last executing test programs: 1m52.585589118s ago: executing program 0 (id=2839): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0xc0041) io_setup(0x13, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 1m48.74466656s ago: executing program 0 (id=2839): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0xc0041) io_setup(0x13, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 1m46.395683881s ago: executing program 0 (id=2839): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0xc0041) io_setup(0x13, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 1m16.573343763s ago: executing program 0 (id=2839): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0xc0041) io_setup(0x13, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 1m6.864761892s ago: executing program 2 (id=3190): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r4, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, r4, 0x0, &(0x7f0000ba3000/0x3000)=nil, 0x3000, 0xa}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r4, 0x0, &(0x7f00007d4000/0x4000)=nil, 0x4000, 0xfffffffffffffffe}) sched_setscheduler(0x0, 0x6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000c00)=ANY=[@ANYBLOB="85100000040000009500000000000000c8000000000000000000000000000000950000000000000085100000fcffffff9500000000000000954e118acd7bda8180b8a1d8"], &(0x7f00000000c0)='GPL\x00'}, 0x78) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r6, 0x2) recvfrom(r6, 0x0, 0x0, 0x20001, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r5, 0xfe, 0xfffffffffffffffc}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000e80400"/20, @ANYRES32=r0], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000008000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f72ac8a"], 0x4c}}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xfffffffe}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 1m0.772729756s ago: executing program 2 (id=3190): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r4, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, r4, 0x0, &(0x7f0000ba3000/0x3000)=nil, 0x3000, 0xa}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r4, 0x0, &(0x7f00007d4000/0x4000)=nil, 0x4000, 0xfffffffffffffffe}) sched_setscheduler(0x0, 0x6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000c00)=ANY=[@ANYBLOB="85100000040000009500000000000000c8000000000000000000000000000000950000000000000085100000fcffffff9500000000000000954e118acd7bda8180b8a1d8"], &(0x7f00000000c0)='GPL\x00'}, 0x78) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r6, 0x2) recvfrom(r6, 0x0, 0x0, 0x20001, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r5, 0xfe, 0xfffffffffffffffc}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000e80400"/20, @ANYRES32=r0], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000008000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f72ac8a"], 0x4c}}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xfffffffe}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 48.19967817s ago: executing program 0 (id=2839): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0xc0041) io_setup(0x13, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 38.983466462s ago: executing program 2 (id=3190): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r4, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, r4, 0x0, &(0x7f0000ba3000/0x3000)=nil, 0x3000, 0xa}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r4, 0x0, &(0x7f00007d4000/0x4000)=nil, 0x4000, 0xfffffffffffffffe}) sched_setscheduler(0x0, 0x6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000c00)=ANY=[@ANYBLOB="85100000040000009500000000000000c8000000000000000000000000000000950000000000000085100000fcffffff9500000000000000954e118acd7bda8180b8a1d8"], &(0x7f00000000c0)='GPL\x00'}, 0x78) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r6, 0x2) recvfrom(r6, 0x0, 0x0, 0x20001, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r5, 0xfe, 0xfffffffffffffffc}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000e80400"/20, @ANYRES32=r0], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000008000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f72ac8a"], 0x4c}}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xfffffffe}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 31.716735516s ago: executing program 2 (id=3190): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r4, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, r4, 0x0, &(0x7f0000ba3000/0x3000)=nil, 0x3000, 0xa}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r4, 0x0, &(0x7f00007d4000/0x4000)=nil, 0x4000, 0xfffffffffffffffe}) sched_setscheduler(0x0, 0x6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000c00)=ANY=[@ANYBLOB="85100000040000009500000000000000c8000000000000000000000000000000950000000000000085100000fcffffff9500000000000000954e118acd7bda8180b8a1d8"], &(0x7f00000000c0)='GPL\x00'}, 0x78) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r6, 0x2) recvfrom(r6, 0x0, 0x0, 0x20001, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r5, 0xfe, 0xfffffffffffffffc}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000e80400"/20, @ANYRES32=r0], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000008000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f72ac8a"], 0x4c}}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xfffffffe}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 23.071847584s ago: executing program 0 (id=2839): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0xc0041) io_setup(0x13, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 8.266169156s ago: executing program 4 (id=3393): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = getpgid(0x0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r2, 0xe) r3 = syz_pidfd_open(r1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0xff04, 0x0) syz_usb_connect(0x1, 0x3b, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x91, 0x3b, 0x76, 0x8, 0x2dee, 0x4d22, 0xf5d3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x1, 0x9, 0x10, 0x51, "", [{{0x9, 0x4, 0x5, 0x83, 0x0, 0xff, 0x10, 0x2, 0x6, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xf}, {0xd, 0x24, 0xf, 0x1, 0x851, 0x3, 0x1c, 0x1}}]}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x20, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x4) io_setup(0x1, &(0x7f0000000b80)=0x0) r8 = socket$alg(0x26, 0x5, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f00000004c0), 0x208e24b) syz_usb_connect$uac3(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040392ad43f4000010203010902"], 0x0) cachestat(r9, &(0x7f0000000040)={0x405}, &(0x7f000009de80), 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f7bed7ba19e1efd7e0054a00083d5cfe6cb55b5bb9fa6935849e6098ed880500000000000000007b4fe035bbb0", 0x49}, {&(0x7f0000000700)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e3a3dbc324c", 0xc7}], 0x2, 0x0, 0x0, 0x4000000}], 0x1, 0x400c0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)=""/107, 0x6b}, {&(0x7f0000000380)=""/56, 0x38}], 0x2}, 0x40000001) io_submit(r7, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x8002}]) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c020020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 7.31198314s ago: executing program 2 (id=3190): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r4, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, r4, 0x0, &(0x7f0000ba3000/0x3000)=nil, 0x3000, 0xa}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r4, 0x0, &(0x7f00007d4000/0x4000)=nil, 0x4000, 0xfffffffffffffffe}) sched_setscheduler(0x0, 0x6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000c00)=ANY=[@ANYBLOB="85100000040000009500000000000000c8000000000000000000000000000000950000000000000085100000fcffffff9500000000000000954e118acd7bda8180b8a1d8"], &(0x7f00000000c0)='GPL\x00'}, 0x78) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r6, 0x2) recvfrom(r6, 0x0, 0x0, 0x20001, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r5, 0xfe, 0xfffffffffffffffc}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000e80400"/20, @ANYRES32=r0], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000008000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f72ac8a"], 0x4c}}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xfffffffe}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 6.028062716s ago: executing program 4 (id=3397): sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) mmap(&(0x7f0000612000/0x3000)=nil, 0x3000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x82f49000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'pimreg\x00', &(0x7f0000000340)=@ethtool_drvinfo={0x3, "bf1b4087edfe5c4e7dbc31ec412ad7e146e549d45ef8ffffffffffffff00", "0b427558163b547e4025a26d22b39efd15a79bf13a99cfb77cc869a43447e49f", "87a906824296668daf4ebd4e96f95ec6d39d32a7238872c45dc65a18f8bf52af", "d8f28fdc3ec20b8facef9aa9d6f53dd7527511d9bb717ba90adf6ac47453a1f1", "53b30ad0a21007c3cb8fe4f81000946b00", "6ef390e675e608f371455a4e", 0x400003, 0x2aca, 0x7e0, 0x87d42, 0x9e}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x4, 0xfd, 0x2, @vifc_lcl_ifindex, @rand_addr=0x64010102}, 0x10) 5.916553923s ago: executing program 3 (id=3398): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040054) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r4) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100003}) 4.700091108s ago: executing program 1 (id=3399): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r1}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) 4.658765646s ago: executing program 3 (id=3400): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c"], 0x4c}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) msgget$private(0x0, 0x60) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4) signalfd(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) 4.598033801s ago: executing program 1 (id=3401): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x1008000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)="9ac24b3c34551eccc15c94cd5067f7e3795319d9d6d8d8d63e517db2aa") r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) (fail_nth: 5) 4.454737256s ago: executing program 4 (id=3402): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0017"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$BLKFINISHZONE(r2, 0x40101288, &(0x7f0000000180)={0xce0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0\x00'}) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) gettid() syz_pidfd_open(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) listen(0xffffffffffffffff, 0xfffffffd) accept(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) syz_open_dev$MSR(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x3c) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000380)={0xa, 0x3ffd, 0xff, @remote, 0x20009}, 0x1c) recvmmsg(r4, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/4, 0x4}], 0x1}, 0x4}], 0x1, 0x40000121, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 3.69244592s ago: executing program 3 (id=3403): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000540)={'wg2\x00', 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x100ac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[0x0]) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000140)=0x1) sendto$packet(r0, 0x0, 0x0, 0x40040, &(0x7f0000000580)={0x11, 0xf6, r1, 0x1, 0x9}, 0x14) 3.5240135s ago: executing program 4 (id=3404): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) epoll_create1(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x7, &(0x7f00000002c0)=0x2b0a) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="4c68fffffcffff1e195100000300000000000000000000004f13180010000000e6a346f7f55807e66aedc891579b9e7379b0b68f1ff2d258fcc695772c4746fcea9fbd141067281f808727f32cd9d7a9b47d8cc8a790a41c75b4efd08637614f960808746131268313882c"], &(0x7f0000000300)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000340)=[r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000380)=[{0x1, 0x2, 0x0, 0xa}, {0x5, 0x4, 0x1, 0x2}, {0x4, 0x1, 0x0, 0x9}, {0x4, 0x1, 0xb, 0x5}, {0x3, 0x4, 0x1, 0xf}, {0x4, 0x2, 0x4}], 0x10, 0x2}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r7, 0x4}}, 0x10) close_range(r6, r6, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000101401"], 0x28}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) preadv(r8, &(0x7f0000000040)=[{0x0}], 0x1, 0x5, 0x0) rt_sigqueueinfo(0x0, 0x3c, &(0x7f00000000c0)={0x17, 0x7b7, 0xfffffffc}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$can_bcm(0x1d, 0x2, 0x2) 3.523359655s ago: executing program 1 (id=3405): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = syz_open_procfs(0x0, 0x0) read$FUSE(r2, &(0x7f00000040c0)={0x2020}, 0x2020) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) r3 = getpid() (rerun: 32) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) fgetxattr(r4, 0x0, &(0x7f0000000280)=""/198, 0xc6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@file={0x0, './bus\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="ffef545cc97193bb2ff1f0eba21825240000006800010002000000fcffb17f00000000000000000c0002000100000004000000"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x14, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x10000, 0x590f}}, './file0\x00'}) (rerun: 32) sendmsg$nl_netfilter(r10, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000004}, 0x80d5) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x40c}}, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) 2.69783729s ago: executing program 4 (id=3406): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x8, 0x2ea473, 0x2eb80c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x2fc247, 0xfc02}) 2.620457274s ago: executing program 3 (id=3407): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x6361, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3e}, 0x80, &(0x7f0000003600)=[{&(0x7f0000000180)="27030200590214000600606fb96dbc", 0xf}], 0x1}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.343421925s ago: executing program 2 (id=3190): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r4, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, r4, 0x0, &(0x7f0000ba3000/0x3000)=nil, 0x3000, 0xa}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r4, 0x0, &(0x7f00007d4000/0x4000)=nil, 0x4000, 0xfffffffffffffffe}) sched_setscheduler(0x0, 0x6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000c00)=ANY=[@ANYBLOB="85100000040000009500000000000000c8000000000000000000000000000000950000000000000085100000fcffffff9500000000000000954e118acd7bda8180b8a1d8"], &(0x7f00000000c0)='GPL\x00'}, 0x78) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r6, 0x2) recvfrom(r6, 0x0, 0x0, 0x20001, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r5, 0xfe, 0xfffffffffffffffc}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000e80400"/20, @ANYRES32=r0], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000008000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f72ac8a"], 0x4c}}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xfffffffe}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 1.13242612s ago: executing program 1 (id=3408): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) socket$kcm(0x29, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) dup(r1) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x1d7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 1.131834279s ago: executing program 3 (id=3409): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89b0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x6, 0x8, 0x4e, @remote, @loopback, 0x80, 0x80, 0x4890b9c1, 0x5}}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x28, 0x8, 0x0, &(0x7f0000000000)) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, 0x0, 0x8c4) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x50}}, 0x0) 1.130369469s ago: executing program 4 (id=3410): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x800) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x1, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x450}) ioctl$KVM_RUN(r5, 0xae80, 0x0) unshare(0x64000600) ioctl$TCXONC(0xffffffffffffffff, 0x5608, 0x3) r6 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r7, 0x1, 0x70bd2f, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x65}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) wait4(r6, 0x0, 0x80000000, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="03040000b5"], 0xc8) 500.551845ms ago: executing program 1 (id=3411): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r1}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) 51.189924ms ago: executing program 1 (id=3412): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="180008000001"}, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r1, &(0x7f00000076c0)=[{{0x0, 0x0, &(0x7f00000028c0)=[{0x0}, {&(0x7f0000000240)="86ec", 0x2}, {0x0, 0xf5}, {0x0}], 0x4}}], 0x1, 0xf5) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x23a000, 0x1000, 0x0, 0x3}, 0x20) 0s ago: executing program 3 (id=3413): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r0, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1006) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRES8, @ANYRESDEC=r0, @ANYRES32=0x0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaac437bf8cb64c86dd6bcce16400000000000000000001000000000000000000000000000000002c02000000000000050200090502000005020006c204"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x7, &(0x7f0000000280)=[{0x7, 0x4, 0x0, 0x7fff0026}, {0x3, 0x7, 0x0, 0xf}, {0x2, 0xf, 0x2, 0x2}, {0x1, 0x4, 0x97, 0x4}, {0x3, 0x1, 0x7, 0x8}, {0x8, 0x8, 0x0, 0x1}, {0x3, 0x81, 0x1, 0x6}]}) timer_create(0x1, 0x0, &(0x7f0000000300)) timer_delete(0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) fchdir(r4) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1f) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) kernel console output (not intermixed with test programs): ig 0 has an invalid interface number: 51 but max is 0 [ 903.447588][ T24] usb 2-1: config 0 has no interface number 0 [ 903.469974][ T5814] cdc_wdm 4-1:1.0: skipping garbage [ 903.498263][ T5814] cdc_wdm 4-1:1.0: skipping garbage [ 903.507921][T17898] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 903.525960][T17898] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 903.554489][ T5814] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 903.571200][ T5814] cdc_wdm 4-1:1.0: Unknown control protocol [ 903.604588][T17898] wireguard: wg0: Could not create IPv4 socket [ 903.614989][T17898] wireguard: wg1: Could not create IPv4 socket [ 903.623495][T17898] wireguard: wg2: Could not create IPv4 socket [ 903.748986][ T5814] usb 4-1: USB disconnect, device number 92 [ 904.098963][ T5343] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 904.419856][ T24] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 904.428925][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.439321][ T24] usb 2-1: Product: syz [ 904.443517][ T24] usb 2-1: Manufacturer: syz [ 904.448106][ T24] usb 2-1: SerialNumber: syz [ 904.461457][ T24] usb 2-1: config 0 descriptor?? [ 904.527506][ T30] audit: type=1400 audit(1782698716.673:1695): avc: denied { write } for pid=18059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 904.644344][ T24] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 904.665855][ T30] audit: type=1400 audit(1782698716.813:1696): avc: denied { write } for pid=18077 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 905.663062][ T24] usb 2-1: qt2_attach - failed to power on unit: -71 [ 905.673264][ T5343] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 905.684356][ T24] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 905.693340][ T5343] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 905.712290][ T24] usb 2-1: USB disconnect, device number 116 [ 906.676747][ T5343] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 906.709053][ T5343] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 906.719084][ T5343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 906.727180][ T5343] usb 3-1: Product: syz [ 906.731349][ T5343] usb 3-1: Manufacturer: syz [ 906.735958][ T5343] usb 3-1: SerialNumber: syz [ 906.933647][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 906.946785][ T5343] usb 3-1: can't set config #1, error -32 [ 907.001252][ T5343] usb 3-1: USB disconnect, device number 121 [ 907.703923][T18107] netlink: 'syz.1.3092': attribute type 2 has an invalid length. [ 908.323773][ T30] audit: type=1400 audit(1782698720.463:1697): avc: denied { write } for pid=18098 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 908.406303][ T30] audit: type=1326 audit(1782698720.553:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18149 comm="syz.2.3095" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f16b559ce59 code=0x0 [ 908.543089][ T30] audit: type=1400 audit(1782698720.683:1699): avc: denied { write } for pid=18153 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 909.039828][T18167] loop5: detected capacity change from 0 to 7 [ 909.052892][T18167] Dev loop5: unable to read RDB block 7 [ 909.061612][T18167] loop5: AHDI p3 p4 [ 909.066958][T18167] loop5: partition table partially beyond EOD, truncated [ 909.075625][T18167] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 909.099338][ T30] audit: type=1400 audit(1782698721.223:1700): avc: denied { write } for pid=18159 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 909.190743][T11118] udevd[11118]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 909.231750][ T30] audit: type=1400 audit(1782698721.323:1701): avc: denied { write } for pid=18179 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 909.240433][ T24] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 909.509862][ T24] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 909.560999][ T24] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 909.572844][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 909.582704][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 909.593682][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 909.705043][ T30] audit: type=1400 audit(1782698721.853:1702): avc: denied { write } for pid=18184 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 909.766716][ T30] audit: type=1400 audit(1782698721.913:1703): avc: denied { write } for pid=18195 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 909.821563][ T24] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 909.831504][ T24] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 909.839505][ T24] usb 4-1: Product: syz [ 909.843687][ T24] usb 4-1: Manufacturer: syz [ 910.057752][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 910.063002][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 910.089236][ T24] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 910.095181][ T24] cdc_wdm 4-1:1.0: Unknown control protocol [ 910.163760][ T30] audit: type=1400 audit(1782698722.313:1704): avc: denied { setopt } for pid=18207 comm="syz.4.3102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 910.164804][T18208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3102'. [ 910.221973][T18208] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3102'. [ 910.227199][ T30] audit: type=1400 audit(1782698722.313:1705): avc: denied { nlmsg_read } for pid=18207 comm="syz.4.3102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 910.305764][ T30] audit: type=1400 audit(1782698722.453:1706): avc: denied { write } for pid=18198 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 910.353157][ T5343] usb 4-1: USB disconnect, device number 93 [ 910.377888][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 910.398768][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 910.412951][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 910.420667][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 910.430356][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 910.710215][ T24] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 910.745190][T18222] Failed to initialize the IGMP autojoin socket (err -2) [ 911.267618][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 911.317834][ T24] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 911.380796][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 911.404016][T18273] loop9: detected capacity change from 0 to 2640 [ 911.459925][T11118] buffer_io_error: 340 callbacks suppressed [ 911.459943][T11118] Buffer I/O error on dev loop9, logical block 0, async page read [ 911.478921][T11118] Buffer I/O error on dev loop9, logical block 0, async page read [ 911.508924][T11118] Buffer I/O error on dev loop9, logical block 0, async page read [ 911.611719][T18277] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 911.612436][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 911.651983][T11118] Buffer I/O error on dev loop9, logical block 3, async page read [ 911.705284][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 911.723180][ T24] usb 3-1: Product: syz [ 911.729927][ T24] usb 3-1: Manufacturer: syz [ 911.732023][T18279] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 911.736156][ T24] usb 3-1: SerialNumber: syz [ 911.946000][T18279] Buffer I/O error on dev loop9, logical block 1, lost async page write [ 912.002859][T18279] Buffer I/O error on dev loop9, logical block 2, lost async page write [ 912.024532][T18279] Buffer I/O error on dev loop9, logical block 3, lost async page write [ 912.059034][T18279] Buffer I/O error on dev loop9, logical block 4, lost async page write [ 912.298240][ T4977] ldm_validate_partition_table(): Disk read failed. [ 912.335612][ T4977] Dev loop9: unable to read RDB block 0 [ 912.341537][ T4977] loop9: unable to read partition table [ 912.392348][ T24] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 122 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 912.502164][ T5611] Bluetooth: hci3: command tx timeout [ 912.565736][T18290] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 912.620693][ T5814] usb 3-1: USB disconnect, device number 122 [ 912.657421][ T5814] usblp0: removed [ 912.751496][T18297] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3110'. [ 912.951987][T18298] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3110'. [ 913.007885][T18300] loop9: detected capacity change from 0 to 2640 [ 913.041737][T18300] ldm_validate_partition_table(): Disk read failed. [ 913.098958][T18300] Dev loop9: unable to read RDB block 8 [ 913.128408][T18298] comedi comedi1: comedi_config --init_data is deprecated [ 913.325133][T18300] loop9: unable to read partition table [ 913.388480][T18300] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 913.434119][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 913.434137][ T30] audit: type=1400 audit(1782698725.533:1712): avc: denied { write } for pid=18285 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 914.342298][ T30] audit: type=1400 audit(1782698726.453:1713): avc: denied { write } for pid=18321 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 914.592801][ T5611] Bluetooth: hci3: command tx timeout [ 914.921933][ T24] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 915.827831][T18222] netdevsim netdevsim0 netdevsim0: renamed from eth1 [ 915.895798][ T30] audit: type=1400 audit(1782698728.043:1714): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 915.896918][T18222] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 915.957284][T18222] netdevsim netdevsim0 netdevsim1: renamed from eth2 [ 915.976258][ T30] audit: type=1400 audit(1782698728.123:1715): avc: denied { write } for pid=18333 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 915.976449][T18222] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 916.049973][T18222] netdevsim netdevsim0 netdevsim2: renamed from eth3 [ 916.104332][ T30] audit: type=1400 audit(1782698728.253:1716): avc: denied { write } for pid=18357 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 916.118345][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 916.293880][T18360] futex_wake_op: syz.2.3123 tries to shift op by 144; fix this program [ 916.594554][ T24] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 916.611290][T18222] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 916.652917][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 916.674086][ T5611] Bluetooth: hci3: command tx timeout [ 916.688455][T18360] Failed to initialize the IGMP autojoin socket (err -2) [ 916.697025][T18222] netdevsim netdevsim0 netdevsim3: renamed from eth4 [ 916.733241][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 916.757446][T18222] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 916.778690][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 916.936980][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 916.988038][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 917.004013][ T24] usb 5-1: Product: syz [ 917.008212][ T24] usb 5-1: Manufacturer: syz [ 917.166130][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 917.171380][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 917.202842][ T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 917.214227][ T24] cdc_wdm 5-1:1.0: Unknown control protocol [ 917.475411][ T30] audit: type=1400 audit(1782698729.623:1717): avc: denied { write } for pid=18368 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 917.510020][ T5814] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 917.569329][T18387] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 917.580071][ T24] usb 5-1: USB disconnect, device number 103 [ 917.695143][ T5814] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 917.727107][ T5814] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 917.765648][ T5814] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 917.852757][ T30] audit: type=1400 audit(1782698729.983:1718): avc: denied { write } for pid=18389 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 918.251084][ T5814] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 918.263013][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 918.272572][ T5814] usb 3-1: Product: syz [ 918.276740][ T5814] usb 3-1: Manufacturer: syz [ 918.281336][ T5814] usb 3-1: SerialNumber: syz [ 918.772748][ T5611] Bluetooth: hci3: command tx timeout [ 918.884022][ T5814] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 123 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 919.104691][ T5814] usb 3-1: USB disconnect, device number 123 [ 919.159058][ T5814] usblp0: removed [ 919.645229][ T24] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 919.711728][ T30] audit: type=1400 audit(1782698731.853:1719): avc: denied { write } for pid=18395 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 919.802719][ T24] usb 5-1: device descriptor read/64, error -71 [ 919.858269][T18423] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3128'. [ 921.989536][ T24] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 923.203369][T18428] kAFS: unable to lookup cell 'ÿ' [ 923.208673][ T24] usb 5-1: device descriptor read/64, error -71 [ 923.234344][ T30] audit: type=1400 audit(1782698735.313:1720): avc: denied { write } for pid=18429 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 923.262109][T18420] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3128'. [ 923.298053][T18420] comedi comedi1: comedi_config --init_data is deprecated [ 923.413764][ T24] usb usb5-port1: attempt power cycle [ 923.501621][T18407] syz.4.3126 (18407): drop_caches: 2 [ 923.820117][ T24] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 924.444828][T18222] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 924.488814][T18222] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 924.553282][T18222] wireguard: wg0: Could not create IPv4 socket [ 924.563965][T18222] wireguard: wg1: Could not create IPv4 socket [ 924.650921][T18222] wireguard: wg2: Could not create IPv4 socket [ 924.855234][ T30] audit: type=1400 audit(1782698736.943:1721): avc: denied { write } for pid=18451 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 925.118474][ T24] usb 5-1: device descriptor read/8, error -71 [ 925.190488][ T30] audit: type=1400 audit(1782698737.263:1722): avc: denied { write } for pid=18468 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 925.656827][ T24] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 926.038840][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 926.045665][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 926.118092][ T30] audit: type=1400 audit(1782698738.233:1723): avc: denied { write } for pid=18476 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 926.220799][ T30] audit: type=1400 audit(1782698738.343:1724): avc: denied { write } for pid=18488 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 926.527578][ T30] audit: type=1400 audit(1782698738.663:1725): avc: denied { write } for pid=18491 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 926.582381][ T30] audit: type=1400 audit(1782698738.663:1726): avc: denied { write } for pid=18502 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 926.733057][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 926.741705][ T24] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 926.751874][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 926.760847][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 926.771800][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 926.866732][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 926.878010][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 926.886660][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 926.894183][ T30] audit: type=1400 audit(1782698738.883:1727): avc: denied { read } for pid=18506 comm="syz.1.3138" path="socket:[70573]" dev="sockfs" ino=70573 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 926.917862][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 926.934513][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 927.098988][ T30] audit: type=1400 audit(1782698739.203:1728): avc: denied { write } for pid=18509 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 927.185667][ T30] audit: type=1400 audit(1782698739.313:1729): avc: denied { write } for pid=18534 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 927.225249][T18513] Failed to initialize the IGMP autojoin socket (err -2) [ 927.382068][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 927.421403][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 927.429502][ T24] usb 5-1: Product: syz [ 927.433673][ T24] usb 5-1: Manufacturer: syz [ 927.559544][T18550] openvswitch: netlink: Message has 12 unknown bytes. [ 927.568567][ T30] audit: type=1400 audit(1782698739.633:1730): avc: denied { write } for pid=18538 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 927.707709][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 927.712967][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 927.726721][ T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 927.732436][T18558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3142'. [ 927.732659][ T24] cdc_wdm 5-1:1.0: Unknown control protocol [ 928.023062][T18558] tmpfs: Bad value for 'nr_blocks' [ 928.501466][T18571] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 928.931144][ T24] usb 5-1: USB disconnect, device number 107 [ 929.035817][ T5611] Bluetooth: hci3: command tx timeout [ 929.489822][T18589] loop9: detected capacity change from 0 to 2640 [ 929.500578][T18561] buffer_io_error: 681 callbacks suppressed [ 929.500595][T18561] Buffer I/O error on dev loop9, logical block 0, async page read [ 929.559562][T18561] Buffer I/O error on dev loop9, logical block 0, async page read [ 929.567872][T18561] Buffer I/O error on dev loop9, logical block 0, async page read [ 929.576100][T18561] Buffer I/O error on dev loop9, logical block 0, async page read [ 929.584519][T18561] Buffer I/O error on dev loop9, logical block 0, async page read [ 929.592688][T18589] Buffer I/O error on dev loop9, logical block 0, async page read [ 929.602879][T18589] Buffer I/O error on dev loop9, logical block 0, async page read [ 929.610768][T18589] Buffer I/O error on dev loop9, logical block 0, async page read [ 929.618628][T18589] Buffer I/O error on dev loop9, logical block 0, async page read [ 929.626491][T18589] Buffer I/O error on dev loop9, logical block 0, async page read [ 929.634489][T18589] ldm_validate_partition_table(): Disk read failed. [ 929.796359][T18589] Dev loop9: unable to read RDB block 0 [ 929.809516][T18589] loop9: unable to read partition table [ 929.827043][T18589] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 929.898961][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 929.898989][ T30] audit: type=1400 audit(1782698742.013:1733): avc: denied { write } for pid=18596 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 930.413724][ T5840] libceph: mon0 (1)[c::]:6789 connect error [ 930.480452][ T30] audit: type=1400 audit(1782698742.583:1734): avc: denied { recv } for pid=18604 comm="dhcpcd" src=68 daddr=255.255.255.255 dest=67 netif=veth1_to_bond scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 930.587231][T18594] ceph: No mds server is up or the cluster is laggy [ 931.062922][ T5611] Bluetooth: hci3: command tx timeout [ 931.475449][ T5814] libceph: mon0 (1)[c::]:6789 connect error [ 931.495906][ T4977] ldm_validate_partition_table(): Disk read failed. [ 931.538529][ T4977] Dev loop9: unable to read RDB block 0 [ 931.553901][ T4977] loop9: unable to read partition table [ 931.911835][T18630] netlink: 'syz.1.3153': attribute type 1 has an invalid length. [ 933.157397][ T5611] Bluetooth: hci3: command tx timeout [ 933.376098][T18638] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3155'. [ 933.465403][T18641] loop9: detected capacity change from 0 to 2640 [ 933.492108][T18641] ldm_validate_partition_table(): Disk read failed. [ 933.499046][T18641] Dev loop9: unable to read RDB block 0 [ 933.504955][T18641] loop9: unable to read partition table [ 933.510759][T18641] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 933.932722][T18513] netdevsim netdevsim0 netdevsim0: renamed from eth1 [ 933.945376][T18513] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 933.956124][T18513] netdevsim netdevsim0 netdevsim1: renamed from eth2 [ 933.988416][T18513] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 934.043956][ T24] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 934.144427][T18513] netdevsim netdevsim0 netdevsim2: renamed from eth3 [ 934.177898][T18513] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 934.214885][ T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 934.224877][ T24] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 934.229626][T18513] netdevsim netdevsim0 netdevsim3: renamed from eth4 [ 934.242772][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 934.273137][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 934.284143][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 934.341637][T18513] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 934.366496][ T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 934.376534][ T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 934.384542][ T24] usb 2-1: Product: syz [ 934.388702][ T24] usb 2-1: Manufacturer: syz [ 934.399832][T18657] loop9: detected capacity change from 0 to 2640 [ 934.601894][T18657] buffer_io_error: 1043 callbacks suppressed [ 934.601914][T18657] Buffer I/O error on dev loop9, logical block 0, async page read [ 934.615845][T18657] Buffer I/O error on dev loop9, logical block 0, async page read [ 934.623720][T18657] Buffer I/O error on dev loop9, logical block 0, async page read [ 934.631592][T18657] Buffer I/O error on dev loop9, logical block 0, async page read [ 934.639463][T18657] Buffer I/O error on dev loop9, logical block 0, async page read [ 934.647430][T18657] Buffer I/O error on dev loop9, logical block 0, async page read [ 934.655307][T18657] Buffer I/O error on dev loop9, logical block 0, async page read [ 934.663194][T18657] Buffer I/O error on dev loop9, logical block 0, async page read [ 934.670997][T18657] ldm_validate_partition_table(): Disk read failed. [ 934.677686][T18657] Buffer I/O error on dev loop9, logical block 0, async page read [ 934.685553][T18657] Buffer I/O error on dev loop9, logical block 0, async page read [ 934.693484][T18657] Dev loop9: unable to read RDB block 0 [ 934.829283][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 934.834522][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 934.845473][ T24] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 934.851419][ T24] cdc_wdm 2-1:1.0: Unknown control protocol [ 934.989598][T18657] loop9: unable to read partition table [ 935.016039][T18657] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 935.281414][ T5611] Bluetooth: hci3: command tx timeout [ 935.288350][ T5840] usb 2-1: USB disconnect, device number 117 [ 937.285002][T18695] loop9: detected capacity change from 0 to 2640 [ 937.294495][T18695] ldm_validate_partition_table(): Disk read failed. [ 937.304025][T18695] Dev loop9: unable to read RDB block 0 [ 937.310775][T18695] loop9: unable to read partition table [ 937.333448][T18695] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 937.442280][ T4977] ldm_validate_partition_table(): Disk read failed. [ 937.472872][ T4977] Dev loop9: unable to read RDB block 0 [ 937.478914][ T4977] loop9: unable to read partition table [ 937.516614][ T24] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 937.771162][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 937.778662][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 937.913970][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 937.935273][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 937.949181][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 937.959366][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.968312][ T24] usb 5-1: Product: syz [ 937.973365][ T24] usb 5-1: Manufacturer: syz [ 937.978234][ T24] usb 5-1: SerialNumber: syz [ 938.002428][ T24] usb 5-1: config 0 descriptor?? [ 938.013668][ T24] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 938.024291][ T24] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 938.026314][ T5840] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 938.058129][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 938.072662][T18701] ceph: No mds server is up or the cluster is laggy [ 938.279106][ T5840] usb 2-1: Using ep0 maxpacket: 32 [ 938.299523][ T5840] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 938.320068][ T5840] usb 2-1: config 0 has no interface number 0 [ 938.327432][ T11] usb 4-1: new low-speed USB device number 94 using dummy_hcd [ 938.422532][ T5840] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 938.432321][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.458360][ T5840] usb 2-1: Product: syz [ 938.463306][ T5840] usb 2-1: Manufacturer: syz [ 938.481111][ T5840] usb 2-1: SerialNumber: syz [ 938.488303][ T5840] usb 2-1: config 0 descriptor?? [ 938.840873][ T24] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 938.976751][ T11] usb 4-1: unable to get BOS descriptor or descriptor too short [ 939.010743][ T11] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 64, setting to 0 [ 939.034103][ T11] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 4 [ 939.046066][ T11] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 0 [ 939.297947][ T5840] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 939.309464][ T5840] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 939.438504][ T11] usb 4-1: New USB device found, idVendor=17cc, idProduct=baff, bcdDevice= 0.40 [ 939.460149][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.468812][ T11] usb 4-1: Manufacturer: 줼븋⨾튀锫왂堔⓿枪î¶é‘™é£”区喽胭˺ឌ갡닚ä‘짊罜䜳᪶缗꣈䳻ᶣ [ 939.727108][ T5840] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 939.738691][ T5840] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 939.858692][ T30] audit: type=1400 audit(1782698751.973:1735): avc: denied { ioctl } for pid=18700 comm="syz.3.3175" path="socket:[72123]" dev="sockfs" ino=72123 ioctlcmd=0xf50e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 939.901947][ T11] usb 4-1: low speed audio streaming not supported [ 939.909268][ T11] usb 4-1: low speed audio streaming not supported [ 939.929026][ T11] usb 4-1: unit 3 not found! [ 939.982969][ T11] usb 4-1: selecting invalid altsetting 1 [ 940.000416][ T11] snd-usb-caiaq 4-1:1.1: can't set alt interface. [ 940.007114][ T11] usb 4-1: unable to init card! (ret=-5) [ 940.024309][ T11] snd-usb-caiaq 4-1:1.1: probe with driver snd-usb-caiaq failed with error -5 [ 940.038561][ T11] usb 4-1: selecting invalid altsetting 1 [ 940.042248][ T24] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 940.045150][ T11] snd-usb-caiaq 4-1:1.2: can't set alt interface. [ 940.045190][ T11] usb 4-1: unable to init card! (ret=-5) [ 940.045638][ T11] snd-usb-caiaq 4-1:1.2: probe with driver snd-usb-caiaq failed with error -5 [ 940.076723][ T24] em28xx 5-1:0.0: board has no eeprom [ 940.104955][ T11] usb 4-1: USB disconnect, device number 94 [ 940.186930][T18561] udevd[18561]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 940.325298][T18708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.356271][T18708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.308237][ T30] audit: type=1400 audit(1782698753.423:1736): avc: denied { read write } for pid=18717 comm="syz.2.3177" name="file0" dev="fuse" ino=16390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 941.331386][ T30] audit: type=1400 audit(1782698753.423:1737): avc: denied { open } for pid=18717 comm="syz.2.3177" path="/626/file0/file0" dev="fuse" ino=16390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 941.493669][ T24] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 941.501599][ T24] em28xx 5-1:0.0: dvb set to bulk mode. [ 941.549962][ T29] em28xx 5-1:0.0: Binding DVB extension [ 941.754724][T18693] em28xx 5-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 942.164946][T11441] usb 5-1: USB disconnect, device number 108 [ 942.385768][T11441] em28xx 5-1:0.0: Disconnecting em28xx [ 942.477096][ T29] em28xx 5-1:0.0: Registering input extension [ 942.491418][T11441] em28xx 5-1:0.0: Closing input extension [ 942.523014][T11441] em28xx 5-1:0.0: Freeing device [ 943.450767][ T5814] usb 2-1: USB disconnect, device number 118 [ 943.609856][T18513] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 943.647091][T18513] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 944.118409][T18513] wireguard: wg0: Could not create IPv4 socket [ 944.382704][T18513] wireguard: wg1: Could not create IPv4 socket [ 944.727760][T18513] wireguard: wg2: Could not create IPv4 socket [ 944.811499][ T30] audit: type=1400 audit(1782698756.953:1738): avc: denied { write } for pid=18763 comm="syz.4.3185" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 945.120335][T18773] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3189'. [ 945.222848][ T5814] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 945.917529][ T5814] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 945.938332][ T5814] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 945.974841][ T5814] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 945.993018][ T5814] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 946.005180][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 946.016740][ T5814] usb 2-1: Product: syz [ 946.021329][ T5814] usb 2-1: Manufacturer: syz [ 946.035650][ T5814] usb 2-1: SerialNumber: syz [ 946.291421][ T5814] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 119 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 946.324585][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 946.360698][ T5814] usb 2-1: USB disconnect, device number 119 [ 946.383836][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 946.418018][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 946.434007][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 946.441565][ T5814] usblp0: removed [ 946.448679][T18561] udevd[18561]: setting owner of /dev/usb/lp0 to uid=0, gid=7 failed: No such file or directory [ 946.481651][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 947.111913][T18776] Failed to initialize the IGMP autojoin socket (err -2) [ 947.251939][ T30] audit: type=1400 audit(1782698759.353:1739): avc: denied { map } for pid=18795 comm="syz.1.3191" path="socket:[72561]" dev="sockfs" ino=72561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 947.365827][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 947.405847][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 947.430730][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 947.438060][ T30] audit: type=1400 audit(1782698759.563:1740): avc: denied { setopt } for pid=18795 comm="syz.1.3191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 947.459636][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 947.475531][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 947.476225][T18810] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3194'. [ 947.776104][T18810] IPVS: Unknown mcast interface: bond_slave_0 [ 947.961364][T18823] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 948.609011][ T5623] Bluetooth: hci3: command tx timeout [ 948.684935][T18837] loop9: detected capacity change from 0 to 2640 [ 948.700670][T18837] buffer_io_error: 374 callbacks suppressed [ 948.700713][T18837] Buffer I/O error on dev loop9, logical block 0, async page read [ 948.721152][T18837] Buffer I/O error on dev loop9, logical block 0, async page read [ 948.731356][T18837] Buffer I/O error on dev loop9, logical block 0, async page read [ 948.739296][T18837] Buffer I/O error on dev loop9, logical block 0, async page read [ 948.747204][T18837] Buffer I/O error on dev loop9, logical block 0, async page read [ 948.755123][T18837] Buffer I/O error on dev loop9, logical block 0, async page read [ 948.763068][T18837] Buffer I/O error on dev loop9, logical block 0, async page read [ 948.770972][T18837] Buffer I/O error on dev loop9, logical block 0, async page read [ 948.834222][T18841] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 948.854424][T18805] Failed to initialize the IGMP autojoin socket (err -2) [ 948.881227][T18837] Buffer I/O error on dev loop9, logical block 1, async page read [ 948.889056][T18837] Dev loop9: unable to read RDB block 8 [ 948.894691][T18837] loop9: unable to read partition table [ 948.900457][T18837] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 948.941087][T18844] rdma_rxe: Failed to create IPv4 UDP tunnel [ 950.668716][ T5623] Bluetooth: hci3: command tx timeout [ 950.718868][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 950.735013][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 950.744849][ T5611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 950.758911][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 950.767224][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 951.211393][T18868] Failed to initialize the IGMP autojoin socket (err -2) [ 951.448038][ T11] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 951.603282][ T5705] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 951.825905][ T11] usb 4-1: Using ep0 maxpacket: 32 [ 951.878558][ T11] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 951.896547][ T11] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.933542][ T11] usb 4-1: config 0 has no interface number 0 [ 951.955559][ T11] usb 4-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 951.983373][ T11] usb 4-1: config 0 interface 196 has no altsetting 0 [ 952.022912][ T11] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 952.040899][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.041091][ T5705] usb 5-1: device descriptor read/64, error -71 [ 952.066696][ T11] usb 4-1: Product: syz [ 952.080682][ T11] usb 4-1: Manufacturer: syz [ 952.086249][ T11] usb 4-1: SerialNumber: syz [ 952.108435][ T11] usb 4-1: config 0 descriptor?? [ 952.172296][ T11] ipheth 4-1:0.196: Unable to find endpoints [ 952.380002][ T5705] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 952.415784][ T5343] usb 4-1: USB disconnect, device number 95 [ 952.489780][T18776] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 952.507782][T18776] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 952.525944][T18776] wireguard: wg0: Could not create IPv4 socket [ 952.534571][T18776] wireguard: wg1: Could not create IPv4 socket [ 952.543057][T18776] wireguard: wg2: Could not create IPv4 socket [ 952.795424][ T5705] usb 5-1: device descriptor read/64, error -71 [ 953.014934][ T5705] usb usb5-port1: attempt power cycle [ 953.081851][ T30] audit: type=1400 audit(1782698765.203:1741): avc: denied { write } for pid=18924 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 953.148909][ T30] audit: type=1400 audit(1782698765.263:1742): avc: denied { write } for pid=18935 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 953.442130][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 953.456500][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 953.465703][ T5611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 953.473537][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 953.481063][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 953.549689][ T5705] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 953.876793][T18965] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 953.911079][ T30] audit: type=1400 audit(1782698766.013:1743): avc: denied { write } for pid=18941 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 953.980500][ T5705] usb 5-1: device descriptor read/8, error -71 [ 954.302556][ T5705] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 954.459928][T18942] Failed to initialize the IGMP autojoin socket (err -2) [ 954.544401][ T5705] usb 5-1: device descriptor read/8, error -71 [ 954.566080][T18976] loop9: detected capacity change from 0 to 2640 [ 954.570448][ T30] audit: type=1400 audit(1782698766.713:1744): avc: denied { write } for pid=18974 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 954.621582][T18561] buffer_io_error: 332 callbacks suppressed [ 954.621611][T18561] Buffer I/O error on dev loop9, logical block 0, async page read [ 954.667582][ T5705] usb usb5-port1: unable to enumerate USB device [ 954.673533][T18976] Buffer I/O error on dev loop9, logical block 0, async page read [ 954.745029][T18976] Buffer I/O error on dev loop9, logical block 0, async page read [ 954.843140][T18561] Buffer I/O error on dev loop9, logical block 0, async page read [ 954.900785][T18561] Buffer I/O error on dev loop9, logical block 0, async page read [ 954.938961][T18976] Buffer I/O error on dev loop9, logical block 0, async page read [ 955.005906][T18978] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 955.042938][T18976] Buffer I/O error on dev loop9, logical block 1, async page read [ 955.145352][T18986] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 955.153850][T18986] Buffer I/O error on dev loop9, logical block 1, lost async page write [ 955.257148][T18976] loop9: unable to read partition table [ 955.263022][T18976] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 955.395261][ T30] audit: type=1400 audit(1782698767.503:1745): avc: denied { write } for pid=18982 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 955.431513][T19000] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.3213' sets config #0 [ 955.441755][T19000] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.3213' sets config #1 [ 955.455720][T19000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3213'. [ 955.493289][ T30] audit: type=1400 audit(1782698767.623:1746): avc: denied { write } for pid=19001 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 955.561903][ T5611] Bluetooth: hci0: command tx timeout [ 955.853729][ T11] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 955.996605][ T30] audit: type=1400 audit(1782698768.113:1747): avc: denied { write } for pid=19005 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 956.054443][ T30] audit: type=1400 audit(1782698768.153:1748): avc: denied { write } for pid=19025 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 956.142778][ T11] usb 2-1: device descriptor read/64, error -71 [ 957.002535][ T11] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 957.543046][ T5611] Bluetooth: hci0: command tx timeout [ 957.610321][ T11] usb 2-1: device descriptor read/64, error -71 [ 958.002976][ T30] audit: type=1400 audit(1782698770.093:1749): avc: denied { write } for pid=19032 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 958.003897][ T11] usb usb2-port1: attempt power cycle [ 958.091658][ T30] audit: type=1400 audit(1782698770.233:1750): avc: denied { write } for pid=19057 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 958.895603][T19076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3221'. [ 959.154465][ T30] audit: type=1400 audit(1782698771.303:1751): avc: denied { write } for pid=19060 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 959.212362][ T5840] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 959.246956][T19070] SELinux: failed to load policy [ 959.347056][ T30] audit: type=1400 audit(1782698771.493:1752): avc: denied { write } for pid=19080 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 959.626341][ T5611] Bluetooth: hci0: command tx timeout [ 959.730063][T19095] Failed to initialize the IGMP autojoin socket (err -2) [ 959.756109][ T30] audit: type=1400 audit(1782698771.903:1753): avc: denied { write } for pid=19083 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 959.832064][ T30] audit: type=1400 audit(1782698771.973:1754): avc: denied { write } for pid=19098 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 959.866014][ T5840] usb 5-1: Using ep0 maxpacket: 32 [ 960.028806][T19101] (syz.1.3225,19101,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 960.037933][T19101] (syz.1.3225,19101,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 960.805944][T19106] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 960.825605][ T5840] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1935, setting to 1024 [ 961.051328][ T5840] usb 5-1: language id specifier not provided by device, defaulting to English [ 961.104123][ T30] audit: type=1400 audit(1782698773.243:1755): avc: denied { write } for pid=19103 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 961.409070][ T30] audit: type=1400 audit(1782698773.553:1756): avc: denied { write } for pid=19124 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 961.703425][ T5611] Bluetooth: hci0: command tx timeout [ 961.800563][ T5840] usb 5-1: New USB device found, idVendor=0e41, idProduct=414b, bcdDevice= 0.40 [ 961.809670][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.817655][ T5840] usb 5-1: Product: syz [ 961.821819][ T5840] usb 5-1: Manufacturer: á¨æ•»é„†äâ¨å±›å¡ˆæ©¡èƒµì¦‰ïŸá•“꾋é°ç”¾ [ 961.904849][ T5840] usb 5-1: can't set config #1, error -71 [ 961.912234][ T5840] usb 5-1: USB disconnect, device number 113 [ 962.088177][ T30] audit: type=1400 audit(1782698774.233:1757): avc: denied { write } for pid=19129 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 962.189170][ T30] audit: type=1400 audit(1782698774.333:1758): avc: denied { write } for pid=19143 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 962.529115][ T30] audit: type=1400 audit(1782698774.673:1759): avc: denied { write } for pid=19146 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 962.568942][ T5840] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 962.893769][T19168] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3234'. [ 963.004333][T19171] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3234'. [ 963.130426][T19173] comedi comedi1: comedi_config --init_data is deprecated [ 963.209734][ T803] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 963.230448][ T5840] usb 5-1: Using ep0 maxpacket: 32 [ 963.606726][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 963.606836][ T30] audit: type=1400 audit(1782698775.743:1761): avc: denied { write } for pid=19162 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 963.872065][ T5840] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 215, changing to 7 [ 963.929377][ T30] audit: type=1400 audit(1782698776.073:1762): avc: denied { create } for pid=19181 comm="syz.3.3235" name="#41" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 963.953436][ T30] audit: type=1400 audit(1782698776.083:1763): avc: denied { write } for pid=19184 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 963.994502][ T30] audit: type=1400 audit(1782698776.093:1764): avc: denied { link } for pid=19181 comm="syz.3.3235" name="#41" dev="tmpfs" ino=3495 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 964.056537][ T30] audit: type=1400 audit(1782698776.093:1765): avc: denied { rename } for pid=19181 comm="syz.3.3235" name="#42" dev="tmpfs" ino=3495 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 964.740526][ T5840] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 964.749597][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.772785][ T5840] usb 5-1: Product: syz [ 964.776985][ T5840] usb 5-1: Manufacturer: syz [ 964.785387][ T5840] usb 5-1: SerialNumber: syz [ 964.829240][T19202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3237'. [ 964.844545][ T5840] usb 5-1: can't set config #1, error -71 [ 964.852127][ T5840] usb 5-1: USB disconnect, device number 114 [ 964.862594][ T30] audit: type=1400 audit(1782698776.993:1766): avc: denied { write } for pid=19188 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 964.956224][ T30] audit: type=1326 audit(1782698777.103:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19200 comm="syz.4.3237" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1639ce59 code=0x7ffc0000 [ 964.985389][ T30] audit: type=1326 audit(1782698777.103:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19200 comm="syz.4.3237" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1639ce59 code=0x7ffc0000 [ 965.011922][ T30] audit: type=1326 audit(1782698777.103:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19200 comm="syz.4.3237" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1639ce59 code=0x7ffc0000 [ 965.043211][ T30] audit: type=1326 audit(1782698777.103:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19200 comm="syz.4.3237" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1639ce59 code=0x7ffc0000 [ 965.409527][ T803] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 965.414953][T19207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3237'. [ 965.418789][ T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.418814][ T803] usb 2-1: Product: syz [ 965.418830][ T803] usb 2-1: Manufacturer: syz [ 965.418846][ T803] usb 2-1: SerialNumber: syz [ 965.664283][ T803] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 965.843335][ T803] usb 2-1: USB disconnect, device number 123 [ 965.950245][ T5840] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 965.969459][ T803] usb 2-1: ath9k_htc: USB layer deinitialized [ 966.740907][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 966.767108][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 966.777972][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 967.194372][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 967.207910][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 967.626383][T19258] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 967.698382][T19262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3243'. [ 967.789149][T19262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3243'. [ 967.796337][T19265] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3245'. [ 968.899587][T19278] 9p: Bad value for 'wfdno' [ 969.008221][ T30] kauditd_printk_skb: 152 callbacks suppressed [ 969.008247][ T30] audit: type=1400 audit(1782698781.153:1923): avc: denied { write } for pid=19281 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 969.044818][T18942] netdevsim netdevsim0 netdevsim0: renamed from eth5 [ 969.158643][T18942] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 969.184544][T18942] netdevsim netdevsim0 netdevsim1: renamed from eth6 [ 969.391548][ T5611] Bluetooth: hci3: command tx timeout [ 970.067314][T18942] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 970.111545][T18942] netdevsim netdevsim0 netdevsim2: renamed from eth7 [ 970.194878][T18942] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 970.203429][T18942] netdevsim netdevsim0 netdevsim3: renamed from eth8 [ 970.203436][T19249] Failed to initialize the IGMP autojoin socket (err -2) [ 970.220042][T18942] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 970.340374][ T30] audit: type=1400 audit(1782698782.403:1924): avc: denied { write } for pid=19295 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 970.479887][ T30] audit: type=1400 audit(1782698782.623:1925): avc: denied { write } for pid=19319 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 970.509547][ T5840] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 971.066976][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 971.078308][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 971.089821][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 971.097559][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 971.108614][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 971.341066][T19346] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 971.374197][ T5840] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 971.398590][ T5840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.477031][ T5840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.511699][ T5840] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 971.559025][T11441] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 971.565979][ T5840] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 971.611658][ T5840] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 971.666596][ T30] audit: type=1400 audit(1782698783.803:1926): avc: denied { write } for pid=19327 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 971.703507][T19337] Failed to initialize the IGMP autojoin socket (err -2) [ 971.714082][T18942] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 971.742042][ T5840] usb 4-1: Manufacturer: syz [ 971.748834][ T5840] usb 4-1: config 0 descriptor?? [ 971.844367][ T30] audit: type=1400 audit(1782698783.803:1927): avc: denied { write } for pid=19363 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 971.858241][T18942] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 971.905881][T18942] wireguard: wg0: Could not create IPv4 socket [ 971.917328][T18942] wireguard: wg1: Could not create IPv4 socket [ 971.934726][T18942] wireguard: wg2: Could not create IPv4 socket [ 972.164195][ T30] audit: type=1400 audit(1782698784.233:1928): avc: denied { write } for pid=19366 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 972.263218][ T30] audit: type=1400 audit(1782698784.343:1929): avc: denied { write } for pid=19379 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 972.530401][ T5840] hid_parser_main: 1 callbacks suppressed [ 972.530423][ T5840] appleir 0003:05AC:8243.0021: unknown main item tag 0x0 [ 972.551848][ T5840] appleir 0003:05AC:8243.0021: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 973.058644][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 973.076643][T11441] usb 5-1: unable to get BOS descriptor or descriptor too short [ 973.090354][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 973.099078][ T5611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 973.120734][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 973.128364][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 973.200306][ T30] audit: type=1400 audit(1782698785.323:1930): avc: denied { write } for pid=19383 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 973.295447][T11441] usb 5-1: not running at top speed; connect to a high speed hub [ 973.303509][ T30] audit: type=1400 audit(1782698785.323:1931): avc: denied { write } for pid=19403 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 973.366922][T19405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 973.375698][T19405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 973.421512][T11441] usb 5-1: config 66 has an invalid interface number: 119 but max is 0 [ 973.430891][T11441] usb 5-1: config 66 has no interface number 0 [ 973.456699][T11441] usb 5-1: config 66 interface 119 has no altsetting 0 [ 973.471465][T19411] Bluetooth: MGMT ver 1.23 [ 973.489301][T11441] usb 5-1: New USB device found, idVendor=d1f5, idProduct=e958, bcdDevice=cf.28 [ 973.534199][T11441] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.555642][T11441] usb 5-1: Product: syz [ 973.573360][T11441] usb 5-1: Manufacturer: syz [ 973.578487][T11441] usb 5-1: SerialNumber: syz [ 973.734120][T19395] Failed to initialize the IGMP autojoin socket (err -2) [ 973.923304][ T30] audit: type=1400 audit(1782698786.073:1932): avc: denied { write } for pid=19415 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 974.119030][ T30] audit: type=1400 audit(1782698786.263:1933): avc: denied { write } for pid=19434 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 974.176632][ T5840] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 974.279515][ T11] usb 4-1: reset high-speed USB device number 96 using dummy_hcd [ 974.540564][ T30] audit: type=1400 audit(1782698786.683:1934): avc: denied { write } for pid=19438 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 974.648085][ T30] audit: type=1400 audit(1782698786.793:1935): avc: denied { write } for pid=19450 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 975.202241][ T30] audit: type=1400 audit(1782698787.343:1936): avc: denied { write } for pid=19453 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 975.256682][ T5623] Bluetooth: hci0: command tx timeout [ 975.321972][ T30] audit: type=1400 audit(1782698787.463:1937): avc: denied { write } for pid=19464 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 975.410721][T19467] Failed to initialize the IGMP autojoin socket (err -2) [ 975.462988][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 975.485317][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 975.495497][ T5840] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 975.510107][ T5840] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 975.519247][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.532506][ T5840] usb 2-1: config 0 descriptor?? [ 975.586638][T19433] usb 4-1: USB disconnect, device number 96 [ 976.144218][ T5840] usbhid 2-1:0.0: can't add hid device: -71 [ 976.156453][T19433] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 976.169913][ T5840] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 976.211107][ T5840] usb 2-1: USB disconnect, device number 124 [ 976.397832][T19433] usb 4-1: Using ep0 maxpacket: 32 [ 976.422785][T19433] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 976.454230][T19433] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.498959][T19433] usb 4-1: config 0 descriptor?? [ 976.625498][ T30] audit: type=1400 audit(1782698788.753:1938): avc: denied { mount } for pid=19475 comm="syz.1.3259" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 976.746252][ T30] audit: type=1400 audit(1782698788.763:1939): avc: denied { mounton } for pid=19475 comm="syz.1.3259" path="/673/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 977.265704][T19433] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 977.285301][T19433] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 977.373541][T19433] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 977.380755][T19433] usb 4-1: media controller created [ 977.389469][ T5623] Bluetooth: hci0: command tx timeout [ 977.441931][T19433] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 977.621523][ T30] audit: type=1400 audit(1782698789.763:1940): avc: denied { unmount } for pid=5613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 978.208973][T19490] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 978.259168][T19490] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 978.289359][ T30] audit: type=1400 audit(1782698790.433:1941): avc: denied { write } for pid=19470 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 978.354425][T19433] az6027: usb out operation failed. (-71) [ 978.455550][T19433] az6027: usb out operation failed. (-71) [ 978.461306][T19433] stb0899_attach: Driver disabled by Kconfig [ 978.469551][T19433] az6027: no front-end attached [ 978.469551][T19433] [ 978.653439][T19433] az6027: usb out operation failed. (-71) [ 978.744162][T19433] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 978.995882][T11441] rndis_host 5-1:66.119: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 979.059899][ T30] audit: type=1400 audit(1782698791.153:1942): avc: denied { write } for pid=19500 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 979.082127][T19433] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input46 [ 979.130334][T19433] dvb-usb: schedule remote query interval to 400 msecs. [ 979.137285][T19433] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 979.222076][T19433] usb 4-1: USB disconnect, device number 97 [ 979.327907][T19433] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 979.493082][ T5623] Bluetooth: hci0: command tx timeout [ 979.602915][T11441] usb 5-1: USB disconnect, device number 115 [ 979.641244][T19515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3263'. [ 979.746349][T19515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3263'. [ 979.757118][T19515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3263'. [ 979.914204][ T30] audit: type=1400 audit(1782698792.023:1943): avc: denied { write } for pid=19506 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 980.014210][T19395] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 980.032161][T19395] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 980.083030][ T30] audit: type=1400 audit(1782698792.133:1944): avc: denied { write } for pid=19532 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 980.152748][T19395] wireguard: wg0: Could not create IPv4 socket [ 980.201442][T19395] wireguard: wg1: Could not create IPv4 socket [ 980.225763][T19395] wireguard: wg2: Could not create IPv4 socket [ 980.916848][ T5343] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 980.976696][ T30] audit: type=1400 audit(1782698793.113:1945): avc: denied { write } for pid=19538 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 981.153011][ T5343] usb 5-1: Using ep0 maxpacket: 16 [ 981.249444][ T5343] usb 5-1: config 6 has an invalid interface number: 221 but max is 0 [ 981.266256][ T5343] usb 5-1: config 6 has no interface number 0 [ 981.275116][ T5343] usb 5-1: config 6 interface 221 has no altsetting 0 [ 981.286706][ T5343] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=12.92 [ 981.297525][ T5343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.306729][ T5343] usb 5-1: Product: syz [ 981.311540][ T5343] usb 5-1: Manufacturer: syz [ 981.318130][ T5343] usb 5-1: SerialNumber: syz [ 981.384553][ T30] audit: type=1400 audit(1782698793.533:1946): avc: denied { write } for pid=19553 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 981.863254][T19547] erofs (device loop4): cannot find valid erofs superblock [ 981.999511][T19563] Invalid ELF header type: 3 != 1 [ 983.611918][ T30] audit: type=1400 audit(1782698795.753:1947): avc: denied { write } for pid=19558 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 983.638905][ T5343] f81534a_ctrl 5-1:6.221: probe with driver f81534a_ctrl failed with error -71 [ 983.669588][ T5343] usb 5-1: USB disconnect, device number 116 [ 983.709993][ T30] audit: type=1400 audit(1782698795.853:1948): avc: denied { write } for pid=19575 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 984.081610][ T30] audit: type=1400 audit(1782698796.223:1949): avc: denied { write } for pid=19578 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 984.207154][ T30] audit: type=1400 audit(1782698796.343:1950): avc: denied { write } for pid=19589 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 984.384092][T19596] loop9: detected capacity change from 0 to 2640 [ 984.401523][T19596] buffer_io_error: 328 callbacks suppressed [ 984.401552][T19596] Buffer I/O error on dev loop9, logical block 0, async page read [ 984.452344][T19601] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 984.475834][T19596] Buffer I/O error on dev loop9, logical block 1, async page read [ 984.504479][T19596] Dev loop9: unable to read RDB block 8 [ 984.546195][T19596] loop9: unable to read partition table [ 984.619457][T19596] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 984.994148][T19601] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 985.404017][T19597] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3270'. [ 985.414347][T19601] Buffer I/O error on dev loop9, logical block 1, lost async page write [ 985.422780][T19601] Buffer I/O error on dev loop9, logical block 2, lost async page write [ 985.462438][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 985.493669][T19601] Buffer I/O error on dev loop9, logical block 3, lost async page write [ 985.609267][T19601] Buffer I/O error on dev loop9, logical block 4, lost async page write [ 985.618304][T19601] Buffer I/O error on dev loop9, logical block 5, lost async page write [ 985.732867][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 985.749810][ T5611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 985.752754][T19601] Buffer I/O error on dev loop9, logical block 6, lost async page write [ 985.830844][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 985.890092][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 986.691358][ T30] audit: type=1400 audit(1782698798.833:1951): avc: denied { write } for pid=19609 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 987.508667][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 987.515020][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 987.973825][ T5611] Bluetooth: hci0: command tx timeout [ 988.026139][ T30] audit: type=1400 audit(1782698800.123:1952): avc: denied { write } for pid=19646 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 988.260932][T19608] Failed to initialize the IGMP autojoin socket (err -2) [ 988.376169][ T30] audit: type=1400 audit(1782698800.493:1953): avc: denied { watch_reads } for pid=19658 comm="syz.1.3279" path="/684" dev="tmpfs" ino=3701 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 989.057524][ T5343] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 990.128543][ T5343] usb 4-1: Using ep0 maxpacket: 32 [ 990.134217][ T5611] Bluetooth: hci0: command tx timeout [ 990.246780][ T30] audit: type=1400 audit(1782698802.373:1954): avc: denied { write } for pid=19662 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 990.363729][ T30] audit: type=1400 audit(1782698802.483:1955): avc: denied { write } for pid=19691 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 990.577785][T19695] loop9: detected capacity change from 0 to 2640 [ 990.616232][T19695] buffer_io_error: 323 callbacks suppressed [ 990.616284][T19695] Buffer I/O error on dev loop9, logical block 0, async page read [ 990.682429][T19695] Buffer I/O error on dev loop9, logical block 0, async page read [ 990.710208][T19695] Buffer I/O error on dev loop9, logical block 0, async page read [ 990.752744][T19695] Buffer I/O error on dev loop9, logical block 0, async page read [ 990.771120][ T5343] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 990.779483][ T5343] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 990.795348][ T5343] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 990.804349][ T5343] usb 4-1: config 1 has no interface number 0 [ 990.810435][ T5343] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 990.821277][ T5343] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 990.825259][T19695] Buffer I/O error on dev loop9, logical block 0, async page read [ 990.834149][ T5343] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 990.834821][ T5343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.927856][T19701] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 990.952755][T19698] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 990.987931][T19698] Buffer I/O error on dev loop9, logical block 1, lost async page write [ 990.998130][T19701] Buffer I/O error on dev loop9, logical block 2, lost async page write [ 991.006555][T19701] Buffer I/O error on dev loop9, logical block 3, lost async page write [ 991.043901][T19695] loop9: unable to read partition table [ 991.072823][T19695] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 991.096020][ T5343] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 991.270541][ T30] audit: type=1400 audit(1782698803.413:1956): avc: denied { write } for pid=19696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 991.348328][ T5343] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 991.828421][ T30] audit: type=1400 audit(1782698803.943:1957): avc: denied { write } for pid=19716 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 991.954615][T19713] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19713 comm=syz.4.3286 [ 991.980034][T19713] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=19713 comm=syz.4.3286 [ 992.230505][ T5611] Bluetooth: hci0: command tx timeout [ 992.359673][ T803] usb 4-1: USB disconnect, device number 98 [ 992.408364][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 992.432805][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 992.448526][ T803] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 992.472224][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 992.480523][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 992.491863][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 993.721688][ T30] audit: type=1400 audit(1782698805.863:1958): avc: denied { write } for pid=19721 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 994.311003][ T5623] Bluetooth: hci0: command tx timeout [ 994.585397][ T5623] Bluetooth: hci3: command tx timeout [ 994.726743][ T30] audit: type=1400 audit(1782698806.863:1959): avc: denied { write } for pid=19754 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 996.702620][ T5623] Bluetooth: hci3: command tx timeout [ 997.172314][T19726] Failed to initialize the IGMP autojoin socket (err -2) [ 997.203800][T19608] netdevsim netdevsim0 netdevsim0: renamed from eth5 [ 997.247981][T19608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 997.257728][T19608] netdevsim netdevsim0 netdevsim1: renamed from eth6 [ 997.286613][T19608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 997.301246][T19608] netdevsim netdevsim0 netdevsim2: renamed from eth7 [ 997.356088][T19608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 997.378711][T19608] netdevsim netdevsim0 netdevsim3: renamed from eth8 [ 997.417559][T19608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 997.665847][ T11] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 998.149187][ T30] audit: type=1400 audit(1782698810.293:1960): avc: denied { write } for pid=19768 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 998.278358][ T30] audit: type=1400 audit(1782698810.423:1961): avc: denied { write } for pid=19803 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 998.311669][ T11] usb 4-1: Using ep0 maxpacket: 16 [ 998.464205][T19608] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 998.482826][T19608] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 998.500866][T19608] wireguard: wg0: Could not create IPv4 socket [ 998.509021][T19608] wireguard: wg1: Could not create IPv4 socket [ 998.517222][T19608] wireguard: wg2: Could not create IPv4 socket [ 998.731957][ T30] audit: type=1400 audit(1782698810.873:1962): avc: denied { write } for pid=19809 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 998.788252][ T30] audit: type=1400 audit(1782698810.903:1963): avc: denied { write } for pid=19820 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 998.853698][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 998.869625][ T11] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 998.879773][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.888853][ T11] usb 4-1: Product: syz [ 998.893971][ T11] usb 4-1: Manufacturer: syz [ 998.899014][ T11] usb 4-1: SerialNumber: syz [ 998.913895][ T11] usb 4-1: config 0 descriptor?? [ 998.928832][ T11] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 998.939458][ T11] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1000.250502][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1000.292516][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1000.304952][ T5611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1000.316890][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1000.327527][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1000.705341][ T11] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1001.177965][T19840] Failed to initialize the IGMP autojoin socket (err -2) [ 1001.210829][ T30] audit: type=1400 audit(1782698813.343:1964): avc: denied { setattr } for pid=19857 comm="syz.1.3300" name="HCI" dev="sockfs" ino=77541 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1001.346821][ T30] audit: type=1400 audit(1782698813.443:1965): avc: denied { write } for pid=19823 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1001.378254][ T11] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1001.387785][ T11] em28xx 4-1:0.0: board has no eeprom [ 1001.730127][T19844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.869836][T19844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.957399][ T30] audit: type=1400 audit(1782698814.093:1966): avc: denied { write } for pid=19869 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1002.435979][ T5611] Bluetooth: hci0: command tx timeout [ 1002.527527][T19780] em28xx 4-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 1002.593089][ T11] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1002.745333][T19886] netlink: 'syz.1.3303': attribute type 2 has an invalid length. [ 1002.790296][ T11] em28xx 4-1:0.0: dvb set to bulk mode. [ 1002.800964][T19433] em28xx 4-1:0.0: Binding DVB extension [ 1002.824067][T19891] Failed to initialize the IGMP autojoin socket (err -2) [ 1002.838173][ T11] usb 4-1: USB disconnect, device number 99 [ 1002.845319][ T11] em28xx 4-1:0.0: Disconnecting em28xx [ 1002.874605][ T30] audit: type=1400 audit(1782698814.913:1967): avc: denied { write } for pid=19874 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1003.045369][T19433] em28xx 4-1:0.0: Registering input extension [ 1003.063459][ T11] em28xx 4-1:0.0: Closing input extension [ 1003.207908][ T11] em28xx 4-1:0.0: Freeing device [ 1003.234429][T19901] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3307'. [ 1003.242674][ T5343] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1003.584135][T19901] comedi comedi1: comedi_config --init_data is deprecated [ 1004.122610][ T30] audit: type=1400 audit(1782698816.233:1968): avc: denied { write } for pid=19899 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1004.505638][T19920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3311'. [ 1004.525649][ T5611] Bluetooth: hci0: command tx timeout [ 1004.588893][T19920] hsr_slave_1 (unregistering): left promiscuous mode [ 1004.995291][T11441] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1005.015217][ T30] audit: type=1400 audit(1782698816.993:1969): avc: denied { write } for pid=19911 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1005.151179][ T30] audit: type=1400 audit(1782698817.203:1970): avc: denied { write } for pid=19930 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1005.594725][T19944] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3312'. [ 1005.624274][T11441] usb 2-1: Using ep0 maxpacket: 16 [ 1005.906428][ T30] audit: type=1400 audit(1782698818.013:1971): avc: denied { write } for pid=19937 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1006.129719][ T30] audit: type=1400 audit(1782698818.273:1972): avc: denied { write } for pid=19960 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1006.271421][T11441] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 1006.279630][T11441] usb 2-1: config 0 has no interface number 0 [ 1006.287453][T11441] usb 2-1: config 0 interface 246 altsetting 255 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 1006.298603][T11441] usb 2-1: config 0 interface 246 has no altsetting 0 [ 1006.417035][T11441] usb 2-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 1006.427823][T11441] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.438057][T11441] usb 2-1: Product: syz [ 1006.447643][T11441] usb 2-1: Manufacturer: syz [ 1006.454344][T11441] usb 2-1: SerialNumber: syz [ 1006.507318][T11441] usb 2-1: config 0 descriptor?? [ 1006.584341][ T5611] Bluetooth: hci0: command tx timeout [ 1006.626480][T19840] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1006.698211][T19840] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1006.721066][T19840] wireguard: wg0: Could not create IPv4 socket [ 1006.737306][T19840] wireguard: wg1: Could not create IPv4 socket [ 1006.745585][T19840] wireguard: wg2: Could not create IPv4 socket [ 1006.829522][T11441] usb 2-1: USB disconnect, device number 125 [ 1007.084873][ T30] audit: type=1400 audit(1782698819.233:1973): avc: denied { write } for pid=19968 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1007.268803][ T30] audit: type=1400 audit(1782698819.413:1974): avc: denied { write } for pid=19980 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1008.029866][ T30] audit: type=1400 audit(1782698820.173:1975): avc: denied { write } for pid=19985 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1008.182953][ T5814] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1008.291215][ T30] audit: type=1400 audit(1782698820.433:1976): avc: denied { write } for pid=20002 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1009.092010][ T5814] usb 2-1: Using ep0 maxpacket: 16 [ 1009.097331][ T30] audit: type=1400 audit(1782698821.023:1977): avc: denied { getopt } for pid=20007 comm="syz.3.3317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1009.220929][ T30] audit: type=1400 audit(1782698821.313:1978): avc: denied { write } for pid=20005 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1009.327868][ T30] audit: type=1400 audit(1782698821.423:1979): avc: denied { write } for pid=20021 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1009.583118][ T30] audit: type=1400 audit(1782698821.643:1980): avc: denied { watch } for pid=20022 comm="syz.4.3318" path="/720/file1" dev="tmpfs" ino=3914 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1009.611883][ T5343] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1009.619960][ T5343] usb 5-1: no configurations [ 1009.624632][ T5343] usb 5-1: can't read configurations, error -22 [ 1009.684829][T20033] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3319'. [ 1009.693995][ T5814] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.947433][ T5814] usb 2-1: config 0 has no interfaces? [ 1010.261788][T20033] comedi comedi1: comedi_config --init_data is deprecated [ 1010.562309][ T5814] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1010.572719][ T5814] usb 2-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 1010.580809][ T5814] usb 2-1: Manufacturer: syz [ 1010.596222][ T5814] usb 2-1: config 0 descriptor?? [ 1010.646031][ T30] audit: type=1400 audit(1782698822.713:1981): avc: denied { write } for pid=20026 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1010.711973][ T30] audit: type=1400 audit(1782698822.823:1982): avc: denied { write } for pid=20042 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1010.812415][ T5814] usb 2-1: USB disconnect, device number 126 [ 1010.943881][ T30] audit: type=1400 audit(1782698823.043:1983): avc: denied { write } for pid=20045 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1010.987366][ T30] audit: type=1400 audit(1782698823.043:1984): avc: denied { write } for pid=20056 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1011.351530][ T30] audit: type=1400 audit(1782698823.493:1985): avc: denied { write } for pid=20059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1011.443587][ T30] audit: type=1400 audit(1782698823.593:1986): avc: denied { write } for pid=20070 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1012.042944][ T5343] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1012.364361][ T5343] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1012.387785][ T5343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.418511][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1012.437653][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1012.450209][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1012.463498][ T5343] usb 4-1: Product: syz [ 1012.468299][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1012.476924][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1012.531031][ T5343] usb 4-1: Manufacturer: syz [ 1012.535646][ T5343] usb 4-1: SerialNumber: syz [ 1012.886110][T20095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3320'. [ 1013.377266][ T5343] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1013.391466][ T5343] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1013.642204][T20097] Failed to initialize the IGMP autojoin socket (err -2) [ 1014.631064][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1014.631080][ T30] audit: type=1400 audit(1782698826.743:1991): avc: denied { write } for pid=20129 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1014.687792][ T5623] Bluetooth: hci0: command tx timeout [ 1014.816722][ T30] audit: type=1400 audit(1782698826.963:1992): avc: denied { write } for pid=20143 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1014.849608][T20145] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3325'. [ 1015.574884][ T30] audit: type=1400 audit(1782698827.713:1993): avc: denied { write } for pid=20150 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1015.615970][ T5343] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1015.724222][ T5343] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1015.903696][ T30] audit: type=1400 audit(1782698828.033:1994): avc: denied { write } for pid=20165 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1015.925809][ T5343] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1015.925868][ T5343] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1015.926371][ T5343] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1015.962612][ T5343] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1016.063710][ T5343] usb 4-1: USB disconnect, device number 100 [ 1016.351683][ T30] audit: type=1400 audit(1782698828.463:1995): avc: denied { write } for pid=20168 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1016.424688][ T30] audit: type=1400 audit(1782698828.513:1996): avc: denied { write } for pid=20185 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1016.447615][T20187] FAULT_INJECTION: forcing a failure. [ 1016.447615][T20187] name failslab, interval 1, probability 0, space 0, times 0 [ 1016.460323][T20187] CPU: 0 UID: 0 PID: 20187 Comm: syz.1.3330 Tainted: G L syzkaller #0 PREEMPT(full) [ 1016.460353][T20187] Tainted: [L]=SOFTLOCKUP [ 1016.460360][T20187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1016.460371][T20187] Call Trace: [ 1016.460377][T20187] [ 1016.460385][T20187] dump_stack_lvl+0x100/0x190 [ 1016.460415][T20187] should_fail_ex.cold+0x5/0xa [ 1016.460440][T20187] should_failslab+0xc2/0x120 [ 1016.460463][T20187] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1016.460485][T20187] ? __alloc_skb+0x5b7/0x710 [ 1016.460502][T20187] ? __alloc_skb+0x140/0x710 [ 1016.460523][T20187] __alloc_skb+0x140/0x710 [ 1016.460539][T20187] ? __alloc_skb+0x5b7/0x710 [ 1016.460555][T20187] ? __pfx___alloc_skb+0x10/0x10 [ 1016.460572][T20187] ? up_write+0x2e5/0x5c0 [ 1016.460601][T20187] alloc_skb_with_frags+0xdd/0x760 [ 1016.460624][T20187] ? find_held_lock+0x2b/0x80 [ 1016.460640][T20187] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1016.460663][T20187] sock_alloc_send_pskb+0x801/0x980 [ 1016.460692][T20187] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1016.460715][T20187] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1016.460741][T20187] ? selinux_socket_getpeersec_dgram+0x1a4/0x380 [ 1016.460771][T20187] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 1016.460805][T20187] unix_stream_sendmsg+0x87f/0x1310 [ 1016.460840][T20187] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 1016.460869][T20187] ? import_ubuf+0x1b6/0x220 [ 1016.460890][T20187] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1016.460919][T20187] ? __might_fault+0x60/0x140 [ 1016.460945][T20187] ____sys_sendmsg+0xa4d/0xbe0 [ 1016.460967][T20187] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1016.460995][T20187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1016.461023][T20187] ? __pfx__kstrtoull+0x10/0x10 [ 1016.461055][T20187] ___sys_sendmsg+0x190/0x1e0 [ 1016.461082][T20187] ? __pfx____sys_sendmsg+0x10/0x10 [ 1016.461117][T20187] ? find_held_lock+0x2b/0x80 [ 1016.461149][T20187] __sys_sendmmsg+0x20c/0x440 [ 1016.461171][T20187] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1016.461189][T20187] ? ksys_write+0x190/0x250 [ 1016.461222][T20187] ? fput+0x79/0x100 [ 1016.461243][T20187] ? ksys_write+0x1ac/0x250 [ 1016.461258][T20187] ? __pfx_ksys_write+0x10/0x10 [ 1016.461288][T20187] __x64_sys_sendmmsg+0x9c/0x100 [ 1016.461306][T20187] ? lockdep_hardirqs_on+0x78/0x100 [ 1016.461332][T20187] do_syscall_64+0x115/0x870 [ 1016.461357][T20187] ? clear_bhb_loop+0x40/0x90 [ 1016.461379][T20187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.461397][T20187] RIP: 0033:0x7f35fd19ce59 [ 1016.461412][T20187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1016.461429][T20187] RSP: 002b:00007f35fe06d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1016.461447][T20187] RAX: ffffffffffffffda RBX: 00007f35fd415fa0 RCX: 00007f35fd19ce59 [ 1016.461460][T20187] RDX: 0000000000000001 RSI: 0000200000006c40 RDI: 0000000000000003 [ 1016.461470][T20187] RBP: 00007f35fe06d090 R08: 0000000000000000 R09: 0000000000000000 [ 1016.461481][T20187] R10: 0000000000040015 R11: 0000000000000246 R12: 0000000000000001 [ 1016.461491][T20187] R13: 00007f35fd416038 R14: 00007f35fd415fa0 R15: 00007ffc9e2da6b8 [ 1016.461515][T20187] [ 1016.822240][ T5623] Bluetooth: hci0: command tx timeout [ 1017.025313][T20196] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3331'. [ 1017.085516][T20181] Invalid logical block size (1275) [ 1018.217950][T20196] comedi comedi1: comedi_config --init_data is deprecated [ 1018.863900][ T5623] Bluetooth: hci0: command tx timeout [ 1018.939554][ T30] audit: type=1400 audit(1782698831.033:1997): avc: denied { write } for pid=20194 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1018.967901][ T30] audit: type=1400 audit(1782698831.083:1998): avc: denied { write } for pid=20213 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1020.032732][ T30] audit: type=1400 audit(1782698832.163:1999): avc: denied { write } for pid=20222 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1020.159860][ T30] audit: type=1400 audit(1782698832.273:2000): avc: denied { write } for pid=20233 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1020.935632][ T5611] Bluetooth: hci0: command tx timeout [ 1021.238518][T20282] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3335'. [ 1021.354776][T20285] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3335'. [ 1021.500611][T20288] comedi comedi1: comedi_config --init_data is deprecated [ 1022.046793][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1022.142724][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1022.380695][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1022.391768][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1022.401922][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1023.760687][T20097] netdevsim netdevsim0 netdevsim0: renamed from eth5 [ 1023.915033][T20303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3340'. [ 1023.923902][T20303] netlink: 312 bytes leftover after parsing attributes in process `syz.4.3340'. [ 1023.932922][T20303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3340'. [ 1023.961220][T20097] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1024.520383][T20097] netdevsim netdevsim0 netdevsim1: renamed from eth6 [ 1024.535657][T20097] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1024.552400][T20097] netdevsim netdevsim0 netdevsim2: renamed from eth7 [ 1024.568257][T20311] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1024.577606][T20097] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1024.586540][T20097] netdevsim netdevsim0 netdevsim3: renamed from eth8 [ 1024.601675][T20097] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1024.638699][ T5623] Bluetooth: hci3: command tx timeout [ 1025.660097][T20317] Bluetooth: MGMT ver 1.23 [ 1026.042841][ T5705] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1026.105610][T20294] Failed to initialize the IGMP autojoin socket (err -2) [ 1026.474816][ T5705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1026.493299][ T5705] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1026.520639][ T5705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1026.567408][ T5705] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1026.659781][T20343] Failed to initialize the IGMP autojoin socket (err -2) [ 1026.709720][ T5705] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1026.718920][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.134867][ T5705] usb 5-1: config 0 descriptor?? [ 1027.505915][T20097] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1027.546756][T20097] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1027.564364][T20097] wireguard: wg0: Could not create IPv4 socket [ 1027.572576][T20097] wireguard: wg1: Could not create IPv4 socket [ 1027.588786][T20097] wireguard: wg2: Could not create IPv4 socket [ 1027.643638][ T5705] hdpvr 5-1:0.0: firmware version 0x8 dated 5 [ 1027.881628][ T30] audit: type=1400 audit(1782698840.013:2001): avc: denied { setopt } for pid=20323 comm="syz.4.3345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1027.971481][ T5705] hdpvr 5-1:0.0: device init failed [ 1027.976804][ T5705] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 1027.995864][ T5705] usb 5-1: USB disconnect, device number 119 [ 1028.161988][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1028.178133][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1028.206808][ T5611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1028.217481][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1028.225284][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1028.302683][T11441] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1028.499437][T20402] Failed to initialize the IGMP autojoin socket (err -2) [ 1028.506707][ T30] audit: type=1400 audit(1782698840.553:2002): avc: denied { write } for pid=20405 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1028.556950][ T30] audit: type=1400 audit(1782698840.673:2003): avc: denied { write } for pid=20424 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1028.626137][T20427] fuse: Unknown parameter 'g' [ 1028.872681][T11441] usb 2-1: Using ep0 maxpacket: 16 [ 1028.882245][T11441] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 1029.002285][T11441] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.013685][ T30] audit: type=1400 audit(1782698841.143:2004): avc: denied { write } for pid=20430 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1029.101288][ T30] audit: type=1400 audit(1782698841.163:2005): avc: denied { write } for pid=20445 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1029.458982][T11441] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.485528][T20449] block device autoloading is deprecated and will be removed. [ 1029.870433][ T30] audit: type=1400 audit(1782698841.983:2006): avc: denied { write } for pid=20453 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1029.903257][T11441] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.055254][ T30] audit: type=1400 audit(1782698842.193:2007): avc: denied { write } for pid=20465 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1030.406208][T11441] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.422391][ T5623] Bluetooth: hci0: command tx timeout [ 1030.767013][T11441] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.630510][T11441] usb 2-1: unable to read config index 5 descriptor/all [ 1031.637515][T11441] usb 2-1: can't read configurations, error -71 [ 1032.494668][ T5623] Bluetooth: hci0: command tx timeout [ 1034.197765][ T30] audit: type=1400 audit(1782698846.333:2008): avc: denied { write } for pid=20470 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1034.348021][ T30] audit: type=1400 audit(1782698846.443:2009): avc: denied { write } for pid=20495 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1034.403976][ T1154] Bluetooth: (null): Invalid header checksum [ 1034.544479][ T5623] Bluetooth: hci0: command tx timeout [ 1035.139120][T20513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3357'. [ 1035.215591][ T30] audit: type=1400 audit(1782698847.363:2010): avc: denied { write } for pid=20500 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1035.363955][ T30] audit: type=1400 audit(1782698847.493:2011): avc: denied { write } for pid=20517 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1035.878616][ T30] audit: type=1400 audit(1782698847.933:2012): avc: denied { write } for pid=20522 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1035.963088][ T30] audit: type=1400 audit(1782698848.053:2013): avc: denied { write } for pid=20543 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1036.107242][T20402] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1036.139514][T20402] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1036.157269][T20402] wireguard: wg0: Could not create IPv4 socket [ 1036.165533][T20402] wireguard: wg1: Could not create IPv4 socket [ 1036.173732][T20402] wireguard: wg2: Could not create IPv4 socket [ 1036.397598][ T30] audit: type=1400 audit(1782698848.493:2014): avc: denied { write } for pid=20548 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1036.445047][ T30] audit: type=1400 audit(1782698848.493:2015): avc: denied { write } for pid=20559 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1036.738458][ T30] audit: type=1400 audit(1782698848.873:2016): avc: denied { write } for pid=20562 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1037.100767][T20582] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 1038.148414][ T30] audit: type=1400 audit(1782698850.163:2017): avc: denied { bind } for pid=20584 comm="syz.1.3362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1038.410226][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1038.425810][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1038.437066][ T5611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1038.458060][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1038.466570][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1039.741997][T20611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3367'. [ 1040.569057][ T5623] Bluetooth: hci0: command tx timeout [ 1040.865032][T20587] Failed to initialize the IGMP autojoin socket (err -2) [ 1040.969314][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1040.969329][ T30] audit: type=1400 audit(1782698853.083:2019): avc: denied { write } for pid=20603 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1041.901622][ T30] audit: type=1400 audit(1782698854.013:2020): avc: denied { write } for pid=20632 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1042.143126][ T30] audit: type=1400 audit(1782698854.233:2021): avc: denied { listen } for pid=20634 comm="syz.4.3370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1042.630476][ T5623] Bluetooth: hci0: command tx timeout [ 1042.664319][T20633] block nbd1: Cannot use ioctl interface on a netlink controlled device. [ 1043.004035][ T803] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 1043.486733][ T803] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1043.542204][ T803] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1043.569701][ T803] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1043.681081][ T803] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1043.694938][ T803] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1043.709270][ T803] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1043.717707][ T803] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1043.728402][ T803] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1043.740037][ T803] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1043.751155][ T803] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1043.811474][T20665] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3375'. [ 1043.833693][T20665] 1ªî{X¹¦: entered promiscuous mode [ 1043.839248][T20665] 1ªî{X¹¦: left allmulticast mode [ 1043.848106][ T803] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1043.863478][ T803] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1043.885890][ T803] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1043.897552][ T803] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1043.908645][ T803] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1043.923899][ T30] audit: type=1400 audit(1782698856.053:2022): avc: denied { write } for pid=20651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1043.987054][ T30] audit: type=1400 audit(1782698856.053:2023): avc: denied { write } for pid=20676 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1044.753355][ T5623] Bluetooth: hci0: command tx timeout [ 1045.176704][T20691] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3379'. [ 1045.281499][T20692] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3379'. [ 1045.299541][T20692] comedi comedi1: comedi_config --init_data is deprecated [ 1045.312694][ T803] usb 2-1: string descriptor 0 read error: -71 [ 1045.342353][ T803] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1045.396263][ T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.615477][ T803] usb 2-1: can't set config #168, error -71 [ 1045.690310][ T803] usb 2-1: USB disconnect, device number 3 [ 1045.840669][ T11] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1046.895950][ T5623] Bluetooth: hci0: command tx timeout [ 1047.037906][ T30] audit: type=1400 audit(1782698859.173:2024): avc: denied { write } for pid=20683 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1047.112359][ T11] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1047.121006][ T11] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1047.131172][ T11] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1047.140149][ T11] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1047.151184][ T11] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1047.173860][ T30] audit: type=1400 audit(1782698859.323:2025): avc: denied { write } for pid=20718 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1047.575875][ T30] audit: type=1400 audit(1782698859.723:2026): avc: denied { write } for pid=20725 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1048.006429][ T30] audit: type=1400 audit(1782698860.153:2027): avc: denied { write } for pid=20739 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1048.080593][ T11] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1048.090543][ T11] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1048.103784][ T11] usb 4-1: Product: syz [ 1048.108067][ T11] usb 4-1: Manufacturer: syz [ 1048.270777][ T11] cdc_wdm 4-1:1.0: skipping garbage [ 1048.281918][ T11] cdc_wdm 4-1:1.0: skipping garbage [ 1048.363055][ T803] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1048.468308][ T11] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1048.494651][ T11] cdc_wdm 4-1:1.0: Unknown control protocol [ 1048.559005][ T11] usb 4-1: USB disconnect, device number 101 [ 1048.567596][ T803] usb 2-1: Using ep0 maxpacket: 16 [ 1048.608848][ T803] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.669286][ T803] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1048.685334][ T803] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1048.695002][ T803] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1048.935557][ T30] audit: type=1400 audit(1782698861.083:2028): avc: denied { write } for pid=20743 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1048.991988][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1048.998903][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1049.334942][T20761] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3390'. [ 1049.354247][ T803] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 1049.372787][ T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.388969][ T803] usb 2-1: Product: syz [ 1049.394445][ T803] usb 2-1: Manufacturer: syz [ 1049.399473][ T803] usb 2-1: SerialNumber: syz [ 1049.590631][ T30] audit: type=1400 audit(1782698861.733:2029): avc: denied { write } for pid=20765 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1049.626922][T20734] netlink: 'syz.1.3386': attribute type 1 has an invalid length. [ 1049.857932][T20734] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1050.104268][T20776] netlink: 132732 bytes leftover after parsing attributes in process `syz.4.3393'. [ 1050.600719][ T30] audit: type=1400 audit(1782698862.743:2030): avc: denied { write } for pid=20778 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1050.735529][ T30] audit: type=1400 audit(1782698862.873:2031): avc: denied { write } for pid=20792 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1050.997811][ T803] usb 2-1: selecting invalid altsetting 0 [ 1051.125697][ T803] usb 2-1: USB disconnect, device number 4 [ 1051.467100][ T30] audit: type=1400 audit(1782698863.613:2032): avc: denied { write } for pid=20795 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1051.563428][ T30] audit: type=1400 audit(1782698863.703:2033): avc: denied { write } for pid=20806 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1051.698606][T20779] kexec: Could not allocate control_code_buffer [ 1053.661015][ T5611] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1053.675256][T20851] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3400'. [ 1053.680368][ T5611] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1053.693295][ T5611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1053.708768][ T5611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1053.719717][ T5611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1053.943918][T20857] netlink: 'syz.4.3402': attribute type 23 has an invalid length. [ 1053.950530][T20587] netdevsim netdevsim0 netdevsim0: renamed from eth5 [ 1054.274874][T20587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1054.363490][T20587] netdevsim netdevsim0 netdevsim1: renamed from eth6 [ 1054.441999][T20587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1054.442714][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1054.442738][ T30] audit: type=1400 audit(1782698866.563:2036): avc: denied { write } for pid=20823 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1054.449984][T20587] netdevsim netdevsim0 netdevsim2: renamed from eth7 [ 1054.610241][T20587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1054.640106][T20587] netdevsim netdevsim0 netdevsim3: renamed from eth8 [ 1054.658074][T20587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1054.734779][ T30] audit: type=1400 audit(1782698866.843:2037): avc: denied { write } for pid=20876 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1055.317376][T20848] Failed to initialize the IGMP autojoin socket (err -2) [ 1055.668485][ T30] audit: type=1400 audit(1782698867.813:2038): avc: denied { write } for pid=20886 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1055.754798][T20909] syzkaller0: entered promiscuous mode [ 1055.760300][T20909] syzkaller0: entered allmulticast mode [ 1055.953667][ T30] audit: type=1400 audit(1782698868.073:2039): avc: denied { write } for pid=20912 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1056.386650][T20587] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1056.404667][T20587] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1056.422320][T20587] wireguard: wg0: Could not create IPv4 socket [ 1056.430552][T20587] wireguard: wg1: Could not create IPv4 socket [ 1056.438941][T20587] wireguard: wg2: Could not create IPv4 socket [ 1056.519535][ T30] audit: type=1400 audit(1782698868.643:2040): avc: denied { write } for pid=20919 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1056.563735][ T30] audit: type=1400 audit(1782698868.643:2041): avc: denied { write } for pid=20934 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1056.910792][ T30] audit: type=1400 audit(1782698869.023:2042): avc: denied { write } for pid=20937 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1056.999636][ T30] audit: type=1400 audit(1782698869.093:2043): avc: denied { write } for pid=20948 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1057.123747][ T30] audit: type=1400 audit(1782698869.253:2044): avc: denied { read } for pid=20953 comm="syz.4.3410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1057.332351][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1057.352131][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1057.818114][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1057.831662][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1057.848867][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1058.363162][T20963] Failed to initialize the IGMP autojoin socket (err -2) [ 1163.670560][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1163.677537][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P20984/1:b..l [ 1163.686114][ C0] rcu: (detected by 0, t=10523 jiffies, g=121149, q=232 ncpus=2) [ 1163.693927][ C0] task:modprobe state:R running task stack:24872 pid:20984 tgid:20984 ppid:16854 task_flags:0x400000 flags:0x00080000 [ 1163.708207][ C0] Call Trace: [ 1163.711487][ C0] [ 1163.714411][ C0] __schedule+0x125c/0x6730 [ 1163.718919][ C0] ? kasan_save_stack+0x3f/0x50 [ 1163.723762][ C0] ? kasan_save_stack+0x30/0x50 [ 1163.728606][ C0] ? kasan_save_track+0x14/0x30 [ 1163.733469][ C0] ? __pfx___schedule+0x10/0x10 [ 1163.738318][ C0] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 1163.744381][ C0] preempt_schedule_notrace+0x5f/0xd0 [ 1163.749749][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 1163.755636][ C0] ? __d_lookup_rcu+0x2e3/0x500 [ 1163.760486][ C0] rcu_is_watching+0x8e/0xc0 [ 1163.765078][ C0] rcu_read_lock_held+0x1e/0x50 [ 1163.769936][ C0] __d_lookup_rcu+0x2f5/0x500 [ 1163.774616][ C0] lookup_fast+0x90/0x600 [ 1163.778945][ C0] link_path_walk+0x7d4/0x1cc0 [ 1163.783717][ C0] path_openat+0x1c9/0x4280 [ 1163.788210][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 1163.793227][ C0] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 1163.798849][ C0] ? do_getname+0x35/0x390 [ 1163.803259][ C0] ? __x64_sys_openat+0x12d/0x210 [ 1163.808283][ C0] ? rcu_is_watching+0x12/0xc0 [ 1163.813043][ C0] ? __pfx_path_openat+0x10/0x10 [ 1163.817967][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1163.823174][ C0] ? irqentry_exit+0x24d/0xa00 [ 1163.827939][ C0] do_file_open+0x20e/0x430 [ 1163.832437][ C0] ? __pfx_do_file_open+0x10/0x10 [ 1163.837474][ C0] ? alloc_fd+0x471/0x7a0 [ 1163.841799][ C0] ? do_getname+0x191/0x390 [ 1163.846299][ C0] do_sys_openat2+0x10f/0x1e0 [ 1163.850986][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 1163.856177][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1163.861465][ C0] __x64_sys_openat+0x12d/0x210 [ 1163.866308][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 1163.871685][ C0] do_syscall_64+0x115/0x870 [ 1163.876269][ C0] ? clear_bhb_loop+0x40/0x90 [ 1163.880940][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.886823][ C0] RIP: 0033:0x7fdf78bd70ba [ 1163.891226][ C0] RSP: 002b:00007fff7552b408 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 1163.899631][ C0] RAX: ffffffffffffffda RBX: 00007fff7552b480 RCX: 00007fdf78bd70ba [ 1163.907590][ C0] RDX: 0000000000080000 RSI: 00007fff7552b480 RDI: 00000000ffffff9c [ 1163.915548][ C0] RBP: 00007fff7552b470 R08: 00007fff7552b677 R09: 0000000000000000 [ 1163.923509][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000001b [ 1163.931467][ C0] R13: 00007fdf78bab050 R14: 00007fff7552b690 R15: 0000000000000000 [ 1163.939443][ C0] [ 1163.942450][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10522 jiffies! g121149 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1163.954843][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=60607 [ 1163.962711][ C0] rcu: rcu_preempt kthread starved for 10523 jiffies! g121149 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1163.974149][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1163.984109][ C0] rcu: RCU grace-period kthread stack dump: [ 1163.989979][ C0] task:rcu_preempt state:I stack:28680 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1164.001890][ C0] Call Trace: [ 1164.005171][ C0] [ 1164.008094][ C0] __schedule+0x125c/0x6730 [ 1164.012606][ C0] ? __pfx___schedule+0x10/0x10 [ 1164.017466][ C0] ? find_held_lock+0x2b/0x80 [ 1164.022131][ C0] ? schedule+0x225/0x2c0 [ 1164.026460][ C0] schedule+0xdd/0x2c0 [ 1164.030522][ C0] schedule_timeout+0x127/0x280 [ 1164.035367][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1164.040730][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1164.046009][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1164.051809][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1164.057266][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 1164.062024][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1164.067304][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1164.072236][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1164.077423][ C0] ? rcu_is_watching+0x12/0xc0 [ 1164.082184][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1164.087988][ C0] rcu_gp_kthread+0x179/0x230 [ 1164.092659][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1164.097846][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1164.103648][ C0] ? __kthread_parkme+0x18c/0x230 [ 1164.108672][ C0] ? kthread+0x13a/0x450 [ 1164.112900][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1164.118087][ C0] kthread+0x370/0x450 [ 1164.122143][ C0] ? __pfx_kthread+0x10/0x10 [ 1164.126724][ C0] ret_from_fork+0x72b/0xd50 [ 1164.131310][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1164.136417][ C0] ? __switch_to+0x800/0x10f0 [ 1164.141086][ C0] ? __pfx_kthread+0x10/0x10 [ 1164.145671][ C0] ret_from_fork_asm+0x1a/0x30 [ 1164.150435][ C0] [ 1164.153439][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1164.159741][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1164.164934][ C1] NMI backtrace for cpu 1 [ 1164.164948][ C1] CPU: 1 UID: 0 PID: 20970 Comm: syz.4.3410 Tainted: G L syzkaller #0 PREEMPT(full) [ 1164.164968][ C1] Tainted: [L]=SOFTLOCKUP [ 1164.164973][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1164.164981][ C1] RIP: 0010:__netif_schedule+0x54/0x70 [ 1164.165000][ C1] Code: 2f 48 8b 83 08 02 00 00 48 85 c0 74 0b e8 94 e1 9a f8 5b e9 ce 72 31 02 e8 89 e1 9a f8 48 89 df e8 b1 fc ff ff e8 7c e1 9a f8 <5b> c3 cc cc cc cc e8 91 54 0b f9 eb ca 66 66 2e 0f 1f 84 00 00 00 [ 1164.165012][ C1] RSP: 0000:ffffc90000a08dd8 EFLAGS: 00000046 [ 1164.165024][ C1] RAX: 0000000080010003 RBX: ffff8880316ac000 RCX: ffffffff896e9b86 [ 1164.165033][ C1] RDX: ffff88802880a540 RSI: ffffffff896e9ea4 RDI: ffff88802880a540 [ 1164.165043][ C1] RBP: ffff888054852000 R08: 0000000000000001 R09: 0000000000000000 [ 1164.165051][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 1164.165060][ C1] R13: 18bd6cbeeb85999f R14: ffff88803c8fb800 R15: ffff88803c8fb800 [ 1164.165074][ C1] FS: 00007f1c1719e6c0(0000) GS:ffff8881241e0000(0000) knlGS:0000000000000000 [ 1164.165089][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1164.165098][ C1] CR2: 00005555720664e8 CR3: 000000003e195000 CR4: 00000000003526f0 [ 1164.165107][ C1] Call Trace: [ 1164.165113][ C1] [ 1164.165118][ C1] advance_sched+0x740/0xd20 [ 1164.165136][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 1164.165156][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1164.165170][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 1164.165194][ C1] hrtimer_interrupt+0x3e5/0x940 [ 1164.165212][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 1164.165234][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1164.165253][ C1] [ 1164.165258][ C1] [ 1164.165263][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1164.165279][ C1] RIP: 0010:lock_acquire+0x5e/0x370 [ 1164.165295][ C1] Code: 05 bb ef 4e 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 06 a2 16 0f 0f 82 ac 02 00 00 8b 35 ce d5 16 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 5d ef 4e 12 0f 85 ec 02 00 00 48 83 c4 [ 1164.165308][ C1] RSP: 0000:ffffc90004ab73d8 EFLAGS: 00000206 [ 1164.165319][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 1164.165328][ C1] RDX: 0000000000000000 RSI: ffffffff8e137c0e RDI: ffffffff8c3e9b80 [ 1164.165337][ C1] RBP: ffffffff8e9e6000 R08: 000000002c4e968d R09: 000000000000001e [ 1164.165346][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 1164.165354][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1164.165369][ C1] ? page_table_check_set+0x477/0x920 [ 1164.165385][ C1] ? page_table_check_set+0x477/0x920 [ 1164.165403][ C1] page_table_check_set+0x6b/0x920 [ 1164.165419][ C1] ? page_table_check_set+0x4f/0x920 [ 1164.165436][ C1] __page_table_check_ptes_set+0x27a/0x4e0 [ 1164.165453][ C1] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 1164.165471][ C1] ? copy_page_range+0x12c3/0x5b20 [ 1164.165493][ C1] copy_page_range+0x2197/0x5b20 [ 1164.165523][ C1] ? mas_wr_store_entry+0xa1/0x1e80 [ 1164.165539][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 1164.165562][ C1] ? __pfx___might_resched+0x10/0x10 [ 1164.165580][ C1] ? dup_mmap+0xcfe/0x21b0 [ 1164.165598][ C1] ? down_write+0x146/0x1f0 [ 1164.165611][ C1] ? up_write+0x2e5/0x5c0 [ 1164.165630][ C1] dup_mmap+0xd44/0x21b0 [ 1164.165652][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 1164.165669][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1164.165688][ C1] ? __lock_acquire+0x49f/0x1a40 [ 1164.165705][ C1] ? find_held_lock+0x2b/0x80 [ 1164.165717][ C1] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 1164.165742][ C1] copy_process+0x4588/0x8030 [ 1164.165766][ C1] ? __pfx_copy_process+0x10/0x10 [ 1164.165784][ C1] ? futex_wake+0x4ea/0x5e0 [ 1164.165802][ C1] kernel_clone+0x176/0x9d0 [ 1164.165821][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1164.165844][ C1] __do_sys_clone+0xd9/0x120 [ 1164.165862][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 1164.165880][ C1] ? find_held_lock+0x2b/0x80 [ 1164.165901][ C1] do_syscall_64+0x115/0x870 [ 1164.165920][ C1] ? clear_bhb_loop+0x40/0x90 [ 1164.165935][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.165949][ C1] RIP: 0033:0x7f1c1639ce59 [ 1164.165961][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1164.165973][ C1] RSP: 002b:00007f1c1719dfd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1164.165985][ C1] RAX: ffffffffffffffda RBX: 00007f1c16616180 RCX: 00007f1c1639ce59 [ 1164.165994][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1164.166002][ C1] RBP: 00007f1c16432e6f R08: 0000000000000000 R09: 0000000000000000 [ 1164.166010][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1164.166018][ C1] R13: 00007f1c16616218 R14: 00007f1c16616180 R15: 00007ffebc3f5c98 [ 1164.166033][ C1]