Bluetooth: hci4: link tx timeout [ 1979.821325][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.821549][T25846] Bluetooth: hci4: link tx timeout [ 1979.821580][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.821759][T25846] Bluetooth: hci4: link tx timeout [ 1979.821768][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.830085][T25846] Bluetooth: hci4: link tx timeout [ 1979.830127][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.830391][T25846] Bluetooth: hci4: link tx timeout [ 1979.830423][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.830686][T25846] Bluetooth: hci4: link tx timeout [ 1979.830719][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.831022][T25846] Bluetooth: hci4: link tx timeout [ 1979.831084][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.831179][T25846] Bluetooth: hci4: link tx timeout [ 1979.831217][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.831518][T25846] Bluetooth: hci4: link tx timeout [ 1979.831528][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.831708][T25846] Bluetooth: hci4: link tx timeout [ 1979.831745][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.832018][T25846] Bluetooth: hci4: link tx timeout [ 1979.832076][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.832380][T25846] Bluetooth: hci4: link tx timeout [ 1979.832414][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.836769][T25846] Bluetooth: hci4: link tx timeout [ 1979.836791][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.836958][T25846] Bluetooth: hci4: link tx timeout [ 1979.837014][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.837204][T25846] Bluetooth: hci4: link tx timeout [ 1979.837237][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.837430][T25846] Bluetooth: hci4: link tx timeout [ 1979.837462][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.837802][T25846] Bluetooth: hci4: link tx timeout [ 1979.837874][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.838004][T25846] Bluetooth: hci4: link tx timeout [ 1979.838037][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.838238][T25846] Bluetooth: hci4: link tx timeout [ 1979.838296][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.838594][T25846] Bluetooth: hci4: link tx timeout [ 1979.838625][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.838953][T25846] Bluetooth: hci4: link tx timeout [ 1979.838996][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.839119][T25846] Bluetooth: hci4: link tx timeout [ 1979.839180][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.839325][T25846] Bluetooth: hci4: link tx timeout [ 1979.839359][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.839483][T25846] Bluetooth: hci4: link tx timeout [ 1979.839517][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.839663][T25846] Bluetooth: hci4: link tx timeout [ 1979.839696][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.840036][T25846] Bluetooth: hci4: link tx timeout [ 1979.840070][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.840266][T25846] Bluetooth: hci4: link tx timeout [ 1979.840327][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.840515][T25846] Bluetooth: hci4: link tx timeout [ 1979.840548][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.840827][T25846] Bluetooth: hci4: link tx timeout [ 1979.840861][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.841120][T25846] Bluetooth: hci4: link tx timeout [ 1979.843689][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.844182][T25846] Bluetooth: hci4: link tx timeout [ 1979.844214][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.844505][T25846] Bluetooth: hci4: link tx timeout [ 1979.844566][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.844758][T25846] Bluetooth: hci4: link tx timeout [ 1979.844792][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.845011][T25846] Bluetooth: hci4: link tx timeout [ 1979.845044][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.845283][T25846] Bluetooth: hci4: link tx timeout [ 1979.845314][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.845570][T25846] Bluetooth: hci4: link tx timeout [ 1979.845602][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.845884][T25846] Bluetooth: hci4: link tx timeout [ 1979.845917][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.846473][T25846] Bluetooth: hci4: link tx timeout [ 1979.846507][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.846750][T25846] Bluetooth: hci4: link tx timeout [ 1979.846785][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.846964][T25846] Bluetooth: hci4: link tx timeout [ 1979.847018][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.852392][T25846] Bluetooth: hci4: link tx timeout [ 1979.852459][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.852791][T25846] Bluetooth: hci4: link tx timeout [ 1979.852824][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.853105][T25846] Bluetooth: hci4: link tx timeout [ 1979.853167][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.853405][T25846] Bluetooth: hci4: link tx timeout [ 1979.853465][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.854926][T25846] Bluetooth: hci4: link tx timeout [ 1979.854960][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.855326][T25846] Bluetooth: hci4: link tx timeout [ 1979.855369][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.855623][T25846] Bluetooth: hci4: link tx timeout [ 1979.855657][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.857533][T25846] Bluetooth: hci4: link tx timeout [ 1979.857565][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.857822][T25846] Bluetooth: hci4: link tx timeout [ 1979.857854][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.858022][T25846] Bluetooth: hci4: link tx timeout [ 1979.858080][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.858245][T25846] Bluetooth: hci4: link tx timeout [ 1979.858277][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.858542][T25846] Bluetooth: hci4: link tx timeout [ 1979.858571][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.858923][T25846] Bluetooth: hci4: link tx timeout [ 1979.858955][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.860625][T25846] Bluetooth: hci4: link tx timeout [ 1979.860657][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.861254][T25846] Bluetooth: hci4: link tx timeout [ 1979.861289][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.861482][T25846] Bluetooth: hci4: link tx timeout [ 1979.861515][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.861769][T25846] Bluetooth: hci4: link tx timeout [ 1979.861814][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.861974][T25846] Bluetooth: hci4: link tx timeout [ 1979.862007][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.862238][T25846] Bluetooth: hci4: link tx timeout [ 1979.862287][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.862638][T25846] Bluetooth: hci4: link tx timeout [ 1979.862673][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.862835][T25846] Bluetooth: hci4: link tx timeout [ 1979.862868][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.863054][T25846] Bluetooth: hci4: link tx timeout [ 1979.863086][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.863421][T25846] Bluetooth: hci4: link tx timeout [ 1979.863454][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.863587][T25846] Bluetooth: hci4: link tx timeout [ 1979.863644][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.864125][T25846] Bluetooth: hci4: link tx timeout [ 1979.864159][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.864348][T25846] Bluetooth: hci4: link tx timeout [ 1979.864384][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.864653][T25846] Bluetooth: hci4: link tx timeout [ 1979.864687][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.873973][T25846] Bluetooth: hci4: link tx timeout [ 1979.874010][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.874220][T25846] Bluetooth: hci4: link tx timeout [ 1979.874259][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.874425][T25846] Bluetooth: hci4: link tx timeout [ 1979.874462][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.874672][T25846] Bluetooth: hci4: link tx timeout [ 1979.874683][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.874946][T25846] Bluetooth: hci4: link tx timeout [ 1979.874981][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.875183][T25846] Bluetooth: hci4: link tx timeout [ 1979.875249][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.875398][T25846] Bluetooth: hci4: link tx timeout [ 1979.875430][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.875608][T25846] Bluetooth: hci4: link tx timeout [ 1979.875669][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.875941][T25846] Bluetooth: hci4: link tx timeout [ 1979.875973][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1979.876229][T25846] Bluetooth: hci4: link tx timeout [ 1979.876264][T25846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1981.604076][T25846] Bluetooth: hci4: command 0x0406 tx timeout [ 1982.605348][ T31] audit: type=1400 audit(1788360576.719:999): avc: denied { bind } for pid=25972 comm="syz.2.4673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1982.646591][T25973] random: crng reseeded on system resumption [ 1982.648576][ T31] audit: type=1400 audit(1788360576.759:1000): avc: denied { append } for pid=25972 comm="syz.2.4673" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1982.648618][ T31] audit: type=1400 audit(1788360576.759:1001): avc: denied { open } for pid=25972 comm="syz.2.4673" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1982.895499][ T25] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 1984.262254][ T25] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1984.535030][ T25] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1984.535094][ T25] usb 4-1: config 1 has no interfaces? [ 1984.535134][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1984.665772][T25988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1984.666216][T25988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1985.294062][T24538] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1985.447240][T24538] usb 7-1: Using ep0 maxpacket: 16 [ 1985.645131][T26006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4683'. [ 1986.555256][ T25] usb 4-1: string descriptor 0 read error: -71 [ 1986.861257][ T25] usb 4-1: USB disconnect, device number 53 [ 1987.387599][T24538] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1987.396247][T24538] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1987.396356][T24538] usb 7-1: no configurations [ 1987.396428][T24538] usb 7-1: can't read configurations, error -22 [ 1995.956442][T26068] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1996.007031][T26078] random: crng reseeded on system resumption [ 1997.764895][T26097] hub 8-0:1.0: USB hub found [ 1997.766276][T26097] hub 8-0:1.0: 1 port detected [ 1998.167093][T25847] Bluetooth: hci1: command 0x0406 tx timeout [ 1999.889232][ T31] audit: type=1400 audit(1788360593.529:1002): avc: denied { ioctl } for pid=26105 comm="syz.0.4718" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2000.501836][T26121] netlink: 'syz.6.4723': attribute type 3 has an invalid length. [ 2000.717916][T26127] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4726'. [ 2001.417446][ T31] audit: type=1400 audit(1788360595.529:1003): avc: denied { mounton } for pid=26126 comm="syz.2.4726" path="/47/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 2003.349663][ T31] audit: type=1400 audit(1788360597.389:1004): avc: denied { write } for pid=26140 comm="syz.6.4729" name="functions" dev="configfs" ino=8845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2003.416506][ T31] audit: type=1400 audit(1788360597.529:1005): avc: denied { write } for pid=26140 comm="syz.6.4729" name="c.1" dev="configfs" ino=8850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2003.416602][ T31] audit: type=1400 audit(1788360597.529:1006): avc: denied { write } for pid=26140 comm="syz.6.4729" name="c.1" dev="configfs" ino=8850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2003.446068][ T25] usb 1-1: USB disconnect, device number 4 [ 2005.196329][T26155] random: crng reseeded on system resumption [ 2007.233781][T26188] random: crng reseeded on system resumption [ 2008.236359][ T31] audit: type=1400 audit(1788360602.349:1007): avc: denied { write } for pid=26196 comm="syz.0.4752" name="c.1" dev="configfs" ino=8850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2008.259421][ T31] audit: type=1400 audit(1788360602.349:1008): avc: denied { write } for pid=26196 comm="syz.0.4752" name="c.1" dev="configfs" ino=8850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2008.611508][T26211] 9pnet_virtio: no channels available for device syz [ 2008.723921][T24538] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 2008.896178][T24538] usb 1-1: Using ep0 maxpacket: 32 [ 2008.896890][T24538] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2008.897725][T24538] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 2008.897753][T24538] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2008.897784][T24538] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2008.897805][T24538] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2008.897826][T24538] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2008.899496][T24538] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2008.899520][T24538] usb 1-1: Product: syz [ 2008.899533][T24538] usb 1-1: Manufacturer: syz [ 2008.899545][T24538] usb 1-1: SerialNumber: syz [ 2008.982899][T24538] usb 1-1: config 0 descriptor?? [ 2009.032971][T24538] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2009.065686][T24538] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2009.266875][T24538] usb 1-1: USB disconnect, device number 5 [ 2009.388120][T24538] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 2009.970426][T26233] sg_write: data in/out 1265126/1 bytes for SCSI command 0x32-- guessing data in; [ 2009.970426][T26233] program syz.0.4761 not setting count and/or reply_len properly [ 2010.231211][ T31] audit: type=1400 audit(1788360604.339:1009): avc: denied { write } for pid=26210 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2011.210970][ T31] audit: type=1400 audit(1788360605.319:1010): avc: denied { write } for pid=26238 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2011.984497][T26251] netlink: 'syz.0.4764': attribute type 4 has an invalid length. [ 2012.104194][T26255] binder_alloc: 26254: binder_alloc_buf, no vma [ 2013.413866][ T31] audit: type=1400 audit(1788360607.519:1011): avc: denied { write } for pid=26257 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2014.967066][ T31] audit: type=1400 audit(1788360609.079:1012): avc: denied { setopt } for pid=26296 comm="syz.3.4782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2015.087211][ T31] audit: type=1400 audit(1788360609.199:1013): avc: denied { write } for pid=26293 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2018.546042][T26326] binder_alloc: 26324: binder_alloc_buf, no vma [ 2019.814631][T25963] Bluetooth: hci3: command 0x0406 tx timeout [ 2026.911185][T26399] set match dimension is over the limit! [ 2029.013932][T26417] netlink: 'syz.3.4823': attribute type 1 has an invalid length. [ 2029.923994][T26417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2030.135213][T26430] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4828'. [ 2031.974269][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2031.974332][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2035.939712][T26485] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4843'. [ 2037.081268][ T31] audit: type=1400 audit(1788360631.189:1014): avc: denied { ioctl } for pid=26476 comm="syz.2.4841" path="cgroup:[4026534195]" dev="nsfs" ino=4026534195 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2038.964813][T26521] netlink: 'syz.1.4854': attribute type 3 has an invalid length. [ 2039.026121][T26523] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4855'. [ 2041.560612][T26562] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4869'. [ 2045.165634][T19971] usb 3-1: new low-speed USB device number 67 using dummy_hcd [ 2045.227604][T26595] netlink: 'syz.6.4866': attribute type 9 has an invalid length. [ 2045.855179][T19971] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2045.859838][T19971] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2045.859862][T19971] usb 3-1: config 1 has no interfaces? [ 2045.859884][T19971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2045.986666][T26601] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4882'. [ 2048.007420][T26615] random: crng reseeded on system resumption [ 2049.257796][T19971] usb 3-1: string descriptor 0 read error: -71 [ 2049.261437][T19971] usb 3-1: USB disconnect, device number 67 [ 2049.283569][T26637] netlink: 'syz.1.4893': attribute type 9 has an invalid length. [ 2051.334580][T25847] Bluetooth: hci4: link tx timeout [ 2051.334611][T25847] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.344005][T25963] Bluetooth: hci4: link tx timeout [ 2051.344022][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.353514][T25963] Bluetooth: hci4: link tx timeout [ 2051.353557][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.369773][T25963] Bluetooth: hci4: link tx timeout [ 2051.369809][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.369889][T25963] Bluetooth: hci4: link tx timeout [ 2051.369898][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.377973][T25963] Bluetooth: hci4: link tx timeout [ 2051.378008][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.378075][T25963] Bluetooth: hci4: link tx timeout [ 2051.378108][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.378275][T25963] Bluetooth: hci4: link tx timeout [ 2051.378307][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.378453][T25963] Bluetooth: hci4: link tx timeout [ 2051.378484][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.378713][T25963] Bluetooth: hci4: link tx timeout [ 2051.378746][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.378914][T25963] Bluetooth: hci4: link tx timeout [ 2051.378947][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.379142][T25963] Bluetooth: hci4: link tx timeout [ 2051.379176][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.379316][T25963] Bluetooth: hci4: link tx timeout [ 2051.379326][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.379552][T25963] Bluetooth: hci4: link tx timeout [ 2051.379586][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.379749][T25963] Bluetooth: hci4: link tx timeout [ 2051.379784][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.379957][T25963] Bluetooth: hci4: link tx timeout [ 2051.379991][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.380152][T25963] Bluetooth: hci4: link tx timeout [ 2051.380162][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.380325][T25963] Bluetooth: hci4: link tx timeout [ 2051.380334][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.380515][T25963] Bluetooth: hci4: link tx timeout [ 2051.380548][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.380691][T25963] Bluetooth: hci4: link tx timeout [ 2051.380722][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.380936][T25963] Bluetooth: hci4: link tx timeout [ 2051.380969][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.381100][T25963] Bluetooth: hci4: link tx timeout [ 2051.381134][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.381265][T25963] Bluetooth: hci4: link tx timeout [ 2051.381299][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.381462][T25963] Bluetooth: hci4: link tx timeout [ 2051.381528][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.381660][T25963] Bluetooth: hci4: link tx timeout [ 2051.381693][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.381825][T25963] Bluetooth: hci4: link tx timeout [ 2051.381863][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.382027][T25963] Bluetooth: hci4: link tx timeout [ 2051.382061][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.382170][T25963] Bluetooth: hci4: link tx timeout [ 2051.382237][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.382396][T25963] Bluetooth: hci4: link tx timeout [ 2051.382429][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.382596][T25963] Bluetooth: hci4: link tx timeout [ 2051.382629][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.382793][T25963] Bluetooth: hci4: link tx timeout [ 2051.382826][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.383005][T25963] Bluetooth: hci4: link tx timeout [ 2051.383039][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.383205][T25963] Bluetooth: hci4: link tx timeout [ 2051.383239][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.383438][T25963] Bluetooth: hci4: link tx timeout [ 2051.383482][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.383580][T25963] Bluetooth: hci4: link tx timeout [ 2051.383614][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.383820][T25963] Bluetooth: hci4: link tx timeout [ 2051.383852][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.383966][T25963] Bluetooth: hci4: link tx timeout [ 2051.383997][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.384182][T25963] Bluetooth: hci4: link tx timeout [ 2051.384215][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.516802][T25963] Bluetooth: hci4: link tx timeout [ 2051.516826][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2051.828065][T26658] hub 8-0:1.0: USB hub found [ 2051.828900][T26658] hub 8-0:1.0: 1 port detected [ 2052.435907][T25963] Bluetooth: hci4: link tx timeout [ 2052.442364][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2052.454670][T25963] Bluetooth: hci4: link tx timeout [ 2052.454685][T25963] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2053.028523][T26679] batman_adv: batadv0: Adding interface: dummy0 [ 2053.037306][T26679] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2053.064624][T26679] batman_adv: batadv0: Interface activated: dummy0 [ 2053.158959][T26679] batadv0: mtu less than device minimum [ 2053.159850][T26679] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2053.160704][T26679] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2053.161561][T26679] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2053.162403][T26679] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2053.163245][T26679] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2053.165528][T26679] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2053.166395][T26679] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2053.167242][T26679] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2053.168086][T26679] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2053.364336][T25963] Bluetooth: hci4: command 0x0406 tx timeout [ 2054.100344][T26681] kvm: pic: level sensitive irq not supported [ 2054.718669][T26707] hub 8-0:1.0: USB hub found [ 2054.726889][T26707] hub 8-0:1.0: 1 port detected [ 2055.462997][T26717] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4918'. [ 2055.490621][T26719] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4919'. [ 2056.026892][T25769] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 2056.199908][T25769] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2056.207582][T25769] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2056.207606][T25769] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2056.207622][T25769] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2056.207654][T25769] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2056.214145][T25769] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2056.214176][T25769] usb 1-1: Product: syz [ 2056.214238][T25769] usb 1-1: Manufacturer: syz [ 2056.320335][T25769] cdc_wdm 1-1:1.0: skipping garbage [ 2056.320352][T25769] cdc_wdm 1-1:1.0: skipping garbage [ 2056.371366][T25769] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2056.371393][T25769] cdc_wdm 1-1:1.0: Unknown control protocol [ 2056.845181][T24538] usb 1-1: USB disconnect, device number 6 [ 2056.995666][T26745] netlink: 'syz.2.4910': attribute type 2 has an invalid length. [ 2057.064505][T26742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2057.313886][T24538] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 2057.506128][T24538] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2057.564780][T24538] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2057.564821][T24538] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2057.564850][T24538] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2057.564890][T24538] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2057.607083][T24538] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2057.607121][T24538] usb 1-1: Product: syz [ 2057.607146][T24538] usb 1-1: Manufacturer: syz [ 2057.620003][T24538] cdc_wdm 1-1:1.0: skipping garbage [ 2057.620018][T24538] cdc_wdm 1-1:1.0: skipping garbage [ 2057.632585][T24538] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2057.632604][T24538] cdc_wdm 1-1:1.0: Unknown control protocol [ 2057.749715][T26754] hub 8-0:1.0: USB hub found [ 2057.750495][T26754] hub 8-0:1.0: 1 port detected [ 2058.793133][ T31] audit: type=1400 audit(1788360652.899:1015): avc: denied { read write } for pid=26725 comm="syz.0.4920" name="cdc-wdm0" dev="devtmpfs" ino=3668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 2058.818325][ T31] audit: type=1400 audit(1788360652.929:1016): avc: denied { open } for pid=26725 comm="syz.0.4920" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 2058.928160][ C0] cdc_wdm 1-1:1.0: Unexpected error -71 [ 2058.928472][T24602] usb 1-1: USB disconnect, device number 7 [ 2058.929407][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2058.929496][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2058.929514][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2059.492584][T26788] netlink: 'syz.6.4936': attribute type 2 has an invalid length. [ 2059.551189][T26795] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4939'. [ 2062.594798][T26825] netlink: 'syz.3.4947': attribute type 3 has an invalid length. [ 2062.701814][T26822] hub 8-0:1.0: USB hub found [ 2062.702024][T26822] hub 8-0:1.0: 1 port detected [ 2063.437254][T26854] loop2: detected capacity change from 0 to 2640 [ 2064.173350][T26739] buffer_io_error: 325 callbacks suppressed [ 2064.179545][T26739] Buffer I/O error on dev loop2, logical block 0, async page read [ 2064.192572][T26739] Buffer I/O error on dev loop2, logical block 0, async page read [ 2064.201206][T26739] Buffer I/O error on dev loop2, logical block 0, async page read [ 2064.211205][T26739] Buffer I/O error on dev loop2, logical block 0, async page read [ 2064.221543][T26739] Buffer I/O error on dev loop2, logical block 0, async page read [ 2064.242767][T26859] binder: BINDER_SET_CONTEXT_MGR already set [ 2064.242790][T26859] binder: 26858:26859 ioctl 4018620d 200000000040 returned -16 [ 2064.686062][T26876] hub 8-0:1.0: USB hub found [ 2064.687940][T26876] hub 8-0:1.0: 1 port detected [ 2066.379162][T26899] loop2: detected capacity change from 0 to 2640 [ 2066.386896][T26899] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 2066.386918][T26899] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 2066.386931][T26899] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 2066.386944][T26899] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 2066.386957][T26899] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 2066.792864][T26910] hub 8-0:1.0: USB hub found [ 2066.799933][T26910] hub 8-0:1.0: 1 port detected [ 2066.964095][T26913] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4962'. [ 2067.115645][T26915] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4977'. [ 2069.345003][T26934] binder: BINDER_SET_CONTEXT_MGR already set [ 2069.345028][T26934] binder: 26933:26934 ioctl 4018620d 200000000040 returned -16 [ 2071.460430][ T31] audit: type=1400 audit(1788360665.569:1017): avc: denied { write } for pid=26942 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2072.309667][ T31] audit: type=1400 audit(1788360666.419:1018): avc: denied { write } for pid=26976 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2072.365528][T25847] Bluetooth: hci4: unexpected event for opcode 0x0419 [ 2072.627091][T26992] loop2: detected capacity change from 0 to 2640 [ 2072.652706][T26739] buffer_io_error: 325 callbacks suppressed [ 2072.652758][T26739] Buffer I/O error on dev loop2, logical block 0, async page read [ 2072.656244][T26739] Buffer I/O error on dev loop2, logical block 0, async page read [ 2072.656575][T26739] Buffer I/O error on dev loop2, logical block 0, async page read [ 2072.658342][T26739] Buffer I/O error on dev loop2, logical block 0, async page read [ 2072.658708][T26739] Buffer I/O error on dev loop2, logical block 0, async page read [ 2073.423351][T27013] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5005'. [ 2075.501834][ T31] audit: type=1400 audit(1788360669.609:1019): avc: denied { write } for pid=26991 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2075.653100][T22467] IPVS: starting estimator thread 0... [ 2075.743898][T27036] IPVS: using max 42 ests per chain, 100800 per kthread [ 2075.831387][ T31] audit: type=1400 audit(1788360669.939:1020): avc: denied { write } for pid=27039 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2076.557072][T25847] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 2076.557186][T25847] Bluetooth: hci4: Injecting HCI hardware error event [ 2076.558611][T25963] Bluetooth: hci4: hardware error 0x00 [ 2076.912764][T27061] loop2: detected capacity change from 0 to 2640 [ 2077.748462][T27055] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 2077.748503][T27055] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 2077.765420][T27055] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 2077.766027][T27055] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 2077.766049][T27055] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 2077.766068][T27055] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 2077.766087][T27055] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 2077.766106][T27055] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 2077.766125][T27055] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 2077.766144][T27055] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 2078.067030][T27076] netlink: 'syz.0.5019': attribute type 2 has an invalid length. [ 2078.067066][T27076] netlink: 'syz.0.5019': attribute type 9 has an invalid length. [ 2078.890662][T25963] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 2079.015628][T27082] random: crng reseeded on system resumption [ 2079.015970][ T31] audit: type=1400 audit(1788360673.129:1021): avc: denied { write } for pid=27081 comm="syz.6.5023" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2079.341851][ T31] audit: type=1400 audit(1788360673.449:1022): avc: denied { write } for pid=27056 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2079.396331][T24726] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 2080.094674][T24726] usb 1-1: Using ep0 maxpacket: 32 [ 2080.176977][T24726] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2080.234405][T24726] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 2080.234494][T24726] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2080.234525][T24726] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2080.234546][T24726] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2080.234568][T24726] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2080.367237][T24726] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2080.367270][T24726] usb 1-1: Product: syz [ 2080.367302][T24726] usb 1-1: Manufacturer: syz [ 2080.367315][T24726] usb 1-1: SerialNumber: syz [ 2080.377709][T24726] usb 1-1: config 0 descriptor?? [ 2080.406607][T24726] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2080.416572][T24726] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2080.480936][T27073] syz.3.5010 (27073) used greatest stack depth: 18720 bytes left [ 2080.491363][ T31] audit: type=1400 audit(1788360674.599:1023): avc: denied { write } for pid=27096 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2080.702192][T27098] hub 8-0:1.0: USB hub found [ 2080.707991][T27098] hub 8-0:1.0: 1 port detected [ 2081.114734][T25769] usb 1-1: USB disconnect, device number 8 [ 2081.337646][T25769] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 2082.907111][T27123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27123 comm=syz.2.5031 [ 2082.907166][T27123] netlink: 11 bytes leftover after parsing attributes in process `syz.2.5031'. [ 2083.032364][ T31] audit: type=1400 audit(1788360677.139:1024): avc: denied { write } for pid=27103 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2083.214194][ T31] audit: type=1400 audit(1788360677.329:1025): avc: denied { write } for pid=27134 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2084.315069][T27144] netlink: 'syz.6.5035': attribute type 2 has an invalid length. [ 2084.315105][T27144] netlink: 'syz.6.5035': attribute type 9 has an invalid length. [ 2084.494610][T27146] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5037'. [ 2086.984948][T27178] netlink: 'syz.2.5049': attribute type 2 has an invalid length. [ 2086.984989][T27178] netlink: 'syz.2.5049': attribute type 9 has an invalid length. [ 2089.737938][T27210] loop2: detected capacity change from 0 to 2640 [ 2089.820573][T27205] buffer_io_error: 320 callbacks suppressed [ 2089.820618][T27205] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 2089.820645][T27205] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 2089.820660][T27205] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 2089.820674][T27205] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 2089.820691][T27205] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 2089.820715][T27205] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 2089.820739][T27205] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 2089.820753][T27205] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 2089.820767][T27205] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 2089.820781][T27205] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 2093.368345][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2093.368420][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2096.011543][T27276] hub 8-0:1.0: USB hub found [ 2096.021962][T27276] hub 8-0:1.0: 1 port detected [ 2100.502445][ T31] audit: type=1400 audit(1788360694.609:1026): avc: denied { map } for pid=27348 comm="syz.6.5112" path="/133/my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups" dev="configfs" ino=94988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 2100.535108][ T31] audit: type=1400 audit(1788360694.639:1027): avc: denied { execute } for pid=27348 comm="syz.6.5112" path="/133/my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups" dev="configfs" ino=94988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 2100.601336][ T31] audit: type=1800 audit(1788360694.699:1028): pid=27349 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.5112" name="num_groups" dev="configfs" ino=94988 res=0 errno=0 [ 2100.762376][T27359] FAULT_INJECTION: forcing a failure. [ 2100.762376][T27359] name failslab, interval 1, probability 0, space 0, times 0 [ 2100.789871][T27359] CPU: 1 UID: 0 PID: 27359 Comm: syz.6.5115 Tainted: G L syzkaller #0 PREEMPT(full) [ 2100.789905][T27359] Tainted: [L]=SOFTLOCKUP [ 2100.789918][T27359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 2100.789929][T27359] Call Trace: [ 2100.789937][T27359] [ 2100.789945][T27359] dump_stack_lvl+0x100/0x190 [ 2100.789978][T27359] should_fail_ex.cold+0x5/0xa [ 2100.790005][T27359] should_failslab+0xc2/0x120 [ 2100.790028][T27359] __kmalloc_cache_node_noprof+0x94/0x720 [ 2100.790050][T27359] ? kasan_save_free_info+0x3b/0x70 [ 2100.790081][T27359] ? mempool_create_node_noprof+0xb9/0x1b0 [ 2100.790114][T27359] ? __pfx_msgpool_free+0x10/0x10 [ 2100.790136][T27359] mempool_create_node_noprof+0xb9/0x1b0 [ 2100.790165][T27359] ? __pfx_msgpool_alloc+0x10/0x10 [ 2100.790189][T27359] ceph_msgpool_init+0xdc/0x1d0 [ 2100.790214][T27359] ceph_osdc_init+0x4f1/0xa00 [ 2100.790249][T27359] ceph_create_client+0x281/0x370 [ 2100.790280][T27359] ceph_get_tree+0x1a4/0x1fd0 [ 2100.790305][T27359] ? bpf_lsm_capable+0x9/0x10 [ 2100.790331][T27359] ? security_capable+0x80/0x260 [ 2100.790359][T27359] vfs_get_tree+0x92/0x320 [ 2100.790388][T27359] vfs_cmd_create+0xd7/0x2a0 [ 2100.790418][T27359] __do_sys_fsconfig+0x55a/0xcb0 [ 2100.790449][T27359] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 2100.790492][T27359] do_syscall_64+0x123/0x790 [ 2100.790519][T27359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2100.790538][T27359] RIP: 0033:0x7f98e099e159 [ 2100.790557][T27359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2100.790576][T27359] RSP: 002b:00007f98e17d3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 2100.790597][T27359] RAX: ffffffffffffffda RBX: 00007f98e0c25fa0 RCX: 00007f98e099e159 [ 2100.790609][T27359] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 2100.790621][T27359] RBP: 00007f98e0a35024 R08: 0000000000000000 R09: 0000000000000000 [ 2100.790633][T27359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2100.790645][T27359] R13: 00007f98e0c26038 R14: 00007f98e0c25fa0 R15: 00007ffcdfe169d8 [ 2100.790672][T27359] [ 2101.297797][T27369] netlink: 'syz.2.5118': attribute type 3 has an invalid length. [ 2101.609806][T27375] netlink: 'syz.2.5122': attribute type 10 has an invalid length. [ 2101.609839][T27375] syz_tun: entered promiscuous mode [ 2101.633499][T27375] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2101.958161][T27375] net_ratelimit: 10 callbacks suppressed [ 2101.958192][T27375] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2102.042138][ T5826] IPVS: starting estimator thread 0... [ 2102.148330][T27380] IPVS: using max 76 ests per chain, 182400 per kthread [ 2102.518758][T27391] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2102.637089][T27395] bridge0: port 3(syz_tun) entered blocking state [ 2102.637205][T27395] bridge0: port 3(syz_tun) entered disabled state [ 2102.638170][T27395] syz_tun: entered allmulticast mode [ 2102.815461][T27395] syz_tun: entered promiscuous mode [ 2102.906030][T27395] bridge0: port 3(syz_tun) entered blocking state [ 2102.906118][T27395] bridge0: port 3(syz_tun) entered forwarding state [ 2103.025718][T27399] tipc: Started in network mode [ 2103.025766][T27399] tipc: Node identity ac14140f, cluster identity 4711 [ 2103.067553][T27399] tipc: New replicast peer: 255.255.255.255 [ 2103.068124][T27399] tipc: Enabled bearer , priority 10 [ 2103.155485][T27405] device-mapper: table: 248:1: thin-pool: target type may not be included in a read-only table (-EINVAL) [ 2103.155518][T27405] device-mapper: ioctl: error adding target to table [ 2103.529487][T27412] netlink: zone id is out of range [ 2103.529626][T27412] netlink: zone id is out of range [ 2103.529865][T27412] netlink: zone id is out of range [ 2103.530108][T27412] netlink: zone id is out of range [ 2103.530200][T27412] netlink: zone id is out of range [ 2103.532999][T27412] netlink: zone id is out of range [ 2103.533186][T27412] netlink: zone id is out of range [ 2103.533212][T27412] netlink: zone id is out of range [ 2103.533385][T27412] netlink: zone id is out of range [ 2104.493281][T24538] tipc: Node number set to 2886997007 [ 2104.691515][T27421] random: crng reseeded on system resumption [ 2106.908525][ T31] audit: type=1400 audit(1788360701.019:1029): avc: denied { write } for pid=27441 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2107.053123][T27464] random: crng reseeded on system resumption [ 2107.288235][ T31] audit: type=1400 audit(1788360701.399:1030): avc: denied { write } for pid=27469 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2107.350804][T22466] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 2107.378706][ T5826] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 2107.400973][T22466] (NULL device *): queue 0 connect admin queue failed (-6). [ 2107.410553][T22466] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 2107.424445][T22466] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 2107.465783][T27474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5151'. [ 2107.478061][T27461] nvme nvme0: NVME-FC{0}: new ctrl: NQN "nqn.2014-08.org.nvmexpress.discovery", hostnqn: nqn.2014-08.org.nvmexpress:uuid:a67ad8d3-faeb-4854-bd64-d0402f512a81 [ 2107.572032][T27462] syzkaller0: entered promiscuous mode [ 2107.572068][T27462] syzkaller0: entered allmulticast mode [ 2108.225275][T27488] input: syz0 as /devices/virtual/input/input45 [ 2108.340447][T27492] input: syz0 as /devices/virtual/input/input46 [ 2108.908052][ T31] audit: type=1400 audit(1788360703.019:1031): avc: denied { write } for pid=27481 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2109.056120][T27517] net_ratelimit: 15 callbacks suppressed [ 2109.061938][T27517] netlink: zone id is out of range [ 2109.067720][T27517] netlink: zone id is out of range [ 2109.072965][T27517] netlink: zone id is out of range [ 2109.078261][T27517] netlink: zone id is out of range [ 2109.083443][T27517] netlink: zone id is out of range [ 2109.083449][T27517] netlink: zone id is out of range [ 2109.083454][T27517] netlink: zone id is out of range [ 2109.083458][T27517] netlink: zone id is out of range [ 2109.083462][T27517] netlink: zone id is out of range [ 2109.083467][T27517] netlink: del zone limit has 4 unknown bytes [ 2109.166159][ T31] audit: type=1400 audit(1788360703.279:1032): avc: denied { write } for pid=27518 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2109.441022][T27523] fuse: fd is not a fuse device [ 2109.464345][T22466] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 2109.464596][ T5892] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 2109.464827][T22466] (NULL device *): queue 0 connect admin queue failed (-6). [ 2109.464844][T22466] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 2109.464857][T22466] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 2111.575085][T14347] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 2111.593046][ T5892] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 2111.595588][T14347] (NULL device *): queue 0 connect admin queue failed (-6). [ 2111.595609][T14347] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 2111.595623][T14347] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 2112.728935][T27543] fuse: fd is not a fuse device [ 2113.609232][ T5892] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 2113.611495][T14347] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 2113.614563][ T5892] (NULL device *): queue 0 connect admin queue failed (-6). [ 2113.614584][ T5892] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 2113.614598][ T5892] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 2113.792688][T27547] tipc: Started in network mode [ 2113.797718][T27547] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 2113.829859][T27547] tipc: Enabled bearer , priority 10 [ 2113.888268][T27547] dummy0: MTU too low for tipc bearer [ 2113.888317][T27547] tipc: Enabling of bearer rejected, failed to enable media [ 2113.905611][T27552] random: crng reseeded on system resumption [ 2113.907501][T27547] tipc: New replicast peer: 255.255.255.255 [ 2113.908162][T27547] tipc: Enabled bearer , priority 10 [ 2114.947301][T24726] tipc: Node number set to 4269801491 [ 2115.037768][T19971] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2115.186070][T19971] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 2115.186921][T19971] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2115.186954][T19971] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 2115.186974][T19971] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 128 [ 2115.186993][T19971] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 2115.187025][T19971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2115.190988][T27571] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2115.191084][T27571] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2115.197541][T19971] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 2115.205894][T19971] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 2115.205952][T19971] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 2115.227417][T19971] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 2115.228555][T19971] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 2115.228611][T19971] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 2115.240294][T19971] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 2115.684053][ T5826] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 2115.685617][T22466] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 2115.689581][ T5826] (NULL device *): queue 0 connect admin queue failed (-6). [ 2115.689603][ T5826] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 2115.689617][ T5826] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 2115.722626][T19971] usb 3-1: USB disconnect, device number 68 [ 2115.726876][T19971] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 2115.734284][T19971] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 2115.734845][T19971] keyspan 3-1:1.0: device disconnected [ 2116.375660][T27609] hsr_slave_0: left promiscuous mode [ 2116.381135][T27609] hsr_slave_1: left promiscuous mode [ 2116.515588][ T31] audit: type=1400 audit(1788360710.629:1033): avc: denied { read } for pid=27610 comm="syz.6.5205" path="socket:[95583]" dev="sockfs" ino=95583 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2116.587009][T27619] net_ratelimit: 12 callbacks suppressed [ 2116.592864][T27619] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2116.595633][ T31] audit: type=1400 audit(1788360710.709:1034): avc: denied { shutdown } for pid=27610 comm="syz.6.5205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2116.634076][T19971] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2116.788417][T19971] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2116.799496][T19971] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2116.799767][T19971] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2116.807079][T19971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2116.807101][T19971] usb 4-1: Product: syz [ 2116.807115][T19971] usb 4-1: Manufacturer: syz [ 2116.807128][T19971] usb 4-1: SerialNumber: syz [ 2117.026622][T27607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2117.035532][T27607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2117.049944][T19971] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 2117.063365][T19971] usb 4-1: USB disconnect, device number 54 [ 2117.518922][T19971] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 2117.664283][T19971] usb 4-1: Using ep0 maxpacket: 8 [ 2117.673332][T19971] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2117.700948][T19971] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 2117.711450][T19971] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2117.727314][T19971] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2117.737663][T19971] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2117.747917][T19971] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2117.747947][T19971] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2117.758493][T19971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2117.775596][T14347] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 2117.791157][ T1172] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 2117.853381][T14347] (NULL device *): queue 0 connect admin queue failed (-6). [ 2117.861176][T14347] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 2117.861239][T14347] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 2118.272781][T19971] usb 4-1: GET_CAPABILITIES returned 0 [ 2118.272924][T19971] usbtmc 4-1:16.0: can't read capabilities [ 2118.522938][T19971] usb 4-1: USB disconnect, device number 55 [ 2118.596743][T27644] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5216'. [ 2118.692979][T27651] overlayfs: overlapping lowerdir path [ 2118.750779][T27652] overlayfs: overlapping lowerdir path [ 2119.721348][T27658] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2119.742969][T27662] random: crng reseeded on system resumption [ 2119.870822][T27671] random: crng reseeded on system resumption [ 2119.924180][ T43] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 2119.941548][ T5826] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 2119.950843][ T43] (NULL device *): queue 0 connect admin queue failed (-6). [ 2119.958414][ T43] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 2119.971887][ T43] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 2120.068334][T27679] bridge0: port 2(bridge_slave_1) entered disabled state [ 2120.068569][T27679] bridge0: port 1(bridge_slave_0) entered disabled state [ 2120.171105][T27684] fuse: fd is not a fuse device [ 2120.250898][T27679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2120.266786][T27679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2120.548867][T27681] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2120.603891][ T5826] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2120.603951][ T5826] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2120.603996][ T5826] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2120.604355][T24726] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 2120.753830][T24726] usb 1-1: Using ep0 maxpacket: 8 [ 2120.754369][T24726] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2120.775963][T24726] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 2120.776002][T24726] usb 1-1: config 179 has no interface numb ** replaying previous printk message ** [ 2120.776002][T24726] usb 1-1: config 179 has no interface number 0 [ 2120.776046][T24726] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2120.776073][T24726] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2120.776099][T24726] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2120.776122][T24726] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2120.776146][T24726] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2120.776180][T24726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2120.781266][T27692] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2120.787814][ C0] ================================================================== [ 2120.787825][ C0] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0 [ 2120.787854][ C0] Read of size 1 at addr ffff888057e2a912 by task kworker/0:6/24726 [ 2120.787869][ C0] [ 2120.787880][ C0] CPU: 0 UID: 0 PID: 24726 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 2120.787904][ C0] Tainted: [L]=SOFTLOCKUP [ 2120.787911][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 2120.787924][ C0] Workqueue: usb_hub_wq hub_event [ 2120.787946][ C0] Call Trace: [ 2120.787952][ C0] [ 2120.787959][ C0] dump_stack_lvl+0x100/0x190 [ 2120.787983][ C0] print_report+0x13d/0x4b0 [ 2120.788008][ C0] ? __virt_addr_valid+0x239/0x430 [ 2120.788027][ C0] ? find_endpoint+0x2a3/0x2c0 [ 2120.788047][ C0] kasan_report+0xdf/0x1c0 [ 2120.788069][ C0] ? find_endpoint+0x2a3/0x2c0 [ 2120.788091][ C0] find_endpoint+0x2a3/0x2c0 [ 2120.788112][ C0] dummy_timer+0x500/0x3700 [ 2120.788143][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2120.788162][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 2120.788181][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 2120.788205][ C0] ? mark_held_locks+0x40/0x70 [ 2120.788222][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2120.788240][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 2120.788262][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 2120.788289][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 2120.788312][ C0] handle_softirqs+0x1e6/0x9d0 [ 2120.788331][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 2120.788348][ C0] ? _raw_spin_unlock+0x28/0x50 [ 2120.788373][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 2120.788398][ C0] __irq_exit_rcu+0x194/0x210 [ 2120.788415][ C0] irq_exit_rcu+0x9/0x30 [ 2120.788432][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 2120.788456][ C0] [ 2120.788462][ C0] [ 2120.788469][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2120.788488][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 2120.788506][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 26 dd 14 f6 48 89 df e8 4e 33 15 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 25 3a 04 f6 65 48 83 3d e4 a4 b9 08 00 74 16 5b [ 2120.788523][ C0] RSP: 0018:ffffc9000660ef18 EFLAGS: 00000246 [ 2120.788537][ C0] RAX: 0000000000000002 RBX: ffff888079da8108 RCX: 0000000000000040 [ 2120.788550][ C0] RDX: 0000000000000001 RSI: ffffffff8e3eb021 RDI: ffffffff8c620e80 [ 2120.788562][ C0] RBP: 0000000000000287 R08: 0000000000000001 R09: 0000000000000000 [ 2120.788573][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000287 [ 2120.788584][ C0] R13: ffff888079da8028 R14: ffff888079da8108 R15: ffff8880335cb100 [ 2120.788603][ C0] xpad360w_start_input+0x394/0x4b0 [ 2120.788631][ C0] xpad_probe+0x178e/0x1f60 [ 2120.788650][ C0] usb_probe_interface+0x386/0x9b0 [ 2120.788675][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 2120.788699][ C0] ? kernfs_put+0x3f/0x60 [ 2120.788722][ C0] ? sysfs_create_link+0x68/0xc0 [ 2120.788743][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 2120.788766][ C0] really_probe+0x241/0xa60 [ 2120.788784][ C0] __driver_probe_device+0x210/0x460 [ 2120.788800][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2120.788819][ C0] driver_probe_device+0x4a/0x140 [ 2120.788835][ C0] __device_attach_driver+0x1df/0x320 [ 2120.788852][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 2120.788869][ C0] bus_for_each_drv+0x159/0x1e0 [ 2120.788891][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 2120.788913][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 2120.788931][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2120.788950][ C0] __device_attach+0x1e4/0x4d0 [ 2120.788966][ C0] ? __pfx___device_attach+0x10/0x10 [ 2120.788982][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 2120.789004][ C0] device_initial_probe+0xaf/0xd0 [ 2120.789021][ C0] bus_probe_device+0x64/0x160 [ 2120.789045][ C0] device_add+0x121d/0x1970 [ 2120.789065][ C0] ? __pfx_device_add+0x10/0x10 [ 2120.789084][ C0] ? mark_held_locks+0x40/0x70 [ 2120.789100][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2120.789119][ C0] usb_set_configuration+0xd97/0x1c60 [ 2120.789144][ C0] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 2120.789169][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 2120.789195][ C0] usb_probe_device+0xef/0x400 [ 2120.789214][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 2120.789234][ C0] really_probe+0x241/0xa60 [ 2120.789251][ C0] __driver_probe_device+0x210/0x460 [ 2120.789266][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2120.789284][ C0] driver_probe_device+0x4a/0x140 [ 2120.789301][ C0] __device_attach_driver+0x1df/0x320 [ 2120.789318][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 2120.789334][ C0] bus_for_each_drv+0x159/0x1e0 [ 2120.789356][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 2120.789377][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 2120.789395][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2120.789414][ C0] __device_attach+0x1e4/0x4d0 [ 2120.789430][ C0] ? __pfx___device_attach+0x10/0x10 [ 2120.789452][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 2120.789475][ C0] device_initial_probe+0xaf/0xd0 [ 2120.789493][ C0] bus_probe_device+0x64/0x160 [ 2120.789517][ C0] device_add+0x121d/0x1970 [ 2120.789536][ C0] ? __pfx_device_add+0x10/0x10 [ 2120.789553][ C0] ? usb_detect_static_quirks+0x335/0x3e0 [ 2120.789574][ C0] usb_new_device.part.0+0xcc2/0x1686 [ 2120.789600][ C0] ? do_raw_spin_lock+0x128/0x260 [ 2120.789620][ C0] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 2120.789645][ C0] ? mark_held_locks+0x40/0x70 [ 2120.789663][ C0] hub_event.cold+0x1e3/0xe90 [ 2120.789694][ C0] ? __pfx_hub_event+0x10/0x10 [ 2120.789712][ C0] ? mark_lock+0xea0/0x1020 [ 2120.789730][ C0] ? lock_acquire+0x1d1/0x380 [ 2120.789746][ C0] ? process_one_work+0xa2c/0x1b10 [ 2120.789771][ C0] ? process_one_work+0x906/0x1b10 [ 2120.789795][ C0] ? process_one_work+0x906/0x1b10 [ 2120.789819][ C0] process_one_work+0xac7/0x1b10 [ 2120.789847][ C0] ? __pfx_process_one_work+0x10/0x10 [ 2120.789870][ C0] ? lock_acquire+0x1d1/0x380 [ 2120.789890][ C0] ? __pfx_hub_event+0x10/0x10 [ 2120.789909][ C0] worker_thread+0x5ef/0xe50 [ 2120.789936][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2120.789960][ C0] ? kthread+0x13a/0x450 [ 2120.789982][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2120.790005][ C0] kthread+0x373/0x450 [ 2120.790027][ C0] ? __pfx_kthread+0x10/0x10 [ 2120.790049][ C0] ret_from_fork+0x730/0xd60 [ 2120.790068][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2120.790086][ C0] ? __switch_to+0x800/0x10f0 [ 2120.790108][ C0] ? __pfx_kthread+0x10/0x10 [ 2120.790130][ C0] ret_from_fork_asm+0x1a/0x30 [ 2120.790152][ C0] [ 2120.790159][ C0] [ 2120.790163][ C0] Allocated by task 27639: [ 2120.790172][ C0] kasan_save_stack+0x30/0x50 [ 2120.790188][ C0] kasan_save_track+0x14/0x30 [ 2120.790204][ C0] __kasan_kmalloc+0xaa/0xb0 [ 2120.790219][ C0] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 2120.790241][ C0] __genradix_ptr_alloc+0x4e3/0x610 [ 2120.790265][ C0] __genradix_prealloc+0x5c/0x90 [ 2120.790287][ C0] sctp_send_add_streams+0x423/0x580 [ 2120.790306][ C0] sctp_setsockopt+0x4a6e/0xb370 [ 2120.790329][ C0] do_sock_setsockopt+0xf3/0x1d0 [ 2120.790346][ C0] __sys_setsockopt+0x195/0x220 [ 2120.790368][ C0] __x64_sys_setsockopt+0xbd/0x160 [ 2120.790391][ C0] do_syscall_64+0x123/0x790 [ 2120.790407][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2120.790423][ C0] [ 2120.790427][ C0] Freed by task 27636: [ 2120.790435][ C0] kasan_save_stack+0x30/0x50 [ 2120.790456][ C0] kasan_save_track+0x14/0x30 [ 2120.790472][ C0] kasan_save_free_info+0x3b/0x70 [ 2120.790493][ C0] __kasan_slab_free+0x5f/0x80 [ 2120.790510][ C0] kfree+0x22b/0x6d0 [ 2120.790529][ C0] genradix_free_recurse+0x668/0x890 [ 2120.790552][ C0] __genradix_free+0x97/0x110 [ 2120.790575][ C0] sctp_stream_free+0xd5/0x120 [ 2120.790591][ C0] sctp_association_free+0x241/0x7d0 [ 2120.790615][ C0] sctp_do_sm+0x15b5/0x5c90 [ 2120.790629][ C0] sctp_primitive_ABORT+0x9f/0xd0 [ 2120.790644][ C0] sctp_close+0x232/0x980 [ 2120.790662][ C0] inet_release+0xed/0x200 [ 2120.790679][ C0] inet6_release+0x4f/0x70 [ 2120.790698][ C0] __sock_release+0xb3/0x260 [ 2120.790713][ C0] sock_close+0x1c/0x30 [ 2120.790727][ C0] __fput+0x3ff/0xb50 [ 2120.790744][ C0] task_work_run+0x150/0x240 [ 2120.790766][ C0] exit_to_user_mode_loop+0x1d8/0x700 [ 2120.790784][ C0] do_syscall_64+0x661/0x790 [ 2120.790800][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2120.790816][ C0] [ 2120.790820][ C0] The buggy address belongs to the object at ffff888057e2a800 [ 2120.790820][ C0] which belongs to the cache kmalloc-512 of size 512 [ 2120.790833][ C0] The buggy address is located 274 bytes inside of [ 2120.790833][ C0] freed 512-byte region [ffff888057e2a800, ffff888057e2aa00) [ 2120.790849][ C0] [ 2120.790854][ C0] The buggy address belongs to the physical page: [ 2120.790861][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e28 [ 2120.790877][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2120.790891][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2120.790908][ C0] page_type: f5(slab) [ 2120.790924][ C0] raw: 00fff00000000040 ffff88801c02ec80 dead000000000100 dead000000000122 [ 2120.790939][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 2120.790955][ C0] head: 00fff00000000040 ffff88801c02ec80 dead000000000100 dead000000000122 [ 2120.790970][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 2120.790985][ C0] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 2120.791001][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 2120.791011][ C0] page dumped because: kasan: bad access detected [ 2120.791019][ C0] page_owner tracks the page as allocated [ 2120.791025][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6062, tgid 6057 (syz.3.64), ts 111335797335 [ 2120.791052][ C0] post_alloc_hook+0xfd/0x120 [ 2120.791073][ C0] get_page_from_freelist+0x110d/0x35d0 [ 2120.791095][ C0] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 2120.791118][ C0] new_slab+0xa9/0x6e0 [ 2120.791138][ C0] refill_objects+0xe3/0x410 [ 2120.791158][ C0] __pcs_replace_empty_main+0x35e/0x650 [ 2120.791180][ C0] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 2120.791200][ C0] snd_mixer_oss_build_test+0x7a/0x380 [ 2120.791216][ C0] snd_mixer_oss_build_test_all+0x33c/0x6e0 [ 2120.791231][ C0] snd_mixer_oss_build_input+0x139/0xd50 [ 2120.791247][ C0] snd_mixer_oss_notify_handler+0x48d/0x990 [ 2120.791264][ C0] snd_card_register+0x2af/0x760 [ 2120.791282][ C0] f_midi2_bind+0x1198/0x2770 [ 2120.791298][ C0] usb_add_function+0x219/0x890 [ 2120.791316][ C0] configfs_composite_bind+0xd83/0x1960 [ 2120.791334][ C0] gadget_bind_driver+0x28c/0xbf0 [ 2120.791356][ C0] page last free pid 5943 tgid 5943 ts 93901426805 stack trace: [ 2120.791368][ C0] __free_frozen_pages+0x79f/0x10f0 [ 2120.791387][ C0] qlist_free_all+0x47/0xf0 [ 2120.791402][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 2120.791417][ C0] __kasan_slab_alloc+0x69/0x90 [ 2120.791434][ C0] kmem_cache_alloc_noprof+0x269/0x6a0 [ 2120.791454][ C0] ptlock_alloc+0x1f/0x70 [ 2120.791473][ C0] pte_alloc_one+0x82/0x3d0 [ 2120.791494][ C0] do_fault+0x960/0x1830 [ 2120.791511][ C0] __handle_mm_fault+0x150b/0x2f60 [ 2120.791530][ C0] handle_mm_fault+0x363/0xa20 [ 2120.791550][ C0] do_user_addr_fault+0x59c/0x12f0 [ 2120.791569][ C0] exc_page_fault+0x6f/0xd0 [ 2120.791584][ C0] asm_exc_page_fault+0x26/0x30 [ 2120.791600][ C0] [ 2120.791604][ C0] Memory state around the buggy address: [ 2120.791612][ C0] ffff888057e2a800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2120.791624][ C0] ffff888057e2a880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2120.791636][ C0] >ffff888057e2a900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2120.791645][ C0] ^ [ 2120.791653][ C0] ffff888057e2a980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2120.791665][ C0] ffff888057e2aa00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2120.791674][ C0] ================================================================== [ 2120.791683][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2122.062756][ C0] CPU: 0 UID: 0 PID: 24726 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 2122.073775][ C0] Tainted: [L]=SOFTLOCKUP [ 2122.078095][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 2122.088144][ C0] Workqueue: usb_hub_wq hub_event [ 2122.093181][ C0] Call Trace: [ 2122.096461][ C0] [ 2122.099298][ C0] dump_stack_lvl+0x100/0x190 [ 2122.103979][ C0] vpanic+0x553/0x970 [ 2122.107948][ C0] ? __pfx_vpanic+0x10/0x10 [ 2122.112437][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 2122.117457][ C0] ? find_endpoint+0x2a3/0x2c0 [ 2122.122211][ C0] panic+0xd1/0xe0 [ 2122.125916][ C0] ? __pfx_panic+0x10/0x10 [ 2122.130316][ C0] ? end_report.part.0+0x23/0x90 [ 2122.135269][ C0] ? rcu_is_watching+0x13/0xc0 [ 2122.140024][ C0] ? end_report.part.0+0x23/0x90 [ 2122.144957][ C0] check_panic_on_warn.cold+0x19/0x34 [ 2122.150326][ C0] end_report.part.0+0x3a/0x90 [ 2122.155105][ C0] kasan_report.cold+0xe/0x18 [ 2122.159782][ C0] ? find_endpoint+0x2a3/0x2c0 [ 2122.164554][ C0] find_endpoint+0x2a3/0x2c0 [ 2122.169137][ C0] dummy_timer+0x500/0x3700 [ 2122.173642][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2122.179449][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 2122.185089][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 2122.190038][ C0] ? mark_held_locks+0x40/0x70 [ 2122.194797][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2122.200606][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 2122.205552][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 2122.210765][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 2122.215876][ C0] handle_softirqs+0x1e6/0x9d0 [ 2122.220632][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 2122.225912][ C0] ? _raw_spin_unlock+0x28/0x50 [ 2122.230757][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 2122.236386][ C0] __irq_exit_rcu+0x194/0x210 [ 2122.241052][ C0] irq_exit_rcu+0x9/0x30 [ 2122.245283][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 2122.250902][ C0] [ 2122.253822][ C0] [ 2122.256745][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2122.262710][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 2122.269110][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 26 dd 14 f6 48 89 df e8 4e 33 15 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 25 3a 04 f6 65 48 83 3d e4 a4 b9 08 00 74 16 5b [ 2122.288713][ C0] RSP: 0018:ffffc9000660ef18 EFLAGS: 00000246 [ 2122.294772][ C0] RAX: 0000000000000002 RBX: ffff888079da8108 RCX: 0000000000000040 [ 2122.302729][ C0] RDX: 0000000000000001 RSI: ffffffff8e3eb021 RDI: ffffffff8c620e80 [ 2122.310686][ C0] RBP: 0000000000000287 R08: 0000000000000001 R09: 0000000000000000 [ 2122.318660][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000287 [ 2122.326636][ C0] R13: ffff888079da8028 R14: ffff888079da8108 R15: ffff8880335cb100 [ 2122.334617][ C0] xpad360w_start_input+0x394/0x4b0 [ 2122.339836][ C0] xpad_probe+0x178e/0x1f60 [ 2122.344347][ C0] usb_probe_interface+0x386/0x9b0 [ 2122.349464][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 2122.355087][ C0] ? kernfs_put+0x3f/0x60 [ 2122.359411][ C0] ? sysfs_create_link+0x68/0xc0 [ 2122.364346][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 2122.369983][ C0] really_probe+0x241/0xa60 [ 2122.374483][ C0] __driver_probe_device+0x210/0x460 [ 2122.379762][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2122.385559][ C0] driver_probe_device+0x4a/0x140 [ 2122.390570][ C0] __device_attach_driver+0x1df/0x320 [ 2122.395947][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 2122.401837][ C0] bus_for_each_drv+0x159/0x1e0 [ 2122.406693][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 2122.412067][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 2122.417262][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2122.423054][ C0] __device_attach+0x1e4/0x4d0 [ 2122.427807][ C0] ? __pfx___device_attach+0x10/0x10 [ 2122.433091][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 2122.438296][ C0] device_initial_probe+0xaf/0xd0 [ 2122.443318][ C0] bus_probe_device+0x64/0x160 [ 2122.448074][ C0] device_add+0x121d/0x1970 [ 2122.452565][ C0] ? __pfx_device_add+0x10/0x10 [ 2122.457405][ C0] ? mark_held_locks+0x40/0x70 [ 2122.462164][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2122.467976][ C0] usb_set_configuration+0xd97/0x1c60 [ 2122.473346][ C0] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 2122.479422][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 2122.484822][ C0] usb_probe_device+0xef/0x400 [ 2122.489579][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 2122.494955][ C0] really_probe+0x241/0xa60 [ 2122.499455][ C0] __driver_probe_device+0x210/0x460 [ 2122.504732][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2122.510527][ C0] driver_probe_device+0x4a/0x140 [ 2122.515544][ C0] __device_attach_driver+0x1df/0x320 [ 2122.520903][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 2122.526793][ C0] bus_for_each_drv+0x159/0x1e0 [ 2122.531648][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 2122.537020][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 2122.542203][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2122.547998][ C0] __device_attach+0x1e4/0x4d0 [ 2122.552748][ C0] ? __pfx___device_attach+0x10/0x10 [ 2122.558022][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 2122.563227][ C0] device_initial_probe+0xaf/0xd0 [ 2122.568247][ C0] bus_probe_device+0x64/0x160 [ 2122.573008][ C0] device_add+0x121d/0x1970 [ 2122.577509][ C0] ? __pfx_device_add+0x10/0x10 [ 2122.582349][ C0] ? usb_detect_static_quirks+0x335/0x3e0 [ 2122.588069][ C0] usb_new_device.part.0+0xcc2/0x1686 [ 2122.593440][ C0] ? do_raw_spin_lock+0x128/0x260 [ 2122.598464][ C0] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 2122.604269][ C0] ? mark_held_locks+0x40/0x70 [ 2122.609037][ C0] hub_event.cold+0x1e3/0xe90 [ 2122.613725][ C0] ? __pfx_hub_event+0x10/0x10 [ 2122.618479][ C0] ? mark_lock+0xea0/0x1020 [ 2122.622969][ C0] ? lock_acquire+0x1d1/0x380 [ 2122.627632][ C0] ? process_one_work+0xa2c/0x1b10 [ 2122.632733][ C0] ? process_one_work+0x906/0x1b10 [ 2122.637839][ C0] ? process_one_work+0x906/0x1b10 [ 2122.642944][ C0] process_one_work+0xac7/0x1b10 [ 2122.647883][ C0] ? __pfx_process_one_work+0x10/0x10 [ 2122.653245][ C0] ? lock_acquire+0x1d1/0x380 [ 2122.657911][ C0] ? __pfx_hub_event+0x10/0x10 [ 2122.662663][ C0] worker_thread+0x5ef/0xe50 [ 2122.667257][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2122.672369][ C0] ? kthread+0x13a/0x450 [ 2122.676601][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2122.681702][ C0] kthread+0x373/0x450 [ 2122.685760][ C0] ? __pfx_kthread+0x10/0x10 [ 2122.690341][ C0] ret_from_fork+0x730/0xd60 [ 2122.694919][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2122.700015][ C0] ? __switch_to+0x800/0x10f0 [ 2122.704683][ C0] ? __pfx_kthread+0x10/0x10 [ 2122.709261][ C0] ret_from_fork_asm+0x1a/0x30 [ 2122.714014][ C0] [ 2122.717230][ C0] Kernel Offset: disabled [ 2122.721529][ C0] Rebooting in 86400 seconds..