last executing test programs: 20.400510169s ago: executing program 3 (id=413): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0xe8, 0x40, 0xfffffffffffffffd, 0x50, 0x4}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000480)=0xe9, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000006a00)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000300, 0x5d, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x20004000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da070000000000010902"], 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000640)='/dev/comedi3\x00', 0x181000, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc4c85513, &(0x7f0000000540)={{0xb, 0x6, 0x0, 0x2, 'syz0\x00', 0x281d}, 0x0, [0x1, 0x4ea3, 0x9, 0x56cd, 0x7, 0x6, 0x0, 0x80000001, 0x201, 0x1, 0x3fb, 0x1, 0x9, 0x7, 0x4, 0x10000, 0x43, 0x81, 0x80, 0xe8de, 0xfffffffffffffff9, 0x9, 0x201, 0x9, 0x1, 0x8, 0x1, 0x4, 0x0, 0x8000, 0x8, 0xa36, 0x57bf4b04, 0x4, 0x40000000000001, 0x6, 0x8, 0x100000000, 0x8, 0x7ff, 0x6, 0x401, 0x5, 0x8, 0x1ff, 0x10000, 0x2, 0xb7, 0x0, 0x5, 0xbe5, 0xa0000000000, 0x0, 0x1, 0x8, 0x8000000000000003, 0xd3d, 0xbbeb, 0x1, 0x6, 0x4, 0x6, 0x8001, 0x3, 0x1, 0xec7, 0x646, 0xc58e, 0x5, 0x11ad, 0x5, 0x6, 0x8000, 0x100080, 0x7f, 0x9, 0x1, 0x5, 0x8000000000000000, 0x2, 0x7, 0xa5, 0x1b13, 0x4, 0x85, 0x8, 0x3, 0xf75, 0x9, 0xb, 0xffffffffffff66e3, 0xfffffffffffffff9, 0x851a, 0x5e997b8e, 0x0, 0x7, 0x6, 0x4, 0x100, 0x1000000004, 0x3ff, 0x6, 0x0, 0xffffffffffffff95, 0xa, 0x108000001, 0xcc7e, 0x8, 0x0, 0x6, 0x800000000006, 0xfffffffffffffd96, 0x3f3, 0x1, 0x4, 0x0, 0x7, 0x5, 0x6, 0x1, 0xe1, 0xec2, 0x1, 0x5, 0xfff, 0x0, 0x80]}) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r9, 0x406855c9, &(0x7f0000000380)={0x4, 0x6, {0x53, 0x1, 0x2, {0x7, 0x3}, {0xe, 0x3}, @ramp={0x6, 0x0, {0x9, 0xedbe, 0x1, 0x8a}}}, {0x57, 0xb, 0x1190, {0x9, 0x8000}, {0x2, 0x6}, @const={0x3, {0x1ff, 0x9, 0x81, 0x200}}}}) sendmsg$sock(r1, &(0x7f0000000600)={&(0x7f0000000180)=@can, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)="8ce51bd0c74bc6eb0951fa933aa008ce39c8f86c3ab089be15b5441f146479db4f4c694c85b8cec08f82612606f6aee1e9c963b88d2b05a811b0dfc1e8dfad35b1de9e136820b5b0fa14d0f61068f95515d744283d3651ef7e7ccdbabe98b8b8f542d0f89959769be3049f116ca284e008158cd14a49061dc61c1888e874fcdf3ea2098c6908d0", 0x87}], 0x1, &(0x7f0000000540)=[@mark={{0x14, 0x1, 0x24, 0x10000}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0xb7}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x352}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0xa8}, 0x20008000) 17.023105255s ago: executing program 2 (id=421): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) epoll_create(0x7) request_key(0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04060306c900502dc24b2113b33392b07bdfa8882e96170f34bbd31935245958c4d949b4e39ec885d57290"], 0x6) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') preadv(r3, &(0x7f0000000440)=[{&(0x7f0000000340)=""/255, 0xff}], 0x1, 0x7, 0x7) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40408d4) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=@delqdisc={0x24, 0x25, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x10, 0x9}, {0x3, 0xe}, {0xe, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x890}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 16.44462454s ago: executing program 3 (id=423): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x100004, 0xdf18, 0xe2a4, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r1}, 0x38) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f00000001c0)=0x4) r2 = io_uring_setup(0x664b, &(0x7f0000000500)={0x0, 0x5e87, 0x0, 0x0, 0x337}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x4, 0x6}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000006}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) socket$kcm(0x10, 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r6, 0x400455c8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) file_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x800) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000007200000005000000bf09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207b9af8ff000000004c9100000000000037010000f8ffffffb702000008000000b7030000ffffffff15000000060000005f93000000000000b50300000000"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r2, 0xffffffffffffffff, 0x0) 15.660028693s ago: executing program 2 (id=424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x5) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r4) r5 = add_key$fscrypt_v1(&(0x7f0000000140), 0x0, 0x0, 0x0, r4) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000001c0)={r5}, &(0x7f0000000240)=ANY=[@ANYBLOB="656e633d706b63733120686173683d736861332d32353600000000000000000000000000000000000000000000000000000000000000006c1cedbd6ec7ee2327d4bbb34240a4f600000000"], 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x7800, 0x7800, 0x1, 0x7f, {{0x5, 0x4, 0x0, 0x3b, 0x14, 0x67, 0x0, 0xd, 0x2f, 0x0, @multicast1, @broadcast}}}}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) fchownat(0xffffffffffffff9c, 0x0, 0xee01, 0xee01, 0x1000) lgetxattr(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x4048004) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 14.407078172s ago: executing program 2 (id=426): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x70, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x40000}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_PORT_SELF={0x40, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "7da8691e234232d8da0cd3c3d950294c"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a1b8b1f3f92a57a4f3fdf80ac0d9ad47"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5b1f8b30876fac3c90d9e206b034a83c"}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) pipe2$watch_queue(0x0, 0x80) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240), &(0x7f0000000300)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r6) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r7, 0x0, 0x224) keyctl$clear(0x7, r6) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16, @ANYBLOB="01002dbd70027100c1582c000000180001801400020069"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040052800c00018006000600801c00007c13028078131480731315806f1301"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 13.343198142s ago: executing program 4 (id=428): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e2e, 0x3, 'lblc\x00', 0x11, 0x5, 0x14}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) eventfd2(0x3, 0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x87) fchdir(r5) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x702, 0x36, 0x0, &(0x7f0000001080)="e460334470b8d480eb00c15286dd08d8829f5fb5e2eb3b56fddaa2b27da9d81c20bfde92a3cd98f29389530882794568195b29c77653", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f0000000080)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000000180)=0x28) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x78}}, 0x20040880) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r7, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 12.858069809s ago: executing program 1 (id=429): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, 0x0, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r3, 0x4b4b, &(0x7f0000000000)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r4, &(0x7f0000002640)={0x2020}, 0x2020) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) fremovexattr(r1, &(0x7f0000000040)=@known='trusted.overlay.origin\x00') write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @loopback, 0x3}}}, 0x30) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12.756362009s ago: executing program 3 (id=430): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = fsopen(&(0x7f00000003c0)='tmpfs\x00', 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000007, 0x32, 0xffffffffffffffff, 0x10000000) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000180)=0x1, 0x4) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f00000005c0), 0x0, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 11.695794267s ago: executing program 4 (id=432): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) close(r0) r1 = syz_open_dev$audion(&(0x7f0000000300), 0x3, 0x101000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000008ec0)={0x0, 0x0, &(0x7f0000008e80)={&(0x7f0000008e00)=ANY=[@ANYBLOB="2000000000070101000000000009000003000003090001007379300000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x0) mkdirat(r1, &(0x7f0000000340)='./file2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) read$msr(r3, &(0x7f000001aa40)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000002780)=[{{&(0x7f0000000340)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002740)=[{0x0}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000280)=@sack_info={r6, 0x4, 0x10001}, 0xc) syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="c000000040000701feffffff0000000003000000040042800c0001800600060086dd"], 0xc0}, 0x1, 0x0, 0x0, 0x4060814}, 0xc000) pread64(r7, &(0x7f0000000440)=""/239, 0xef, 0xffffffffffff8ea6) 10.719420172s ago: executing program 2 (id=433): sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x0, 0x0, {0x54}, [@nsim={{0x1f}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f6, 0x2, 0x70bd27, 0x25dfdbff, "", ["", ""]}, 0x10}}, 0x40080) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r6 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x1}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000700)={0x24, &(0x7f0000000580)={0x40, 0x9, 0xa7, {0xa7, 0xd, "923dbfdfd119d3c642173dd522db7d5d55a7d136a7544809895bf30531811508473aa32e15c475eabd0472a7ed153bb7f4489fc6b2bf6ebaa4df6eaf7f63a07f55be584f8aef1c2145e6432350776c7b7ce776a8eae8c7c6264090fc23b3b17c7a26237a9f065850a4a8b0664130c6000e1708478184ff69b28c0f6dec4f34a049c626f507cdb6c57566185cbbb193eb659926f443b43abec22e2cbba3c3195de9ea3c417a"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}, &(0x7f0000000680)={0x0, 0x22, 0x22, {[@global=@item_4={0x3, 0x1, 0x0, "e89c3095"}, @global=@item_012={0x2, 0x1, 0x3, "d75a"}, @global=@item_4={0x3, 0x1, 0xb, "874d13b7"}, @main=@item_012={0x0, 0x0, 0x8}, @main=@item_012={0x1, 0x0, 0x9, 'N'}, @local=@item_4={0x3, 0x2, 0x5, "50eb475a"}, @global=@item_4={0x3, 0x1, 0x5, "46362b1d"}, @local=@item_4={0x3, 0x2, 0x4, "4a7c5383"}, @main=@item_012={0x0, 0x0, 0x1}, @local=@item_012={0x1, 0x2, 0x5, '{'}]}}, &(0x7f00000006c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x800, 0xa, 0x1, {0x22, 0xb1a}}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000740)={0x0, 0xe, 0x6c, "48de289c8165b558bd51a5789bd3d99025526f5b775cd28e774a82a5c8c1fc98fe791289af17bf3d4370faffb925b97f0e9a9a55e52c784b12436f53708987a26919db3038372130aa84d47b238bac86be20949ddb0c7d8687a7c9ab7cdcc0b8dc43ac5af5e7b189ef086e04"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000840)={0x20, 0x1, 0x65, "1391686ac8ed8b19843ce2a683706d921d0458b040a9143bd367ea3568ffe513f49a79ff85a895b7dc60d001a27fdca4b8824a994302b147988d0f79d88aba0c053f639ed26f0d3f91eeb3c7b23b9af005797c57d70fa88f703915d64dba83f16914f19edf"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x81}}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000000003b33597c1cf6b8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x5, 0x2, 0x10, 0x7fef7bf9}]}) r7 = fsopen(0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) ioctl$OCFS2_IOC_GROUP_ADD64(r7, 0x40186f03, &(0x7f0000000180)={0xffffffff, 0xd, 0x1, 0x7}) syz_usb_connect$uac2(0x3, 0xa0, &(0x7f0000000280)=ANY=[], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x3d}) 10.718350159s ago: executing program 4 (id=434): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x100004, 0xdf18, 0xe2a4, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r1}, 0x38) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f00000001c0)=0x4) r2 = io_uring_setup(0x664b, &(0x7f0000000500)={0x0, 0x5e87, 0x0, 0x0, 0x337}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x4, 0x6}, 0x50) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) socket$kcm(0x10, 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x400455c8, 0x0) syz_usb_connect$hid(0x3, 0x41, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000007200000005000000bf09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207b9af8ff000000004c9100000000000037010000f8ffffffb702000008000000b7030000ffffffff15000000060000005f93000000000000b50300000000"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r2, 0xffffffffffffffff, 0x0) 10.673661097s ago: executing program 1 (id=435): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x3c05, &(0x7f0000000280)={0x0, 0x98bf, 0x0, 0x1, 0xad}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x24, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r2 = getpid() sched_getparam(r2, &(0x7f0000000200)) process_madvise(0xffffffffffffffff, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='attr/sockcreate\x00') fsopen(0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_INUMBERS(0xffffffffffffffff, 0x80405880, 0x0) socket$alg(0x26, 0x5, 0x0) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffffffffc00, 0x7, &(0x7f0000006680)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r4, 0x400, 0x0) fremovexattr(r4, &(0x7f0000000040)=@known='system.posix_acl_default\x00') ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'veth1_to_team\x00', &(0x7f0000000340)=@ethtool_gstrings={0x1b, 0x9, 0x4, "fb038c2a"}}) 9.176267719s ago: executing program 1 (id=436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x5) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r4) r5 = add_key$fscrypt_v1(&(0x7f0000000140), 0x0, 0x0, 0x0, r4) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000001c0)={r5}, &(0x7f0000000240)=ANY=[@ANYBLOB="656e633d706b63733120686173683d736861332d32353600000000000000000000000000000000000000000000000000000000000000006c1cedbd6ec7ee2327d4bbb34240a4f600000000"], 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x7800, 0x7800, 0x1, 0x7f, {{0x5, 0x4, 0x0, 0x3b, 0x14, 0x67, 0x0, 0xd, 0x2f, 0x0, @multicast1, @broadcast}}}}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) fchownat(0xffffffffffffff9c, 0x0, 0xee01, 0xee01, 0x1000) lgetxattr(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x4048004) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 9.175662407s ago: executing program 3 (id=437): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) epoll_create(0x7) request_key(0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04060306c900502dc24b2113b33392b07bdfa8882e96170f34bbd31935245958c4d949b4e39ec885d57290"], 0x6) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000001300)={0x2020}, 0x2020) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000340)=""/255, 0xff}], 0x1, 0x7, 0x7) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40408d4) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=@delqdisc={0x24, 0x25, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x10, 0x9}, {0x3, 0xe}, {0xe, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x890}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 8.071312068s ago: executing program 1 (id=438): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x24, r1, 0x1, 0x7c, 0x40000, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0xc082}, 0x4000800) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') syz_usb_connect_ath9k(0x3, 0x56, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e402, [{{0x9, 0x2, 0xfffffffffffffd08}}]}}, 0x7fe782539b0b) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@userxattr}], [], 0x2c}) lseek(r3, 0x10001, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="400601000004b3"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100002aafee08f00a51678b750000000109021b0001000000000904"], 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = socket(0x10, 0x3, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x20001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100080}, [@generic={0x73, 0x1, 0x1, 0x37}]}, &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) 7.654354028s ago: executing program 3 (id=439): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) connect(r3, &(0x7f0000002440)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x80) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) r5 = userfaultfd(0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x100000c7}, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r8 = open(&(0x7f0000000000)='./file0\x00', 0x840, 0x191) r9 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000001c0)={0xa0000000}) creat(&(0x7f0000000080)='./file0\x00', 0x20) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000444000/0x3000)=nil, 0x3000}, 0x1}) bind$alg(0xffffffffffffffff, &(0x7f00000023c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0xcdaf}, 0x1c) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) 6.690176081s ago: executing program 0 (id=440): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x40000084, 0x0, 0x4}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet(r7, &(0x7f00000003c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5800000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000002800128009000100766c616e00000000180002800c0002001e0000001f00000006000100fc0f000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x58}}, 0x8000) ioctl$TIOCSSOFTCAR(r5, 0x5412, &(0x7f0000000040)=0x11) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_ALLOC_STREAMS(r11, 0x8008551c, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, 0x0, 0x0) listen(r12, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000540600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22e601e68346e81016bd"], 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x24, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @local}}, 0x7, 0x9}, 0x90) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYRES8=r4], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 6.631427209s ago: executing program 4 (id=441): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x408002, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000025300)=""/102392, 0x18ff8) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5) sendmsg$IEEE802154_LLSEC_LIST_DEV(r5, 0x0, 0x8004) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10, &(0x7f0000000100)=0x4, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) write$UHID_INPUT(r7, &(0x7f00000002c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000140)={{0x33, @empty, 0x4e22, 0x4, 'nq\x00', 0x4, 0x4, 0xd}, {@multicast1, 0x4e22, 0x10006, 0x7, 0x1, 0x5}}, 0x44) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 5.570533181s ago: executing program 4 (id=442): getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11e, 0x1, &(0x7f0000000280)=0x400, 0x4) listen(0xffffffffffffffff, 0x7fff) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)={0x10c, 0x10, 0x1, 0x0, 0x0, "", [@generic="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"]}, 0x10c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, 0x0, 0x400c854) socket(0x10, 0x803, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x6000) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0x2000, 0x118000}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) 5.494409143s ago: executing program 0 (id=443): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) dup(0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x50) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x34, r6, 0x1, 0x400000, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24}, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a90400000000000000c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27", 0xc7, 0xffffffffffffffff) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) sysfs$1(0x1, &(0x7f0000000380)='!]\\\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x2, 0x9d, 0x18, 0xb, 0x14, 0x6}}]}}]}, 0x148}}, 0x4008010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 4.355406394s ago: executing program 0 (id=444): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) epoll_create(0x7) request_key(0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04060306c900502dc24b2113b33392b07bdfa8882e96170f34bbd31935245958c4d949b4e39ec885d57290"], 0x6) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') read$FUSE(r3, &(0x7f0000001300)={0x2020}, 0x2020) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, 0x0, &(0x7f0000000100)) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40408d4) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=@delqdisc={0x24, 0x25, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x10, 0x9}, {0x3, 0xe}, {0xe, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x890}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 3.743408506s ago: executing program 2 (id=445): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) close(r0) r1 = syz_open_dev$audion(&(0x7f0000000300), 0x3, 0x101000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000008ec0)={0x0, 0x0, &(0x7f0000008e80)={&(0x7f0000008e00)=ANY=[@ANYBLOB="2000000000070101000000000009000003000003090001007379300000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x0) mkdirat(r1, &(0x7f0000000340)='./file2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) read$msr(r3, &(0x7f000001aa40)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000002780)=[{{&(0x7f0000000340)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002740)=[{0x0}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000280)=@sack_info={r6, 0x4, 0x10001}, 0xc) syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="c000000040000701feffffff0000000003000000040042800c0001800600060086dd"], 0xc0}, 0x1, 0x0, 0x0, 0x4060814}, 0xc000) pread64(r7, &(0x7f0000000440)=""/239, 0xef, 0xffffffffffff8ea6) 3.068346029s ago: executing program 2 (id=446): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000400)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff000008000000"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xd}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x80047456, &(0x7f0000000040)={0x6, 0xa, 0x3, 0x80000002, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xdfffffff, 0x5}) r5 = socket$inet6(0xa, 0x3, 0x7) socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000180)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x10) 2.941395295s ago: executing program 4 (id=447): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_open_dev$loop(0x0, 0x2, 0x2001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}}, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x101) ioctl$CEC_TRANSMIT(r4, 0xc0386105, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1, 0x100}}, {{0xa, 0x4e22, 0x0, @private1}}}, 0x104) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000700)=ANY=[@ANYBLOB="080000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000c0ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000020000000a00000000000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fc0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a626877404b0f4df3b51df9a985b8ceea866132ba6c2d90ea448b50c32a003f39f551aeea048"], 0x190) close(r7) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$sysctl(r6, &(0x7f00000000c0)='2\x00', 0x2) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x600, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20700, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0xffffffffffffff4d}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 2.835512587s ago: executing program 0 (id=449): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x5) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r4) r5 = add_key$fscrypt_v1(&(0x7f0000000140), 0x0, 0x0, 0x0, r4) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000001c0)={r5}, &(0x7f0000000240)=ANY=[@ANYBLOB="656e633d706b63733120686173683d736861332d32353600000000000000000000000000000000000000000000000000000000000000006c1cedbd6ec7ee2327d4bbb34240a4f600000000"], 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x7800, 0x7800, 0x1, 0x7f, {{0x5, 0x4, 0x0, 0x3b, 0x14, 0x67, 0x0, 0xd, 0x2f, 0x0, @multicast1, @broadcast}}}}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) fchownat(0xffffffffffffff9c, 0x0, 0xee01, 0xee01, 0x1000) lgetxattr(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x4048004) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 1.872839336s ago: executing program 1 (id=450): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) epoll_create(0x7) request_key(0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04060306c900502dc24b2113b33392b07bdfa8882e96170f34bbd31935245958c4d949b4e39ec885d57290"], 0x6) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000001300)={0x2020}, 0x2020) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000340)=""/255, 0xff}], 0x1, 0x7, 0x7) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40408d4) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=@delqdisc={0x24, 0x25, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x10, 0x9}, {0x3, 0xe}, {0xe, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x890}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 1.680320913s ago: executing program 0 (id=451): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) epoll_create(0x7) request_key(0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04060306c900502dc24b2113b33392b07bdfa8882e96170f34bbd31935245958c4d949b4e39ec885d57290"], 0x6) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') read$FUSE(r3, &(0x7f0000001300)={0x2020}, 0x2020) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, 0x0, &(0x7f0000000100)) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40408d4) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=@delqdisc={0x24, 0x25, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x10, 0x9}, {0x3, 0xe}, {0xe, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x890}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 1.017720907s ago: executing program 3 (id=452): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000000)=0x7, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x540, 0x4) sendmmsg$inet(r5, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=0x0], 0x10}}], 0x1, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000ec0), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 452.733997ms ago: executing program 1 (id=453): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x9, 0x8, 0x8001, 0x0, 0x4, 0x6, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) timerfd_create(0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/144, 0x90, 0x2f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r4, &(0x7f00000044c0), 0x4000000000001c0, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) writev(r5, &(0x7f0000001680)=[{&(0x7f0000000300)='w}', 0x2}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregset(0x4205, r6, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 0s ago: executing program 0 (id=454): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x23, 0x301, 0x270bd22, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x121400, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000100)={'syzkaller1\x00', @remote}) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) kernel console output (not intermixed with test programs): ed/syz3" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 108.625932][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 108.735128][ T30] audit: type=1400 audit(1780665373.015:305): avc: denied { write } for pid=6141 comm="syz.2.69" name="001" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 108.881249][ T30] audit: type=1400 audit(1780665373.165:306): avc: denied { unlink } for pid=6147 comm="syz.4.71" name="#1" dev="tmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 108.911061][ T30] audit: type=1400 audit(1780665373.195:307): avc: denied { mount } for pid=6147 comm="syz.4.71" name="/" dev="overlay" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 109.133176][ T6151] netlink: 'syz.4.71': attribute type 49 has an invalid length. [ 109.160845][ T6151] bond0: (slave bond_slave_0): Releasing backup interface [ 109.233394][ T6151] bond_slave_0: entered promiscuous mode [ 109.239292][ T6151] bond_slave_0: entered allmulticast mode [ 109.347102][ T30] audit: type=1400 audit(1780665373.625:308): avc: denied { search } for pid=5281 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.431987][ T30] audit: type=1400 audit(1780665373.625:309): avc: denied { search } for pid=5281 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.499448][ T30] audit: type=1400 audit(1780665373.625:310): avc: denied { search } for pid=5281 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.579141][ T30] audit: type=1400 audit(1780665373.625:311): avc: denied { read } for pid=5281 comm="dhcpcd" name="n30" dev="tmpfs" ino=2206 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.605544][ T29] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 109.671549][ T30] audit: type=1400 audit(1780665373.625:312): avc: denied { open } for pid=5281 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2206 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.827100][ T29] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 109.837559][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.854223][ T29] usb 1-1: Product: syz [ 109.867230][ T29] usb 1-1: Manufacturer: syz [ 109.886130][ T29] usb 1-1: SerialNumber: syz [ 110.388221][ T29] usb 1-1: config 0 descriptor?? [ 110.671928][ T5619] Bluetooth: hci5: command 0x1003 tx timeout [ 110.679076][ T5624] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 110.920330][ T6175] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 110.933328][ T6175] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 110.961551][ T6175] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 111.802249][ T29] usb 1-1: Firmware version (0.0) predates our first public release. [ 111.816116][ T29] usb 1-1: Please update to version 0.2 or newer [ 112.194639][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 112.194655][ T30] audit: type=1400 audit(1780665376.485:335): avc: denied { watch_reads } for pid=6184 comm="syz.1.76" path="/15" dev="tmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 112.294219][ T30] audit: type=1400 audit(1780665376.585:336): avc: denied { open } for pid=6184 comm="syz.1.76" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 112.396208][ T6191] netlink: 'syz.4.75': attribute type 1 has an invalid length. [ 112.404843][ T6191] netlink: 96 bytes leftover after parsing attributes in process `syz.4.75'. [ 112.413839][ T6191] netlink: 658 bytes leftover after parsing attributes in process `syz.4.75'. [ 112.423011][ T6191] netlink: 1 bytes leftover after parsing attributes in process `syz.4.75'. [ 114.283992][ T30] audit: type=1400 audit(1780665376.615:337): avc: denied { ioctl } for pid=6184 comm="syz.1.76" path="/dev/ptyq7" dev="devtmpfs" ino=126 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 114.767417][ T30] audit: type=1400 audit(1780665376.785:338): avc: denied { read write } for pid=6186 comm="syz.4.75" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 114.899036][ T5734] usb 1-1: USB disconnect, device number 4 [ 115.490346][ T30] audit: type=1400 audit(1780665376.785:339): avc: denied { open } for pid=6186 comm="syz.4.75" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 115.561398][ T30] audit: type=1400 audit(1780665376.795:340): avc: denied { setopt } for pid=6184 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 115.642635][ T30] audit: type=1400 audit(1780665376.805:341): avc: denied { read write } for pid=6186 comm="syz.4.75" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 115.801887][ T30] audit: type=1400 audit(1780665376.805:342): avc: denied { open } for pid=6186 comm="syz.4.75" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 116.284627][ T6210] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ [ 116.330498][ T30] audit: type=1400 audit(1780665376.815:343): avc: denied { ioctl } for pid=6186 comm="syz.4.75" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 116.382472][ T30] audit: type=1400 audit(1780665376.825:344): avc: denied { create } for pid=6186 comm="syz.4.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 116.660808][ T6220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=144 sclass=netlink_route_socket pid=6220 comm=syz.2.79 [ 116.684453][ T1016] Bluetooth: hci5: Frame reassembly failed (-84) [ 117.136786][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.82'. [ 117.466553][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 117.466570][ T30] audit: type=1400 audit(1780665381.235:350): avc: denied { create } for pid=6217 comm="syz.0.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 118.443577][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 118.665016][ T5619] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 118.697298][ T5624] Bluetooth: hci5: command 0x1003 tx timeout [ 120.576547][ T30] audit: type=1400 audit(1780665383.135:351): avc: denied { ioctl } for pid=6199 comm="syz.2.79" path="socket:[10607]" dev="sockfs" ino=10607 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.741309][ T30] audit: type=1400 audit(1780665385.025:352): avc: denied { shutdown } for pid=6236 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.795010][ T6238] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 120.806011][ T6238] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 120.816183][ T6238] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 120.867392][ T6239] Can't find a SQUASHFS superblock on nullb0 [ 121.106532][ T30] audit: type=1400 audit(1780665385.355:353): avc: denied { getopt } for pid=6236 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 121.578443][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 123.756443][ T30] audit: type=1400 audit(1780665387.595:354): avc: denied { create } for pid=6248 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.851224][ T6256] syz.2.89 (6256): drop_caches: 2 [ 126.730685][ T6270] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 126.737366][ T6270] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 126.757218][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.95'. [ 126.855717][ T6270] vhci_hcd vhci_hcd.0: Device attached [ 126.880269][ T30] audit: type=1400 audit(1780665391.165:355): avc: denied { mount } for pid=6262 comm="syz.4.93" name="/" dev="configfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 127.052886][ T6275] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 127.055817][ T30] audit: type=1400 audit(1780665391.305:356): avc: denied { create } for pid=6269 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 127.304246][ T6263] netlink: 264 bytes leftover after parsing attributes in process `syz.4.93'. [ 127.372574][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.379412][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.405651][ T6270] Bluetooth: MGMT ver 1.23 [ 127.449471][ T6271] vhci_hcd: connection closed [ 127.451176][ T1122] vhci_hcd vhci_hcd.0: stop threads [ 127.517667][ T1122] vhci_hcd vhci_hcd.0: release socket [ 127.584025][ T1122] vhci_hcd vhci_hcd.0: disconnect device [ 127.605376][ T5712] usb 34-1: enqueue for inactive port 0 [ 127.655313][ T10] Process accounting resumed [ 127.737482][ T30] audit: type=1400 audit(1780665392.025:357): avc: denied { connect } for pid=6287 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 127.810313][ T30] audit: type=1400 audit(1780665392.095:358): avc: denied { write } for pid=6287 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 128.020884][ T30] audit: type=1400 audit(1780665392.305:359): avc: denied { write } for pid=6266 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.163128][ T5712] usb usb34-port1: attempt power cycle [ 128.257186][ T6307] syz_tun: entered allmulticast mode [ 129.283405][ T30] audit: type=1400 audit(1780665393.565:360): avc: denied { write } for pid=6308 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.537702][ T5712] usb usb34-port1: unable to enumerate USB device [ 129.716732][ T5619] Bluetooth: hci1: command 0x0406 tx timeout [ 130.066215][ T6299] syz_tun: left allmulticast mode [ 130.126685][ T30] audit: type=1400 audit(1780665394.405:361): avc: denied { write } for pid=6318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.378561][ T30] audit: type=1400 audit(1780665394.665:362): avc: denied { write } for pid=6329 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.920140][ T6337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'. [ 131.873730][ T6346] NILFS (nullb0): couldn't find nilfs on the device [ 133.213083][ T5712] IPVS: starting estimator thread 0... [ 133.284183][ T6356] netlink: 164 bytes leftover after parsing attributes in process `syz.1.105'. [ 133.329133][ T30] audit: type=1400 audit(1780665397.555:363): avc: denied { write } for pid=6357 comm="syz.2.108" name="wireless" dev="proc" ino=4026533172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 133.441986][ T6363] IPVS: using max 37 ests per chain, 88800 per kthread [ 135.224204][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 136.184966][ T6388] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 136.286324][ T6391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.114'. [ 137.015461][ T6387] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 137.047356][ T30] audit: type=1400 audit(1780665400.565:364): avc: denied { create } for pid=6385 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 137.134371][ T30] audit: type=1400 audit(1780665400.575:365): avc: denied { write } for pid=6385 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 137.231896][ T5624] Bluetooth: hci5: command 0x1003 tx timeout [ 137.232126][ T4935] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 137.904714][ T6406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.115'. [ 137.951803][ T4935] Bluetooth: hci0: command 0x0406 tx timeout [ 138.018013][ T1122] Bluetooth: hci5: Frame reassembly failed (-84) [ 138.215904][ T6412] Can't find a SQUASHFS superblock on nullb0 [ 139.008367][ T6401] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.016929][ T6401] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.389509][ T30] audit: type=1400 audit(1780665403.675:366): avc: denied { create } for pid=6415 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 139.539867][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.866194][ T30] audit: type=1400 audit(1780665403.915:367): avc: denied { ioctl } for pid=6415 comm="syz.0.119" path="socket:[10860]" dev="sockfs" ino=10860 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 139.894782][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.125781][ T4935] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 140.125963][ T5619] Bluetooth: hci5: command 0x1003 tx timeout [ 140.273766][ T30] audit: type=1400 audit(1780665404.545:368): avc: denied { create } for pid=6422 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 140.591207][ T30] audit: type=1400 audit(1780665404.545:369): avc: denied { write } for pid=6422 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 141.054969][ T30] audit: type=1400 audit(1780665404.605:370): avc: denied { ioctl } for pid=6422 comm="syz.4.121" path="socket:[10873]" dev="sockfs" ino=10873 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 141.426488][ T1114] Bluetooth: hci5: Frame reassembly failed (-84) [ 141.513844][ T6424] bridge0: port 3(syz_tun) entered blocking state [ 141.531920][ T6424] bridge0: port 3(syz_tun) entered disabled state [ 141.540625][ T6411] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 141.558496][ T6424] syz_tun: entered allmulticast mode [ 141.573687][ T6424] syz_tun: entered promiscuous mode [ 141.602122][ T6424] bridge0: port 3(syz_tun) entered blocking state [ 141.609007][ T6424] bridge0: port 3(syz_tun) entered forwarding state [ 141.619957][ T6411] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 141.632860][ T6411] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 141.644482][ T6425] bridge0: port 3(syz_tun) entered learning state [ 141.673083][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.682190][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.738090][ T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.766987][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.775556][ T30] audit: type=1326 audit(1780665406.065:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6430 comm="syz.1.124" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ddb9ce59 code=0x7ffc0000 [ 141.943508][ T6437] netlink: 'syz.0.123': attribute type 13 has an invalid length. [ 142.138812][ T6437] gretap0: refused to change device tx_queue_len [ 142.146629][ T6437] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 142.162379][ T6436] lo speed is unknown, defaulting to 1000 [ 142.186227][ T6436] lo speed is unknown, defaulting to 1000 [ 142.258322][ T6436] lo speed is unknown, defaulting to 1000 [ 143.051232][ T30] audit: type=1326 audit(1780665406.095:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6430 comm="syz.1.124" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ddb9ce59 code=0x7ffc0000 [ 143.100824][ T30] audit: type=1326 audit(1780665406.095:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6430 comm="syz.1.124" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ddb9ce59 code=0x7ffc0000 [ 143.127243][ T30] audit: type=1326 audit(1780665406.095:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6430 comm="syz.1.124" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f23ddb9ce59 code=0x7ffc0000 [ 143.153932][ T30] audit: type=1326 audit(1780665406.095:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6430 comm="syz.1.124" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ddb9ce59 code=0x7ffc0000 [ 143.180238][ T30] audit: type=1326 audit(1780665406.095:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6430 comm="syz.1.124" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ddb9ce59 code=0x7ffc0000 [ 143.184562][ T1739] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 143.207407][ T30] audit: type=1326 audit(1780665406.095:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6430 comm="syz.1.124" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ddb9ce59 code=0x7ffc0000 [ 143.376587][ T30] audit: type=1326 audit(1780665406.095:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6430 comm="syz.1.124" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ddb9ce59 code=0x7ffc0000 [ 143.433954][ T1739] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.444245][ T1739] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 143.467989][ T1739] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 143.471922][ T5619] Bluetooth: hci5: command 0x1003 tx timeout [ 143.478450][ T4935] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 143.496397][ T1739] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.506297][ T1739] usb 5-1: Product: syz [ 143.511194][ T1739] usb 5-1: Manufacturer: syz [ 143.515875][ T1739] usb 5-1: SerialNumber: syz [ 143.543090][ T1739] usb 5-1: config 0 descriptor?? [ 143.573825][ T30] audit: type=1326 audit(1780665406.105:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6430 comm="syz.1.124" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f23ddb9ce59 code=0x7ffc0000 [ 143.627360][ T803] lo speed is unknown, defaulting to 1000 [ 143.638441][ T6436] infiniband syz2: set active [ 143.653939][ T6436] infiniband syz2: added lo [ 143.659169][ T30] audit: type=1326 audit(1780665406.105:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6430 comm="syz.1.124" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23ddb9ce59 code=0x0 [ 143.706874][ T6436] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 143.719286][ T6436] infiniband syz2: Couldn't open port 1 [ 143.741368][ T30] audit: type=1326 audit(1780665406.105:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6430 comm="syz.1.124" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ddb9ce59 code=0x7ffc0000 [ 143.786244][ T6436] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 143.839285][ T6436] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 143.880233][ T6436] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 144.626248][ T6436] RDS/IB: syz2: added [ 144.644243][ T6436] smc: adding ib device syz2 with port count 1 [ 145.077838][ T6436] smc: ib device syz2 port 1 has no pnetid [ 145.156986][ T5712] lo speed is unknown, defaulting to 1000 [ 145.186404][ T6436] lo speed is unknown, defaulting to 1000 [ 145.899552][ T6436] lo speed is unknown, defaulting to 1000 [ 146.159428][ T1739] usb 5-1: USB disconnect, device number 2 [ 146.739227][ T6436] lo speed is unknown, defaulting to 1000 [ 148.494752][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 148.494770][ T30] audit: type=1400 audit(1780665411.625:405): avc: denied { ioctl } for pid=6465 comm="syz.4.132" path="socket:[11346]" dev="sockfs" ino=11346 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 149.398499][ T30] audit: type=1400 audit(1780665411.625:406): avc: denied { connect } for pid=6465 comm="syz.4.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 149.927319][ T6436] lo speed is unknown, defaulting to 1000 [ 150.785752][ T6436] lo speed is unknown, defaulting to 1000 [ 151.090123][ T6484] mmap: syz.2.130 (6484) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 151.375496][ T6483] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8 sclass=netlink_xfrm_socket pid=6483 comm=syz.3.134 [ 152.353252][ T5352] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 152.517599][ T30] audit: type=1326 audit(1780665416.805:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6499 comm="syz.4.138" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf9ce59 code=0x7ffc0000 [ 152.556012][ T5352] usb 1-1: unable to get BOS descriptor or descriptor too short [ 152.574870][ T5352] usb 1-1: not running at top speed; connect to a high speed hub [ 152.588244][ T5352] usb 1-1: config 1 has an invalid interface number: 116 but max is 0 [ 152.601927][ T5352] usb 1-1: config 1 has no interface number 0 [ 152.607198][ T30] audit: type=1326 audit(1780665416.805:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6499 comm="syz.4.138" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf9ce59 code=0x7ffc0000 [ 152.638571][ T5352] usb 1-1: config 1 interface 116 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 152.663865][ T5352] usb 1-1: config 1 interface 116 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 152.680793][ T140] Bluetooth: hci5: Frame reassembly failed (-84) [ 152.688511][ T5352] usb 1-1: config 1 interface 116 altsetting 15 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 152.709682][ T30] audit: type=1326 audit(1780665416.805:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6499 comm="syz.4.138" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf9ce59 code=0x7ffc0000 [ 152.711163][ T5352] usb 1-1: config 1 interface 116 altsetting 15 endpoint 0x81 has invalid maxpacket 48940, setting to 64 [ 152.748592][ T5352] usb 1-1: config 1 interface 116 altsetting 15 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.762040][ T5352] usb 1-1: config 1 interface 116 has no altsetting 0 [ 152.769009][ T30] audit: type=1326 audit(1780665416.805:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6499 comm="syz.4.138" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf9ce59 code=0x7ffc0000 [ 152.808411][ T5352] usb 1-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 152.817801][ T5352] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.827885][ T5352] usb 1-1: Product: syz [ 152.832797][ T30] audit: type=1326 audit(1780665416.805:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6499 comm="syz.4.138" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe68cf9ce59 code=0x7ffc0000 [ 152.861650][ T5352] usb 1-1: Manufacturer: syz [ 152.869907][ T5352] usb 1-1: SerialNumber: syz [ 152.888642][ T6495] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 152.897520][ T6495] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 152.911938][ T30] audit: type=1326 audit(1780665416.805:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6499 comm="syz.4.138" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf9ce59 code=0x7ffc0000 [ 152.966091][ T30] audit: type=1326 audit(1780665416.805:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6499 comm="syz.4.138" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf9ce59 code=0x7ffc0000 [ 153.019023][ T1114] Bluetooth: hci6: Frame reassembly failed (-84) [ 153.031849][ T30] audit: type=1326 audit(1780665416.805:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6499 comm="syz.4.138" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf9ce59 code=0x7ffc0000 [ 153.224626][ T6495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.237906][ T6495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.265662][ T6495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.278005][ T6495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.413865][ T6511] fuse: Unknown parameter 'fd00000000000000000000010' [ 153.501095][ T6512] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 153.715172][ T5352] ums-usbat 1-1:1.116: USB Mass Storage device detected [ 153.794849][ T5352] ums-usbat 1-1:1.116: probe with driver ums-usbat failed with error -5 [ 153.815708][ T5352] usb 1-1: USB disconnect, device number 5 [ 153.948046][ T6517] trusted_key: encrypted_key: insufficient parameters specified [ 154.060718][ T6518] trusted_key: encrypted_key: insufficient parameters specified [ 154.457677][ T30] kauditd_printk_skb: 178 callbacks suppressed [ 154.457738][ T30] audit: type=1400 audit(1780665418.745:593): avc: denied { name_connect } for pid=6520 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 154.758902][ T4935] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 155.139383][ T5624] Bluetooth: hci6: command 0x1003 tx timeout [ 155.148358][ T5619] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 155.240360][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.145'. [ 155.316223][ T5619] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 155.326463][ T30] audit: type=1400 audit(1780665419.595:594): avc: denied { create } for pid=6529 comm="syz.4.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 156.693453][ T6540] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 156.702886][ T6540] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 156.712944][ T6540] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 156.762230][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 157.020732][ T30] audit: type=1326 audit(1780665421.305:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6554 comm="syz.3.153" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fd39ce59 code=0x7ffc0000 [ 157.093611][ T30] audit: type=1326 audit(1780665421.335:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6554 comm="syz.3.153" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fd39ce59 code=0x7ffc0000 [ 157.124594][ T30] audit: type=1326 audit(1780665421.335:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6554 comm="syz.3.153" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fd39ce59 code=0x7ffc0000 [ 157.129134][ T1114] Bluetooth: hci5: Frame reassembly failed (-84) [ 157.151221][ T30] audit: type=1326 audit(1780665421.335:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6554 comm="syz.3.153" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fd39ce59 code=0x7ffc0000 [ 157.186320][ T30] audit: type=1326 audit(1780665421.345:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6554 comm="syz.3.153" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd6fd39ce59 code=0x7ffc0000 [ 157.213394][ T30] audit: type=1326 audit(1780665421.345:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6554 comm="syz.3.153" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fd39ce59 code=0x7ffc0000 [ 157.694881][ T30] audit: type=1326 audit(1780665421.345:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6554 comm="syz.3.153" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fd39ce59 code=0x7ffc0000 [ 158.168433][ T30] audit: type=1326 audit(1780665421.345:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6554 comm="syz.3.153" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fd39ce59 code=0x7ffc0000 [ 158.192020][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 158.351886][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 158.360142][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 158.369243][ T10] usb 1-1: config 4 interface 0 has no altsetting 0 [ 158.677837][ T10] usb 1-1: string descriptor 0 read error: -22 [ 158.684593][ T10] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 158.711811][ T10] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 158.733195][ T10] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 159.048117][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 159.076976][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 159.097954][ T10] usb 1-1: media controller created [ 159.115367][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 159.152356][ T5624] Bluetooth: hci5: command 0x1003 tx timeout [ 159.161280][ T5619] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 159.748253][ T6586] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 159.761979][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.156'. [ 160.644343][ T30] kauditd_printk_skb: 187 callbacks suppressed [ 160.644373][ T30] audit: type=1400 audit(1780665424.615:790): avc: denied { bind } for pid=6591 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 160.762695][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 160.822518][ T30] audit: type=1400 audit(1780665425.095:791): avc: denied { listen } for pid=6588 comm="syz.1.158" lport=58721 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 160.940095][ T30] audit: type=1400 audit(1780665425.115:792): avc: denied { accept } for pid=6588 comm="syz.1.158" lport=58721 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 161.016351][ T30] audit: type=1400 audit(1780665425.155:793): avc: denied { read } for pid=6588 comm="syz.1.158" lport=58721 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 161.054749][ T6601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.161'. [ 161.098694][ T30] audit: type=1400 audit(1780665425.265:794): avc: denied { setopt } for pid=6588 comm="syz.1.158" lport=58721 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 161.132488][ T6604] [U]  [ 161.174329][ T10] usb 1-1: USB disconnect, device number 6 [ 161.222438][ T30] audit: type=1400 audit(1780665425.345:795): avc: denied { bind } for pid=6600 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 161.270741][ T30] audit: type=1400 audit(1780665425.345:796): avc: denied { setopt } for pid=6600 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 161.614448][ T30] audit: type=1400 audit(1780665425.905:797): avc: denied { write } for pid=6600 comm="syz.0.161" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 161.648079][ T30] audit: type=1400 audit(1780665425.905:798): avc: denied { open } for pid=6600 comm="syz.0.161" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 161.687385][ T30] audit: type=1400 audit(1780665425.935:799): avc: denied { mounton } for pid=6598 comm="syz.4.160" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 161.711152][ T1114] Bluetooth: hci5: Frame reassembly failed (-84) [ 161.776278][ T1114] Bluetooth: hci6: Frame reassembly failed (-84) [ 162.290128][ T6612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.306779][ T6612] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.387772][ T6612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.579059][ T6620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.166'. [ 163.588048][ T6620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.166'. [ 164.013706][ T4935] Bluetooth: hci5: command 0x1003 tx timeout [ 164.020702][ T4935] Bluetooth: hci6: command 0x1003 tx timeout [ 164.026892][ T5624] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 164.037575][ T5619] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 164.170602][ T6612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.569524][ T6612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.654466][ T6612] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 164.683053][ T6612] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.772435][ T6612] veth1_vlan: left promiscuous mode [ 164.804839][ T6612] veth0_vlan: left promiscuous mode [ 164.819256][ T6612] veth0_vlan: entered promiscuous mode [ 164.845374][ T6612] veth1_vlan: entered promiscuous mode [ 164.892897][ T6612] veth1_macvtap: left promiscuous mode [ 164.912336][ T6612] veth0_macvtap: left promiscuous mode [ 164.932941][ T6612] veth0_macvtap: entered promiscuous mode [ 164.939999][ T6639] netlink: 32 bytes leftover after parsing attributes in process `syz.4.172'. [ 164.952498][ T6612] veth1_macvtap: entered promiscuous mode [ 164.973931][ T6639] random: crng reseeded on system resumption [ 164.985713][ T6639] Restarting kernel threads ... [ 164.991270][ T6639] Done restarting kernel threads. [ 165.164744][ T6612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 165.286064][ T6612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 165.319481][ T6641] netlink: 'syz.2.170': attribute type 2 has an invalid length. [ 165.398738][ T6612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 165.405024][ T6641] netlink: 'syz.2.170': attribute type 2 has an invalid length. [ 165.473259][ T6612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 165.512927][ T6612] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 165.596727][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.603817][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.625293][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.632384][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.674884][ T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 165.786421][ T30] kauditd_printk_skb: 140 callbacks suppressed [ 165.786438][ T30] audit: type=1400 audit(1780665430.075:940): avc: denied { read } for pid=6652 comm="syz.0.169" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 165.845837][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.006188][ T6656] input: syz1 as /devices/virtual/input/input6 [ 166.070293][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.094861][ T30] audit: type=1400 audit(1780665430.075:941): avc: denied { open } for pid=6652 comm="syz.0.169" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 166.372391][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.551375][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.731595][ T6637] lo speed is unknown, defaulting to 1000 [ 166.902553][ T29] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 167.324306][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.438336][ T30] audit: type=1400 audit(1780665431.725:942): avc: denied { append } for pid=6661 comm="syz.1.175" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 167.468264][ T29] usb 5-1: config 0 descriptor?? [ 167.573903][ T30] audit: type=1400 audit(1780665431.755:943): avc: denied { ioctl } for pid=6661 comm="syz.1.175" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 168.352433][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'. [ 168.848720][ T6671] lo speed is unknown, defaulting to 1000 [ 168.930811][ T30] audit: type=1400 audit(1780665433.215:944): avc: denied { ioctl } for pid=6670 comm="syz.1.177" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 169.961762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 170.101761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 170.218234][ T29] usb 5-1: Cannot set autoneg [ 170.239315][ T29] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 170.309281][ T29] usb 5-1: USB disconnect, device number 3 [ 170.594747][ T30] audit: type=1400 audit(1780665434.815:945): avc: denied { write } for pid=6670 comm="syz.1.177" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 170.709259][ T6689] netlink: 164 bytes leftover after parsing attributes in process `syz.0.179'. [ 171.666028][ T3395] Bluetooth: hci5: Frame reassembly failed (-84) [ 172.059458][ T30] audit: type=1400 audit(1780665436.345:946): avc: denied { append } for pid=6700 comm="syz.3.182" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 172.147094][ T30] audit: type=1400 audit(1780665436.375:947): avc: denied { map } for pid=6700 comm="syz.3.182" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 172.243199][ T30] audit: type=1400 audit(1780665436.375:948): avc: denied { execute } for pid=6700 comm="syz.3.182" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 173.208280][ T6715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.186'. [ 173.265191][ T30] audit: type=1400 audit(1780665437.545:949): avc: denied { setopt } for pid=6716 comm="syz.3.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 173.530049][ T1016] Bluetooth: hci6: Frame reassembly failed (-84) [ 173.536598][ T1016] Bluetooth: hci6: Frame reassembly failed (-84) [ 173.542994][ T29] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 173.607484][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888058247400: rx timeout, send abort [ 173.626861][ T30] audit: type=1400 audit(1780665437.915:950): avc: denied { read } for pid=4967 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 173.662806][ T30] audit: type=1400 audit(1780665437.915:951): avc: denied { search } for pid=4967 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.685179][ T30] audit: type=1400 audit(1780665437.915:952): avc: denied { write search } for pid=4967 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.711879][ T50] Bluetooth: hci5: command 0x1003 tx timeout [ 173.712612][ T30] audit: type=1400 audit(1780665437.915:953): avc: denied { add_name } for pid=4967 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.719618][ T5619] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 173.739086][ T30] audit: type=1400 audit(1780665437.915:954): avc: denied { create } for pid=4967 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 173.779505][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 173.798307][ T29] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 173.805228][ T30] audit: type=1400 audit(1780665437.915:955): avc: denied { append open } for pid=4967 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 173.824460][ T29] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 173.989918][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.107598][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888058246000: rx timeout, send abort [ 174.117430][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888058247400: abort rx timeout. Force session deactivation [ 174.198452][ T29] usb 4-1: config 0 descriptor?? [ 174.440176][ T10] usb 4-1: USB disconnect, device number 2 [ 174.615950][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888058246000: abort rx timeout. Force session deactivation [ 175.497707][ T6750] netlink: 164 bytes leftover after parsing attributes in process `syz.3.194'. [ 176.371799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 176.500633][ T5624] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 177.740484][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 177.740496][ T30] audit: type=1400 audit(1780665442.025:963): avc: denied { create } for pid=6764 comm="syz.4.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 177.866515][ T6773] trusted_key: encrypted_key: insufficient parameters specified [ 177.888618][ T6773] trusted_key: encrypted_key: insufficient parameters specified [ 178.140143][ T6776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.200'. [ 178.141940][ T30] audit: type=1400 audit(1780665442.075:964): avc: denied { setopt } for pid=6764 comm="syz.4.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 178.380611][ T30] audit: type=1400 audit(1780665442.075:965): avc: denied { bind } for pid=6764 comm="syz.4.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 178.454014][ T30] audit: type=1400 audit(1780665442.085:966): avc: denied { write } for pid=6764 comm="syz.4.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 178.667843][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888079e3b400: rx timeout, send abort [ 178.959132][ T6792] kernel profiling enabled (shift: 9) [ 178.974300][ T6792] nfs4: Unknown parameter 'no' [ 179.167940][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888079e3a800: rx timeout, send abort [ 179.176395][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888079e3b400: abort rx timeout. Force session deactivation [ 179.676261][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888079e3a800: abort rx timeout. Force session deactivation [ 179.907487][ T6798] lo speed is unknown, defaulting to 1000 [ 180.724192][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.206'. [ 180.734110][ T6811] openvswitch: netlink: Unknown nsh attribute 0 [ 181.838377][ T5712] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 182.235563][ T6826] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 182.426072][ T6821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.457338][ T30] audit: type=1400 audit(1780665446.175:967): avc: denied { write } for pid=6818 comm="syz.1.211" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 183.203668][ T5712] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 183.211899][ T5712] usb 3-1: config 0 has no interface number 0 [ 183.218015][ T5712] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 183.229652][ T5712] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.240852][ T5712] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.254096][ T5712] usb 3-1: config 0 interface 1 has no altsetting 0 [ 183.263305][ T5712] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 183.272562][ T5712] usb 3-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 183.282188][ T5712] usb 3-1: Manufacturer: syz [ 183.304650][ T5712] usb 3-1: config 0 descriptor?? [ 184.054916][ T30] audit: type=1400 audit(1780665448.345:968): avc: denied { connect } for pid=6813 comm="syz.2.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 184.085905][ T5712] uclogic 0003:145F:0212.0001: pen parameters not found [ 184.096525][ T5712] uclogic 0003:145F:0212.0001: interface is invalid, ignoring [ 184.113147][ T6841] netlink: 14 bytes leftover after parsing attributes in process `syz.1.215'. [ 184.141055][ T5712] usb 3-1: USB disconnect, device number 2 [ 184.571877][ T803] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 184.709471][ T3291] Bluetooth: hci5: Frame reassembly failed (-84) [ 184.731865][ T803] usb 4-1: Using ep0 maxpacket: 32 [ 184.749044][ T803] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 184.847922][ T803] usb 4-1: config 0 has no interface number 0 [ 184.862044][ T803] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 184.881693][ T803] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 184.920316][ T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.939676][ T803] usb 4-1: Product: syz [ 184.945887][ T803] usb 4-1: Manufacturer: syz [ 184.951041][ T803] usb 4-1: SerialNumber: syz [ 184.960406][ T803] usb 4-1: config 0 descriptor?? [ 185.154231][ T803] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 185.483338][ T6858] netlink: 156 bytes leftover after parsing attributes in process `syz.1.220'. [ 185.493859][ T6858] openvswitch: netlink: Missing key (keys=40, expected=100) [ 185.548709][ T803] em28xx 4-1:0.132: Video interface 132 found: [ 185.714162][ T6851] Bluetooth: hci3: command 0x0406 tx timeout [ 185.720567][ T5626] Bluetooth: hci1: command 0x0406 tx timeout [ 185.727227][ T6851] Bluetooth: hci0: command 0x0406 tx timeout [ 185.730668][ T5625] Bluetooth: hci2: command 0x0401 tx timeout [ 185.733723][ T5626] Bluetooth: hci4: command 0x0406 tx timeout [ 185.764832][ T803] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 186.206456][ T3395] Bluetooth: hci6: Frame reassembly failed (-84) [ 186.454152][ T6844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.466802][ T6844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.691901][ T6837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 186.792047][ T803] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 186.824294][ T803] em28xx 4-1:0.132: board has no eeprom [ 187.070325][ T30] audit: type=1400 audit(1780665451.345:969): avc: denied { mounton } for pid=6883 comm="syz.2.225" path="/39/file0" dev="configfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 187.177605][ T30] audit: type=1400 audit(1780665451.465:970): avc: denied { map } for pid=6886 comm="syz.4.226" path="/dev/video4" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 187.913400][ T6844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.941556][ T6844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.957611][ T6844] trusted_key: encrypted_key: insufficient parameters specified [ 188.174788][ T6899] trusted_key: encrypted_key: insufficient parameters specified [ 188.229922][ T6899] trusted_key: encrypted_key: insufficient parameters specified [ 188.280446][ T4935] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 188.287910][ T6837] Bluetooth: hci6: command 0x1003 tx timeout [ 188.351856][ T4935] Bluetooth: hci3: command 0x0406 tx timeout [ 188.484245][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.228'. [ 188.544516][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.228'. [ 188.696293][ T803] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 188.713614][ T803] em28xx 4-1:0.132: analog set to bulk mode. [ 188.730545][ T5352] em28xx 4-1:0.132: Registering V4L2 extension [ 188.759562][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.767048][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.774696][ T30] audit: type=1400 audit(1780665453.035:971): avc: denied { unmount } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 188.802745][ T803] usb 4-1: USB disconnect, device number 3 [ 188.820769][ T803] em28xx 4-1:0.132: Disconnecting em28xx [ 190.012028][ T5352] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 190.429575][ T5352] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 190.440455][ T5352] em28xx 4-1:0.132: No AC97 audio processor [ 190.452565][ T5352] usb 4-1: Decoder not found [ 190.457188][ T5352] em28xx 4-1:0.132: failed to create media graph [ 190.464641][ T5352] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 190.475371][ T5352] em28xx 4-1:0.132: Remote control support is not available for this card. [ 190.502556][ T803] em28xx 4-1:0.132: Closing input extension [ 190.695301][ T6925] Can't find a SQUASHFS superblock on nullb0 [ 191.045055][ T6923] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 191.054872][ T6923] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 191.063458][ T6923] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 192.774175][ T803] em28xx 4-1:0.132: Freeing device [ 192.878291][ T30] audit: type=1400 audit(1780665457.005:972): avc: denied { append } for pid=6930 comm="syz.0.235" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 193.234273][ T6941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.237'. [ 193.509392][ T6942] netlink: 'syz.1.237': attribute type 1 has an invalid length. [ 193.517664][ T6942] netlink: 'syz.1.237': attribute type 4 has an invalid length. [ 193.525426][ T6942] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.237'. [ 194.622029][ T5352] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 194.921986][ T5352] usb 3-1: Using ep0 maxpacket: 32 [ 194.932036][ T5352] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 194.942505][ T5352] usb 3-1: config 0 has no interface number 0 [ 194.942544][ T6955] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 194.955063][ T6955] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 194.966991][ T6955] vhci_hcd vhci_hcd.0: Device attached [ 194.967014][ T5352] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 194.981673][ T5352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.024333][ T5352] usb 3-1: Product: syz [ 195.054284][ T5352] usb 3-1: Manufacturer: syz [ 195.069008][ T5352] usb 3-1: SerialNumber: syz [ 195.093155][ T6956] vhci_hcd: connection closed [ 195.094003][ T1122] vhci_hcd vhci_hcd.0: stop threads [ 195.118328][ T5352] usb 3-1: config 0 descriptor?? [ 195.205439][ T1122] vhci_hcd vhci_hcd.0: release socket [ 195.212623][ T1122] vhci_hcd vhci_hcd.0: disconnect device [ 195.223562][ T5352] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 195.251172][ T5352] usb 3-1: selecting invalid altsetting 1 [ 195.262137][ T5713] usb 34-1: enqueue for inactive port 0 [ 195.367567][ T6964] debugfs: '1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$å' already exists in 'ieee80211' [ 195.661998][ T5352] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 195.677135][ T5352] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 195.699286][ T5352] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 195.750739][ T5352] usb 3-1: media controller created [ 195.872457][ T30] audit: type=1400 audit(1780665460.155:973): avc: denied { execute } for pid=6943 comm="syz.2.238" name="file0" dev="tmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 196.167593][ T5352] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 196.182789][ T5713] usb usb34-port1: attempt power cycle [ 196.207431][ T30] audit: type=1400 audit(1780665460.215:974): avc: denied { mount } for pid=6943 comm="syz.2.238" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 196.378673][ T30] audit: type=1400 audit(1780665460.465:975): avc: denied { create } for pid=6953 comm="syz.3.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 196.844845][ T5713] usb usb34-port1: unable to enumerate USB device [ 197.312123][ T5352] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 197.341661][ T6978] capability: warning: `syz.4.246' uses deprecated v2 capabilities in a way that may be insecure [ 197.370636][ T5352] zl10353_read_register: readreg error (reg=127, ret==-110) [ 197.465698][ T6981] lo speed is unknown, defaulting to 1000 [ 197.472291][ T6981] lo speed is unknown, defaulting to 1000 [ 197.484028][ T6981] lo speed is unknown, defaulting to 1000 [ 197.494478][ T6981] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 197.509524][ T6981] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 197.526479][ T6981] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 197.550161][ T6981] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 197.620529][ T6981] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 197.755554][ T6981] lo speed is unknown, defaulting to 1000 [ 197.763051][ T6981] lo speed is unknown, defaulting to 1000 [ 197.769484][ T6981] lo speed is unknown, defaulting to 1000 [ 197.776345][ T6981] lo speed is unknown, defaulting to 1000 [ 197.782758][ T6981] lo speed is unknown, defaulting to 1000 [ 197.936857][ T30] audit: type=1400 audit(1780665462.225:976): avc: denied { unmount } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 197.968896][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.247'. [ 198.110991][ T5352] usb 3-1: USB disconnect, device number 3 [ 199.594123][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'. [ 201.103836][ T30] audit: type=1326 audit(1780665465.255:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.4.253" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf9ce59 code=0x7ffc0000 [ 201.384610][ T30] audit: type=1326 audit(1780665465.255:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.4.253" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf9ce59 code=0x7ffc0000 [ 202.254361][ T30] audit: type=1326 audit(1780665465.275:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.4.253" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf9ce59 code=0x7ffc0000 [ 202.463864][ T30] audit: type=1326 audit(1780665465.285:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.4.253" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf9ce59 code=0x7ffc0000 [ 202.794810][ T30] audit: type=1326 audit(1780665465.285:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.4.253" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe68cf9ce59 code=0x7ffc0000 [ 202.854609][ T30] audit: type=1326 audit(1780665465.355:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.4.253" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf9ce59 code=0x7ffc0000 [ 202.873563][ T7011] veth0_macvtap: Caught tx_queue_len zero misconfig [ 202.901850][ T30] audit: type=1326 audit(1780665465.365:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.4.253" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf9ce59 code=0x7ffc0000 [ 202.928828][ T30] audit: type=1326 audit(1780665465.365:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.4.253" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf9ce59 code=0x7ffc0000 [ 203.017692][ T30] audit: type=1326 audit(1780665465.375:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.4.253" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf9ce59 code=0x7ffc0000 [ 203.079536][ T30] audit: type=1326 audit(1780665465.375:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.4.253" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe68cf9ce59 code=0x7ffc0000 [ 203.586906][ T30] audit: type=1326 audit(1780665465.485:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.4.253" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf9ce59 code=0x7ffc0000 [ 203.632657][ T30] audit: type=1326 audit(1780665465.495:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.4.253" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf9ce59 code=0x7ffc0000 [ 203.668338][ T30] audit: type=1326 audit(1780665465.565:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.4.253" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf9ce59 code=0x7ffc0000 [ 203.700632][ T30] audit: type=1326 audit(1780665465.565:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.4.253" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe68cf9cbc2 code=0x7ffc0000 [ 204.993996][ T30] audit: type=1326 audit(1780665465.565:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.4.253" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe68cf9cc57 code=0x7ffc0000 [ 205.020326][ T30] audit: type=1326 audit(1780665465.585:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.4.253" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe68cf59b51 code=0x7ffc0000 [ 205.065667][ T30] audit: type=1326 audit(1780665465.585:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.4.253" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe68cf9dc49 code=0x7ffc0000 [ 205.117731][ T7027] ======================================================= [ 205.117731][ T7027] WARNING: The mand mount option has been deprecated and [ 205.117731][ T7027] and is ignored by this kernel. Remove the mand [ 205.117731][ T7027] option from the mount to silence this warning. [ 205.117731][ T7027] ======================================================= [ 205.168640][ T30] audit: type=1326 audit(1780665465.595:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.4.253" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe68cf59bbb code=0x7ffc0000 [ 206.561773][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.262'. [ 206.591810][ T7047] netlink: 'syz.0.259': attribute type 10 has an invalid length. [ 207.728219][ T7047] team0: Port device dummy0 added [ 208.145380][ T803] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 208.170800][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 208.170817][ T30] audit: type=1400 audit(1780665472.472:1057): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 208.474698][ T803] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 208.501792][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 209.222270][ T803] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.248107][ T803] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 209.258908][ T803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.274512][ T803] usbtmc 2-1:16.0: bulk endpoints not found [ 209.745385][ T30] audit: type=1400 audit(1780665473.913:1058): avc: denied { accept } for pid=7063 comm="syz.0.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 210.429157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 210.492125][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 210.534329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #44!!! [ 210.744001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 212.013912][ T0] NOHZ tick-stop error: local softirq work is pending, handler #204!!! [ 212.804361][ T30] audit: type=1400 audit(1780665476.905:1059): avc: denied { setopt } for pid=7084 comm="syz.0.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 212.917543][ T30] audit: type=1400 audit(1780665476.990:1060): avc: denied { listen } for pid=7084 comm="syz.0.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 213.027205][ T5741] usb 2-1: USB disconnect, device number 2 [ 213.411234][ T7093] netlink: 156 bytes leftover after parsing attributes in process `syz.1.274'. [ 213.420882][ T7093] openvswitch: netlink: Missing key (keys=40, expected=100) [ 213.774619][ T7101] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 213.789329][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.275'. [ 214.319343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 214.563520][ T48] Bluetooth: hci5: Frame reassembly failed (-84) [ 215.528040][ T7113] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 216.420455][ T7115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.276'. [ 216.728966][ T5630] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 216.737181][ T4935] Bluetooth: hci5: command 0x1003 tx timeout [ 216.808185][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.278'. [ 219.839386][ T7110] bridge0: port 3(syz_tun) entered disabled state [ 220.129350][ T7110] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.139158][ T7110] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.800165][ T7110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.890888][ T7110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.098895][ T7135] xt_hashlimit: size too large, truncated to 1048576 [ 223.148264][ T803] lo speed is unknown, defaulting to 1000 [ 223.178480][ T803] syz0: Port: 1 Link DOWN [ 223.231990][ T7120] batadv0: entered promiscuous mode [ 223.267258][ T7120] macsec1: entered promiscuous mode [ 223.290905][ T7120] macsec1: entered allmulticast mode [ 223.321275][ T7120] batadv0: entered allmulticast mode [ 223.356227][ T7120] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 223.434246][ T7120] batadv0: left allmulticast mode [ 223.463808][ T7120] batadv0: left promiscuous mode [ 223.629901][ T7128] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$å' [ 223.640311][ T7128] CPU: 1 UID: 0 PID: 7128 Comm: syz.3.279 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.640341][ T7128] Tainted: [L]=SOFTLOCKUP [ 223.640347][ T7128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 223.640359][ T7128] Call Trace: [ 223.640366][ T7128] [ 223.640373][ T7128] dump_stack_lvl+0x100/0x190 [ 223.640400][ T7128] sysfs_warn_dup.cold+0x1c/0x28 [ 223.640426][ T7128] sysfs_do_create_link_sd+0x113/0x140 [ 223.640453][ T7128] sysfs_create_link+0x61/0xc0 [ 223.640475][ T7128] device_add+0x675/0x1950 [ 223.640505][ T7128] ? __pfx_device_add+0x10/0x10 [ 223.640532][ T7128] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 223.640556][ T7128] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 223.640591][ T7128] wiphy_register+0x1edd/0x2d90 [ 223.640612][ T7128] ? __rtnl_unlock+0xb9/0xf0 [ 223.640637][ T7128] ? __pfx_wiphy_register+0x10/0x10 [ 223.640657][ T7128] ? __asan_memset+0x23/0x50 [ 223.640682][ T7128] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 223.640717][ T7128] ieee80211_register_hw+0x3055/0x4570 [ 223.640753][ T7128] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 223.640780][ T7128] ? __pfx___debug_object_init+0x10/0x10 [ 223.640805][ T7128] ? find_held_lock+0x2b/0x80 [ 223.640823][ T7128] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 223.640844][ T7128] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 223.640868][ T7128] ? __hrtimer_setup+0x208/0x330 [ 223.640894][ T7128] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 223.640929][ T7128] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 223.640953][ T7128] ? __asan_memcpy+0x3c/0x60 [ 223.640983][ T7128] hwsim_new_radio_nl+0xc5f/0x1370 [ 223.641003][ T7128] ? rcu_is_watching+0x12/0xc0 [ 223.641028][ T7128] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 223.641054][ T7128] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 223.641078][ T7128] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 223.641110][ T7128] genl_family_rcv_msg_doit+0x214/0x300 [ 223.641138][ T7128] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 223.641172][ T7128] ? bpf_lsm_capable+0x9/0x10 [ 223.641189][ T7128] ? security_capable+0x80/0x260 [ 223.641211][ T7128] ? ns_capable+0xd2/0xf0 [ 223.641237][ T7128] genl_rcv_msg+0x560/0x800 [ 223.641263][ T7128] ? __pfx_genl_rcv_msg+0x10/0x10 [ 223.641290][ T7128] ? trace_reschedule_exit.constprop.0+0x6b/0x220 [ 223.641311][ T7128] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 223.641338][ T7128] netlink_rcv_skb+0x159/0x420 [ 223.641360][ T7128] ? __pfx_genl_rcv_msg+0x10/0x10 [ 223.641389][ T7128] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 223.641421][ T7128] ? rcu_is_watching+0x12/0xc0 [ 223.641453][ T7128] genl_rcv+0x28/0x40 [ 223.641475][ T7128] netlink_unicast+0x585/0x850 [ 223.641502][ T7128] ? __pfx_netlink_unicast+0x10/0x10 [ 223.641533][ T7128] netlink_sendmsg+0x8b0/0xda0 [ 223.641560][ T7128] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.641594][ T7128] ____sys_sendmsg+0x9e1/0xb70 [ 223.641612][ T7128] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.641635][ T7128] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.641660][ T7128] ? __pfx_futex_wake_mark+0x10/0x10 [ 223.641681][ T7128] ___sys_sendmsg+0x190/0x1e0 [ 223.641705][ T7128] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.641757][ T7128] __sys_sendmsg+0x170/0x220 [ 223.641784][ T7128] ? __pfx___sys_sendmsg+0x10/0x10 [ 223.641809][ T7128] ? __x64_sys_futex+0x34f/0x4d0 [ 223.641843][ T7128] ? rcu_is_watching+0x12/0xc0 [ 223.641871][ T7128] do_syscall_64+0x115/0x870 [ 223.641893][ T7128] ? clear_bhb_loop+0x40/0x90 [ 223.641914][ T7128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.641931][ T7128] RIP: 0033:0x7fd6fd39ce59 [ 223.641947][ T7128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.641963][ T7128] RSP: 002b:00007fd6fe27d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.641981][ T7128] RAX: ffffffffffffffda RBX: 00007fd6fd616180 RCX: 00007fd6fd39ce59 [ 223.641992][ T7128] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000008 [ 223.642002][ T7128] RBP: 00007fd6fd432d6f R08: 0000000000000000 R09: 0000000000000000 [ 223.642012][ T7128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.642021][ T7128] R13: 00007fd6fd616218 R14: 00007fd6fd616180 R15: 00007ffeb85792c8 [ 223.642045][ T7128] [ 224.093806][ T1097] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.175748][ T1097] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.221701][ T1097] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.379075][ T1097] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.784065][ T30] audit: type=1400 audit(1780665488.009:1061): avc: denied { nlmsg_read } for pid=7143 comm="syz.4.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 226.935748][ T7164] netlink: 156 bytes leftover after parsing attributes in process `syz.3.287'. [ 226.945711][ T7164] openvswitch: netlink: Missing key (keys=40, expected=100) [ 227.435106][ T30] audit: type=1400 audit(1780665490.448:1062): avc: denied { write } for pid=7139 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.975163][ T30] audit: type=1400 audit(1780665492.710:1063): avc: denied { write } for pid=7177 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.362743][ T30] audit: type=1400 audit(1780665494.095:1064): avc: denied { mount } for pid=7175 comm="syz.0.290" name="/" dev="ramfs" ino=13782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 232.574041][ T30] audit: type=1400 audit(1780665495.203:1065): avc: denied { getopt } for pid=7193 comm="syz.2.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 234.144980][ T30] audit: type=1400 audit(1780665496.653:1066): avc: denied { write } for pid=7186 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.186940][ T7208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.294'. [ 234.591902][ T30] audit: type=1400 audit(1780665497.068:1067): avc: denied { write } for pid=7223 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.753584][ T30] audit: type=1400 audit(1780665498.074:1068): avc: denied { module_request } for pid=7229 comm="syz.1.298" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 236.178607][ T7199] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.188258][ T7199] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.383594][ T30] audit: type=1400 audit(1780665499.025:1069): avc: denied { connect } for pid=7242 comm="syz.4.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 237.573180][ T5741] IPVS: starting estimator thread 0... [ 237.688931][ T7250] IPVS: using max 48 ests per chain, 115200 per kthread [ 237.725239][ T30] audit: type=1400 audit(1780665499.118:1070): avc: denied { write } for pid=7242 comm="syz.4.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 238.601310][ T30] audit: type=1400 audit(1780665500.770:1071): avc: denied { write } for pid=7227 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.097899][ T7199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.358154][ T30] audit: type=1400 audit(1780665501.472:1072): avc: denied { write } for pid=7267 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.392560][ T7199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.071665][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.110244][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.057940][ T7279] netlink: 'syz.0.303': attribute type 3 has an invalid length. [ 241.495643][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.031434][ T30] audit: type=1400 audit(1780665503.651:1073): avc: denied { ioctl } for pid=7281 comm="syz.4.305" path="socket:[14766]" dev="sockfs" ino=14766 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 242.585352][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.225579][ T7291] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 243.233821][ T7291] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 243.242226][ T7291] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 243.450599][ T7296] Can't find a SQUASHFS superblock on nullb0 [ 243.756691][ T7298] lo speed is unknown, defaulting to 1000 [ 244.972538][ T7298] lo speed is unknown, defaulting to 1000 [ 245.635239][ T30] audit: type=1400 audit(1780665507.260:1074): avc: denied { name_bind } for pid=7305 comm="syz.3.311" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 246.410354][ T30] audit: type=1400 audit(1780665507.260:1075): avc: denied { name_connect } for pid=7305 comm="syz.3.311" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 246.433435][ T7311] lo speed is unknown, defaulting to 1000 [ 246.571715][ T30] audit: type=1400 audit(1780665508.128:1076): avc: denied { write } for pid=7314 comm="syz.3.315" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 246.601505][ T29] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 246.765042][ T7321] input: syz1 as /devices/virtual/input/input7 [ 246.802246][ T30] audit: type=1400 audit(1780665508.322:1077): avc: denied { read } for pid=4970 comm="acpid" name="event4" dev="devtmpfs" ino=2870 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 246.887305][ T7320] kAFS: unable to lookup cell 'ÿ' [ 247.034357][ T30] audit: type=1400 audit(1780665508.322:1078): avc: denied { open } for pid=4970 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2870 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 247.317782][ T30] audit: type=1400 audit(1780665508.322:1079): avc: denied { ioctl } for pid=4970 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2870 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 247.400680][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 248.936914][ T7328] binder: BINDER_SET_CONTEXT_MGR already set [ 248.943162][ T7328] binder: 7326:7328 ioctl 4018620d 200000000040 returned -16 [ 250.511788][ T30] audit: type=1400 audit(1780665510.298:1080): avc: denied { write } for pid=7326 comm="syz.0.304" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 250.750287][ T30] audit: type=1400 audit(1780665510.298:1081): avc: denied { ioctl } for pid=7326 comm="syz.0.304" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 250.783704][ T30] audit: type=1400 audit(1780665510.298:1082): avc: denied { set_context_mgr } for pid=7326 comm="syz.0.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 250.805837][ T30] audit: type=1400 audit(1780665510.307:1083): avc: denied { map } for pid=7326 comm="syz.0.304" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 250.892715][ T7311] lo speed is unknown, defaulting to 1000 [ 251.096964][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.319'. [ 254.781173][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.787588][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.010227][ T30] audit: type=1400 audit(1780665516.834:1084): avc: denied { shutdown } for pid=7348 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 256.042448][ T7351] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 256.050874][ T7351] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 256.060959][ T7351] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 256.122035][ T7352] Can't find a SQUASHFS superblock on nullb0 [ 256.130106][ T30] audit: type=1400 audit(1780665516.852:1085): avc: denied { read write } for pid=5631 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 256.155405][ T29] usb 5-1: device descriptor read/all, error -110 [ 256.238467][ T30] audit: type=1400 audit(1780665516.852:1086): avc: denied { open } for pid=5631 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 256.416171][ T30] audit: type=1400 audit(1780665516.852:1087): avc: denied { ioctl } for pid=5631 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 256.442809][ T30] audit: type=1400 audit(1780665516.862:1088): avc: denied { create } for pid=7348 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 256.469437][ T30] audit: type=1400 audit(1780665516.889:1089): avc: denied { firmware_load } for pid=7348 comm="syz.3.323" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 257.419061][ T30] audit: type=1400 audit(1780665516.926:1090): avc: denied { read } for pid=7348 comm="syz.3.323" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 257.591342][ T30] audit: type=1400 audit(1780665516.926:1091): avc: denied { open } for pid=7348 comm="syz.3.323" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 258.333937][ T30] audit: type=1400 audit(1780665516.945:1092): avc: denied { mounton } for pid=7348 comm="syz.3.323" path="/syzcgroup/unified/syz3" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 258.435577][ T30] audit: type=1400 audit(1780665516.991:1093): avc: denied { append } for pid=7348 comm="syz.3.323" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 258.570578][ T803] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 258.733211][ T803] usb 3-1: Using ep0 maxpacket: 32 [ 258.898022][ T803] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 258.908616][ T803] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.937925][ T803] usb 3-1: config 0 has no interface number 0 [ 259.255228][ T5727] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 259.267508][ T803] usb 3-1: config 0 interface 85 has no altsetting 0 [ 259.403241][ T803] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 259.561210][ T803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.569245][ T803] usb 3-1: Product: syz [ 259.574916][ T803] usb 3-1: Manufacturer: syz [ 259.581723][ T803] usb 3-1: SerialNumber: syz [ 260.007947][ T803] usb 3-1: config 0 descriptor?? [ 260.141867][ T5727] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 260.248659][ T5727] usb 4-1: config 0 has no interface number 0 [ 260.278868][ T5727] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 260.303011][ T5727] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 260.318913][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.350180][ T5727] usb 4-1: Product: syz [ 260.479298][ T5727] usb 4-1: Manufacturer: syz [ 260.484383][ T5727] usb 4-1: SerialNumber: syz [ 260.704418][ T5727] usb 4-1: config 0 descriptor?? [ 260.831488][ T5727] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 261.160902][ T803] usb 3-1: USB disconnect, device number 4 [ 261.895597][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 261.895614][ T30] audit: type=1400 audit(1780665521.881:1150): avc: denied { create } for pid=7393 comm="syz.4.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 262.031340][ T5734] usb 4-1: USB disconnect, device number 4 [ 262.055633][ T30] audit: type=1400 audit(1780665521.881:1151): avc: denied { write } for pid=7393 comm="syz.4.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 262.061153][ T7398] loop9: detected capacity change from 0 to 524287936 [ 262.100643][ T5734] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 262.211520][ T30] audit: type=1400 audit(1780665521.881:1152): avc: denied { read } for pid=7393 comm="syz.4.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 262.358392][ T30] audit: type=1400 audit(1780665521.881:1153): avc: denied { ioctl } for pid=7393 comm="syz.4.332" path="socket:[14965]" dev="sockfs" ino=14965 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 263.342890][ T7398] loop9: unable to read partition table [ 263.469066][ T7398] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 264.094057][ T7392] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 264.511812][ T7392] block device autoloading is deprecated and will be removed. [ 265.056050][ T30] audit: type=1400 audit(1780665521.891:1154): avc: denied { ioctl } for pid=7393 comm="syz.4.332" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=927 ioctlcmd=0x6f52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 265.173568][ T30] audit: type=1400 audit(1780665522.649:1155): avc: denied { create } for pid=7399 comm="syz.4.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 265.217261][ T30] audit: type=1400 audit(1780665522.679:1156): avc: denied { read } for pid=7399 comm="syz.4.333" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 265.243952][ T30] audit: type=1400 audit(1780665522.679:1157): avc: denied { open } for pid=7399 comm="syz.4.333" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 265.270214][ T30] audit: type=1400 audit(1780665522.818:1158): avc: denied { create } for pid=7399 comm="syz.4.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 265.290296][ T30] audit: type=1400 audit(1780665522.828:1159): avc: denied { bind } for pid=7399 comm="syz.4.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 267.708606][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 267.708636][ T30] audit: type=1400 audit(1780665528.087:1187): avc: denied { unlink } for pid=5620 comm="syz-executor" name="file0" dev="tmpfs" ino=324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 267.998325][ T30] audit: type=1400 audit(1780665528.349:1188): avc: denied { create } for pid=7416 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 268.030060][ T30] audit: type=1400 audit(1780665528.386:1189): avc: denied { bind } for pid=7416 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 268.056814][ T30] audit: type=1400 audit(1780665528.386:1190): avc: denied { connect } for pid=7416 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 268.174292][ T7421] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 268.187845][ T7421] 9p: Bad value for 'wfdno' [ 268.585691][ T30] audit: type=1400 audit(1780665528.452:1191): avc: denied { read write } for pid=7416 comm="syz.2.338" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 268.844821][ T30] audit: type=1400 audit(1780665528.452:1192): avc: denied { open } for pid=7416 comm="syz.2.338" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 269.272175][ T7424] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 269.315914][ T30] audit: type=1400 audit(1780665528.452:1193): avc: denied { ioctl } for pid=7416 comm="syz.2.338" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x5864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 269.540541][ T30] audit: type=1400 audit(1780665528.517:1194): avc: denied { prog_load } for pid=7416 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 269.628295][ T30] audit: type=1400 audit(1780665528.517:1195): avc: denied { bpf } for pid=7416 comm="syz.2.338" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 269.650148][ T30] audit: type=1400 audit(1780665528.545:1196): avc: denied { mounton } for pid=7416 comm="syz.2.338" path="/59" dev="tmpfs" ino=325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 270.264927][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 272.501813][ T4935] Bluetooth: hci5: command 0x1003 tx timeout [ 272.551660][ T7440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.341'. [ 272.554845][ T5630] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 272.765127][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.343'. [ 273.122112][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 273.122128][ T30] audit: type=1326 audit(1780665533.131:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.4.344" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf9ce59 code=0x7ffc0000 [ 273.240219][ T30] audit: type=1326 audit(1780665533.131:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.4.344" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf9ce59 code=0x7ffc0000 [ 273.575940][ T7456] audit: audit_backlog=65 > audit_backlog_limit=64 [ 273.583439][ T7456] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 273.592458][ T7456] audit: backlog limit exceeded [ 273.607359][ T7456] audit: audit_backlog=65 > audit_backlog_limit=64 [ 273.614855][ T7456] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 273.647441][ T7456] audit: backlog limit exceeded [ 273.691297][ T30] audit: type=1326 audit(1780665533.131:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.4.344" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf9ce59 code=0x7ffc0000 [ 273.723939][ T30] audit: type=1326 audit(1780665533.168:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.4.344" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf9ce59 code=0x7ffc0000 [ 274.922665][ T7469] netlink: 72 bytes leftover after parsing attributes in process `syz.3.348'. [ 276.916010][ T7483] input: syz0 as /devices/virtual/input/input8 [ 276.952196][ T7483] netlink: 140 bytes leftover after parsing attributes in process `syz.3.351'. [ 277.105819][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.352'. [ 278.038705][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.354'. [ 279.413174][ T30] kauditd_printk_skb: 170 callbacks suppressed [ 279.731916][ T30] audit: type=1400 audit(1780665538.477:1390): avc: denied { read } for pid=7496 comm="syz.4.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 280.208227][ T30] audit: type=1400 audit(1780665538.541:1391): avc: denied { create } for pid=7496 comm="syz.4.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 281.867130][ T30] audit: type=1400 audit(1780665541.211:1392): avc: denied { read } for pid=7519 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1778 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.492846][ T30] audit: type=1400 audit(1780665541.211:1393): avc: denied { read open } for pid=7519 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1778 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.577885][ T30] audit: type=1400 audit(1780665541.220:1394): avc: denied { getattr } for pid=7519 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1778 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.641085][ T7530] netlink: 156 bytes leftover after parsing attributes in process `syz.1.361'. [ 282.650267][ T7530] openvswitch: netlink: Missing key (keys=40, expected=100) [ 282.659110][ T7513] process 'syz.4.357' launched './file0' with NULL argv: empty string added [ 282.710854][ T30] audit: type=1400 audit(1780665541.248:1395): avc: denied { create } for pid=7520 comm="syz.2.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 282.983318][ T30] audit: type=1400 audit(1780665541.248:1396): avc: denied { getopt } for pid=7520 comm="syz.2.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 283.139867][ T30] audit: type=1400 audit(1780665541.497:1397): avc: denied { ioctl } for pid=7517 comm="syz.0.359" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 283.215890][ T7549] netlink: 36 bytes leftover after parsing attributes in process `syz.2.365'. [ 283.272008][ T30] audit: type=1400 audit(1780665541.913:1398): avc: denied { setopt } for pid=7506 comm="syz.4.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 283.296401][ T7552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.362'. [ 283.808146][ T30] audit: type=1400 audit(1780665541.931:1399): avc: denied { write } for pid=7529 comm="syz.1.361" name="route" dev="proc" ino=4026533365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 283.943435][ T7556] netlink: 'syz.0.364': attribute type 2 has an invalid length. [ 284.064885][ T7556] netlink: 'syz.0.364': attribute type 2 has an invalid length. [ 286.110259][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 286.110274][ T30] audit: type=1400 audit(1780665545.135:1414): avc: denied { setattr } for pid=7570 comm="syz.2.368" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 287.255679][ T30] audit: type=1400 audit(1780665546.188:1415): avc: denied { nlmsg_read } for pid=7578 comm="syz.1.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 288.455037][ T30] audit: type=1400 audit(1780665547.028:1416): avc: denied { write } for pid=7583 comm="syz.3.371" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 288.567786][ T30] audit: type=1400 audit(1780665547.028:1417): avc: denied { open } for pid=7583 comm="syz.3.371" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 288.616910][ T30] audit: type=1400 audit(1780665547.065:1418): avc: denied { ioctl } for pid=7583 comm="syz.3.371" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 289.063208][ T30] audit: type=1400 audit(1780665547.859:1419): avc: denied { write } for pid=7582 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.291186][ T30] audit: type=1400 audit(1780665547.887:1420): avc: denied { write } for pid=7597 comm="syz.4.373" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 289.930404][ T7612] binder: BINDER_SET_CONTEXT_MGR already set [ 289.936577][ T7612] binder: 7610:7612 ioctl 4018620d 200000000040 returned -16 [ 290.903434][ T7614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.374'. [ 290.930423][ T30] audit: type=1400 audit(1780665548.653:1421): avc: denied { write } for pid=7610 comm="syz.2.375" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 290.953007][ T30] audit: type=1400 audit(1780665548.653:1422): avc: denied { ioctl } for pid=7610 comm="syz.2.375" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 290.986109][ T30] audit: type=1400 audit(1780665548.653:1423): avc: denied { set_context_mgr } for pid=7610 comm="syz.2.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 293.485365][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 293.485396][ T30] audit: type=1400 audit(1780665551.940:1426): avc: denied { connect } for pid=7640 comm="syz.1.381" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 294.087410][ T7645] : renamed from bond_slave_0 (while UP) [ 295.191464][ T30] audit: type=1400 audit(1780665552.549:1427): avc: denied { write } for pid=7640 comm="syz.1.381" laddr=172.20.20.10 lport=256 faddr=172.20.20.8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 295.199714][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 295.504013][ T7650] netlink: 28 bytes leftover after parsing attributes in process `syz.3.383'. [ 296.143941][ T30] audit: type=1400 audit(1780665553.804:1428): avc: denied { ioctl } for pid=7643 comm="syz.3.383" path="socket:[15334]" dev="sockfs" ino=15334 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 296.330819][ T30] audit: type=1400 audit(1780665554.571:1429): avc: denied { create } for pid=7651 comm="syz.3.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 296.379504][ T30] audit: type=1400 audit(1780665554.608:1430): avc: denied { write } for pid=7651 comm="syz.3.385" dev="sockfs" ino=15476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 296.434957][ T30] audit: type=1400 audit(1780665554.608:1431): avc: denied { setattr } for pid=7651 comm="syz.3.385" name="QIPCRTR" dev="sockfs" ino=15476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 296.498040][ T30] audit: type=1400 audit(1780665554.608:1432): avc: denied { read } for pid=7651 comm="syz.3.385" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 296.569168][ T30] audit: type=1400 audit(1780665554.608:1433): avc: denied { open } for pid=7651 comm="syz.3.385" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 296.656027][ T30] audit: type=1400 audit(1780665554.691:1434): avc: denied { ioctl } for pid=7651 comm="syz.3.385" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 296.727182][ T30] audit: type=1400 audit(1780665554.940:1435): avc: denied { create } for pid=7655 comm="syz.2.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 297.477731][ T4935] Bluetooth: hci5: command 0x1003 tx timeout [ 297.484883][ T5630] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 297.916555][ T7664] kAFS: unable to lookup cell 'ÿ' [ 299.244160][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 299.244176][ T30] audit: type=1400 audit(1780665557.257:1441): avc: denied { append } for pid=7667 comm="syz.3.388" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 299.345988][ T7675] blktrace: Concurrent blktraces are not allowed on loop4 [ 299.405795][ T30] audit: type=1400 audit(1780665557.294:1442): avc: denied { read } for pid=7667 comm="syz.3.388" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 299.547752][ T30] audit: type=1400 audit(1780665557.294:1443): avc: denied { open } for pid=7667 comm="syz.3.388" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 300.062372][ T30] audit: type=1400 audit(1780665557.303:1444): avc: denied { ioctl } for pid=7667 comm="syz.3.388" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 300.128086][ T7685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.390'. [ 300.184384][ T7688] [U]  [ 300.195855][ T30] audit: type=1400 audit(1780665557.322:1445): avc: denied { read write } for pid=7670 comm="syz.0.387" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 300.236073][ T30] audit: type=1400 audit(1780665557.322:1446): avc: denied { open } for pid=7670 comm="syz.0.387" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 300.559892][ T30] audit: type=1400 audit(1780665557.931:1447): avc: denied { getopt } for pid=7679 comm="syz.1.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 300.626720][ T5712] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 300.656427][ T30] audit: type=1400 audit(1780665558.005:1448): avc: denied { bind } for pid=7684 comm="syz.2.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 300.718417][ T30] audit: type=1400 audit(1780665558.070:1449): avc: denied { setopt } for pid=7684 comm="syz.2.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 300.799660][ T5712] usb 1-1: Using ep0 maxpacket: 32 [ 300.800434][ T30] audit: type=1400 audit(1780665558.134:1450): avc: denied { connect } for pid=7684 comm="syz.2.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 300.835735][ T5712] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 300.845255][ T5712] usb 1-1: config 0 has no interface number 0 [ 300.872608][ T5712] usb 1-1: config 0 interface 12 has no altsetting 0 [ 300.954919][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.392'. [ 302.238704][ T5712] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 303.249131][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.257241][ T5712] usb 1-1: Product: syz [ 303.261572][ T5712] usb 1-1: Manufacturer: syz [ 303.266233][ T5712] usb 1-1: SerialNumber: syz [ 303.273760][ T5712] usb 1-1: config 0 descriptor?? [ 303.374299][ T7698] pim6reg: entered allmulticast mode [ 303.388322][ T7698] team0: entered allmulticast mode [ 303.394167][ T7698] team_slave_0: entered allmulticast mode [ 303.400020][ T7698] team_slave_1: entered allmulticast mode [ 303.409507][ T7698] team0: left allmulticast mode [ 303.544714][ T7698] team_slave_0: left allmulticast mode [ 303.566520][ T7700] 9p: Bad value for 'rfdno' [ 303.576361][ T7698] team_slave_1: left allmulticast mode [ 304.604542][ T7698] pim6reg: left allmulticast mode [ 306.826791][ T5712] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: 28 failed: -32 [ 306.885610][ T5712] f81534 1-1:0.12: f81534_find_config_idx: read failed: -32 [ 306.951476][ T5712] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 306.993897][ T5712] f81534 1-1:0.12: probe with driver f81534 failed with error -32 [ 308.534405][ T5712] usb 1-1: USB disconnect, device number 7 [ 309.411814][ T48] Bluetooth: hci5: Frame reassembly failed (-84) [ 310.071749][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 310.071770][ T30] audit: type=1400 audit(1780665567.209:1460): avc: denied { write } for pid=7706 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 311.595867][ T30] audit: type=1326 audit(1780665567.514:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.3.401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fd39ce59 code=0x7ffc0000 [ 311.622519][ T30] audit: type=1326 audit(1780665567.514:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.3.401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fd39ce59 code=0x7ffc0000 [ 311.649101][ T30] audit: type=1326 audit(1780665567.532:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.3.401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fd6fd39ce59 code=0x7ffc0000 [ 311.654987][ T5630] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 311.675710][ T4935] Bluetooth: hci5: command 0x1003 tx timeout [ 311.675802][ T30] audit: type=1326 audit(1780665567.532:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.3.401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fd39ce59 code=0x7ffc0000 [ 311.675842][ T30] audit: type=1326 audit(1780665567.532:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.3.401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fd39ce59 code=0x7ffc0000 [ 311.675881][ T30] audit: type=1326 audit(1780665567.542:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.3.401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd6fd35d68e code=0x7ffc0000 [ 311.675919][ T30] audit: type=1326 audit(1780665567.551:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.3.401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fd39ce59 code=0x7ffc0000 [ 311.675956][ T30] audit: type=1326 audit(1780665567.551:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.3.401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fd39ce59 code=0x7ffc0000 [ 311.675996][ T30] audit: type=1326 audit(1780665567.569:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.3.401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd6fd39ce59 code=0x7ffc0000 [ 312.682591][ T7750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.398'. [ 312.771262][ T7750] batadv0: entered promiscuous mode [ 312.780636][ T7750] macsec1: entered promiscuous mode [ 312.788338][ T7750] macsec1: entered allmulticast mode [ 312.794151][ T7750] batadv0: entered allmulticast mode [ 312.813466][ T7750] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 312.950447][ T7750] batadv0: left allmulticast mode [ 312.958038][ T7750] batadv0: left promiscuous mode [ 316.024143][ T7766] xt_hashlimit: size too large, truncated to 1048576 [ 316.037423][ T3291] Bluetooth: hci5: Frame reassembly failed (-84) [ 316.054398][ T7766] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 316.073038][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 316.073067][ T30] audit: type=1400 audit(1780665572.795:1492): avc: denied { bind } for pid=7765 comm="syz.1.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 316.150876][ T30] audit: type=1400 audit(1780665572.804:1493): avc: denied { node_bind } for pid=7765 comm="syz.1.405" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 317.420984][ T7782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.408'. [ 317.623764][ T7783] netlink: 'syz.4.408': attribute type 1 has an invalid length. [ 317.631534][ T7783] netlink: 'syz.4.408': attribute type 4 has an invalid length. [ 317.639340][ T7783] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.408'. [ 317.826380][ T30] audit: type=1400 audit(1780665574.373:1494): avc: denied { write } for pid=7767 comm="syz.2.400" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 317.926284][ T7773] nbd0: detected capacity change from 0 to 63 [ 318.078601][ T30] audit: type=1400 audit(1780665574.383:1495): avc: denied { open } for pid=7767 comm="syz.2.400" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 318.607750][ T5630] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 318.739170][ T30] audit: type=1400 audit(1780665574.392:1496): avc: denied { ioctl } for pid=7767 comm="syz.2.400" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 319.582901][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.590178][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.987736][ T7796] lo speed is unknown, defaulting to 1000 [ 320.741336][ T7802] lo speed is unknown, defaulting to 1000 [ 320.847963][ T7802] lo speed is unknown, defaulting to 1000 [ 320.958845][ T7796] lo speed is unknown, defaulting to 1000 [ 321.373471][ T4935] block nbd0: Receive control failed (result -104) [ 321.434417][ T29] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 321.580838][ T30] audit: type=1400 audit(1780665577.872:1497): avc: denied { name_bind } for pid=7813 comm="syz.2.415" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 321.699647][ T30] audit: type=1400 audit(1780665577.983:1498): avc: denied { map } for pid=7811 comm="syz.1.414" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 321.736858][ T7814] input: syz0 as /devices/virtual/input/input9 [ 321.878530][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 321.886379][ T29] usb 4-1: config 0 has no interfaces? [ 321.892517][ T29] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 321.919560][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.191781][ T29] usb 4-1: config 0 descriptor?? [ 322.411528][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.416'. [ 322.506784][ T5741] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 324.291422][ T5741] usb 1-1: Using ep0 maxpacket: 32 [ 324.343315][ T5741] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 324.362299][ T5741] usb 1-1: config 0 has no interface number 0 [ 324.370395][ T5741] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 324.448896][ T5741] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 324.465625][ T5741] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.474750][ T5741] usb 1-1: Product: syz [ 324.479970][ T5741] usb 1-1: Manufacturer: syz [ 324.485187][ T5741] usb 1-1: SerialNumber: syz [ 324.785148][ T5741] usb 1-1: config 0 descriptor?? [ 324.829591][ T5741] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 324.857509][ T5712] usb 4-1: USB disconnect, device number 5 [ 324.857978][ T5741] em28xx 1-1:0.132: Video interface 132 found: [ 325.586385][ T5741] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 325.718158][ T1122] Bluetooth: hci5: Frame reassembly failed (-84) [ 325.744648][ T1122] Bluetooth: hci5: Frame reassembly failed (-84) [ 326.088666][ T7821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.114352][ T7821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.538677][ T30] audit: type=1400 audit(1780665582.433:1499): avc: denied { unlink } for pid=7819 comm="syz.0.417" name="#5" dev="tmpfs" ino=430 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 326.544527][ T5741] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 326.567721][ T30] audit: type=1400 audit(1780665582.479:1500): avc: denied { mount } for pid=7819 comm="syz.0.417" name="/" dev="overlay" ino=426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 326.598194][ T5741] em28xx 1-1:0.132: board has no eeprom [ 327.089206][ T5741] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 327.138574][ T5741] em28xx 1-1:0.132: analog set to bulk mode. [ 327.224372][ T29] em28xx 1-1:0.132: Registering V4L2 extension [ 327.226390][ T7821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.295339][ T7821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.539567][ T7859] netlink: 'syz.2.426': attribute type 1 has an invalid length. [ 327.548330][ T7859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.822577][ T5352] usb 1-1: USB disconnect, device number 8 [ 327.823740][ T29] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 327.869807][ T30] audit: type=1400 audit(1780665583.679:1501): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 327.913543][ T29] em28xx 1-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 327.937310][ T5352] em28xx 1-1:0.132: Disconnecting em28xx [ 327.953221][ T6837] Bluetooth: hci5: command 0x1003 tx timeout [ 327.967283][ T4935] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 328.243519][ T29] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 328.252973][ T29] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 328.267664][ T29] em28xx 1-1:0.132: No AC97 audio processor [ 328.280741][ T29] usb 1-1: Decoder not found [ 328.285978][ T29] em28xx 1-1:0.132: failed to create media graph [ 328.293271][ T29] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 328.309164][ T29] em28xx 1-1:0.132: Remote control support is not available for this card. [ 328.397767][ T5352] em28xx 1-1:0.132: Closing input extension [ 328.478511][ T5352] em28xx 1-1:0.132: Freeing device [ 328.546407][ T7867] netlink: 'syz.0.427': attribute type 1 has an invalid length. [ 328.566793][ T30] audit: type=1400 audit(1780665584.316:1502): avc: denied { bind } for pid=7864 comm="syz.0.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 329.684718][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.430'. [ 329.881074][ T7891] netlink: 156 bytes leftover after parsing attributes in process `syz.4.432'. [ 329.890977][ T7891] openvswitch: netlink: Missing key (keys=40, expected=100) [ 330.388217][ T30] audit: type=1400 audit(1780665585.996:1503): avc: denied { connect } for pid=7881 comm="syz.0.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 330.983668][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 331.107303][ T5352] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 331.302188][ T5352] usb 3-1: Using ep0 maxpacket: 32 [ 331.352313][ T5352] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 331.371595][ T5352] usb 3-1: config 0 has no interface number 0 [ 331.389128][ T5352] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 331.409867][ T5352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.446661][ T5352] usb 3-1: Product: syz [ 331.475552][ T5352] usb 3-1: Manufacturer: syz [ 331.495870][ T5352] usb 3-1: SerialNumber: syz [ 331.523750][ T5352] usb 3-1: config 0 descriptor?? [ 332.005724][ T5352] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 332.054413][ T5352] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 333.009867][ T5352] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 333.042243][ T5352] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 333.230355][ T6837] Bluetooth: hci5: command 0x1003 tx timeout [ 333.254370][ T4935] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 334.325649][ T7921] ceph: No mds server is up or the cluster is laggy [ 334.342952][ T5712] libceph: connect (1)[c::]:6789 error -101 [ 334.365889][ T5712] libceph: mon0 (1)[c::]:6789 connect error [ 334.376472][ T7927] kAFS: unable to lookup cell 'ÿ' [ 334.413689][ T803] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 334.435658][ T7905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.472776][ T7905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.671801][ T803] usb 2-1: Using ep0 maxpacket: 32 [ 334.699908][ T803] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 334.752711][ T803] usb 2-1: config 0 has no interface number 0 [ 334.779335][ T803] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 334.803177][ T803] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 334.814670][ T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.872664][ T30] audit: type=1400 audit(1780665590.151:1504): avc: denied { block_suspend } for pid=7917 comm="syz.3.439" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 334.900654][ T803] usb 2-1: Product: syz [ 334.909908][ T803] usb 2-1: Manufacturer: syz [ 334.915912][ T803] usb 2-1: SerialNumber: syz [ 334.935620][ T803] usb 2-1: config 0 descriptor?? [ 335.174539][ T803] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 335.515815][ T803] em28xx 2-1:0.132: Video interface 132 found: [ 335.533638][ T30] audit: type=1400 audit(1780665590.751:1505): avc: denied { write } for pid=7928 comm="syz.0.440" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 335.592719][ T803] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 335.858575][ T7942] netlink: 236 bytes leftover after parsing attributes in process `syz.4.442'. [ 335.982264][ T30] audit: type=1400 audit(1780665591.148:1506): avc: denied { read write } for pid=7943 comm="syz.0.443" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 336.744409][ T7919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.775457][ T30] audit: type=1400 audit(1780665591.148:1507): avc: denied { open } for pid=7943 comm="syz.0.443" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 337.148500][ T7919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.171920][ T803] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 337.243467][ T30] audit: type=1400 audit(1780665591.203:1508): avc: denied { append } for pid=7941 comm="syz.4.442" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 337.447157][ T803] em28xx 2-1:0.132: board has no eeprom [ 337.521322][ T803] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 337.538250][ T803] em28xx 2-1:0.132: analog set to bulk mode. [ 337.547839][ T5352] em28xx 2-1:0.132: Registering V4L2 extension [ 337.585649][ T29] usb 3-1: USB disconnect, device number 5 [ 338.230607][ T7955] netlink: 156 bytes leftover after parsing attributes in process `syz.2.445'. [ 338.239648][ T7955] openvswitch: netlink: Missing key (keys=40, expected=100) [ 338.360112][ T30] audit: type=1400 audit(1780665593.373:1509): avc: denied { ioctl } for pid=7956 comm="syz.2.446" path="socket:[16940]" dev="sockfs" ino=16940 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 338.497871][ T7919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.526965][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.446'. [ 338.561452][ T7919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.589753][ T7919] trusted_key: encrypted_key: insufficient parameters specified [ 338.620576][ T7963] netlink: 16 bytes leftover after parsing attributes in process `syz.4.447'. [ 338.903115][ T7919] ip6tnl0: Caught tx_queue_len zero misconfig [ 339.349803][ T803] usb 2-1: USB disconnect, device number 3 [ 339.356391][ T5352] em28xx 2-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 339.387291][ T803] em28xx 2-1:0.132: Disconnecting em28xx [ 339.485726][ T7971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.447'. [ 340.248526][ T5352] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 340.267032][ T5352] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 340.287199][ T5352] em28xx 2-1:0.132: No AC97 audio processor [ 340.755188][ T5352] usb 2-1: Decoder not found [ 340.800307][ T5352] em28xx 2-1:0.132: failed to create media graph [ 340.834311][ T5352] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 341.304629][ T30] audit: type=1400 audit(1780665595.792:1510): avc: denied { call } for pid=7983 comm="syz.3.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 341.378078][ T7982] ================================================================== [ 341.386182][ T7982] BUG: KASAN: slab-use-after-free in v4l2_open+0x351/0x490 [ 341.393386][ T7982] Read of size 4 at addr ffff88807b918860 by task v4l_id/7982 [ 341.400821][ T7982] [ 341.403127][ T7982] CPU: 1 UID: 0 PID: 7982 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 341.403148][ T7982] Tainted: [L]=SOFTLOCKUP [ 341.403153][ T7982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 341.403162][ T7982] Call Trace: [ 341.403168][ T7982] [ 341.403174][ T7982] dump_stack_lvl+0x100/0x190 [ 341.403191][ T7982] print_report+0x13d/0x4b0 [ 341.403212][ T7982] ? __virt_addr_valid+0x239/0x430 [ 341.403228][ T7982] ? v4l2_open+0x351/0x490 [ 341.403245][ T7982] kasan_report+0xdf/0x1d0 [ 341.403261][ T7982] ? v4l2_open+0x351/0x490 [ 341.403280][ T7982] v4l2_open+0x351/0x490 [ 341.403298][ T7982] ? __pfx_v4l2_open+0x10/0x10 [ 341.403315][ T7982] chrdev_open+0x234/0x6a0 [ 341.403334][ T7982] ? __pfx_chrdev_open+0x10/0x10 [ 341.403352][ T7982] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 341.403374][ T7982] do_dentry_open+0x6ab/0x14d0 [ 341.403390][ T7982] ? __pfx_chrdev_open+0x10/0x10 [ 341.403408][ T7982] vfs_open+0x82/0x3f0 [ 341.403427][ T7982] path_openat+0x208c/0x31a0 [ 341.403447][ T7982] ? __pfx_path_openat+0x10/0x10 [ 341.403467][ T7982] do_file_open+0x20e/0x430 [ 341.403485][ T7982] ? __pfx_do_file_open+0x10/0x10 [ 341.403508][ T7982] ? alloc_fd+0x476/0x790 [ 341.403526][ T7982] ? do_getname+0x191/0x390 [ 341.403547][ T7982] do_sys_openat2+0x10d/0x1e0 [ 341.403570][ T7982] ? __pfx_do_sys_openat2+0x10/0x10 [ 341.403592][ T7982] __x64_sys_openat+0x12d/0x210 [ 341.403612][ T7982] ? __pfx___x64_sys_openat+0x10/0x10 [ 341.403634][ T7982] ? rcu_is_watching+0x12/0xc0 [ 341.403655][ T7982] do_syscall_64+0x115/0x870 [ 341.403672][ T7982] ? clear_bhb_loop+0x40/0x90 [ 341.403688][ T7982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.403701][ T7982] RIP: 0033:0x7f61f2ca7407 [ 341.403713][ T7982] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 341.403727][ T7982] RSP: 002b:00007ffc000eebe0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 341.403741][ T7982] RAX: ffffffffffffffda RBX: 00007f61f3483880 RCX: 00007f61f2ca7407 [ 341.403750][ T7982] RDX: 0000000000000000 RSI: 00007ffc000eff1c RDI: ffffffffffffff9c [ 341.403759][ T7982] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 341.403766][ T7982] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 341.403774][ T7982] R13: 00007ffc000eee30 R14: 00007f61f35ea000 R15: 00005624a46e04d8 [ 341.403787][ T7982] [ 341.403792][ T7982] [ 341.645094][ T7982] Allocated by task 5352: [ 341.649407][ T7982] kasan_save_stack+0x30/0x50 [ 341.654081][ T7982] kasan_save_track+0x14/0x30 [ 341.658738][ T7982] __kasan_kmalloc+0xaa/0xb0 [ 341.663330][ T7982] em28xx_v4l2_init.cold+0x94/0x3a40 [ 341.668611][ T7982] em28xx_init_extension+0x13a/0x200 [ 341.673888][ T7982] request_module_async+0x61/0x80 [ 341.678899][ T7982] process_one_work+0xa0e/0x1980 [ 341.683821][ T7982] worker_thread+0x5ef/0xe50 [ 341.688392][ T7982] kthread+0x370/0x450 [ 341.692442][ T7982] ret_from_fork+0x72b/0xd50 [ 341.697015][ T7982] ret_from_fork_asm+0x1a/0x30 [ 341.701777][ T7982] [ 341.704080][ T7982] Freed by task 5352: [ 341.708034][ T7982] kasan_save_stack+0x30/0x50 [ 341.712689][ T7982] kasan_save_track+0x14/0x30 [ 341.717345][ T7982] kasan_save_free_info+0x3b/0x70 [ 341.722355][ T7982] __kasan_slab_free+0x5f/0x80 [ 341.727097][ T7982] kfree+0x223/0x6c0 [ 341.730973][ T7982] kref_put.isra.0+0x53/0x75 [ 341.735540][ T7982] em28xx_v4l2_init.cold+0x280/0x3a40 [ 341.740906][ T7982] em28xx_init_extension+0x13a/0x200 [ 341.746176][ T7982] request_module_async+0x61/0x80 [ 341.751184][ T7982] process_one_work+0xa0e/0x1980 [ 341.756104][ T7982] worker_thread+0x5ef/0xe50 [ 341.760686][ T7982] kthread+0x370/0x450 [ 341.764735][ T7982] ret_from_fork+0x72b/0xd50 [ 341.769311][ T7982] ret_from_fork_asm+0x1a/0x30 [ 341.774060][ T7982] [ 341.776362][ T7982] The buggy address belongs to the object at ffff88807b918000 [ 341.776362][ T7982] which belongs to the cache kmalloc-8k of size 8192 [ 341.790391][ T7982] The buggy address is located 2144 bytes inside of [ 341.790391][ T7982] freed 8192-byte region [ffff88807b918000, ffff88807b91a000) [ 341.804336][ T7982] [ 341.806638][ T7982] The buggy address belongs to the physical page: [ 341.813024][ T7982] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b918 [ 341.821766][ T7982] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 341.830243][ T7982] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 341.837767][ T7982] page_type: f5(slab) [ 341.841727][ T7982] raw: 00fff00000000040 ffff88813fe2f280 dead000000000100 dead000000000122 [ 341.850289][ T7982] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 341.858849][ T7982] head: 00fff00000000040 ffff88813fe2f280 dead000000000100 dead000000000122 [ 341.867501][ T7982] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 341.876154][ T7982] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 341.884805][ T7982] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 341.893451][ T7982] page dumped because: kasan: bad access detected [ 341.899835][ T7982] page_owner tracks the page as allocated [ 341.905535][ T7982] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5619, tgid 5619 (kworker/u9:2), ts 59986236419, free_ts 59843302098 [ 341.926876][ T7982] post_alloc_hook+0xfd/0x120 [ 341.931550][ T7982] get_page_from_freelist+0x11a6/0x3410 [ 341.937083][ T7982] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 341.942961][ T7982] new_slab+0xa6/0x6c0 [ 341.947014][ T7982] refill_objects+0x277/0x420 [ 341.951689][ T7982] __pcs_replace_empty_main+0x375/0x650 [ 341.957238][ T7982] __kmalloc_cache_noprof+0x493/0x6f0 [ 341.962604][ T7982] __hci_conn_add+0x1f4/0x1da0 [ 341.967351][ T7982] hci_conn_add_unset+0x76/0x120 [ 341.972276][ T7982] le_conn_complete_evt+0x64c/0x1f60 [ 341.977545][ T7982] hci_le_conn_complete_evt+0x23c/0x3a0 [ 341.983078][ T7982] hci_le_meta_evt+0x34a/0x5f0 [ 341.987829][ T7982] hci_event_packet+0x51c/0xcd0 [ 341.992660][ T7982] hci_rx_work+0x451/0xfc0 [ 341.997057][ T7982] process_one_work+0xa0e/0x1980 [ 342.001978][ T7982] worker_thread+0x5ef/0xe50 [ 342.006555][ T7982] page last free pid 5616 tgid 5616 stack trace: [ 342.012870][ T7982] __free_frozen_pages+0x794/0x10a0 [ 342.018052][ T7982] qlist_free_all+0x47/0xf0 [ 342.022548][ T7982] kasan_quarantine_reduce+0x1a0/0x1f0 [ 342.027994][ T7982] __kasan_slab_alloc+0x69/0x90 [ 342.032827][ T7982] __kmalloc_noprof+0x2b9/0x850 [ 342.037671][ T7982] tomoyo_supervisor+0x65d/0x1340 [ 342.042680][ T7982] tomoyo_path_number_perm+0x445/0x580 [ 342.048119][ T7982] security_file_ioctl+0xd3/0x230 [ 342.053130][ T7982] __x64_sys_ioctl+0xb7/0x210 [ 342.057790][ T7982] do_syscall_64+0x115/0x870 [ 342.062370][ T7982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.068246][ T7982] [ 342.070553][ T7982] Memory state around the buggy address: [ 342.076159][ T7982] ffff88807b918700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 342.084195][ T7982] ffff88807b918780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 342.092233][ T7982] >ffff88807b918800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 342.100271][ T7982] ^ [ 342.107441][ T7982] ffff88807b918880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 342.115484][ T7982] ffff88807b918900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 342.123530][ T7982] ================================================================== [ 342.146676][ T5352] em28xx 2-1:0.132: Remote control support is not available for this card. [ 342.193331][ T803] em28xx 2-1:0.132: Closing input extension [ 342.228340][ T803] em28xx 2-1:0.132: Freeing device [ 342.238568][ T7990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.454'. [ 342.362816][ T30] audit: type=1400 audit(1780665597.010:1511): avc: denied { read } for pid=4967 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 342.446222][ T7992] netlink: 'syz.0.454': attribute type 1 has an invalid length. [ 342.454661][ T7992] netlink: 'syz.0.454': attribute type 4 has an invalid length. [ 342.462313][ T7992] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.454'. [ 342.554150][ T30] audit: type=1400 audit(1780665597.010:1512): avc: denied { search } for pid=4967 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.660824][ T7982] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 342.668063][ T7982] CPU: 1 UID: 0 PID: 7982 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 342.678567][ T7982] Tainted: [L]=SOFTLOCKUP [ 342.682882][ T7982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 342.692931][ T7982] Call Trace: [ 342.696203][ T7982] [ 342.699129][ T7982] dump_stack_lvl+0x100/0x190 [ 342.703808][ T7982] vpanic+0x552/0x970 [ 342.707784][ T7982] ? __pfx_vpanic+0x10/0x10 [ 342.712282][ T7982] ? irqentry_exit+0x24d/0x970 [ 342.717051][ T7982] ? v4l2_open+0x351/0x490 [ 342.721466][ T7982] panic+0xd1/0xe0 [ 342.725185][ T7982] ? __pfx_panic+0x10/0x10 [ 342.729600][ T7982] ? v4l2_open+0x351/0x490 [ 342.734013][ T7982] ? preempt_schedule_common+0x42/0xc0 [ 342.739472][ T7982] ? check_panic_on_warn+0x1f/0x90 [ 342.744585][ T7982] check_panic_on_warn.cold+0x19/0x34 [ 342.749953][ T7982] end_report.part.0+0x3a/0x90 [ 342.754748][ T7982] kasan_report.cold+0xe/0x18 [ 342.759436][ T7982] ? v4l2_open+0x351/0x490 [ 342.763859][ T7982] v4l2_open+0x351/0x490 [ 342.768100][ T7982] ? __pfx_v4l2_open+0x10/0x10 [ 342.772860][ T7982] chrdev_open+0x234/0x6a0 [ 342.777277][ T7982] ? __pfx_chrdev_open+0x10/0x10 [ 342.782239][ T7982] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 342.788584][ T7982] do_dentry_open+0x6ab/0x14d0 [ 342.793342][ T7982] ? __pfx_chrdev_open+0x10/0x10 [ 342.798276][ T7982] vfs_open+0x82/0x3f0 [ 342.802347][ T7982] path_openat+0x208c/0x31a0 [ 342.806940][ T7982] ? __pfx_path_openat+0x10/0x10 [ 342.811878][ T7982] do_file_open+0x20e/0x430 [ 342.816377][ T7982] ? __pfx_do_file_open+0x10/0x10 [ 342.821404][ T7982] ? alloc_fd+0x476/0x790 [ 342.825731][ T7982] ? do_getname+0x191/0x390 [ 342.830232][ T7982] do_sys_openat2+0x10d/0x1e0 [ 342.834905][ T7982] ? __pfx_do_sys_openat2+0x10/0x10 [ 342.840103][ T7982] __x64_sys_openat+0x12d/0x210 [ 342.844952][ T7982] ? __pfx___x64_sys_openat+0x10/0x10 [ 342.850323][ T7982] ? rcu_is_watching+0x12/0xc0 [ 342.855089][ T7982] do_syscall_64+0x115/0x870 [ 342.859674][ T7982] ? clear_bhb_loop+0x40/0x90 [ 342.864343][ T7982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.870236][ T7982] RIP: 0033:0x7f61f2ca7407 [ 342.874628][ T7982] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 342.894208][ T7982] RSP: 002b:00007ffc000eebe0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 342.902592][ T7982] RAX: ffffffffffffffda RBX: 00007f61f3483880 RCX: 00007f61f2ca7407 [ 342.910557][ T7982] RDX: 0000000000000000 RSI: 00007ffc000eff1c RDI: ffffffffffffff9c [ 342.918515][ T7982] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 342.926478][ T7982] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 342.934420][ T7982] R13: 00007ffc000eee30 R14: 00007f61f35ea000 R15: 00005624a46e04d8 [ 342.942365][ T7982] [ 342.945615][ T7982] Kernel Offset: disabled [ 342.949912][ T7982] Rebooting in 86400 seconds..