last executing test programs: 2m16.370375654s ago: executing program 3 (id=48): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40480, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x400001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x4049004) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611d4b8bf", 0x3e}], 0x1}, 0x0) 2m14.907137296s ago: executing program 3 (id=56): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80a451, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, &(0x7f0000000380)=@mmap={0x2, 0x1, 0x4, 0x100000, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0xd, 0x0, "37bb54f0"}}) 2m14.753884388s ago: executing program 3 (id=60): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) fcntl$addseals(r1, 0x409, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 2m14.545672668s ago: executing program 3 (id=61): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000005c0), 0x87af, 0xffffffffffffffff, 0x4}, 0x38) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x7, @mcast2, 0x5}]}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000240)=""/187, 0xbb, 0x0, &(0x7f0000000440)=""/208, 0xd0}}, 0x10) r0 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) 2m14.400887983s ago: executing program 3 (id=63): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) memfd_create(&(0x7f0000000080)='\xff\x00l\x1e\xa00x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8080, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x5, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x6, 0x1001, 0xf8, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x100004, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x6, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0xb, 0x196, 0x7ff, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0xb, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0xc, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x7, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xffdffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r11, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x800, 0x7, 0x0, 0x4, 0x2, 0x8009, 0x7, 0x7, 0x1, 0x3, 0x9a, 0x12, 0x8, 0x40, 0x9, 0x202}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r12 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="c2", 0x1}], 0x1}, 0x20004014) 16.351280269s ago: executing program 1 (id=442): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x14, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = open(&(0x7f0000000280)='.\x00', 0x202001, 0x182) fcntl$notify(r1, 0x402, 0x8000001c) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4000c1, 0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x9, &(0x7f0000000040)=ANY=[], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r1}, 0x94) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x58}, 0x1, 0x400000000000000, 0x0, 0x4044890}, 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'ip6gretap0\x00', 0x4}, 0x18) 16.134006575s ago: executing program 2 (id=443): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x1a, r1, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) 14.72381045s ago: executing program 2 (id=444): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000002c80)='./file0\x00', &(0x7f00000004c0), 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x25, 0x9, 0x0, 0x800, {0x3}, [@nested={0x4, 0x1}]}, 0x18}}, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$nfs4(&(0x7f0000000000)='-.%^%\x00', 0x0, 0x0, 0x20c0c24, &(0x7f00000003c0)={[{'/^-(-\'.*\x03!'}, {'9p\x00'}, {'#j'}, {'./binderfs/binder0\x00'}, {}, {'\x00'}], [{@subj_user={'subj_user', 0x3d, '$.#'}}, {@fsmagic={'fsmagic', 0x3d, 0x8000000000000001}}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@appraise}]}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r2, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) getgroups(0x2, &(0x7f0000000600)=[0x0, 0x0]) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)={'#! ', './bus'}, 0x9) copy_file_range(r4, &(0x7f00000008c0)=0x4, 0xffffffffffffffff, 0x0, 0x8, 0x0) 14.603034076s ago: executing program 1 (id=445): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0xdddd0000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0xb, 0x4f}, {0x5000, 0x2, 0xd, 0x49, 0x8, 0xb, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x60, 0x4, 0x5, 0x81, 0x0, 0xc0, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0xfc, 0x2e, 0x4b}, {0x6000, 0x0, 0xb, 0x1, 0x3, 0x4, 0x1, 0xbf, 0x2, 0x90, 0x1, 0xfc}, {0x5000, 0x2, 0xf, 0xff, 0x3, 0x3, 0x0, 0xb, 0x5, 0x7, 0x9, 0xfd}, {0x100000, 0x41000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x8, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0x60000, 0x300, 0x5, 0x2000, 0x6000, [0x3, 0x400, 0x7, 0xc5]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000500)={0xffffffff, 0x10000, 0x80000001, 0x1, 0x7fd}) 11.860571074s ago: executing program 1 (id=448): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, 0x0, 0x0) bind$802154_dgram(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c010) recvmmsg(r0, 0x0, 0x0, 0x12000, 0x0) 11.645984964s ago: executing program 1 (id=449): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$netlink(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2$9p(&(0x7f0000000200), 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', &(0x7f0000000140), 0x80080a, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180), 0x801000, &(0x7f0000000280)=ANY=[]) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8000) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) r3 = socket(0x1, 0x3, 0x4) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f00010000", 0x23) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x8000) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r4, 0xb00}], 0x1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0d, &(0x7f0000000040)) 8.637864309s ago: executing program 2 (id=452): r0 = syz_open_dev$dvb_dvr(0x0, 0x0, 0x8257f) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000008189899a1fea9fd2d3945b80d6327bd32ac2478b7a5b9b719bccbf84270be553", @ANYRES16, @ANYBLOB="00082bbd7000fddbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c0c4}, 0x20000810) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) r5 = syz_open_dev$media(&(0x7f0000000000), 0x4000009, 0x80a00) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc01c7c02, &(0x7f0000000180)={0x80000000, 0x0, &(0x7f0000000200)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f00000008c0)={r6}) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 8.045779716s ago: executing program 1 (id=455): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x14, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = open(&(0x7f0000000280)='.\x00', 0x202001, 0x182) fcntl$notify(r1, 0x402, 0x8000001c) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4000c1, 0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x9, &(0x7f0000000040)=ANY=[], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r1}, 0x94) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x58}, 0x1, 0x400000000000000, 0x0, 0x4044890}, 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'ip6gretap0\x00', 0x4}, 0x18) 7.434157773s ago: executing program 2 (id=456): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0xe808, 0x40000009, 0xfffffffd, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000005fc0)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/uhci_hcd/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000080)="303030303a303073075585bf323f7c7f2553a6cf6223", 0x16) close(r3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00') socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000019080)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="8f"], 0x10}}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) munlock(&(0x7f00000ef000/0x1000)=nil, 0x1000) 7.389345408s ago: executing program 0 (id=457): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000300), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x201, 0x440) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4c00) pselect6(0x40, &(0x7f0000000180)={0x6, 0x3, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f0000000440)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 6.159686034s ago: executing program 2 (id=458): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0xdddd0000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0xb, 0x4f}, {0x5000, 0x2, 0xd, 0x49, 0x8, 0xb, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x60, 0x4, 0x5, 0x81, 0x0, 0xc0, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0xfc, 0x2e, 0x4b}, {0x6000, 0x0, 0xb, 0x1, 0x3, 0x4, 0x1, 0xbf, 0x2, 0x90, 0x1, 0xfc}, {0x5000, 0x2, 0xf, 0xff, 0x3, 0x3, 0x0, 0xb, 0x5, 0x7, 0x9, 0xfd}, {0x100000, 0x41000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x8, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0x60000, 0x300, 0x5, 0x2000, 0x6000, [0x3, 0x400, 0x7, 0xc5]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000500)={0xffffffff, 0x10000, 0x80000001, 0x1, 0x7fd}) 5.983799976s ago: executing program 0 (id=459): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x0}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4e24, @local}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={r2, r3}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="be177d", 0x3}, {&(0x7f0000000380)="f94b5cd0a63d1f7028d8262c4362f1b488077d57c67985cdf3ed506c64547ef6ab1e61fb602dccdd3690811fd12b3a608a2d93d8fc8d1b4cc05a62ede115be7115ee", 0x42}], 0x2}}], 0x1, 0x40) close(0xffffffffffffffff) r4 = getpid() sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x118f}, 0x0) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) syz_open_dev$video(0x0, 0x1d24, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000100000fc00000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000005520000001100010000000000000000000000000ab98b7290cceee835ab1f351d6ab0fb09435d180cea4a2be2b969b5fcf571963f392e4ecb6e779c649d83dd6be53a85c1a0db833f4b892595ebc7a9ce2f9b5d30e3ae4bb82b8a9fcc45e52656af4963a79924177eb8deddffd016cb3e8e8f98c119ce11f06166a9e2a504a00b7e56add6695ec73e9eca00535532d3f4689fe993db39"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000580000/0x4000)=nil) 5.924545487s ago: executing program 2 (id=460): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0xc114) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000700)='syzkaller\x00', 0x2, 0xc5, &(0x7f0000000740)=""/197, 0x41000, 0x37, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000020701020000000000000000070000090c0007ffff00014000010000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0xc4) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0xb0, &(0x7f0000000380), 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x881, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) openat$hwrng(0xffffff9c, &(0x7f00000005c0), 0xa80, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001714b57900000000000000000800010000000000080003"], 0x20}}, 0x0) 5.046625799s ago: executing program 1 (id=461): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000340)=0xb000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x200, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x1003, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x0, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_ublk_setup_io_uring(0x67bc, &(0x7f0000000440)={0x0, 0x398, 0x80, 0x0, 0x2cd}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) io_setup(0x5, &(0x7f0000000300)=0x0) r6 = eventfd2(0x1, 0x1) r7 = eventfd(0x0) io_submit(r5, 0x5, &(0x7f00000008c0)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x3, r3, &(0x7f00000003c0)="c0d6b3b537ca69319145c49ca57f6ddffedfd38892b5b116eb1d0a60af5c3c015e63ae630c389d4b30385d12077e1396787169e912f07a55e5bb20757733ac7dd0f0", 0x42, 0x200, 0x0, 0x0, r6}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x6, 0x400, r3, &(0x7f0000000500)="a5e264c9befea0ddbf0626793fa80e04dd100a76dfa89d3884f22c59dc803495d26643d5479b65d5004830eb6416309cb9b9382ff27e9d632ca7f46219bea346f5c2ec75e80f851ddb746bde54db1ebd1fd61572f16fbce644e2e65981ea4a7cb9cc5fd69aa16704d0967fed771cfe3dcc8ed54716bf6c6c26be9802613b3353cd3896c37579635351dbf9b3a1a8380e7c846f01fdfcd49a64e6fa1f72f43929e741755204a3bdabfb30355d86da7f7bf577d370432ff04b9a09ac94fd8768a261a15931", 0xc4, 0x2, 0x0, 0x2, r7}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1ff, r4, &(0x7f0000000640)="97b6dfc4365e7b0aaef99d95b5f025b08100644c06cd50df15484508c2589a99ab0fb62c30f6fe2d0c0fe1e6c25797acc42501", 0x33, 0xbe41}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x6, 0x0, r1, &(0x7f00000006c0)="2ee09a1bbb180990f5e09ea6e170fb1e6a472841deb0c9f8fb6932c9b2d7ba74066c7b69e219f637e377be16bb8e5882d2358eb8908fa67c5fae922cc068de485b0a2e5693ec71429f4b3f65962c7a8854a3d62126efea", 0x57, 0x5, 0x0, 0x1}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x9, r3, &(0x7f0000000780)="74e845f4cdec62daf0fecc9d190e258710d2ba9473cd38a8318c254537d23be3b234d26b530cf7b2c0407091dec7fdb9fb433b1650f54f9a348ea7f99e709da9bf284c45883135a9f17ef181e2a61b66a500854a2f95a80f87d8faa8bf390411fb659409b7c59d6a852b23549d4b6e8f7bebbeb253f35f3ce7786709544b835c0fbebd8aa2a98507caa621676fa84d9a35929f53525d5459dac4c91ce7a0ff577e4e7ea9801097a005c213469c5f3e3f7a6518acbabc3757e08012b5b0f11ba6b09459f18429c697a87734d69b3e4c247a3c4586babdc6e98332b2a99118b5be31d45312be6b3afd580c716ba4", 0xed, 0x7fffffffffffffff, 0x0, 0x1}]) r8 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r8, 0x4014563c, &(0x7f00000000c0)={0x1, {0xf8000002, 0x8b8, 0xc4f, 0x6}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/237, 0xed}], 0x1, 0x8000, 0x3) 4.988648308s ago: executing program 4 (id=462): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000002c80)='./file0\x00', &(0x7f00000004c0), 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x25, 0x9, 0x0, 0x800, {0x3}, [@nested={0x4, 0x1}]}, 0x18}}, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$nfs4(&(0x7f0000000000)='-.%^%\x00', 0x0, 0x0, 0x20c0c24, &(0x7f00000003c0)={[{'/^-(-\'.*\x03!'}, {'9p\x00'}, {'#j'}, {'./binderfs/binder0\x00'}, {}, {'\x00'}], [{@subj_user={'subj_user', 0x3d, '$.#'}}, {@fsmagic={'fsmagic', 0x3d, 0x8000000000000001}}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@appraise}]}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r2, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) getgroups(0x2, &(0x7f0000000600)=[0x0, 0x0]) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)={'#! ', './bus'}, 0x9) copy_file_range(r4, &(0x7f00000008c0)=0x4, 0xffffffffffffffff, 0x0, 0x8, 0x0) 4.987688643s ago: executing program 5 (id=463): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(&(0x7f0000000440)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000005c0)='11', 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') 4.772009919s ago: executing program 5 (id=464): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x8b}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lstat(&(0x7f0000000000)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000003, {0x1, 0x1fffffffe, 0x40000a, 0x6, 0x8, 0xa, {0x1, 0x8010001, 0x4d0, 0x40d, 0xffff, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r2, r3, 0x200003d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x26, 0x7fff, 0x61001838, 0x0, 0xfffc, 0x48, 0x5d2186cc, 0x0, 0x0, 0x80, 0x10001}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x260a41, 0xb3836f6d7a15f29) 4.444103663s ago: executing program 4 (id=465): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$netlink(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2$9p(&(0x7f0000000200), 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', &(0x7f0000000140), 0x80080a, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180), 0x801000, &(0x7f0000000280)=ANY=[]) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8000) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) r3 = socket(0x1, 0x3, 0x4) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f00010000", 0x23) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x8000) openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000002200)="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", 0x650) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0d, &(0x7f0000000040)) 4.244432584s ago: executing program 0 (id=466): r0 = syz_open_dev$dvb_dvr(0x0, 0x0, 0x8257f) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000008189899a1fea9fd2d3945b80d6327bd32ac2478b7a5b9b719bccbf84270be553", @ANYRES16, @ANYBLOB="00082bbd7000fddbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c0c4}, 0x20000810) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) r5 = syz_open_dev$media(&(0x7f0000000000), 0x4000009, 0x80a00) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc01c7c02, &(0x7f0000000180)={0x80000000, 0x0, &(0x7f0000000200)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f00000008c0)={r6}) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 3.167124181s ago: executing program 5 (id=467): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b2781a05df6b38f458fe8a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972ebde3fa90be5547e19b635d3b468d8cb58dd8d5e5aa", 0xd9}, {&(0x7f0000000640)="18f2539a86f4267acf60e40dadcc211bb186706861b663e404ae5430d948a3deeb5982fbb1551c83edaad587e700949a9d32f5e7ab7cf7f52b86771efac9c04f3e30497f94e49127658062a15683e89b0aceb57d125d3b4ea3d1ad05f4e14c85034917bea1f128a1f6f3f33e7fd479c0c7124b558f472800bd87b2b9bb1221098d2ed2f09ae6829354166d4aaa99ece4c00d202c", 0x94}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000ac0)="a19168e24152c670ecff4e0ee89533187a9206e8b223bed2e89af6709b054a05bafbd8bdb01fe87a3b63a17eff007ee93b40c121e355801159a45e36111175f8d8453960c864bdcf3826be3ffadaa7dba08508123324e0a45a93818ebf5c0fbac285cd0f399da8e4257170efbebf704e9c42cd6e193c280eac0e484d38db0e45", 0x80}], 0x1}}], 0x2, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb7892513e4d3307f2dc6eca9986be03dfdd7dea5a59b3af0f59c39d0edaaf273933db78b8653e664f28ca6a3f8803662958348e8bef4a1370e5fc0c803eeb3e1154bab13b3", 0xbc}, {&(0x7f0000001000)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000", 0xf7}, {&(0x7f0000000140)="641a6a2b863c080000003a3f97a834ebb75a925ab48c8442", 0x18}, {&(0x7f00000001c0)="985e44efeaab001cabcf3d8673c3a254a9a2d3", 0x13}], 0x4}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001e00)="03deba91c25995772ba981874cf3617e5a5f26d296be0bcb1ab619b901e1588b23e68431025b444671a918fd8ca862eb4494e52e10561f1dcac08771bcb099d2ac19ac81be56580fbf8a31fc043df05d4f9a1ca963f95a0dad514caf83c851eec544ac66993e0aa8aac7013f19af84202254eadfd12b56f2ebc32396500466e9f16d358dd5354ef69bb8caedf66a220372311a092a4f03a336f27222302c6364b738a58c3b8e99d1a40552dfad46ba272544c0b39ebbca7d1da95fc74f6010956a8bb3165ee8db3867d1f92176de044693fa090b97bcadedd59b7e509e0d60017b6a3b025aac6650826d7f3406d4206b4d714c620225b5797e60513988e244874ac2a0ac80d18c707edf4999d1beaf841f2b8dd9a3", 0x115}], 0x1}}], 0x2, 0x4000900) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.061061011s ago: executing program 0 (id=468): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0xe808, 0x40000009, 0xfffffffd, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000005fc0)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/uhci_hcd/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000080)="303030303a303073075585bf323f7c7f2553a6cf6223", 0x16) close(r3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00') socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000019080)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="8f"], 0x10}}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) munlock(&(0x7f00000ef000/0x1000)=nil, 0x1000) 2.947505706s ago: executing program 5 (id=469): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000300), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x201, 0x440) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4c00) pselect6(0x40, &(0x7f0000000180)={0x6, 0x3, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f0000000440)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 1.616358711s ago: executing program 0 (id=470): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0xdddd0000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0xb, 0x4f}, {0x5000, 0x2, 0xd, 0x49, 0x8, 0xb, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x60, 0x4, 0x5, 0x81, 0x0, 0xc0, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0xfc, 0x2e, 0x4b}, {0x6000, 0x0, 0xb, 0x1, 0x3, 0x4, 0x1, 0xbf, 0x2, 0x90, 0x1, 0xfc}, {0x5000, 0x2, 0xf, 0xff, 0x3, 0x3, 0x0, 0xb, 0x5, 0x7, 0x9, 0xfd}, {0x100000, 0x41000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x8, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0x60000, 0x300, 0x5, 0x2000, 0x6000, [0x3, 0x400, 0x7, 0xc5]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000500)={0xffffffff, 0x10000, 0x80000001, 0x1, 0x7fd}) 1.139576579s ago: executing program 5 (id=471): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x14, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = open(&(0x7f0000000280)='.\x00', 0x202001, 0x182) fcntl$notify(r1, 0x402, 0x8000001c) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4000c1, 0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x9, &(0x7f0000000040)=ANY=[], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r1}, 0x94) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x58}, 0x1, 0x400000000000000, 0x0, 0x4044890}, 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'ip6gretap0\x00', 0x4}, 0x18) 1.038411171s ago: executing program 4 (id=472): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0x8004510a, &(0x7f0000000000)) 101.95547ms ago: executing program 0 (id=473): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdir(&(0x7f0000000040)='sys\x00', 0x1ff) r3 = socket$netlink(0x10, 0x3, 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r3) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='sys/bus/pci/devices/0000:00:04.0/config\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000180)='\x00\x00', 0x2, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='1', 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x4}) r6 = syz_io_uring_setup(0x34, &(0x7f00000002c0)={0x0, 0x4000880e, 0x13100, 0x0, 0x4, 0x0, r5}, &(0x7f0000000280), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x21, &(0x7f0000000440), 0x1f) ioctl(r2, 0x4048aec9, &(0x7f0000000200)) 101.723301ms ago: executing program 4 (id=474): syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) socket(0x28, 0x5, 0x0) setns(0xc9, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket(0x8, 0x5, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f0000000300)={0x8b8d, 0x0, 0x10, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x2, 0x1000, 0x0, 0x83, 0x7, 0x3}) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=475): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a08000101000000000109021200010100803209"], 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='0\x00', 0x2) kernel console output (not intermixed with test programs): ridge_slave_1) entered blocking state [ 76.416015][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.487349][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.542196][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.549387][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.622350][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.629474][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.852803][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.001060][ T5606] veth0_vlan: entered promiscuous mode [ 77.031439][ T5606] veth1_vlan: entered promiscuous mode [ 77.145273][ T5606] veth0_macvtap: entered promiscuous mode [ 77.188864][ T5606] veth1_macvtap: entered promiscuous mode [ 77.265186][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.277569][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.310137][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.344611][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.474075][ T5618] veth0_vlan: entered promiscuous mode [ 77.527384][ T5618] veth1_vlan: entered promiscuous mode [ 77.547176][ T5607] veth0_vlan: entered promiscuous mode [ 77.579896][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.613955][ T5607] veth1_vlan: entered promiscuous mode [ 77.639070][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.652377][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.661832][ T270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.676077][ T270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.767093][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.787938][ T5618] veth0_macvtap: entered promiscuous mode [ 77.790603][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.799608][ T5618] veth1_macvtap: entered promiscuous mode [ 77.830066][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 77.830079][ T30] audit: type=1400 audit(1785715767.110:152): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.8VNzRA/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 77.839778][ T5615] veth0_vlan: entered promiscuous mode [ 77.878711][ T5609] Bluetooth: hci0: command tx timeout [ 77.885282][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.897682][ T30] audit: type=1400 audit(1785715767.150:153): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.933056][ T5607] veth0_macvtap: entered promiscuous mode [ 77.934355][ T5609] Bluetooth: hci2: command tx timeout [ 77.944832][ T5609] Bluetooth: hci1: command tx timeout [ 77.950635][ T30] audit: type=1400 audit(1785715767.160:154): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.8VNzRA/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 77.957752][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.976502][ T30] audit: type=1400 audit(1785715767.160:155): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 78.005644][ T30] audit: type=1400 audit(1785715767.170:156): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.8VNzRA/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 78.032682][ T50] Bluetooth: hci3: command tx timeout [ 78.038145][ T30] audit: type=1400 audit(1785715767.170:157): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.8VNzRA/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 78.042556][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.066017][ T30] audit: type=1400 audit(1785715767.180:158): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 78.081882][ T50] Bluetooth: hci4: command tx timeout [ 78.105085][ T30] audit: type=1400 audit(1785715767.180:159): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 78.106841][ T5607] veth1_macvtap: entered promiscuous mode [ 78.132011][ T30] audit: type=1400 audit(1785715767.180:160): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="gadgetfs" ino=7488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 78.156779][ T30] audit: type=1400 audit(1785715767.190:161): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 78.158032][ T5606] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.190361][ T5615] veth1_vlan: entered promiscuous mode [ 78.203591][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.232686][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.294635][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.311417][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.344200][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.757946][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.766689][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.781261][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.801142][ T5615] veth0_macvtap: entered promiscuous mode [ 78.850796][ T5605] veth0_vlan: entered promiscuous mode [ 78.858419][ T5615] veth1_macvtap: entered promiscuous mode [ 78.894294][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.911970][ T5605] veth1_vlan: entered promiscuous mode [ 78.917479][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.933144][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.009780][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.017976][ T5806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 79.077486][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.096338][ T5808] capability: warning: `syz.3.4' uses deprecated v2 capabilities in a way that may be insecure [ 79.128630][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.149450][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.237941][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.247381][ T5605] veth0_macvtap: entered promiscuous mode [ 79.261038][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.278495][ T5605] veth1_macvtap: entered promiscuous mode [ 79.362843][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.377359][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.387714][ T5810] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 79.438704][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.510923][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.514984][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.531100][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.607253][ T50] Bluetooth: Frame is too long (len 255, expected len 4) [ 79.690966][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.699265][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.711836][ T5714] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.719913][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.729169][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.901631][ T5714] usb 3-1: Using ep0 maxpacket: 8 [ 79.921646][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.931392][ T50] Bluetooth: hci0: command tx timeout [ 79.977128][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.005893][ T5714] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 80.014214][ T50] Bluetooth: hci1: command tx timeout [ 80.014247][ T50] Bluetooth: hci2: command tx timeout [ 80.085499][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.121497][ T5609] Bluetooth: hci3: command tx timeout [ 80.176578][ T5714] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 80.261962][ T5609] Bluetooth: hci4: command tx timeout [ 80.275028][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.349823][ T5714] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 80.452996][ T5714] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 80.531356][ T5714] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 80.576869][ T5714] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.627205][ T5714] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 80.658113][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.957388][ T5714] usb 3-1: usb_control_msg returned -71 [ 80.963360][ T5714] usbtmc 3-1:16.0: can't read capabilities [ 81.104057][ T5714] usb 3-1: USB disconnect, device number 2 [ 81.125803][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.134703][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.144000][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.144474][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.224289][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.687806][ T9] cfg80211: failed to load regulatory.db [ 81.719308][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.875182][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.203867][ T5841] netlink: 'syz.3.14': attribute type 1 has an invalid length. [ 82.279282][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.313912][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.426401][ T5844] Zero length message leads to an empty skb [ 82.950659][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 82.950676][ T30] audit: type=1400 audit(1785715772.230:202): avc: denied { write } for pid=5846 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 83.137670][ T30] audit: type=1400 audit(1785715772.420:203): avc: denied { mount } for pid=5846 comm="syz.2.15" name="/" dev="configfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 83.181315][ T30] audit: type=1400 audit(1785715772.420:204): avc: denied { search } for pid=5846 comm="syz.2.15" name="/" dev="configfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.217416][ T30] audit: type=1400 audit(1785715772.420:205): avc: denied { search } for pid=5846 comm="syz.2.15" name="usb_gadget" dev="configfs" ino=1711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.252810][ T5853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16'. [ 83.265710][ T30] audit: type=1400 audit(1785715772.420:206): avc: denied { write search } for pid=5846 comm="syz.2.15" name="usb_gadget" dev="configfs" ino=1711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.309524][ T30] audit: type=1400 audit(1785715772.450:207): avc: denied { add_name } for pid=5846 comm="syz.2.15" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.330324][ T30] audit: type=1400 audit(1785715772.450:208): avc: denied { create } for pid=5846 comm="syz.2.15" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 83.350296][ T30] audit: type=1400 audit(1785715772.480:209): avc: denied { search } for pid=5846 comm="syz.2.15" name="/" dev="configfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.377722][ T30] audit: type=1400 audit(1785715772.480:210): avc: denied { search } for pid=5846 comm="syz.2.15" name="usb_gadget" dev="configfs" ino=1711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.448046][ T5855] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 83.528512][ T30] audit: type=1400 audit(1785715772.480:211): avc: denied { search } for pid=5846 comm="syz.2.15" name="g1" dev="configfs" ino=8156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.528570][ T5859] netlink: 80 bytes leftover after parsing attributes in process `syz.3.18'. [ 83.587445][ T5859] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18'. [ 83.597858][ T5859] netlink: 64 bytes leftover after parsing attributes in process `syz.3.18'. [ 83.612206][ T5861] process 'syz.2.19' launched './file1' with NULL argv: empty string added [ 83.615120][ T5863] netlink: 44 bytes leftover after parsing attributes in process `syz.4.20'. [ 83.724443][ T5866] input: syz0 as /devices/virtual/input/input5 [ 83.741685][ T5727] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 83.900979][ T5727] usb 1-1: unable to get BOS descriptor or descriptor too short [ 83.901396][ T5819] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 83.911734][ T5727] usb 1-1: not running at top speed; connect to a high speed hub [ 84.006595][ T5727] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 84.038226][ T5727] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 84.076708][ T5727] usb 1-1: config 14 has no interface number 0 [ 84.102559][ T5727] usb 1-1: config 14 has no interface number 1 [ 84.246153][ T5727] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 84.480541][ T5727] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 84.661235][ T5727] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 84.715723][ T5727] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 84.771237][ T5727] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 84.790711][ T5727] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 84.825833][ T5727] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.831360][ T5819] usb 3-1: Using ep0 maxpacket: 8 [ 84.846771][ T5819] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.861794][ T5819] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.875347][ T5819] usb 3-1: config 0 interface 0 has no altsetting 0 [ 84.877431][ T5727] usb 1-1: config 14 interface 57 has no altsetting 0 [ 84.882236][ T5819] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 84.903799][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.919508][ T5819] usb 3-1: config 0 descriptor?? [ 84.924707][ T5727] usb 1-1: config 14 interface 228 has no altsetting 0 [ 84.959182][ T5727] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 84.987406][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.016439][ T5880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25'. [ 85.072592][ T5727] usb 1-1: Product: syz [ 85.076777][ T5727] usb 1-1: Manufacturer: syz [ 85.086620][ T5727] usb 1-1: SerialNumber: syz [ 85.398231][ T5886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.28'. [ 85.416816][ T5819] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 85.433011][ T5819] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 85.454720][ T5819] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 85.481491][ T5819] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 85.504830][ T5819] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 85.629119][ T5727] legousbtower 1-1:14.57: interrupt endpoints not found [ 85.661691][ T5819] mcp2221 0003:04D8:00DD.0001: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 86.139120][ T5727] legousbtower 1-1:14.228: get version request failed: -71 [ 86.166700][ T5727] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -71 [ 86.228639][ T5727] usb 1-1: USB disconnect, device number 2 [ 88.317863][ T5819] usb 3-1: USB disconnect, device number 3 [ 88.405894][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 88.405909][ T30] audit: type=1400 audit(1785715777.690:290): avc: denied { mounton } for pid=5910 comm="syz.3.37" path="/12/mnt" dev="tmpfs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 88.438931][ T5911] fuse: Unknown parameter 'group_id00000000000000000000' [ 88.453699][ T5914] netlink: 40 bytes leftover after parsing attributes in process `syz.2.36'. [ 88.738312][ T30] audit: type=1400 audit(1785715778.020:291): avc: denied { read } for pid=5919 comm="syz.0.39" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.810122][ T30] audit: type=1400 audit(1785715778.040:292): avc: denied { bind } for pid=5921 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.034214][ T30] audit: type=1400 audit(1785715778.050:293): avc: denied { setopt } for pid=5921 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.172289][ T5923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40'. [ 89.278892][ T30] audit: type=1804 audit(1785715778.150:294): pid=5927 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.41" name="/newroot/6/file0" dev="tmpfs" ino=51 res=1 errno=0 [ 89.529202][ T30] audit: type=1400 audit(1785715778.160:295): avc: denied { write } for pid=5922 comm="syz.1.41" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 89.847251][ T30] audit: type=1400 audit(1785715778.410:296): avc: denied { create } for pid=5916 comm="syz.4.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.096025][ T30] audit: type=1400 audit(1785715778.450:297): avc: denied { ioctl } for pid=5916 comm="syz.4.38" path="socket:[9376]" dev="sockfs" ino=9376 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.785404][ T30] audit: type=1400 audit(1785715778.470:298): avc: denied { bind } for pid=5916 comm="syz.4.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.157996][ T30] audit: type=1400 audit(1785715778.480:299): avc: denied { setopt } for pid=5916 comm="syz.4.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.194842][ T5963] fuse: Unknown parameter 'group_id00000000000000000000' [ 92.358855][ T5968] netlink: 40 bytes leftover after parsing attributes in process `syz.4.52'. [ 92.451837][ T805] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 92.537035][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54'. [ 92.647641][ T805] usb 3-1: unable to get BOS descriptor or descriptor too short [ 92.689469][ T805] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 92.717916][ T805] usb 3-1: can't read configurations, error -71 [ 92.981923][ T5714] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.053879][ T5991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.62'. [ 93.189789][ T5714] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 93.222592][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 93.250762][ T5714] usb 1-1: Product: syz [ 93.279812][ T5714] usb 1-1: Manufacturer: syz [ 93.311293][ T5734] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.221114][ T5714] usb 1-1: SerialNumber: syz [ 94.252805][ T5714] usb 1-1: config 0 descriptor?? [ 94.263769][ T5714] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 94.271795][ T5714] dvb-usb: bulk message failed: -22 (2/0) [ 94.306283][ T5714] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 94.316542][ T5714] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 94.361272][ T5734] usb 4-1: Using ep0 maxpacket: 32 [ 94.377128][ T5734] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 94.414604][ T5714] usb 1-1: media controller created [ 94.419900][ T5734] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.439046][ T5734] usb 4-1: config 0 has no interface number 0 [ 94.447665][ T5714] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 94.456396][ T5734] usb 4-1: config 0 interface 12 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 94.486835][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 94.486848][ T30] audit: type=1400 audit(1785715783.770:332): avc: denied { read } for pid=5978 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 94.656579][ T5734] usb 4-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.690708][ T5714] cxusb: set interface failed [ 94.696999][ T5734] usb 4-1: config 0 interface 12 has no altsetting 0 [ 94.705785][ T5714] dvb-usb: bulk message failed: -22 (1/0) [ 94.716367][ T5734] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 94.735473][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.752642][ T5734] usb 4-1: Product: syz [ 94.766495][ T5734] usb 4-1: Manufacturer: syz [ 94.778283][ T5714] DVB: Unable to find symbol mt352_attach() [ 94.814038][ T5714] dvb-usb: bulk message failed: -22 (5/0) [ 94.832282][ T5734] usb 4-1: SerialNumber: syz [ 94.850649][ T5734] usb 4-1: config 0 descriptor?? [ 94.855684][ T5714] zl10353_read_register: readreg error (reg=127, ret==-121) [ 94.873877][ T5734] f81534 4-1:0.12: required endpoints missing [ 94.880958][ T5714] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 95.022859][ T5714] rc_core: IR keymap rc-dvico-mce not found [ 95.033122][ T5714] Registered IR keymap rc-empty [ 95.075210][ T5714] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 95.113499][ T5714] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input6 [ 95.172188][ T5714] dvb-usb: schedule remote query interval to 100 msecs. [ 95.200641][ T5714] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 95.302789][ T5734] dvb-usb: bulk message failed: -22 (1/0) [ 95.332347][ T5714] usb 1-1: USB disconnect, device number 3 [ 95.470118][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.68'. [ 95.499731][ T5714] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 95.878018][ T30] audit: type=1400 audit(1785715785.160:333): avc: denied { search } for pid=6028 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.977059][ T30] audit: type=1400 audit(1785715785.160:334): avc: denied { search } for pid=6028 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.000880][ T6031] gadgetfs: bound to dummy_udc driver [ 96.068831][ T30] audit: type=1400 audit(1785715785.160:335): avc: denied { search } for pid=6028 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.137402][ T30] audit: type=1400 audit(1785715785.160:336): avc: denied { search } for pid=6028 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.221874][ T30] audit: type=1400 audit(1785715785.220:337): avc: denied { read } for pid=6032 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.263936][ T5714] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 96.319600][ T30] audit: type=1400 audit(1785715785.220:338): avc: denied { read open } for pid=6032 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.329865][ C0] gadgetfs: connected [ 96.349868][ T5714] gadgetfs: disconnected [ 96.429044][ T30] audit: type=1400 audit(1785715785.220:339): avc: denied { getattr } for pid=6032 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.454626][ T30] audit: type=1400 audit(1785715785.250:340): avc: denied { getattr } for pid=6032 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1808 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.642277][ T30] audit: type=1400 audit(1785715785.320:341): avc: denied { write } for pid=6037 comm="syz.1.73" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 97.531557][ T993] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 97.828023][ T993] usb 5-1: unable to get BOS descriptor or descriptor too short [ 98.070075][ T993] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 98.189767][ T993] usb 5-1: can't read configurations, error -71 [ 99.702414][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.79'. [ 99.717041][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 99.717056][ T30] audit: type=1400 audit(1785715789.000:359): avc: denied { write } for pid=6028 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.754690][ T30] audit: type=1400 audit(1785715789.000:360): avc: denied { add_name } for pid=6028 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.779308][ T30] audit: type=1400 audit(1785715789.000:361): avc: denied { create } for pid=6028 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.802448][ T30] audit: type=1400 audit(1785715789.000:362): avc: denied { write } for pid=6028 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=2162 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.906352][ T30] audit: type=1400 audit(1785715789.000:363): avc: denied { append } for pid=6028 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2162 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.982176][ T30] audit: type=1400 audit(1785715789.220:364): avc: denied { write } for pid=6085 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.071326][ T805] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 100.087729][ T5707] usb 4-1: USB disconnect, device number 2 [ 100.103211][ T30] audit: type=1400 audit(1785715789.220:365): avc: denied { remove_name } for pid=6085 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2162 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.192618][ T30] audit: type=1400 audit(1785715789.220:366): avc: denied { unlink } for pid=6085 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2162 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 100.237905][ T30] audit: type=1400 audit(1785715789.250:367): avc: denied { write } for pid=6086 comm="syz.4.81" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 100.261884][ T805] usb 3-1: Using ep0 maxpacket: 16 [ 100.468059][ T30] audit: type=1400 audit(1785715789.480:368): avc: denied { create } for pid=6092 comm="syz.0.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.731320][ T12] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.891421][ T48] netdevsim netdevsim10 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.119825][ T805] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 101.130849][ T805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.140661][ T805] usb 3-1: Product: syz [ 101.144882][ T805] usb 3-1: Manufacturer: syz [ 101.149477][ T805] usb 3-1: SerialNumber: syz [ 101.219135][ T6107] gadgetfs: bound to dummy_udc driver [ 101.366352][ T805] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 101.409581][ T805] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 101.438321][ T805] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 101.455056][ T805] usb 3-1: media controller created [ 101.484405][ T5707] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 101.491417][ T5827] netdevsim netdevsim10 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.492279][ C1] gadgetfs: connected [ 101.504370][ T6106] gadgetfs: suspended from state 3 [ 101.509611][ T6106] gadgetfs: disconnected [ 101.563570][ T5827] netdevsim netdevsim10 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.580980][ T6082] netlink: 'syz.2.80': attribute type 1 has an invalid length. [ 101.616990][ T805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 101.872516][ T805] zl10353_read_register: readreg error (reg=127, ret==-110) [ 101.912526][ T805] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 102.091869][ T270] netdevsim netdevsim10 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.162378][ T805] usb 3-1: USB disconnect, device number 6 [ 102.162404][ T270] netdevsim netdevsim10 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.212880][ T270] netdevsim netdevsim10 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.236577][ T270] netdevsim netdevsim10 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.280434][ T270] netdevsim netdevsim10 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.314793][ T270] netdevsim netdevsim10 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.340871][ T270] netdevsim netdevsim10 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.451408][ T270] netdevsim netdevsim10 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.660915][ T270] netdevsim netdevsim10 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.737142][ T6154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.91'. [ 102.933057][ T270] netdevsim netdevsim10 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.853539][ T270] netdevsim netdevsim10 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.901534][ T270] netdevsim netdevsim10 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.957473][ T270] netdevsim netdevsim10 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.963071][ T6168] netlink: 44 bytes leftover after parsing attributes in process `syz.4.96'. [ 104.019413][ T270] netdevsim netdevsim10 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.072579][ T6098] netdevsim netdevsim10 eth17 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.189117][ T6098] netdevsim netdevsim10 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.241517][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 104.308619][ T6098] netdevsim netdevsim10 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.400682][ T6098] netdevsim netdevsim10 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.417758][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 104.443597][ T9] usb 3-1: config index 0 descriptor too short (expected 19, got 18) [ 104.472644][ T9] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 104.492072][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.544369][ T9] usb 3-1: Product: syz [ 104.635834][ T6098] netdevsim netdevsim10 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.637977][ T9] usb 3-1: Manufacturer: syz [ 104.724453][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 104.724463][ T30] audit: type=1400 audit(1785715794.010:385): avc: denied { write } for pid=6188 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.831476][ T6098] netdevsim netdevsim10 eth12 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.843535][ T30] audit: type=1400 audit(1785715794.130:386): avc: denied { write } for pid=6177 comm="syz.0.98" name="functions" dev="configfs" ino=8157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.895805][ T9] usb 3-1: SerialNumber: syz [ 104.922401][ T30] audit: type=1400 audit(1785715794.170:387): avc: denied { read } for pid=6177 comm="syz.0.98" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 104.963302][ T9] usb 3-1: config 0 descriptor?? [ 105.017714][ T9] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 105.033871][ T30] audit: type=1400 audit(1785715794.170:388): avc: denied { open } for pid=6177 comm="syz.0.98" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 105.035503][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 105.074848][ T30] audit: type=1400 audit(1785715794.170:389): avc: denied { write } for pid=6177 comm="syz.0.98" name="header" dev="configfs" ino=10653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 105.115226][ T30] audit: type=1400 audit(1785715794.170:390): avc: denied { write } for pid=6177 comm="syz.0.98" name="fs" dev="configfs" ino=10660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 105.187714][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 105.216505][ T6171] dvb-usb: bulk message failed: -22 (79/0) [ 105.230027][ T6098] netdevsim netdevsim10 eth11 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.264035][ T9] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 105.275065][ T30] audit: type=1400 audit(1785715794.170:391): avc: denied { create } for pid=6177 comm="syz.0.98" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 105.334916][ T30] audit: type=1400 audit(1785715794.170:392): avc: denied { write } for pid=6177 comm="syz.0.98" name="fs" dev="configfs" ino=10660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 105.379923][ T9] usb 3-1: media controller created [ 105.394601][ T30] audit: type=1400 audit(1785715794.190:393): avc: denied { write } for pid=6177 comm="syz.0.98" name="uvc.usb0" dev="configfs" ino=10638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 105.451403][ T30] audit: type=1400 audit(1785715794.500:394): avc: denied { append } for pid=6169 comm="syz.2.95" name="i2c-1" dev="devtmpfs" ino=2818 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.517797][ T6098] netdevsim netdevsim10 eth10 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.562523][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.632538][ T6098] netdevsim netdevsim10 eth9 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.769668][ T9] usb 3-1: selecting invalid altsetting 7 [ 106.244945][ T9] cxusb: set interface failed [ 106.259554][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 106.324867][ T6098] netdevsim netdevsim10 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.385979][ T9] DVB: Unable to find symbol lgdt330x_attach() [ 106.405753][ T9] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 106.417083][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.103'. [ 106.561963][ T9] rc_core: IR keymap rc-dvico-portable not found [ 106.610922][ T9] Registered IR keymap rc-empty [ 106.629734][ T6098] netdevsim netdevsim10 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.637153][ T9] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 106.710743][ T9] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input8 [ 107.015296][ T6098] netdevsim netdevsim10 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.218110][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 107.809571][ T9] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 107.872449][ T9] usb 3-1: USB disconnect, device number 7 [ 107.898294][ T6226] netlink: 40 bytes leftover after parsing attributes in process `syz.0.100'. [ 107.946903][ T6098] netdevsim netdevsim10 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.979093][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.100'. [ 108.110135][ T6098] netdevsim netdevsim10 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.158239][ T9] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 109.187383][ T6098] netdevsim netdevsim10 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.537339][ T6251] syzkaller0: entered promiscuous mode [ 109.559282][ T6251] syzkaller0: entered allmulticast mode [ 109.720983][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 110.151373][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 110.151405][ T30] audit: type=1326 audit(1785715799.300:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.0.115" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9af9e019 code=0x7ffc0000 [ 110.398100][ T30] audit: type=1326 audit(1785715799.300:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.0.115" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9af9e019 code=0x7ffc0000 [ 110.449067][ T30] audit: type=1326 audit(1785715799.310:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.0.115" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8e9af9e019 code=0x7ffc0000 [ 110.475954][ T30] audit: type=1326 audit(1785715799.310:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.0.115" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9af9e019 code=0x7ffc0000 [ 110.511039][ T30] audit: type=1326 audit(1785715799.310:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.0.115" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9af9e019 code=0x7ffc0000 [ 110.601287][ T30] audit: type=1326 audit(1785715799.310:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.0.115" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f8e9af9e019 code=0x7ffc0000 [ 110.701387][ T30] audit: type=1326 audit(1785715799.310:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.0.115" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9af9e019 code=0x7ffc0000 [ 110.729842][ T30] audit: type=1326 audit(1785715799.310:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.0.115" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9af9e019 code=0x7ffc0000 [ 110.780004][ T6282] 9pnet_virtio: no channels available for device syz [ 110.800998][ T30] audit: type=1326 audit(1785715799.310:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.0.115" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e9af9e019 code=0x7ffc0000 [ 110.894555][ T30] audit: type=1326 audit(1785715799.310:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.0.115" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9af9e019 code=0x7ffc0000 [ 112.311146][ T6301] Invalid ELF header magic: != ELF [ 113.134110][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.125'. [ 115.475855][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 115.475870][ T30] audit: type=1400 audit(1785715804.760:477): avc: denied { ioctl } for pid=6323 comm="syz-executor" path="socket:[11480]" dev="sockfs" ino=11480 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 115.514058][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 115.523358][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 115.533185][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.542029][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.549512][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 116.023452][ T30] audit: type=1400 audit(1785715805.310:478): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 116.047549][ T6098] netdevsim netdevsim10 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.163512][ T6098] netdevsim netdevsim10 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.286966][ T6098] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.390471][ T6098] netdevsim netdevsim10: probe with driver netdevsim failed with error -12 [ 116.537049][ T6339] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.555276][ T6343] sctp: [Deprecated]: syz.1.135 (pid 6343) Use of struct sctp_assoc_value in delayed_ack socket option. [ 116.555276][ T6343] Use struct sctp_sack_info instead [ 116.653500][ T30] audit: type=1400 audit(1785715805.930:479): avc: denied { append } for pid=6342 comm="syz.1.135" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.802327][ T6346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.136'. [ 116.923801][ T6339] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.031467][ T993] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.139597][ T6339] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.189486][ T993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 117.219538][ T993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 117.258326][ T993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 117.309660][ T993] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 117.319080][ T993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.344582][ T993] usb 2-1: Product: syz [ 117.354379][ T5827] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.365409][ T993] usb 2-1: Manufacturer: syz [ 117.373494][ T993] usb 2-1: SerialNumber: syz [ 117.394975][ T993] usb 2-1: config 0 descriptor?? [ 117.403454][ T30] audit: type=1400 audit(1785715806.680:480): avc: denied { write } for pid=6348 comm="syz.0.138" name="hs" dev="configfs" ino=10661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 117.457877][ T30] audit: type=1400 audit(1785715806.680:481): avc: denied { write } for pid=6348 comm="syz.0.138" name="hs" dev="configfs" ino=10661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 117.540135][ T30] audit: type=1400 audit(1785715806.710:482): avc: denied { write } for pid=6348 comm="syz.0.138" name="uvc.usb0" dev="configfs" ino=10638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 117.594050][ T6339] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.612654][ T5609] Bluetooth: hci5: command tx timeout [ 117.619560][ T30] audit: type=1400 audit(1785715806.710:483): avc: denied { read } for pid=6348 comm="syz.0.138" name="h" dev="configfs" ino=10988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=lnk_file permissive=1 [ 117.663426][ T993] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 117.718322][ T30] audit: type=1400 audit(1785715806.710:484): avc: denied { write } for pid=6348 comm="syz.0.138" name="uvc.usb0" dev="configfs" ino=10638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 117.779569][ T5827] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.920435][ T993] usb 2-1: USB disconnect, device number 2 [ 118.547240][ T30] audit: type=1400 audit(1785715807.800:485): avc: denied { create } for pid=6362 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.617097][ T30] audit: type=1400 audit(1785715807.810:486): avc: denied { setopt } for pid=6362 comm="syz.0.141" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.646620][ T5827] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.681336][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.689709][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.742041][ T5827] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.974917][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.080731][ T6323] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.107183][ T6323] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.133027][ T6323] bridge_slave_0: entered allmulticast mode [ 119.147634][ T6323] bridge_slave_0: entered promiscuous mode [ 119.264694][ T6378] syzkaller0: entered promiscuous mode [ 119.276662][ T6378] syzkaller0: entered allmulticast mode [ 119.299744][ T6323] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.326322][ T6323] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.340495][ T6323] bridge_slave_1: entered allmulticast mode [ 119.353211][ T6323] bridge_slave_1: entered promiscuous mode [ 119.691427][ T5609] Bluetooth: hci5: command tx timeout [ 120.208869][ T6391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.146'. [ 120.620731][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 120.620748][ T30] audit: type=1400 audit(1785715809.900:503): avc: denied { write } for pid=6393 comm="syz.4.148" name="uvc.usb0" dev="configfs" ino=10638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 120.651152][ T30] audit: type=1400 audit(1785715809.930:504): avc: denied { write } for pid=6393 comm="syz.4.148" name="uvc.usb0" dev="configfs" ino=10638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 120.850676][ T30] audit: type=1400 audit(1785715810.130:505): avc: denied { mounton } for pid=6399 comm="syz.4.149" path="/33/file0" dev="tmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 121.141843][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.151'. [ 121.171964][ T6387] bridge_slave_0: left allmulticast mode [ 121.187341][ T6387] bridge_slave_0: left promiscuous mode [ 121.205648][ T6387] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.210980][ T6406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.151'. [ 121.214574][ T30] audit: type=1400 audit(1785715810.490:506): avc: denied { ioctl } for pid=6404 comm="syz.4.151" path="socket:[11710]" dev="sockfs" ino=11710 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 121.276185][ T6387] bridge_slave_1: left allmulticast mode [ 121.285279][ T6387] bridge_slave_1: left promiscuous mode [ 121.297735][ T6387] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.348921][ T6411] sctp: [Deprecated]: syz.1.153 (pid 6411) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.348921][ T6411] Use struct sctp_sack_info instead [ 121.367068][ T6387] bond0: (slave bond_slave_0): Releasing backup interface [ 121.377140][ T30] audit: type=1400 audit(1785715810.660:507): avc: denied { append } for pid=6410 comm="syz.1.153" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 121.429409][ T6387] bond0: (slave bond_slave_1): Releasing backup interface [ 121.452788][ T6387] team0: Port device team_slave_0 removed [ 121.466831][ T6387] team0: Port device team_slave_1 removed [ 121.473424][ T6387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.480792][ T6387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.490145][ T6387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.497706][ T6387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.501314][ T993] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 121.514924][ T6387] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 121.578751][ T6406] hsr_slave_0: left promiscuous mode [ 121.587257][ T6406] hsr_slave_1: left promiscuous mode [ 121.633415][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.649961][ T6323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.651345][ T5819] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 121.673909][ T993] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 121.685488][ T993] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 121.718321][ T993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.736282][ T6412] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.771436][ T5609] Bluetooth: hci5: command tx timeout [ 121.830069][ T6323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.853110][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 121.871127][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 121.895201][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 121.944330][ T5819] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 121.987755][ T993] qmi_wwan 5-1:1.0: probe with driver qmi_wwan failed with error -71 [ 121.999940][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.017402][ T993] usb 5-1: USB disconnect, device number 4 [ 122.023329][ T5819] usb 2-1: Product: syz [ 122.027565][ T5819] usb 2-1: Manufacturer: syz [ 122.038037][ T5819] usb 2-1: SerialNumber: syz [ 122.052648][ T6412] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.066876][ T5819] usb 2-1: config 0 descriptor?? [ 122.100930][ T6323] team0: Port device team_slave_0 added [ 122.116333][ T6323] team0: Port device team_slave_1 added [ 122.136504][ T5827] bridge_slave_1: left allmulticast mode [ 122.152102][ T5827] bridge_slave_1: left promiscuous mode [ 122.159437][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.195190][ T5827] bridge_slave_0: left allmulticast mode [ 122.211107][ T5827] bridge_slave_0: left promiscuous mode [ 122.219446][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.342036][ T5819] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 122.466099][ T30] audit: type=1400 audit(1785715811.750:508): avc: denied { write } for pid=6422 comm="syz.2.155" name="anycast6" dev="proc" ino=4026533427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 122.516164][ T30] audit: type=1400 audit(1785715811.800:509): avc: denied { write } for pid=6414 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.573190][ T5743] usb 2-1: USB disconnect, device number 3 [ 122.675249][ T5827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.694848][ T6433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.156'. [ 122.724058][ T5827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.757115][ T5827] bond0 (unregistering): Released all slaves [ 122.794673][ T30] audit: type=1400 audit(1785715812.080:510): avc: denied { write } for pid=6434 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.930982][ T30] audit: type=1400 audit(1785715812.210:511): avc: denied { create } for pid=6436 comm="syz.4.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 122.983844][ T30] audit: type=1400 audit(1785715812.220:512): avc: denied { setattr } for pid=6436 comm="syz.4.157" name="IEEE-802.15.4-MAC" dev="sockfs" ino=11827 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 123.002290][ T6412] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.061503][ T6323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.078740][ T6323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.131244][ T6323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.214552][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 123.294946][ T6412] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.342164][ T6323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.365925][ T6323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.432815][ T6323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.604996][ T6323] hsr_slave_0: entered promiscuous mode [ 123.624788][ T6323] hsr_slave_1: entered promiscuous mode [ 123.861301][ T5609] Bluetooth: hci5: command tx timeout [ 123.868287][ T6459] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6459 comm=syz.1.159 [ 124.092075][ T6463] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6463 comm=syz.1.159 [ 124.765857][ T6452] syzkaller0: entered promiscuous mode [ 124.795480][ T6452] syzkaller0: entered allmulticast mode [ 124.865299][ T6470] UDC core: g1: couldn't find an available UDC or it's busy [ 124.877836][ T5827] hsr_slave_0: left promiscuous mode [ 124.889748][ T5827] hsr_slave_1: left promiscuous mode [ 124.902662][ T5827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.931154][ T5827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.964978][ T5827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.972644][ T5609] Bluetooth: hci1: hcon ffff88807b21c000 sent 1 < count 1025 [ 124.983008][ T5609] Bluetooth: hci1: hcon ffff888075720000 sent 0 < count 59415 [ 125.011594][ T5827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.038021][ T5827] veth1_macvtap: left promiscuous mode [ 125.051463][ T5827] veth0_macvtap: left promiscuous mode [ 125.064367][ T5827] veth1_vlan: left promiscuous mode [ 125.078306][ T5827] veth0_vlan: left promiscuous mode [ 125.492268][ T5827] team0 (unregistering): Port device team_slave_1 removed [ 125.514231][ T5827] team0 (unregistering): Port device team_slave_0 removed [ 126.454260][ T5707] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 126.615321][ T5707] usb 5-1: Using ep0 maxpacket: 16 [ 126.631699][ T5707] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 126.648732][ T5707] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 126.672080][ T5707] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 126.686558][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.705372][ T5707] usb 5-1: Product: syz [ 126.714478][ T5707] usb 5-1: Manufacturer: syz [ 126.725544][ T5707] usb 5-1: SerialNumber: syz [ 126.741377][ T5707] usb 5-1: config 0 descriptor?? [ 126.764730][ T5707] em28xx 5-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 127.289187][ T6493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'. [ 127.435142][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 127.435159][ T30] audit: type=1400 audit(1785715816.720:524): avc: denied { read } for pid=6495 comm="syz.1.167" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 127.471613][ T6497] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 127.475761][ T30] audit: type=1400 audit(1785715816.720:525): avc: denied { open } for pid=6495 comm="syz.1.167" path="/32/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 127.482001][ T6497] block device autoloading is deprecated and will be removed. [ 127.647018][ T6499] sctp: [Deprecated]: syz.1.168 (pid 6499) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.647018][ T6499] Use struct sctp_sack_info instead [ 127.822905][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 127.901812][ T5707] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 127.911765][ T57] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.930117][ T57] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.001850][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.061680][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.084585][ T5707] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 128.116548][ T5707] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 128.157342][ T5707] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 128.213681][ T5707] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 128.242873][ T5707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.290127][ T5707] usb 2-1: Product: syz [ 128.305758][ T5707] usb 2-1: Manufacturer: syz [ 128.320918][ T5707] usb 2-1: SerialNumber: syz [ 128.374299][ T5707] usb 2-1: config 0 descriptor?? [ 128.423686][ T6323] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 128.442640][ T6323] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 128.460649][ T6323] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 128.477834][ T6323] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 128.502785][ T6323] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 128.529050][ T6323] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 128.558164][ T30] audit: type=1400 audit(1785715817.840:526): avc: denied { write } for pid=6508 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.581112][ T6323] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 128.602859][ T6323] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 128.618596][ T30] audit: type=1400 audit(1785715817.900:527): avc: denied { write } for pid=6501 comm="syz.2.169" name="uvc.usb0" dev="configfs" ino=10638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 128.652606][ T5707] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 128.672577][ T30] audit: type=1400 audit(1785715817.930:528): avc: denied { write } for pid=6501 comm="syz.2.169" name="uvc.usb0" dev="configfs" ino=10638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 128.848990][ T30] audit: type=1400 audit(1785715818.130:529): avc: denied { write } for pid=6528 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.882937][ T5743] usb 2-1: USB disconnect, device number 4 [ 128.888039][ T6323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.947492][ T6323] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.976697][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.983880][ T5827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.015114][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.022252][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.072748][ T6535] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 129.099389][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3 [ 129.124681][ T805] usb 5-1: USB disconnect, device number 5 [ 129.796075][ T6554] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6554 comm=syz.4.173 [ 129.872383][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.176'. [ 129.946007][ T30] audit: type=1400 audit(1785715819.230:530): avc: denied { name_bind } for pid=6556 comm="syz.1.175" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 129.994614][ T6569] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6569 comm=syz.4.173 [ 130.068522][ T30] audit: type=1400 audit(1785715819.230:531): avc: denied { node_bind } for pid=6556 comm="syz.1.175" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 130.099443][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.177'. [ 130.163484][ T30] audit: type=1400 audit(1785715819.330:532): avc: denied { create } for pid=6556 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 130.218947][ T6554] hub 8-0:1.0: USB hub found [ 130.230824][ T6554] hub 8-0:1.0: 1 port detected [ 130.275634][ T30] audit: type=1400 audit(1785715819.340:533): avc: denied { setopt } for pid=6556 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 130.401492][ T6323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.603931][ T6583] syzkaller0: entered promiscuous mode [ 130.628861][ T6583] syzkaller0: entered allmulticast mode [ 130.672228][ T5271] 8021q: adding VLAN 0 to HW filter on device eth4 [ 131.302372][ T6323] veth0_vlan: entered promiscuous mode [ 131.317374][ T6323] veth1_vlan: entered promiscuous mode [ 131.332025][ T5743] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 131.385440][ T6323] veth0_macvtap: entered promiscuous mode [ 131.402625][ T6323] veth1_macvtap: entered promiscuous mode [ 131.465124][ T6323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.502687][ T5743] usb 2-1: Using ep0 maxpacket: 32 [ 131.512580][ T6323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.527915][ T5743] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 131.560301][ T5743] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.607217][ T5743] usb 2-1: config 0 has no interface number 0 [ 131.618802][ T5827] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.649047][ T5743] usb 2-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.714780][ T5743] usb 2-1: config 0 interface 12 has no altsetting 0 [ 131.740381][ T5743] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 131.756311][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.773546][ T5743] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.786752][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.802344][ T6491] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.817789][ T5743] usb 2-1: Product: syz [ 131.830847][ T5743] usb 2-1: Manufacturer: syz [ 131.855386][ T5743] usb 2-1: SerialNumber: syz [ 131.860951][ T5827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.869655][ T6491] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.874559][ T5743] usb 2-1: config 0 descriptor?? [ 131.878554][ T6491] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.899907][ T5827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.914341][ T5743] f81534 2-1:0.12: required endpoints missing [ 132.202286][ T6617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.186'. [ 132.527872][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.534417][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.443123][ T6633] netlink: 40 bytes leftover after parsing attributes in process `syz.4.187'. [ 133.529556][ T6633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.187'. [ 133.676331][ T6641] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 133.718946][ T6641] VFS: Can't find a romfs filesystem on dev nullb0. [ 133.718946][ T6641] [ 133.759590][ T6636] syzkaller0: entered promiscuous mode [ 133.777970][ T6636] syzkaller0: entered allmulticast mode [ 134.236454][ T6664] Invalid ELF header magic: != ELF [ 134.655794][ T5734] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 134.726283][ T5707] usb 2-1: USB disconnect, device number 5 [ 134.813719][ T5734] usb 1-1: unable to get BOS descriptor or descriptor too short [ 134.822655][ T5734] usb 1-1: not running at top speed; connect to a high speed hub [ 134.831647][ T5734] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 134.884727][ T5734] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 134.908346][ T5734] usb 1-1: config 14 has no interface number 0 [ 134.915758][ T5734] usb 1-1: config 14 has no interface number 1 [ 134.922555][ T5734] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 134.933686][ T5734] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 134.951898][ T5734] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 134.963881][ T5734] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 134.976472][ T5734] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 134.988220][ T5734] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 135.008305][ T5734] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.021719][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 135.021732][ T30] audit: type=1400 audit(1785715824.290:540): avc: denied { listen } for pid=6678 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 135.047065][ T5734] usb 1-1: config 14 interface 57 has no altsetting 0 [ 135.055875][ T5734] usb 1-1: config 14 interface 228 has no altsetting 0 [ 135.064829][ T5734] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 135.073919][ T5734] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.082655][ T5734] usb 1-1: Product: syz [ 135.086845][ T5734] usb 1-1: Manufacturer: syz [ 135.092427][ T5734] usb 1-1: SerialNumber: syz [ 135.372374][ T5707] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 135.515059][ T5734] legousbtower 1-1:14.57: interrupt endpoints not found [ 135.535033][ T5707] usb 2-1: Using ep0 maxpacket: 16 [ 135.555043][ T5707] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 135.565980][ T5707] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 135.579221][ T5707] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 135.588575][ T5707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.601063][ T5707] usb 2-1: Product: syz [ 135.605744][ T5707] usb 2-1: Manufacturer: syz [ 135.610353][ T5707] usb 2-1: SerialNumber: syz [ 135.621751][ T5707] usb 2-1: config 0 descriptor?? [ 135.629288][ T5707] hub 2-1:0.0: bad descriptor, ignoring hub [ 135.635843][ T5707] hub 2-1:0.0: probe with driver hub failed with error -5 [ 135.658937][ T5707] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 135.925575][ T5734] legousbtower 1-1:14.228: get version request failed: -32 [ 135.939098][ T5734] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -32 [ 136.126824][ T5707] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 136.157952][ T5631] udevd[5631]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.186362][ T5707] usb 2-1: USB disconnect, device number 6 [ 136.374668][ T6684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.198'. [ 136.465668][ T30] audit: type=1400 audit(1785715825.750:541): avc: denied { mount } for pid=6685 comm="syz.5.199" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 136.560039][ T30] audit: type=1400 audit(1785715825.750:542): avc: denied { write } for pid=6685 comm="syz.5.199" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 136.624095][ T30] audit: type=1400 audit(1785715825.800:543): avc: denied { unmount } for pid=6323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 136.931808][ T5707] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 137.202858][ T6706] Invalid ELF header magic: != ELF [ 137.291375][ T5743] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 137.313175][ T5707] usb 2-1: Using ep0 maxpacket: 8 [ 137.336629][ T5707] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 137.495769][ T5743] usb 6-1: Using ep0 maxpacket: 32 [ 137.523024][ T5707] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 137.543084][ T5743] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 137.562020][ T5743] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.563046][ T5734] usb 1-1: USB disconnect, device number 6 [ 137.572386][ T5707] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 137.598640][ T5743] usb 6-1: config 0 has no interface number 0 [ 137.612844][ T5707] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.627717][ T5743] usb 6-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.654498][ T5707] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 137.668549][ T5743] usb 6-1: config 0 interface 12 has no altsetting 0 [ 137.758375][ T5707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.768862][ T5743] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 137.786003][ T5743] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.795344][ T5743] usb 6-1: Product: syz [ 137.800493][ T5743] usb 6-1: Manufacturer: syz [ 137.806257][ T5743] usb 6-1: SerialNumber: syz [ 137.816094][ T5743] usb 6-1: config 0 descriptor?? [ 137.849354][ T5743] f81534 6-1:0.12: required endpoints missing [ 137.994609][ T30] audit: type=1400 audit(1785715827.280:544): avc: denied { read } for pid=6719 comm="syz.2.210" path="socket:[13742]" dev="sockfs" ino=13742 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 138.045623][ T5707] usb 2-1: GET_CAPABILITIES returned 0 [ 138.051627][ T5707] usbtmc 2-1:16.0: can't read capabilities [ 138.105747][ T30] audit: type=1400 audit(1785715827.390:545): avc: denied { mounton } for pid=6722 comm="syz.4.212" path="/proc/180/task" dev="proc" ino=13747 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 138.206700][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'. [ 138.392859][ T30] audit: type=1400 audit(1785715827.660:546): avc: denied { mounton } for pid=6693 comm="syz.1.202" path="/syzcgroup/net/syz1/devices.allow" dev="cgroup" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 138.504888][ T6733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.202'. [ 139.827279][ T6744] lo speed is unknown, defaulting to 1000 [ 139.834050][ T6744] lo speed is unknown, defaulting to 1000 [ 139.918543][ T6745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.217'. [ 139.947735][ T6744] lo speed is unknown, defaulting to 1000 [ 139.972584][ T6744] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 139.987211][ T6744] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 140.004691][ T6744] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 140.052272][ T6744] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 140.144031][ T6744] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 140.497181][ T6744] lo speed is unknown, defaulting to 1000 [ 140.506945][ T6744] lo speed is unknown, defaulting to 1000 [ 140.541489][ T5707] usb 2-1: USB disconnect, device number 7 [ 140.657968][ T5743] usb 6-1: USB disconnect, device number 2 [ 140.678590][ T6744] lo speed is unknown, defaulting to 1000 [ 141.195929][ T6754] netlink: 9 bytes leftover after parsing attributes in process `syz.5.221'. [ 141.271791][ T6744] lo speed is unknown, defaulting to 1000 [ 141.320880][ T6754] gretap0: entered promiscuous mode [ 141.803592][ T6757] Invalid ELF header magic: != ELF [ 141.838677][ T6744] lo speed is unknown, defaulting to 1000 [ 141.998503][ T30] audit: type=1400 audit(1785715831.280:547): avc: denied { bind } for pid=6760 comm="syz.4.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 142.067362][ T30] audit: type=1400 audit(1785715831.350:548): avc: denied { create } for pid=6751 comm="syz.5.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 142.138384][ T6758] netlink: 5 bytes leftover after parsing attributes in process `syz.5.221'. [ 142.180449][ T6758] 0ªî{X¹¦: renamed from gretap0 [ 142.225820][ T6758] 0ªî{X¹¦: left promiscuous mode [ 142.253436][ T6758] 0ªî{X¹¦: entered allmulticast mode [ 142.284041][ T6758] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 142.632698][ T30] audit: type=1400 audit(1785715831.900:549): avc: denied { write } for pid=6759 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.931911][ T30] audit: type=1326 audit(1785715832.150:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.4.228" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730d39e019 code=0x7ffc0000 [ 143.382728][ T30] audit: type=1326 audit(1785715832.150:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.4.228" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730d39e019 code=0x7ffc0000 [ 143.445898][ T30] audit: type=1326 audit(1785715832.150:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.4.228" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f730d39e019 code=0x7ffc0000 [ 143.552897][ T30] audit: type=1326 audit(1785715832.150:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.4.228" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730d39e019 code=0x7ffc0000 [ 143.652674][ T30] audit: type=1326 audit(1785715832.150:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.4.228" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730d39e019 code=0x7ffc0000 [ 143.685294][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'. [ 143.737772][ T30] audit: type=1326 audit(1785715832.160:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.4.228" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f730d39e019 code=0x7ffc0000 [ 143.793651][ T30] audit: type=1326 audit(1785715832.160:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.4.228" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730d39e019 code=0x7ffc0000 [ 143.969946][ T6814] siw: device registration error -23 [ 144.027001][ T6814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.233'. [ 146.539756][ T6816] uprobe: syz.5.234:6816 failed to unregister, leaking uprobe [ 147.371198][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 147.371215][ T30] audit: type=1326 audit(1785715836.280:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6830 comm="syz.1.236" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7139e019 code=0x7ffc0000 [ 147.759547][ T30] audit: type=1326 audit(1785715836.280:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6830 comm="syz.1.236" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7139e019 code=0x7ffc0000 [ 147.826170][ T30] audit: type=1326 audit(1785715836.280:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6830 comm="syz.1.236" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e7139e019 code=0x7ffc0000 [ 147.956741][ T30] audit: type=1326 audit(1785715836.280:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6830 comm="syz.1.236" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7139e019 code=0x7ffc0000 [ 148.140382][ T6858] fuse: Bad value for 'fd' [ 148.509616][ T30] audit: type=1326 audit(1785715836.280:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6830 comm="syz.1.236" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7139e019 code=0x7ffc0000 [ 148.535967][ T30] audit: type=1326 audit(1785715836.280:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6830 comm="syz.1.236" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f6e7135e84e code=0x7ffc0000 [ 149.058760][ T30] audit: type=1326 audit(1785715836.280:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6830 comm="syz.1.236" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7139e019 code=0x7ffc0000 [ 149.111307][ T30] audit: type=1326 audit(1785715836.280:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6830 comm="syz.1.236" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7139e019 code=0x7ffc0000 [ 149.228079][ T30] audit: type=1400 audit(1785715837.100:597): avc: denied { open } for pid=6841 comm="syz.4.241" path="/dev/ptyqc" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 149.517260][ T6874] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 149.668904][ T6871] ima: Unable to open file: /e (-2) [ 150.216145][ T6865] ima: policy update failed [ 150.317319][ T30] audit: type=1326 audit(1785715837.400:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6850 comm="syz.0.242" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9af9e019 code=0x7ffc0000 [ 150.472053][ T6880] siw: device registration error -23 [ 150.489225][ T6880] netlink: 16 bytes leftover after parsing attributes in process `syz.1.247'. [ 152.162863][ T6890] binder: 6885:6890 ioctl c0306201 2000000004c0 returned -14 [ 153.423065][ T6919] fuse: Bad value for 'fd' [ 153.787706][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 153.787722][ T30] audit: type=1326 audit(1785715842.690:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6914 comm="syz.4.254" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730d39e019 code=0x7ffc0000 [ 153.884079][ T6909] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.117536][ T30] audit: type=1326 audit(1785715842.690:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6914 comm="syz.4.254" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730d39e019 code=0x7ffc0000 [ 154.332828][ T6909] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.747742][ T6930] input: syz1 as /devices/virtual/input/input9 [ 154.991905][ T30] audit: type=1326 audit(1785715842.690:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6914 comm="syz.4.254" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f730d39e019 code=0x7ffc0000 [ 155.019006][ T30] audit: type=1326 audit(1785715842.690:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6914 comm="syz.4.254" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730d39e019 code=0x7ffc0000 [ 155.045343][ T30] audit: type=1326 audit(1785715842.690:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6914 comm="syz.4.254" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730d39e019 code=0x7ffc0000 [ 155.071823][ T30] audit: type=1326 audit(1785715842.690:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6914 comm="syz.4.254" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f730d39e019 code=0x7ffc0000 [ 155.098220][ T30] audit: type=1326 audit(1785715842.690:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6914 comm="syz.4.254" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730d39e019 code=0x7ffc0000 [ 155.144567][ T30] audit: type=1326 audit(1785715842.700:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6914 comm="syz.4.254" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730d39e019 code=0x7ffc0000 [ 155.698513][ T30] audit: type=1326 audit(1785715842.700:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6914 comm="syz.4.254" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f730d39e019 code=0x7ffc0000 [ 155.769890][ T6909] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.805290][ T30] audit: type=1326 audit(1785715842.700:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6914 comm="syz.4.254" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730d39e019 code=0x7ffc0000 [ 156.028294][ T6909] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.201299][ T5714] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 157.256428][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.283246][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.296536][ T6965] input: syz0 as /devices/virtual/input/input10 [ 157.325106][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.522230][ T5714] usb 1-1: Using ep0 maxpacket: 8 [ 157.851613][ T5827] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.306632][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 158.385799][ T5714] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 158.397875][ T5714] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 158.410759][ T5714] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 158.426604][ T5714] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.440382][ T5714] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 158.449911][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.657704][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 158.664813][ T24] usb 2-1: config 0 has an invalid interface number: 87 but max is 0 [ 158.680623][ T5714] usb 1-1: GET_CAPABILITIES returned 0 [ 158.688062][ T5714] usbtmc 1-1:16.0: can't read capabilities [ 158.704787][ T24] usb 2-1: config 0 has no interface number 0 [ 158.806163][ T6978] fuse: Bad value for 'fd' [ 158.881551][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 158.881585][ T30] audit: type=1326 audit(1785715847.071:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.5.269" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a96f9e019 code=0x7ffc0000 [ 159.142942][ T24] usb 2-1: New USB device found, idVendor=19d2, idProduct=0010, bcdDevice=77.c8 [ 159.172616][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.254241][ T6980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.263'. [ 159.319892][ T30] audit: type=1326 audit(1785715847.071:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.5.269" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a96f9e019 code=0x7ffc0000 [ 159.405848][ T24] usb 2-1: config 0 descriptor?? [ 159.689036][ T30] audit: type=1326 audit(1785715847.071:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.5.269" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7a96f9e019 code=0x7ffc0000 [ 159.846966][ T6968] usb 1-1: USB disconnect, device number 7 [ 160.016245][ T30] audit: type=1326 audit(1785715847.071:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.5.269" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a96f9e019 code=0x7ffc0000 [ 160.992576][ T6993] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 160.996640][ T30] audit: type=1326 audit(1785715847.071:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.5.269" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a96f9e019 code=0x7ffc0000 [ 161.035214][ T30] audit: type=1326 audit(1785715847.071:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.5.269" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f7a96f9e019 code=0x7ffc0000 [ 161.063425][ T30] audit: type=1326 audit(1785715847.071:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.5.269" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a96f9e019 code=0x7ffc0000 [ 161.182411][ T30] audit: type=1326 audit(1785715847.071:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.5.269" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a96f9e019 code=0x7ffc0000 [ 161.329637][ T30] audit: type=1326 audit(1785715847.081:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.5.269" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7a96f9e019 code=0x7ffc0000 [ 161.372753][ T24] option 2-1:0.87: GSM modem (1-port) converter detected [ 161.405433][ T24] usb 2-1: USB disconnect, device number 8 [ 161.455858][ T24] option 2-1:0.87: device disconnected [ 161.475879][ T30] audit: type=1326 audit(1785715847.081:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.5.269" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a96f9e019 code=0x7ffc0000 [ 162.799031][ T5609] Bluetooth: Unexpected continuation frame (len 73) [ 162.808291][ T5609] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 165.481475][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 165.707035][ T9] usb 6-1: config 0 has no interfaces? [ 165.724613][ T9] usb 6-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 165.735264][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.754655][ T9] usb 6-1: Product: syz [ 165.765593][ T9] usb 6-1: Manufacturer: syz [ 165.777300][ T9] usb 6-1: SerialNumber: syz [ 165.798092][ T9] usb 6-1: config 0 descriptor?? [ 165.983579][ T7057] Unknown vers= option specified: 3.0/ [ 165.983579][ T7057] [ 166.001968][ T7057] CIFS: VFS: Unknown vers= option specified: 3.0/ [ 166.235022][ T9] usb 6-1: USB disconnect, device number 3 [ 166.935879][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 166.935897][ T30] audit: type=1400 audit(1785715853.220:727): avc: denied { create } for pid=7064 comm="syz.1.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 166.983042][ T30] audit: type=1400 audit(1785715853.260:728): avc: denied { write } for pid=7064 comm="syz.1.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 167.518610][ T5609] Bluetooth: hci5: link tx timeout [ 167.524043][ T5609] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 167.557504][ T5609] Bluetooth: hci5: link tx timeout [ 167.563416][ T5609] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 167.576385][ T5609] Bluetooth: hci5: link tx timeout [ 167.581648][ T5609] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 167.589628][ T5609] Bluetooth: hci5: link tx timeout [ 167.595341][ T5609] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 167.606833][ T5609] Bluetooth: hci5: link tx timeout [ 167.615979][ T5609] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 167.626041][ T5609] Bluetooth: hci5: link tx timeout [ 167.631324][ T5609] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 167.642036][ T5609] Bluetooth: hci5: link tx timeout [ 167.647301][ T5609] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 167.655218][ T5609] Bluetooth: hci5: link tx timeout [ 167.661519][ T5609] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 167.669543][ T5609] Bluetooth: hci5: link tx timeout [ 167.678131][ T5609] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 167.689201][ T5609] Bluetooth: hci5: link tx timeout [ 167.694732][ T5609] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 167.713767][ T5609] Bluetooth: hci5: link tx timeout [ 167.719051][ T5609] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 167.767166][ T5609] Bluetooth: hci5: link tx timeout [ 167.773413][ T5609] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 168.964568][ T30] audit: type=1400 audit(1785715854.245:729): avc: denied { mount } for pid=7096 comm="syz.5.308" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 169.069188][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 169.152557][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.309'. [ 169.163834][ T30] audit: type=1400 audit(1785715854.445:730): avc: denied { read } for pid=7098 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 169.270882][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 169.322813][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 169.390627][ T7102] netlink: 4 bytes leftover after parsing attributes in process `syz.5.310'. [ 169.404723][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 169.459007][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 169.528432][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.621670][ T5609] Bluetooth: hci5: command 0x0406 tx timeout [ 169.674094][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 169.725232][ T7102] bond0: (slave bond_slave_1): Releasing backup interface [ 169.739839][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.115266][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 170.133134][ T9] usbtmc 2-1:16.0: can't read capabilities [ 171.003103][ T7110] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nbd2": -EINTR [ 174.535410][ T50] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 174.695030][ T9] usb 2-1: USB disconnect, device number 9 [ 175.832068][ T7154] program syz.5.322 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.936344][ T30] audit: type=1400 audit(1785715861.215:731): avc: denied { unlink } for pid=7145 comm="syz.1.320" name="#1" dev="tmpfs" ino=342 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 175.985501][ T30] audit: type=1400 audit(1785715861.215:732): avc: denied { mount } for pid=7145 comm="syz.1.320" name="/" dev="overlay" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 178.329832][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 178.386101][ T5707] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 178.494205][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 178.514792][ T24] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 178.535454][ T24] usb 6-1: config 0 has no interface number 0 [ 178.541630][ T5707] usb 2-1: Using ep0 maxpacket: 8 [ 178.554080][ T5707] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 178.566850][ T24] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 178.579849][ T5707] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 178.592458][ T24] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 178.608941][ T5707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.626624][ T24] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 178.640320][ T5707] usb 2-1: config 0 descriptor?? [ 178.668386][ T24] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 178.696837][ T24] usb 6-1: Product: syz [ 178.972735][ T24] usb 6-1: SerialNumber: syz [ 178.981037][ T5707] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 179.004094][ T24] usb 6-1: config 0 descriptor?? [ 179.014308][ T24] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 179.501119][ T30] audit: type=1326 audit(1785715864.775:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7197 comm="syz.0.338" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9af9e019 code=0x7ffc0000 [ 179.539197][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input11 [ 179.539887][ T7174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.584371][ T7179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.602448][ T7174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.613536][ T7179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.634417][ T50] Bluetooth: hci5: unexpected event 0x03 length: 1 < 11 [ 179.646170][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 179.654537][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 179.655403][ T5819] usb 2-1: USB disconnect, device number 10 [ 179.661868][ C1] iowarrior 2-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 179.676945][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 179.688680][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 179.691605][ T30] audit: type=1326 audit(1785715864.775:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7197 comm="syz.0.338" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9af9e019 code=0x7ffc0000 [ 179.697974][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 179.722495][ T30] audit: type=1400 audit(1785715864.815:735): avc: denied { bind } for pid=7173 comm="syz.5.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 179.731255][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 179.761244][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 179.768343][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 179.775422][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 179.782519][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 179.915148][ T24] usb 6-1: USB disconnect, device number 4 [ 179.921017][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 179.990935][ T24] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 180.041898][ T7179] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input12 [ 181.336009][ T30] audit: type=1400 audit(1785715866.585:736): avc: denied { connect } for pid=7230 comm="syz.5.347" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 181.513833][ T30] audit: type=1400 audit(1785715866.595:737): avc: denied { write } for pid=7230 comm="syz.5.347" laddr=::1 lport=2 faddr=::1 fport=20005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 181.651041][ T7238] sctp: [Deprecated]: syz.4.348 (pid 7238) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.651041][ T7238] Use struct sctp_sack_info instead [ 181.777315][ T30] audit: type=1400 audit(1785715867.045:738): avc: denied { bind } for pid=7230 comm="syz.5.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 181.923942][ T30] audit: type=1400 audit(1785715867.085:739): avc: denied { connect } for pid=7230 comm="syz.5.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 182.230045][ T30] audit: type=1400 audit(1785715867.085:740): avc: denied { write } for pid=7230 comm="syz.5.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 182.771282][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 183.153105][ T30] audit: type=1326 audit(1785715867.595:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7240 comm="syz.1.349" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7139e019 code=0x7ffc0000 [ 183.286941][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 183.345350][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 183.388394][ T30] audit: type=1326 audit(1785715867.595:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7240 comm="syz.1.349" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7139e019 code=0x7ffc0000 [ 183.463569][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 183.543273][ T24] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 183.597985][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.615220][ T30] audit: type=1326 audit(1785715867.605:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7240 comm="syz.1.349" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e7139e019 code=0x7ffc0000 [ 183.671342][ T24] usb 5-1: Product: syz [ 183.786111][ T24] usb 5-1: Manufacturer: syz [ 183.805192][ T24] usb 5-1: SerialNumber: syz [ 184.088256][ T24] usb 5-1: config 0 descriptor?? [ 184.102249][ T30] audit: type=1326 audit(1785715867.605:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7240 comm="syz.1.349" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7139e019 code=0x7ffc0000 [ 184.233349][ T30] audit: type=1326 audit(1785715867.605:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7240 comm="syz.1.349" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7139e019 code=0x7ffc0000 [ 184.420010][ T24] adutux 5-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 184.478469][ T24] usb 5-1: USB disconnect, device number 6 [ 187.503360][ T7286] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nbd2": -EINTR [ 188.784879][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.371'. [ 190.032488][ T7318] 9pnet_virtio: no channels available for device syz [ 191.575235][ T7324] netlink: 16 bytes leftover after parsing attributes in process `syz.4.376'. [ 191.585299][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.376'. [ 192.639796][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.378'. [ 193.922844][ T5734] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 193.938477][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.944938][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.211262][ T5734] usb 3-1: Using ep0 maxpacket: 8 [ 194.222131][ T5734] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 194.239015][ T5734] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.257017][ T5734] usb 3-1: config 0 has no interface number 0 [ 194.263173][ T5734] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 194.273806][ T5734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.284541][ T7355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4290 sclass=netlink_route_socket pid=7355 comm=syz.0.388 [ 194.308973][ T5734] usb 3-1: config 0 descriptor?? [ 194.329350][ T5734] ldusb 3-1:0.55: Interrupt in endpoint not found [ 194.331712][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 194.331725][ T30] audit: type=1400 audit(1785715879.605:771): avc: denied { write } for pid=7356 comm="syz.5.386" name="cluster" dev="configfs" ino=1080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 194.359456][ T7359] 9pnet_virtio: no channels available for device syz [ 194.385352][ T30] audit: type=1400 audit(1785715879.655:772): avc: denied { add_name } for pid=7356 comm="syz.5.386" name="mycluster" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 194.409507][ T30] audit: type=1400 audit(1785715879.655:773): avc: denied { write } for pid=7356 comm="syz.5.386" name="heartbeat" dev="configfs" ino=16442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 194.433587][ T30] audit: type=1400 audit(1785715879.665:774): avc: denied { create } for pid=7354 comm="syz.0.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 194.454092][ T30] audit: type=1400 audit(1785715879.665:775): avc: denied { write } for pid=7354 comm="syz.0.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 195.317333][ T5734] usb 3-1: USB disconnect, device number 8 [ 196.137848][ T5621] Bluetooth: hci2: command 0x0406 tx timeout [ 196.137865][ T5614] Bluetooth: hci1: command 0x0406 tx timeout [ 196.144070][ T5621] Bluetooth: hci0: command 0x0406 tx timeout [ 197.388810][ T30] audit: type=1400 audit(1785715882.245:776): avc: denied { read } for pid=7373 comm="syz.5.392" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 197.502871][ T30] audit: type=1400 audit(1785715882.245:777): avc: denied { open } for pid=7373 comm="syz.5.392" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 197.570672][ T30] audit: type=1400 audit(1785715882.645:778): avc: denied { ioctl } for pid=7373 comm="syz.5.392" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64c6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 197.726410][ T30] audit: type=1400 audit(1785715882.995:779): avc: denied { unmount } for pid=6323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 197.733064][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.394'. [ 197.921323][ T7383] netlink: 48 bytes leftover after parsing attributes in process `syz.5.395'. [ 198.045069][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.5.395'. [ 198.094240][ T7386] hsr_slave_0: left promiscuous mode [ 198.123702][ T7386] hsr_slave_1: left promiscuous mode [ 198.351566][ T5819] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 198.404099][ T6491] Bluetooth: hci3: Frame reassembly failed (-84) [ 198.505516][ T5819] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 198.528632][ T5819] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 198.534654][ T7395] netlink: 48 bytes leftover after parsing attributes in process `syz.0.400'. [ 198.550075][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.574034][ T30] audit: type=1400 audit(1785715883.845:780): avc: denied { name_connect } for pid=7394 comm="syz.0.400" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 199.427076][ T5819] qmi_wwan 6-1:1.0: probe with driver qmi_wwan failed with error -71 [ 200.220047][ T7395] Set syz1 is full, maxelem 65536 reached [ 200.263022][ T5819] usb 6-1: USB disconnect, device number 5 [ 200.325975][ T30] audit: type=1400 audit(1785715885.605:781): avc: denied { read } for pid=7397 comm="syz.0.401" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 200.403877][ T30] audit: type=1400 audit(1785715885.605:782): avc: denied { open } for pid=7397 comm="syz.0.401" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 200.432501][ T5609] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 200.841724][ T30] audit: type=1400 audit(1785715886.125:783): avc: denied { getopt } for pid=7397 comm="syz.0.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 200.964443][ T30] audit: type=1400 audit(1785715886.245:784): avc: denied { read } for pid=7408 comm="syz.5.404" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 201.197450][ T30] audit: type=1400 audit(1785715886.245:785): avc: denied { open } for pid=7408 comm="syz.5.404" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 201.926502][ T7398] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 201.941299][ T7398] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 202.001439][ T7398] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 202.020717][ T7398] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 202.051133][ T7398] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 202.072003][ T7398] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 202.097095][ T7398] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 202.113717][ T7398] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 202.184789][ T7398] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 202.217860][ T7398] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 202.228910][ T7398] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 202.411779][ T5609] Bluetooth: hci0: command 0x0406 tx timeout [ 202.430574][ T30] audit: type=1400 audit(1785715887.705:786): avc: denied { create } for pid=7419 comm="syz.5.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 202.481040][ T30] audit: type=1400 audit(1785715887.755:787): avc: denied { write } for pid=7419 comm="syz.5.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 202.551410][ T30] audit: type=1400 audit(1785715887.755:788): avc: denied { read } for pid=7419 comm="syz.5.407" path="socket:[16517]" dev="sockfs" ino=16517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 202.577169][ T5735] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 202.733226][ T5735] usb 5-1: config 0 has no interfaces? [ 202.742428][ T5735] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 202.755109][ T7426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.770233][ T5735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.789027][ T5735] usb 5-1: Product: syz [ 202.799827][ T5735] usb 5-1: Manufacturer: syz [ 202.809815][ T5735] usb 5-1: SerialNumber: syz [ 202.826014][ T5735] usb 5-1: config 0 descriptor?? [ 203.057435][ T5714] usb 5-1: USB disconnect, device number 7 [ 203.744313][ T7442] 9pnet_virtio: no channels available for device syz [ 204.042512][ T5609] Bluetooth: hci1: command 0x0406 tx timeout [ 204.091677][ T5609] Bluetooth: hci2: command 0x0406 tx timeout [ 204.180402][ T5609] Bluetooth: hci4: command 0x0c1a tx timeout [ 204.251369][ T5609] Bluetooth: hci5: command 0x0406 tx timeout [ 204.495926][ T5609] Bluetooth: hci0: command 0x0406 tx timeout [ 205.233991][ T30] audit: type=1400 audit(1785715890.295:789): avc: denied { name_bind } for pid=7450 comm="syz.4.418" src=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 206.091550][ T5609] Bluetooth: hci1: command 0x0406 tx timeout [ 206.569051][ T5609] Bluetooth: hci2: command 0x0406 tx timeout [ 206.569364][ T5612] Bluetooth: hci4: command 0x0c1a tx timeout [ 206.581293][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 207.095896][ T7470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.424'. [ 207.921390][ T30] audit: type=1400 audit(1785715893.195:790): avc: denied { append } for pid=7483 comm="syz.5.430" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 208.651481][ T5609] Bluetooth: hci4: command 0x0c1a tx timeout [ 209.140475][ T30] audit: type=1400 audit(1785715894.415:791): avc: denied { write } for pid=7496 comm="syz.5.433" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 209.209240][ T30] audit: type=1400 audit(1785715894.475:792): avc: denied { ioctl } for pid=7496 comm="syz.5.433" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 209.928336][ T7505] netlink: 'syz.2.436': attribute type 1 has an invalid length. [ 210.111477][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.436'. [ 210.176195][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.436'. [ 210.219438][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.436'. [ 210.256876][ T7510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.436'. [ 210.895010][ T7505] bond1: entered promiscuous mode [ 210.908577][ T7505] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.065816][ T7512] bond1: (slave bridge1): making interface the new active one [ 211.093929][ T7512] bridge1: entered promiscuous mode [ 211.133602][ T7512] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 212.665384][ T7517] syzkaller0: entered promiscuous mode [ 212.701392][ T7517] syzkaller0: entered allmulticast mode [ 212.760189][ T7540] 9pnet_virtio: no channels available for device syz [ 216.052708][ T5734] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 216.231243][ T5734] usb 2-1: Using ep0 maxpacket: 8 [ 216.255637][ T5734] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 216.290465][ T5734] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 216.320701][ T5734] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 216.351276][ T5734] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.404261][ T5734] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 216.433379][ T5734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.680967][ T5734] usb 2-1: GET_CAPABILITIES returned 0 [ 216.699590][ T5734] usbtmc 2-1:16.0: can't read capabilities [ 216.966920][ T30] audit: type=1400 audit(1785715902.245:793): avc: denied { mounton } for pid=7553 comm="syz.1.449" path="/syzcgroup/net/syz1/devices.allow" dev="cgroup" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 218.964834][ T7569] netlink: 'syz.5.453': attribute type 1 has an invalid length. [ 219.105010][ T7571] netlink: 8 bytes leftover after parsing attributes in process `syz.5.453'. [ 219.236073][ T7571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.453'. [ 219.316204][ T5707] usb 2-1: USB disconnect, device number 11 [ 219.367233][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.5.453'. [ 219.635537][ T7572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.453'. [ 222.289404][ T7569] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 222.487148][ T7601] 9pnet_virtio: no channels available for device syz [ 223.374049][ T5734] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 223.591358][ T5734] usb 5-1: Using ep0 maxpacket: 8 [ 223.626617][ T5734] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 223.847553][ T5734] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 224.044639][ T5734] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 224.174994][ T5734] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.225908][ T5734] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 224.270059][ T5734] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.529260][ T5734] usb 5-1: GET_CAPABILITIES returned 0 [ 224.550094][ T5734] usbtmc 5-1:16.0: can't read capabilities [ 226.350148][ T9] usb 5-1: USB disconnect, device number 8 [ 227.590756][ T30] audit: type=1400 audit(1785715911.879:794): avc: denied { create } for pid=7638 comm="syz.4.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 227.801289][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 227.810711][ T7657] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 227.820778][ T7657] syzkaller0: linktype set to 0 [ 227.951922][ T30] audit: type=1400 audit(1785715912.239:795): avc: denied { write } for pid=7643 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.993740][ T24] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 228.014195][ T24] usb 6-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 228.042033][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.143669][ T30] audit: type=1400 audit(1785715912.429:796): avc: denied { write } for pid=7664 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.270453][ T24] usb 6-1: USB disconnect, device number 6 [ 228.749959][ T30] audit: type=1400 audit(1785715913.029:797): avc: denied { execute } for pid=7669 comm="syz.2.478" path="/96/file0" dev="tmpfs" ino=539 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 228.875027][ T30] audit: type=1804 audit(1785715913.059:798): pid=7671 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.478" name="/newroot/96/file0" dev="tmpfs" ino=539 res=1 errno=0 [ 230.700610][ T30] audit: type=1400 audit(1785715914.969:799): avc: denied { mount } for pid=7672 comm="syz.5.479" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 230.774442][ T30] audit: type=1400 audit(1785715915.039:800): avc: denied { shutdown } for pid=7672 comm="syz.5.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 230.972364][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 231.087088][ T30] audit: type=1400 audit(1785715915.369:801): avc: denied { map } for pid=7691 comm="syz.4.484" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 231.136191][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 231.159527][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 231.181701][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 231.207216][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 231.228596][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.242001][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 231.257547][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.546137][ T24] usb 3-1: GET_CAPABILITIES returned 0 [ 231.571395][ T24] usbtmc 3-1:16.0: can't read capabilities [ 233.765776][ T24] usb 3-1: USB disconnect, device number 9 [ 233.889191][ T30] audit: type=1400 audit(1785715918.169:802): avc: denied { unmount } for pid=6323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 234.040103][ T7642] ------------[ cut here ]------------ [ 234.046144][ T7642] dev->config->get_status(dev) [ 234.046158][ T7642] WARNING: drivers/virtio/virtio.c:378 at virtio_dev_remove+0x131/0x170, CPU#1: syz.0.473/7642 [ 234.061663][ T7642] Modules linked in: [ 234.065729][ T7642] CPU: 1 UID: 0 PID: 7642 Comm: syz.0.473 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.077147][ T7642] Tainted: [L]=SOFTLOCKUP [ 234.081618][ T7642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 234.091719][ T7642] RIP: 0010:virtio_dev_remove+0x131/0x170 [ 234.097453][ T7642] Code: c3 89 c6 e8 11 a1 7c fc 84 db 75 18 e8 f8 a6 7c fc 48 89 ef 5b be 01 00 00 00 5d 41 5c 41 5d e9 f5 fd ff ff e8 e0 a6 7c fc 90 <0f> 0b 90 eb dd e8 15 31 ed fc e9 36 ff ff ff e8 ab 30 ed fc eb b1 [ 234.117460][ T7642] RSP: 0018:ffffc9000382f868 EFLAGS: 00010246 [ 234.123652][ T7642] RAX: 0000000000080000 RBX: 00000000000000ff RCX: ffffc9000f55d000 [ 234.131663][ T7642] RDX: 0000000000080000 RSI: ffffffff858dbb00 RDI: ffff888034ae0000 [ 234.139643][ T7642] RBP: ffff888020fc9000 R08: 0000000000000001 R09: 0000000000000000 [ 234.147678][ T7642] R10: 00000000000000ff R11: ffffffff827aeaeb R12: ffffffff8fe277c0 [ 234.155772][ T7642] R13: ffff888020fc9008 R14: ffff888020fc90f0 R15: ffffffff8fe277c0 [ 234.163785][ T7642] FS: 00007f8e9bea36c0(0000) GS:ffff888123ed8000(0000) knlGS:0000000000000000 [ 234.172802][ T7642] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 234.179420][ T7642] CR2: 00007f727104f286 CR3: 0000000056f0a000 CR4: 00000000003526f0 [ 234.187459][ T7642] Call Trace: [ 234.190741][ T7642] [ 234.193721][ T7642] ? __pfx_virtio_dev_remove+0x10/0x10 [ 234.199206][ T7642] device_remove+0xcb/0x180 [ 234.203739][ T30] audit: type=1400 audit(1785715918.459:803): avc: denied { write } for pid=7700 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.226679][ T7642] device_release_driver_internal+0x44e/0x620 [ 234.232788][ T7642] bus_remove_device+0x2bc/0x560 [ 234.237743][ T7642] ? __pfx_bus_remove_device+0x10/0x10 [ 234.243273][ T7642] ? __pfx_device_remove_attrs+0x10/0x10 [ 234.248924][ T7642] device_del+0x376/0x9b0 [ 234.253305][ T7642] ? __pfx_device_del+0x10/0x10 [ 234.258170][ T7642] ? __pfx___might_resched+0x10/0x10 [ 234.263504][ T7642] ? __pfx_pci_device_is_present+0x10/0x10 [ 234.269327][ T7642] device_unregister+0x1d/0xe0 [ 234.274166][ T7642] unregister_virtio_device+0x39/0x60 [ 234.279558][ T7642] virtio_pci_remove+0x7c/0x110 [ 234.284473][ T7642] pci_device_remove+0xb2/0x1d0 [ 234.289332][ T7642] ? __pfx_pci_device_remove+0x10/0x10 [ 234.293827][ T30] audit: type=1400 audit(1785715918.579:804): avc: denied { write } for pid=7711 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.294842][ T7642] device_remove+0xcb/0x180 [ 234.321088][ T7642] device_release_driver_internal+0x44e/0x620 [ 234.327251][ T7642] pci_stop_bus_device+0x120/0x160 [ 234.332454][ T7642] pci_stop_and_remove_bus_device+0x58/0xa0 [ 234.338365][ T7642] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 234.344935][ T7642] remove_store+0x123/0x140 [ 234.349453][ T7642] ? __pfx_remove_store+0x10/0x10 [ 234.354538][ T7642] ? find_held_lock+0x2b/0x80 [ 234.359220][ T7642] ? sysfs_file_kobj+0xe4/0x290 [ 234.364138][ T7642] ? sysfs_file_kobj+0xe4/0x290 [ 234.369011][ T7642] ? __pfx_remove_store+0x10/0x10 [ 234.374092][ T7642] dev_attr_store+0x58/0x80 [ 234.378617][ T7642] ? __pfx_dev_attr_store+0x10/0x10 [ 234.383861][ T7642] sysfs_kf_write+0xf2/0x150 [ 234.388474][ T7642] kernfs_fop_write_iter+0x3e0/0x5f0 [ 234.393825][ T7642] ? __pfx_sysfs_kf_write+0x10/0x10 [ 234.399051][ T7642] vfs_write+0x6ac/0x1050 [ 234.403471][ T7642] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 234.409298][ T7642] ? __pfx_vfs_write+0x10/0x10 [ 234.414165][ T7642] ksys_write+0x12a/0x250 [ 234.418514][ T7642] ? __pfx_ksys_write+0x10/0x10 [ 234.423434][ T7642] do_syscall_64+0x115/0x870 [ 234.428035][ T7642] ? clear_bhb_loop+0x40/0x90 [ 234.432762][ T7642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.438658][ T7642] RIP: 0033:0x7f8e9af9e019 [ 234.443133][ T7642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.462801][ T7642] RSP: 002b:00007f8e9bea3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 234.471252][ T7642] RAX: ffffffffffffffda RBX: 00007f8e9b226090 RCX: 00007f8e9af9e019 [ 234.479226][ T7642] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 000000000000000a [ 234.487239][ T7642] RBP: 00007f8e9b03500c R08: 0000000000000000 R09: 0000000000000000 [ 234.495270][ T7642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.503280][ T7642] R13: 00007f8e9b226128 R14: 00007f8e9b226090 R15: 00007ffd8f060098 [ 234.511298][ T7642] [ 234.514337][ T7642] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 234.521630][ T7642] CPU: 1 UID: 0 PID: 7642 Comm: syz.0.473 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.532398][ T7642] Tainted: [L]=SOFTLOCKUP [ 234.536715][ T7642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 234.546767][ T7642] Call Trace: [ 234.550043][ T7642] [ 234.552969][ T7642] dump_stack_lvl+0x100/0x190 [ 234.557658][ T7642] vpanic+0x552/0x970 [ 234.561647][ T7642] ? __pfx_vpanic+0x10/0x10 [ 234.566168][ T7642] panic+0xd1/0xe0 [ 234.569898][ T7642] ? __pfx_panic+0x10/0x10 [ 234.574332][ T7642] check_panic_on_warn.cold+0x19/0x34 [ 234.579716][ T7642] ? virtio_dev_remove+0x131/0x170 [ 234.584841][ T7642] __warn.cold+0x191/0x318 [ 234.589269][ T7642] __report_bug+0x30f/0x440 [ 234.593865][ T7642] ? virtio_dev_remove+0x131/0x170 [ 234.598990][ T7642] ? __pfx___report_bug+0x10/0x10 [ 234.604034][ T7642] ? kasan_quarantine_put+0x104/0x240 [ 234.609421][ T7642] ? virtio_dev_remove+0x131/0x170 [ 234.614543][ T7642] report_bug+0xb2/0x220 [ 234.618797][ T7642] ? virtio_dev_remove+0x131/0x170 [ 234.623918][ T7642] handle_bug+0x16a/0x2a0 [ 234.628253][ T7642] exc_invalid_op+0x17/0x50 [ 234.632754][ T7642] asm_exc_invalid_op+0x1a/0x20 [ 234.637593][ T7642] RIP: 0010:virtio_dev_remove+0x131/0x170 [ 234.643308][ T7642] Code: c3 89 c6 e8 11 a1 7c fc 84 db 75 18 e8 f8 a6 7c fc 48 89 ef 5b be 01 00 00 00 5d 41 5c 41 5d e9 f5 fd ff ff e8 e0 a6 7c fc 90 <0f> 0b 90 eb dd e8 15 31 ed fc e9 36 ff ff ff e8 ab 30 ed fc eb b1 [ 234.662907][ T7642] RSP: 0018:ffffc9000382f868 EFLAGS: 00010246 [ 234.668966][ T7642] RAX: 0000000000080000 RBX: 00000000000000ff RCX: ffffc9000f55d000 [ 234.676925][ T7642] RDX: 0000000000080000 RSI: ffffffff858dbb00 RDI: ffff888034ae0000 [ 234.684883][ T7642] RBP: ffff888020fc9000 R08: 0000000000000001 R09: 0000000000000000 [ 234.692839][ T7642] R10: 00000000000000ff R11: ffffffff827aeaeb R12: ffffffff8fe277c0 [ 234.700797][ T7642] R13: ffff888020fc9008 R14: ffff888020fc90f0 R15: ffffffff8fe277c0 [ 234.708767][ T7642] ? kasan_save_free_info+0x3b/0x70 [ 234.714002][ T7642] ? virtio_dev_remove+0x130/0x170 [ 234.719110][ T7642] ? virtio_dev_remove+0x130/0x170 [ 234.724212][ T7642] ? __pfx_virtio_dev_remove+0x10/0x10 [ 234.729663][ T7642] device_remove+0xcb/0x180 [ 234.734162][ T7642] device_release_driver_internal+0x44e/0x620 [ 234.740229][ T7642] bus_remove_device+0x2bc/0x560 [ 234.745156][ T7642] ? __pfx_bus_remove_device+0x10/0x10 [ 234.750776][ T7642] ? __pfx_device_remove_attrs+0x10/0x10 [ 234.756407][ T7642] device_del+0x376/0x9b0 [ 234.760732][ T7642] ? __pfx_device_del+0x10/0x10 [ 234.765574][ T7642] ? __pfx___might_resched+0x10/0x10 [ 234.770849][ T7642] ? __pfx_pci_device_is_present+0x10/0x10 [ 234.776675][ T7642] device_unregister+0x1d/0xe0 [ 234.781431][ T7642] unregister_virtio_device+0x39/0x60 [ 234.786797][ T7642] virtio_pci_remove+0x7c/0x110 [ 234.791636][ T7642] pci_device_remove+0xb2/0x1d0 [ 234.796484][ T7642] ? __pfx_pci_device_remove+0x10/0x10 [ 234.801931][ T7642] device_remove+0xcb/0x180 [ 234.806426][ T7642] device_release_driver_internal+0x44e/0x620 [ 234.812495][ T7642] pci_stop_bus_device+0x120/0x160 [ 234.817599][ T7642] pci_stop_and_remove_bus_device+0x58/0xa0 [ 234.823512][ T7642] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 234.830008][ T7642] remove_store+0x123/0x140 [ 234.834504][ T7642] ? __pfx_remove_store+0x10/0x10 [ 234.839522][ T7642] ? find_held_lock+0x2b/0x80 [ 234.844273][ T7642] ? sysfs_file_kobj+0xe4/0x290 [ 234.849118][ T7642] ? sysfs_file_kobj+0xe4/0x290 [ 234.853966][ T7642] ? __pfx_remove_store+0x10/0x10 [ 234.858978][ T7642] dev_attr_store+0x58/0x80 [ 234.863478][ T7642] ? __pfx_dev_attr_store+0x10/0x10 [ 234.868669][ T7642] sysfs_kf_write+0xf2/0x150 [ 234.873257][ T7642] kernfs_fop_write_iter+0x3e0/0x5f0 [ 234.878533][ T7642] ? __pfx_sysfs_kf_write+0x10/0x10 [ 234.883729][ T7642] vfs_write+0x6ac/0x1050 [ 234.888058][ T7642] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 234.893863][ T7642] ? __pfx_vfs_write+0x10/0x10 [ 234.898643][ T7642] ksys_write+0x12a/0x250 [ 234.902971][ T7642] ? __pfx_ksys_write+0x10/0x10 [ 234.907826][ T7642] do_syscall_64+0x115/0x870 [ 234.912405][ T7642] ? clear_bhb_loop+0x40/0x90 [ 234.917078][ T7642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.922958][ T7642] RIP: 0033:0x7f8e9af9e019 [ 234.927362][ T7642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.946955][ T7642] RSP: 002b:00007f8e9bea3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 234.955357][ T7642] RAX: ffffffffffffffda RBX: 00007f8e9b226090 RCX: 00007f8e9af9e019 [ 234.963314][ T7642] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 000000000000000a [ 234.971267][ T7642] RBP: 00007f8e9b03500c R08: 0000000000000000 R09: 0000000000000000 [ 234.979223][ T7642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.987177][ T7642] R13: 00007f8e9b226128 R14: 00007f8e9b226090 R15: 00007ffd8f060098 [ 234.995146][ T7642] [ 234.998369][ T7642] Kernel Offset: disabled [ 235.002672][ T7642] Rebooting in 86400 seconds..