last executing test programs: 15m54.762211409s ago: executing program 4 (id=1571): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1) 15m53.481838307s ago: executing program 4 (id=1574): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`\xcd4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000006) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000580)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x100000000000000) 15m50.032614779s ago: executing program 4 (id=1580): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), 0x0}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x49, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0xa, &(0x7f0000000380)=ANY=[@ANYBLOB="18200000", @ANYRES32=0x1, @ANYBLOB="000000000100000018000000e0c30000000000214f0000000080851000100500000085200000050008007fa7000001000000186700000a00000000000000070000", @ANYRES8=r2], &(0x7f0000000400)='GPL\x00', 0x7b2, 0x9f, &(0x7f0000000880)=""/159, 0x41100, 0x75, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r2], &(0x7f0000000700)=[{0x5, 0x2, 0xc, 0x1}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0xfffffffd, 0x2}], 0x10, 0xe47}, 0x94) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000001a00)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r8, r7, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000240)={0x10, 0x1, r9}) 15m49.102318714s ago: executing program 4 (id=1582): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, 0x0) r3 = syz_open_procfs(0x0, 0x0) writev(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB='b \x00\x00\x00\x00\x00\x00'], 0x8) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x18, 0x0, 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x7, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) keyctl$session_to_parent(0x12) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000000280)="a672", 0x2, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x200006}, 0x1c) shutdown(r6, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/194, 0xc2, 0x1, 0x0}, &(0x7f0000000240)=0x40) socket$nl_route(0x10, 0x3, 0x0) 15m48.02627986s ago: executing program 4 (id=1584): connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) socket$inet_smc(0x2b, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15m46.274935667s ago: executing program 4 (id=1587): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10ffff}, 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000340)='.\x00', 0xa50003d1) close(0x3) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r6, 0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)={0x68, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x1ff, @media='udp\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x14) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x0, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0x2, 0x12d, 0x4, 0x3, 0x0, 0x0, 0xfffffffd, 0x4, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x9, 0x4, 0x8000000, 0xdffffffa]}) 15m30.826569335s ago: executing program 32 (id=1587): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10ffff}, 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000340)='.\x00', 0xa50003d1) close(0x3) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r6, 0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)={0x68, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x1ff, @media='udp\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x14) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x0, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0x2, 0x12d, 0x4, 0x3, 0x0, 0x0, 0xfffffffd, 0x4, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x9, 0x4, 0x8000000, 0xdffffffa]}) 10.904191157s ago: executing program 3 (id=3815): socket$inet6(0xa, 0x400000000001, 0xff7ff67b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(&(0x7f0000000400)=ANY=[], 0xb0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c854}, 0x20004000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r5, &(0x7f0000001500)={0x2020}, 0x2020) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000200)={0x2, 0x0, 0x98, &(0x7f0000000140)={0x406, 0x7, 0x4}}) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bind$bt_rfcomm(r6, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r6, 0x40087602, &(0x7f0000000240)=0x8000000010) 9.821030919s ago: executing program 3 (id=3820): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r1 = semget$private(0x0, 0x4000000009, 0x64a) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) semop(r1, &(0x7f0000000200), 0x53) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000100)={0x38, 0x3, 0x21, 0x5, 0x80000000, 0x7f, 0x1, 0x6, 0x8, 0x67}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) r6 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000040)={0x5, 0x102, 0x6, {0x800, 0xb, 0x8, 0x1000}}) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002180)=ANY=[@ANYBLOB], 0x1fe0}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r7, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8}) 8.641987797s ago: executing program 1 (id=3822): r0 = creat(0x0, 0x109) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 8.506488692s ago: executing program 1 (id=3824): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f00000011c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.445997259s ago: executing program 5 (id=3826): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x101000, 0x107) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fchdir(0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) 6.403025257s ago: executing program 0 (id=3830): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r0, &(0x7f0000003600)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000002600)}], 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001a40)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x3, 0x100008b}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001b80)={{0xffffffffffffffff, &(0x7f0000000300)='\x95\x99\x1d\xb6N\x91\\\x8b\x00\x00\x00_lis\x8d\x0f\xd0\x1f\xe9\xc1/\xf9\xe6\xb4\x00', 0x2000, &(0x7f0000001c00)={@align=0x5, {0x53, 0xc3, 0x100, 0x7fffffffffffffff}}, 0xef95e4c, &(0x7f0000000340)={@_ha_fsid}, 0x0}, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) msgget$private(0x0, 0x4d2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000200)={0xc}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000040002, 0x0) ptrace(0x8, 0x0) getpid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000001980)={[{@index_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x20000023896) 6.393671511s ago: executing program 3 (id=3831): openat(0xffffffffffffff9c, &(0x7f0000019300)='./file0\x00', 0x189940, 0x70) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) 6.252603526s ago: executing program 3 (id=3832): syz_open_dev$vbi(0x0, 0x2, 0x2) socket(0x1d, 0x0, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0), &(0x7f0000000240)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r3, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x40, 0x9}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001880)={r3, &(0x7f0000000880)="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"}, 0x20) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) openat$nci(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 5.725741889s ago: executing program 5 (id=3833): r0 = socket(0x1e, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x8, 0x7f02ae, 0x348, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@remote, @private2, [], [], 'veth0_to_team\x00', 'veth0_macvtap\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x17, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044001}, 0x0) 5.378205546s ago: executing program 0 (id=3834): r0 = creat(0x0, 0x109) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.300173109s ago: executing program 1 (id=3836): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) 5.018071911s ago: executing program 0 (id=3837): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000980)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 4.581211872s ago: executing program 3 (id=3838): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty=0xe0000001}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b26", "5e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce", "6a9f3a451dd7eb4523c02c2a4a00f81073727f3ac9f91e284b975a32", {"8f865412904b133eebafc6eb170fb006", "21144ab13a642475fc21552dce5cda9c"}}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0), 0x0) 4.473213366s ago: executing program 1 (id=3839): r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r3, 0x4b47, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) shmctl$IPC_INFO(0x0, 0x3, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x800, 0x3, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) 4.409115284s ago: executing program 5 (id=3840): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b05, &(0x7f0000000200)={'wlan1\x00'}) syz_emit_ethernet(0x11b6, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xc3, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1114}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) socket$inet6(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x145) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 4.332481235s ago: executing program 0 (id=3841): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x3, 0x100008b}, 0x0) accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x800) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000200)={0xc}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000040002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 4.330354084s ago: executing program 2 (id=3842): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r1 = semget$private(0x0, 0x4000000009, 0x64a) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) semop(r1, &(0x7f0000000200), 0x53) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000100)={0x38, 0x3, 0x21, 0x5, 0x80000000, 0x7f, 0x1, 0x6, 0x8, 0x67}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) r6 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000040)={0x5, 0x102, 0x6, {0x800, 0xb, 0x8, 0x1000}}) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002180)=ANY=[@ANYBLOB], 0x1fe0}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r7, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8}) 3.688190114s ago: executing program 0 (id=3843): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x8, 0xd}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001a00010000000000000000000a0000070a000f000000000014000100fc0010000000000000000000000000011400"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = semget$private(0x0, 0x3, 0x8) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000000)=[0xff7d]) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80100, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0x1, 0xb}, {0x5, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) socket$inet6_udp(0xa, 0x2, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x20040000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x43, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r7}, 0x38) 3.450762301s ago: executing program 1 (id=3844): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000180)={0x0, r0}, &(0x7f00000001c0)={0x3, 0x2, 0x800, 0x34, 0xfaa, 0xa052}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0xfffffffffffffffc, 0x12) unshare(0x2c020400) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40a21, 0x23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x201}, @IFLA_BR_MAX_AGE={0x8, 0x3, 0x9}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) 2.469467148s ago: executing program 2 (id=3845): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="96", 0x1}], 0x1}}], 0x3, 0x0) shutdown(r0, 0x1) 2.319994528s ago: executing program 2 (id=3846): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 1.427777357s ago: executing program 2 (id=3847): syz_emit_ethernet(0x7a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbb86dd61fc010100442f00fe8000004000000000000000000000bffe8000000000000000000000000000aa0c2088be0000000180000800000086ec080088be000000031c0885100100000000007b40080022ebe90000022302234902000000000000030009"], 0x0) socket(0x2b, 0x1, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x2d, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x7fff, 0x0, 0x0, 0x41100, 0x3}, 0x94) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 711.987936ms ago: executing program 3 (id=3848): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB], 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x64000, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r1, &(0x7f00000050c0), 0x0, 0x2, 0x0) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 593.27754ms ago: executing program 2 (id=3849): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) 572.92225ms ago: executing program 5 (id=3850): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f0000000200)=[{0x0}], 0x1}, 0x4) 502.645528ms ago: executing program 1 (id=3851): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b05, &(0x7f0000000200)={'wlan1\x00'}) syz_emit_ethernet(0x11b6, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xc3, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1114}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) socket$inet6(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x145) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 348.952773ms ago: executing program 2 (id=3852): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x8, 0xd}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001a00010000000000000000000a0000070a000f000000000014000100fc0010000000000000000000000000011400"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = semget$private(0x0, 0x3, 0x8) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000000)=[0xff7d]) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80100, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0x1, 0xb}, {0x5, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) socket$inet6_udp(0xa, 0x2, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x20040000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x43, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r6}, 0x38) 342.306112ms ago: executing program 0 (id=3853): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB], 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x64000, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r1, &(0x7f00000050c0), 0x0, 0x2, 0x0) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) 143.393341ms ago: executing program 5 (id=3854): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x101000, 0x107) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fchdir(0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) 0s ago: executing program 5 (id=3855): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r1 = semget$private(0x0, 0x4000000009, 0x64a) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) semop(r1, &(0x7f0000000200), 0x53) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000100)={0x38, 0x3, 0x21, 0x5, 0x80000000, 0x7f, 0x1, 0x6, 0x8, 0x67}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) r6 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000040)={0x5, 0x102, 0x6, {0x800, 0xb, 0x8, 0x1000}}) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002180)=ANY=[@ANYBLOB], 0x1fe0}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r7, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8}) kernel console output (not intermixed with test programs): 309685][T20207] overlayfs: overlapping lowerdir path [ 1545.836236][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.911780][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.617855][ T12] hsr_slave_0: left promiscuous mode [ 1546.644721][ T12] hsr_slave_1: left promiscuous mode [ 1546.650771][T20219] kvm: apic: phys broadcast and lowest prio [ 1546.679907][ T12] virt_wifi0: left promiscuous mode [ 1546.696276][ T12] veth1_macvtap: left promiscuous mode [ 1546.703077][ T12] veth0_macvtap: left promiscuous mode [ 1546.708796][ T12] veth1_vlan: left promiscuous mode [ 1546.714226][ T12] veth0_vlan: left promiscuous mode [ 1547.263491][T20231] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1547.326492][ T29] audit: type=1400 audit(1784857077.091:3476): avc: denied { mounton } for pid=20228 comm="syz.2.3228" path="/54/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1549.481291][T20250] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1549.709447][T20254] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1551.903933][T20274] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1552.297101][T20280] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1552.453967][T20277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1553.380178][ T29] audit: type=1400 audit(1784857083.211:3477): avc: denied { create } for pid=20286 comm="syz.2.3245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1554.623843][T20004] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1554.638076][ T29] audit: type=1400 audit(1784857084.471:3478): avc: denied { write } for pid=20265 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1555.041612][T20004] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1555.068550][T20004] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1555.099081][ T29] audit: type=1400 audit(1784857084.931:3479): avc: denied { write } for pid=20304 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1555.127498][T20004] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1555.157950][T20004] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1555.188647][T20004] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1555.236649][T20004] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1555.258316][T20004] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1555.543343][T20004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1555.599507][T20004] 8021q: adding VLAN 0 to HW filter on device team0 [ 1555.621209][T10950] bridge0: port 1(bridge_slave_0) entered blocking state [ 1555.628321][T10950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1555.651956][T10950] bridge0: port 2(bridge_slave_1) entered blocking state [ 1555.659074][T10950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1556.573956][ T29] audit: type=1400 audit(1784857086.401:3480): avc: denied { write } for pid=20319 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1556.812934][T20346] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1557.019524][ T29] audit: type=1400 audit(1784857086.851:3481): avc: denied { write } for pid=20350 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1560.809033][T20004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1561.950757][T20004] veth0_vlan: entered promiscuous mode [ 1561.974029][T20004] veth1_vlan: entered promiscuous mode [ 1562.191031][T20389] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3259'. [ 1563.150616][T20391] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1563.654660][T20004] veth0_macvtap: entered promiscuous mode [ 1563.665442][T20004] veth1_macvtap: entered promiscuous mode [ 1563.686854][T20004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1563.698425][T20004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1563.862373][ T5624] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1563.872668][ T5624] Bluetooth: hci1: Injecting HCI hardware error event [ 1563.881120][ T5624] Bluetooth: hci1: hardware error 0x00 [ 1563.910509][ T1150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1563.936107][ T1150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1563.957584][ T29] audit: type=1400 audit(1784857093.791:3482): avc: denied { read write } for pid=20397 comm="syz.0.3261" name="sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1564.012532][ T29] audit: type=1400 audit(1784857093.791:3483): avc: denied { open } for pid=20397 comm="syz.0.3261" path="/dev/sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1564.021740][T20402] program syz.0.3261 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1564.374614][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1564.408958][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1564.456285][ T29] audit: type=1400 audit(1784857094.281:3484): avc: denied { write } for pid=20365 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1564.670823][T16413] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 1564.695261][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1564.729407][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1564.732453][ T29] audit: type=1400 audit(1784857094.561:3485): avc: denied { write } for pid=20412 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1564.871887][T16413] usb 3-1: not running at top speed; connect to a high speed hub [ 1565.026723][T16413] usb 3-1: config 1 interface 0 altsetting 49 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1565.071813][ T6659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1565.090845][T16413] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1565.125477][ T6659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1565.183844][T20419] syz2: rxe_newlink: already configured on ipvlan0 [ 1566.035392][T16413] usb 3-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 1566.070430][T16413] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.420195][T16413] usb 3-1: Product: syz [ 1566.421051][ T5624] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1566.445516][T16413] usb 3-1: Manufacturer: syz [ 1566.470793][T16413] usb 3-1: SerialNumber: syz [ 1566.524058][ T29] audit: type=1400 audit(1784857096.361:3486): avc: denied { read } for pid=20421 comm="syz.5.3266" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1566.553764][ T29] audit: type=1400 audit(1784857096.361:3487): avc: denied { open } for pid=20421 comm="syz.5.3266" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1566.610352][ T29] audit: type=1400 audit(1784857096.431:3488): avc: denied { ioctl } for pid=20421 comm="syz.5.3266" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1566.687459][ T29] audit: type=1400 audit(1784857096.431:3489): avc: denied { set_context_mgr } for pid=20421 comm="syz.5.3266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1566.756343][ T29] audit: type=1400 audit(1784857096.451:3490): avc: denied { map } for pid=20421 comm="syz.5.3266" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1566.838404][T16413] usbhid 3-1:1.0: can't add hid device: -71 [ 1566.842141][ T29] audit: type=1400 audit(1784857096.491:3491): avc: denied { call } for pid=20421 comm="syz.5.3266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1566.864772][T16413] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1566.908758][T16413] usb 3-1: USB disconnect, device number 12 [ 1568.737316][T20447] syz2: rxe_newlink: already configured on ipvlan0 [ 1570.045583][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1570.045600][ T29] audit: type=1400 audit(1784857099.881:3493): avc: denied { write } for pid=20449 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1571.072450][ T5624] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1571.081540][ T5624] Bluetooth: hci3: Injecting HCI hardware error event [ 1571.363029][T19479] Bluetooth: hci3: hardware error 0x00 [ 1571.450758][T16413] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1571.480051][ T29] audit: type=1400 audit(1784857101.311:3494): avc: denied { mount } for pid=20463 comm="syz.3.3274" name="/" dev="configfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1571.573929][ T29] audit: type=1326 audit(1784857101.401:3495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20463 comm="syz.3.3274" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf9e19de99 code=0x0 [ 1571.620419][T16413] usb 1-1: Using ep0 maxpacket: 16 [ 1571.761431][ T29] audit: type=1400 audit(1784857101.471:3496): avc: denied { map } for pid=20463 comm="syz.3.3274" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=85629 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1571.853384][T16413] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1571.898424][T16413] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1572.269222][ T29] audit: type=1400 audit(1784857101.471:3497): avc: denied { read write } for pid=20463 comm="syz.3.3274" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=85629 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1572.325840][T16413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.352068][T16413] usb 1-1: config 0 descriptor?? [ 1572.491636][ T29] audit: type=1400 audit(1784857102.301:3498): avc: denied { write } for pid=20470 comm="syz.2.3277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1572.608577][ T29] audit: type=1400 audit(1784857102.301:3499): avc: denied { nlmsg_write } for pid=20470 comm="syz.2.3277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1573.131001][T12003] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1573.301368][T12003] usb 3-1: Using ep0 maxpacket: 16 [ 1573.329988][T12003] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1573.381117][T12003] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1573.423994][T12003] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.494287][T12003] usb 3-1: config 0 descriptor?? [ 1573.609588][T20468] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1573.630649][T19479] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1573.640818][T16413] usb 1-1: can't set config #0, error -71 [ 1573.676009][T16413] usb 1-1: USB disconnect, device number 24 [ 1573.737381][ T29] audit: type=1400 audit(1784857103.551:3500): avc: denied { read write } for pid=19134 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1573.866301][T20489] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1573.926130][ T29] audit: type=1400 audit(1784857103.561:3501): avc: denied { open } for pid=19134 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1574.090561][ T29] audit: type=1400 audit(1784857103.561:3502): avc: denied { ioctl } for pid=19134 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1575.217365][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 1575.217400][ T29] audit: type=1400 audit(1784857105.051:3526): avc: denied { connect } for pid=20495 comm="syz.0.3282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1576.653901][ T29] audit: type=1400 audit(1784857106.491:3527): avc: denied { create } for pid=20505 comm="syz.0.3285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1576.696057][ T29] audit: type=1400 audit(1784857106.521:3528): avc: denied { read } for pid=20501 comm="syz.3.3284" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1576.779595][ T29] audit: type=1400 audit(1784857106.521:3529): avc: denied { open } for pid=20501 comm="syz.3.3284" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1576.809875][T20506] tipc: Enabling of bearer rejected, failed to enable media [ 1576.849293][ T29] audit: type=1400 audit(1784857106.591:3530): avc: denied { unmount } for pid=13066 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1576.881602][ T29] audit: type=1400 audit(1784857106.591:3531): avc: denied { unmount } for pid=13066 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1576.998787][T20506] syzkaller0: entered promiscuous mode [ 1577.017365][T20506] syzkaller0: entered allmulticast mode [ 1577.025880][ T29] audit: type=1400 audit(1784857106.591:3532): avc: denied { write } for pid=20505 comm="syz.0.3285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1577.053304][T12003] usbhid 3-1:0.0: can't add hid device: -71 [ 1577.066192][T12003] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1577.106840][T12003] usb 3-1: USB disconnect, device number 13 [ 1577.113171][T20503] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1577.140472][ T29] audit: type=1400 audit(1784857106.601:3533): avc: denied { read } for pid=20505 comm="syz.0.3285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1577.207556][ T29] audit: type=1400 audit(1784857106.701:3534): avc: denied { ioctl } for pid=20505 comm="syz.0.3285" path="socket:[85769]" dev="sockfs" ino=85769 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1577.306313][ T29] audit: type=1400 audit(1784857106.741:3535): avc: denied { prog_load } for pid=20508 comm="syz.5.3286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1580.398849][T20534] tipc: Enabling of bearer rejected, failed to enable media [ 1580.622708][T20535] syzkaller0: entered promiscuous mode [ 1580.638477][T20535] syzkaller0: entered allmulticast mode [ 1580.929434][T20553] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1580.947086][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 1580.947116][ T29] audit: type=1400 audit(1784857110.751:3561): avc: denied { create } for pid=20540 comm="syz.2.3293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1581.676060][ T29] audit: type=1400 audit(1784857110.761:3562): avc: denied { write } for pid=20540 comm="syz.2.3293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1581.700656][ T29] audit: type=1400 audit(1784857111.511:3563): avc: denied { read write } for pid=20554 comm="syz.0.3297" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1581.724604][ T29] audit: type=1400 audit(1784857111.511:3564): avc: denied { open } for pid=20554 comm="syz.0.3297" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1581.748185][ T29] audit: type=1400 audit(1784857111.511:3565): avc: denied { ioctl } for pid=20554 comm="syz.0.3297" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1581.910490][T19464] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 1582.106243][T19464] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 1582.125181][T19464] usb 1-1: config 0 has no interface number 0 [ 1582.147979][T19464] usb 1-1: config 0 interface 41 has no altsetting 0 [ 1582.176316][T19464] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1582.202891][T19464] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.234593][T19464] usb 1-1: Product: syz [ 1582.240336][ T29] audit: type=1400 audit(1784857112.071:3566): avc: denied { getopt } for pid=20558 comm="syz.5.3298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1582.269056][T19464] usb 1-1: Manufacturer: syz [ 1582.281800][T19464] usb 1-1: SerialNumber: syz [ 1582.306565][T19464] usb 1-1: config 0 descriptor?? [ 1582.426083][ T29] audit: type=1400 audit(1784857112.261:3567): avc: denied { setopt } for pid=20558 comm="syz.5.3298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1582.455563][ T29] audit: type=1400 audit(1784857112.281:3568): avc: denied { name_connect } for pid=20558 comm="syz.5.3298" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1582.568953][ T29] audit: type=1400 audit(1784857112.401:3569): avc: denied { create } for pid=20558 comm="syz.5.3298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1582.859946][ T29] audit: type=1400 audit(1784857112.691:3570): avc: denied { read write } for pid=20565 comm="syz.1.3299" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1583.146616][T19464] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1584.450155][T19464] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1584.479220][T19464] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1584.532349][T19464] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 1584.557192][T19464] usb 1-1: USB disconnect, device number 25 [ 1586.524655][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1586.524672][ T29] audit: type=1400 audit(1784857116.361:3575): avc: denied { write } for pid=20587 comm="syz.3.3306" name="protocols" dev="proc" ino=4026533083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1586.669573][ T29] audit: type=1400 audit(1784857116.501:3576): avc: denied { read } for pid=20590 comm="syz.5.3307" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1586.713574][T20591] binder: BINDER_SET_CONTEXT_MGR already set [ 1586.733854][T20591] binder: 20590:20591 ioctl 4018620d 200000000300 returned -16 [ 1586.753252][ T29] audit: type=1400 audit(1784857116.501:3577): avc: denied { open } for pid=20590 comm="syz.5.3307" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1586.854215][ T29] audit: type=1400 audit(1784857116.541:3578): avc: denied { ioctl } for pid=20590 comm="syz.5.3307" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1587.036854][ T29] audit: type=1400 audit(1784857116.541:3579): avc: denied { set_context_mgr } for pid=20590 comm="syz.5.3307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1587.553182][ T29] audit: type=1400 audit(1784857116.831:3580): avc: denied { create } for pid=20597 comm="syz.1.3310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1587.573046][ T29] audit: type=1400 audit(1784857116.841:3581): avc: denied { connect } for pid=20597 comm="syz.1.3310" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1587.594334][ T29] audit: type=1400 audit(1784857116.851:3582): avc: denied { create } for pid=20597 comm="syz.1.3310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1587.614539][ T29] audit: type=1400 audit(1784857116.851:3583): avc: denied { connect } for pid=20597 comm="syz.1.3310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1587.635491][ T29] audit: type=1400 audit(1784857116.851:3584): avc: denied { write } for pid=20597 comm="syz.1.3310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1588.670902][T19464] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1589.520449][T19464] usb 1-1: Using ep0 maxpacket: 16 [ 1589.683525][T19464] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1590.184903][T19464] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1590.194365][T19464] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.254620][T19464] usb 1-1: config 0 descriptor?? [ 1590.520505][T12003] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1590.799958][T12003] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1590.833960][T12003] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.848078][T12003] usb 3-1: Product: syz [ 1590.853000][T12003] usb 3-1: Manufacturer: syz [ 1590.857888][T12003] usb 3-1: SerialNumber: syz [ 1590.893477][T20641] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3321'. [ 1590.916678][T20641] netlink: 'syz.3.3321': attribute type 7 has an invalid length. [ 1591.000678][T20641] netlink: 'syz.3.3321': attribute type 8 has an invalid length. [ 1591.076692][T20641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3321'. [ 1591.674149][T12003] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1591.680689][T20641] bond0: entered promiscuous mode [ 1591.686245][T12003] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1591.742920][T20641] bond_slave_0: entered promiscuous mode [ 1591.761205][T20641] bond_slave_1: entered promiscuous mode [ 1591.856455][T20641] bond0: left promiscuous mode [ 1591.952350][T20641] bond_slave_0: left promiscuous mode [ 1591.970801][T20641] bond_slave_1: left promiscuous mode [ 1592.601372][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 1592.656822][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 1592.656840][ T29] audit: type=1400 audit(1784857122.221:3596): avc: denied { read write } for pid=20651 comm="syz.1.3324" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1592.687264][T12003] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 1592.699720][T12003] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1592.741855][T12003] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1592.764756][T12003] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 1592.778110][ T29] audit: type=1400 audit(1784857122.221:3597): avc: denied { open } for pid=20651 comm="syz.1.3324" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1592.784259][T12003] usb 3-1: USB disconnect, device number 14 [ 1593.114433][T19464] usb 1-1: can't set config #0, error -71 [ 1593.127537][T19464] usb 1-1: USB disconnect, device number 26 [ 1593.166199][ T29] audit: type=1400 audit(1784857123.001:3598): avc: denied { watch watch_reads } for pid=20659 comm="syz.3.3325" path="/35" dev="tmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1594.020778][ T29] audit: type=1400 audit(1784857123.801:3599): avc: denied { name_bind } for pid=20669 comm="syz.0.3328" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1594.392552][ T29] audit: type=1400 audit(1784857123.801:3600): avc: denied { node_bind } for pid=20669 comm="syz.0.3328" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1594.779484][T20688] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1595.692451][ T29] audit: type=1400 audit(1784857125.531:3601): avc: denied { read write } for pid=20675 comm="syz.5.3329" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1595.720568][T19464] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1596.138599][ T29] audit: type=1400 audit(1784857125.591:3602): avc: denied { open } for pid=20675 comm="syz.5.3329" path="/dev/uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1597.185561][ T29] audit: type=1400 audit(1784857126.651:3603): avc: denied { kexec_image_load } for pid=20696 comm="syz.1.3334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1597.206819][ T29] audit: type=1400 audit(1784857126.691:3604): avc: denied { listen } for pid=20696 comm="syz.1.3334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1597.243257][T19464] usb 4-1: config 0 has no interfaces? [ 1597.265361][T19464] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1597.308193][T19464] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.388656][T19464] usb 4-1: config 0 descriptor?? [ 1597.415475][ T29] audit: type=1400 audit(1784857127.251:3605): avc: denied { write } for pid=20705 comm="syz.1.3337" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1597.720451][T16418] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1597.964918][T20704] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1598.004629][ T10] usb 4-1: USB disconnect, device number 22 [ 1598.090471][T16418] usb 1-1: Using ep0 maxpacket: 16 [ 1598.109655][T16418] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1598.156233][T16418] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1598.194036][T16418] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.297810][T16418] usb 1-1: config 0 descriptor?? [ 1599.299022][ T29] audit: type=1400 audit(1784857129.131:3606): avc: denied { write } for pid=20726 comm="syz.1.3342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1600.410756][T19464] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1600.563163][T16418] usb 1-1: can't set config #0, error -71 [ 1600.570838][T16418] usb 1-1: USB disconnect, device number 27 [ 1601.143829][T19464] usb 4-1: Using ep0 maxpacket: 16 [ 1601.172385][T19464] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1601.185889][T19464] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1601.195386][T19464] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.331261][T19464] usb 4-1: config 0 descriptor?? [ 1602.730915][ T29] audit: type=1326 audit(1784857132.561:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20754 comm="syz.2.3349" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb1cbf9de99 code=0x0 [ 1605.480457][ T29] audit: type=1400 audit(1784857135.181:3608): avc: denied { write } for pid=20775 comm="syz.2.3355" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1606.673226][T19464] usbhid 4-1:0.0: can't add hid device: -32 [ 1606.679269][T19464] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1607.058232][T20783] tipc: Enabling of bearer rejected, failed to enable media [ 1607.085388][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.091956][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.220078][T20783] syzkaller0: entered promiscuous mode [ 1607.252538][T20783] syzkaller0: entered allmulticast mode [ 1607.253704][T20788] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3358'. [ 1607.311617][T20788] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3358'. [ 1607.367868][T20788] team0: entered promiscuous mode [ 1607.387401][T20788] team_slave_0: entered promiscuous mode [ 1607.405500][T19464] usb 4-1: USB disconnect, device number 23 [ 1607.413050][T20788] team_slave_1: entered promiscuous mode [ 1607.449860][T20788] bond0: entered promiscuous mode [ 1607.492283][T20788] bond_slave_0: entered promiscuous mode [ 1607.547122][T20788] bond_slave_1: entered promiscuous mode [ 1607.566514][T20774] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1607.602339][T20788] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1608.138010][T20798] Invalid ELF header magic: != ELF [ 1608.666279][ T29] audit: type=1400 audit(1784857137.971:3609): avc: denied { module_load } for pid=20795 comm="syz.1.3360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1608.736399][ T29] audit: type=1400 audit(1784857138.081:3610): avc: denied { bind } for pid=20795 comm="syz.1.3360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1609.148482][ T5624] Bluetooth: hci2: command 0x0406 tx timeout [ 1609.810442][T19464] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1610.018610][T19464] usb 2-1: Using ep0 maxpacket: 16 [ 1610.034105][T20817] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1610.063643][T19464] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1610.202480][T19464] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1610.246346][T19464] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.312559][T19464] usb 2-1: config 0 descriptor?? [ 1610.499394][T19479] Bluetooth: hci2: unexpected event for opcode 0x0004 [ 1614.110663][T19464] usbhid 2-1:0.0: can't add hid device: -71 [ 1614.136933][T19464] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1614.182249][T19464] usb 2-1: USB disconnect, device number 22 [ 1614.415933][ T29] audit: type=1400 audit(1784857144.241:3611): avc: denied { map } for pid=20838 comm="syz.1.3371" path="socket:[88798]" dev="sockfs" ino=88798 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1614.501058][T19479] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1614.513652][T19479] Bluetooth: hci2: Injecting HCI hardware error event [ 1614.522067][T19479] Bluetooth: hci2: hardware error 0x00 [ 1616.672997][T19479] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1617.860833][T19464] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 1618.015459][ T29] audit: type=1400 audit(1784857147.801:3612): avc: denied { setopt } for pid=20868 comm="syz.0.3380" lport=43634 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1618.073664][ T29] audit: type=1400 audit(1784857147.801:3613): avc: denied { getopt } for pid=20868 comm="syz.0.3380" lport=43634 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1618.233239][T19464] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1618.242335][T19464] usb 6-1: config 0 has no interface number 0 [ 1618.248513][T19464] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1618.257768][T19464] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1618.267088][T19464] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.275185][T19464] usb 6-1: Product: syz [ 1618.279395][T19464] usb 6-1: Manufacturer: syz [ 1618.284094][T19464] usb 6-1: SerialNumber: syz [ 1618.291510][T19464] usb 6-1: config 0 descriptor?? [ 1618.909772][ T29] audit: type=1400 audit(1784857148.741:3614): avc: denied { setopt } for pid=20876 comm="syz.2.3383" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1618.933927][ T29] audit: type=1400 audit(1784857148.771:3615): avc: denied { write } for pid=20876 comm="syz.2.3383" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1619.083785][ T29] audit: type=1400 audit(1784857148.921:3616): avc: denied { read } for pid=20881 comm="syz.1.3384" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1619.138815][ T29] audit: type=1400 audit(1784857148.921:3617): avc: denied { open } for pid=20881 comm="syz.1.3384" path="/dev/rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1619.173504][T19464] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1619.209214][ T29] audit: type=1400 audit(1784857149.041:3618): avc: denied { name_bind } for pid=20883 comm="syz.1.3385" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1619.232146][T16418] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1619.285277][T20887] fuse: Bad value for 'fd' [ 1619.392367][T16418] usb 4-1: config 0 has no interfaces? [ 1619.398119][T16418] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1619.412241][T16418] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1619.435201][T16418] usb 4-1: config 0 descriptor?? [ 1619.655574][T20891] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1620.487009][T16413] usb 4-1: USB disconnect, device number 24 [ 1620.837182][T20898] Invalid ELF header magic: != ELF [ 1621.770825][T19464] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1621.782008][T19464] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1621.792101][T19464] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 1621.804034][T19464] usb 6-1: USB disconnect, device number 8 [ 1624.526707][T20926] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1625.293166][T20928] fuse: Bad value for 'fd' [ 1627.870071][ T29] audit: type=1400 audit(1784857157.701:3619): avc: denied { bind } for pid=20940 comm="syz.3.3401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1628.175962][ T29] audit: type=1400 audit(1784857157.701:3620): avc: denied { name_bind } for pid=20940 comm="syz.3.3401" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1628.406258][ T29] audit: type=1400 audit(1784857157.701:3621): avc: denied { node_bind } for pid=20940 comm="syz.3.3401" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1629.522632][T20961] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3406'. [ 1629.544041][T20961] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3406'. [ 1629.593189][T20961] team0: entered promiscuous mode [ 1629.614128][T20961] team_slave_0: entered promiscuous mode [ 1629.640513][T20961] team_slave_1: entered promiscuous mode [ 1629.675801][T20961] team0: left promiscuous mode [ 1629.692436][T20961] team_slave_0: left promiscuous mode [ 1629.721489][T20961] team_slave_1: left promiscuous mode [ 1629.926246][T20965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3408'. [ 1629.953962][T20965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3408'. [ 1630.111758][T20965] team0: entered promiscuous mode [ 1630.142179][T20965] team_slave_0: entered promiscuous mode [ 1630.150999][T20965] team_slave_1: entered promiscuous mode [ 1630.267364][ T29] audit: type=1400 audit(1784857160.061:3622): avc: denied { connect } for pid=20963 comm="syz.5.3407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1630.288107][T19479] Bluetooth: hci0: link tx timeout [ 1630.296840][T19479] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 1630.317856][T19479] Bluetooth: hci0: link tx timeout [ 1630.324129][T19479] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1630.626924][ T29] audit: type=1400 audit(1784857160.071:3623): avc: denied { write } for pid=20963 comm="syz.5.3407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1630.653053][T20965] bond0: entered promiscuous mode [ 1630.680206][T20965] bond_slave_0: entered promiscuous mode [ 1630.690632][T20965] bond_slave_1: entered promiscuous mode [ 1630.708814][T20965] debugfs: 'hsr1' already exists in 'hsr' [ 1630.727784][T20965] Cannot create hsr debugfs directory [ 1630.845257][T20965] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1631.530223][ T5624] Bluetooth: hci0: link tx timeout [ 1631.535488][ T5624] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 1631.545916][ T5624] Bluetooth: hci0: link tx timeout [ 1631.553218][ T5624] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1632.496745][ T5624] Bluetooth: hci0: command 0x0406 tx timeout [ 1634.571023][ T29] audit: type=1400 audit(1784857164.401:3624): avc: denied { mount } for pid=21007 comm="syz.0.3421" name="/" dev="ramfs" ino=90237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1634.896519][ T29] audit: type=1400 audit(1784857164.401:3625): avc: denied { mounton } for pid=21007 comm="syz.0.3421" path="/file0" dev="ramfs" ino=90237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1636.069906][ T5624] Bluetooth: hci0: command 0x0406 tx timeout [ 1636.311799][ T29] audit: type=1400 audit(1784857166.141:3626): avc: denied { bind } for pid=21022 comm="syz.2.3425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1638.202868][T21043] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1638.522196][T21051] Invalid ELF header magic: != ELF [ 1639.031723][ T29] audit: type=1400 audit(1784857168.481:3627): avc: denied { setattr } for pid=21045 comm="syz.5.3433" path="socket:[90429]" dev="sockfs" ino=90429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1639.571413][ T29] audit: type=1400 audit(1784857169.411:3628): avc: denied { write } for pid=21055 comm="syz.3.3436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1639.739171][T21063] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3438'. [ 1639.749605][T21063] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3438'. [ 1639.900599][T19464] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1640.150447][T19464] usb 6-1: Using ep0 maxpacket: 16 [ 1640.160075][T19464] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1640.180645][T19464] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1640.700467][T19464] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.737803][T19464] usb 6-1: config 0 descriptor?? [ 1641.060525][T16413] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 1641.844709][T16413] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 1641.889187][T16413] usb 1-1: config 0 has no interface number 0 [ 1641.909630][T16413] usb 1-1: config 0 interface 41 has no altsetting 0 [ 1641.937908][T16413] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1642.024984][T16413] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.035224][T16413] usb 1-1: Product: syz [ 1642.040611][T16413] usb 1-1: Manufacturer: syz [ 1642.045298][T16413] usb 1-1: SerialNumber: syz [ 1642.136907][T16413] usb 1-1: config 0 descriptor?? [ 1642.216529][ T29] audit: type=1400 audit(1784857172.051:3629): avc: denied { accept } for pid=21083 comm="syz.3.3446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1642.242517][ T29] audit: type=1400 audit(1784857172.081:3630): avc: denied { write } for pid=21083 comm="syz.3.3446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1642.660569][ T29] audit: type=1400 audit(1784857172.081:3631): avc: denied { read } for pid=21083 comm="syz.3.3446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1642.862587][ T29] audit: type=1400 audit(1784857172.691:3632): avc: denied { read write } for pid=18741 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1642.918232][ T29] audit: type=1400 audit(1784857172.691:3633): avc: denied { open } for pid=18741 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1642.944699][ T29] audit: type=1400 audit(1784857172.691:3634): avc: denied { ioctl } for pid=18741 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1642.980998][ T29] audit: type=1400 audit(1784857172.751:3635): avc: denied { ioctl } for pid=21071 comm="syz.0.3441" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1643.009624][ T29] audit: type=1400 audit(1784857172.781:3636): avc: denied { read } for pid=21089 comm="syz.1.3447" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1643.035657][ T29] audit: type=1400 audit(1784857172.781:3637): avc: denied { open } for pid=21089 comm="syz.1.3447" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1643.068453][T21092] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1643.158958][ T29] audit: type=1400 audit(1784857172.901:3638): avc: denied { read write } for pid=21089 comm="syz.1.3447" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1643.330031][T16413] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1644.436786][T19464] usbhid 6-1:0.0: can't add hid device: -71 [ 1644.469814][T19464] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1644.522708][T19464] usb 6-1: USB disconnect, device number 9 [ 1644.733885][T21113] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2617188248 (167500047872 ns) > initial count (33766357632 ns). Using initial count to start timer. [ 1644.979923][T21116] syz2: rxe_newlink: already configured on ipvlan0 [ 1645.066305][T16413] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1645.792116][T16413] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1645.833856][T16413] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 1646.236610][T16413] usb 1-1: USB disconnect, device number 28 [ 1646.680393][T21124] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3457'. [ 1646.739803][T21127] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21127 comm=syz.5.3457 [ 1647.145424][T21132] Invalid ELF header magic: != ELF [ 1647.281484][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 1647.281515][ T29] audit: type=1400 audit(1784857176.981:3674): avc: denied { sys_module } for pid=21128 comm="syz.3.3459" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1647.571092][T21127] overlayfs: missing 'lowerdir' [ 1647.585294][ T29] audit: type=1400 audit(1784857176.981:3675): avc: denied { module_load } for pid=21128 comm="syz.3.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1647.795661][ T29] audit: type=1400 audit(1784857177.401:3676): avc: denied { create } for pid=21122 comm="syz.5.3457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1648.303984][ T29] audit: type=1400 audit(1784857177.651:3677): avc: denied { read write } for pid=21135 comm="syz.2.3460" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1648.328233][ T29] audit: type=1400 audit(1784857177.651:3678): avc: denied { open } for pid=21135 comm="syz.2.3460" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1648.430443][ T29] audit: type=1400 audit(1784857178.231:3679): avc: denied { unmount } for pid=20004 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1648.552213][ T29] audit: type=1400 audit(1784857178.261:3680): avc: denied { unmount } for pid=20004 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1648.750430][ T29] audit: type=1400 audit(1784857178.551:3681): avc: denied { create } for pid=21139 comm="syz.3.3461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1649.969399][ T29] audit: type=1400 audit(1784857178.801:3682): avc: denied { kexec_image_load } for pid=21139 comm="syz.3.3461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1650.412333][ T29] audit: type=1400 audit(1784857178.821:3683): avc: denied { create } for pid=21139 comm="syz.3.3461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1650.711459][T16418] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1651.366344][T16418] usb 4-1: config 0 has no interfaces? [ 1651.388625][T16418] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1651.494612][T16418] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.578252][T16418] usb 4-1: config 0 descriptor?? [ 1652.411524][T16413] usb 4-1: USB disconnect, device number 25 [ 1653.547821][T21172] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1653.677845][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 1653.677857][ T29] audit: type=1400 audit(1784857183.511:3699): avc: denied { read } for pid=21177 comm="syz.3.3472" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1653.854003][ T29] audit: type=1400 audit(1784857183.511:3700): avc: denied { open } for pid=21177 comm="syz.3.3472" path="/dev/rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1654.942613][ T29] audit: type=1400 audit(1784857183.551:3701): avc: denied { map_create } for pid=21177 comm="syz.3.3472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1656.116407][ T29] audit: type=1400 audit(1784857185.951:3702): avc: denied { write } for pid=21195 comm="syz.1.3476" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1656.381690][ T29] audit: type=1400 audit(1784857186.041:3703): avc: denied { create } for pid=21195 comm="syz.1.3476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1656.435616][ T29] audit: type=1400 audit(1784857186.041:3704): avc: denied { bind } for pid=21195 comm="syz.1.3476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1656.533140][ T29] audit: type=1400 audit(1784857186.171:3705): avc: denied { setopt } for pid=21195 comm="syz.1.3476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1656.620222][ T29] audit: type=1400 audit(1784857186.181:3706): avc: denied { accept } for pid=21195 comm="syz.1.3476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1657.660101][ T29] audit: type=1400 audit(1784857186.191:3707): avc: denied { write } for pid=21195 comm="syz.1.3476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1657.681096][ T29] audit: type=1400 audit(1784857186.211:3708): avc: denied { name_connect } for pid=21197 comm="syz.0.3477" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1658.398829][T21216] tipc: Started in network mode [ 1658.410074][T21216] tipc: Node identity 2007ff, cluster identity 4711 [ 1658.416797][T21216] tipc: Node number set to 2099199 [ 1658.705255][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1658.705275][ T29] audit: type=1400 audit(1784857188.541:3714): avc: denied { module_request } for pid=21220 comm="syz.1.3485" kmod="bpf_preload" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1658.779388][ T29] audit: type=1400 audit(1784857188.611:3715): avc: denied { mount } for pid=21220 comm="syz.1.3485" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1658.877764][ T29] audit: type=1400 audit(1784857188.641:3716): avc: denied { write } for pid=21226 comm="syz.5.3486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1658.923230][ T29] audit: type=1400 audit(1784857188.751:3717): avc: denied { create } for pid=21234 comm="syz.5.3489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1658.995010][ T29] audit: type=1400 audit(1784857188.781:3718): avc: denied { connect } for pid=21234 comm="syz.5.3489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1659.058772][ T29] audit: type=1400 audit(1784857188.791:3719): avc: denied { write } for pid=21234 comm="syz.5.3489" path="socket:[90967]" dev="sockfs" ino=90967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1659.218092][T21243] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3490'. [ 1659.444595][T21246] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21246 comm=syz.0.3490 [ 1659.738698][T21246] overlayfs: missing 'lowerdir' [ 1659.855632][ T29] audit: type=1400 audit(1784857189.691:3720): avc: denied { create } for pid=21203 comm="syz.2.3478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1659.925267][ T29] audit: type=1400 audit(1784857189.711:3721): avc: denied { write } for pid=21203 comm="syz.2.3478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1659.952139][ T29] audit: type=1400 audit(1784857189.711:3722): avc: denied { nlmsg_write } for pid=21203 comm="syz.2.3478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1660.739662][ T29] audit: type=1400 audit(1784857190.571:3723): avc: denied { create } for pid=21251 comm="syz.5.3493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1661.006868][T21256] Invalid ELF header magic: != ELF [ 1662.003154][T21272] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3501'. [ 1662.664242][T20657] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1662.856882][T20657] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1662.862138][T21290] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3508'. [ 1662.925400][T20657] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1662.963385][T20657] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1663.007464][T20657] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1663.092098][T20657] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1663.127828][T20657] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1663.149714][T20657] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1663.183214][T21293] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21293 comm=syz.5.3508 [ 1663.189881][T20657] usb 1-1: Product: syz [ 1663.230198][T20657] usb 1-1: Manufacturer: syz [ 1663.282482][T20657] cdc_wdm 1-1:1.0: skipping garbage [ 1663.307349][T20657] cdc_wdm 1-1:1.0: skipping garbage [ 1663.322666][T21290] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1663.338417][T21290] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1663.394430][T20657] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1663.402996][T20657] cdc_wdm 1-1:1.0: Unknown control protocol [ 1663.593380][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1663.595394][ T10] usb 1-1: USB disconnect, device number 29 [ 1663.600176][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1663.611979][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1664.032383][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 1664.032400][ T29] audit: type=1400 audit(1784857193.871:3735): avc: denied { ioctl } for pid=21299 comm="syz.2.3510" path="socket:[91105]" dev="sockfs" ino=91105 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1664.282583][T21302] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1664.746961][T21313] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2617188248 (167500047872 ns) > initial count (33766357632 ns). Using initial count to start timer. [ 1665.178658][T21310] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1666.305908][ T29] audit: type=1400 audit(1784857196.131:3736): avc: denied { read write } for pid=21330 comm="syz.2.3519" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1666.794902][ T29] audit: type=1400 audit(1784857196.131:3737): avc: denied { open } for pid=21330 comm="syz.2.3519" path="/dev/uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1666.820131][ T29] audit: type=1400 audit(1784857196.611:3738): avc: denied { unmount } for pid=19477 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1668.181176][ T5615] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1668.243632][T21336] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1668.422012][ T5615] usb 4-1: Using ep0 maxpacket: 8 [ 1668.482394][ T5615] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1668.504300][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.518167][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.551160][ T5615] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1668.762222][ T29] audit: type=1400 audit(1784857198.501:3739): avc: denied { create } for pid=21354 comm="syz.5.3525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1668.784489][ T5615] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1668.863922][ T5615] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 1669.197796][ T5615] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1669.313078][ T5615] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1669.442419][ T5615] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1669.465826][ T5615] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.509950][ T5615] usb 4-1: Product: syz [ 1669.543737][ T5615] usb 4-1: Manufacturer: syz [ 1669.568928][ T5615] usb 4-1: SerialNumber: syz [ 1669.630113][ T5615] usb 4-1: config 0 descriptor?? [ 1669.666015][T21346] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1670.021941][T21367] Invalid ELF header magic: != ELF [ 1670.883783][T21373] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2617188248 (167500047872 ns) > initial count (33766357632 ns). Using initial count to start timer. [ 1670.990445][T16418] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 1671.162115][T16418] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 1671.180570][T16418] usb 1-1: config 0 has no interface number 0 [ 1671.198137][T16418] usb 1-1: config 0 interface 41 has no altsetting 0 [ 1671.222972][T16418] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1671.244388][T16418] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.267117][T16418] usb 1-1: Product: syz [ 1671.287091][T16418] usb 1-1: Manufacturer: syz [ 1671.353369][T16418] usb 1-1: SerialNumber: syz [ 1671.442691][T20657] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1671.488566][T16418] usb 1-1: config 0 descriptor?? [ 1671.650439][T20657] usb 3-1: Using ep0 maxpacket: 16 [ 1671.676884][T20657] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1671.742345][T20657] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1671.796272][T20657] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.842691][ T5615] rc_core: IR keymap rc-snapstream-firefly not found [ 1671.857019][T20657] usb 3-1: config 0 descriptor?? [ 1671.913365][ T5615] Registered IR keymap rc-empty [ 1671.984376][ T5615] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1672.039819][ T5615] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 1672.127149][ T29] audit: type=1400 audit(1784857201.961:3740): avc: denied { read } for pid=4962 comm="acpid" name="event4" dev="devtmpfs" ino=3009 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1672.159491][ T5615] input: syz syz mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 1672.184940][T21382] fuse: Unknown parameter '' [ 1672.220528][ T29] audit: type=1400 audit(1784857201.961:3741): avc: denied { open } for pid=4962 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3009 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1672.269605][ T5615] usb 4-1: USB disconnect, device number 26 [ 1672.275612][ C0] ati_remote 4-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 1672.303269][ T29] audit: type=1400 audit(1784857201.991:3742): avc: denied { ioctl } for pid=4962 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3009 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1672.361461][ T4962] ati_remote 4-1:0.0: ati_remote_open: usb_submit_urb failed! [ 1672.369210][ T29] audit: type=1400 audit(1784857202.021:3743): avc: denied { mounton } for pid=21377 comm="syz.2.3532" path="/117/file0" dev="tmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1672.413534][T16418] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1673.948708][T16418] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1674.081152][T16418] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1674.172951][T16418] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 1674.203192][T16418] usb 1-1: USB disconnect, device number 30 [ 1674.271155][ T29] audit: type=1400 audit(1784857204.111:3744): avc: denied { getopt } for pid=21403 comm="syz.1.3539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1674.755137][T21398] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1676.404087][T21425] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1677.247427][T20657] usbhid 3-1:0.0: can't add hid device: -32 [ 1677.296595][T20657] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1678.023471][T16413] usb 3-1: USB disconnect, device number 15 [ 1679.387486][T21448] Invalid ELF header magic: != ELF [ 1679.834890][ T29] audit: type=1400 audit(1784857209.381:3745): avc: denied { bind } for pid=21445 comm="syz.1.3550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1680.203719][T20657] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1680.310215][T21456] Invalid ELF header magic: != ELF [ 1680.720058][T19464] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1680.882411][T20657] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1680.892342][T20657] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.909132][T20657] usb 1-1: config 0 descriptor?? [ 1680.922314][T20657] cp210x 1-1:0.0: cp210x converter detected [ 1681.422259][T19464] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1681.431068][T19464] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1681.441471][T19464] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1681.451076][T19464] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1681.462793][T19464] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1681.477604][T19464] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1681.488928][T19464] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1681.498050][T19464] usb 3-1: Product: syz [ 1681.506863][T19464] usb 3-1: Manufacturer: syz [ 1681.526740][T19464] cdc_wdm 3-1:1.0: skipping garbage [ 1681.541936][T19464] cdc_wdm 3-1:1.0: skipping garbage [ 1681.559644][T19464] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1681.576741][T19464] cdc_wdm 3-1:1.0: Unknown control protocol [ 1681.675729][T20657] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1681.697349][T20657] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1681.711288][T20657] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 1681.731850][T20657] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1681.752007][T20657] usb 1-1: USB disconnect, device number 31 [ 1681.780498][ T29] audit: type=1400 audit(1784857211.611:3746): avc: denied { setopt } for pid=21465 comm="syz.1.3555" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1681.821234][T20657] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1681.844200][T20657] cp210x 1-1:0.0: device disconnected [ 1681.879248][ T29] audit: type=1400 audit(1784857211.711:3747): avc: denied { create } for pid=21465 comm="syz.1.3555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1681.925059][ T29] audit: type=1400 audit(1784857211.741:3748): avc: denied { write } for pid=21465 comm="syz.1.3555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1681.991350][ T29] audit: type=1400 audit(1784857211.801:3749): avc: denied { name_bind } for pid=21470 comm="syz.3.3557" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1682.066446][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1682.073083][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1682.079342][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1682.085939][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1682.092585][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1682.099189][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1682.105905][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1682.106322][ T29] audit: type=1400 audit(1784857211.941:3750): avc: denied { bind } for pid=21473 comm="syz.3.3558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1682.112499][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1682.114323][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1682.114346][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1682.115800][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1682.115822][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1682.116030][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1682.116051][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1682.116254][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1682.116274][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1682.116474][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1682.116493][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1682.116694][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1682.116713][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1682.120484][T16418] usb 3-1: USB disconnect, device number 16 [ 1682.138891][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1682.306367][T21469] syzkaller0: entered promiscuous mode [ 1682.311980][T21469] syzkaller0: entered allmulticast mode [ 1682.385141][ T29] audit: type=1400 audit(1784857212.221:3751): avc: denied { create } for pid=21481 comm="syz.1.3561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1682.461412][ T29] audit: type=1400 audit(1784857212.221:3752): avc: denied { connect } for pid=21481 comm="syz.1.3561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1682.530457][ T29] audit: type=1400 audit(1784857212.241:3753): avc: denied { write } for pid=21481 comm="syz.1.3561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1683.855772][T20411] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1684.020912][T20411] usb 3-1: Using ep0 maxpacket: 8 [ 1684.046597][T20411] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1684.068805][T20411] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1684.079723][T20411] usb 3-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 1684.093359][T20411] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 1684.114468][T20411] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1684.129344][T20411] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1684.170716][T20411] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1684.189997][T20411] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1684.442172][T20411] usb 3-1: GET_CAPABILITIES returned 0 [ 1684.447907][T20411] usbtmc 3-1:16.0: can't read capabilities [ 1684.455303][ T29] audit: type=1400 audit(1784857214.291:3754): avc: denied { write } for pid=21503 comm="syz.3.3568" lport=44463 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1684.689227][T20411] usb 3-1: USB disconnect, device number 17 [ 1685.406629][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1685.406641][ T29] audit: type=1400 audit(1784857215.231:3758): avc: denied { read write } for pid=21519 comm="syz.2.3574" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1685.439435][ T29] audit: type=1400 audit(1784857215.231:3759): avc: denied { open } for pid=21519 comm="syz.2.3574" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1685.806363][T21518] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1686.565137][ T29] audit: type=1400 audit(1784857216.391:3760): avc: denied { mount } for pid=21530 comm="syz.2.3578" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1688.071363][T21554] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1690.427430][ T29] audit: type=1400 audit(1784857220.261:3761): avc: denied { bind } for pid=21576 comm="syz.3.3593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1690.620418][T20411] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1690.821893][T20411] usb 2-1: config 0 has an invalid interface number: 44 but max is 0 [ 1690.853583][T20411] usb 2-1: config 0 has no interface number 0 [ 1690.868385][T20411] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1690.887855][T20411] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.916690][T20411] usb 2-1: config 0 descriptor?? [ 1690.951443][T20411] cp210x 2-1:0.44: cp210x converter detected [ 1691.119012][ T29] audit: type=1400 audit(1784857220.951:3762): avc: denied { create } for pid=21581 comm="syz.5.3594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1691.169080][T20411] cp210x 2-1:0.44: failed to get vendor val 0x370b size 1: -32 [ 1691.204955][ T29] audit: type=1400 audit(1784857221.001:3763): avc: denied { ioctl } for pid=21573 comm="syz.1.3592" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1691.290560][T20411] cp210x 2-1:0.44: querying part number failed [ 1691.295804][T21585] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1691.317431][ T29] audit: type=1400 audit(1784857221.021:3764): avc: denied { bind } for pid=21581 comm="syz.5.3594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1691.424586][ T29] audit: type=1400 audit(1784857221.021:3765): avc: denied { accept } for pid=21581 comm="syz.5.3594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1691.499662][T20411] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1691.560042][T20411] usb 2-1: USB disconnect, device number 23 [ 1691.570924][ T29] audit: type=1400 audit(1784857221.031:3766): avc: denied { read } for pid=21581 comm="syz.5.3594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1691.650425][T11303] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1691.790029][ T29] audit: type=1400 audit(1784857221.031:3767): avc: denied { read } for pid=21582 comm="syz.3.3595" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1691.819342][T20411] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1691.890373][T11303] usb 6-1: Using ep0 maxpacket: 8 [ 1691.920067][T11303] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1691.933753][ T29] audit: type=1400 audit(1784857221.031:3768): avc: denied { open } for pid=21582 comm="syz.3.3595" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1691.937114][T20411] cp210x 2-1:0.44: device disconnected [ 1691.973512][T11303] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1692.017568][T21595] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3598'. [ 1692.029301][T11303] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1692.040541][T21595] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3598'. [ 1692.165086][ T29] audit: type=1400 audit(1784857221.121:3769): avc: denied { read write } for pid=21582 comm="syz.3.3595" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1692.192284][T11303] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 1692.207215][T11303] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1692.210407][ T29] audit: type=1400 audit(1784857221.121:3770): avc: denied { open } for pid=21582 comm="syz.3.3595" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1692.748297][T11303] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1692.778707][T11303] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1692.810644][T11303] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.839706][T11303] usb 6-1: Product: syz [ 1692.968543][T11303] usb 6-1: Manufacturer: syz [ 1692.983922][T11303] usb 6-1: SerialNumber: syz [ 1693.008862][T11303] usb 6-1: config 0 descriptor?? [ 1693.030500][T21587] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1693.070525][T21607] fuse: Bad value for 'group_id' [ 1693.075548][T21607] fuse: Bad value for 'group_id' [ 1694.518125][T21610] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1694.912104][T11303] rc_core: IR keymap rc-snapstream-firefly not found [ 1694.961501][T11303] Registered IR keymap rc-empty [ 1695.076917][T11303] rc rc0: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1695.156505][T11303] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input7 [ 1695.321007][T11303] input: syz syz mouse as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input8 [ 1695.480021][T11303] usb 6-1: USB disconnect, device number 10 [ 1695.486022][ C1] ati_remote 6-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 1696.211929][T21645] syzkaller0: entered promiscuous mode [ 1696.228423][T21645] syzkaller0: entered allmulticast mode [ 1696.273122][T21652] fuse: Bad value for 'group_id' [ 1696.288140][T21652] fuse: Bad value for 'group_id' [ 1696.584134][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 1696.584151][ T29] audit: type=1400 audit(1784857226.281:3840): avc: denied { mount } for pid=21656 comm="syz.1.3618" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1697.125021][ T29] audit: type=1400 audit(1784857226.451:3841): avc: denied { read write } for pid=21658 comm="syz.0.3619" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1697.149392][ T29] audit: type=1400 audit(1784857226.451:3842): avc: denied { open } for pid=21658 comm="syz.0.3619" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1697.276166][ T29] audit: type=1400 audit(1784857227.111:3843): avc: denied { create } for pid=21665 comm="syz.5.3620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1697.364039][ T29] audit: type=1400 audit(1784857227.111:3844): avc: denied { bind } for pid=21665 comm="syz.5.3620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1697.385535][ T29] audit: type=1400 audit(1784857227.111:3845): avc: denied { write } for pid=21665 comm="syz.5.3620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1697.510404][T20411] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1697.534327][ T29] audit: type=1400 audit(1784857227.371:3846): avc: denied { write } for pid=21668 comm="syz.0.3622" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1697.766812][ T29] audit: type=1400 audit(1784857227.581:3847): avc: denied { name_bind } for pid=21668 comm="syz.0.3622" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1697.830963][T20411] usb 3-1: Using ep0 maxpacket: 16 [ 1697.845983][T20411] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1697.878141][ T29] audit: type=1400 audit(1784857227.581:3848): avc: denied { node_bind } for pid=21668 comm="syz.0.3622" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1697.947478][T20411] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1698.001803][T20411] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1698.070539][ T5615] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1698.087586][T20411] usb 3-1: config 0 descriptor?? [ 1698.270810][ T5615] usb 2-1: Using ep0 maxpacket: 16 [ 1698.440402][ T29] audit: type=1400 audit(1784857228.211:3849): avc: denied { read write } for pid=21676 comm="syz.5.3623" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1698.597763][ T5615] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1698.645585][ T5615] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1698.663888][ T5615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1698.694397][ T5615] usb 2-1: config 0 descriptor?? [ 1699.096255][T21674] fuse: Unknown parameter '' [ 1699.961120][T19464] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1700.141774][T19464] usb 1-1: Using ep0 maxpacket: 16 [ 1700.171342][T19464] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1700.193845][T19464] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1700.214899][T19464] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.239842][T19464] usb 1-1: config 0 descriptor?? [ 1700.756192][T20411] usbhid 3-1:0.0: can't add hid device: -71 [ 1700.762245][T20411] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1700.813572][T20411] usb 3-1: USB disconnect, device number 18 [ 1701.270793][ T5615] usbhid 2-1:0.0: can't add hid device: -71 [ 1701.298018][ T5615] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1701.327442][ T5615] usb 2-1: USB disconnect, device number 24 [ 1701.410424][T20657] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 1701.567945][T20657] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1701.576306][T20657] usb 3-1: config 0 has no interface number 0 [ 1701.582950][T20657] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1701.597390][T20657] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1701.606905][T20657] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.617498][T20657] usb 3-1: Product: syz [ 1701.621953][T20657] usb 3-1: Manufacturer: syz [ 1701.627335][T20657] usb 3-1: SerialNumber: syz [ 1701.645196][T20657] usb 3-1: config 0 descriptor?? [ 1702.311978][T21701] fuse: Bad value for 'group_id' [ 1702.323687][T21701] fuse: Bad value for 'group_id' [ 1702.369177][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1702.369193][ T29] audit: type=1400 audit(1784857232.201:3854): avc: denied { create } for pid=21699 comm="syz.3.3630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1702.433263][ T29] audit: type=1400 audit(1784857232.231:3855): avc: denied { ioctl } for pid=21699 comm="syz.3.3630" path="socket:[93286]" dev="sockfs" ino=93286 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1702.478603][T19464] usbhid 1-1:0.0: can't add hid device: -71 [ 1702.485099][T19464] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1702.496154][T19464] usb 1-1: USB disconnect, device number 32 [ 1702.529716][T20657] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1703.135245][T21711] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1703.146428][ T29] audit: type=1400 audit(1784857232.961:3856): avc: denied { create } for pid=21703 comm="syz.1.3631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1703.905551][ T29] audit: type=1400 audit(1784857232.971:3857): avc: denied { write } for pid=21703 comm="syz.1.3631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1704.056698][ T29] audit: type=1400 audit(1784857233.891:3858): avc: denied { create } for pid=21716 comm="syz.3.3634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1704.122507][ T29] audit: type=1400 audit(1784857233.911:3859): avc: denied { mounton } for pid=21718 comm="syz.0.3636" path="/136/file0" dev="tmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1704.147093][ T29] audit: type=1400 audit(1784857233.931:3860): avc: denied { connect } for pid=21716 comm="syz.3.3634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1704.168657][ T29] audit: type=1400 audit(1784857233.931:3861): avc: denied { write } for pid=21714 comm="syz.5.3635" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1704.197926][T21724] tipc: Started in network mode [ 1704.204911][T21724] tipc: Node identity 2007ff, cluster identity 4711 [ 1704.211655][ T29] audit: type=1400 audit(1784857233.951:3862): avc: denied { setopt } for pid=21714 comm="syz.5.3635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1704.239400][T21724] tipc: Node number set to 2099199 [ 1704.252720][ T29] audit: type=1400 audit(1784857233.951:3863): avc: denied { write } for pid=21714 comm="syz.5.3635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1704.935410][T20657] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1705.011756][T20657] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1705.079255][T20657] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 1705.182742][T20657] usb 3-1: USB disconnect, device number 19 [ 1705.290432][T20411] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1705.300408][T19464] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1705.492345][T20411] usb 6-1: Using ep0 maxpacket: 16 [ 1705.520381][T19464] usb 2-1: Using ep0 maxpacket: 16 [ 1705.558297][T19464] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1705.583284][T20411] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1705.623554][T20411] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1705.673424][T19464] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1705.694717][T20411] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.748989][T20411] usb 6-1: config 0 descriptor?? [ 1705.785602][T19464] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.218499][T21759] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1706.893400][T19464] usb 2-1: config 0 descriptor?? [ 1709.663618][T19464] usbhid 2-1:0.0: can't add hid device: -71 [ 1709.693031][T19464] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1709.766969][T19464] usb 2-1: USB disconnect, device number 25 [ 1709.914735][T20411] usbhid 6-1:0.0: can't add hid device: -71 [ 1709.967300][T20411] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1710.054480][T20411] usb 6-1: USB disconnect, device number 11 [ 1710.144142][T21785] syzkaller0: entered promiscuous mode [ 1710.177437][T21785] syzkaller0: entered allmulticast mode [ 1711.830755][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1711.830769][ T29] audit: type=1400 audit(1784857241.671:3873): avc: denied { shutdown } for pid=21811 comm="syz.2.3663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1712.120798][ T29] audit: type=1400 audit(1784857241.791:3874): avc: denied { sys_module } for pid=21809 comm="syz.0.3662" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1713.513557][ T29] audit: type=1400 audit(1784857243.351:3875): avc: denied { setopt } for pid=21833 comm="syz.1.3666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1713.560008][ T29] audit: type=1400 audit(1784857243.351:3876): avc: denied { ioctl } for pid=21833 comm="syz.1.3666" path="socket:[93538]" dev="sockfs" ino=93538 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1713.656364][ T29] audit: type=1400 audit(1784857243.351:3877): avc: denied { write } for pid=21833 comm="syz.1.3666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1713.952627][T21832] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1716.158142][T21849] tipc: Started in network mode [ 1716.163348][T21849] tipc: Node identity 2007ff, cluster identity 4711 [ 1716.169937][T21849] tipc: Node number set to 2099199 [ 1716.691699][T21870] Invalid ELF header magic: != ELF [ 1717.072403][ T29] audit: type=1400 audit(1784857246.531:3878): avc: denied { module_load } for pid=21862 comm="syz.5.3674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1717.152983][ T29] audit: type=1400 audit(1784857246.621:3879): avc: denied { create } for pid=21862 comm="syz.5.3674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1717.280514][ T29] audit: type=1400 audit(1784857246.641:3880): avc: denied { bind } for pid=21862 comm="syz.5.3674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1717.387274][ T29] audit: type=1400 audit(1784857246.641:3881): avc: denied { setattr } for pid=21862 comm="syz.5.3674" path="socket:[93597]" dev="sockfs" ino=93597 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1717.441061][ T29] audit: type=1400 audit(1784857247.281:3882): avc: denied { create } for pid=21874 comm="syz.3.3677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1717.493631][T21877] Bluetooth: MGMT ver 1.23 [ 1717.535507][ T29] audit: type=1400 audit(1784857247.331:3883): avc: denied { write } for pid=21874 comm="syz.3.3677" path="socket:[93635]" dev="sockfs" ino=93635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1718.766942][T21893] overlayfs: overlapping lowerdir path [ 1718.773889][T21889] bond1: option xmit_hash_policy: invalid value (6) [ 1718.792483][ T29] audit: type=1400 audit(1784857248.601:3884): avc: denied { mount } for pid=21886 comm="syz.3.3681" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1718.966456][T21889] bond1 (unregistering): Released all slaves [ 1719.274673][ T29] audit: type=1400 audit(1784857248.761:3885): avc: denied { unmount } for pid=19477 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1720.463172][ T5615] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1720.734091][ T5615] usb 1-1: config 0 has no interfaces? [ 1720.764058][ T5615] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1720.797912][T21930] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1720.806558][ T5615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.849266][ T5615] usb 1-1: config 0 descriptor?? [ 1721.138090][ T5615] usb 1-1: USB disconnect, device number 33 [ 1722.091950][ T29] audit: type=1400 audit(1784857251.931:3886): avc: denied { create } for pid=21939 comm="syz.1.3693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1722.398039][ T29] audit: type=1400 audit(1784857251.951:3887): avc: denied { connect } for pid=21939 comm="syz.1.3693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1722.573366][ T29] audit: type=1400 audit(1784857251.961:3888): avc: denied { write } for pid=21939 comm="syz.1.3693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1724.168706][ T29] audit: type=1400 audit(1784857254.001:3889): avc: denied { read write } for pid=21960 comm="syz.2.3699" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1724.285497][ T29] audit: type=1400 audit(1784857254.001:3890): avc: denied { open } for pid=21960 comm="syz.2.3699" path="/dev/rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1724.491763][ T29] audit: type=1400 audit(1784857254.321:3891): avc: denied { read write } for pid=21967 comm="syz.1.3702" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1724.558701][ T29] audit: type=1400 audit(1784857254.321:3892): avc: denied { open } for pid=21967 comm="syz.1.3702" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1724.644667][T21974] can: request_module (can-proto-3) failed. [ 1724.769207][T21977] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1724.783541][T21977] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1724.800700][T21977] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1724.855033][ T29] audit: type=1400 audit(1784857254.651:3893): avc: denied { mount } for pid=21973 comm="syz.5.3704" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1725.002189][ T29] audit: type=1400 audit(1784857254.711:3894): avc: denied { unmount } for pid=21973 comm="syz.5.3704" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1725.056378][T21977] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1726.130003][ T29] audit: type=1400 audit(1784857255.961:3895): avc: denied { create } for pid=21989 comm="syz.0.3706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1727.199102][T21994] can: request_module (can-proto-3) failed. [ 1727.205525][ T29] audit: type=1400 audit(1784857256.201:3896): avc: denied { ioctl } for pid=21986 comm="syz.3.3705" path="socket:[94827]" dev="sockfs" ino=94827 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1727.315493][ T29] audit: type=1400 audit(1784857257.151:3897): avc: denied { map } for pid=22006 comm="syz.1.3709" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=94892 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1727.354441][ T29] audit: type=1400 audit(1784857257.151:3898): avc: denied { read write } for pid=22006 comm="syz.1.3709" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=94892 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1728.650900][T22031] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1730.117168][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.183341][ T29] audit: type=1400 audit(1784857259.531:3899): avc: denied { read } for pid=22038 comm="syz.0.3718" name="usbmon6" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1730.210447][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.224667][T22042] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 1730.336705][ T29] audit: type=1400 audit(1784857259.531:3900): avc: denied { open } for pid=22038 comm="syz.0.3718" path="/dev/usbmon6" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1730.429282][ T29] audit: type=1400 audit(1784857259.551:3901): avc: denied { ioctl } for pid=22038 comm="syz.0.3718" path="/dev/usbmon6" dev="devtmpfs" ino=740 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1730.602405][ T29] audit: type=1400 audit(1784857259.651:3902): avc: denied { watch } for pid=22038 comm="syz.0.3718" path="/149/file5" dev="tmpfs" ino=792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1730.839791][ T29] audit: type=1400 audit(1784857259.651:3903): avc: denied { watch_sb watch_reads } for pid=22038 comm="syz.0.3718" path="/149/file5" dev="tmpfs" ino=792 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1730.995324][ T29] audit: type=1400 audit(1784857259.661:3904): avc: denied { watch_mount } for pid=22038 comm="syz.0.3718" path="/149/file5" dev="tmpfs" ino=792 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1731.355225][ T29] audit: type=1400 audit(1784857261.191:3905): avc: denied { mount } for pid=22055 comm="syz.5.3722" name="/" dev="configfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1731.437607][T22048] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1731.650404][T20657] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1731.981841][T20657] usb 4-1: Using ep0 maxpacket: 16 [ 1732.146736][T20657] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1732.179908][T20657] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1732.247356][T20657] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1732.274244][T20657] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.290362][T20657] usb 4-1: Product: syz [ 1732.300597][T20657] usb 4-1: Manufacturer: syz [ 1732.314834][T20657] usb 4-1: SerialNumber: syz [ 1732.345671][T20657] usb 4-1: config 0 descriptor?? [ 1732.366639][T20657] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1732.398900][T20657] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1732.972481][T22069] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1734.113994][T20657] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1734.130113][T20657] em28xx 4-1:0.0: Config register raw data: 0xff [ 1734.149336][T20657] em28xx 4-1:0.0: I2S Audio (3 sample rate(s)) [ 1734.165556][T20657] em28xx 4-1:0.0: No AC97 audio processor [ 1734.531930][ T29] audit: type=1400 audit(1784857264.371:3906): avc: denied { ioctl } for pid=22056 comm="syz.3.3723" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1734.586326][T20657] usb 4-1: USB disconnect, device number 27 [ 1734.758071][ T29] audit: type=1400 audit(1784857264.421:3907): avc: denied { create } for pid=22080 comm="syz.1.3728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1734.855992][ T29] audit: type=1400 audit(1784857264.421:3908): avc: denied { read write } for pid=22080 comm="syz.1.3728" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1734.965519][ T29] audit: type=1400 audit(1784857264.421:3909): avc: denied { open } for pid=22080 comm="syz.1.3728" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1735.092766][ T29] audit: type=1400 audit(1784857264.421:3910): avc: denied { ioctl } for pid=22080 comm="syz.1.3728" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1735.172952][ T29] audit: type=1400 audit(1784857264.511:3911): avc: denied { create } for pid=22080 comm="syz.1.3728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1735.234216][ T29] audit: type=1400 audit(1784857264.531:3912): avc: denied { read } for pid=22080 comm="syz.1.3728" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1735.269654][T20657] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1735.409994][T22079] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1735.426049][ T29] audit: type=1400 audit(1784857264.531:3913): avc: denied { open } for pid=22080 comm="syz.1.3728" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1735.479918][T20657] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1735.501971][T20657] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1735.550524][T20657] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1735.576651][ T29] audit: type=1400 audit(1784857264.531:3914): avc: denied { bind } for pid=22080 comm="syz.1.3728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1735.624096][T20657] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1735.678645][T20657] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1735.697959][ T29] audit: type=1400 audit(1784857264.531:3915): avc: denied { prog_load } for pid=22080 comm="syz.1.3728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1735.763813][T20657] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1735.808429][T20657] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1735.867484][T20657] usb 6-1: Product: syz [ 1735.878926][T20657] usb 6-1: Manufacturer: syz [ 1736.126244][T20657] cdc_wdm 6-1:1.0: skipping garbage [ 1736.154575][T20657] cdc_wdm 6-1:1.0: skipping garbage [ 1736.228672][T22095] Invalid ELF header magic: != ELF [ 1736.708244][T20657] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1736.742840][T20657] cdc_wdm 6-1:1.0: Unknown control protocol [ 1736.799034][T20657] usb 6-1: USB disconnect, device number 12 [ 1739.997166][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 1739.997182][ T29] audit: type=1400 audit(1784857269.821:3969): avc: denied { create } for pid=22122 comm="syz.1.3742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1742.516041][ T29] audit: type=1400 audit(1784857272.331:3970): avc: denied { mount } for pid=22143 comm="syz.1.3747" name="/" dev="configfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1742.740562][ T29] audit: type=1400 audit(1784857272.471:3971): avc: denied { allowed } for pid=22143 comm="syz.1.3747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1742.761029][ T29] audit: type=1400 audit(1784857272.501:3972): avc: denied { map } for pid=22143 comm="syz.1.3747" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=95204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1742.786494][ T29] audit: type=1400 audit(1784857272.511:3973): avc: denied { read write } for pid=22143 comm="syz.1.3747" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=95204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1742.932468][ T29] audit: type=1326 audit(1784857272.601:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22143 comm="syz.1.3747" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f91c439de99 code=0x0 [ 1743.813332][T22158] Invalid ELF header magic: != ELF [ 1744.179698][T20657] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1744.571158][T22162] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1744.609167][T20657] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1745.360528][T20657] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1745.360550][ T29] audit: type=1400 audit(1784857274.351:3975): avc: denied { ioctl } for pid=22159 comm="syz.3.3741" path="socket:[96259]" dev="sockfs" ino=96259 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1745.763336][ T29] audit: type=1400 audit(1784857274.381:3976): avc: denied { read write } for pid=22159 comm="syz.3.3741" name="video7" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1745.790038][ T29] audit: type=1400 audit(1784857274.381:3977): avc: denied { open } for pid=22159 comm="syz.3.3741" path="/dev/video7" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1745.822893][ T29] audit: type=1400 audit(1784857274.391:3978): avc: denied { ioctl } for pid=22159 comm="syz.3.3741" path="/dev/video7" dev="devtmpfs" ino=952 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1745.876394][ T29] audit: type=1400 audit(1784857274.401:3979): avc: denied { create } for pid=22159 comm="syz.3.3741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1745.879004][T20657] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1745.908743][ T29] audit: type=1400 audit(1784857274.401:3980): avc: denied { write } for pid=22159 comm="syz.3.3741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1745.935535][T22165] fuse: Bad value for 'fd' [ 1745.943244][ T29] audit: type=1400 audit(1784857275.771:3981): avc: denied { mounton } for pid=22163 comm="syz.3.3754" path="/124/file0" dev="tmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1745.984973][T20657] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1746.054740][T20657] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1746.097180][ T29] audit: type=1400 audit(1784857275.881:3982): avc: denied { getopt } for pid=22164 comm="syz.5.3753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1746.107113][T20657] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1746.194869][T20657] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1746.203581][ T29] audit: type=1400 audit(1784857275.901:3983): avc: denied { create } for pid=22168 comm="syz.3.3755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1746.257167][T20657] usb 3-1: Product: syz [ 1746.266139][T20657] usb 3-1: Manufacturer: syz [ 1746.332687][ T29] audit: type=1400 audit(1784857276.171:3984): avc: denied { read write } for pid=22174 comm="syz.3.3756" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1746.358827][T20657] cdc_wdm 3-1:1.0: skipping garbage [ 1746.367154][T20657] cdc_wdm 3-1:1.0: skipping garbage [ 1746.408373][T20657] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1746.429174][T22175] fuse: Unknown parameter 'group_i00000000000000000000' [ 1746.444724][T20657] cdc_wdm 3-1:1.0: Unknown control protocol [ 1746.558508][T16418] usb 3-1: USB disconnect, device number 20 [ 1747.090201][T22186] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1748.379389][T22206] fuse: Bad value for 'fd' [ 1749.649751][T22219] fuse: Unknown parameter 'group_id00000000000000000000' [ 1749.811610][T22222] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1751.105269][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 1751.105286][ T29] audit: type=1400 audit(1784857280.941:4042): avc: denied { create } for pid=22225 comm="syz.5.3772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1752.211662][ T29] audit: type=1400 audit(1784857280.971:4043): avc: denied { module_request } for pid=22225 comm="syz.5.3772" kmod="can-proto-3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1752.246695][T22226] can: request_module (can-proto-3) failed. [ 1752.343265][ T29] audit: type=1400 audit(1784857282.071:4044): avc: denied { create } for pid=22225 comm="syz.5.3772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1752.581693][ T29] audit: type=1400 audit(1784857282.101:4045): avc: denied { create } for pid=22227 comm="syz.3.3775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1752.801074][ T29] audit: type=1400 audit(1784857282.101:4046): avc: denied { write } for pid=22227 comm="syz.3.3775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1753.355576][ T29] audit: type=1400 audit(1784857282.201:4047): avc: denied { write } for pid=22225 comm="syz.5.3772" name="dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1753.821999][ T29] audit: type=1400 audit(1784857282.201:4048): avc: denied { open } for pid=22225 comm="syz.5.3772" path="/dev/dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1753.976775][ T29] audit: type=1400 audit(1784857282.231:4049): avc: denied { mount } for pid=22225 comm="syz.5.3772" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1754.059511][ T29] audit: type=1400 audit(1784857282.231:4050): avc: denied { unmount } for pid=22225 comm="syz.5.3772" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1754.141950][ T29] audit: type=1400 audit(1784857282.281:4051): avc: denied { read } for pid=22225 comm="syz.5.3772" name="virtual_nci" dev="devtmpfs" ino=699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1754.240744][T22255] fuse: Unknown parameter 'group_id00000000000000000000' [ 1754.949101][T22265] siw: device registration error -23 [ 1756.110565][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 1756.110576][ T29] audit: type=1400 audit(1784857285.951:4064): avc: denied { ioctl } for pid=22275 comm="syz.3.3786" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1756.266279][ T29] audit: type=1400 audit(1784857286.001:4065): avc: denied { name_bind } for pid=22272 comm="syz.0.3787" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1756.337985][ T29] audit: type=1400 audit(1784857286.011:4066): avc: denied { setopt } for pid=22275 comm="syz.3.3786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1756.369125][ T29] audit: type=1400 audit(1784857286.151:4067): avc: denied { create } for pid=22281 comm="syz.1.3788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1756.427285][T22282] bond1: option xmit_hash_policy: invalid value (6) [ 1756.508710][T22282] bond1 (unregistering): Released all slaves [ 1756.722355][ T29] audit: type=1400 audit(1784857286.551:4068): avc: denied { map_read map_write } for pid=22289 comm="syz.3.3790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1756.794145][ T29] audit: type=1400 audit(1784857286.631:4069): avc: denied { ioctl } for pid=22291 comm="syz.5.3791" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1756.974950][ T29] audit: type=1400 audit(1784857286.811:4070): avc: denied { create } for pid=22293 comm="syz.0.3792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1757.009597][T22296] fuse: Unknown parameter 'group_id00000000000000000000' [ 1757.073273][T11303] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1757.330488][T11303] usb 6-1: device descriptor read/64, error -71 [ 1757.862945][T11303] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1758.092345][T11303] usb 6-1: device descriptor read/64, error -71 [ 1758.211408][T11303] usb usb6-port1: attempt power cycle [ 1758.445651][T22299] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1758.580386][T11303] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1758.611225][T11303] usb 6-1: device descriptor read/8, error -71 [ 1758.622954][ T29] audit: type=1400 audit(1784857288.461:4071): avc: denied { create } for pid=22298 comm="syz.2.3794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1758.665269][ T29] audit: type=1400 audit(1784857288.481:4072): avc: denied { write } for pid=22298 comm="syz.2.3794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1758.686416][ T29] audit: type=1400 audit(1784857288.481:4073): avc: denied { nlmsg_write } for pid=22298 comm="syz.2.3794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1758.938748][T11303] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1758.960817][T11303] usb 6-1: device descriptor read/8, error -71 [ 1759.082135][T11303] usb usb6-port1: unable to enumerate USB device [ 1760.090387][T16418] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1760.248939][T16418] usb 3-1: Using ep0 maxpacket: 16 [ 1760.261758][T16418] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1760.278299][T16418] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1760.381010][T16418] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1760.560218][T16418] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.631723][T16418] usb 3-1: Product: syz [ 1760.670172][T16418] usb 3-1: Manufacturer: syz [ 1760.687160][T16418] usb 3-1: SerialNumber: syz [ 1760.710160][T16418] usb 3-1: config 0 descriptor?? [ 1760.727225][T22327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3804'. [ 1760.738735][T16418] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1760.750099][T22327] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3804'. [ 1760.759322][T16418] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1761.353291][T22336] siw: device registration error -23 [ 1761.651742][T22331] can: request_module (can-proto-3) failed. [ 1761.711523][T16418] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1761.726243][T16418] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1762.190934][T16418] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1762.197938][T16418] em28xx 3-1:0.0: No AC97 audio processor [ 1762.312350][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1762.312366][ T29] audit: type=1400 audit(1784857292.141:4078): avc: denied { create } for pid=22349 comm="syz.5.3809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1762.436598][T11303] usb 3-1: USB disconnect, device number 21 [ 1762.445135][T11303] em28xx 3-1:0.0: Disconnecting em28xx [ 1762.532342][T11303] em28xx 3-1:0.0: Freeing device [ 1762.597854][ T29] audit: type=1400 audit(1784857292.431:4079): avc: denied { mount } for pid=22363 comm="syz.5.3814" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1762.710946][ T29] audit: type=1400 audit(1784857292.541:4080): avc: denied { write } for pid=22365 comm="syz.5.3816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1762.919981][T22373] Invalid ELF header magic: != ELF [ 1762.959400][ T29] audit: type=1400 audit(1784857292.751:4081): avc: denied { sys_module } for pid=22361 comm="syz.1.3813" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1763.144566][T22374] Invalid ELF header magic: != ELF [ 1763.390599][ T29] audit: type=1400 audit(1784857292.751:4082): avc: denied { module_load } for pid=22361 comm="syz.1.3813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1763.428304][ T29] audit: type=1400 audit(1784857292.781:4083): avc: denied { bind } for pid=22361 comm="syz.1.3813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1763.493216][ T29] audit: type=1400 audit(1784857292.781:4084): avc: denied { setattr } for pid=22361 comm="syz.1.3813" path="socket:[96920]" dev="sockfs" ino=96920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1763.695325][ T29] audit: type=1400 audit(1784857293.521:4085): avc: denied { execute } for pid=22375 comm="syz.1.3817" name="file2" dev="tmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1763.715839][T22378] fuse: Bad value for 'user_id' [ 1763.752474][T22378] fuse: Bad value for 'user_id' [ 1763.795336][ T29] audit: type=1400 audit(1784857293.521:4086): avc: denied { execute_no_trans } for pid=22375 comm="syz.1.3817" path="/124/file2" dev="tmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1763.886178][ T29] audit: type=1400 audit(1784857293.571:4087): avc: denied { create } for pid=22375 comm="syz.1.3817" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1763.925604][T22385] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 1764.906107][T22387] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1764.963737][T22384] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1765.710420][T20411] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1765.763192][T22407] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1765.915284][T20411] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1765.941432][T20411] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.965267][T20411] usb 2-1: Product: syz [ 1765.990722][T20411] usb 2-1: Manufacturer: syz [ 1766.066396][T20411] usb 2-1: SerialNumber: syz [ 1766.352876][T20411] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1766.891512][T20411] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 1766.934950][T20411] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1766.979327][T20411] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 1767.153110][T22422] fuse: Bad value for 'user_id' [ 1767.158125][T22422] fuse: Bad value for 'user_id' [ 1767.470630][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 1767.470673][ T29] audit: type=1400 audit(1784857297.301:4150): avc: denied { create } for pid=22425 comm="syz.3.3832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1767.564143][ T29] audit: type=1400 audit(1784857297.331:4151): avc: denied { module_request } for pid=22425 comm="syz.3.3832" kmod="can-proto-3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1767.667446][ T29] audit: type=1400 audit(1784857297.341:4152): avc: denied { ioctl } for pid=22397 comm="syz.1.3824" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1767.712099][T22426] can: request_module (can-proto-3) failed. [ 1767.766140][ T29] audit: type=1400 audit(1784857297.431:4153): avc: denied { read } for pid=22425 comm="syz.3.3832" dev="nsfs" ino=4026532783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1767.788983][T22429] siw: device registration error -23 [ 1767.809551][ T29] audit: type=1400 audit(1784857297.431:4154): avc: denied { open } for pid=22425 comm="syz.3.3832" path="net:[4026532783]" dev="nsfs" ino=4026532783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1767.881664][ T29] audit: type=1400 audit(1784857297.431:4155): avc: denied { create } for pid=22425 comm="syz.3.3832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1767.904245][ T29] audit: type=1400 audit(1784857297.571:4156): avc: denied { unmount } for pid=13066 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1767.939234][ T29] audit: type=1400 audit(1784857297.571:4157): avc: denied { unmount } for pid=13066 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1767.960720][ T29] audit: type=1400 audit(1784857297.621:4158): avc: denied { create } for pid=22425 comm="syz.3.3832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1767.981410][ T29] audit: type=1400 audit(1784857297.621:4159): avc: denied { write } for pid=22425 comm="syz.3.3832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1768.126157][T19464] usb 2-1: USB disconnect, device number 26 [ 1768.463432][T22446] Invalid ELF header magic: != ELF [ 1768.963476][T22449] binder: 22448:22449 ioctl c0306201 0 returned -14 [ 1769.047189][T22451] tipc: Enabled bearer , priority 0 [ 1769.138090][T22451] syzkaller0: entered promiscuous mode [ 1769.148824][T22451] syzkaller0: entered allmulticast mode [ 1769.155351][T22451] tipc: Resetting bearer [ 1769.207161][T22450] tipc: Resetting bearer [ 1769.675911][T22468] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1772.635024][T22450] tipc: Disabling bearer [ 1772.722091][T22458] bond1: option xmit_hash_policy: invalid value (6) [ 1772.730208][T22458] bond1 (unregistering): Released all slaves [ 1772.824991][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 1772.825005][ T29] audit: type=1400 audit(1784857302.661:4221): avc: denied { create } for pid=22490 comm="syz.3.3848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1772.893073][ T29] audit: type=1400 audit(1784857302.711:4222): avc: denied { write } for pid=22490 comm="syz.3.3848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1772.924794][ T29] audit: type=1400 audit(1784857302.711:4223): avc: denied { create } for pid=22490 comm="syz.3.3848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1773.012868][ T29] audit: type=1400 audit(1784857302.721:4224): avc: denied { connect } for pid=22490 comm="syz.3.3848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1773.087170][ T29] audit: type=1400 audit(1784857302.781:4225): avc: denied { write } for pid=22490 comm="syz.3.3848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1773.188965][ T29] audit: type=1400 audit(1784857302.921:4226): avc: denied { create } for pid=22496 comm="syz.5.3850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1773.239830][ T29] audit: type=1400 audit(1784857302.961:4227): avc: denied { write } for pid=22496 comm="syz.5.3850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1773.349713][ T29] audit: type=1400 audit(1784857303.181:4228): avc: denied { mount } for pid=22507 comm="syz.5.3854" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1773.372726][ T29] audit: type=1400 audit(1784857303.211:4229): avc: denied { mounton } for pid=22507 comm="syz.5.3854" path="/430/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1773.373385][T22508] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1773.403940][ T29] audit: type=1400 audit(1784857303.241:4230): avc: denied { mount } for pid=22507 comm="syz.5.3854" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1773.455043][T22501] bond1: option xmit_hash_policy: invalid value (6) [ 1773.465746][T22501] bond1 (unregistering): Released all slaves [ 1773.940520][ C0] ================================================================== [ 1773.948606][ C0] BUG: KASAN: slab-use-after-free in llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 1773.957962][ C0] Read of size 1 at addr ffff888031928010 by task syz.0.3853/22514 [ 1773.965824][ C0] [ 1773.968134][ C0] CPU: 0 UID: 0 PID: 22514 Comm: syz.0.3853 Not tainted syzkaller #0 PREEMPT(full) [ 1773.968150][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1773.968161][ C0] Call Trace: [ 1773.968166][ C0] [ 1773.968172][ C0] dump_stack_lvl+0x100/0x190 [ 1773.968192][ C0] print_report+0x13d/0x4b0 [ 1773.968211][ C0] ? __virt_addr_valid+0x239/0x430 [ 1773.968226][ C0] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 1773.968244][ C0] kasan_report+0xdf/0x1c0 [ 1773.968259][ C0] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 1773.968278][ C0] llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 1773.968296][ C0] ? __pfx_llc_conn_ac_send_sabme_cmd_p_set_x+0x10/0x10 [ 1773.968315][ C0] llc_conn_state_process+0x3ec/0x1480 [ 1773.968335][ C0] llc_conn_tmr_common_cb+0x2d4/0x880 [ 1773.968350][ C0] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 1773.968368][ C0] call_timer_fn+0x19a/0x610 [ 1773.968381][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1773.968394][ C0] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 1773.968412][ C0] ? mark_held_locks+0x40/0x70 [ 1773.968427][ C0] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 1773.968445][ C0] __run_timers+0x757/0xb00 [ 1773.968459][ C0] ? __pfx___run_timers+0x10/0x10 [ 1773.968475][ C0] ? ktime_get+0x9f/0x320 [ 1773.968488][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 1773.968507][ C0] run_timer_base+0x114/0x190 [ 1773.968520][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1773.968534][ C0] run_timer_softirq+0x1a/0x50 [ 1773.968548][ C0] handle_softirqs+0x1ea/0x9b0 [ 1773.968564][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1773.968579][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1773.968595][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1773.968614][ C0] __irq_exit_rcu+0x162/0x210 [ 1773.968629][ C0] irq_exit_rcu+0x9/0x30 [ 1773.968642][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1773.968662][ C0] [ 1773.968666][ C0] [ 1773.968671][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1773.968685][ C0] RIP: 0010:preempt_schedule_irq+0x4b/0x90 [ 1773.968704][ C0] Code: 00 00 00 fc ff df 48 89 eb 48 c1 eb 03 48 01 d3 f6 c4 02 75 47 bf 01 00 00 00 e8 d0 b2 19 f6 e8 eb a6 56 f6 fb bf 01 00 00 00 a0 91 ff ff 9c 58 fa f6 c4 02 75 1e bf 01 00 00 00 e8 be 52 19 [ 1773.968723][ C0] RSP: 0000:ffffc9000ea17748 EFLAGS: 00000206 [ 1773.968736][ C0] RAX: 000000000001764d RBX: ffffed1005deb950 RCX: 0000000000000040 [ 1773.968744][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a4e62 RDI: 0000000000000001 [ 1773.968752][ C0] RBP: ffff88802ef5ca80 R08: 0000000000000001 R09: 0000000000000000 [ 1773.968760][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 1773.968767][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1773.968779][ C0] ? preempt_schedule_irq+0x45/0x90 [ 1773.968797][ C0] irqentry_exit+0x205/0xa00 [ 1773.968810][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 1773.968823][ C0] RIP: 0010:llc_sap_state_process+0x241/0x570 [ 1773.968837][ C0] Code: 49 be 00 00 00 00 00 fc ff df 48 8b 04 24 4c 8b 60 10 4d 85 e4 75 2f eb 5f e8 2b c3 5c f8 48 89 ee 4c 89 ef 2e 2e 2e 41 ff d7 <31> ff 41 89 c7 89 c6 e8 83 bd 5c f8 31 c0 45 85 ff 0f 95 c0 09 c3 [ 1773.968850][ C0] RSP: 0000:ffffc9000ea17850 EFLAGS: 00000246 [ 1773.968859][ C0] RAX: 0000000000000002 RBX: 0000000000000000 RCX: ffffc9000ef3c000 [ 1773.968866][ C0] RDX: 0000000000080000 RSI: ffffffff89ad38f0 RDI: ffffffff8c401480 [ 1773.968874][ C0] RBP: ffff88805566f8c0 R08: 0000000000000001 R09: 0000000000000000 [ 1773.968882][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8d1aabc0 [ 1773.968890][ C0] R13: ffff888034e25000 R14: dffffc0000000000 R15: ffffffff89ad3bd0 [ 1773.968898][ C0] ? __pfx_llc_sap_action_send_xid_c+0x10/0x10 [ 1773.968915][ C0] ? llc_prepare_and_xmit+0xa0/0xc0 [ 1773.968931][ C0] llc_ui_sendmsg+0xddc/0x1540 [ 1773.968949][ C0] ? __pfx_llc_ui_sendmsg+0x10/0x10 [ 1773.968965][ C0] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1773.968984][ C0] ____sys_sendmsg+0xa4d/0xbe0 [ 1773.969000][ C0] ? __pfx_llc_ui_sendmsg+0x10/0x10 [ 1773.969016][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1773.969031][ C0] ? rcu_is_watching+0x12/0xc0 [ 1773.969049][ C0] ? rcu_is_watching+0x12/0xc0 [ 1773.969065][ C0] ? ___sys_sendmsg+0x19d/0x1e0 [ 1773.969082][ C0] ? kfree+0x1e5/0x6c0 [ 1773.969099][ C0] ___sys_sendmsg+0x190/0x1e0 [ 1773.969117][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 1773.969137][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1773.969151][ C0] ? __pfx___might_resched+0x10/0x10 [ 1773.969167][ C0] __sys_sendmmsg+0x20c/0x440 [ 1773.969182][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1773.969195][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1773.969213][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1773.969232][ C0] ? kcov_ioctl+0x17a/0x750 [ 1773.969245][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 1773.969259][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1773.969270][ C0] do_syscall_64+0x115/0x870 [ 1773.969281][ C0] ? clear_bhb_loop+0x40/0x90 [ 1773.969295][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1773.969308][ C0] RIP: 0033:0x7f1e0cd9de99 [ 1773.969321][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1773.969333][ C0] RSP: 002b:00007f1e0afb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1773.969344][ C0] RAX: ffffffffffffffda RBX: 00007f1e0d026180 RCX: 00007f1e0cd9de99 [ 1773.969353][ C0] RDX: 03fffffffffffeed RSI: 0000200000001380 RDI: 0000000000000008 [ 1773.969361][ C0] RBP: 00007f1e0ce33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1773.969368][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1773.969376][ C0] R13: 00007f1e0d026218 R14: 00007f1e0d026180 R15: 00007ffe645e1848 [ 1773.969388][ C0] [ 1773.969393][ C0] [ 1774.527022][ C0] Allocated by task 22491: [ 1774.531417][ C0] kasan_save_stack+0x30/0x50 [ 1774.536073][ C0] kasan_save_track+0x14/0x30 [ 1774.540722][ C0] __kasan_kmalloc+0xaa/0xb0 [ 1774.545286][ C0] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1774.550634][ C0] llc_sap_open+0x120/0x3b0 [ 1774.555111][ C0] llc_ui_autobind.isra.0+0x2ae/0x580 [ 1774.560457][ C0] llc_ui_connect+0x582/0xdb0 [ 1774.565108][ C0] __sys_connect_file+0x141/0x1a0 [ 1774.570121][ C0] __sys_connect+0x141/0x170 [ 1774.574697][ C0] __x64_sys_connect+0x72/0xb0 [ 1774.579441][ C0] do_syscall_64+0x115/0x870 [ 1774.584031][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1774.589905][ C0] [ 1774.592256][ C0] Freed by task 0: [ 1774.595951][ C0] kasan_save_stack+0x30/0x50 [ 1774.600611][ C0] kasan_save_track+0x14/0x30 [ 1774.605267][ C0] kasan_save_free_info+0x3b/0x70 [ 1774.610280][ C0] __kasan_slab_free+0x5f/0x80 [ 1774.615041][ C0] __rcu_free_sheaf_prepare+0x5d/0x2f0 [ 1774.620483][ C0] rcu_free_sheaf+0x1a/0xe0 [ 1774.624960][ C0] rcu_core+0x5a2/0x10d0 [ 1774.629180][ C0] handle_softirqs+0x1ea/0x9b0 [ 1774.633921][ C0] __irq_exit_rcu+0x162/0x210 [ 1774.638586][ C0] irq_exit_rcu+0x9/0x30 [ 1774.642808][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1774.648433][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1774.654391][ C0] [ 1774.656699][ C0] The buggy address belongs to the object at ffff888031928000 [ 1774.656699][ C0] which belongs to the cache kmalloc-2k of size 2048 [ 1774.670739][ C0] The buggy address is located 16 bytes inside of [ 1774.670739][ C0] freed 2048-byte region [ffff888031928000, ffff888031928800) [ 1774.684503][ C0] [ 1774.686800][ C0] The buggy address belongs to the physical page: [ 1774.693184][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803192a000 pfn:0x31928 [ 1774.703223][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1774.711708][ C0] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 1774.720180][ C0] page_type: f5(slab) [ 1774.724132][ C0] raw: 00fff00000000240 ffff88813fe23000 ffffea0001e5e410 ffffea0000dc8010 [ 1774.732697][ C0] raw: ffff88803192a000 0000000800080007 00000000f5000000 0000000000000000 [ 1774.741265][ C0] head: 00fff00000000240 ffff88813fe23000 ffffea0001e5e410 ffffea0000dc8010 [ 1774.749916][ C0] head: ffff88803192a000 0000000800080007 00000000f5000000 0000000000000000 [ 1774.758559][ C0] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1774.767200][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1774.775839][ C0] page dumped because: kasan: bad access detected [ 1774.782233][ C0] page_owner tracks the page as allocated [ 1774.787918][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18267995081, free_ts 0 [ 1774.807603][ C0] post_alloc_hook+0xfd/0x120 [ 1774.812290][ C0] get_page_from_freelist+0xf48/0x3530 [ 1774.817729][ C0] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 1774.823621][ C0] new_slab+0xa2/0x650 [ 1774.827687][ C0] refill_objects+0xe3/0x410 [ 1774.832271][ C0] __pcs_replace_empty_main+0x376/0x680 [ 1774.837798][ C0] __kmalloc_cache_noprof+0x479/0x6c0 [ 1774.843153][ C0] __media_device_register+0x50/0x470 [ 1774.848500][ C0] vivid_probe.cold+0x8835/0x921e [ 1774.853497][ C0] platform_probe+0x106/0x1d0 [ 1774.858152][ C0] really_probe+0x241/0xa60 [ 1774.862626][ C0] __driver_probe_device+0x20e/0x450 [ 1774.867886][ C0] driver_probe_device+0x4a/0x140 [ 1774.872885][ C0] __driver_attach+0x21f/0x5b0 [ 1774.877622][ C0] bus_for_each_dev+0x13e/0x1d0 [ 1774.882448][ C0] bus_add_driver+0x305/0x5b0 [ 1774.887097][ C0] page_owner free stack trace missing [ 1774.892432][ C0] [ 1774.894728][ C0] Memory state around the buggy address: [ 1774.900329][ C0] ffff888031927f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1774.908361][ C0] ffff888031927f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1774.916397][ C0] >ffff888031928000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1774.924430][ C0] ^ [ 1774.928986][ C0] ffff888031928080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1774.937016][ C0] ffff888031928100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1774.945044][ C0] ================================================================== [ 1774.953209][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1774.960408][ C0] CPU: 0 UID: 0 PID: 22514 Comm: syz.0.3853 Not tainted syzkaller #0 PREEMPT(full) [ 1774.969751][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1774.979783][ C0] Call Trace: [ 1774.983038][ C0] [ 1774.985860][ C0] dump_stack_lvl+0x100/0x190 [ 1774.990517][ C0] vpanic+0x552/0x970 [ 1774.994475][ C0] ? __pfx_vpanic+0x10/0x10 [ 1774.998954][ C0] ? mark_held_locks+0x40/0x70 [ 1775.003693][ C0] ? irqentry_exit+0x24d/0xa00 [ 1775.008429][ C0] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 1775.014998][ C0] panic+0xd1/0xe0 [ 1775.018697][ C0] ? __pfx_panic+0x10/0x10 [ 1775.023090][ C0] ? check_panic_on_warn+0x1f/0x90 [ 1775.028203][ C0] check_panic_on_warn.cold+0x19/0x34 [ 1775.033546][ C0] end_report.part.0+0x3a/0x90 [ 1775.038288][ C0] kasan_report.cold+0xe/0x18 [ 1775.042943][ C0] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 1775.049508][ C0] llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 1775.055898][ C0] ? __pfx_llc_conn_ac_send_sabme_cmd_p_set_x+0x10/0x10 [ 1775.062809][ C0] llc_conn_state_process+0x3ec/0x1480 [ 1775.068249][ C0] llc_conn_tmr_common_cb+0x2d4/0x880 [ 1775.073594][ C0] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 1775.079203][ C0] call_timer_fn+0x19a/0x610 [ 1775.083767][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1775.088850][ C0] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 1775.094461][ C0] ? mark_held_locks+0x40/0x70 [ 1775.099201][ C0] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 1775.104809][ C0] __run_timers+0x757/0xb00 [ 1775.109290][ C0] ? __pfx___run_timers+0x10/0x10 [ 1775.114293][ C0] ? ktime_get+0x9f/0x320 [ 1775.118615][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 1775.123621][ C0] run_timer_base+0x114/0x190 [ 1775.128277][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1775.133449][ C0] run_timer_softirq+0x1a/0x50 [ 1775.138185][ C0] handle_softirqs+0x1ea/0x9b0 [ 1775.142925][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1775.148187][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1775.153016][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1775.158626][ C0] __irq_exit_rcu+0x162/0x210 [ 1775.163277][ C0] irq_exit_rcu+0x9/0x30 [ 1775.167493][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1775.173109][ C0] [ 1775.176016][ C0] [ 1775.178917][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1775.184873][ C0] RIP: 0010:preempt_schedule_irq+0x4b/0x90 [ 1775.190661][ C0] Code: 00 00 00 fc ff df 48 89 eb 48 c1 eb 03 48 01 d3 f6 c4 02 75 47 bf 01 00 00 00 e8 d0 b2 19 f6 e8 eb a6 56 f6 fb bf 01 00 00 00 a0 91 ff ff 9c 58 fa f6 c4 02 75 1e bf 01 00 00 00 e8 be 52 19 [ 1775.210242][ C0] RSP: 0000:ffffc9000ea17748 EFLAGS: 00000206 [ 1775.216281][ C0] RAX: 000000000001764d RBX: ffffed1005deb950 RCX: 0000000000000040 [ 1775.224231][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a4e62 RDI: 0000000000000001 [ 1775.232177][ C0] RBP: ffff88802ef5ca80 R08: 0000000000000001 R09: 0000000000000000 [ 1775.240120][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 1775.248063][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1775.256014][ C0] ? preempt_schedule_irq+0x45/0x90 [ 1775.261194][ C0] irqentry_exit+0x205/0xa00 [ 1775.265758][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 1775.271711][ C0] RIP: 0010:llc_sap_state_process+0x241/0x570 [ 1775.277757][ C0] Code: 49 be 00 00 00 00 00 fc ff df 48 8b 04 24 4c 8b 60 10 4d 85 e4 75 2f eb 5f e8 2b c3 5c f8 48 89 ee 4c 89 ef 2e 2e 2e 41 ff d7 <31> ff 41 89 c7 89 c6 e8 83 bd 5c f8 31 c0 45 85 ff 0f 95 c0 09 c3 [ 1775.297337][ C0] RSP: 0000:ffffc9000ea17850 EFLAGS: 00000246 [ 1775.303377][ C0] RAX: 0000000000000002 RBX: 0000000000000000 RCX: ffffc9000ef3c000 [ 1775.311320][ C0] RDX: 0000000000080000 RSI: ffffffff89ad38f0 RDI: ffffffff8c401480 [ 1775.319267][ C0] RBP: ffff88805566f8c0 R08: 0000000000000001 R09: 0000000000000000 [ 1775.327227][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8d1aabc0 [ 1775.335172][ C0] R13: ffff888034e25000 R14: dffffc0000000000 R15: ffffffff89ad3bd0 [ 1775.343117][ C0] ? __pfx_llc_sap_action_send_xid_c+0x10/0x10 [ 1775.349250][ C0] ? llc_prepare_and_xmit+0xa0/0xc0 [ 1775.354426][ C0] llc_ui_sendmsg+0xddc/0x1540 [ 1775.359168][ C0] ? __pfx_llc_ui_sendmsg+0x10/0x10 [ 1775.364342][ C0] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1775.369865][ C0] ____sys_sendmsg+0xa4d/0xbe0 [ 1775.374616][ C0] ? __pfx_llc_ui_sendmsg+0x10/0x10 [ 1775.379789][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1775.385050][ C0] ? rcu_is_watching+0x12/0xc0 [ 1775.389792][ C0] ? rcu_is_watching+0x12/0xc0 [ 1775.394532][ C0] ? ___sys_sendmsg+0x19d/0x1e0 [ 1775.399357][ C0] ? kfree+0x1e5/0x6c0 [ 1775.403406][ C0] ___sys_sendmsg+0x190/0x1e0 [ 1775.408064][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 1775.413241][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1775.418414][ C0] ? __pfx___might_resched+0x10/0x10 [ 1775.423675][ C0] __sys_sendmmsg+0x20c/0x440 [ 1775.428334][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1775.433504][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1775.438420][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1775.444204][ C0] ? kcov_ioctl+0x17a/0x750 [ 1775.448680][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 1775.453596][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1775.458764][ C0] do_syscall_64+0x115/0x870 [ 1775.463325][ C0] ? clear_bhb_loop+0x40/0x90 [ 1775.467976][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1775.473841][ C0] RIP: 0033:0x7f1e0cd9de99 [ 1775.478231][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1775.497813][ C0] RSP: 002b:00007f1e0afb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1775.506201][ C0] RAX: ffffffffffffffda RBX: 00007f1e0d026180 RCX: 00007f1e0cd9de99 [ 1775.514145][ C0] RDX: 03fffffffffffeed RSI: 0000200000001380 RDI: 0000000000000008 [ 1775.522088][ C0] RBP: 00007f1e0ce33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1775.530035][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1775.537981][ C0] R13: 00007f1e0d026218 R14: 00007f1e0d026180 R15: 00007ffe645e1848 [ 1775.545929][ C0] [ 1775.549161][ C0] Kernel Offset: disabled [ 1775.553465][ C0] Rebooting in 86400 seconds..