last executing test programs: 6m14.388060538s ago: executing program 0 (id=1038): r0 = epoll_create1(0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 6m12.847849666s ago: executing program 0 (id=1041): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)=0x0) io_cancel(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0xc6c, 0x0, 0x1}, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000640)='asymmetric\x00', &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r7, 0x29, 0x18, 0x0, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000080)=0x7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(r9, 0xfffffffc) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, 0x0, 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r8, 0xffffffffffffffff, 0x0) 6m11.849876456s ago: executing program 0 (id=1042): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000037000701fefffffffbdbdf25017c00000c"], 0x20}, 0x1, 0x0, 0x0, 0x4015}, 0x8000) 6m9.195044984s ago: executing program 0 (id=1051): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) listns(&(0x7f0000000000)={0x20, 0x0, 0xffffffffffffffff, 0x4000000}, 0x0, 0xf4240, 0x0) r4 = fsopen(&(0x7f0000000000)='udf\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='-\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r5, 0x4068aea3, &(0x7f00000001c0)={0xc0, 0x0, 0x2}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast1, 0x1, 0x6, 0x0, 0x0, 0x3, 0x867000c0, r2}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@mcast1, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x6, 0x0, 0x400, 0x6, 0x58010a, r2}) 6m8.314659377s ago: executing program 0 (id=1052): io_submit(0x0, 0x0, &(0x7f0000000180)) ptrace(0x10, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) setfsgid(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='off', 0x3) write(r0, &(0x7f0000000180)='on', 0x2) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0xb21e0400, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = syz_open_dev$usbfs(0x0, 0x8000000000000001, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x8, 0x1, 0x41907, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) read(0xffffffffffffffff, &(0x7f0000000340)=""/251, 0xfb) ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522) setns(0xc9, 0x0) socketpair(0x9, 0x5, 0x0, &(0x7f0000000000)) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9900, &(0x7f0000000000)={0x4, 0xf5, 0x80000}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) 6m6.4358504s ago: executing program 0 (id=1060): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0xfefffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x17, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x3, 0x3, 0x4, 0xb, 0x9, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xf}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000}, 0x94) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r2 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000000140)) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$netlink(0x10, 0x3, 0x8) writev(r4, &(0x7f0000000640)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) recvmmsg(r4, &(0x7f0000007600)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2000, 0x0) getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, 0x0, &(0x7f00000000c0)) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) capset(&(0x7f0000000040)={0x20071026}, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl(r6, 0x40186f40, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000240)='\x00', 0x0, r2) ioctl$TCFLSH(r0, 0x400455c8, 0x4) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ppoll(&(0x7f0000000340)=[{r7, 0x8}], 0x1, &(0x7f00000003c0), 0x0, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x210000, 0x0) ioctl$SNAPSHOT_UNFREEZE(r8, 0x3302) ioctl$TCFLSH(r0, 0x800455c9, 0x4000000) 5m51.399900194s ago: executing program 32 (id=1060): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0xfefffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x17, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x3, 0x3, 0x4, 0xb, 0x9, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xf}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000}, 0x94) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r2 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000000140)) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$netlink(0x10, 0x3, 0x8) writev(r4, &(0x7f0000000640)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) recvmmsg(r4, &(0x7f0000007600)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2000, 0x0) getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, 0x0, &(0x7f00000000c0)) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) capset(&(0x7f0000000040)={0x20071026}, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl(r6, 0x40186f40, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000240)='\x00', 0x0, r2) ioctl$TCFLSH(r0, 0x400455c8, 0x4) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ppoll(&(0x7f0000000340)=[{r7, 0x8}], 0x1, &(0x7f00000003c0), 0x0, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x210000, 0x0) ioctl$SNAPSHOT_UNFREEZE(r8, 0x3302) ioctl$TCFLSH(r0, 0x800455c9, 0x4000000) 5m10.342719089s ago: executing program 3 (id=1206): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x501800) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xa, [@datasec={0x8, 0x2, 0x0, 0xf, 0x2, [{0x2, 0x0, 0x1}, {0x3}], 'Iw'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "1760"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x56, 0x0, 0x1}, 0x28) syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[], 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 5m8.083775044s ago: executing program 2 (id=1210): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x0, 0xfffffffc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x2, r5, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r3, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x79, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x3c, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0x18, &(0x7f0000000580)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xffff}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbb}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @printk={@lu}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x1, 0xb, 0x3, 0x1, 0xffffffffffffffff, 0x4}, @map_fd={0x18, 0x2, 0x1, 0x0, r3}], &(0x7f0000000640)='GPL\x00', 0x6, 0xa1, &(0x7f0000000680)=""/161, 0x41100, 0x90, '\x00', r5, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x9, 0x8, 0x8}, 0x10, r6, 0xffffffffffffffff, 0xa, 0x0, &(0x7f0000000b00)=[{0x5, 0x5, 0x10, 0x4}, {0x3, 0x4, 0xa, 0xc}, {0x0, 0x3, 0xb, 0xc}, {0x5, 0x5, 0xe, 0x9}, {0x0, 0x2, 0xe, 0x2}, {0x0, 0x5, 0xd, 0xc}, {0x0, 0x2, 0x4, 0x4}, {0x3, 0x1, 0x8, 0x4}, {0x4, 0x2, 0x1, 0x1}, {0x4, 0x3, 0x3, 0x5}], 0x10, 0x3}, 0x94) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, 0x0) write(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r7}, './mnt\x00'}) 5m6.433205209s ago: executing program 2 (id=1213): syz_usb_connect(0x0, 0x371, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000300)={0x10002000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x1, 0x3}, 0x50) recvmmsg(r0, &(0x7f0000000d40)=[{{&(0x7f0000000180)=@l2tp6, 0x80, &(0x7f0000000880)=[{&(0x7f00000003c0)=""/140, 0x8c}, {&(0x7f0000000500)=""/102, 0x66}, {&(0x7f0000000580)=""/179, 0xb3}, {&(0x7f0000000640)=""/109, 0x6d}, {&(0x7f00000006c0)=""/86, 0x56}, {&(0x7f0000000740)=""/83, 0x53}, {&(0x7f00000007c0)=""/35, 0x23}], 0x7}, 0x8000}, {{&(0x7f0000000900)=@l2, 0x80, &(0x7f0000000980), 0x0, &(0x7f00000009c0)=""/196, 0xc4}}, {{&(0x7f0000000ac0)=@hci, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000b40)=""/159, 0x9f}, {&(0x7f0000000c00)=""/211, 0xd3}], 0x2}, 0x8}], 0x3, 0x40, &(0x7f0000000e00)={0x77359400}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r3, 0x4}, 0x38) 5m2.049699563s ago: executing program 2 (id=1220): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x8e}, 0x28) landlock_create_ruleset(&(0x7f0000000000)={0x10, 0xf, 0x3}, 0x30, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, 0x0, &(0x7f00000001c0)}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) write$selinux_load(r1, 0x0, 0xffaf) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x2b0, 0x258, 0x258, 0x2b0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3e0) 5m1.998690283s ago: executing program 3 (id=1221): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) openat(0xffffffffffffff9c, 0x0, 0x126c3, 0xc) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="f8", 0x1}], 0x1}}], 0x1, 0x8000) 5m0.715136278s ago: executing program 3 (id=1222): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0xbd) mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x126c3, 0xc) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x18cc0, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, 0x0, 0x0) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000680)={0x0, 0x4}, 0x8) sendmmsg$inet6(r7, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2e1, @private1, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="f8", 0x1}], 0x1}}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000380), 0x8) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) 5m0.295614333s ago: executing program 2 (id=1224): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000380)={0x4484, 0x6, 0x2, 0xe05, 0x20000, 0x402}) inotify_init() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2402, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0}, &(0x7f0000000040)=0x10) shutdown(r3, 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080)={r4, 0x225}, &(0x7f00000000c0)=0x8) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="040000000000", 0x6) write(r5, &(0x7f0000000080)="09000000010001", 0x7) syslog(0x2, &(0x7f0000000040), 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="041817aaaaaaaaaa10112233445566778899aabbccddeeff0005"], 0x1a) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04080400c80002"], 0x7) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYRES8=r5], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x61880, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r6, r6, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r7, r6, 0x4, r6}, 0x10) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e0701081400c80010"], 0xa) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c8000b000700070001030029100101"], 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r1, 0xc008aec1, &(0x7f0000000180)={0x7, 0x0, [{0x1, 0x100004, 0x0, 0xb7, 0x1, 0x7, 0xffff}, {0x6, 0x8, 0x1, 0x3, 0x2, 0xb7d, 0x3}, {0x80000007, 0xfff, 0x5, 0xab0, 0xffffffff, 0xfffffff1, 0x5}, {0x80000000, 0x400, 0xd7d78262ceb16a67, 0x0, 0xcd90, 0x5ecf, 0xff}, {0x80000000, 0x40b, 0x1, 0xef1, 0x6, 0x0, 0x2}, {0x7, 0x6, 0x1, 0xe, 0x5, 0x80, 0xc56}, {0x0, 0xd3d, 0x6, 0x8, 0x7fffffff, 0x4, 0x81}]}) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(0xffffffffffffffff, 0x40184150, &(0x7f0000002540)={0x0, &(0x7f00000024c0)="e3c2910310e6607f0046f3136266d41388ed16fad4a49cbb754d7da02fa1502a102232f933187b85dd44bf6c1965b5bce98db70d70854b6ad08bf7d3c4a19e3f7e2cda2a4e7df3c4e1fe5de34f2bd02c3639830579a0a3317bf861f9f2e70adc6647db65e517a971b8", 0x69}) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) 4m59.032504085s ago: executing program 2 (id=1226): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0xbd) mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x126c3, 0xc) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x18cc0, 0x0) ioctl$RNDCLEARPOOL(r2, 0x5206, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x47, &(0x7f0000000200)=0x7) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x1}}) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000680)={0x0, 0x4}, 0x8) sendmmsg$inet6(r8, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2e1, @private1, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="f8", 0x1}], 0x1}}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f0000000380), 0x8) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) 4m56.633391217s ago: executing program 3 (id=1230): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone(0x80, &(0x7f0000000440)="15b270d1d3690a32ae7bd3936f3fe4b6b1a2e667fd854f03966eab03251acf054a336f63db04862d95d92b3fd607e182013ad567a7343b756dda7e447212a4035a0910bf5b43c23d2e77bd19c9e6ac72c898d8f2b0d6798314408ff9e81ff278535e171c4544e3cb4b7b2b799ec6f4f8e18850d2e34fe38029e3a4cd6353565e5a5f2bcf266a155feebb3f40aea04cf5d1360e72855cd88d4ba1d6afead8af13087094d21625d8efa867b56f63deb7ade9210c61fd41dd39ae2cf1e7be2d52e827d48a2ca58155351cec1772681882be501e64c45cee9d", 0xd7, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="7df341729ab7eefb46c8c05552c8e31334e5053f720a7cce973a4d56547aaf4a73b1ef05336a0cf41dc0702a5ef5d83dfac6f40c53c649cb24dce4b8adf1cff588f47284f456c9b9b584839af13a5a34753d4b54e8229720f4378aa3093e4dcbec101560fa5c9add928d67cbcd2b5c38107f50baae0a1d68b5091588f8eafb5ae72e6ec6ec783c56847f5d6c") fstat(r3, &(0x7f00000006c0)) getresuid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) landlock_create_ruleset(&(0x7f0000000180)={0x1020, 0x0, 0x2, 0x1084, 0xe, 0x1}, 0x30, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0xb7, 0x18, 0xd3, 0x40, 0x8ca, 0x2016, 0xf7ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x5, 0x50, 0xf9, "", [{{0x9, 0x4, 0x4, 0x1, 0x0, 0xdc, 0xc2, 0x85, 0x9}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 4m56.461990856s ago: executing program 2 (id=1232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000000000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x894a, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) mkdir(0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x7) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) r8 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0x3ca6f000) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000080)=@rnullb, r6, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r9 = syz_clone(0x1806900, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) setns(0xc9, 0x0) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f0000000080)={'batadv_slave_1\x00', 0x600}) 4m49.241318612s ago: executing program 3 (id=1241): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x8e}, 0x28) landlock_create_ruleset(&(0x7f0000000000)={0x10, 0xf, 0x3}, 0x30, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, 0x0, &(0x7f00000001c0)}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xffaf) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x2b0, 0x258, 0x258, 0x2b0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3e0) 4m43.401130553s ago: executing program 3 (id=1249): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r1], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000004f5ff00000100fb00000000ba5ba297", @ANYRES32=r2, @ANYBLOB="0100008000"/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05000000000000000400"/28], 0x50) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x20c03, 0x0) r6 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f00000001c0)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="7c2f0aec9d222ea5ee20e6b25cf191669d6293d87d67cbc22a8dca55b40c545d1439d9ab278a279afd807e25e3c9aacca664836fec718e063c9b06cd66442b6407fec5c3e5cd9d0f1001c90a801c4fadce8e13a5e0209edf5c5693acccefa24d4f5a2ef062e701d054d19e9e6340a1651e05fd87b70942c679234426f9b19c0723563d0e38ec970aec02a6154ab61081aae03050d00192bd9d59977bb2f1297a7cd0571a0dfc5688a8e3d5f4a226b7e397b43c186967c74821bc70005059ab5606c70045a6a9915285c8215b9abd839f50530dde8ad500d70d8f7c1a0093293e6d632f8e8939f3199ab4ec92caed14c26975b57578c8ea666a2e4253ca9516f3c07bdc5ad27c2ff29e1569795f9dfbd1b92919432e423ff4f9a35b77419d6a8540fc9431ca78e05e278bef5a21b1423a3c9f7c1e2bd16a1ecdfde51cfa4aef38e6afb92770bcefb5fcb277ccede1ddc8647db538661b3d10effa1b6f705ef1b74e5bea20b4f98421b7b4be4c5c6be101f5503a4ecaffae335ef565920d678ed5b41031122b21f9d9b7f270b95f94624a7ddc657c83d3722a8d01f321fd7f685fc74d61a4e1914dda6df4be639c4910c56a84c24a41b9ef07eee4083dd9a30a53a58b50186c12180da4186fe5845b6b325fd112378a82d53bee449bc9d4c2d4331a1323c69c99c778560fc2142d138b23000c5403156cd8223f07a73811ab5b81e287bd6ad95c2fefce002ac77a1ac74d5e868870f29277da69987652b0055b3072efab2fe56fe0fe287f7d51aa772b2e3ae77954a938be2792442e1ab2e6fc078d821c70222142568b6db9609f1db23e8a4a460b9fbbeb48469e6bf0acffd85af86e69535a95c02c30d5ad776002c48e19e134688780bbafaf81097358b0c8f63bcefb61d8f29aacb3dc1a485bb7343539387f1e83b9283674bdc0d7fe8bf86948439f4b4a20e2832c560c743e4c2d37eddbf341c47f71a93101a08a533e96601f98752531428944d88c836c7d7a082859a3120721afd99130e83f689720638e889ddf4a23228dc23e955ae67fe5447e134b63f4c72e5664d2ed8a7406568e08f3582661006cf5800615fc4a5ec88ef3361ea027d2a1a550ac3e017a212570cd145fcc2e1984e4fca28bf4110f33a5ac847fcd3605e546ee8ea49a7de5d4b599926a76028e9d5259db7fd6f908c7a8657d42f895380c88ac85cdc183f6b61172b966a41888ceae895eaf18cb8da8d1918411b297959a8abacf8c4cee15ca87048aae13ffe068dee23a9edc2b259aeb0595b7ed2633431067a999f915934aef1be5f360f0db726f24e8eb89adb8db535de6fd7c06678831d17e47c67cd22f047b92d8fba83a49a1285def4dfdf634408cb05ae73f24df76e7393d1e90d40c50bd388bb53e281b889084a1a19efdfa6be16aed1a621d964c1ac332b65765e7440ccc75ef44851409c458905127bd161bf98cb6a3681af073e3650f52d5ee691c347e86360c3aebae4a691b2485d68c57d09e269656b1efbfd3413d54c8d3e467c0bfa84669d0cc5e9cfd50b9c79171f8b6a5e66e8c6f66c0916083b8e8a464498aed3badd2f267fb56adb0953b9ebd0370f941d796abffa81722d502c8d1e9d844802f4197067598b2394dddf76641f9c2ec0403bd379e8f712668b98e1121a27888b227104875999cd562fa9833458879652bfeffabc6bbb5c354dc36ad91354ccb5050d69b28b562a72bbf277f96bd1d5dc6408329f6f850a96762a6aebf2a7b5bacbbc032be8b29c453867a47094289f6b8aa38f85051fc4d4478a02af664b3250a396583001a7971cfa6f5a4931e32e7bfb7b4c3f7be3bc5f91ba46554773b9102dbd4aba4344c6fe87bd050f79175d7918d57bc137cde33a884bba63a1adf6e7e71ba783eb1fe689b23d3ad18627b0b229c0d982631308a88c4bf1e2079eb0fcc486ef864e7c6a75cce17b133577fa88d62807398b8a795ae2bb7610f8b17cfc56ff11b8ffc4aa316e612fc76955dc44e66467c4d632657d4cac3cc1bda8c2c6207915a89f76bf1fd61c156ba8720bb8048601cd1221f6996e6f04e44b842e00a4487cd59501a65db1f6ade7f22ba5d7ee8e67125e284eef41ad5f2069a48cc71c621eb08d832ef8592874199c5c03249d3ee03422535c2be6919c43724277d56a885ab67753ae8d7f1317b7e534bb1a111a0edb5d298c1374c7824a80fb00ae268f2fd641f1b2a12f712d9a5e027957941ffb4218c6d8a8e7950dca0b4c9018dcfb67244a30080d54781b5111c85cd89e08f51c55975301ff389baf2242ef0fb662122a2eb89c1dcaf82d6391906a1b235635e6c484cd5fa32bc80ce68d505df9a9c6b21e222c3b9330243b8e02a3e661c20e0da633d88f7debaf6643654050ab73613dbea6176109b5c35c4d280739aee77f81a1b58efa9e606259f45745b69523bc81828cfcfffd185ad51b4b183b7a1ef86757172ef67a4f153b7c3a3e99f15ef5b09d81cd1ccec8016ecc9864ccf2efdbf7a79ff9ba814a4a9e3124d735a591c649cdefa98bd569c5f4db18a537c55544c671d398ec50d9fc2b1ca1f9b0278acc9a21779c3815fcb0ee1c66c774b6591e8f6b5c9828db8a5d104213cd4513974be404a50c11009c15a1e2aaa81abc6c706c341f145f975717819c4429007ee648f6c3fca45d714981cd9240beea8b02a19e0ddb083dc8115d64d75ab087c87e00792b8b83551ca82b311444067923656b0e70015ca4775da3d5e984ea8af20955f92d9cbd9acca8cd258df4276a118505d440b74e93bd0b97caeb0e24dbb09e7dbdfe0c3b4bdc0983a7d1eee02bee9c5d381bfbd7dfbb6329539698477f3a8bc7f82c01588d679a167e91487f150e5923cbf3030f09c8fb89cf178f5e953618887b7e56afdfd6a6b5e3003cecdbcba76ed86bc48907fada5e0178f9194970323ae9c818215ae2feb1ee56b289d83e8e9d2ab27056ede5651d2a92a93dd3d6c519ac128a44f1414f93e96c55485a73f3cb7e4750d0f2a2acef87e46a7012a30712f7cfe2ac9372af0efcb6475e3a1a8db1961040002915038412b892eee569aae8f38fb07c27aef5bbab7750a244a7c3b0193004246afa1a72368db45cd3649a89b54e880ea12c92beb59e366d7893f725bb8080aebcd35857ff686d03eddc33af248cecc5198bda6f395b55294821f6853232cb5bde67a4166a35224cd9c5b54e6b5a38376b1fdfaeb7563a8ea93148997e2bf490c67916f059e3e1992a986f96d2720a6418cf8c57d6e72eb90d7ca59a3a20fd414e404900aa4a45f381ff7828e15558b4862055bf795c9134836878999200e71e9ba9f83a2e28955c7b37244f3abc8f9d15a5e6c3d9b2f76620b3b2bcb13c0c44c63b9bddd51e339aedfc3a4d995df0eca66c6891ca9099923577e7cd84cb58cf0d6d6eda2baeb00775c4e717e31dbc881615d5f1a0898017954e882a444017e947b1fc05fdcf4495c5dbe3b7b4ce4c1535070fbc64d135df094fe4f6cdd452e7a5f844145af9b746dc5eecede9a834de1ff65525ea3017478ee08dc1bcff852a9d2ad94f46840bdcf1b6226fb0cdb620787692e52aae3b9b703f30b3ce6ca6dcaeb8b3a5884c30c570b29741c70ad99f5d7f463c7e5e1b4bbaafae33e789c0ae1114674732d50c0a799bfa6388365c392d47c3e0d2992a61d21e4ca034ed3d386fe959a94601a4007f1f2060b59359747635b076db7697ba5ad45af0423dbb9966113fa5eb59118cac394c2e2b17ebec1b7ce18ede120b1f56956b12a95de708e780ba7a1ac3a9e31267a2c195acfcb3b20c2f5d20de288846045211da53649a6d8b23008449b763fe6a58243cde95093a9755e5725307af09c997520f159f4ec7d1e687a0cf5148721062ecc6b080f65a550730da9257f1515a10830e29b85de3138a77ee8d2f0cb129c971417d7bbcd982d684b697364084c5764bafb4e2211a82e8c962eefb1f000ac8f5f2567b580931676943cea9b95977d842c247a98672b5c73594eb51f927ee5ec2b0c45eda29fb83a092880e542c60113ca653923aa0c16e2e1604e5f437876cb7fa7d1498584f8800ff80804d41c7b89e9cba341fed8d260a6abd0fc242ba6b3d624c91c468e269069d0a121f0951c3765f18693a2c547d9bc924058d0ecece5c7802126d293d3033d6bbf83d4b8b0144d27cbb985dba465d75b62a93bf7a438cce59f", @ANYRES64=r5]) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60e400ff00403a00fc020000000000000000000000000000ff0200000000000000000000000000010200907800000d006000000000001100000000000000000000000000000000000000d3d50d346ce58bb4ffffe000000117c17f07917100074100000000000000"], 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @mcast2, 0xffffffff}, 0x1c) r8 = socket$kcm(0x2, 0xa, 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x3, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, 0x0, 0x0, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) creat(&(0x7f00000002c0)='./file0\x00', 0x7d) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000004c0)={0xc}) 4m41.319004467s ago: executing program 33 (id=1232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000000000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x894a, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) mkdir(0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x7) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) r8 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0x3ca6f000) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000080)=@rnullb, r6, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r9 = syz_clone(0x1806900, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) setns(0xc9, 0x0) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f0000000080)={'batadv_slave_1\x00', 0x600}) 4m28.24712963s ago: executing program 34 (id=1249): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r1], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000004f5ff00000100fb00000000ba5ba297", @ANYRES32=r2, @ANYBLOB="0100008000"/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05000000000000000400"/28], 0x50) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x20c03, 0x0) r6 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f00000001c0)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRES64=r5]) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60e400ff00403a00fc020000000000000000000000000000ff0200000000000000000000000000010200907800000d006000000000001100000000000000000000000000000000000000d3d50d346ce58bb4ffffe000000117c17f07917100074100000000000000"], 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @mcast2, 0xffffffff}, 0x1c) r8 = socket$kcm(0x2, 0xa, 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x3, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, 0x0, 0x0, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) creat(&(0x7f00000002c0)='./file0\x00', 0x7d) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000004c0)={0xc}) 9.912221991s ago: executing program 4 (id=1665): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000027c0)={&(0x7f0000002940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x14c0, 0xe, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x11e4, 0x3, 0x0, 0x1, [{0x1a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @osf={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0xff}, @NFTA_OSF_TTL={0x5, 0x2, 0x6}, @NFTA_OSF_TTL={0x5, 0x2, 0x76}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, @NFTA_SET_ELEM_KEY={0x124, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x94, 0x1, "bd30e4d702171cd604bfebaef02732a318251bbc07474feae39f547fc311aa6531da5bd3c20dcf9912f6a2fd08ad5714fb649178c9026a5c39122a0832597f17d5ec8d40712572b1810db1da04d2e8ad2c08e683d49889473f0d3fcbb0b3823715bc12ae0ed6b57fc507368b765c8eacf67d3bd76c3ff635c4b4f85b7228d25aef52875e043dab6957b050d949b962db"}, @NFTA_DATA_VALUE={0x2b, 0x1, "a08fac054427d4bfacc061e58d70d5a11f0a6c4176b0557af1f46b65a07a8effc5d9500eac30a0"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xc4}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xf}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @last={{0x9}, @void}}]}, {0x4}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}]}, {0xd4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xc0, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x20, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}]}}}, {0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x1ff}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x6f}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0xfffffeff}]}}}, {0x38, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x4}, @NFTA_OSF_TTL={0x5, 0x2, 0x10}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x42c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x270, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc7, 0x1, "82a2e14073a31518a26ebeaff22dfe02baeb692608706caf79725d62a6a5e9c2561b96d55605838b8b925edfa053a9df8e2a9368dd42b34f777193ddf23a85a079d49b63b520fbbb5abad696cfcd9f059026c849c9d7c0bee3f872e38f633c146ab3418614790e2104fc53a24f51319b052647eefa56b5ba66a31103575851f2f1f5de0f0772b19067bed44b47c4b63866243dd7dcd7e155eff67977c1b48e2b55bd79878cf8b3a7efd41190f264e8977b4b82585b550fa5e9258c50d43c00b0908e72"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff2}]}, @NFTA_DATA_VALUE={0x26, 0x1, "1881f20572d17ad63a05f153f1508f80bf4dd2f6407ee2a753cae3695d28c4ec9f95"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xd7, 0x1, "c8cf59498bae8c783707d0a0e097551cf5dd70a9143b35d8ae6ca1a6d763fc8c2babfec29409ca51d38ce3c6a4198a605ee30985a91cb8b266879e107f190288b0522fa476576f0cf1af6e16c9483fb13d2a0b27b2095bdd1de9ba53822ef34c9c4a6103c8f5e32bfc8556ffee7e11c16f8191ca2a7acd730f0fceeb38910217c5d7aeb66fb5dd783ae16279a20a9cff75a21f2e9594ae44a93d7342713add3bcfb99c8d84a57ab9a6aa99ba3e48e16b05de4681a5e3f6751164d3d37ba6c1eb41527f5db3d4a626a55fd75948f8b3061c233f"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x20, 0x1, "fd0018b114b98d506c42aa0e3a6abedcefd9ee21cac42be9f96089cd"}]}, @NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0xfc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf7, 0x1, "a8aae27279c9791a675f3e74d05d3c653adcca3abb59347ef21d24e634648a7133fdff8bfa3f9b3dace56249a6d23cc343f32af99cbeb76a666ba4ac46db17460deaa8383e2968d4362a820a97b4528245bc2f299ff999ec8d13ea947f154343c3359b01733effe6c09ff2128520c99e44c172b76cab3e69483acc4b4f9e71ceb6f3730313c5bc9513680e57ec52f38aca7fe2e13806eb646310e195fc16f25cd9831c1a6f43004f7c5a66501c5d8188445a0aef26c3b60231a2d0028fd9ccd6ce89e14376191600cecff546b9cc6b7b9e78430f934fce934a63f8ab382f5dd7244fd1fda3e64e649a6dae76d3bccbabcd5563"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffffa}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0x87, 0x6, 0x1, 0x0, "c8efbd878dd3087ea2e5a2ae1e3b74999404388faaa88cae1d301ccdb83dd3dcaaa11cf266072d9d474e2816c6a5a05ea9f8bce5c85780ec01bca6e544f031f22f84f875c53468bdacf36df61965459cf9b29da2cd77e4eb58ee52fda05add6318ee078b631efb7e81526b159944cf41f46e9bac3720574857b82ee638b27166fd65b4"}]}, {0x4}, {0xb24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @osf={{0x8}, @void}}, @NFTA_SET_ELEM_KEY_END={0x804, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x7fc, 0x1, "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"}]}, @NFTA_SET_ELEM_USERDATA={0x65, 0x6, 0x1, 0x0, "f4374b35a0beca9becdd5471393d7c25c331e1a7b2925d3bef04e057881a90a4abb4a99c6de4daab14f59a5a9531710cf57a29c6e551b6c46207dcf9a4e75c19b92900be0e1d81842215f57416b4badf20e2e17195f31c8255900dcab2d0e05647"}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @byteorder={{0xe}, @void}}, @NFTA_SET_ELEM_KEY={0x24c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x60, 0x1, "15278ac0f9392565eaf3fefcd321961503bce6aaac8ef432825635cd97af21860d4d56ba7e0cad2e74f80207e11304fd3056153be65877aa9b3e0b25854700d7aa91cd2133866bbc027086623a0c7c0e0def936b2f20cfa75245692f"}, @NFTA_DATA_VALUE={0x13, 0x1, "b5b39be0b3790921cf47060e5ef059"}, @NFTA_DATA_VALUE={0xcc, 0x1, "76efb2425ce7c04cfa159fd7cc0f844699d5757bf03e647e5243ab74e923ff00723532ac1e18b202996f09ec3a08b28d1516ecaf57ddde189e5f50c4d19da613a750204d28144cced2cd206a9a1503cd7e4231bc9baf86f625587f0218d32251abc43d7330f4c4556b94c478fcf7702899cc375be87ae4f39a3dc85adc44afc5ef1be8f3200768743b83d70c853fcae8751f078363525104e6eb328cce1f506edf842aeb9499f8375247e63d9b6a4367ab490ec4baedb0a2cce74782fb0afd42aa7981df27224ecc"}, @NFTA_DATA_VALUE={0x2b, 0x1, "a07066e4c7cffc5ab7e771570a0e20fdeb1343ab19845e2d33fac7d1ebbcd65feae7bab71e0449"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x82, 0x1, "693d8f2d7751d62dcd3b33ccca5694c79c9dbc744d4ee697cda6e0d5fc59811481ac2938a3baab4d3a69c7c337cbf93e53eb53a716b8d76afb330f81f7228b6af0a62b82a3be4e3cd88fc5bdcd2301c05a47b553ade96ff627e389fffd7c22a2499432f313fc98e2cb07592351fd36aa165780c448fe83b7956864541d6a"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @limit={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x6}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28c, 0x3, 0x0, 0x1, [{0x288, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x284, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xe6, 0x1, "d723a6e7978e859a04fc5656d68d71682ef229f2baaa7ffc46c3906ee6461ca7cbd6a29afe6be147741a77e1f0b0ea8b471a6f5132e2aaae533f8b3eb031331f5dfc39ad660d8c196efb096c6e48b0a912aa7d4f66f3a3371ac359e7526b8b1f1de187a9181c3f8bade90cf5e061b0298e31c17b7c67ad71741c83a5059ce637daff2f25b0ea57c802d527223faf50b71690e4c15300abccff6678d6a6d94b9b94bbaa704ade338320623fbe0b94cf82ab17249788b2a7dc9d76435b0431bad1643936de8fda91c3cc14cde9c1329aeaff21708c739701fe4adaabe212080b2299f6"}, @NFTA_DATA_VALUE={0x84, 0x1, "a59a6e41c0e7fc7ebf761be1b2b628c8a4e8958e6cd5055861a79d71e85fab27b6ce7f571169e30fc3e1ef8ddd5709be32642ffcbad0b54d6b82b5ba48c5e9797c94258a65cc128d7906b2b42c8ee0d6a5fca18bf7c6bcb7ea2e905f42ae3bb36206fdf07214b6131acfaaa433ffa0533d18b47e2ad4dd33c9182a1f1dd42450"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xca, 0x1, "935d245823a0597c281e18e7c5fb71cc0b90e95735e136854d31852a32b2771b911d8b9d6882c3be3b6911ed3d61d2979b9c66477123d407f179d1e18c119f3e9b48ebb31603fbb7ea76ae2d968ab3288326c1dc651e2ad66effcdfd22cbec3eb100b9e925fd9391f80d73cc442c05a1a3eb85e0326c70c9a6659b2ff78fec3403d3327c428b7693f8d50e4c29ce5990fb8a31898cf39e4c272c1fbb10a554a85db529a704f2b659eba0540420f1bea5f23106f6f2409bc5aa62abaa48cb69cd00293cea5f72"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x4}]}]}]}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWRULE={0xe4, 0x6, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0xbb, 0x7, 0x1, 0x0, "5bbdb9b4fae3b598c0364f3f8d3d9fb44fea1267b53fb2f7480259fe4a4402854e116c117609d093b41f4da2eb97fbfe0c9f846e77cbf3f41ad410d9202fb3f7e625d13992a0c646a5aaf5303b7ec8c62355c2c5c1213da779ce2281b557a5ec8a31ed8c52f839087c2cbd86a6b75bd43f3c473ec519b68b7012bdb7318efe12054e48ee0d9d8a0f47bab35be0e3b2d0cac66909dfc76bb914c3b5c782cad1598304b8805a60fc7af7d54569d58ca659f3fe5240814b60"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1644}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r0 = socket$inet6(0xa, 0x3, 0x76) bpf$PROG_LOAD(0x5, &(0x7f0000002840)={0x16, 0x5, 0x0, &(0x7f0000002900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x50, &(0x7f00000a2000)={0x0, 0x0}, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x1404, 0x1, 0x70bd25, 0x25dfdbfe}, 0x10}, 0x1, 0x2000000, 0x0, 0x40000}, 0x80) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$XFS_IOC_GETPARENTS(r3, 0xc028583e, &(0x7f0000000440)={{[0x4, 0x7, 0x6, 0xf043]}, 0x0, 0x1, 0x5, 0x0, &(0x7f00000002c0)=[{{@align=0x7, {0xffff, 0x585, 0x5, 0x3}}, 0xe2, 0x0, '[+\x00'}, {{@align=0x5, {0x2, 0x8000, 0x5, 0x3fb}}, 0x3, 0x0, '\'!\xd8\x00'}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r3, 0x0, 0x6c}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="500100001a0001000000000000000000020000000000000b002f000005001b001100000006001d004e21000008000200e0"], 0x150}}, 0x4) socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000080)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1, 0x0, 0x1, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0xffffffffffffffff, 0x800000, 0x0, 0x0, 0x80000, 0x0, 0x60a, 0xfffffffffffffff7}, {0x0, 0xfef2, 0xd, 0x8}, 0x101, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x32}, 0x0, @in6=@empty, 0xfffffffe, 0x0, 0x0, 0x0, 0x101, 0x8, 0x35ced141}}, 0xe8) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r7, 0x0, 0x12, &(0x7f0000000080), &(0x7f0000000040)=0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast1, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x2f}, {0xfffffefffffffffd, 0xeca, 0x2d, 0x4, 0x0, 0x0, 0x400778e, 0xffff}, {0xfffffffffffffff7, 0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x4}}, 0xe8) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @remote}, "090086ddffff0000"}}}}}, 0x0) 5.07388193s ago: executing program 4 (id=1674): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 4.73233899s ago: executing program 4 (id=1675): syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 3.888339018s ago: executing program 1 (id=1682): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000880), 0x129080, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) 3.561138835s ago: executing program 4 (id=1683): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44080}, 0x80) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.559264826s ago: executing program 7 (id=1686): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = timerfd_create(0x0, 0x0) clock_settime(0x0, &(0x7f0000000000)={0x6553f100, 0x3b023380}) timerfd_settime(r1, 0x1, &(0x7f0000000300)={{}, {0x6553f100, 0x3b9a06b0}}, 0x0) read(r1, &(0x7f0000000400)=""/8, 0x8) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x3ffffe, 0x2, 0x1000000000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000016000100000000000000000064010100000000000000000000000000ac1e00010000000000000000000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000200000000033000000fe80000000000000000000000000000e0000100000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff0300"/117], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x40) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x118}}, 0x20000010) 2.428223307s ago: executing program 1 (id=1688): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0xffffffff, 0x8, 0xf, 0x5, 0x4, 0x43, 0x6, 0x0, 0x34, 0xb}, {0x100000, 0xb000, 0xc, 0x2, 0x1, 0x43, 0x7f, 0x6, 0x5, 0x6, 0x7f, 0x5}, {0xdddd0000, 0x80a0000, 0xb, 0x6, 0x80, 0x7, 0x0, 0x9, 0xff, 0xb, 0x8, 0x85}, {0x200000, 0x8080000, 0x10, 0x6, 0x3, 0xff, 0xfd, 0x1, 0xa, 0xa0, 0x9, 0xf1}, {0x1000, 0x2000, 0x8, 0x3, 0x1f, 0x2, 0xab, 0x7f, 0xf, 0x83, 0xf7, 0x7}, {0x2000, 0xa000, 0xc, 0xa, 0xf7, 0x6, 0x1, 0x1, 0x80, 0x13, 0x5, 0xfe}, {0x6000, 0x60000, 0xb, 0x5, 0x0, 0x4, 0x4, 0x3, 0x3, 0x7f, 0x1, 0x70}, {0xeeee0000, 0x6000, 0xc, 0x2, 0xf, 0x7, 0x6a, 0xe2, 0xff, 0x18, 0xee, 0x9}, {0xe000, 0x3}, {0x3000, 0x2}, 0xa0000021, 0x0, 0x40000, 0x42064, 0x400000006, 0x9d00, 0x25000, [0x400000000000a2, 0x800ffa, 0x400000000063, 0x7]}) 2.427936277s ago: executing program 7 (id=1689): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @remote, 0x0, 0x6, 0x0, 0x100, 0x6, 0x4180107, r3}) 2.34195093s ago: executing program 7 (id=1690): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1d0) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/sched/sched_switch/filter\x00', 0x2, 0x0) read$char_usb(r0, 0x0, 0x0) 2.143645609s ago: executing program 1 (id=1692): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0xc7) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x4004662b, 0x0) 2.000789108s ago: executing program 7 (id=1694): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x2, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x40046210, 0x0) 1.789893942s ago: executing program 6 (id=1696): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)="900000001c001f4d154a817393278bff0a80a578020000000704840014000100ac1414bb0542d6401051a2d708f37ac8da1a2d7e0099c5a0ef5514573d10405d71ac0000c5b068d0bf46d3234565b5835e1dd553b904185836016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cef00000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731a", 0x90, 0x800, 0x0, 0x0) 1.789682134s ago: executing program 1 (id=1697): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000001c0)='Z', 0x1}], 0x1}}], 0x1, 0x60cd894) close_range(r0, 0xffffffffffffffff, 0x0) 1.789589561s ago: executing program 4 (id=1698): syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109024400010100000009040002120206000005240600ed"], 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r0, 0x4068aea3, 0x0) 1.766463085s ago: executing program 7 (id=1699): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000500000000000a00000000000000f65e0190536134fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200ffffffff0000000006002b00020300000000000000000000fe880000000000000000000000000001"], 0xa0}}, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000340)=0xfffffffe, 0x4) connect$unix(r0, &(0x7f00000011c0)=@file={0x1, './file0\x00'}, 0x6e) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x803, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x1, 0x2, 0x0) openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) clock_adjtime(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x200, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x105c87, 0x800, 0x0, 0x8003aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x80, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 1.564328043s ago: executing program 6 (id=1701): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = dup(r0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, 0x0, 0x0) 1.480543054s ago: executing program 6 (id=1702): socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYBLOB=',ro']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x800000000000037, 0xefffffffffffffff, 0x0, 0x0, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.412213721s ago: executing program 1 (id=1704): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r3, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000080)={'wg1\x00'}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@textreal={0x8, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.245196702s ago: executing program 5 (id=1705): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}]}) 1.154711269s ago: executing program 6 (id=1706): syz_io_uring_setup(0x6763, &(0x7f00000003c0)={0x0, 0x9621, 0x1000, 0x0, 0x204}, 0x0, 0x0, 0x0) r0 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x20000000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x202, 0x1000, @empty}, 0x1c) preadv(r2, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000780)={r0}, 0x0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) 863.980508ms ago: executing program 7 (id=1707): r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x149202, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x0, 0x0, &(0x7f0000000140)={0x3, 0x2, 0xa, 0x1, 0x8, 0x5, 0x7, 0x8c}, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 861.84207ms ago: executing program 5 (id=1708): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) 774.936194ms ago: executing program 1 (id=1709): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r2, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x21, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080") ioctl$KVM_RUN(r2, 0xae80, 0x0) 558.878774ms ago: executing program 5 (id=1710): syslog(0x3, &(0x7f0000000100)=""/4096, 0x1000) 424.05752ms ago: executing program 5 (id=1711): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0xaf74000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x4403, 0x215, 0x101, 0x0, 0x7, 0x3, 0x6}, 0xc) 422.707833ms ago: executing program 5 (id=1712): r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000001c0)) mount_setattr(0xffffffffffffffff, 0x0, 0x8900, &(0x7f0000000200)={0x100002, 0x4, 0x20000, {r0}}, 0x20) 378.509778ms ago: executing program 6 (id=1713): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x1808e2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x20001, 0x10b) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffc, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e62a661b7ad3300", [0xfffffffffffffce8, 0x6]}}) pwritev(r0, &(0x7f0000000540)=[{&(0x7f00000001c0)='z', 0x1}], 0x1, 0x7aa, 0x7fffffff) 371.227025ms ago: executing program 5 (id=1714): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x9, 0x180062) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_print_times', 0x2000, 0xa9) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000280)={r6, 0x0, {0x0, 0x0, 0x0, 0x7, 0x404000000ff, 0x0, 0x0, 0x16, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d81a17f7061a74df2cfc06c89f3d9e234b30c50997d3bef4090ebcdda37bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b063cc14ad3300", [0x62f, 0x6]}}) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) syz_ublk_setup_io_uring(0x4ea5, &(0x7f0000000080)={0x0, 0x6850, 0x800, 0x0, 0x236, 0x0, r6}, 0x0, 0x0, &(0x7f00000002c0)) setsockopt$inet6_udp_int(r4, 0x11, 0x67, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) write(r4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) setrlimit(0xf, 0x0) 288.396405ms ago: executing program 4 (id=1715): syz_io_uring_setup(0x4803, &(0x7f00000002c0)={0x0, 0xae31, 0x2, 0x2, 0x40382}, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda\x00', 0x1c5e42, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x143142, 0x88) sendfile(r1, r0, 0x0, 0x1020000201000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r3, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 0s ago: executing program 6 (id=1716): unshare(0x60000600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f00000003c0)={@void, @val={0x2, 0x3, 0x1b, 0x30, 0x14, 0x6}, @ipv6=@esp={0xb, 0x6, "559a3d", 0x22, 0x32, 0xff, @dev={0xfe, 0x80, '\x00', 0x18}, @mcast2, {[], {0x4d3, 0x0, @cc={0x1, 0x0, 0x6, 0x4, 0x5, 0x1ff, 0x5}}}}}, 0x54) kernel console output (not intermixed with test programs): it: type=1400 audit(1789814680.719:16939): avc: denied { name_bind } for pid=11247 comm="syz.1.1396" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 676.274683][ T31] audit: type=1400 audit(1789814680.719:16940): avc: denied { node_bind } for pid=11247 comm="syz.1.1396" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 680.203348][ T31] kauditd_printk_skb: 154 callbacks suppressed [ 680.203364][ T31] audit: type=1400 audit(1789814684.999:17095): avc: denied { search } for pid=11281 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 680.203528][ T31] audit: type=1400 audit(1789814684.999:17096): avc: denied { search } for pid=11281 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 680.203683][ T31] audit: type=1400 audit(1789814684.999:17097): avc: denied { search } for pid=11281 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 680.203841][ T31] audit: type=1400 audit(1789814684.999:17098): avc: denied { search } for pid=11281 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 680.217707][ T31] audit: type=1400 audit(1789814685.019:17099): avc: denied { search } for pid=11285 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 680.217877][ T31] audit: type=1400 audit(1789814685.019:17100): avc: denied { search } for pid=11285 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 680.218291][ T31] audit: type=1400 audit(1789814685.019:17101): avc: denied { search } for pid=11285 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 680.218443][ T31] audit: type=1400 audit(1789814685.019:17102): avc: denied { read } for pid=11285 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 680.219042][ T31] audit: type=1400 audit(1789814685.019:17103): avc: denied { read open } for pid=11285 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 680.222374][ T31] audit: type=1400 audit(1789814685.019:17104): avc: denied { getattr } for pid=11285 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 680.261481][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.261532][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.504507][ T5729] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 681.516969][ T5729] usb 2-1: unable to get BOS descriptor or descriptor too short [ 681.517014][ T5729] usb 2-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 681.518007][ T5729] usb 2-1: config 4 has an invalid interface number: 4 but max is 0 [ 681.518028][ T5729] usb 2-1: config 4 has no interface number 0 [ 681.518052][ T5729] usb 2-1: config 4 interface 4 has no altsetting 0 [ 681.520090][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.520113][ T5729] usb 2-1: Product: syz [ 681.520126][ T5729] usb 2-1: Manufacturer: syz [ 681.520140][ T5729] usb 2-1: SerialNumber: syz [ 681.555398][ T843] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 681.880574][ T843] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 681.915773][ T843] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.915809][ T843] usb 5-1: config 0 interface 0 has no altsetting 0 [ 682.162340][ T5729] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 682.181632][ T5729] gspca_sunplus: reg_w_riv err -71 [ 682.191822][ T5729] sunplus 2-1:4.4: probe with driver sunplus failed with error -71 [ 682.341204][ T843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.341232][ T843] usb 5-1: Product: syz [ 682.341247][ T843] usb 5-1: Manufacturer: syz [ 682.341260][ T843] usb 5-1: SerialNumber: syz [ 682.610215][ T843] usb 5-1: config 0 descriptor?? [ 682.638016][ T5729] usb 2-1: USB disconnect, device number 29 [ 682.794925][T11304] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1406'. [ 682.949354][T11310] FAULT_INJECTION: forcing a failure. [ 682.949354][T11310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 682.949384][T11310] CPU: 0 UID: 0 PID: 11310 Comm: syz.5.1408 Tainted: G L syzkaller #0 PREEMPT(full) [ 682.949408][T11310] Tainted: [L]=SOFTLOCKUP [ 682.949414][T11310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 682.949423][T11310] Call Trace: [ 682.949430][T11310] [ 682.949436][T11310] dump_stack_lvl+0x100/0x190 [ 682.949468][T11310] should_fail_ex.cold+0x5/0xa [ 682.949492][T11310] _copy_from_user+0x2e/0xd0 [ 682.949512][T11310] copy_msghdr_from_user+0x9f/0x4c0 [ 682.949540][T11310] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 682.949572][T11310] ? lock_acquire+0x1d1/0x380 [ 682.949590][T11310] ? get_pid_task+0x2a/0x250 [ 682.949614][T11310] ___sys_sendmsg+0x106/0x1e0 [ 682.949630][T11310] ? __pfx____sys_sendmsg+0x10/0x10 [ 682.949645][T11310] ? get_pid_task+0x106/0x250 [ 682.949676][T11310] ? find_held_lock+0x2b/0x80 [ 682.949713][T11310] __sys_sendmsg+0x160/0x210 [ 682.949733][T11310] ? __pfx___sys_sendmsg+0x10/0x10 [ 682.949765][T11310] do_syscall_64+0x123/0x790 [ 682.949793][T11310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.949810][T11310] RIP: 0033:0x7fe5b139e159 [ 682.949824][T11310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.949839][T11310] RSP: 002b:00007fe5b21ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.949856][T11310] RAX: ffffffffffffffda RBX: 00007fe5b1625fa0 RCX: 00007fe5b139e159 [ 682.949867][T11310] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 682.949877][T11310] RBP: 00007fe5b21ae090 R08: 0000000000000000 R09: 0000000000000000 [ 682.949886][T11310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.949895][T11310] R13: 00007fe5b1626038 R14: 00007fe5b1625fa0 R15: 00007fff1424c9e8 [ 682.949917][T11310] [ 683.054040][ T843] usb 5-1: USB disconnect, device number 37 [ 685.256375][ T31] kauditd_printk_skb: 348 callbacks suppressed [ 685.256402][ T31] audit: type=1400 audit(1789814690.059:17453): avc: denied { read write } for pid=5604 comm="syz-executor" name="loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 685.261373][ T31] audit: type=1400 audit(1789814690.059:17454): avc: denied { read write open } for pid=5604 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 685.263423][ T31] audit: type=1400 audit(1789814690.059:17455): avc: denied { ioctl } for pid=5604 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 685.311151][ T31] audit: type=1400 audit(1789814690.109:17456): avc: denied { search } for pid=11325 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.311193][ T31] audit: type=1400 audit(1789814690.109:17457): avc: denied { search } for pid=11325 comm="rm" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.311224][ T31] audit: type=1400 audit(1789814690.109:17458): avc: denied { search } for pid=11325 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.376052][ T31] audit: type=1400 audit(1789814690.159:17459): avc: denied { search } for pid=11281 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.438603][ T31] audit: type=1400 audit(1789814690.229:17460): avc: denied { allowed } for pid=11327 comm="syz.4.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 685.481348][ T31] audit: type=1400 audit(1789814690.279:17461): avc: denied { create } for pid=11327 comm="syz.4.1413" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 685.598943][ T31] audit: type=1400 audit(1789814690.399:17462): avc: denied { read write } for pid=5604 comm="syz-executor" name="loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 686.752208][T11334] netlink: 284 bytes leftover after parsing attributes in process `syz.7.1404'. [ 690.869536][ T31] kauditd_printk_skb: 107 callbacks suppressed [ 690.869555][ T31] audit: type=1400 audit(1789814694.799:17570): avc: denied { read write } for pid=9765 comm="syz-executor" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 690.869593][ T31] audit: type=1400 audit(1789814694.799:17571): avc: denied { execmem } for pid=11356 comm="syz.4.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 690.869625][ T31] audit: type=1400 audit(1789814695.109:17572): avc: denied { read } for pid=11356 comm="syz.4.1415" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 690.869657][ T31] audit: type=1400 audit(1789814695.109:17573): avc: denied { open } for pid=11356 comm="syz.4.1415" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 690.869690][ T31] audit: type=1400 audit(1789814695.289:17574): avc: denied { create } for pid=11356 comm="syz.4.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 690.870543][ T31] audit: type=1400 audit(1789814695.669:17575): avc: denied { read write open } for pid=9765 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 690.870918][ T31] audit: type=1400 audit(1789814695.669:17576): avc: denied { ioctl } for pid=9765 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 690.955066][ T31] audit: type=1400 audit(1789814695.729:17577): avc: denied { prog_load } for pid=11353 comm="syz.1.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 690.955106][ T31] audit: type=1400 audit(1789814695.729:17578): avc: denied { bpf } for pid=11353 comm="syz.1.1417" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 690.967201][ T31] audit: type=1400 audit(1789814695.759:17579): avc: denied { read } for pid=11353 comm="syz.1.1417" dev="nsfs" ino=4026533086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 696.648570][ T31] kauditd_printk_skb: 77 callbacks suppressed [ 696.648589][ T31] audit: type=1400 audit(1789814700.579:17657): avc: denied { execmem } for pid=11397 comm="syz.6.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 696.648628][ T31] audit: type=1400 audit(1789814700.889:17658): avc: denied { read } for pid=11397 comm="syz.6.1421" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 696.648665][ T31] audit: type=1400 audit(1789814700.889:17659): avc: denied { open } for pid=11397 comm="syz.6.1421" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 696.648703][ T31] audit: type=1400 audit(1789814701.069:17660): avc: denied { create } for pid=11397 comm="syz.6.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 696.871663][ T31] audit: type=1400 audit(1789814701.669:17661): avc: denied { create } for pid=11394 comm="syz.4.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 696.922750][ T31] audit: type=1400 audit(1789814701.719:17662): avc: denied { connect } for pid=11394 comm="syz.4.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 696.922797][ T31] audit: type=1400 audit(1789814701.719:17663): avc: denied { name_connect } for pid=11394 comm="syz.4.1422" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 696.947794][ T31] audit: type=1400 audit(1789814701.729:17664): avc: denied { listen } for pid=11394 comm="syz.4.1422" lport=52004 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 696.947843][ T31] audit: type=1400 audit(1789814701.729:17665): avc: denied { accept } for pid=11394 comm="syz.4.1422" lport=52004 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 697.020839][ T31] audit: type=1400 audit(1789814701.819:17666): avc: denied { setopt } for pid=11394 comm="syz.4.1422" lport=52004 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 697.295681][ T8903] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 697.296083][ T8903] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 697.439641][T11409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1429'. [ 700.239250][ T8903] Bluetooth: hci0: command 0x0406 tx timeout [ 700.611067][T11437] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1441'. [ 701.832896][ T31] kauditd_printk_skb: 195 callbacks suppressed [ 701.832918][ T31] audit: type=1400 audit(1789814706.629:17862): avc: denied { read write } for pid=10513 comm="syz-executor" name="loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 701.833515][ T31] audit: type=1400 audit(1789814706.629:17863): avc: denied { open } for pid=10513 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 701.834999][ T31] audit: type=1400 audit(1789814706.639:17864): avc: denied { ioctl } for pid=10513 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 702.203880][ T31] audit: type=1400 audit(1789814706.999:17865): avc: denied { read write } for pid=5604 comm="syz-executor" name="loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 702.233881][ T31] audit: type=1400 audit(1789814707.029:17866): avc: denied { read write open } for pid=5604 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 702.268961][ T31] audit: type=1400 audit(1789814707.059:17867): avc: denied { ioctl } for pid=5604 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 702.357527][ T31] audit: type=1400 audit(1789814707.159:17868): avc: denied { read append } for pid=11447 comm="syz.7.1436" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 702.357778][ T31] audit: type=1400 audit(1789814707.159:17869): avc: denied { open } for pid=11447 comm="syz.7.1436" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 702.359536][ T31] audit: type=1400 audit(1789814707.159:17870): avc: denied { ioctl } for pid=11447 comm="syz.7.1436" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 702.442192][ T31] audit: type=1400 audit(1789814707.239:17871): avc: denied { read write } for pid=5606 comm="syz-executor" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 702.488847][ T4927] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 702.489160][ T4927] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 702.617295][ T4927] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 702.620125][ T4927] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 702.804646][ T4927] Bluetooth: hci5: command 0x0406 tx timeout [ 706.025261][T11489] 9p: Bad value for 'wfdno' [ 707.687796][ T31] kauditd_printk_skb: 139 callbacks suppressed [ 707.687816][ T31] audit: type=1400 audit(1789814711.049:18011): avc: denied { execmem } for pid=11485 comm="syz.4.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 707.687852][ T31] audit: type=1400 audit(1789814711.929:18012): avc: denied { read } for pid=11485 comm="syz.4.1455" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 707.687886][ T31] audit: type=1400 audit(1789814711.929:18013): avc: denied { open } for pid=11485 comm="syz.4.1455" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 707.687923][ T31] audit: type=1400 audit(1789814712.119:18014): avc: denied { create } for pid=11485 comm="syz.4.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 707.687957][ T31] audit: type=1400 audit(1789814712.179:18015): avc: denied { name_bind } for pid=11485 comm="syz.4.1455" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 707.687990][ T31] audit: type=1400 audit(1789814712.189:18016): avc: denied { node_bind } for pid=11485 comm="syz.4.1455" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 707.747352][ T31] audit: type=1400 audit(1789814712.549:18017): avc: denied { prog_load } for pid=11481 comm="syz.7.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 707.787405][ T31] audit: type=1400 audit(1789814712.559:18019): avc: denied { create } for pid=11491 comm="syz.5.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 707.843989][ T31] audit: type=1400 audit(1789814712.549:18018): avc: denied { bpf } for pid=11481 comm="syz.7.1454" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 707.964370][ T31] audit: type=1400 audit(1789814712.759:18020): avc: denied { allowed } for pid=11495 comm="syz.6.1456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 708.459298][ T8903] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 708.461243][ T8903] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 712.704116][ T31] kauditd_printk_skb: 157 callbacks suppressed [ 712.704134][ T31] audit: type=1400 audit(1789814717.499:18178): avc: denied { write } for pid=11524 comm="syz.5.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 712.704165][ T31] audit: type=1400 audit(1789814717.499:18179): avc: denied { write } for pid=11524 comm="syz.5.1465" laddr=::1 lport=3 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 712.773626][ T31] audit: type=1400 audit(1789814717.569:18180): avc: denied { write } for pid=11524 comm="syz.5.1465" laddr=::1 lport=3 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 712.807935][ T31] audit: type=1400 audit(1789814717.609:18181): avc: denied { write } for pid=11524 comm="syz.5.1465" laddr=::1 lport=3 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 712.813291][ T31] audit: type=1400 audit(1789814717.609:18182): avc: denied { write } for pid=11524 comm="syz.5.1465" laddr=::1 lport=3 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 712.918466][ T31] audit: type=1400 audit(1789814717.719:18183): avc: denied { bpf } for pid=11529 comm="syz.1.1466" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 712.923766][ T31] audit: type=1400 audit(1789814717.719:18184): avc: denied { map_create } for pid=11529 comm="syz.1.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 713.964177][ T31] audit: type=1400 audit(1789814718.759:18185): avc: denied { read write } for pid=5604 comm="syz-executor" name="loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 713.997272][ T31] audit: type=1400 audit(1789814718.789:18186): avc: denied { read write open } for pid=5604 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 713.997305][ T31] audit: type=1400 audit(1789814718.789:18187): avc: denied { ioctl } for pid=5604 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 717.258625][T11554] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1470'. [ 718.501703][ T31] kauditd_printk_skb: 80 callbacks suppressed [ 718.501724][ T31] audit: type=1400 audit(1789814722.439:18268): avc: denied { execmem } for pid=11559 comm="syz.4.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 718.501761][ T31] audit: type=1400 audit(1789814722.749:18269): avc: denied { read } for pid=11559 comm="syz.4.1474" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 718.501798][ T31] audit: type=1400 audit(1789814722.749:18270): avc: denied { open } for pid=11559 comm="syz.4.1474" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 718.501831][ T31] audit: type=1400 audit(1789814722.939:18271): avc: denied { create } for pid=11559 comm="syz.4.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 718.530339][ T31] audit: type=1400 audit(1789814723.309:18272): avc: denied { bind } for pid=11557 comm="syz.5.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 718.530375][ T31] audit: type=1400 audit(1789814723.309:18273): avc: denied { write } for pid=11557 comm="syz.5.1473" path="socket:[37089]" dev="sockfs" ino=37089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 718.536483][ T8903] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 718.539326][ T8903] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 718.681674][ T31] audit: type=1400 audit(1789814723.459:18274): avc: denied { read write } for pid=10448 comm="syz-executor" name="loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 718.681745][ T31] audit: type=1400 audit(1789814723.459:18275): avc: denied { open } for pid=10448 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 718.681788][ T31] audit: type=1400 audit(1789814723.459:18276): avc: denied { ioctl } for pid=10448 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 718.721576][ T31] audit: type=1400 audit(1789814723.499:18277): avc: denied { ioctl } for pid=11557 comm="syz.5.1473" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xaec1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 721.768002][T11582] jffs2: notice: (11582) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 722.195247][ T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 722.345664][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 722.349437][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 722.349463][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 722.349839][ T10] usb 5-1: config 0 has no interfaces? [ 722.351292][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.351306][ T10] usb 5-1: Product: syz [ 722.351314][ T10] usb 5-1: Manufacturer: syz [ 722.351325][ T10] usb 5-1: SerialNumber: syz [ 722.356618][ T10] usb 5-1: config 0 descriptor?? [ 722.648279][T11582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.648618][T11582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.679498][ T9] usb 5-1: USB disconnect, device number 38 [ 723.792317][ T31] kauditd_printk_skb: 156 callbacks suppressed [ 723.792332][ T31] audit: type=1400 audit(1789814727.789:18434): avc: denied { execmem } for pid=11600 comm="syz.7.1479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 723.792354][ T31] audit: type=1400 audit(1789814728.069:18435): avc: denied { read } for pid=11600 comm="syz.7.1479" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 723.792376][ T31] audit: type=1400 audit(1789814728.069:18436): avc: denied { open } for pid=11600 comm="syz.7.1479" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 723.792396][ T31] audit: type=1400 audit(1789814728.229:18437): avc: denied { create } for pid=11600 comm="syz.7.1479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 723.792416][ T31] audit: type=1400 audit(1789814728.269:18438): avc: denied { mounton } for pid=11600 comm="syz.7.1479" path="/30/my_configfs" dev="tmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 723.792438][ T31] audit: type=1400 audit(1789814728.269:18439): avc: denied { mount } for pid=11600 comm="syz.7.1479" name="/" dev="configfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 723.792464][ T31] audit: type=1400 audit(1789814728.279:18440): avc: denied { search } for pid=11600 comm="syz.7.1479" name="/" dev="configfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 723.792486][ T31] audit: type=1400 audit(1789814728.279:18441): avc: denied { search } for pid=11600 comm="syz.7.1479" name="target" dev="configfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 723.792506][ T31] audit: type=1400 audit(1789814728.299:18442): avc: denied { read write } for pid=11600 comm="syz.7.1479" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 723.792535][ T31] audit: type=1400 audit(1789814728.299:18443): avc: denied { open } for pid=11600 comm="syz.7.1479" path="/dev/raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 724.044660][ T5729] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 724.971730][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 725.065693][T11609] FAULT_INJECTION: forcing a failure. [ 725.065693][T11609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 725.065724][T11609] CPU: 1 UID: 0 PID: 11609 Comm: syz.5.1483 Tainted: G L syzkaller #0 PREEMPT(full) [ 725.065748][T11609] Tainted: [L]=SOFTLOCKUP [ 725.065754][T11609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 725.065764][T11609] Call Trace: [ 725.065770][T11609] [ 725.065777][T11609] dump_stack_lvl+0x100/0x190 [ 725.065808][T11609] should_fail_ex.cold+0x5/0xa [ 725.065833][T11609] _copy_from_user+0x2e/0xd0 [ 725.065853][T11609] copy_msghdr_from_user+0x9f/0x4c0 [ 725.065880][T11609] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 725.065912][T11609] ? lock_acquire+0x1d1/0x380 [ 725.065931][T11609] ? get_pid_task+0x2a/0x250 [ 725.065960][T11609] ___sys_sendmsg+0x106/0x1e0 [ 725.065978][T11609] ? __pfx____sys_sendmsg+0x10/0x10 [ 725.065995][T11609] ? get_pid_task+0x106/0x250 [ 725.066027][T11609] ? find_held_lock+0x2b/0x80 [ 725.066067][T11609] __sys_sendmsg+0x160/0x210 [ 725.066089][T11609] ? __pfx___sys_sendmsg+0x10/0x10 [ 725.066122][T11609] do_syscall_64+0x123/0x790 [ 725.066151][T11609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.066169][T11609] RIP: 0033:0x7fe5b139e159 [ 725.066184][T11609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.066200][T11609] RSP: 002b:00007fe5b21ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 725.066218][T11609] RAX: ffffffffffffffda RBX: 00007fe5b1625fa0 RCX: 00007fe5b139e159 [ 725.066230][T11609] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 725.066241][T11609] RBP: 00007fe5b21ae090 R08: 0000000000000000 R09: 0000000000000000 [ 725.066252][T11609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.066261][T11609] R13: 00007fe5b1626038 R14: 00007fe5b1625fa0 R15: 00007fff1424c9e8 [ 725.066285][T11609] [ 725.144788][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 725.144825][ T10] usb 8-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 725.145843][ T10] usb 8-1: config 4 has an invalid interface number: 4 but max is 0 [ 725.145860][ T10] usb 8-1: config 4 has no interface number 0 [ 725.145881][ T10] usb 8-1: config 4 interface 4 has no altsetting 0 [ 725.151405][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.151445][ T10] usb 8-1: Product: syz [ 725.151458][ T10] usb 8-1: Manufacturer: syz [ 725.151470][ T10] usb 8-1: SerialNumber: syz [ 725.288322][ T5729] usb 5-1: device descriptor read/all, error -71 [ 725.394628][ T10] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 725.395089][ T10] gspca_sunplus: reg_w_riv err -71 [ 725.395146][ T10] sunplus 8-1:4.4: probe with driver sunplus failed with error -71 [ 725.409266][ T10] usb 8-1: USB disconnect, device number 2 [ 726.498143][ T4938] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 726.667029][ T4938] usb 7-1: Using ep0 maxpacket: 16 [ 726.668021][ T4938] usb 7-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 726.670480][ T4938] usb 7-1: config 166 has an invalid interface number: 177 but max is 1 [ 726.670504][ T4938] usb 7-1: config 166 has an invalid interface number: 34 but max is 1 [ 726.670524][ T4938] usb 7-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 726.670543][ T4938] usb 7-1: config 166 has no interface number 0 [ 726.670558][ T4938] usb 7-1: config 166 has no interface number 1 [ 726.670598][ T4938] usb 7-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 726.670616][ T4938] usb 7-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 726.670650][ T4938] usb 7-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 726.670672][ T4938] usb 7-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 726.670694][ T4938] usb 7-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid wMaxPacketSize 0 [ 726.670714][ T4938] usb 7-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 0 [ 726.670735][ T4938] usb 7-1: config 166 interface 177 has no altsetting 0 [ 726.670753][ T4938] usb 7-1: config 166 interface 34 has no altsetting 0 [ 726.780840][ T4938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.780867][ T4938] usb 7-1: Product: syz [ 726.780881][ T4938] usb 7-1: Manufacturer: syz [ 726.780894][ T4938] usb 7-1: SerialNumber: syz [ 727.858780][T11612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.859184][T11612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.873847][ T4938] ums-realtek 7-1:166.177: USB Mass Storage device detected [ 727.966795][ T4938] ums-realtek 7-1:166.34: USB Mass Storage device detected [ 728.036838][ T4938] uvcvideo 7-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 728.036873][ T4938] uvcvideo 7-1:166.34: No valid video chain found. [ 728.060130][ T4938] usb 7-1: USB disconnect, device number 2 [ 728.533286][T11632] FAULT_INJECTION: forcing a failure. [ 728.533286][T11632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 728.533320][T11632] CPU: 0 UID: 0 PID: 11632 Comm: syz.5.1491 Tainted: G L syzkaller #0 PREEMPT(full) [ 728.533344][T11632] Tainted: [L]=SOFTLOCKUP [ 728.533350][T11632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 728.533361][T11632] Call Trace: [ 728.533367][T11632] [ 728.533373][T11632] dump_stack_lvl+0x100/0x190 [ 728.533402][T11632] should_fail_ex.cold+0x5/0xa [ 728.533427][T11632] _copy_from_user+0x2e/0xd0 [ 728.533446][T11632] copy_msghdr_from_user+0x9f/0x4c0 [ 728.533476][T11632] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 728.533508][T11632] ? lock_acquire+0x1d1/0x380 [ 728.533526][T11632] ? get_pid_task+0x2a/0x250 [ 728.533550][T11632] ___sys_sendmsg+0x106/0x1e0 [ 728.533568][T11632] ? __pfx____sys_sendmsg+0x10/0x10 [ 728.533584][T11632] ? get_pid_task+0x106/0x250 [ 728.533616][T11632] ? find_held_lock+0x2b/0x80 [ 728.533655][T11632] __sys_sendmsg+0x160/0x210 [ 728.533678][T11632] ? __pfx___sys_sendmsg+0x10/0x10 [ 728.533713][T11632] do_syscall_64+0x123/0x790 [ 728.533741][T11632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.533759][T11632] RIP: 0033:0x7fe5b139e159 [ 728.533773][T11632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.533788][T11632] RSP: 002b:00007fe5b21ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 728.533810][T11632] RAX: ffffffffffffffda RBX: 00007fe5b1625fa0 RCX: 00007fe5b139e159 [ 728.533821][T11632] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 728.533831][T11632] RBP: 00007fe5b21ae090 R08: 0000000000000000 R09: 0000000000000000 [ 728.533842][T11632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.533852][T11632] R13: 00007fe5b1626038 R14: 00007fe5b1625fa0 R15: 00007fff1424c9e8 [ 728.533882][T11632] [ 728.549241][ T8903] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 728.551625][ T8903] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 728.800345][ T31] kauditd_printk_skb: 116 callbacks suppressed [ 728.800363][ T31] audit: type=1400 audit(1789814733.599:18560): avc: denied { module_request } for pid=11634 comm="syz.5.1493" kmod="cmdlinepart" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 728.833637][ T31] audit: type=1400 audit(1789814733.629:18561): avc: denied { create } for pid=11629 comm="syz.6.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 728.854937][ T31] audit: type=1400 audit(1789814733.659:18562): avc: denied { mounton } for pid=11634 comm="syz.5.1493" path="/83/sys/module/block2mtd/parameters/block2mtd" dev="sysfs" ino=59008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 728.869243][ T31] audit: type=1400 audit(1789814733.669:18563): avc: denied { prog_load } for pid=11634 comm="syz.5.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 728.869282][ T31] audit: type=1400 audit(1789814733.669:18564): avc: denied { bpf } for pid=11634 comm="syz.5.1493" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 728.905767][ T31] audit: type=1400 audit(1789814733.709:18565): avc: denied { connect } for pid=11629 comm="syz.6.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 728.905807][ T31] audit: type=1400 audit(1789814733.709:18566): avc: denied { name_connect } for pid=11629 comm="syz.6.1492" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 729.016235][ T31] audit: type=1400 audit(1789814733.809:18567): avc: denied { read append } for pid=11639 comm="syz.7.1488" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 729.018361][ T31] audit: type=1400 audit(1789814733.819:18568): avc: denied { open } for pid=11639 comm="syz.7.1488" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 729.024090][ T31] audit: type=1400 audit(1789814733.819:18569): avc: denied { ioctl } for pid=11639 comm="syz.7.1488" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 729.148033][ T8903] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 729.149573][ T8903] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 730.342268][T11636] ftl_cs: FTL header not found. [ 730.781265][T11636] block2mtd: mtd1: [/dev/zram0] erase_size = 0KiB [65] [ 734.466402][ T31] kauditd_printk_skb: 158 callbacks suppressed [ 734.466422][ T31] audit: type=1400 audit(1789814738.399:18728): avc: denied { execmem } for pid=11667 comm="syz.6.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 734.466457][ T31] audit: type=1400 audit(1789814738.709:18729): avc: denied { read } for pid=11667 comm="syz.6.1500" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 734.466493][ T31] audit: type=1400 audit(1789814738.709:18730): avc: denied { open } for pid=11667 comm="syz.6.1500" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 734.466530][ T31] audit: type=1400 audit(1789814738.869:18731): avc: denied { create } for pid=11667 comm="syz.6.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 734.466565][ T31] audit: type=1400 audit(1789814738.889:18732): avc: denied { name_bind } for pid=11667 comm="syz.6.1500" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 734.466599][ T31] audit: type=1400 audit(1789814738.889:18733): avc: denied { node_bind } for pid=11667 comm="syz.6.1500" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 734.871133][ T31] audit: type=1400 audit(1789814739.669:18734): avc: denied { create } for pid=11668 comm="syz.1.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 734.908651][ T31] audit: type=1400 audit(1789814739.699:18735): avc: denied { connect } for pid=11668 comm="syz.1.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 734.908695][ T31] audit: type=1400 audit(1789814739.709:18736): avc: denied { name_connect } for pid=11668 comm="syz.1.1501" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 734.910279][ T31] audit: type=1400 audit(1789814739.709:18737): avc: denied { read write } for pid=10513 comm="syz-executor" name="loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 735.078114][ T8903] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 735.078280][ T8903] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 736.364518][ T9608] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 737.358195][ T9608] usb 6-1: unable to get BOS descriptor or descriptor too short [ 737.358245][ T9608] usb 6-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 737.361155][ T9608] usb 6-1: config 4 has an invalid interface number: 4 but max is 0 [ 737.361180][ T9608] usb 6-1: config 4 has no interface number 0 [ 737.361204][ T9608] usb 6-1: config 4 interface 4 has no altsetting 0 [ 737.367573][ T9608] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.367595][ T9608] usb 6-1: Product: syz [ 737.367607][ T9608] usb 6-1: Manufacturer: syz [ 737.367620][ T9608] usb 6-1: SerialNumber: syz [ 737.594121][ T9608] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 737.604202][ T9608] gspca_sunplus: reg_w_riv err -71 [ 737.604273][ T9608] sunplus 6-1:4.4: probe with driver sunplus failed with error -71 [ 737.615767][ T9608] usb 6-1: USB disconnect, device number 7 [ 738.816450][T11700] hsr0: entered allmulticast mode [ 738.816472][T11700] hsr_slave_0: entered allmulticast mode [ 738.816488][T11700] hsr_slave_1: entered allmulticast mode [ 739.832183][ T31] kauditd_printk_skb: 99 callbacks suppressed [ 739.832202][ T31] audit: type=1400 audit(1789814743.769:18837): avc: denied { execmem } for pid=11701 comm="syz.1.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 739.832240][ T31] audit: type=1400 audit(1789814744.079:18838): avc: denied { read } for pid=11701 comm="syz.1.1509" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 739.832284][ T31] audit: type=1400 audit(1789814744.079:18839): avc: denied { open } for pid=11701 comm="syz.1.1509" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 739.832321][ T31] audit: type=1400 audit(1789814744.269:18840): avc: denied { name_bind } for pid=11701 comm="syz.1.1509" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 739.832358][ T31] audit: type=1400 audit(1789814744.269:18841): avc: denied { node_bind } for pid=11701 comm="syz.1.1509" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 739.837299][ T31] audit: type=1400 audit(1789814744.639:18842): avc: denied { create } for pid=11694 comm="syz.4.1502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 739.853772][ T31] audit: type=1400 audit(1789814744.649:18843): avc: denied { create } for pid=11694 comm="syz.4.1502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 739.891451][ T31] audit: type=1400 audit(1789814744.679:18844): avc: denied { read } for pid=11694 comm="syz.4.1502" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 739.891499][ T31] audit: type=1400 audit(1789814744.679:18845): avc: denied { open } for pid=11694 comm="syz.4.1502" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 740.567908][ T31] audit: type=1400 audit(1789814745.369:18846): avc: denied { read write } for pid=10448 comm="syz-executor" name="loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 741.692628][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.692704][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 743.401013][T11732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11732 comm=syz.7.1514 [ 744.569990][T11741] netlink: 284 bytes leftover after parsing attributes in process `syz.7.1520'. [ 745.603864][ T31] kauditd_printk_skb: 111 callbacks suppressed [ 745.603884][ T31] audit: type=1400 audit(1789814749.599:18958): avc: denied { execmem } for pid=11747 comm="syz.5.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 745.603922][ T31] audit: type=1400 audit(1789814749.879:18959): avc: denied { read } for pid=11747 comm="syz.5.1521" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 745.603959][ T31] audit: type=1400 audit(1789814749.879:18960): avc: denied { open } for pid=11747 comm="syz.5.1521" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 745.603996][ T31] audit: type=1400 audit(1789814750.039:18961): avc: denied { create } for pid=11747 comm="syz.5.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 745.604033][ T31] audit: type=1400 audit(1789814750.079:18962): avc: denied { mounton } for pid=11747 comm="syz.5.1521" path="/90/my_configfs" dev="tmpfs" ino=521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 745.604070][ T31] audit: type=1400 audit(1789814750.089:18963): avc: denied { mount } for pid=11747 comm="syz.5.1521" name="/" dev="configfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 745.604111][ T31] audit: type=1400 audit(1789814750.099:18964): avc: denied { search } for pid=11747 comm="syz.5.1521" name="/" dev="configfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 745.604148][ T31] audit: type=1400 audit(1789814750.099:18965): avc: denied { search } for pid=11747 comm="syz.5.1521" name="target" dev="configfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 745.604185][ T31] audit: type=1400 audit(1789814750.109:18966): avc: denied { read write } for pid=11747 comm="syz.5.1521" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 745.604223][ T31] audit: type=1400 audit(1789814750.109:18967): avc: denied { open } for pid=11747 comm="syz.5.1521" path="/dev/raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 746.835609][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 746.988035][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 746.988077][ T9] usb 6-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 746.989082][ T9] usb 6-1: config 4 has an invalid interface number: 4 but max is 0 [ 746.989105][ T9] usb 6-1: config 4 has no interface number 0 [ 746.989130][ T9] usb 6-1: config 4 interface 4 has no altsetting 0 [ 746.991843][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.991867][ T9] usb 6-1: Product: syz [ 746.991881][ T9] usb 6-1: Manufacturer: syz [ 746.991895][ T9] usb 6-1: SerialNumber: syz [ 748.096302][ T9] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 748.097571][ T9] gspca_sunplus: reg_w_riv err -71 [ 748.097634][ T9] sunplus 6-1:4.4: probe with driver sunplus failed with error -71 [ 748.099682][ T9] usb 6-1: USB disconnect, device number 8 [ 749.404608][ T8903] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 749.404884][ T8903] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 751.186455][ T31] kauditd_printk_skb: 77 callbacks suppressed [ 751.186470][ T31] audit: type=1400 audit(1789814755.989:19045): avc: denied { read write } for pid=10513 comm="syz-executor" name="loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 751.188430][ T31] audit: type=1400 audit(1789814755.989:19046): avc: denied { read append } for pid=11776 comm="syz.6.1530" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 751.188753][ T31] audit: type=1400 audit(1789814755.989:19047): avc: denied { read append open } for pid=11776 comm="syz.6.1530" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 751.190232][ T31] audit: type=1400 audit(1789814755.989:19048): avc: denied { read write open } for pid=10513 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 751.190807][ T31] audit: type=1400 audit(1789814755.989:19049): avc: denied { ioctl } for pid=10513 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 751.193773][ T31] audit: type=1400 audit(1789814755.989:19050): avc: denied { name_bind } for pid=11776 comm="syz.6.1530" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 751.193926][ T31] audit: type=1400 audit(1789814755.989:19051): avc: denied { node_bind } for pid=11776 comm="syz.6.1530" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 751.295235][ T31] audit: type=1400 audit(1789814756.039:19052): avc: denied { read write } for pid=10448 comm="syz-executor" name="loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 751.295278][ T31] audit: type=1400 audit(1789814756.039:19053): avc: denied { open } for pid=10448 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 751.295333][ T31] audit: type=1400 audit(1789814756.039:19054): avc: denied { ioctl } for pid=10448 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 752.431557][T11784] netlink: 284 bytes leftover after parsing attributes in process `syz.6.1532'. [ 756.215953][ T31] kauditd_printk_skb: 129 callbacks suppressed [ 756.215971][ T31] audit: type=1400 audit(1789814761.019:19184): avc: denied { read write } for pid=5604 comm="syz-executor" name="loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 756.216012][ T31] audit: type=1400 audit(1789814761.019:19185): avc: denied { open } for pid=5604 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 756.216049][ T31] audit: type=1400 audit(1789814761.019:19186): avc: denied { ioctl } for pid=5604 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 756.417082][ T31] audit: type=1400 audit(1789814761.219:19187): avc: denied { create } for pid=11801 comm="syz.4.1539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 756.418062][ T31] audit: type=1400 audit(1789814761.219:19188): avc: denied { getopt } for pid=11801 comm="syz.4.1539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 756.444177][ T31] audit: type=1400 audit(1789814761.229:19189): avc: denied { shutdown } for pid=11801 comm="syz.4.1539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 756.444224][ T31] audit: type=1400 audit(1789814761.229:19190): avc: denied { getopt } for pid=11801 comm="syz.4.1539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 756.445067][ T31] audit: type=1400 audit(1789814761.249:19191): avc: denied { read } for pid=11801 comm="syz.4.1539" dev="nsfs" ino=4026532807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 756.465470][ T31] audit: type=1400 audit(1789814761.249:19192): avc: denied { open } for pid=11801 comm="syz.4.1539" path="net:[4026532807]" dev="nsfs" ino=4026532807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 756.465519][ T31] audit: type=1400 audit(1789814761.249:19193): avc: denied { create } for pid=11801 comm="syz.4.1539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 756.515111][ T8903] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 756.515354][ T8903] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 759.243119][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 760.016736][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 760.016779][ T9] usb 8-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 760.017783][ T9] usb 8-1: config 4 has an invalid interface number: 4 but max is 0 [ 760.017805][ T9] usb 8-1: config 4 has no interface number 0 [ 760.017829][ T9] usb 8-1: config 4 interface 4 has no altsetting 0 [ 760.019838][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.019860][ T9] usb 8-1: Product: syz [ 760.019873][ T9] usb 8-1: Manufacturer: syz [ 760.019887][ T9] usb 8-1: SerialNumber: syz [ 760.358590][ T9] usb 8-1: can't set config #4, error -71 [ 760.448428][ T9] usb 8-1: USB disconnect, device number 3 [ 761.464449][ T31] kauditd_printk_skb: 146 callbacks suppressed [ 761.464468][ T31] audit: type=1400 audit(1789814765.449:19340): avc: denied { execmem } for pid=11839 comm="syz.4.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 761.464506][ T31] audit: type=1400 audit(1789814765.729:19341): avc: denied { read } for pid=11839 comm="syz.4.1544" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 761.464537][ T31] audit: type=1400 audit(1789814765.729:19342): avc: denied { open } for pid=11839 comm="syz.4.1544" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 761.464569][ T31] audit: type=1400 audit(1789814765.889:19343): avc: denied { create } for pid=11839 comm="syz.4.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 761.464599][ T31] audit: type=1400 audit(1789814765.919:19344): avc: denied { name_bind } for pid=11839 comm="syz.4.1544" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 761.464630][ T31] audit: type=1400 audit(1789814765.919:19345): avc: denied { node_bind } for pid=11839 comm="syz.4.1544" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 761.688687][ T31] audit: type=1400 audit(1789814766.489:19346): avc: denied { read write } for pid=10448 comm="syz-executor" name="loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 761.692530][ T31] audit: type=1400 audit(1789814766.489:19347): avc: denied { open } for pid=10448 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 761.692576][ T31] audit: type=1400 audit(1789814766.489:19348): avc: denied { ioctl } for pid=10448 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 761.828862][ T31] audit: type=1400 audit(1789814766.629:19349): avc: denied { bpf } for pid=11844 comm="syz.6.1547" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 763.479999][T11855] fuse: Bad value for 'user_id' [ 763.480018][T11855] fuse: Bad value for 'user_id' [ 763.735469][ T25] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 763.823553][T11857] netlink: 284 bytes leftover after parsing attributes in process `syz.7.1545'. [ 763.894634][ T25] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 763.904230][ T25] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 763.904256][ T25] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 763.904271][ T25] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 763.904313][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 763.904338][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 763.918263][ T25] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 763.918293][ T25] usb 7-1: Product: syz [ 763.918305][ T25] usb 7-1: Manufacturer: syz [ 763.942728][ T25] cdc_wdm 7-1:1.0: skipping garbage [ 763.942747][ T25] cdc_wdm 7-1:1.0: skipping garbage [ 763.977233][ T25] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 763.977251][ T25] cdc_wdm 7-1:1.0: Unknown control protocol [ 764.165084][ T25] usb 7-1: USB disconnect, device number 3 [ 765.072062][T11865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1552'. [ 765.072085][T11865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1552'. [ 765.072108][T11865] netlink: 'syz.1.1552': attribute type 18 has an invalid length. [ 765.074280][ T8903] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 765.083755][ T8903] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 766.478212][ T31] kauditd_printk_skb: 143 callbacks suppressed [ 766.478230][ T31] audit: type=1400 audit(1789814771.279:19493): avc: denied { read write } for pid=10513 comm="syz-executor" name="loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 766.480645][ T31] audit: type=1400 audit(1789814771.279:19494): avc: denied { read write } for pid=9765 comm="syz-executor" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 766.480951][ T31] audit: type=1400 audit(1789814771.279:19495): avc: denied { open } for pid=9765 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 766.481257][ T31] audit: type=1400 audit(1789814771.279:19496): avc: denied { ioctl } for pid=9765 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 766.482085][ T31] audit: type=1400 audit(1789814771.279:19497): avc: denied { read write } for pid=10448 comm="syz-executor" name="loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 766.482318][ T31] audit: type=1400 audit(1789814771.279:19498): avc: denied { open } for pid=10448 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 766.482537][ T31] audit: type=1400 audit(1789814771.279:19499): avc: denied { ioctl } for pid=10448 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 766.485797][ T31] audit: type=1400 audit(1789814771.289:19500): avc: denied { read write open } for pid=10513 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 766.485839][ T31] audit: type=1400 audit(1789814771.289:19501): avc: denied { ioctl } for pid=10513 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 766.684496][ T31] audit: type=1400 audit(1789814771.429:19502): avc: denied { create } for pid=11881 comm="syz.7.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 770.241770][T11906] FAULT_INJECTION: forcing a failure. [ 770.241770][T11906] name failslab, interval 1, probability 0, space 0, times 0 [ 770.241801][T11906] CPU: 1 UID: 0 PID: 11906 Comm: syz.4.1563 Tainted: G L syzkaller #0 PREEMPT(full) [ 770.241827][T11906] Tainted: [L]=SOFTLOCKUP [ 770.241833][T11906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 770.241846][T11906] Call Trace: [ 770.241852][T11906] [ 770.241858][T11906] dump_stack_lvl+0x100/0x190 [ 770.241889][T11906] should_fail_ex.cold+0x5/0xa [ 770.241914][T11906] should_failslab+0xc2/0x120 [ 770.241939][T11906] kmem_cache_alloc_noprof+0x92/0x6a0 [ 770.241960][T11906] ? do_getname+0x35/0x390 [ 770.241991][T11906] do_getname+0x35/0x390 [ 770.242019][T11906] do_sys_openat2+0xc7/0x1e0 [ 770.242044][T11906] ? __pfx_do_sys_openat2+0x10/0x10 [ 770.242070][T11906] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 770.242099][T11906] ? __fget_files+0x21f/0x3d0 [ 770.242125][T11906] __x64_sys_openat+0x12d/0x210 [ 770.242150][T11906] ? __pfx___x64_sys_openat+0x10/0x10 [ 770.242174][T11906] ? ksys_write+0x1ac/0x250 [ 770.242201][T11906] do_syscall_64+0x123/0x790 [ 770.242228][T11906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.242246][T11906] RIP: 0033:0x7faf6e55e98e [ 770.242261][T11906] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 770.242278][T11906] RSP: 002b:00007faf6f445f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 770.242296][T11906] RAX: ffffffffffffffda RBX: 00007faf6f4466c0 RCX: 00007faf6e55e98e [ 770.242308][T11906] RDX: 0000000000000000 RSI: 00007faf6e6347a6 RDI: ffffffffffffff9c [ 770.242320][T11906] RBP: 00007faf6f446090 R08: 0000000000000000 R09: 0000000000000000 [ 770.242330][T11906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.242340][T11906] R13: 00007faf6e826038 R14: 00007faf6e825fa0 R15: 00007ffd73c7c848 [ 770.242364][T11906] [ 770.454495][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 771.062040][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 771.062084][ T9] usb 2-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 771.129255][ T9] usb 2-1: config 4 has an invalid interface number: 4 but max is 0 [ 771.129283][ T9] usb 2-1: config 4 has no interface number 0 [ 771.129309][ T9] usb 2-1: config 4 interface 4 has no altsetting 0 [ 771.144448][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.144475][ T9] usb 2-1: Product: syz [ 771.144487][ T9] usb 2-1: Manufacturer: syz [ 771.144501][ T9] usb 2-1: SerialNumber: syz [ 771.563692][ T9] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 771.579997][ T9] gspca_sunplus: reg_w_riv err -71 [ 771.580038][ T9] sunplus 2-1:4.4: probe with driver sunplus failed with error -71 [ 771.582186][ T9] usb 2-1: USB disconnect, device number 30 [ 771.594190][ T31] kauditd_printk_skb: 76 callbacks suppressed [ 771.594205][ T31] audit: type=1400 audit(1789814776.389:19579): avc: denied { read write } for pid=10448 comm="syz-executor" name="loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 771.594450][ T31] audit: type=1400 audit(1789814776.389:19580): avc: denied { read write open } for pid=10448 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 771.763244][ T31] audit: type=1400 audit(1789814776.489:19581): avc: denied { execmem } for pid=11910 comm="syz.7.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 772.108304][ T31] audit: type=1400 audit(1789814776.619:19582): avc: denied { read } for pid=11910 comm="syz.7.1565" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 772.108353][ T31] audit: type=1400 audit(1789814776.619:19583): avc: denied { open } for pid=11910 comm="syz.7.1565" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 772.108389][ T31] audit: type=1400 audit(1789814776.759:19584): avc: denied { create } for pid=11910 comm="syz.7.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 772.108421][ T31] audit: type=1400 audit(1789814776.779:19585): avc: denied { name_bind } for pid=11910 comm="syz.7.1565" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 772.108455][ T31] audit: type=1400 audit(1789814776.779:19586): avc: denied { node_bind } for pid=11910 comm="syz.7.1565" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 772.245419][ T31] audit: type=1400 audit(1789814776.989:19587): avc: denied { ioctl } for pid=10448 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 772.285152][ T31] audit: type=1400 audit(1789814777.069:19588): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 776.703407][ T31] kauditd_printk_skb: 71 callbacks suppressed [ 776.703421][ T31] audit: type=1400 audit(1789814780.689:19661): avc: denied { execmem } for pid=11936 comm="syz.6.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 776.703443][ T31] audit: type=1400 audit(1789814780.969:19662): avc: denied { read } for pid=11936 comm="syz.6.1572" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 776.703465][ T31] audit: type=1400 audit(1789814780.969:19663): avc: denied { open } for pid=11936 comm="syz.6.1572" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 776.703485][ T31] audit: type=1400 audit(1789814781.129:19664): avc: denied { create } for pid=11936 comm="syz.6.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 776.703505][ T31] audit: type=1400 audit(1789814781.149:19665): avc: denied { name_bind } for pid=11936 comm="syz.6.1572" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 776.703525][ T31] audit: type=1400 audit(1789814781.149:19666): avc: denied { node_bind } for pid=11936 comm="syz.6.1572" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 776.756605][ T31] audit: type=1400 audit(1789814780.679:19660): avc: denied { write } for pid=11921 comm="syz.4.1567" laddr=::1 lport=3 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 776.875329][ T31] audit: type=1400 audit(1789814781.659:19667): avc: denied { write } for pid=11921 comm="syz.4.1567" laddr=::1 lport=3 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 776.911995][ T31] audit: type=1400 audit(1789814781.709:19668): avc: denied { write } for pid=11921 comm="syz.4.1567" laddr=::1 lport=3 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 776.939357][ T31] audit: type=1400 audit(1789814781.739:19669): avc: denied { write } for pid=11921 comm="syz.4.1567" laddr=::1 lport=3 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 781.757817][ T31] kauditd_printk_skb: 55 callbacks suppressed [ 781.757835][ T31] audit: type=1400 audit(1789814786.559:19725): avc: denied { read write } for pid=5606 comm="syz-executor" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 781.772658][ T31] audit: type=1400 audit(1789814786.559:19726): avc: denied { read write open } for pid=5606 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 781.772707][ T31] audit: type=1400 audit(1789814786.569:19727): avc: denied { ioctl } for pid=5606 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 781.870584][ T31] audit: type=1400 audit(1789814786.669:19728): avc: denied { read } for pid=11964 comm="syz.4.1578" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 781.870895][ T31] audit: type=1400 audit(1789814786.669:19729): avc: denied { open } for pid=11964 comm="syz.4.1578" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 781.897363][ T31] audit: type=1400 audit(1789814786.679:19730): avc: denied { ioctl } for pid=11964 comm="syz.4.1578" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 781.996619][ T31] audit: type=1400 audit(1789814786.799:19731): avc: denied { execmem } for pid=11972 comm="syz.6.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 782.916542][ T31] audit: type=1400 audit(1789814786.899:19732): avc: denied { execmem } for pid=11970 comm="syz.1.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 782.916575][ T31] audit: type=1400 audit(1789814787.189:19733): avc: denied { read } for pid=11970 comm="syz.1.1581" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 782.916596][ T31] audit: type=1400 audit(1789814787.189:19734): avc: denied { open } for pid=11970 comm="syz.1.1581" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 783.672419][ T8903] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 783.672481][ T8903] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 786.824904][ T31] kauditd_printk_skb: 60 callbacks suppressed [ 786.824922][ T31] audit: type=1400 audit(1789814791.619:19795): avc: denied { create } for pid=12001 comm="syz.7.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 787.337998][ T31] audit: type=1400 audit(1789814791.709:19796): avc: denied { mounton } for pid=11999 comm="syz.4.1587" path="/308/trace" dev="tmpfs" ino=1776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 787.338034][ T31] audit: type=1400 audit(1789814791.709:19797): avc: denied { mount } for pid=11999 comm="syz.4.1587" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 787.338055][ T31] audit: type=1400 audit(1789814791.719:19798): avc: denied { search } for pid=11999 comm="syz.4.1587" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 787.338076][ T31] audit: type=1400 audit(1789814791.729:19799): avc: denied { search } for pid=11999 comm="syz.4.1587" name="events" dev="tracefs" ino=467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 787.338096][ T31] audit: type=1400 audit(1789814791.729:19800): avc: denied { search } for pid=11999 comm="syz.4.1587" name="irq" dev="tracefs" ino=37962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 787.338119][ T31] audit: type=1400 audit(1789814791.729:19801): avc: denied { search } for pid=11999 comm="syz.4.1587" name="irq_handler_entry" dev="tracefs" ino=37964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 787.338140][ T31] audit: type=1400 audit(1789814791.729:19802): avc: denied { read write } for pid=11999 comm="syz.4.1587" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 787.338160][ T31] audit: type=1400 audit(1789814791.729:19803): avc: denied { open } for pid=11999 comm="syz.4.1587" path="/308/trace/events/irq/irq_handler_entry/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 787.338183][ T31] audit: type=1400 audit(1789814791.749:19804): avc: denied { search } for pid=11999 comm="syz.4.1587" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 790.299516][ T8903] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 790.299622][ T8903] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 791.862273][ T31] kauditd_printk_skb: 78 callbacks suppressed [ 791.862290][ T31] audit: type=1400 audit(1789814796.659:19883): avc: denied { module_request } for pid=12019 comm="syz.6.1594" kmod="net-pf-10-proto-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 792.961764][ T31] audit: type=1400 audit(1789814796.879:19884): avc: denied { execmem } for pid=12032 comm="syz.4.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 792.961815][ T31] audit: type=1400 audit(1789814797.189:19885): avc: denied { read } for pid=12032 comm="syz.4.1597" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 792.961855][ T31] audit: type=1400 audit(1789814797.189:19886): avc: denied { open } for pid=12032 comm="syz.4.1597" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 792.961890][ T31] audit: type=1400 audit(1789814797.369:19887): avc: denied { create } for pid=12032 comm="syz.4.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 793.893528][ T31] audit: type=1400 audit(1789814797.869:19888): avc: denied { execmem } for pid=12034 comm="syz.7.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 793.893576][ T31] audit: type=1400 audit(1789814798.159:19889): avc: denied { read } for pid=12034 comm="syz.7.1596" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 793.893611][ T31] audit: type=1400 audit(1789814798.159:19890): avc: denied { open } for pid=12034 comm="syz.7.1596" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 793.893645][ T31] audit: type=1400 audit(1789814798.319:19891): avc: denied { create } for pid=12034 comm="syz.7.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 793.893678][ T31] audit: type=1400 audit(1789814798.339:19892): avc: denied { name_bind } for pid=12034 comm="syz.7.1596" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 797.137134][ T31] kauditd_printk_skb: 24 callbacks suppressed [ 797.137179][ T31] audit: type=1400 audit(1789814801.939:19917): avc: denied { read } for pid=12051 comm="syz.1.1602" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 797.137370][ T31] audit: type=1400 audit(1789814801.939:19918): avc: denied { open } for pid=12051 comm="syz.1.1602" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 797.228698][ T31] audit: type=1400 audit(1789814801.999:19919): avc: denied { create } for pid=12051 comm="syz.1.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 797.229003][ T31] audit: type=1400 audit(1789814802.009:19920): avc: denied { mounton } for pid=12051 comm="syz.1.1602" path="/358/my_configfs" dev="tmpfs" ino=2001 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 797.229207][ T31] audit: type=1400 audit(1789814802.009:19921): avc: denied { mount } for pid=12051 comm="syz.1.1602" name="/" dev="configfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 797.229492][ T31] audit: type=1400 audit(1789814802.009:19922): avc: denied { search } for pid=12051 comm="syz.1.1602" name="/" dev="configfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 797.229661][ T31] audit: type=1400 audit(1789814802.009:19923): avc: denied { search } for pid=12051 comm="syz.1.1602" name="target" dev="configfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 797.229851][ T31] audit: type=1400 audit(1789814802.009:19924): avc: denied { read write } for pid=12051 comm="syz.1.1602" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 797.230030][ T31] audit: type=1400 audit(1789814802.019:19925): avc: denied { open } for pid=12051 comm="syz.1.1602" path="/dev/raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 797.230199][ T31] audit: type=1400 audit(1789814802.019:19926): avc: denied { ioctl } for pid=12051 comm="syz.1.1602" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 798.436983][ T9608] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 798.599855][ T9608] usb 2-1: unable to get BOS descriptor or descriptor too short [ 798.599909][ T9608] usb 2-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 798.601273][ T9608] usb 2-1: config 4 has an invalid interface number: 4 but max is 0 [ 798.601295][ T9608] usb 2-1: config 4 has no interface number 0 [ 798.601319][ T9608] usb 2-1: config 4 interface 4 has no altsetting 0 [ 798.603463][ T9608] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.603486][ T9608] usb 2-1: Product: syz [ 798.603499][ T9608] usb 2-1: Manufacturer: syz [ 798.603512][ T9608] usb 2-1: SerialNumber: syz [ 799.605253][ T9608] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 799.613407][ T9608] gspca_sunplus: reg_w_riv err -71 [ 799.613474][ T9608] sunplus 2-1:4.4: probe with driver sunplus failed with error -71 [ 799.686335][ T9608] usb 2-1: USB disconnect, device number 31 [ 802.213374][ T31] kauditd_printk_skb: 47 callbacks suppressed [ 802.213392][ T31] audit: type=1400 audit(1789814807.009:19974): avc: denied { create } for pid=12073 comm="syz.4.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 802.345065][ T31] audit: type=1400 audit(1789814807.149:19975): avc: denied { listen } for pid=12073 comm="syz.4.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 802.355224][ T31] audit: type=1400 audit(1789814807.159:19976): avc: denied { accept } for pid=12073 comm="syz.4.1607" lport=44826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 802.413346][ T31] audit: type=1400 audit(1789814807.209:19977): avc: denied { connect } for pid=12073 comm="syz.4.1607" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 802.446463][ T31] audit: type=1400 audit(1789814807.249:19978): avc: denied { write } for pid=12073 comm="syz.4.1607" laddr=::1 lport=3 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 802.459408][ T31] audit: type=1400 audit(1789814807.259:19979): avc: denied { write } for pid=12073 comm="syz.4.1607" laddr=::1 lport=3 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 802.506682][ T31] audit: type=1400 audit(1789814807.309:19980): avc: denied { create } for pid=12073 comm="syz.4.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 802.526700][ T31] audit: type=1400 audit(1789814807.309:19981): avc: denied { write } for pid=12073 comm="syz.4.1607" laddr=::1 lport=3 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 802.573119][ T31] audit: type=1400 audit(1789814807.369:19982): avc: denied { write } for pid=12073 comm="syz.4.1607" laddr=::1 lport=3 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 802.597039][ T31] audit: type=1400 audit(1789814807.379:19983): avc: denied { write } for pid=12073 comm="syz.4.1607" laddr=::1 lport=3 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 803.127805][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.127858][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 807.769884][ T31] kauditd_printk_skb: 34 callbacks suppressed [ 807.769904][ T31] audit: type=1400 audit(1789814811.689:20018): avc: denied { execmem } for pid=12086 comm="syz.1.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 807.769940][ T31] audit: type=1400 audit(1789814811.999:20019): avc: denied { read } for pid=12086 comm="syz.1.1609" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 807.769975][ T31] audit: type=1400 audit(1789814811.999:20020): avc: denied { open } for pid=12086 comm="syz.1.1609" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 807.770010][ T31] audit: type=1400 audit(1789814812.169:20021): avc: denied { create } for pid=12086 comm="syz.1.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 807.770043][ T31] audit: type=1400 audit(1789814812.219:20022): avc: denied { name_bind } for pid=12086 comm="syz.1.1609" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 807.770077][ T31] audit: type=1400 audit(1789814812.229:20023): avc: denied { node_bind } for pid=12086 comm="syz.1.1609" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 807.958290][ T31] audit: type=1400 audit(1789814812.759:20024): avc: denied { read write } for pid=9765 comm="syz-executor" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 807.958337][ T31] audit: type=1400 audit(1789814812.759:20025): avc: denied { read write open } for pid=9765 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 807.958373][ T31] audit: type=1400 audit(1789814812.759:20026): avc: denied { ioctl } for pid=9765 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 808.154236][ T31] audit: type=1400 audit(1789814812.949:20027): avc: denied { read write } for pid=10513 comm="syz-executor" name="loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 808.435373][T12097] netlink: 284 bytes leftover after parsing attributes in process `syz.5.1611'. [ 809.534470][ T5729] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 809.692975][ T5729] usb 8-1: unable to get BOS descriptor or descriptor too short [ 809.693002][ T5729] usb 8-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 809.720490][ T5729] usb 8-1: config 4 has an invalid interface number: 4 but max is 0 [ 809.720516][ T5729] usb 8-1: config 4 has no interface number 0 [ 809.720541][ T5729] usb 8-1: config 4 interface 4 has no altsetting 0 [ 809.723592][ T5729] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.723608][ T5729] usb 8-1: Product: syz [ 809.723616][ T5729] usb 8-1: Manufacturer: syz [ 809.723625][ T5729] usb 8-1: SerialNumber: syz [ 809.984494][ T5729] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 809.987542][ T5729] gspca_sunplus: reg_w_riv err -71 [ 809.987604][ T5729] sunplus 8-1:4.4: probe with driver sunplus failed with error -71 [ 810.028600][ T5729] usb 8-1: USB disconnect, device number 4 [ 812.423494][T12115] nbd: must specify a size in bytes for the device [ 812.782822][ T31] kauditd_printk_skb: 139 callbacks suppressed [ 812.782840][ T31] audit: type=1400 audit(1789814817.579:20167): avc: denied { prog_load } for pid=12125 comm="syz.7.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 812.812336][ T31] audit: type=1400 audit(1789814817.599:20168): avc: denied { prog_load } for pid=12125 comm="syz.7.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 812.812378][ T31] audit: type=1400 audit(1789814817.609:20169): avc: denied { prog_load } for pid=12125 comm="syz.7.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 812.812410][ T31] audit: type=1400 audit(1789814817.609:20170): avc: denied { bpf } for pid=12125 comm="syz.7.1616" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 812.812442][ T31] audit: type=1400 audit(1789814817.609:20171): avc: denied { perfmon } for pid=12125 comm="syz.7.1616" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 812.812473][ T31] audit: type=1400 audit(1789814817.609:20172): avc: denied { prog_load } for pid=12125 comm="syz.7.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 813.728002][ T31] audit: type=1400 audit(1789814817.709:20173): avc: denied { execmem } for pid=12127 comm="syz.5.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 813.728048][ T31] audit: type=1400 audit(1789814817.989:20174): avc: denied { read } for pid=12127 comm="syz.5.1620" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 813.728084][ T31] audit: type=1400 audit(1789814817.989:20175): avc: denied { open } for pid=12127 comm="syz.5.1620" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 813.728119][ T31] audit: type=1400 audit(1789814818.149:20176): avc: denied { create } for pid=12127 comm="syz.5.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 818.411910][ T31] kauditd_printk_skb: 35 callbacks suppressed [ 818.411927][ T31] audit: type=1400 audit(1789814823.209:20212): avc: denied { read write } for pid=10513 comm="syz-executor" name="loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 818.427389][ T31] audit: type=1400 audit(1789814823.219:20213): avc: denied { open } for pid=10513 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 818.427432][ T31] audit: type=1400 audit(1789814823.219:20214): avc: denied { ioctl } for pid=10513 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 818.700320][ T31] audit: type=1400 audit(1789814823.499:20215): avc: denied { read write } for pid=5606 comm="syz-executor" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 818.734572][ T31] audit: type=1400 audit(1789814823.529:20216): avc: denied { read write open } for pid=5606 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 818.734602][ T31] audit: type=1400 audit(1789814823.529:20217): avc: denied { ioctl } for pid=5606 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 818.914618][ T31] audit: type=1400 audit(1789814823.709:20218): avc: denied { bpf } for pid=12142 comm="syz.4.1622" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 818.914723][ T31] audit: type=1400 audit(1789814823.709:20219): avc: denied { map_create } for pid=12142 comm="syz.4.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 819.469717][ T31] audit: type=1400 audit(1789814824.249:20220): avc: denied { create } for pid=12144 comm="syz.7.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 819.470325][ T31] audit: type=1400 audit(1789814824.259:20221): avc: denied { getopt } for pid=12144 comm="syz.7.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 819.597498][ T8903] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 819.597773][ T8903] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 820.824626][ T5729] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 821.350660][ T5729] usb 2-1: unable to get BOS descriptor or descriptor too short [ 821.350701][ T5729] usb 2-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 821.351678][ T5729] usb 2-1: config 4 has an invalid interface number: 4 but max is 0 [ 821.351697][ T5729] usb 2-1: config 4 has no interface number 0 [ 821.351719][ T5729] usb 2-1: config 4 interface 4 has no altsetting 0 [ 821.353642][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.353660][ T5729] usb 2-1: Product: syz [ 821.353672][ T5729] usb 2-1: Manufacturer: syz [ 821.353685][ T5729] usb 2-1: SerialNumber: syz [ 821.640671][ T5729] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 821.652124][ T5729] gspca_sunplus: reg_w_riv err -71 [ 821.652192][ T5729] sunplus 2-1:4.4: probe with driver sunplus failed with error -71 [ 821.678936][ T5729] usb 2-1: USB disconnect, device number 32 [ 823.552878][ T31] kauditd_printk_skb: 69 callbacks suppressed [ 823.552895][ T31] audit: type=1400 audit(1789814827.469:20291): avc: denied { execmem } for pid=12166 comm="syz.4.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 823.552932][ T31] audit: type=1400 audit(1789814827.779:20292): avc: denied { read } for pid=12166 comm="syz.4.1629" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 823.552966][ T31] audit: type=1400 audit(1789814827.779:20293): avc: denied { open } for pid=12166 comm="syz.4.1629" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 823.553002][ T31] audit: type=1400 audit(1789814827.959:20294): avc: denied { name_bind } for pid=12166 comm="syz.4.1629" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 823.553036][ T31] audit: type=1400 audit(1789814827.959:20295): avc: denied { node_bind } for pid=12166 comm="syz.4.1629" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 823.808417][ T31] audit: type=1400 audit(1789814828.489:20296): avc: denied { execmem } for pid=12176 comm="syz.5.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 823.810524][ T31] audit: type=1400 audit(1789814828.609:20297): avc: denied { execmem } for pid=12171 comm="syz.7.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 823.946589][ T31] audit: type=1400 audit(1789814828.689:20298): avc: denied { read } for pid=12176 comm="syz.5.1623" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 823.946758][ T31] audit: type=1400 audit(1789814828.689:20299): avc: denied { read open } for pid=12176 comm="syz.5.1623" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 823.946902][ T31] audit: type=1400 audit(1789814828.699:20300): avc: denied { ioctl } for pid=12176 comm="syz.5.1623" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 826.721139][T12189] qnx6: unable to read the first superblock [ 828.597768][ T31] kauditd_printk_skb: 50 callbacks suppressed [ 828.597784][ T31] audit: type=1400 audit(1789814833.399:20351): avc: denied { read write } for pid=10448 comm="syz-executor" name="loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 828.598321][ T31] audit: type=1400 audit(1789814833.399:20352): avc: denied { open } for pid=10448 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 828.598954][ T31] audit: type=1400 audit(1789814833.399:20353): avc: denied { ioctl } for pid=10448 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 828.692075][ T31] audit: type=1400 audit(1789814833.469:20354): avc: denied { read write } for pid=5604 comm="syz-executor" name="loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 828.692123][ T31] audit: type=1400 audit(1789814833.469:20355): avc: denied { read write open } for pid=5604 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 828.692158][ T31] audit: type=1400 audit(1789814833.469:20356): avc: denied { ioctl } for pid=5604 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 829.022837][ T31] audit: type=1400 audit(1789814833.819:20357): avc: denied { read write } for pid=10513 comm="syz-executor" name="loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 829.023182][ T31] audit: type=1400 audit(1789814833.819:20358): avc: denied { read write open } for pid=10513 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 829.026294][ T31] audit: type=1400 audit(1789814833.829:20359): avc: denied { ioctl } for pid=10513 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 829.050932][ T31] audit: type=1400 audit(1789814833.839:20360): avc: denied { create } for pid=12198 comm="syz.6.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 829.106875][ T8903] Bluetooth: hci5: unexpected event for opcode 0x1408 [ 829.106941][ T8903] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 833.894482][ T31] kauditd_printk_skb: 57 callbacks suppressed [ 833.894502][ T31] audit: type=1400 audit(1789814838.579:20418): avc: denied { mounton } for pid=12218 comm="syz.5.1643" path="/110/trace" dev="tmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 833.894611][ T31] audit: type=1400 audit(1789814838.589:20419): avc: denied { mount } for pid=12218 comm="syz.5.1643" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 833.894805][ T31] audit: type=1400 audit(1789814838.609:20420): avc: denied { search } for pid=12218 comm="syz.5.1643" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 833.894877][ T31] audit: type=1400 audit(1789814838.609:20421): avc: denied { search } for pid=12218 comm="syz.5.1643" name="events" dev="tracefs" ino=467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 833.895008][ T31] audit: type=1400 audit(1789814838.609:20422): avc: denied { search } for pid=12218 comm="syz.5.1643" name="irq" dev="tracefs" ino=37962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 833.895141][ T31] audit: type=1400 audit(1789814838.609:20423): avc: denied { search } for pid=12218 comm="syz.5.1643" name="irq_handler_entry" dev="tracefs" ino=37964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 833.895285][ T31] audit: type=1400 audit(1789814838.609:20424): avc: denied { read write } for pid=12218 comm="syz.5.1643" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 833.895350][ T31] audit: type=1400 audit(1789814838.619:20425): avc: denied { read write open } for pid=12218 comm="syz.5.1643" path="/110/trace/events/irq/irq_handler_entry/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 833.895468][ T31] audit: type=1400 audit(1789814838.649:20426): avc: denied { search } for pid=12218 comm="syz.5.1643" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 833.895596][ T31] audit: type=1400 audit(1789814838.649:20427): avc: denied { search } for pid=12218 comm="syz.5.1643" name="events" dev="tracefs" ino=467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 834.447098][ T5729] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 834.606818][ T5729] usb 5-1: unable to get BOS descriptor or descriptor too short [ 834.606857][ T5729] usb 5-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 834.614318][ T5729] usb 5-1: config 4 has an invalid interface number: 4 but max is 0 [ 834.614342][ T5729] usb 5-1: config 4 has no interface number 0 [ 834.615900][ T5729] usb 5-1: config 4 interface 4 has no altsetting 0 [ 834.619200][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.619221][ T5729] usb 5-1: Product: syz [ 834.619234][ T5729] usb 5-1: Manufacturer: syz [ 834.619246][ T5729] usb 5-1: SerialNumber: syz [ 835.222017][ T5729] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 835.227276][ T5729] gspca_sunplus: reg_w_riv err -71 [ 835.227339][ T5729] sunplus 5-1:4.4: probe with driver sunplus failed with error -71 [ 835.261724][ T5729] usb 5-1: USB disconnect, device number 41 [ 835.476953][T12235] nbd: must specify a size in bytes for the device [ 837.452748][T12253] netlink: 284 bytes leftover after parsing attributes in process `syz.5.1648'. [ 838.926600][ T31] kauditd_printk_skb: 135 callbacks suppressed [ 838.926618][ T31] audit: type=1400 audit(1789814843.729:20563): avc: denied { ioctl } for pid=12257 comm="syz.5.1651" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 838.978439][ T31] audit: type=1400 audit(1789814843.779:20564): avc: denied { read write } for pid=5606 comm="syz-executor" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 838.978468][ T31] audit: type=1400 audit(1789814843.779:20565): avc: denied { read write open } for pid=5606 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 838.978489][ T31] audit: type=1400 audit(1789814843.779:20566): avc: denied { ioctl } for pid=5606 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 839.063058][ T31] audit: type=1400 audit(1789814843.859:20567): avc: denied { ioctl } for pid=12257 comm="syz.5.1651" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 839.107300][ T31] audit: type=1400 audit(1789814843.909:20568): avc: denied { connect } for pid=12255 comm="syz.6.1650" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 839.135885][ T5729] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 839.144205][ T31] audit: type=1400 audit(1789814843.939:20569): avc: denied { ioctl } for pid=12257 comm="syz.5.1651" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 839.172640][ T31] audit: type=1400 audit(1789814843.969:20570): avc: denied { create } for pid=12255 comm="syz.6.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 839.194043][ T31] audit: type=1400 audit(1789814843.989:20571): avc: denied { write } for pid=12255 comm="syz.6.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 839.194089][ T31] audit: type=1400 audit(1789814843.989:20572): avc: denied { write } for pid=12255 comm="syz.6.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 839.358765][ T5729] usb 6-1: unable to get BOS descriptor or descriptor too short [ 839.358806][ T5729] usb 6-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 839.359845][ T5729] usb 6-1: config 4 has an invalid interface number: 4 but max is 0 [ 839.359868][ T5729] usb 6-1: config 4 has no interface number 0 [ 839.359888][ T5729] usb 6-1: config 4 interface 4 has no altsetting 0 [ 839.361776][ T5729] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.361797][ T5729] usb 6-1: Product: syz [ 839.361811][ T5729] usb 6-1: Manufacturer: syz [ 839.361824][ T5729] usb 6-1: SerialNumber: syz [ 840.086925][ T5729] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 840.160271][ T5729] gspca_sunplus: reg_w_riv err -71 [ 840.160334][ T5729] sunplus 6-1:4.4: probe with driver sunplus failed with error -71 [ 840.203219][ T5729] usb 6-1: USB disconnect, device number 9 [ 841.678071][ T8903] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 841.678134][ T8903] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 843.525132][ T5729] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 843.579583][T12283] nbd: must specify a size in bytes for the device [ 843.696501][ T5729] usb 8-1: unable to get BOS descriptor or descriptor too short [ 843.696547][ T5729] usb 8-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 843.697470][ T5729] usb 8-1: config 4 has an invalid interface number: 4 but max is 0 [ 843.697490][ T5729] usb 8-1: config 4 has no interface number 0 [ 843.697519][ T5729] usb 8-1: config 4 interface 4 has no altsetting 0 [ 843.703137][ T5729] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.703161][ T5729] usb 8-1: Product: syz [ 843.703176][ T5729] usb 8-1: Manufacturer: syz [ 843.703190][ T5729] usb 8-1: SerialNumber: syz [ 843.951362][ T5729] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 843.964641][ T5729] gspca_sunplus: reg_w_riv err -71 [ 843.964704][ T5729] sunplus 8-1:4.4: probe with driver sunplus failed with error -71 [ 843.978798][ T5729] usb 8-1: USB disconnect, device number 5 [ 844.102146][ T31] kauditd_printk_skb: 152 callbacks suppressed [ 844.102163][ T31] audit: type=1400 audit(1789814848.899:20725): avc: denied { read write } for pid=5606 comm="syz-executor" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 844.102201][ T31] audit: type=1400 audit(1789814848.899:20726): avc: denied { open } for pid=5606 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 844.111603][ T31] audit: type=1400 audit(1789814848.909:20727): avc: denied { ioctl } for pid=5606 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 845.869808][ T31] audit: type=1400 audit(1789814850.659:20728): avc: denied { mounton } for pid=12287 comm="syz.6.1659" path="/70/trace" dev="tmpfs" ino=414 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 845.869855][ T31] audit: type=1400 audit(1789814850.659:20729): avc: denied { mount } for pid=12287 comm="syz.6.1659" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 845.869888][ T31] audit: type=1400 audit(1789814850.659:20730): avc: denied { search } for pid=12287 comm="syz.6.1659" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 845.869922][ T31] audit: type=1400 audit(1789814850.659:20731): avc: denied { search } for pid=12287 comm="syz.6.1659" name="events" dev="tracefs" ino=467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 845.869956][ T31] audit: type=1400 audit(1789814850.659:20732): avc: denied { search } for pid=12287 comm="syz.6.1659" name="irq" dev="tracefs" ino=37962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 845.869990][ T31] audit: type=1400 audit(1789814850.659:20733): avc: denied { search } for pid=12287 comm="syz.6.1659" name="irq_handler_entry" dev="tracefs" ino=37964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 845.870024][ T31] audit: type=1400 audit(1789814850.659:20734): avc: denied { read write } for pid=12287 comm="syz.6.1659" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 849.107025][ T31] kauditd_printk_skb: 74 callbacks suppressed [ 849.107042][ T31] audit: type=1400 audit(1789814853.909:20809): avc: denied { ioctl } for pid=12300 comm="syz.6.1663" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 849.164526][T10105] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 849.165285][ T31] audit: type=1400 audit(1789814853.969:20810): avc: denied { ioctl } for pid=12300 comm="syz.6.1663" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 849.234925][ T31] audit: type=1400 audit(1789814854.039:20811): avc: denied { ioctl } for pid=12300 comm="syz.6.1663" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 849.243805][ T31] audit: type=1400 audit(1789814854.039:20812): avc: denied { create } for pid=12310 comm="syz.5.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 849.315241][ T31] audit: type=1400 audit(1789814854.119:20813): avc: denied { ioctl } for pid=12300 comm="syz.6.1663" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 849.316899][T10105] usb 7-1: unable to get BOS descriptor or descriptor too short [ 849.316938][T10105] usb 7-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 849.317922][T10105] usb 7-1: config 4 has an invalid interface number: 4 but max is 0 [ 849.317943][T10105] usb 7-1: config 4 has no interface number 0 [ 849.317967][T10105] usb 7-1: config 4 interface 4 has no altsetting 0 [ 849.320053][T10105] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.320076][T10105] usb 7-1: Product: syz [ 849.320091][T10105] usb 7-1: Manufacturer: syz [ 849.320105][T10105] usb 7-1: SerialNumber: syz [ 849.385404][ T31] audit: type=1400 audit(1789814854.149:20814): avc: denied { ioctl } for pid=12300 comm="syz.6.1663" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 849.509209][ T31] audit: type=1400 audit(1789814854.299:20815): avc: denied { connect } for pid=12310 comm="syz.5.1667" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 849.522134][ T31] audit: type=1400 audit(1789814854.309:20816): avc: denied { write } for pid=12310 comm="syz.5.1667" laddr=::1 lport=3 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 849.588119][T10105] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 849.588485][T10105] gspca_sunplus: reg_w_riv err -71 [ 849.588539][T10105] sunplus 7-1:4.4: probe with driver sunplus failed with error -71 [ 849.589534][ T31] audit: type=1400 audit(1789814854.389:20817): avc: denied { write } for pid=12310 comm="syz.5.1667" laddr=::1 lport=3 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 849.642063][T10105] usb 7-1: USB disconnect, device number 4 [ 849.659215][ T31] audit: type=1400 audit(1789814854.459:20818): avc: denied { write } for pid=12310 comm="syz.5.1667" laddr=::1 lport=3 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 851.372494][ T8903] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 851.373306][ T8903] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 851.559859][T12322] nbd: must specify a size in bytes for the device [ 852.657936][T12328] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1665'. [ 852.808094][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 852.835361][T12333] syzkaller1: entered promiscuous mode [ 852.835383][T12333] syzkaller1: entered allmulticast mode [ 852.852600][T12335] binder: 12334:12335 ioctl ae01 c returned -22 [ 852.967055][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 852.967098][ T9] usb 8-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 852.968149][ T9] usb 8-1: config 4 has an invalid interface number: 4 but max is 0 [ 852.968171][ T9] usb 8-1: config 4 has no interface number 0 [ 852.968195][ T9] usb 8-1: config 4 interface 4 has no altsetting 0 [ 852.972865][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.972886][ T9] usb 8-1: Product: syz [ 852.972902][ T9] usb 8-1: Manufacturer: syz [ 852.972917][ T9] usb 8-1: SerialNumber: syz [ 853.195785][ T5729] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 853.250294][ T9] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 853.261509][ T9] gspca_sunplus: reg_w_riv err -71 [ 853.261574][ T9] sunplus 8-1:4.4: probe with driver sunplus failed with error -71 [ 853.281801][ T9] usb 8-1: USB disconnect, device number 6 [ 853.292667][ T5618] udevd[5618]: setting mode of /dev/bus/usb/008/006 to 020664 failed: No such file or directory [ 853.292761][ T5618] udevd[5618]: setting owner of /dev/bus/usb/008/006 to uid=0, gid=0 failed: No such file or directory [ 853.354583][ T5729] usb 7-1: Using ep0 maxpacket: 8 [ 853.355908][ T5729] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 853.357908][ T5729] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 853.357929][ T5729] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 853.357965][ T5729] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.357994][ T5729] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.417954][ T5729] hub 7-1:1.0: bad descriptor, ignoring hub [ 853.417976][ T5729] hub 7-1:1.0: probe with driver hub failed with error -5 [ 853.418363][ T5729] cdc_wdm 7-1:1.0: skipping garbage [ 853.418374][ T5729] cdc_wdm 7-1:1.0: skipping garbage [ 853.418432][ T5729] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 853.796341][T12337] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 854.004729][T10105] usb 7-1: USB disconnect, device number 5 [ 854.035615][T12355] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 854.111885][T12355] kvm: pic: non byte read [ 854.112929][T12355] kvm: pic: non byte read [ 854.113793][T12355] kvm: pic: non byte read [ 854.123781][T12355] kvm: pic: non byte read [ 854.178731][ T31] kauditd_printk_skb: 218 callbacks suppressed [ 854.178747][ T31] audit: type=1400 audit(1789814858.979:21037): avc: denied { read } for pid=12358 comm="syz.1.1682" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 854.187133][ T31] audit: type=1400 audit(1789814858.989:21038): avc: denied { read open } for pid=12358 comm="syz.1.1682" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 854.327280][ T31] audit: type=1400 audit(1789814859.129:21039): avc: denied { read write } for pid=5604 comm="syz-executor" name="loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 854.327707][ T31] audit: type=1400 audit(1789814859.129:21040): avc: denied { read write open } for pid=5604 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 854.476738][ T31] audit: type=1400 audit(1789814859.129:21041): avc: denied { ioctl } for pid=5604 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 854.545851][ T31] audit: type=1400 audit(1789814859.349:21042): avc: denied { read write } for pid=10448 comm="syz-executor" name="loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 854.546245][ T31] audit: type=1400 audit(1789814859.349:21043): avc: denied { open } for pid=10448 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 854.546601][ T31] audit: type=1400 audit(1789814859.349:21044): avc: denied { ioctl } for pid=10448 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 854.631741][ T31] audit: type=1400 audit(1789814859.429:21045): avc: denied { read write } for pid=9765 comm="syz-executor" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 854.631788][ T31] audit: type=1400 audit(1789814859.429:21046): avc: denied { read write open } for pid=9765 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 854.977210][T12359] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 854.977805][T12359] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 855.085371][T12359] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 855.085619][T12359] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 855.118838][T12359] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 855.129433][T12359] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 855.160502][T12359] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 855.160744][T12359] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 855.201624][T12359] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 855.201866][T12359] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 855.360745][T12373] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1686'. [ 856.025821][T12391] binder: 12390:12391 ioctl 40046210 0 returned -14 [ 856.209010][T12395] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1696'. [ 856.514363][ T4938] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 856.564520][ T8903] Bluetooth: hci1: command 0x0406 tx timeout [ 856.675737][ T4938] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 856.700153][ T4938] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 856.700192][ T4938] usb 5-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 856.700216][ T4938] usb 5-1: config 1 interface 0 has no altsetting 0 [ 856.710527][ T4938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 856.710550][ T4938] usb 5-1: SerialNumber: syz [ 856.757544][ T4938] cdc_ether 5-1:1.0: bad CDC descriptors [ 856.864682][T12418] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 857.012845][ T4938] usb 5-1: USB disconnect, device number 42 [ 857.124462][ T8903] Bluetooth: hci4: command 0x0406 tx timeout [ 857.124511][ T8903] Bluetooth: hci3: command 0x0406 tx timeout [ 857.204709][ T4927] Bluetooth: hci0: command 0x0406 tx timeout [ 857.204739][ T4927] Bluetooth: hci5: command 0x0406 tx timeout [ 857.590999][T12438] loop7: detected capacity change from 0 to 7 [ 857.594539][T12439] loop9: detected capacity change from 0 to 7 [ 857.599548][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 857.599741][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 857.600273][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 857.600323][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 857.600413][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 857.600465][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 857.600983][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 857.601032][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 857.601078][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 857.601121][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 857.601794][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 857.601868][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 857.602024][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 857.602069][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 857.602144][ C0] I/O error, dev loop9, sector 0 op 0x0:(RE ** replaying previous printk message ** [ 857.602144][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 857.602188][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 857.602212][T12439] ldm_validate_partition_table(): Disk read failed. [ 857.602275][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 857.602324][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 857.603270][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 857.603320][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 857.603536][T12439] Dev loop9: unable to read RDB block 0 [ 857.603905][T12439] loop9: unable to read partition table [ 857.604048][T12439] loop9: partition table beyond EOD, truncated [ 857.604062][T12439] loop_reread_partitions: partition scan of loop9 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5) [ 857.628741][T12438] ldm_validate_partition_table(): Disk read failed. [ 857.629214][T12438] Dev loop7: unable to read RDB block 0 [ 857.630734][T12438] loop7: unable to read partition table [ 857.630875][T12438] loop7: partition table beyond EOD, truncated [ 857.630888][T12438] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5) [ 857.735985][T12439] [ 857.868944][T12439] ====================================================== [ 857.875951][T12439] WARNING: possible circular locking dependency detected [ 857.882967][T12439] syzkaller #0 Tainted: G L [ 857.888934][T12439] ------------------------------------------------------ [ 857.895949][T12439] syz.5.1714/12439 is trying to acquire lock: [ 857.902015][T12439] ffff88801d2c7210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 857.912213][T12439] [ 857.912213][T12439] but task is already holding lock: [ 857.919565][T12439] ffff888025e6cae0 (&q->q_usage_counter(io)#26){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 857.930789][T12439] [ 857.930789][T12439] which lock already depends on the new lock. [ 857.930789][T12439] [ 857.941189][T12439] [ 857.941189][T12439] the existing dependency chain (in reverse order) is: [ 857.950197][T12439] [ 857.950197][T12439] -> #2 (&q->q_usage_counter(io)#26){++++}-{0:0}: [ 857.958796][T12439] lock_acquire+0x1d1/0x380 [ 857.963829][T12439] blk_alloc_queue+0x610/0x790 [ 857.969111][T12439] blk_mq_alloc_queue+0x174/0x290 [ 857.974682][T12439] __blk_mq_alloc_disk+0x29/0x120 [ 857.980259][T12439] loop_add+0x498/0xb60 [ 857.984929][T12439] loop_init+0x1d3/0x200 [ 857.989703][T12439] do_one_initcall+0x11c/0x6f0 [ 857.994981][T12439] kernel_init_freeable+0x6ea/0x7b0 [ 858.000699][T12439] kernel_init+0x21/0x1e0 [ 858.005544][T12439] ret_from_fork+0x730/0xd60 [ 858.010656][T12439] ret_from_fork_asm+0x1a/0x30 [ 858.015935][T12439] [ 858.015935][T12439] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 858.023157][T12439] lock_acquire+0x1d1/0x380 [ 858.028180][T12439] fs_reclaim_acquire+0xc4/0x100 [ 858.033628][T12439] kmem_cache_alloc_noprof+0x63/0x6a0 [ 858.039507][T12439] __kernfs_iattrs+0x126/0x450 [ 858.044783][T12439] __kernfs_setattr+0x4d/0x3c0 [ 858.050076][T12439] kernfs_iop_setattr+0xda/0x130 [ 858.055538][T12439] notify_change+0xb25/0x1330 [ 858.060729][T12439] do_truncate+0x1df/0x240 [ 858.065667][T12439] path_openat+0x1e6d/0x2440 [ 858.070792][T12439] do_file_open+0x20e/0x430 [ 858.075813][T12439] do_sys_openat2+0x10f/0x1e0 [ 858.081008][T12439] __x64_sys_openat+0x12d/0x210 [ 858.086393][T12439] do_syscall_64+0x123/0x790 [ 858.091507][T12439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.097901][T12439] [ 858.097901][T12439] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 858.106395][T12439] check_prev_add+0xeb/0xe60 [ 858.111491][T12439] __lock_acquire+0x1528/0x1f40 [ 858.116842][T12439] lock_acquire+0x1d1/0x380 [ 858.121847][T12439] down_read+0x99/0x4c0 [ 858.126501][T12439] kernfs_iop_getattr+0x9c/0xf0 [ 858.131860][T12439] vfs_getattr_nosec+0x2d4/0x430 [ 858.137305][T12439] vfs_getattr+0x4a/0x60 [ 858.142054][T12439] loop_update_dio_alignment+0x13c/0x410 [ 858.148194][T12439] lo_ioctl+0x15c8/0x1df0 [ 858.153025][T12439] blkdev_ioctl+0x5ad/0x6f0 [ 858.158030][T12439] __x64_sys_ioctl+0x18e/0x210 [ 858.163296][T12439] do_syscall_64+0x123/0x790 [ 858.168395][T12439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.174806][T12439] [ 858.174806][T12439] other info that might help us debug this: [ 858.174806][T12439] [ 858.185030][T12439] Chain exists of: [ 858.185030][T12439] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#26 [ 858.185030][T12439] [ 858.199434][T12439] Possible unsafe locking scenario: [ 858.199434][T12439] [ 858.206860][T12439] CPU0 CPU1 [ 858.212216][T12439] ---- ---- [ 858.217559][T12439] lock(&q->q_usage_counter(io)#26); [ 858.222914][T12439] lock(fs_reclaim); [ 858.229408][T12439] lock(&q->q_usage_counter(io)#26); [ 858.237282][T12439] rlock(&root->kernfs_iattr_rwsem); [ 858.242636][T12439] [ 858.242636][T12439] *** DEADLOCK *** [ 858.242636][T12439] [ 858.250753][T12439] locks held by syz.5.1714/12439: 3, last CPU#0: [ 858.257061][T12439] #0: ffff888022b5b430 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 858.267241][T12439] #1: ffff888025e6cae0 (&q->q_usage_counter(io)#26){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 858.278882][T12439] #2: ffff888025e6cb18 (&q->q_usage_counter(queue)#10){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 858.290779][T12439] [ 858.290779][T12439] stack backtrace: [ 858.296680][T12439] CPU: 0 UID: 0 PID: 12439 Comm: syz.5.1714 Tainted: G L syzkaller #0 PREEMPT(full) [ 858.307617][T12439] Tainted: [L]=SOFTLOCKUP [ 858.311937][T12439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 858.321973][T12439] Call Trace: [ 858.325237][T12439] [ 858.328151][T12439] dump_stack_lvl+0x100/0x190 [ 858.332819][T12439] print_circular_bug.cold+0x178/0x1be [ 858.338268][T12439] check_noncircular+0x146/0x160 [ 858.343189][T12439] check_prev_add+0xeb/0xe60 [ 858.347762][T12439] __lock_acquire+0x1528/0x1f40 [ 858.352596][T12439] lock_acquire+0x1d1/0x380 [ 858.357082][T12439] ? kernfs_iop_getattr+0x9c/0xf0 [ 858.362095][T12439] ? __pfx___might_resched+0x10/0x10 [ 858.367362][T12439] down_read+0x99/0x4c0 [ 858.371512][T12439] ? kernfs_iop_getattr+0x9c/0xf0 [ 858.376519][T12439] ? find_held_lock+0x2b/0x80 [ 858.381197][T12439] ? __pfx_down_read+0x10/0x10 [ 858.385940][T12439] ? kernfs_root+0xee/0x2a0 [ 858.390429][T12439] kernfs_iop_getattr+0x9c/0xf0 [ 858.395264][T12439] vfs_getattr_nosec+0x2d4/0x430 [ 858.400188][T12439] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 858.405732][T12439] vfs_getattr+0x4a/0x60 [ 858.409973][T12439] loop_update_dio_alignment+0x13c/0x410 [ 858.415607][T12439] ? __pfx_loop_update_dio_alignment+0x10/0x10 [ 858.421748][T12439] ? mark_held_locks+0x40/0x70 [ 858.426501][T12439] lo_ioctl+0x15c8/0x1df0 [ 858.430813][T12439] ? rcu_is_watching+0x13/0xc0 [ 858.435565][T12439] ? slow_avc_audit+0x18b/0x210 [ 858.440418][T12439] ? __pfx_slow_avc_audit+0x10/0x10 [ 858.445606][T12439] ? __pfx_lo_ioctl+0x10/0x10 [ 858.450265][T12439] ? find_held_lock+0x2b/0x80 [ 858.454942][T12439] ? avc_has_extended_perms+0x33a/0x1080 [ 858.460561][T12439] ? avc_has_extended_perms+0x33a/0x1080 [ 858.466183][T12439] ? avc_has_extended_perms+0x9c2/0x1080 [ 858.471801][T12439] ? avc_has_extended_perms+0x484/0x1080 [ 858.477423][T12439] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 858.483306][T12439] ? kasan_quarantine_put+0x104/0x240 [ 858.488661][T12439] ? blk_get_meta_cap+0xd4/0x6c0 [ 858.493599][T12439] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 858.498965][T12439] ? tomoyo_path_number_perm+0x28f/0x580 [ 858.504582][T12439] ? blkdev_common_ioctl+0x515/0x2b80 [ 858.509937][T12439] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 858.515554][T12439] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 858.521442][T12439] ? do_vfs_ioctl+0x226/0x13e0 [ 858.526188][T12439] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 858.531191][T12439] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 858.537678][T12439] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 858.544511][T12439] ? __fget_files+0x34/0x3d0 [ 858.549086][T12439] ? __pfx_lo_ioctl+0x10/0x10 [ 858.553743][T12439] blkdev_ioctl+0x5ad/0x6f0 [ 858.558230][T12439] ? __pfx_blkdev_ioctl+0x10/0x10 [ 858.563236][T12439] ? selinux_file_ioctl+0x13b/0x290 [ 858.568425][T12439] ? selinux_file_ioctl+0xb6/0x290 [ 858.573521][T12439] ? __pfx_blkdev_ioctl+0x10/0x10 [ 858.578528][T12439] __x64_sys_ioctl+0x18e/0x210 [ 858.583274][T12439] do_syscall_64+0x123/0x790 [ 858.587852][T12439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.593742][T12439] RIP: 0033:0x7fe5b139e159 [ 858.598139][T12439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.617739][T12439] RSP: 002b:00007fe5b21ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 858.626221][T12439] RAX: ffffffffffffffda RBX: 00007fe5b1625fa0 RCX: 00007fe5b139e159 [ 858.634189][T12439] RDX: 0000000000000008 RSI: 0000000000004c06 RDI: 0000000000000007 [ 858.642140][T12439] RBP: 00007fe5b143506b R08: 0000000000000000 R09: 0000000000000000 [ 858.650093][T12439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 858.658045][T12439] R13: 00007fe5b1626038 R14: 00007fe5b1625fa0 R15: 00007fff1424c9e8 [ 858.666001][T12439] [ 858.669705][T12426] Bluetooth: hci1: command 0x0406 tx timeout [ 858.738944][T12439] ldm_validate_partition_table(): Disk read failed. [ 858.739279][T12439] Dev loop9: unable to read RDB block 0 [ 858.739586][T12439] loop9: unable to read partition table [ 858.739676][T12439] loop9: partition table beyond EOD, truncated [ 858.739696][T12439] loop_reread_partitions: partition scan of loop9 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5) [ 859.204209][ T8903] Bluetooth: hci4: command 0x0406 tx timeout [ 859.204257][T12426] Bluetooth: hci3: command 0x0406 tx timeout [ 859.284189][ T8903] Bluetooth: hci0: command 0x0406 tx timeout [ 859.284215][T12426] Bluetooth: hci5: command 0x0406 tx timeout [ 864.566129][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 864.566167][ T1308] ieee802154 phy1 wpan1: encryption failed: -22