last executing test programs: 2m44.357936003s ago: executing program 2 (id=3245): r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3}) 2m44.219000029s ago: executing program 2 (id=3246): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_open_dev$vim2m(0x0, 0x808, 0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x28, 0x1, 0x0) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@delchain={0x34, 0x2e, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {0x5, 0x3}, {0xfff2, 0x10}, {0xc, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x7c, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xe}, {0xd, 0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x7, 0xa3, 0x3ff, 0x7, 0x81, 0x4, 0x3ff0, 0x7}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x12, 0x400, 0x1, 0x200}}, {0x4}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44004}, 0x48001) syz_usb_connect$midi(0x5, 0x31, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x2, 0x10, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x7, [], [{{0x9, 0x5, 0x6, 0x8, 0x20, 0x7, 0x7e, 0xf7, {0x4}}}]}}}}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x8, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x7, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x80}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) sendmsg$unix(r6, &(0x7f0000000480)={&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000340)="a42a9eeced3609b96226c53524b089a9a65ae491582b9c29b01786c1a36f4359b51a5a22fb57e3f9aab3f728d042353603d2f6f3b3ff76761502002b603d4ae178937e98e01480ad0c6cf7903288323322d307d538969daed0c53aea5b3a06d5f1179305e946e6e13dbd4999b15746294e10480efb1de4096c7ebacccccbc86ccd5c6a7d61b47b68a2b1d350ecd84937e8b9efcf9718a18931d7aeab442169f4cbda568da831d40c2fe21ff6ef0a01d929463ee4d215d9965f8678e59fdcbb7565d18a2a4a8bcfbf5f7c576864d330fa768397a523927588eeff08e1d0e175d02cce8f96e2ec8bec46b627e3719b737220bf291f", 0xf4}, {&(0x7f0000000100)="051b4e96273a0d601982efb6c9091800a4a5fe2e5240fec5ebfd566f08fcd1fb2be4528f50a3440d8e24", 0x2a}], 0x2, 0x0, 0x0, 0x20000000}, 0x40005) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000000c0)={0x8001, 0x18, '\x00', 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) r9 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) r10 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_INSN(r10, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x4}) 2m38.403830468s ago: executing program 2 (id=3256): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) getresgid(&(0x7f0000000000), &(0x7f0000000040), 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000003c0)=""/41, 0x29}, {&(0x7f0000000980)=""/106, 0x6a}, {&(0x7f0000000bc0)=""/51, 0x33}, {&(0x7f0000000a00)=""/242, 0xf2}, {&(0x7f0000000d00)=""/103, 0x67}, {&(0x7f00000004c0)=""/243, 0xf3}, {&(0x7f0000000e80)=""/90, 0x5a}, {&(0x7f0000000b00)=""/69, 0x45}, {&(0x7f0000000d80)=""/130, 0x82}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000140)=""/42, 0x2a}, {&(0x7f0000000280)=""/100, 0x64}, {&(0x7f0000000f80)=""/145, 0x91}], 0xd}, 0x3}], 0x1, 0xc0032032, 0x0) sendmmsg$alg(r2, &(0x7f0000003000)=[{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000240)="810cac7d486d", 0x6}, {&(0x7f00000033c0)="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", 0x74b}], 0x2, 0x0, 0x0, 0xc855}], 0x1, 0x4004004) recvmsg(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)=""/124}, {&(0x7f00000006c0)=""/128}, {&(0x7f0000000740)=""/105}, {&(0x7f00000007c0)=""/16}, {&(0x7f0000000800)=""/4}], 0x17f}, 0x102) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {0x609}, 0x1}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x60700, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f00000007c0)={0x2020}, 0x2020) 2m37.439184213s ago: executing program 2 (id=3258): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000003c0), 0x10) (async) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=r2, @ANYRESOCT=r2], 0x48}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) write(r5, &(0x7f00000002c0)="88", 0x1) (async) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r4, r1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r7, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x6, r8}, 0x38) (async) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r4, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r9, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000300)={0x8, r9}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000340)={0x8, r6}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r12 = gettid() sched_setattr(r12, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0xdb, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000440), 0x3) ptrace(0x10, 0x1) (async) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r4, 0x1c, &(0x7f00000003c0)=""/28}) (async) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000400)={0x8, r3}) 2m36.363479286s ago: executing program 2 (id=3262): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r1], 0x1}) file_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) io_uring_enter(r1, 0x47f6, 0x0, 0xff00, 0x0, 0x0) 2m34.714708339s ago: executing program 2 (id=3269): prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40}, 0x20) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd853041", 0x87, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_SET_PROPERTY(r5, 0x40086f52, &(0x7f0000000000)={0x1f, 0x0}) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1aa}]}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32=r6], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="11000000040000000400000008"], 0x48) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x141, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0) 2m19.17851927s ago: executing program 32 (id=3269): prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40}, 0x20) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd853041", 0x87, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_SET_PROPERTY(r5, 0x40086f52, &(0x7f0000000000)={0x1f, 0x0}) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1aa}]}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32=r6], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="11000000040000000400000008"], 0x48) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x141, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0) 12.096065526s ago: executing program 4 (id=3620): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x80000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000006380)={0x2020}, 0x2020) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r9, 0x47f6, 0x0, 0x2, 0x0, 0x0) 10.331562988s ago: executing program 0 (id=3625): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@private=0xa010101, @in=@loopback, 0x0, 0x20, 0x2001, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x400000000, 0x3, 0x0, 0xffffffffffffffff, 0x40000, 0xffffffff}, {0x0, 0x2d}, 0x0, 0x4}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x37}, 0x3507, 0x0, 0x3, 0x0, 0xe, 0x4000000, 0x3}}, 0xe8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000002a80)={0x81, 0x0, 0x3}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8d}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x972, 0x0, 0x0, 0x0, 0x0, '\x00', 0x20}) 10.239402465s ago: executing program 4 (id=3626): unshare(0x22020400) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f00000001c0)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, r0}, 0x39) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r2, &(0x7f0000000580)={0x11, 0x10, r3}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)=ANY=[@ANYRESDEC], 0xdd12}], 0x1, 0x0, 0x0, 0x20000000}, 0x20040890) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x80) syz_open_dev$sndctrl(&(0x7f0000000600), 0x52d, 0x111940) unshare(0x22020600) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="020b000102f810028c0b1d79d83725149efb617f1bf37921c3ce1070b4b31c2304cf353c34bbd89eba7682985866cc2a96590d7d8ef3da81f65f7fcfb66e6c8863742676aaf3671844daddd0888010b07bc3d8b3e113f691be08f9c3b7011be2a1d240ee8a1b27c05819ee5968cff60735a60f5a3bc67f99ca96713bc760a4f1a55961af44fc05346c33fb72687c184d"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="0201"], 0x70}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x3ffffffffffffe5, 0x0) close_range(0xffffffffffffffff, r1, 0x2) sendmsg$unix(0xffffffffffffffff, 0x0, 0x2c040095) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000026bd7000fddbdf2501ffffffee000a0900ff010000000b0000000000000d00", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r6, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x4000880}, 0x814) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="491abdcc27de9c12b1075ba908d61d1134e4670e0b49dbe285979c68aaaa41c1e5f08de77e904f668e0c19fa71c638856258d12684cc3ba20032021bc774b3bd81d41b558ca52d8f61b525165d0bd39a9ce537b3c47e4ec828eb4f33982444053081a22da83e3458abb71cdf6d6a712ea283dfbf2e692ed919e2c3442836b232e3cf6f5f2ba7c7d8b0c9ffe577cc6ca26cc0d687d6c85c38cd60354b6ebc1a95dca13e6df78d8ec7ee870d1c1ab30833a1081cdc0c2817a2d46cff9c80cb1af74f2bae302972bfb106e8ee3216f2a2c19ca9b287098e135a82c09df3bcf2c90f5b0e3a100976a29c40af75", @ANYRES64=r0, @ANYRES64=r5, @ANYRESOCT, @ANYRESDEC=r6, @ANYRES64=r1, @ANYRES64=r2], 0x64}}, 0x20000000) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r7], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r8, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) 10.197737787s ago: executing program 1 (id=3627): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x1b0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@my=0x1, 0x2}, @host, 0x0, 0x3, 0x5e, 0x200000000000, 0x100000000000006}) (fail_nth: 4) 9.233457244s ago: executing program 3 (id=3628): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000010101020000000000000000020000090c00018006000740000400000c00028005000100210000001c001980080002001800000008000200080400000800010008040000"], 0x48}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="147700001000010000000000000000000000000a28000000000a1101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100015cbb153382ea83546c"], 0x7c}}, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e0000002000000"], 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x1, 0x3, 0x47, 0x100, 0x1, 0x3, 0x5}, 0x1c) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) socket(0x200000000000011, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000080)={0x204801600, &(0x7f00000001c0), 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) 9.047380227s ago: executing program 1 (id=3629): connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) syz_clone3(&(0x7f0000000480)={0x270000, &(0x7f0000000100), &(0x7f0000000180), 0x0, {0x31}, 0x0, 0x0, &(0x7f00000003c0)=""/15, 0x0, 0x0, {r0}}, 0x58) r3 = getpgrp(r2) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x40, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x40}}, 0x0) r7 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x129081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 8.104856109s ago: executing program 1 (id=3630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x8c, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x56, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1f}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x3, 0x8, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37ada"}]}}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) futex(0x0, 0xd, 0x2, &(0x7f0000000080)={0x77359400}, 0x0, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0) 8.045322114s ago: executing program 0 (id=3631): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009"], 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4048aecb, &(0x7f0000000040)=@arm64_ccsidr={0x6020000000110009, &(0x7f0000000300)=0xd8}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mremap(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x4000000) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0xfffffffffffffeed}}, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x8801) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=@base={0xa, 0x16, 0xeb5, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 7.864069499s ago: executing program 4 (id=3632): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000458c0)={0x1f, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) unshare(0x2c020400) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x800, 0x2, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) socket$qrtr(0x2a, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r6}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) read$nci(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x104, 0x0, 0x1, {0x0, r8}}) io_uring_enter(r3, 0x351e, 0x483, 0x0, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000000)=ANY=[], 0xfffffe86) 6.653682576s ago: executing program 4 (id=3633): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="2c000000370200010500000000000000f8ffffffffffffff", @ANYRES32=0x0, @ANYBLOB="0e002f6400000000"], 0x2c) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x2) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r3, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r3, 0x0, &(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r3, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000100)={0x28, 0x1, r4, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000000c0)}) close_range(r1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x6, 0x8, 0x2, 0x84800}) creat(&(0x7f0000000580)='./bus\x00', 0x0) r5 = fanotify_init(0xf00, 0x2) readv(r5, 0x0, 0x0) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./file1\x00') socket$nl_generic(0x10, 0x3, 0x10) 4.769613202s ago: executing program 5 (id=3635): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4048aecb, &(0x7f0000000040)=@arm64_ccsidr={0x6020000000110009, &(0x7f0000000300)=0xd8}) mremap(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) 4.433712895s ago: executing program 4 (id=3636): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x80000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000006380)={0x2020}, 0x2020) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r9, 0x47f6, 0x0, 0x2, 0x0, 0x0) 4.307288478s ago: executing program 3 (id=3637): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {0xff}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28, 0x3}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x400015, 0x1c, 0xfd, &(0x7f00000000c0)="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"}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000100)) 4.277433497s ago: executing program 5 (id=3638): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vm(r0, 0x4018aee2, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000540)={0x4, 0x3}}) 4.17922914s ago: executing program 5 (id=3639): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="400520325d74000000f58d063ab8ce99f11784f1e2a489e3da7a27846eeef25cf7065d2eb20e4fb319b6a48a8dc547ac367c6eccb659dc21d6e2b7e9ddaf1462d510dead7d65b45e4b31f08f64095daaa72cbf77fe50d8fa13444870b3441fa8a8897054570e5976535aed587b1c063a38faf956a1455950d932fb268a268bb5832f20e49af0ed2ed2ce966e7e51df06c14f4a8686f1dde0afb8c7cd1c239426a26ca155"], 0x0, 0x0, 0x0, 0x0}) openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="400520325d74000000f58d063ab8ce99f11784f1e2a489e3da7a27846eeef25cf7065d2eb20e4fb319b6a48a8dc547ac367c6eccb659dc21d6e2b7e9ddaf1462d510dead7d65b45e4b31f08f64095daaa72cbf77fe50d8fa13444870b3441fa8a8897054570e5976535aed587b1c063a38faf956a1455950d932fb268a268bb5832f20e49af0ed2ed2ce966e7e51df06c14f4a8686f1dde0afb8c7cd1c239426a26ca155"], 0x0, 0x0, 0x0, 0x0}) (async) openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) (async) 4.123729617s ago: executing program 3 (id=3640): connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) syz_clone3(&(0x7f0000000480)={0x270000, &(0x7f0000000100), &(0x7f0000000180), 0x0, {0x31}, 0x0, 0x0, &(0x7f00000003c0)=""/15, 0x0, 0x0, {r0}}, 0x58) r3 = getpgrp(r2) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x40, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x40}}, 0x0) r7 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x129081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 3.200259652s ago: executing program 3 (id=3641): ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000100)={0x4, 0x80000, 0xffffffffffffffff}) ioctl$TCSBRK(r0, 0x5409, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) migrate_pages(0x0, 0xfffffffffffffffc, 0x0, &(0x7f0000000200)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='omfs\x00', 0x207f00, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') 3.079163831s ago: executing program 0 (id=3642): unshare(0x22020400) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f00000001c0)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, r0}, 0x39) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r2, &(0x7f0000000580)={0x11, 0x10, r3}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)=ANY=[@ANYRESDEC], 0xdd12}], 0x1, 0x0, 0x0, 0x20000000}, 0x20040890) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x80) syz_open_dev$sndctrl(&(0x7f0000000600), 0x52d, 0x111940) unshare(0x22020600) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="020b000102f810028c0b1d79d83725149efb617f1bf37921c3ce1070b4b31c2304cf353c34bbd89eba7682985866cc2a96590d7d8ef3da81f65f7fcfb66e6c8863742676aaf3671844daddd0888010b07bc3d8b3e113f691be08f9c3b7011be2a1d240ee8a1b27c05819ee5968cff60735a60f5a3bc67f99ca96713bc760a4f1a55961af44fc05346c33fb72687c184d"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="0201"], 0x70}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x3ffffffffffffe5, 0x0) close_range(0xffffffffffffffff, r1, 0x2) sendmsg$unix(0xffffffffffffffff, 0x0, 0x2c040095) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000026bd7000fddbdf2501ffffffee000a0900ff010000000b0000000000000d00", @ANYRES32=r3, @ANYBLOB='\b\x00', @ANYRES32=r6, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x4000880}, 0x814) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="491abdcc27de9c12b1075ba908d61d1134e4670e0b49dbe285979c68aaaa41c1e5f08de77e904f668e0c19fa71c638856258d12684cc3ba20032021bc774b3bd81d41b558ca52d8f61b525165d0bd39a9ce537b3c47e4ec828eb4f33982444053081a22da83e3458abb71cdf6d6a712ea283dfbf2e692ed919e2c3442836b232e3cf6f5f2ba7c7d8b0c9ffe577cc6ca26cc0d687d6c85c38cd60354b6ebc1a95dca13e6df78d8ec7ee870d1c1ab30833a1081cdc0c2817a2d46cff9c80cb1af74f2bae302972bfb106e8ee3216f2a2c19ca9b287098e135a82c09df3bcf2c90f5b0e3a100976a29c40af75", @ANYRES64=r0, @ANYRES64=r5, @ANYRESOCT, @ANYRESDEC=r6, @ANYRES64=r1, @ANYRES64=r2], 0x64}}, 0x20000000) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r7], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r8, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) 2.711977644s ago: executing program 5 (id=3643): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x62, 0x40) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r3 = fanotify_init(0x1a, 0x800) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r3, 0x441, 0x4800001a, r4, 0x0) fanotify_mark(r3, 0x2, 0x4000002b, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) write$binfmt_misc(r2, &(0x7f0000000000)="180c4552", 0x4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="717721fcc94f"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x32}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x800) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 2.694986456s ago: executing program 0 (id=3644): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="2c000000370200010500000000000000f8ffffffffffffff", @ANYRES32=0x0, @ANYBLOB="0e002f640000000000000000"], 0x2c) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x2) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r3, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r3, 0x0, &(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r3, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000100)={0x28, 0x1, r4, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000000c0)}) close_range(r1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x6, 0x8, 0x2, 0x84800}) creat(&(0x7f0000000580)='./bus\x00', 0x0) r5 = fanotify_init(0xf00, 0x2) readv(r5, 0x0, 0x0) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./file1\x00') socket$nl_generic(0x10, 0x3, 0x10) 2.630513118s ago: executing program 4 (id=3645): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) (async) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@null, 0x1000000e, 'batadv0\x00'}) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket(0x10, 0x803, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES8], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], 0x178}}, 0x0) (rerun: 64) syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x4100}}}}}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4840) (async) connect$rds(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) (async) pipe(0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r5, &(0x7f0000000280)={0x2020}, 0x2020) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) (async, rerun: 32) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x100001, 0x0) (rerun: 32) ioctl$TCXONC(r6, 0x540a, 0x3) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1, 0x10ffff, 0xfffffffd, 0x1}) (async, rerun: 64) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000022c0)=@base={0x11, 0x5, 0x0, 0x7, 0x400a, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r8}, 0xc) 2.224677653s ago: executing program 0 (id=3646): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030003130000002cbd7000ffdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000008ff010000000000000000000000000001000000000000000002000100000000000000070c0100000005000500000000000a004e2400000009000000000000000000000000000000000600000000080000020013"], 0x98}, 0x1, 0x7}, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x3, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x42, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f00000000c0), &(0x7f0000000180), 0x500}, 0x20) ptrace$ARCH_SET_GS(0x1e, r1, &(0x7f00000002c0), 0x1001) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r6 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x7a, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x400000) 739.705744ms ago: executing program 1 (id=3647): modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getpid() r0 = socket$packet(0x11, 0x3, 0x300) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x80, 0x8, 0x2fe, 0x0, 0x0, 0x800000, 0x0}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001300)) syz_open_dev$midi(&(0x7f0000001380), 0x3, 0x488000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000013c0), &(0x7f0000001400)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001440)={0x9, 0xb33, {}, {0xee01}, 0x1, 0xccd}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) 687.255409ms ago: executing program 3 (id=3648): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYRESHEX=r2, @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x4004090) 304.376962ms ago: executing program 3 (id=3649): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) close(r2) getsockopt$sock_buf(r0, 0x1, 0x3b, 0xffffffffffffffff, &(0x7f0000000000)=0xd) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x3, &(0x7f0000000040), 0x4) socket$can_j1939(0x1d, 0x2, 0x7) 265.532211ms ago: executing program 1 (id=3650): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {0xff}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28, 0x3}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x400015, 0x1c, 0xfd, &(0x7f00000000c0)="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"}) ioctl$KVM_SET_MSRS(r1, 0x4140aecd, &(0x7f0000000100)) 264.718842ms ago: executing program 5 (id=3651): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x1b0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@my=0x1, 0xf2}, @host, 0x0, 0x3, 0x5e, 0x200000000000, 0x100000000000006}) 159.138844ms ago: executing program 0 (id=3652): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009"], 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4048aecb, &(0x7f0000000040)=@arm64_ccsidr={0x6020000000110009, &(0x7f0000000300)=0xd8}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mremap(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x4000000) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0xfffffffffffffeed}}, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x8801) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=@base={0xa, 0x16, 0xeb5, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 125.706942ms ago: executing program 1 (id=3653): socket$inet_smc(0x2b, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/53, 0x35}], 0x1, &(0x7f0000000300)=""/242, 0xf2}, 0x1000000}, {{&(0x7f0000000440)=@can, 0x80, &(0x7f0000000780)=[{&(0x7f0000000580)=""/185, 0xb9}, {&(0x7f0000000200)=""/43, 0x2b}, {&(0x7f00000006c0)=""/174, 0xae}, {&(0x7f0000000a40)=""/204, 0xcc}, {&(0x7f00000004c0)=""/113, 0x71}], 0x5}, 0x2}], 0x2, 0x10002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000000)=0x5, 0xffffffffffffffff, &(0x7f00000000c0)=0xcf80, 0x7759, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000939000/0x2000)=nil, 0x2000, 0x1000003, 0x10010, 0xffffffffffffffff, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x8081, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 0s ago: executing program 5 (id=3654): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x400000000000041, 0x0) r1 = syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x0, 0x0, 0x2000000, 0x0, 0x0}, 0x20) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): permissive=1 [ 1106.407564][ T29] audit: type=1400 audit(2000000766.363:41985): avc: denied { create } for pid=19119 comm="syz.2.3269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1106.467170][ T29] audit: type=1400 audit(2000000766.413:41986): avc: denied { name_bind } for pid=19126 comm="syz.3.3270" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1107.208654][T19131] ubi: mtd0 is already attached to ubi31 [ 1107.359875][T19135] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3272'. [ 1109.286079][T19156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1109.323966][T19156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1110.234939][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1110.885538][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 1110.885565][ T29] audit: type=1400 audit(2000000771.363:42115): avc: denied { read write } for pid=16858 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1111.580419][T19171] ubi: mtd0 is already attached to ubi31 [ 1111.772536][ T29] audit: type=1400 audit(2000000771.393:42116): avc: denied { open } for pid=16858 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1111.797104][ T29] audit: type=1400 audit(2000000771.393:42117): avc: denied { ioctl } for pid=16858 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1111.824130][ T29] audit: type=1400 audit(2000000771.433:42118): avc: denied { read append } for pid=19170 comm="syz.0.3280" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1111.847751][ T29] audit: type=1400 audit(2000000771.433:42119): avc: denied { open } for pid=19170 comm="syz.0.3280" path="/dev/ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1111.871176][ T29] audit: type=1400 audit(2000000771.433:42120): avc: denied { ioctl } for pid=19170 comm="syz.0.3280" path="/dev/ubi_ctrl" dev="devtmpfs" ino=706 ioctlcmd=0x540f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1111.896689][ T29] audit: type=1400 audit(2000000771.433:42121): avc: denied { execmem } for pid=19170 comm="syz.0.3280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1111.966241][ T29] audit: type=1400 audit(2000000771.583:42122): avc: denied { read } for pid=19170 comm="syz.0.3280" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1112.032408][ T29] audit: type=1400 audit(2000000771.583:42123): avc: denied { open } for pid=19170 comm="syz.0.3280" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1112.091207][ T29] audit: type=1400 audit(2000000771.823:42124): avc: denied { read } for pid=19170 comm="syz.0.3280" dev="nsfs" ino=4026533383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1112.753835][T19184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3284'. [ 1112.763151][T19184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1113.115956][T19184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1114.484831][T19191] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.3287'. [ 1114.543553][T19191] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1114.848709][T19177] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1114.855758][T19177] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1114.862577][T19177] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1114.869184][T19177] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1114.961355][T19177] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1114.981605][T19177] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1115.017053][T19177] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1115.380125][ T5867] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 1116.010387][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 1116.010404][ T29] audit: type=1400 audit(2000000776.493:42196): avc: denied { ioctl } for pid=19196 comm="syz.0.3281" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1116.105436][ T29] audit: type=1400 audit(2000000776.583:42197): avc: denied { read write } for pid=17505 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1116.130207][ T29] audit: type=1400 audit(2000000776.583:42198): avc: denied { open } for pid=17505 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1116.160614][ T29] audit: type=1400 audit(2000000776.583:42199): avc: denied { ioctl } for pid=17505 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1116.210587][ T5867] usb 1-1: device descriptor read/64, error -71 [ 1116.224583][ T29] audit: type=1400 audit(2000000776.643:42200): avc: denied { ioctl } for pid=19196 comm="syz.0.3281" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1116.276364][ T29] audit: type=1400 audit(2000000776.693:42201): avc: denied { read write } for pid=17927 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1116.308989][ T29] audit: type=1400 audit(2000000776.693:42202): avc: denied { read write open } for pid=17927 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1116.418121][ T29] audit: type=1400 audit(2000000776.693:42203): avc: denied { ioctl } for pid=17927 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1116.500926][ T5867] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 1116.512855][ T29] audit: type=1400 audit(2000000776.753:42204): avc: denied { create } for pid=19202 comm="syz.1.3286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1116.567875][T19209] Cache volume key already in use (9p,(null),) [ 1116.654414][ T29] audit: type=1400 audit(2000000776.783:42205): avc: denied { create } for pid=19202 comm="syz.1.3286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1116.920202][ T5811] Bluetooth: hci3: command 0x0c1a tx timeout [ 1116.940813][T17506] Bluetooth: hci0: command 0x0c1a tx timeout [ 1116.948524][ T5811] Bluetooth: hci4: command 0x0c1a tx timeout [ 1116.954654][T17506] Bluetooth: hci5: command 0x0c1a tx timeout [ 1117.011233][ T5867] usb 1-1: device descriptor read/64, error -71 [ 1117.030179][T19211] Bluetooth: hci2: command 0x0c1a tx timeout [ 1117.120318][ T5867] usb usb1-port1: attempt power cycle [ 1117.323820][T19216] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.3290'. [ 1117.341414][T19216] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1117.551731][ T5867] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 1117.709330][ T5867] usb 1-1: device descriptor read/8, error -71 [ 1119.100347][T19211] Bluetooth: hci2: command 0x0c1a tx timeout [ 1119.207133][T19235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1119.215734][T19235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1119.446407][T19247] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1120.429362][T19258] Cache volume key already in use (9p,(null),) [ 1121.034080][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 1121.034098][ T29] audit: type=1400 audit(2000000781.503:42437): avc: denied { ioctl } for pid=19264 comm="syz-executor" path="socket:[67425]" dev="sockfs" ino=67425 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1121.064851][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1121.084589][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1121.094772][ T29] audit: type=1400 audit(2000000781.553:42438): avc: denied { ioctl } for pid=19259 comm="syz.1.3301" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1121.094856][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1121.128763][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1121.136837][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1121.145108][ T29] audit: type=1400 audit(2000000781.623:42439): avc: denied { ioctl } for pid=19264 comm="syz-executor" path="socket:[67425]" dev="sockfs" ino=67425 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1121.176628][ T29] audit: type=1400 audit(2000000781.623:42440): avc: denied { read } for pid=19264 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1121.255316][ T29] audit: type=1400 audit(2000000781.623:42441): avc: denied { open } for pid=19264 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1121.339639][ T29] audit: type=1400 audit(2000000781.623:42442): avc: denied { mounton } for pid=19264 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1121.364120][ T29] audit: type=1400 audit(2000000781.793:42443): avc: denied { read write } for pid=17927 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1121.390203][ T29] audit: type=1400 audit(2000000781.793:42444): avc: denied { read write open } for pid=17927 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1121.426561][ T29] audit: type=1400 audit(2000000781.793:42445): avc: denied { ioctl } for pid=17927 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1122.530411][ T29] audit: type=1400 audit(2000000781.843:42446): avc: denied { read } for pid=19266 comm="syz.3.3302" dev="nsfs" ino=4026533034 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1122.533044][T19278] FAULT_INJECTION: forcing a failure. [ 1122.533044][T19278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1122.600147][T19278] CPU: 0 UID: 0 PID: 19278 Comm: syz.3.3305 Tainted: G L syzkaller #0 PREEMPT(full) [ 1122.600167][T19278] Tainted: [L]=SOFTLOCKUP [ 1122.600171][T19278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1122.600177][T19278] Call Trace: [ 1122.600182][T19278] [ 1122.600186][T19278] dump_stack_lvl+0x100/0x190 [ 1122.600208][T19278] should_fail_ex.cold+0x5/0xa [ 1122.600222][T19278] _copy_from_user+0x2e/0xd0 [ 1122.600238][T19278] ucma_resolve_ip+0x92/0x220 [ 1122.600251][T19278] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 1122.600266][T19278] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 1122.600277][T19278] ucma_write+0x1fb/0x330 [ 1122.600288][T19278] ? __pfx_ucma_write+0x10/0x10 [ 1122.600298][T19278] ? bpf_lsm_file_permission+0x9/0x10 [ 1122.600313][T19278] ? security_file_permission+0x76/0x210 [ 1122.600328][T19278] ? rw_verify_area+0xce/0x6d0 [ 1122.600344][T19278] ? __pfx_ucma_write+0x10/0x10 [ 1122.600353][T19278] vfs_writev+0x5ea/0xe10 [ 1122.600371][T19278] ? __pfx_vfs_writev+0x10/0x10 [ 1122.600387][T19278] ? find_held_lock+0x2b/0x80 [ 1122.600408][T19278] ? __fget_files+0x21f/0x3d0 [ 1122.600423][T19278] ? do_writev+0x28a/0x340 [ 1122.600437][T19278] do_writev+0x28a/0x340 [ 1122.600452][T19278] ? __pfx_do_writev+0x10/0x10 [ 1122.600471][T19278] do_syscall_64+0x106/0xf80 [ 1122.600482][T19278] ? clear_bhb_loop+0x40/0x90 [ 1122.600495][T19278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.600506][T19278] RIP: 0033:0x7f386099c799 [ 1122.600516][T19278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1122.600526][T19278] RSP: 002b:00007f38618c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1122.600537][T19278] RAX: ffffffffffffffda RBX: 00007f3860c16090 RCX: 00007f386099c799 [ 1122.600543][T19278] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000009 [ 1122.600549][T19278] RBP: 00007f38618c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1122.600556][T19278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1122.600562][T19278] R13: 00007f3860c16128 R14: 00007f3860c16090 R15: 00007ffe5a3faf88 [ 1122.600575][T19278] [ 1122.825308][ T976] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1122.869388][T19281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1122.884002][T19281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1122.988329][ T976] usb 5-1: Using ep0 maxpacket: 16 [ 1122.999180][ T976] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1123.012195][ T976] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1123.021506][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.031477][ T976] usb 5-1: config 0 descriptor?? [ 1123.046221][ T976] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1123.180881][ T5815] Bluetooth: hci1: command tx timeout [ 1123.246373][ T7197] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.334798][ T7197] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.355191][T19287] 9pnet_virtio: no channels available for device syz [ 1123.724645][ T7197] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.881724][ T7197] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.939901][T19264] chnl_net:caif_netlink_parms(): no params data found [ 1124.091002][ T5814] usb 5-1: USB disconnect, device number 81 [ 1124.342954][T19264] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.351564][T19264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.358690][T19264] bridge_slave_0: entered allmulticast mode [ 1124.368706][T19264] bridge_slave_0: entered promiscuous mode [ 1124.419113][T19264] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.439219][T19264] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.447892][ T976] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 1124.476037][T19264] bridge_slave_1: entered allmulticast mode [ 1124.488292][T19264] bridge_slave_1: entered promiscuous mode [ 1124.604323][ T7197] bridge_slave_1: left allmulticast mode [ 1124.609994][ T7197] bridge_slave_1: left promiscuous mode [ 1124.616432][ T7197] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.660096][ T7197] bridge_slave_0: left allmulticast mode [ 1124.666296][ T7197] bridge_slave_0: left promiscuous mode [ 1124.673891][ T7197] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.098280][ T976] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1125.139965][ T976] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1125.172726][ T976] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1125.199188][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.260212][ T5815] Bluetooth: hci1: command tx timeout [ 1125.296582][T19296] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1125.315535][T19296] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1125.332466][ T976] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1125.439272][T19316] Cache volume key already in use (9p,(null),) [ 1125.513227][T19317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.550423][T19317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1126.136938][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 1126.136952][ T29] audit: type=1400 audit(2000000786.613:42631): avc: denied { search } for pid=19321 comm="sed" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1126.172895][ T29] audit: type=1400 audit(2000000786.653:42632): avc: denied { read } for pid=19321 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1882 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1126.217101][ T29] audit: type=1400 audit(2000000786.653:42633): avc: denied { read open } for pid=19321 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1882 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1126.249922][ T5963] usb 1-1: USB disconnect, device number 61 [ 1126.316769][ T29] audit: type=1400 audit(2000000786.653:42634): avc: denied { getattr } for pid=19321 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1882 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1126.343703][ T29] audit: type=1400 audit(2000000786.783:42635): avc: denied { mounton } for pid=19302 comm="syz.1.3310" path="/72/file0" dev="tmpfs" ino=392 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1126.382275][ T29] audit: type=1400 audit(2000000786.863:42636): avc: denied { block_suspend } for pid=19302 comm="syz.1.3310" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1126.416091][ T29] audit: type=1400 audit(2000000786.873:42637): avc: denied { search } for pid=19305 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1126.462803][ T7197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1126.484366][ T29] audit: type=1400 audit(2000000786.873:42638): avc: denied { search } for pid=19305 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1126.539011][ T7197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1126.556323][ T29] audit: type=1400 audit(2000000786.873:42639): avc: denied { search } for pid=19305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1126.562735][ T7197] bond0 (unregistering): Released all slaves [ 1126.600153][ T29] audit: type=1400 audit(2000000786.873:42640): avc: denied { getattr } for pid=19305 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1126.668052][T19264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1126.702880][T19264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1126.802939][T19264] team0: Port device team_slave_0 added [ 1126.839731][T19264] team0: Port device team_slave_1 added [ 1127.442062][ T5815] Bluetooth: hci1: command tx timeout [ 1128.186457][T19348] ubi: mtd0 is already attached to ubi31 [ 1128.268309][T19264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1128.303010][T19264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1128.433503][T19264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1128.664455][T19264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1128.783293][T19264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1128.813177][T19357] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1128.826700][T19264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1128.970123][ T5867] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 1128.989815][T19264] hsr_slave_0: entered promiscuous mode [ 1129.041813][T19264] hsr_slave_1: entered promiscuous mode [ 1129.067031][T19264] debugfs: 'hsr0' already exists in 'hsr' [ 1129.097543][T19264] Cannot create hsr debugfs directory [ 1129.170229][ T7197] hsr_slave_0: left promiscuous mode [ 1129.197519][ T7197] hsr_slave_1: left promiscuous mode [ 1129.230640][ T7197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1129.250385][ T5867] usb 1-1: device descriptor read/64, error -71 [ 1129.272532][ T7197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1129.294261][ T7197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1129.308215][ T7197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1129.361289][ T7197] veth1_macvtap: left promiscuous mode [ 1129.385717][ T7197] veth0_macvtap: left promiscuous mode [ 1129.500579][ T5815] Bluetooth: hci1: command tx timeout [ 1129.513989][ T7197] veth1_vlan: left promiscuous mode [ 1129.526123][ T7197] veth0_vlan: left promiscuous mode [ 1130.489849][ T5867] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 1130.911597][ T5867] usb 1-1: device descriptor read/64, error -71 [ 1131.101370][ T5867] usb usb1-port1: attempt power cycle [ 1131.181999][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 1131.212530][ T29] audit: type=1400 audit(2000000791.653:42888): avc: denied { create } for pid=19377 comm="syz.4.3322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1131.408508][ T29] audit: type=1400 audit(2000000791.663:42889): avc: denied { setopt } for pid=19377 comm="syz.4.3322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1131.436689][ T29] audit: type=1400 audit(2000000791.873:42890): avc: denied { ioctl } for pid=19354 comm="syz.0.3319" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1131.467737][ T29] audit: type=1400 audit(2000000791.943:42891): avc: denied { read } for pid=19383 comm="syz.3.3323" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1131.544302][ T29] audit: type=1400 audit(2000000791.943:42892): avc: denied { open } for pid=19383 comm="syz.3.3323" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1131.648782][T19385] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1131.710398][ T29] audit: type=1400 audit(2000000792.003:42893): avc: denied { map_create } for pid=19383 comm="syz.3.3323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1132.070278][ T29] audit: type=1400 audit(2000000792.013:42894): avc: denied { create } for pid=19383 comm="syz.3.3323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1132.099637][ T29] audit: type=1400 audit(2000000792.053:42895): avc: denied { read write } for pid=17505 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1132.124412][ T5814] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 1132.127274][ T29] audit: type=1400 audit(2000000792.053:42896): avc: denied { open } for pid=17505 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1132.163995][ T29] audit: type=1400 audit(2000000792.053:42897): avc: denied { ioctl } for pid=17505 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1132.356468][ T5814] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1132.371387][ T7197] team0 (unregistering): Port device team_slave_1 removed [ 1132.536034][ T5814] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1132.556324][ T5814] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1132.674391][ T7197] team0 (unregistering): Port device team_slave_0 removed [ 1132.700152][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.746063][T19389] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1132.779099][T19389] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1132.819471][ T5814] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1133.150212][T18154] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 1133.274436][ T976] usb 5-1: USB disconnect, device number 82 [ 1133.320145][T18154] usb 1-1: device descriptor read/64, error -71 [ 1134.430352][T19407] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1134.514308][T18154] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 1134.670141][T18154] usb 1-1: device descriptor read/64, error -71 [ 1134.687917][T19422] xt_TCPMSS: Only works on TCP SYN packets [ 1134.772476][T19422] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 1134.802277][T18154] usb usb1-port1: attempt power cycle [ 1134.894406][T19264] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1134.916177][T19264] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1134.963786][T19264] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1135.037698][T19264] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1135.160356][T18154] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 1135.201559][T18154] usb 1-1: device descriptor read/8, error -71 [ 1136.673246][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 1136.673261][ T29] audit: type=1400 audit(2000000797.153:43116): avc: denied { ioctl } for pid=19426 comm="syz.4.3332" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1136.840145][ T5963] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 1137.005651][ T29] audit: type=1400 audit(2000000797.153:43117): avc: denied { read write } for pid=16858 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1137.087329][T19264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1137.171658][ T5963] usb 5-1: device descriptor read/64, error -71 [ 1137.234463][ T29] audit: type=1400 audit(2000000797.153:43118): avc: denied { open } for pid=16858 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1137.285966][T19264] 8021q: adding VLAN 0 to HW filter on device team0 [ 1137.311098][ T29] audit: type=1400 audit(2000000797.153:43119): avc: denied { ioctl } for pid=16858 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1137.343884][T17540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.350796][ T29] audit: type=1400 audit(2000000797.263:43120): avc: denied { ioctl } for pid=19426 comm="syz.4.3332" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1137.351015][T17540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1137.377387][ T29] audit: type=1400 audit(2000000797.273:43121): avc: denied { create } for pid=19450 comm="syz.0.3335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1137.406127][ T29] audit: type=1400 audit(2000000797.273:43122): avc: denied { write } for pid=19450 comm="syz.0.3335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1137.431723][ T5963] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 1137.439983][T19462] FAULT_INJECTION: forcing a failure. [ 1137.439983][T19462] name failslab, interval 1, probability 0, space 0, times 0 [ 1137.456169][T19462] CPU: 1 UID: 0 PID: 19462 Comm: syz.3.3336 Tainted: G L syzkaller #0 PREEMPT(full) [ 1137.456190][T19462] Tainted: [L]=SOFTLOCKUP [ 1137.456194][T19462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1137.456201][T19462] Call Trace: [ 1137.456205][T19462] [ 1137.456209][T19462] dump_stack_lvl+0x100/0x190 [ 1137.456230][T19462] should_fail_ex.cold+0x5/0xa [ 1137.456245][T19462] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1137.456263][T19462] should_failslab+0xc2/0x120 [ 1137.456274][T19462] __kmalloc_noprof+0xe0/0x850 [ 1137.456291][T19462] tomoyo_realpath_from_path+0xb6/0x690 [ 1137.456308][T19462] tomoyo_path_number_perm+0x23c/0x580 [ 1137.456319][T19462] ? tomoyo_path_number_perm+0x22e/0x580 [ 1137.456332][T19462] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1137.456357][T19462] ? find_held_lock+0x2b/0x80 [ 1137.456370][T19462] ? __fget_files+0x215/0x3d0 [ 1137.456381][T19462] ? hook_file_ioctl_common+0x146/0x410 [ 1137.456399][T19462] ? __fget_files+0x21f/0x3d0 [ 1137.456412][T19462] security_file_ioctl+0xd3/0x230 [ 1137.456426][T19462] __x64_sys_ioctl+0xb7/0x210 [ 1137.456442][T19462] do_syscall_64+0x106/0xf80 [ 1137.456454][T19462] ? clear_bhb_loop+0x40/0x90 [ 1137.456468][T19462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.456479][T19462] RIP: 0033:0x7f386099c799 [ 1137.456488][T19462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1137.456498][T19462] RSP: 002b:00007f38618e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1137.456509][T19462] RAX: ffffffffffffffda RBX: 00007f3860c15fa0 RCX: 00007f386099c799 [ 1137.456516][T19462] RDX: 0000200000000700 RSI: 00000000c100565c RDI: 0000000000000003 [ 1137.456523][T19462] RBP: 00007f38618e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1137.456529][T19462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1137.456535][T19462] R13: 00007f3860c16038 R14: 00007f3860c15fa0 R15: 00007ffe5a3faf88 [ 1137.456549][T19462] [ 1137.456925][T19462] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1137.499966][ T29] audit: type=1400 audit(2000000797.273:43123): avc: denied { nlmsg_write } for pid=19450 comm="syz.0.3335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1137.703295][T19264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1137.713833][T19264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1137.761547][ T7197] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.768609][ T7197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1137.792600][ T29] audit: type=1400 audit(2000000797.283:43124): avc: denied { read } for pid=19450 comm="syz.0.3335" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1137.802496][ T5474] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1137.851124][T18154] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 1137.882315][ T5963] usb 5-1: device descriptor read/64, error -71 [ 1137.991667][ T5963] usb usb5-port1: attempt power cycle [ 1137.997373][T18154] usb 1-1: device descriptor read/64, error -71 [ 1138.036683][T19264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1138.124324][T19474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1138.162853][T19474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1138.203308][T19474] netlink: 'syz.3.3337': attribute type 21 has an invalid length. [ 1138.214435][T19474] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3337'. [ 1138.260691][T18154] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 1138.430380][T18154] usb 1-1: device descriptor read/64, error -71 [ 1138.552207][T18154] usb usb1-port1: attempt power cycle [ 1138.760365][T19488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3339'. [ 1138.904898][T19264] veth0_vlan: entered promiscuous mode [ 1138.910261][T18154] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 1138.971851][T18154] usb 1-1: device descriptor read/8, error -71 [ 1138.985238][T19264] veth1_vlan: entered promiscuous mode [ 1139.255333][T19506] gfs2: gfs2 mount does not exist [ 1140.170174][T18154] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 1140.415897][T18154] usb 1-1: device descriptor read/8, error -71 [ 1140.489134][T19264] veth0_macvtap: entered promiscuous mode [ 1140.538652][T18154] usb usb1-port1: unable to enumerate USB device [ 1140.577150][T19264] veth1_macvtap: entered promiscuous mode [ 1140.707963][T19514] bad cache= option: no[Æd CÈž‰ÔXÌXËéòÞœËß½eµwÒÊ>jz"@ [ 1140.707963][T19514] [ 1140.753362][T19264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1140.767364][T19514] CIFS: VFS: bad cache= option: no[Æd CÈž‰ÔXÌXËéòÞœËß½eµwÒÊ>jz"@ [ 1140.824637][T19264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1140.896113][ T48] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.966074][ T48] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.047832][ T48] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.109854][ T48] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.540509][T15697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1141.582094][T15697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.706695][ T29] kauditd_printk_skb: 332 callbacks suppressed [ 1141.706707][ T29] audit: type=1400 audit(2000000802.183:43455): avc: denied { search } for pid=19527 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1141.828951][ T29] audit: type=1400 audit(2000000802.283:43456): avc: denied { read } for pid=19264 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1141.851358][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1141.901309][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.929872][ T29] audit: type=1400 audit(2000000802.283:43457): avc: denied { write } for pid=19264 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1142.012075][T19529] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3347'. [ 1142.021586][ T29] audit: type=1400 audit(2000000802.283:43458): avc: denied { read } for pid=19264 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1142.091665][T19529] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1142.152615][ T29] audit: type=1400 audit(2000000802.293:43459): avc: denied { read write } for pid=17505 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1142.180739][T19533] 9p: Bad value for 'rfdno' [ 1142.210113][ T29] audit: type=1400 audit(2000000802.293:43460): avc: denied { open } for pid=17505 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1142.303146][ T29] audit: type=1400 audit(2000000802.293:43461): avc: denied { ioctl } for pid=17505 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1142.323757][T19536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1142.391759][T19536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1142.397824][ T29] audit: type=1400 audit(2000000802.303:43462): avc: denied { write } for pid=19264 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1142.423574][ T29] audit: type=1400 audit(2000000802.303:43463): avc: denied { read } for pid=19264 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1142.468098][ T29] audit: type=1400 audit(2000000802.353:43464): avc: denied { read write } for pid=17927 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1142.776398][T19545] netlink: 'syz.3.3348': attribute type 2 has an invalid length. [ 1143.039683][T19536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1143.048295][T19536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1144.799675][T19572] FAULT_INJECTION: forcing a failure. [ 1144.799675][T19572] name failslab, interval 1, probability 0, space 0, times 0 [ 1144.930891][T19572] CPU: 0 UID: 0 PID: 19572 Comm: syz.4.3357 Tainted: G L syzkaller #0 PREEMPT(full) [ 1144.930921][T19572] Tainted: [L]=SOFTLOCKUP [ 1144.930927][T19572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1144.930936][T19572] Call Trace: [ 1144.930943][T19572] [ 1144.930950][T19572] dump_stack_lvl+0x100/0x190 [ 1144.930983][T19572] should_fail_ex.cold+0x5/0xa [ 1144.931007][T19572] should_failslab+0xc2/0x120 [ 1144.931024][T19572] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1144.931046][T19572] ? nf_nat_masq_schedule.part.0+0x3bb/0x7a0 [ 1144.931069][T19572] nf_nat_masq_schedule.part.0+0x3bb/0x7a0 [ 1144.931088][T19572] ? __pfx_device_cmp+0x10/0x10 [ 1144.931106][T19572] ? __pfx_nf_nat_masq_schedule.part.0+0x10/0x10 [ 1144.931131][T19572] masq_device_event+0xfd/0x120 [ 1144.931148][T19572] notifier_call_chain+0x99/0x420 [ 1144.931170][T19572] call_netdevice_notifiers_info+0xbe/0x110 [ 1144.931187][T19572] __dev_notify_flags+0x1f7/0x2e0 [ 1144.931198][T19572] ? __pfx___dev_notify_flags+0x10/0x10 [ 1144.931210][T19572] ? __pfx___dev_change_flags+0x10/0x10 [ 1144.931225][T19572] netif_change_flags+0x108/0x160 [ 1144.931238][T19572] dev_change_flags+0xba/0x250 [ 1144.931251][T19572] dev_ifsioc+0x1682/0x1f20 [ 1144.931264][T19572] ? __pfx_dev_ifsioc+0x10/0x10 [ 1144.931273][T19572] ? __pfx___mutex_lock+0x10/0x10 [ 1144.931291][T19572] ? dev_load+0x8e/0x240 [ 1144.931306][T19572] ? dev_load+0x8e/0x240 [ 1144.931325][T19572] dev_ioctl+0x342/0x10e0 [ 1144.931336][T19572] sock_do_ioctl+0x1a0/0x280 [ 1144.931350][T19572] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1144.931368][T19572] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1144.931384][T19572] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1144.931400][T19572] sock_ioctl+0x599/0x6b0 [ 1144.931416][T19572] ? __pfx_sock_ioctl+0x10/0x10 [ 1144.931429][T19572] ? hook_file_ioctl_common+0x146/0x410 [ 1144.931448][T19572] ? selinux_file_ioctl+0x139/0x290 [ 1144.931460][T19572] ? selinux_file_ioctl+0xb4/0x290 [ 1144.931474][T19572] ? __pfx_sock_ioctl+0x10/0x10 [ 1144.931489][T19572] __x64_sys_ioctl+0x18e/0x210 [ 1144.931505][T19572] do_syscall_64+0x106/0xf80 [ 1144.931517][T19572] ? clear_bhb_loop+0x40/0x90 [ 1144.931530][T19572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.931541][T19572] RIP: 0033:0x7f8e0099c799 [ 1144.931550][T19572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1144.931561][T19572] RSP: 002b:00007f8e01841028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1144.931572][T19572] RAX: ffffffffffffffda RBX: 00007f8e00c15fa0 RCX: 00007f8e0099c799 [ 1144.931579][T19572] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000003 [ 1144.931585][T19572] RBP: 00007f8e01841090 R08: 0000000000000000 R09: 0000000000000000 [ 1144.931591][T19572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1144.931597][T19572] R13: 00007f8e00c16038 R14: 00007f8e00c15fa0 R15: 00007fff41a7d4c8 [ 1144.931611][T19572] [ 1145.906789][T19589] 9p: Bad value for 'rfdno' [ 1146.220266][ T976] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1146.450619][ T976] usb 1-1: Using ep0 maxpacket: 16 [ 1146.464282][ T976] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.538952][ T976] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 1146.553879][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1146.564961][ T976] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 1146.581181][ T976] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1146.635640][ T976] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1146.648628][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.658759][ T976] usb 1-1: Product: syz [ 1146.664354][ T976] usb 1-1: Manufacturer: syz [ 1146.670172][ T976] usb 1-1: SerialNumber: syz [ 1146.687387][ T976] usb 1-1: config 0 descriptor?? [ 1146.718895][ T976] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1146.763010][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 1146.763025][ T29] audit: type=1400 audit(2000000807.243:43756): avc: denied { read write } for pid=19264 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1146.932118][ T29] audit: type=1400 audit(2000000807.243:43757): avc: denied { create } for pid=19606 comm="syz.4.3366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1147.199216][ T5814] usb 1-1: USB disconnect, device number 73 [ 1147.223173][ T29] audit: type=1400 audit(2000000807.273:43758): avc: denied { read write open } for pid=19264 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1147.470644][ T29] audit: type=1400 audit(2000000807.273:43759): avc: denied { ioctl } for pid=19264 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1147.522476][T19616] syzkaller1: entered promiscuous mode [ 1147.527960][T19616] syzkaller1: entered allmulticast mode [ 1148.088589][ T29] audit: type=1400 audit(2000000807.323:43760): avc: denied { map_create } for pid=19608 comm="syz.5.3367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1148.211640][ T29] audit: type=1400 audit(2000000807.323:43761): avc: denied { bpf } for pid=19608 comm="syz.5.3367" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1148.288640][ T29] audit: type=1400 audit(2000000807.323:43762): avc: denied { map_read map_write } for pid=19608 comm="syz.5.3367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1148.420234][ T29] audit: type=1400 audit(2000000807.333:43763): avc: denied { create } for pid=19608 comm="syz.5.3367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1148.514810][T19264] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1148.629078][T19625] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1149.630113][T19621] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 1150.090918][T19621] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1150.174584][T19621] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1150.205004][T19621] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1150.217347][T19621] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.325851][T19642] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1150.457699][T19642] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1150.808167][T19621] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1150.989255][T19654] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1151.032314][T17723] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 1151.361366][T19657] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1151.367811][T19657] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1151.374273][T19657] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1151.380293][T17723] usb 1-1: device descriptor read/64, error -71 [ 1151.388079][T19657] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1151.394529][T19657] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1151.400620][T19657] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1151.519161][T19657] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1151.720583][T17723] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 1151.777045][T19448] usb 5-1: USB disconnect, device number 86 [ 1151.790655][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 1151.790671][ T29] audit: type=1400 audit(2000000812.273:43950): avc: denied { ioctl } for pid=19655 comm="syz.0.3380" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1151.920939][T17723] usb 1-1: device descriptor read/64, error -71 [ 1151.975881][ T29] audit: type=1400 audit(2000000812.273:43951): avc: denied { ioctl } for pid=19655 comm="syz.0.3380" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1152.060524][T17723] usb usb1-port1: attempt power cycle [ 1152.124365][ T29] audit: type=1400 audit(2000000812.343:43952): avc: denied { ioctl } for pid=19655 comm="syz.0.3380" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1152.212592][T19672] syzkaller1: entered promiscuous mode [ 1152.218071][T19672] syzkaller1: entered allmulticast mode [ 1152.246891][ T29] audit: type=1400 audit(2000000812.383:43953): avc: denied { search } for pid=19666 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1152.289828][ T29] audit: type=1400 audit(2000000812.383:43954): avc: denied { search } for pid=19666 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1152.809787][T17723] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 1152.834856][ T29] audit: type=1400 audit(2000000812.383:43955): avc: denied { search } for pid=19666 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1152.869703][T17723] usb 1-1: device descriptor read/8, error -71 [ 1152.915996][T19680] tipc: Enabling of bearer rejected, failed to enable media [ 1152.924937][ T29] audit: type=1400 audit(2000000812.383:43956): avc: denied { search } for pid=19666 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1152.978553][T19682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=19682 comm=syz.4.3383 [ 1153.000869][ T29] audit: type=1400 audit(2000000812.433:43957): avc: denied { search } for pid=19667 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1153.024572][ T29] audit: type=1400 audit(2000000812.433:43958): avc: denied { search } for pid=19667 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1153.078142][ T29] audit: type=1400 audit(2000000812.433:43959): avc: denied { search } for pid=19667 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1153.088176][T19686] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.3384'. [ 1153.120599][T17723] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 1153.179214][T19682] netlink: 'syz.4.3383': attribute type 3 has an invalid length. [ 1153.257537][T17723] usb 1-1: device descriptor read/8, error -71 [ 1153.265374][T19686] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1153.579722][T17723] usb usb1-port1: unable to enumerate USB device [ 1153.589623][ T5815] Bluetooth: hci4: command 0x0c1a tx timeout [ 1153.596181][ T5815] Bluetooth: hci5: command 0x0c1a tx timeout [ 1153.602242][ T5815] Bluetooth: hci0: command 0x0c1a tx timeout [ 1153.607325][T17506] Bluetooth: hci3: command 0x0c1a tx timeout [ 1153.608248][T19211] Bluetooth: hci1: command 0x0c1a tx timeout [ 1154.082779][T19707] gfs2: gfs2 mount does not exist [ 1155.660442][T19211] Bluetooth: hci1: command 0x0c1a tx timeout [ 1156.823148][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 1156.823164][ T29] audit: type=1400 audit(2000000817.303:44147): avc: denied { search } for pid=19716 comm="rm" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1157.018422][ T29] audit: type=1400 audit(2000000817.353:44148): avc: denied { search } for pid=19716 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1157.130515][ T29] audit: type=1400 audit(2000000817.373:44149): avc: denied { map_create } for pid=19723 comm="syz.5.3392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1157.182403][ T29] audit: type=1400 audit(2000000817.373:44150): avc: denied { name_bind } for pid=19723 comm="syz.5.3392" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1157.205375][ T29] audit: type=1400 audit(2000000817.373:44151): avc: denied { node_bind } for pid=19723 comm="syz.5.3392" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1157.235620][ T29] audit: type=1400 audit(2000000817.373:44152): avc: denied { read } for pid=19723 comm="syz.5.3392" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1157.258453][ T9] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1157.266789][ T29] audit: type=1400 audit(2000000817.373:44153): avc: denied { open } for pid=19723 comm="syz.5.3392" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1157.306861][T19734] syzkaller1: entered promiscuous mode [ 1157.312371][T19734] syzkaller1: entered allmulticast mode [ 1157.331554][T19738] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1157.350495][T19737] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1157.357007][T19737] audit: audit_lost=592 audit_rate_limit=0 audit_backlog_limit=64 [ 1157.433959][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1157.511224][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1157.748960][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1157.804103][T19211] Bluetooth: hci1: command 0x0c1a tx timeout [ 1157.821073][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.832754][ T9] usb 1-1: config 0 descriptor?? [ 1157.843026][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1158.270874][ T5814] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1158.513897][ T9] usb 1-1: USB disconnect, device number 78 [ 1158.553712][ T5814] usb 6-1: device descriptor read/64, error -71 [ 1158.811210][ T5814] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1158.972496][ T5814] usb 6-1: device descriptor read/64, error -71 [ 1159.053940][T19765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1159.099060][T19765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1159.101705][ T5814] usb usb6-port1: attempt power cycle [ 1161.136373][T19794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.172751][T19794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.253802][T19800] syzkaller1: entered promiscuous mode [ 1161.259310][T19800] syzkaller1: entered allmulticast mode [ 1161.851687][ T29] kauditd_printk_skb: 377 callbacks suppressed [ 1161.851704][ T29] audit: type=1400 audit(2000000822.333:44501): avc: denied { search } for pid=19806 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1162.000493][ T29] audit: type=1400 audit(2000000822.333:44502): avc: denied { search } for pid=19806 comm="rm" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1162.025663][ T29] audit: type=1400 audit(2000000822.333:44503): avc: denied { search } for pid=19806 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1162.048635][ T29] audit: type=1400 audit(2000000822.333:44504): avc: denied { getattr } for pid=19806 comm="rm" path="/run/dhcpcd/hook-state/resolv.conf.eth4.ipv4ll" dev="tmpfs" ino=11925 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1162.091243][ T29] audit: type=1400 audit(2000000822.333:44505): avc: denied { search } for pid=19806 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1162.115417][ T29] audit: type=1400 audit(2000000822.333:44506): avc: denied { search } for pid=19806 comm="rm" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1162.137833][ T29] audit: type=1400 audit(2000000822.333:44507): avc: denied { search } for pid=19806 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1162.170647][ T29] audit: type=1400 audit(2000000822.333:44508): avc: denied { search } for pid=19806 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1162.204559][ T29] audit: type=1400 audit(2000000822.333:44509): avc: denied { remove_name } for pid=19806 comm="rm" name="resolv.conf.eth4.ipv4ll" dev="tmpfs" ino=11925 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1162.235830][ T29] audit: type=1400 audit(2000000822.333:44510): avc: denied { unlink } for pid=19806 comm="rm" name="resolv.conf.eth4.ipv4ll" dev="tmpfs" ino=11925 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1162.665744][T19826] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.3404'. [ 1162.699373][T19826] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1163.053905][T19837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3413'. [ 1163.922310][T19853] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3416'. [ 1165.460432][T19833] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1165.977446][T19875] syzkaller1: entered promiscuous mode [ 1165.982982][T19875] syzkaller1: entered allmulticast mode [ 1166.834083][T19895] gfs2: gfs2 mount does not exist [ 1167.669063][ T29] kauditd_printk_skb: 283 callbacks suppressed [ 1167.669080][ T29] audit: type=1400 audit(2000000828.143:44794): avc: denied { read } for pid=19888 comm="syz.5.3425" path="socket:[71265]" dev="sockfs" ino=71265 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1167.906064][ T29] audit: type=1400 audit(2000000828.353:44795): avc: denied { read write } for pid=17927 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1167.933284][ T29] audit: type=1400 audit(2000000828.353:44796): avc: denied { open } for pid=17927 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1167.992898][ T29] audit: type=1400 audit(2000000828.353:44797): avc: denied { ioctl } for pid=17927 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1168.076367][T19899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1168.119560][T19899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1168.151233][ T29] audit: type=1400 audit(2000000828.383:44798): avc: denied { read write } for pid=16858 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1168.196661][ T29] audit: type=1400 audit(2000000828.383:44799): avc: denied { open } for pid=16858 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1168.232149][ T29] audit: type=1400 audit(2000000828.383:44800): avc: denied { ioctl } for pid=16858 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1168.265597][ T29] audit: type=1400 audit(2000000828.533:44801): avc: denied { mounton } for pid=19897 comm="syz.3.3427" path="/85/file0" dev="tmpfs" ino=477 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1168.428037][ T29] audit: type=1400 audit(2000000828.533:44802): avc: denied { mount } for pid=19897 comm="syz.3.3427" name="/" dev="autofs" ino=71278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1168.622888][ T29] audit: type=1400 audit(2000000828.543:44803): avc: denied { read write } for pid=19897 comm="syz.3.3427" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1169.140101][ T9] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1169.220109][T19448] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1169.300183][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1169.321268][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1169.341615][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1169.351216][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.362105][ T9] usb 1-1: config 0 descriptor?? [ 1169.377978][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1169.380097][T19448] usb 5-1: Using ep0 maxpacket: 16 [ 1169.405406][T19448] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1169.432900][T19448] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1169.450103][T19448] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.461684][T19448] usb 5-1: config 0 descriptor?? [ 1169.472722][T19448] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1169.805833][T19448] usb 1-1: USB disconnect, device number 79 [ 1169.936210][T19922] netlink: 'syz.3.3436': attribute type 1 has an invalid length. [ 1169.952185][T19922] netlink: 2096 bytes leftover after parsing attributes in process `syz.3.3436'. [ 1169.961808][T19922] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3436'. [ 1170.352501][T19924] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3437'. [ 1170.388070][T19932] syzkaller1: entered promiscuous mode [ 1170.394391][T19932] syzkaller1: entered allmulticast mode [ 1170.692347][T17723] usb 5-1: USB disconnect, device number 87 [ 1170.910094][ T5963] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1170.930094][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1171.060224][ T5963] usb 1-1: Using ep0 maxpacket: 16 [ 1171.067597][ T5963] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1171.080966][ T5963] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1171.089993][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.100485][ T5963] usb 1-1: config 0 descriptor?? [ 1171.112466][ T5963] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1171.120270][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1171.127833][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1171.137382][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.147340][ T9] usb 6-1: config 0 descriptor?? [ 1171.664043][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1171.693804][ T9] (null): keene_cmd_main failed (-110) [ 1171.751082][ T9] video4linux radio48: keene_cmd_main failed (-32) [ 1171.960427][ T9] radio-keene 6-1:0.0: V4L2 device registered as radio48 [ 1172.274948][T19954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1172.608352][ T9541] usb 1-1: USB disconnect, device number 80 [ 1172.674362][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 1172.674379][ T29] audit: type=1400 audit(2000000833.153:45036): avc: denied { create } for pid=19955 comm="syz.3.3444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1172.703350][ T29] audit: type=1400 audit(2000000833.163:45037): avc: denied { create } for pid=19958 comm="syz.4.3445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1172.725616][ T29] audit: type=1400 audit(2000000833.183:45038): avc: denied { prog_load } for pid=19955 comm="syz.3.3444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1172.749177][ T29] audit: type=1400 audit(2000000833.183:45039): avc: denied { bpf } for pid=19955 comm="syz.3.3444" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1172.771050][ T29] audit: type=1400 audit(2000000833.183:45040): avc: denied { perfmon } for pid=19955 comm="syz.3.3444" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1172.792783][ T29] audit: type=1400 audit(2000000833.193:45041): avc: denied { allowed } for pid=19955 comm="syz.3.3444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1172.816131][ T29] audit: type=1400 audit(2000000833.193:45042): avc: denied { create } for pid=19955 comm="syz.3.3444" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1172.844143][ T29] audit: type=1400 audit(2000000833.193:45043): avc: denied { map } for pid=19955 comm="syz.3.3444" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=71465 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1172.870229][ T29] audit: type=1400 audit(2000000833.193:45044): avc: denied { read write } for pid=19955 comm="syz.3.3444" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=71465 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1172.933944][ T29] audit: type=1400 audit(2000000833.243:45045): avc: denied { prog_load } for pid=19955 comm="syz.3.3444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1173.185189][T19966] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1173.232309][T19966] netlink: 'syz.1.3446': attribute type 39 has an invalid length. [ 1173.553001][T19448] usb 6-1: USB disconnect, device number 5 [ 1174.054611][T19982] gfs2: gfs2 mount does not exist [ 1176.400242][T18154] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 1177.249444][T18154] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1177.281648][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1177.291918][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1177.292389][T18154] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1177.314500][T20011] ceph: No mds server is up or the cluster is laggy [ 1177.388153][T18154] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1177.534673][T20014] sctp: [Deprecated]: syz.5.3457 (pid 20014) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1177.534673][T20014] Use struct sctp_sack_info instead [ 1177.551488][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1177.557455][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1177.657594][T18154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.694709][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 1177.694724][ T29] audit: type=1400 audit(2000000838.173:45215): avc: denied { create } for pid=20019 comm="syz.1.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1177.832057][ T29] audit: type=1400 audit(2000000838.203:45216): avc: denied { prog_load } for pid=20018 comm="syz.5.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1177.878262][ T29] audit: type=1400 audit(2000000838.203:45217): avc: denied { bpf } for pid=20018 comm="syz.5.3458" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1177.904831][T19991] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1177.923158][T19991] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1177.958468][ T29] audit: type=1400 audit(2000000838.203:45218): avc: denied { perfmon } for pid=20018 comm="syz.5.3458" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1178.130434][T18154] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1178.139775][ T29] audit: type=1400 audit(2000000838.203:45219): avc: denied { prog_load } for pid=20018 comm="syz.5.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1179.130087][ T29] audit: type=1400 audit(2000000838.203:45220): avc: denied { create } for pid=20019 comm="syz.1.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1179.151317][ T29] audit: type=1400 audit(2000000838.203:45221): avc: denied { write } for pid=20019 comm="syz.1.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1179.171337][ T29] audit: type=1400 audit(2000000838.203:45222): avc: denied { create } for pid=20019 comm="syz.1.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1180.324662][ T29] audit: type=1400 audit(2000000838.203:45223): avc: denied { create } for pid=20019 comm="syz.1.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1180.420103][T18154] usb 5-1: USB disconnect, device number 88 [ 1180.436743][ T29] audit: type=1400 audit(2000000838.203:45224): avc: denied { write } for pid=20019 comm="syz.1.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1182.278614][T20054] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3467'. [ 1182.289410][T19448] libceph: connect (1)[c::]:6789 error -101 [ 1182.305636][T19448] libceph: mon0 (1)[c::]:6789 connect error [ 1182.316837][T20054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3467'. [ 1182.360139][T20056] ceph: No mds server is up or the cluster is laggy [ 1182.504390][T20060] sctp: [Deprecated]: syz.5.3468 (pid 20060) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1182.504390][T20060] Use struct sctp_sack_info instead [ 1182.580473][T19448] libceph: connect (1)[c::]:6789 error -101 [ 1182.591219][T19448] libceph: mon0 (1)[c::]:6789 connect error [ 1182.786810][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 1182.786822][ T29] audit: type=1400 audit(2000000843.263:45376): avc: denied { read write } for pid=17927 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1182.860142][ T29] audit: type=1400 audit(2000000843.293:45377): avc: denied { open } for pid=17927 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1182.922046][ T29] audit: type=1400 audit(2000000843.293:45378): avc: denied { ioctl } for pid=17927 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1183.110245][ T29] audit: type=1400 audit(2000000843.333:45379): avc: denied { prog_load } for pid=20071 comm="syz.4.3471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1183.131006][ T29] audit: type=1400 audit(2000000843.333:45380): avc: denied { bpf } for pid=20071 comm="syz.4.3471" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1183.141232][T20074] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.3472'. [ 1183.151800][ T29] audit: type=1400 audit(2000000843.333:45381): avc: denied { prog_load } for pid=20071 comm="syz.4.3471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1183.191592][ T29] audit: type=1400 audit(2000000843.343:45382): avc: denied { perfmon } for pid=20071 comm="syz.4.3471" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1183.214926][ T29] audit: type=1400 audit(2000000843.343:45383): avc: denied { bpf } for pid=20071 comm="syz.4.3471" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1183.281609][ T29] audit: type=1400 audit(2000000843.343:45384): avc: denied { read write } for pid=20071 comm="syz.4.3471" name="sg0" dev="devtmpfs" ino=780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1183.289035][T20074] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1183.315440][ T29] audit: type=1400 audit(2000000843.343:45385): avc: denied { open } for pid=20071 comm="syz.4.3471" path="/dev/sg0" dev="devtmpfs" ino=780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1184.220950][ T9] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 1184.313515][T20094] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3476'. [ 1184.323610][T20094] openvswitch: netlink: Flow actions attr not present in new flow. [ 1184.371423][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1184.394534][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1184.412385][ T9] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1184.427940][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1184.464178][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1184.480959][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1184.488763][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1184.509381][ T9] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1184.522294][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1184.538665][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1184.553497][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1184.561145][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1184.572043][ T9] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1185.433803][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1185.445359][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1185.461280][ T9] usb 6-1: string descriptor 0 read error: -22 [ 1185.467580][ T9] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1185.477147][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.492888][ T9] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1186.641799][T20079] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1186.812778][T18154] usb 6-1: USB disconnect, device number 6 [ 1187.000591][ T5963] libceph: connect (1)[c::]:6789 error -101 [ 1187.040802][ T5963] libceph: mon0 (1)[c::]:6789 connect error [ 1187.086818][T20111] ceph: No mds server is up or the cluster is laggy [ 1187.298983][T20111] sctp: [Deprecated]: syz.5.3480 (pid 20111) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1187.298983][T20111] Use struct sctp_sack_info instead [ 1187.870399][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 1187.870416][ T29] audit: type=1400 audit(2000000848.353:45553): avc: denied { create } for pid=20122 comm="syz.5.3483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1187.910138][ T29] audit: type=1400 audit(2000000848.373:45554): avc: denied { read } for pid=20122 comm="syz.5.3483" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1187.965638][ T29] audit: type=1400 audit(2000000848.373:45555): avc: denied { open } for pid=20122 comm="syz.5.3483" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1188.105412][ T29] audit: type=1400 audit(2000000848.423:45556): avc: denied { ioctl } for pid=20122 comm="syz.5.3483" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1188.257177][ T29] audit: type=1400 audit(2000000848.513:45557): avc: denied { read write } for pid=17505 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1188.310932][ T29] audit: type=1400 audit(2000000848.513:45558): avc: denied { open } for pid=17505 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1188.430844][ T29] audit: type=1400 audit(2000000848.513:45559): avc: denied { ioctl } for pid=17505 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1188.464028][ T29] audit: type=1400 audit(2000000848.543:45560): avc: denied { prog_load } for pid=20122 comm="syz.5.3483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1188.963593][ T29] audit: type=1400 audit(2000000848.613:45561): avc: denied { bpf } for pid=20122 comm="syz.5.3483" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1189.009310][ T29] audit: type=1400 audit(2000000848.613:45562): avc: denied { prog_load } for pid=20122 comm="syz.5.3483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1189.973453][T18154] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 1190.059287][T20154] xt_TCPMSS: Only works on TCP SYN packets [ 1190.132575][T18154] usb 1-1: device descriptor read/64, error -71 [ 1190.435505][T18154] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 1190.931791][T20162] ubi: mtd0 is already attached to ubi31 [ 1191.003706][T18154] usb 1-1: device descriptor read/64, error -71 [ 1191.120807][T18154] usb usb1-port1: attempt power cycle [ 1191.306372][ T5963] libceph: connect (1)[c::]:6789 error -101 [ 1191.312447][ T5963] libceph: mon0 (1)[c::]:6789 connect error [ 1191.364396][T20171] ceph: No mds server is up or the cluster is laggy [ 1191.473262][T18154] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 1191.550680][T18154] usb 1-1: device descriptor read/8, error -71 [ 1191.566111][T20171] sctp: [Deprecated]: syz.4.3493 (pid 20171) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1191.566111][T20171] Use struct sctp_sack_info instead [ 1191.860185][T18154] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 1191.914484][T18154] usb 1-1: device descriptor read/8, error -71 [ 1192.092585][T18154] usb usb1-port1: unable to enumerate USB device [ 1193.261669][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 1193.261687][ T29] audit: type=1400 audit(2000000852.823:45786): avc: denied { execmem } for pid=20189 comm="syz.5.3498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1193.385799][ T29] audit: type=1400 audit(2000000853.133:45787): avc: denied { read } for pid=20189 comm="syz.5.3498" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1193.468488][ T29] audit: type=1400 audit(2000000853.133:45788): avc: denied { open } for pid=20189 comm="syz.5.3498" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1193.495723][ T29] audit: type=1400 audit(2000000853.393:45789): avc: denied { read write } for pid=20189 comm="syz.5.3498" name="vbi1" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1193.627437][T20203] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3502'. [ 1194.000135][ T29] audit: type=1400 audit(2000000853.393:45790): avc: denied { open } for pid=20189 comm="syz.5.3498" path="/dev/vbi1" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1194.127560][ T29] audit: type=1400 audit(2000000853.393:45791): avc: denied { ioctl } for pid=20189 comm="syz.5.3498" path="/dev/vbi1" dev="devtmpfs" ino=955 ioctlcmd=0x565c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1194.642298][T20211] ubi: mtd0 is already attached to ubi31 [ 1195.143854][T20213] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1195.174307][T20213] audit: audit_lost=603 audit_rate_limit=0 audit_backlog_limit=64 [ 1195.195687][ T29] audit: type=1400 audit(2000000853.823:45792): avc: denied { read write } for pid=17505 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1195.245268][T20213] audit: backlog limit exceeded [ 1195.305372][ T5963] libceph: connect (1)[c::]:6789 error -101 [ 1195.316897][ T5963] libceph: mon0 (1)[c::]:6789 connect error [ 1195.380132][T20215] ceph: No mds server is up or the cluster is laggy [ 1195.626487][T20215] sctp: [Deprecated]: syz.1.3507 (pid 20215) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1195.626487][T20215] Use struct sctp_sack_info instead [ 1196.026018][T20232] overlayfs: failed to resolve './file0/file1': -2 [ 1196.640247][ T9541] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 1196.913297][ T9541] usb 5-1: device descriptor read/64, error -71 [ 1197.210548][ T9541] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 1197.360581][ T9541] usb 5-1: device descriptor read/64, error -71 [ 1197.513413][ T9541] usb usb5-port1: attempt power cycle [ 1198.416293][T20259] sctp: [Deprecated]: syz.1.3514 (pid 20259) Use of int in max_burst socket option. [ 1198.416293][T20259] Use struct sctp_assoc_value instead [ 1198.713791][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 1198.713805][ T29] audit: type=1400 audit(2000000858.463:45977): avc: denied { create } for pid=20252 comm="syz.1.3514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1198.770087][ T9541] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 1198.782392][ T29] audit: type=1400 audit(2000000858.463:45978): avc: denied { execmem } for pid=20252 comm="syz.1.3514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1198.828350][ T9541] usb 5-1: device descriptor read/8, error -71 [ 1198.838862][ T29] audit: type=1400 audit(2000000858.833:45979): avc: denied { read } for pid=20252 comm="syz.1.3514" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1199.059894][ T29] audit: type=1400 audit(2000000858.833:45980): avc: denied { open } for pid=20252 comm="syz.1.3514" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1199.144845][ T29] audit: type=1400 audit(2000000858.893:45981): avc: denied { create } for pid=20252 comm="syz.1.3514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1199.646141][T20271] ubi: mtd0 is already attached to ubi31 [ 1200.112804][ T29] audit: type=1400 audit(2000000858.893:45982): avc: denied { getopt } for pid=20252 comm="syz.1.3514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1200.150895][T19448] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 1200.484732][ T29] audit: type=1400 audit(2000000858.933:45983): avc: denied { create } for pid=20252 comm="syz.1.3514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1200.645232][ T29] audit: type=1400 audit(2000000858.943:45984): avc: denied { bind } for pid=20252 comm="syz.1.3514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1200.774659][T17505] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1200.810418][ T29] audit: type=1400 audit(2000000858.943:45985): avc: denied { node_bind } for pid=20252 comm="syz.1.3514" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1201.529806][T20294] gfs2: gfs2 mount does not exist [ 1202.667067][T20297] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 1203.357919][T20299] netlink: 'syz.0.3524': attribute type 3 has an invalid length. [ 1203.752821][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 1203.752837][ T29] audit: type=1400 audit(2000000864.233:46136): avc: denied { create } for pid=20305 comm="syz.3.3527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1203.987732][T20307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1203.998549][T20307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1204.193446][ T29] audit: type=1400 audit(2000000864.263:46137): avc: denied { write } for pid=20305 comm="syz.3.3527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1204.217181][ T29] audit: type=1400 audit(2000000864.263:46138): avc: denied { nlmsg_write } for pid=20305 comm="syz.3.3527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1204.292534][T20319] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 1204.312252][ T29] audit: type=1400 audit(2000000864.273:46139): avc: denied { read } for pid=20305 comm="syz.3.3527" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1204.335625][T20309] netlink: 212340 bytes leftover after parsing attributes in process `syz.5.3526'. [ 1204.370278][T20309] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1204.678399][ T29] audit: type=1400 audit(2000000864.273:46140): avc: denied { open } for pid=20305 comm="syz.3.3527" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1204.752725][ T29] audit: type=1400 audit(2000000864.353:46141): avc: denied { create } for pid=20305 comm="syz.3.3527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1204.811450][ T29] audit: type=1400 audit(2000000864.393:46142): avc: denied { mount } for pid=20305 comm="syz.3.3527" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1204.896025][T20322] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3528'. [ 1204.917173][ T29] audit: type=1400 audit(2000000864.403:46143): avc: denied { map_create } for pid=20305 comm="syz.3.3527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1204.980830][ T29] audit: type=1400 audit(2000000864.403:46144): avc: denied { prog_load } for pid=20305 comm="syz.3.3527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1205.038620][ T29] audit: type=1400 audit(2000000864.403:46145): avc: denied { bpf } for pid=20305 comm="syz.3.3527" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1205.602128][T20329] ubi: mtd0 is already attached to ubi31 [ 1207.509289][T20339] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3533'. [ 1207.959630][T20352] gfs2: gfs2 mount does not exist [ 1208.735751][T20309] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1208.948662][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 1208.948679][ T29] audit: type=1400 audit(2000000869.413:46283): avc: denied { read write } for pid=16858 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1208.989846][ T29] audit: type=1400 audit(2000000869.463:46284): avc: denied { read write open } for pid=16858 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1209.023701][ T29] audit: type=1400 audit(2000000869.463:46285): avc: denied { ioctl } for pid=16858 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1209.110487][ T29] audit: type=1400 audit(2000000869.583:46286): avc: denied { read write } for pid=19264 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1209.170477][ T29] audit: type=1400 audit(2000000869.583:46287): avc: denied { read write open } for pid=19264 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1209.206000][ T29] audit: type=1400 audit(2000000869.583:46288): avc: denied { ioctl } for pid=19264 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1209.238941][ T29] audit: type=1400 audit(2000000869.653:46289): avc: denied { map_create } for pid=20354 comm="syz.0.3535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1209.478346][ T29] audit: type=1400 audit(2000000869.653:46290): avc: denied { perfmon } for pid=20354 comm="syz.0.3535" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1209.616112][T20362] xt_TCPMSS: Only works on TCP SYN packets [ 1209.745731][ T29] audit: type=1400 audit(2000000869.653:46291): avc: denied { map_create } for pid=20354 comm="syz.0.3535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1210.320202][ T5814] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1210.380514][T20364] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1210.550210][ T5814] usb 6-1: device descriptor read/64, error -71 [ 1211.193942][T20381] ubi: mtd0 is already attached to ubi31 [ 1211.754283][ T5814] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 1211.900538][ T5814] usb 6-1: device descriptor read/64, error -71 [ 1211.950381][T19448] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 1212.030435][ T5814] usb usb6-port1: attempt power cycle [ 1212.050146][T19621] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 1212.100178][T19448] usb 1-1: device descriptor read/64, error -71 [ 1212.232898][T19621] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1212.250356][T19621] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1212.265833][T19621] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1212.278819][T19621] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.341271][T19448] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 1212.475834][ T5814] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1212.511415][ T5814] usb 6-1: device descriptor read/8, error -71 [ 1212.540772][T19448] usb 1-1: device descriptor read/64, error -71 [ 1212.626850][T20391] gfs2: gfs2 mount does not exist [ 1213.480133][T19448] usb usb1-port1: attempt power cycle [ 1213.513291][T19621] usb 5-1: GET_CAPABILITIES returned 0 [ 1213.520116][T19621] usbtmc 5-1:16.0: can't read capabilities [ 1213.540115][ T5814] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1213.742476][ T5814] usb 6-1: device descriptor read/8, error -71 [ 1213.930134][ T5814] usb usb6-port1: unable to enumerate USB device [ 1213.965530][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 1213.965548][ T29] audit: type=1400 audit(2000000874.443:46462): avc: denied { allowed } for pid=20394 comm="syz.1.3546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1213.994043][ T29] audit: type=1400 audit(2000000874.443:46463): avc: denied { create } for pid=20394 comm="syz.1.3546" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1214.588943][ T29] audit: type=1400 audit(2000000874.443:46464): avc: denied { map } for pid=20394 comm="syz.1.3546" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=72679 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1214.614872][ T29] audit: type=1400 audit(2000000874.443:46465): avc: denied { read write } for pid=20394 comm="syz.1.3546" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=72679 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1214.651282][ T29] audit: type=1400 audit(2000000874.493:46466): avc: denied { execmem } for pid=20398 comm="syz.0.3549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1214.691139][ T29] audit: type=1400 audit(2000000874.673:46467): avc: denied { create } for pid=20393 comm="syz.3.3547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1214.966126][T20407] ieee802154 phy1 wpan1: encryption failed: -22 [ 1215.260744][T20409] audit: audit_lost=623 audit_rate_limit=0 audit_backlog_limit=64 [ 1215.274574][ T29] audit: type=1400 audit(2000000874.673:46468): avc: denied { read } for pid=20393 comm="syz.3.3547" dev="nsfs" ino=4026533034 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1215.298351][T20409] audit: out of memory in audit_log_start [ 1215.324829][ T29] audit: type=1400 audit(2000000874.683:46469): avc: denied { open } for pid=20393 comm="syz.3.3547" path="net:[4026533034]" dev="nsfs" ino=4026533034 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1215.682911][ T9] usb 5-1: USB disconnect, device number 93 [ 1215.816015][T19448] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1216.430222][ T5963] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 1216.450099][T19448] usb 6-1: Using ep0 maxpacket: 16 [ 1216.458965][T19448] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1216.473641][T19448] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1216.483331][T19448] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.501081][T19448] usb 6-1: config 0 descriptor?? [ 1216.520544][T19448] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1216.570138][ T5963] usb 1-1: device descriptor read/64, error -71 [ 1217.320344][ T5963] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 1217.473401][ T5963] usb 1-1: device descriptor read/64, error -71 [ 1217.629673][T20425] veth0_to_team: entered promiscuous mode [ 1217.635976][T20425] veth0_to_team: left promiscuous mode [ 1217.890547][ T5963] usb usb1-port1: attempt power cycle [ 1218.004271][ T5814] usb 6-1: USB disconnect, device number 11 [ 1218.250341][ T5963] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 1218.350361][ T5963] usb 1-1: device descriptor read/8, error -71 [ 1218.689009][T20439] gfs2: gfs2 mount does not exist [ 1219.538737][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 1219.538754][ T29] audit: type=1400 audit(2000000880.013:46638): avc: denied { ioctl } for pid=20430 comm="syz.4.3558" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1219.591749][ T9] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 1219.830302][ T29] audit: type=1400 audit(2000000880.213:46639): avc: denied { ioctl } for pid=20430 comm="syz.4.3558" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1219.863069][ T29] audit: type=1400 audit(2000000880.223:46640): avc: denied { read write } for pid=16858 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1219.888604][ T29] audit: type=1400 audit(2000000880.223:46641): avc: denied { open } for pid=16858 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1219.890324][ T9] usb 5-1: device descriptor read/64, error -71 [ 1219.913395][ T29] audit: type=1400 audit(2000000880.223:46642): avc: denied { ioctl } for pid=16858 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1220.030589][ T29] audit: type=1400 audit(2000000880.233:46643): avc: denied { ioctl } for pid=20430 comm="syz.4.3558" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1220.058134][ T29] audit: type=1400 audit(2000000880.253:46644): avc: denied { unmount } for pid=19264 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1220.086794][ T29] audit: type=1400 audit(2000000880.273:46645): avc: denied { read write } for pid=19264 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1220.125275][ T29] audit: type=1400 audit(2000000880.273:46646): avc: denied { open } for pid=19264 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1220.153603][ T29] audit: type=1400 audit(2000000880.273:46647): avc: denied { ioctl } for pid=19264 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1220.280163][ T9] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 1220.470139][ T9] usb 5-1: device descriptor read/64, error -71 [ 1220.591891][ T9] usb usb5-port1: attempt power cycle [ 1220.950115][ T9] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 1221.076821][ T9] usb 5-1: device descriptor read/8, error -71 [ 1221.360067][ T9541] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1221.604337][ T9541] usb 1-1: Using ep0 maxpacket: 16 [ 1221.622092][ T9541] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1221.631129][ T9] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1221.648694][ T9541] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1221.664635][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1221.670453][ T9541] usb 1-1: config 0 has no interface number 0 [ 1221.677841][ T9] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1221.686688][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1221.700264][ T9541] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1221.700722][ T5963] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1221.709927][ T9541] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.727348][ T9] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1222.810541][ T9541] usb 1-1: Product: syz [ 1222.814814][ T9541] usb 1-1: Manufacturer: syz [ 1222.820054][ T9] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1222.833269][ T9541] usb 1-1: SerialNumber: syz [ 1222.839356][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1222.864353][ T9541] usb 1-1: config 0 descriptor?? [ 1222.892069][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1222.901224][ T9] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1222.909650][ T9] usb 5-1: Product: syz [ 1222.921562][ T9541] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 1222.928874][ T9541] uvcvideo 1-1:0.105: No valid video chain found. [ 1222.936542][ T9] usb 5-1: Manufacturer: syz [ 1222.955733][ T9] usb 5-1: SerialNumber: syz [ 1222.968774][ T9] usb 5-1: config 0 descriptor?? [ 1222.981964][ T9] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1222.997971][ T9] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1223.053196][ T5963] usb 6-1: device descriptor read/64, error -71 [ 1223.290498][ T5963] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1223.579849][ T9541] usb 1-1: USB disconnect, device number 93 [ 1223.659951][ T5963] usb 6-1: device descriptor read/64, error -71 [ 1223.771464][ T5963] usb usb6-port1: attempt power cycle [ 1223.827686][ T5814] usb 5-1: USB disconnect, device number 97 [ 1223.848802][ T5814] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1224.124418][T20483] gfs2: gfs2 mount does not exist [ 1224.987849][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 1224.987866][ T29] audit: type=1400 audit(2000000885.463:46809): avc: denied { ioctl } for pid=20469 comm="syz.5.3569" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1225.078808][ T29] audit: type=1400 audit(2000000885.533:46810): avc: denied { read write } for pid=16858 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1225.115287][ T29] audit: type=1400 audit(2000000885.533:46811): avc: denied { open } for pid=16858 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1225.140030][ T5963] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 1225.175637][ T29] audit: type=1400 audit(2000000885.533:46812): avc: denied { ioctl } for pid=16858 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1225.241445][ T5963] usb 6-1: device descriptor read/8, error -71 [ 1225.436250][ T29] audit: type=1400 audit(2000000885.723:46813): avc: denied { ioctl } for pid=20469 comm="syz.5.3569" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1225.463038][ T29] audit: type=1400 audit(2000000885.743:46814): avc: denied { create } for pid=20485 comm="syz.0.3572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1225.979478][ T29] audit: type=1400 audit(2000000885.743:46815): avc: denied { read write } for pid=17927 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1226.005749][ T5963] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1226.090346][ T29] audit: type=1400 audit(2000000885.743:46816): avc: denied { open } for pid=17927 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1226.185660][ T5963] usb 6-1: device descriptor read/8, error -71 [ 1226.210220][ T5814] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1226.311500][ T5963] usb usb6-port1: unable to enumerate USB device [ 1226.390592][ T29] audit: type=1400 audit(2000000885.743:46817): avc: denied { ioctl } for pid=17927 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1226.429890][T20500] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1226.540140][ T5814] usb 5-1: Using ep0 maxpacket: 8 [ 1226.979025][ T5814] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1227.005187][ T5814] usb 5-1: can't read configurations, error -61 [ 1227.185122][ T5814] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1227.420176][ T5814] usb 5-1: Using ep0 maxpacket: 8 [ 1227.562812][ T5814] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1227.675085][T20512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1227.683659][T20512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1227.699012][ T5814] usb 5-1: can't read configurations, error -61 [ 1227.717235][ T5814] usb usb5-port1: attempt power cycle [ 1228.078256][T20519] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3579'. [ 1229.773550][T20529] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3581'. [ 1230.411166][T20532] ubi: mtd0 is already attached to ubi31 [ 1230.773363][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 1230.773381][ T29] audit: type=1400 audit(2000000890.343:46968): avc: denied { execmem } for pid=20526 comm="syz.5.3580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1230.860134][ T29] audit: type=1400 audit(2000000890.653:46969): avc: denied { read } for pid=20526 comm="syz.5.3580" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1230.950061][ T29] audit: type=1400 audit(2000000890.653:46970): avc: denied { open } for pid=20526 comm="syz.5.3580" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1231.119275][ T29] audit: type=1400 audit(2000000890.743:46971): avc: denied { read } for pid=20526 comm="syz.5.3580" dev="nsfs" ino=4026533663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1231.183150][ T29] audit: type=1400 audit(2000000890.743:46972): avc: denied { open } for pid=20526 comm="syz.5.3580" path="net:[4026533663]" dev="nsfs" ino=4026533663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1231.251415][ T29] audit: type=1400 audit(2000000890.743:46973): avc: denied { create } for pid=20526 comm="syz.5.3580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1231.507179][ T5179] udevd[5179]: worker [18014] /devices/platform/dummy_hcd.1/usb2/2-1 is taking a long time [ 1231.527424][ T29] audit: type=1400 audit(2000000890.773:46974): avc: denied { create } for pid=20526 comm="syz.5.3580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1231.574145][T20460] Set syz1 is full, maxelem 65536 reached [ 1231.582013][ T29] audit: type=1400 audit(2000000890.783:46975): avc: denied { write } for pid=20526 comm="syz.5.3580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1231.643623][ T29] audit: type=1400 audit(2000000890.873:46976): avc: denied { write } for pid=20526 comm="syz.5.3580" name="media2" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1232.218861][ T29] audit: type=1400 audit(2000000890.873:46977): avc: denied { open } for pid=20526 comm="syz.5.3580" path="/dev/media2" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1232.974126][ T5814] libceph: connect (1)[c::]:6789 error -101 [ 1232.980676][ T5814] libceph: mon0 (1)[c::]:6789 connect error [ 1233.001521][T20549] ceph: No mds server is up or the cluster is laggy [ 1233.104958][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1233.495667][T20549] sctp: [Deprecated]: syz.0.3588 (pid 20549) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1233.495667][T20549] Use struct sctp_sack_info instead [ 1233.844444][ T9541] IPVS: starting estimator thread 0... [ 1234.063336][T20566] IPVS: using max 55 ests per chain, 132000 per kthread [ 1234.542705][ T9] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 1234.780075][ T9] usb 5-1: device descriptor read/64, error -71 [ 1235.835701][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 1235.835720][ T29] audit: type=1400 audit(2000000895.203:47132): avc: denied { execmem } for pid=20575 comm="syz.1.3594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1237.531008][ T29] audit: type=1400 audit(2000000895.303:47133): avc: denied { read write } for pid=19264 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1237.780785][ T9] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 1237.853744][ T29] audit: type=1400 audit(2000000895.303:47134): avc: denied { open } for pid=19264 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1237.897925][ T29] audit: type=1400 audit(2000000895.303:47135): avc: denied { ioctl } for pid=19264 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1238.219890][T20590] ubi: mtd0 is already attached to ubi31 [ 1238.884280][ T29] audit: type=1400 audit(2000000895.333:47136): avc: denied { create } for pid=20582 comm="syz.5.3584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1238.905379][ T29] audit: type=1400 audit(2000000895.333:47137): avc: denied { execmem } for pid=20582 comm="syz.5.3584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1238.925717][ T29] audit: type=1400 audit(2000000895.423:47138): avc: denied { read } for pid=20575 comm="syz.1.3594" dev="nsfs" ino=4026532850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1238.959651][ T29] audit: type=1400 audit(2000000895.423:47139): avc: denied { open } for pid=20575 comm="syz.1.3594" path="net:[4026532850]" dev="nsfs" ino=4026532850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1238.997007][ T29] audit: type=1400 audit(2000000895.423:47140): avc: denied { create } for pid=20575 comm="syz.1.3594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1239.050980][T20599] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1240.415471][T20616] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3602'. [ 1241.098537][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 1241.098554][ T29] audit: type=1400 audit(2000000901.573:47266): avc: denied { create } for pid=20619 comm="syz.1.3604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1241.208419][T20614] sctp: [Deprecated]: syz.0.3603 (pid 20614) Use of int in max_burst socket option. [ 1241.208419][T20614] Use struct sctp_assoc_value instead [ 1241.226737][ T29] audit: type=1400 audit(2000000901.603:47267): avc: denied { setopt } for pid=20619 comm="syz.1.3604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1241.265265][T20624] binder: 20619:20624 ioctl c0306201 200000000040 returned -11 [ 1241.285011][T20606] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1241.291054][ T29] audit: type=1400 audit(2000000901.653:47268): avc: denied { read append } for pid=20605 comm="syz.3.3600" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1241.318381][T20606] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1241.329443][T20606] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1241.359790][T20606] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1241.366038][T20606] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1241.382198][ T29] audit: type=1400 audit(2000000901.653:47269): avc: denied { open } for pid=20605 comm="syz.3.3600" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1241.456163][ T29] audit: type=1400 audit(2000000901.683:47270): avc: denied { create } for pid=20612 comm="syz.0.3603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1241.477199][ T29] audit: type=1400 audit(2000000901.683:47271): avc: denied { getopt } for pid=20612 comm="syz.0.3603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1241.500107][ T29] audit: type=1400 audit(2000000901.733:47272): avc: denied { mounton } for pid=20626 comm="syz.4.3605" path="/350/file0" dev="tmpfs" ino=1864 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1241.523491][ T29] audit: type=1400 audit(2000000901.733:47273): avc: denied { mount } for pid=20626 comm="syz.4.3605" name="/" dev="autofs" ino=75312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1241.546787][ T29] audit: type=1400 audit(2000000901.733:47274): avc: denied { read write } for pid=20626 comm="syz.4.3605" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1241.575875][ T29] audit: type=1400 audit(2000000901.733:47275): avc: denied { open } for pid=20626 comm="syz.4.3605" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1241.651604][ T9] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1241.865455][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1242.040517][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1242.056292][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1242.065515][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.115822][ T9] usb 5-1: config 0 descriptor?? [ 1242.144424][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1243.349401][T19211] Bluetooth: hci3: command 0x0c1a tx timeout [ 1243.355539][T19211] Bluetooth: hci0: command 0x0c1a tx timeout [ 1243.411013][ T9] usb 5-1: USB disconnect, device number 103 [ 1243.420096][T19211] Bluetooth: hci1: command 0x0c1a tx timeout [ 1243.420121][ T5811] Bluetooth: hci4: command 0x0c1a tx timeout [ 1243.426089][T19211] Bluetooth: hci5: command 0x0c1a tx timeout [ 1244.180133][T19448] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1244.690105][T19448] usb 6-1: device descriptor read/64, error -71 [ 1245.551664][T20656] ubi: mtd0 is already attached to ubi31 [ 1246.103859][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 1246.103875][ T29] audit: type=1400 audit(2000000906.583:47429): avc: denied { ioctl } for pid=20643 comm="syz.5.3609" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1246.250224][ T29] audit: type=1400 audit(2000000906.623:47430): avc: denied { ioctl } for pid=20643 comm="syz.5.3609" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1246.276166][T19448] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1246.324356][ T29] audit: type=1400 audit(2000000906.623:47431): avc: denied { map_create } for pid=20658 comm="syz.4.3614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1246.416581][ T29] audit: type=1400 audit(2000000906.623:47432): avc: denied { map_read map_write } for pid=20658 comm="syz.4.3614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1246.440911][T19448] usb 6-1: device descriptor read/64, error -71 [ 1246.467531][T20663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3616'. [ 1246.495436][ T29] audit: type=1400 audit(2000000906.623:47433): avc: denied { prog_load } for pid=20658 comm="syz.4.3614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1246.538714][ T29] audit: type=1400 audit(2000000906.623:47434): avc: denied { bpf } for pid=20658 comm="syz.4.3614" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1246.570251][T19448] usb usb6-port1: attempt power cycle [ 1247.323779][ T29] audit: type=1400 audit(2000000906.633:47435): avc: denied { create } for pid=20658 comm="syz.4.3614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1247.423366][ T29] audit: type=1400 audit(2000000906.633:47436): avc: denied { ioctl } for pid=20658 comm="syz.4.3614" path="socket:[74437]" dev="sockfs" ino=74437 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1247.793334][T20678] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1247.794719][T20681] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1247.964346][T20677] binder: 20669:20677 ioctl c0306201 200000000040 returned -11 [ 1249.729455][T20699] ubi: mtd0 is already attached to ubi31 [ 1250.781418][T20707] ubi: mtd0 is already attached to ubi31 [ 1251.233642][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 1251.233662][ T29] audit: type=1400 audit(2000000910.803:47616): avc: denied { execmem } for pid=20705 comm="syz.1.3629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1251.350308][ T29] audit: type=1400 audit(2000000911.083:47617): avc: denied { read } for pid=20705 comm="syz.1.3629" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1251.440716][ T29] audit: type=1400 audit(2000000911.083:47618): avc: denied { open } for pid=20705 comm="syz.1.3629" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1251.565714][ T29] audit: type=1400 audit(2000000911.233:47619): avc: denied { read } for pid=20705 comm="syz.1.3629" dev="nsfs" ino=4026532850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1251.644089][ T29] audit: type=1400 audit(2000000911.233:47620): avc: denied { open } for pid=20705 comm="syz.1.3629" path="net:[4026532850]" dev="nsfs" ino=4026532850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1251.730132][T18154] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1251.852139][ T29] audit: type=1400 audit(2000000911.233:47621): avc: denied { create } for pid=20705 comm="syz.1.3629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1252.028514][ T29] audit: type=1400 audit(2000000911.243:47622): avc: denied { create } for pid=20705 comm="syz.1.3629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1252.207829][ T29] audit: type=1400 audit(2000000911.253:47623): avc: denied { write } for pid=20705 comm="syz.1.3629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1252.411531][ T29] audit: type=1400 audit(2000000911.253:47624): avc: denied { write } for pid=20705 comm="syz.1.3629" name="media2" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1252.570110][ T29] audit: type=1400 audit(2000000911.253:47625): avc: denied { open } for pid=20705 comm="syz.1.3629" path="/dev/media2" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1252.690098][T18154] usb 1-1: Using ep0 maxpacket: 16 [ 1252.721951][T18154] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1252.745147][T18154] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1252.762550][T18154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.051330][T20720] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1253.080123][T18154] usb 1-1: config 0 descriptor?? [ 1253.101714][T18154] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1255.041553][T18154] usb 1-1: USB disconnect, device number 94 [ 1255.062616][T20739] xt_TCPMSS: Only works on TCP SYN packets [ 1255.227730][T20740] binder: 20734:20740 ioctl c0306201 200000000040 returned -11 [ 1255.737917][T20750] ubi: mtd0 is already attached to ubi31 [ 1256.280831][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 1256.280846][ T29] audit: type=1400 audit(2000000916.763:47789): avc: denied { unmount } for pid=16858 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1256.359481][ T29] audit: type=1400 audit(2000000916.783:47790): avc: denied { read write } for pid=16858 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1256.434883][ T29] audit: type=1400 audit(2000000916.783:47791): avc: denied { open } for pid=16858 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1256.505505][ T29] audit: type=1400 audit(2000000916.783:47792): avc: denied { ioctl } for pid=16858 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1256.560053][ T29] audit: type=1400 audit(2000000916.953:47793): avc: denied { map_create } for pid=20752 comm="syz.0.3642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1256.633031][ T29] audit: type=1400 audit(2000000916.953:47794): avc: denied { map_read map_write } for pid=20752 comm="syz.0.3642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1256.703791][ T29] audit: type=1400 audit(2000000916.973:47795): avc: denied { prog_load } for pid=20752 comm="syz.0.3642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1256.916931][T20763] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1257.033615][ T29] audit: type=1400 audit(2000000916.973:47796): avc: denied { bpf } for pid=20752 comm="syz.0.3642" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1257.057024][ T29] audit: type=1400 audit(2000000916.983:47797): avc: denied { create } for pid=20752 comm="syz.0.3642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1257.222003][T20764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20764 comm=syz.5.3643 [ 1258.312259][ T29] audit: type=1400 audit(2000000917.013:47798): avc: denied { ioctl } for pid=20752 comm="syz.0.3642" path="socket:[75884]" dev="sockfs" ino=75884 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1258.720611][T20780] Bluetooth: MGMT ver 1.23 [ 1259.152306][T20788] xt_TCPMSS: Only works on TCP SYN packets [ 1259.340388][ T30] INFO: task kworker/1:1:14380 blocked for more than 143 seconds. [ 1259.353609][ T30] Tainted: G L syzkaller #0 [ 1259.406124][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1259.456412][ T30] task:kworker/1:1 state:D stack:22392 pid:14380 tgid:14380 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 1259.517130][ T30] Workqueue: usb_hub_wq hub_event [ 1259.549862][ T30] Call Trace: [ 1259.571847][ T30] [ 1259.592336][ T30] __schedule+0xfee/0x6120 [ 1259.618854][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1259.656161][ T30] ? __pfx___schedule+0x10/0x10 [ 1259.685237][ T30] ? find_held_lock+0x2b/0x80 [ 1259.689958][ T30] ? schedule+0x2bf/0x390 [ 1259.708946][ T30] schedule+0xdd/0x390 [ 1259.734234][ T30] schedule_timeout+0x1b2/0x280 [ 1259.761305][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1259.789988][ T30] ? mark_held_locks+0x40/0x70 [ 1259.810062][T17723] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1259.821231][ T30] __wait_for_common+0x2e7/0x4c0 [ 1259.838126][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1259.865287][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 1259.894582][ T30] ? __pfx_device_del+0x10/0x10 [ 1259.901827][ T30] ? kobject_put+0xb9/0x640 [ 1259.907566][ T30] i2c_del_adapter+0x62d/0x820 [ 1259.913293][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 1259.918672][ T30] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1259.929116][ T30] ? em28xx_unregister_media_device+0xa2/0xe0 [ 1259.935629][ T30] ? kfree+0x1f6/0x6b0 [ 1259.939832][ T30] ? media_device_unregister+0x446/0x610 [ 1259.955725][ T30] em28xx_i2c_unregister+0x47/0x70 [ 1259.975724][ T30] em28xx_release_resources+0xe0/0x1b0 [ 1259.990142][T17723] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1260.008028][ T30] em28xx_usb_disconnect.cold+0x17d/0x253 [ 1260.015040][T17723] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1260.026990][ T30] usb_unbind_interface+0x1dd/0x9e0 [ 1260.032579][ T30] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 1260.043298][T17723] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1260.055744][ T30] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1260.070028][ T30] device_remove+0x12a/0x180 [ 1260.082271][T17723] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.100620][ T30] device_release_driver_internal+0x42e/0x600 [ 1260.116174][ T30] bus_remove_device+0x22f/0x440 [ 1260.127546][T20797] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1260.146719][ T30] device_del+0x376/0x9b0 [ 1260.155698][T20797] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1260.168566][ T30] ? __pfx_device_del+0x10/0x10 [ 1260.180127][ T30] ? kobject_put+0xb9/0x640 [ 1260.187743][T17723] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1260.205637][ T30] usb_disable_device+0x367/0x810 [ 1260.220081][ T30] usb_disconnect+0x2e2/0x9a0 [ 1260.241310][ T30] hub_event+0x1d0c/0x4af0 [ 1260.266331][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1260.288726][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 1260.308074][ T30] ? __pfx_hub_event+0x10/0x10 [ 1260.332153][ T30] ? debug_object_deactivate+0x2e4/0x3b0 [ 1260.364450][ T30] ? rcu_is_watching+0x12/0xc0 [ 1260.394325][ T30] process_one_work+0x9d7/0x1920 [ 1260.434579][ T30] ? __pfx_process_one_work+0x10/0x10 [ 1260.464237][ T30] ? __pfx_hub_event+0x10/0x10 [ 1260.470116][ T30] worker_thread+0x5da/0xe40 [ 1260.479162][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1260.490111][ T30] ? kthread+0x13a/0x450 [ 1260.537832][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1260.621634][ T30] kthread+0x370/0x450 [ 1260.636748][ T30] ? __pfx_kthread+0x10/0x10 [ 1260.654536][ T30] ret_from_fork+0x754/0xd80 [ 1260.659124][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1260.691603][ T30] ? __switch_to+0x7b4/0x1120 [ 1260.715199][ T30] ? __pfx_kthread+0x10/0x10 [ 1260.734252][ T30] ret_from_fork_asm+0x1a/0x30 [ 1260.739082][ T30] [ 1260.753104][ T30] [ 1260.753104][ T30] Showing all locks held in the system: [ 1260.782347][T19448] usb 6-1: USB disconnect, device number 19 [ 1260.821382][ T30] 1 lock held by khungtaskd/30: [ 1260.838583][ T30] #0: ffffffff8e7e7620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1260.890090][ T30] 2 locks held by getty/5567: [ 1260.894801][ T30] #0: ffff888033ed20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1260.926205][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1260.962063][ T30] 6 locks held by kworker/1:1/14380: [ 1260.967435][ T30] #0: ffff888020ec5548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1260.978548][ T30] #1: ffffc9001b63fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1260.990164][ T30] #2: ffff88802b371198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 1260.999262][ T30] #3: ffff888032f15198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 1261.008956][ T30] #4: ffff88802ccbe160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xaa/0x600 [ 1261.020677][ T30] #5: ffff88804ba81ba8 (&dev->lock#6){+.+.}-{4:4}, at: em28xx_release_resources+0x71/0x1b0 [ 1261.031106][ T30] 6 locks held by kworker/0:3/17723: [ 1261.036425][ T30] #0: ffff888020ec5548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1261.056429][ T30] #1: ffffc90003ec7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1261.068569][ T30] #2: ffff88802b308198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 1261.078509][ T30] #3: ffff88802b358518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2bd2/0x4af0 [ 1261.090860][ T30] #4: ffff88802af79f68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2bfb/0x4af0 [ 1261.100677][ T30] #5: ffffffff8fbb14f0 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x1a5/0x1c60 [ 1261.111270][ T30] 4 locks held by udevd/18014: [ 1261.117086][ T30] #0: ffff88802a783668 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 1261.126016][ T30] #1: ffff88805b72f088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 1261.130059][T17723] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1261.135469][ T30] #2: ffff88805c7ef968 (kn->active#26){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 1261.152735][ T30] #3: ffff888032f15198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1261.162164][ T30] 2 locks held by dhcpcd/20803: [ 1261.167072][ T30] #0: ffff888050ff1348 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 1261.177711][ T30] #1: ffffffff8e7f3238 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1261.188014][ T30] 2 locks held by dhcpcd/20806: [ 1261.192902][ T30] #0: ffff8880397e2260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 1261.202712][ T30] #1: ffffffff8e7f3238 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1261.212802][ T30] [ 1261.215118][ T30] ============================================= [ 1261.215118][ T30] [ 1261.225017][ T30] NMI backtrace for cpu 1 [ 1261.225035][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1261.225058][ T30] Tainted: [L]=SOFTLOCKUP [ 1261.225064][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1261.225074][ T30] Call Trace: [ 1261.225081][ T30] [ 1261.225087][ T30] dump_stack_lvl+0x100/0x190 [ 1261.225118][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1261.225136][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1261.225165][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1261.225195][ T30] sys_info+0x141/0x190 [ 1261.225218][ T30] watchdog+0xd25/0x1050 [ 1261.225248][ T30] ? __pfx_watchdog+0x10/0x10 [ 1261.225273][ T30] ? __kthread_parkme+0x18c/0x230 [ 1261.225302][ T30] ? kthread+0x13a/0x450 [ 1261.225318][ T30] ? __pfx_watchdog+0x10/0x10 [ 1261.225339][ T30] kthread+0x370/0x450 [ 1261.225354][ T30] ? __pfx_kthread+0x10/0x10 [ 1261.225371][ T30] ret_from_fork+0x754/0xd80 [ 1261.225390][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1261.225408][ T30] ? __switch_to+0x7b4/0x1120 [ 1261.225435][ T30] ? __pfx_kthread+0x10/0x10 [ 1261.225453][ T30] ret_from_fork_asm+0x1a/0x30 [ 1261.225485][ T30] [ 1261.225492][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1261.310059][T17723] usb 1-1: Using ep0 maxpacket: 16 [ 1261.310693][ C0] NMI backtrace for cpu 0 [ 1261.310707][ C0] CPU: 0 UID: 0 PID: 17723 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1261.310726][ C0] Tainted: [L]=SOFTLOCKUP [ 1261.310731][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1261.310740][ C0] Workqueue: usb_hub_wq hub_event [ 1261.310770][ C0] RIP: 0010:io_serial_out+0x8f/0xb0 [ 1261.310796][ C0] Code: 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1c 66 03 5d 40 44 89 e8 89 da ee <5b> 5d 41 5c 41 5d e9 56 2d 19 06 e8 e1 ac fb fc eb a0 e8 6a ad fb [ 1261.310809][ C0] RSP: 0018:ffffc90003ec7240 EFLAGS: 00000002 [ 1261.310820][ C0] RAX: 000000000000005b RBX: 00000000000003f8 RCX: 0000000000000000 [ 1261.310829][ C0] RDX: 00000000000003f8 RSI: ffffffff85798e55 RDI: ffffffff9b4a0a40 [ 1261.310838][ C0] RBP: ffffffff9b4a0a00 R08: 0000000000000001 R09: 000000000000001f [ 1261.310847][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1261.310856][ C0] R13: 000000000000005b R14: 0000000000000010 R15: ffffffff85798df0 [ 1261.310865][ C0] FS: 0000000000000000(0000) GS:ffff888124345000(0000) knlGS:0000000000000000 [ 1261.310879][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1261.310888][ C0] CR2: 0000555feafc8168 CR3: 00000000375ee000 CR4: 00000000003526f0 [ 1261.310897][ C0] Call Trace: [ 1261.310902][ C0] [ 1261.310909][ C0] serial8250_console_write+0xde8/0x1900 [ 1261.310930][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1261.310948][ C0] ? lock_acquire+0x1cf/0x380 [ 1261.310972][ C0] console_flush_one_record+0x790/0xe50 [ 1261.310991][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 1261.311010][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1261.311029][ C0] console_unlock+0x103/0x260 [ 1261.311044][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1261.311060][ C0] ? lock_acquire+0x100/0x380 [ 1261.311082][ C0] vprintk_emit+0x407/0x6b0 [ 1261.311099][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1261.311115][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1261.311136][ C0] dev_vprintk_emit+0x394/0x3e0 [ 1261.311153][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 1261.311173][ C0] dev_printk_emit+0xd2/0x10d [ 1261.311188][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 1261.311203][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1261.311218][ C0] ? __pfx_debug_object_free+0x10/0x10 [ 1261.311235][ C0] ? __try_to_del_timer_sync+0x107/0x160 [ 1261.311257][ C0] __dev_printk+0xcb/0x100 [ 1261.311273][ C0] _dev_warn+0xef/0x127 [ 1261.311288][ C0] ? __pfx__dev_warn+0x10/0x10 [ 1261.311304][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1261.311321][ C0] ? usb_hcd_reset_endpoint+0xaf/0x240 [ 1261.311341][ C0] hub_port_init+0x16f6/0x37f0 [ 1261.311358][ C0] hub_event+0x2f27/0x4af0 [ 1261.311380][ C0] ? __pfx_hub_event+0x10/0x10 [ 1261.311393][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1261.311408][ C0] ? sched_core_enqueue+0x1a0/0xc00 [ 1261.311428][ C0] ? rcu_is_watching+0x12/0xc0 [ 1261.311446][ C0] process_one_work+0x9d7/0x1920 [ 1261.311464][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1261.311481][ C0] ? __pfx_hub_event+0x10/0x10 [ 1261.311495][ C0] worker_thread+0x5da/0xe40 [ 1261.311512][ C0] ? kthread+0x13a/0x450 [ 1261.311523][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1261.311536][ C0] kthread+0x370/0x450 [ 1261.311547][ C0] ? __pfx_kthread+0x10/0x10 [ 1261.311561][ C0] ret_from_fork+0x754/0xd80 [ 1261.311575][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1261.311588][ C0] ? rcu_is_watching+0x12/0xc0 [ 1261.311602][ C0] ? __switch_to+0x7b4/0x1120 [ 1261.311619][ C0] ? __pfx_kthread+0x10/0x10 [ 1261.311632][ C0] ret_from_fork_asm+0x1a/0x30 [ 1261.311652][ C0] [ 1261.312829][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1261.312845][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1261.312867][ T30] Tainted: [L]=SOFTLOCKUP [ 1261.312873][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1261.312882][ T30] Call Trace: [ 1261.312888][ T30] [ 1261.312894][ T30] dump_stack_lvl+0x100/0x190 [ 1261.312922][ T30] vpanic+0x552/0x970 [ 1261.312939][ T30] ? __pfx_vpanic+0x10/0x10 [ 1261.312955][ T30] ? rcu_is_watching+0x12/0xc0 [ 1261.312976][ T30] panic+0xd1/0xe0 [ 1261.312991][ T30] ? __pfx_panic+0x10/0x10 [ 1261.313009][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1261.313039][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1261.313061][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1261.313082][ T30] ? watchdog.cold+0x198/0x1ca [ 1261.313099][ T30] ? watchdog+0xd35/0x1050 [ 1261.313122][ T30] watchdog.cold+0x1a9/0x1ca [ 1261.313145][ T30] ? __pfx_watchdog+0x10/0x10 [ 1261.313166][ T30] ? __kthread_parkme+0x18c/0x230 [ 1261.313190][ T30] ? kthread+0x13a/0x450 [ 1261.313203][ T30] ? __pfx_watchdog+0x10/0x10 [ 1261.313222][ T30] kthread+0x370/0x450 [ 1261.313236][ T30] ? __pfx_kthread+0x10/0x10 [ 1261.313252][ T30] ret_from_fork+0x754/0xd80 [ 1261.313269][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1261.313286][ T30] ? __switch_to+0x7b4/0x1120 [ 1261.313305][ T30] ? __pfx_kthread+0x10/0x10 [ 1261.313321][ T30] ret_from_fork_asm+0x1a/0x30 [ 1261.313350][ T30] [ 1261.315852][ T30] Kernel Offset: disabled