last executing test programs: 31.879843512s ago: executing program 2 (id=1038): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=0x0) move_pages(r0, 0x2, &(0x7f00000002c0)=[&(0x7f0000090000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000380)=[0x7ff, 0xff, 0x86e, 0x2, 0x0, 0x9, 0x15], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001a80)="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", 0x2000, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32, @ANYBLOB="8700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r5, 0x0, &(0x7f0000001780)=""/4096}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000004000000e27f01000100000001000000", @ANYRES32, @ANYBLOB="839280010000008002705da61c68b45657dba1162b5c5b9c94", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r6, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000400000006000005580a0895bb48a200181100000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33e9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x106, 0x6}}, 0x20) timer_create(0xb, 0x0, &(0x7f0000000380)=0x0) timer_settime(r9, 0x0, &(0x7f00000002c0)={{}, {0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) r10 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r10, 0xc2604111, &(0x7f0000000c00)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0xd6, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r10, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r10, 0x4142, 0x0) 29.66835224s ago: executing program 2 (id=1046): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e", @ANYRESHEX=0x0], 0x0, 0x4d, 0x0, 0x0, 0xfff80000}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1, 0x0, 0x2}, 0x50) r2 = syz_io_uring_setup(0x4bf7, &(0x7f0000000080)={0x0, 0x961e, 0x800, 0x3, 0x28}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000001c0)=[r1, r1, r1, r1, r1], 0x5) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r1, 0x0, 0x0}, 0x10) 29.508552458s ago: executing program 2 (id=1048): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000300)={0x0, 'veth0_vlan\x00', {0x2}, 0x1}) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2, 0xffffffffffffffff}, 0x4) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000005000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x8, &(0x7f0000000980)="000000000065c6667d3723f691d8", &(0x7f0000000600)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000b0601040000000000000000070000081400078008000b4000000008da0007005c0000007000082833c1c28fb700a2dce4d4798018000780140017006261746164765f736c6176655f3000000c00078008ca0a4000000008100007800c001b40000000000000004f0c000780caf41d4200050000100007800c001680080001407f0000010c000780080008400000001010000780"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000010101010000000000000000020000002400018014000180080001006401010008000200000000000c00028005000100010000000c001980080001000d", @ANYRES16=r0, @ANYRESOCT=r3, @ANYBLOB="f964aa69311bb0cf9c0871d9f2144ebc537e00f81ac04afab7a09be60e5fd91cc22350bfc7a70e4a11e4811b35d679f4d3fb26fc63595fea4dbd9c557506beae20107e4e4b94cff70a72e74a2be832c10f789abc49d74e0f3bb0e463db1e6bcd3c63306a9ab871bc1ea366b2198c869880324ad63850883cfa85a9ccb834d8fcd5d3062e6593f42d3f9f74a2fc30843df93aeb0f97ce39d57c6a40bf092160eb6e216bcb10672b5c2924"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) (async) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) (async, rerun: 32) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (rerun: 32) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) (async, rerun: 32) ioctl$VIDIOC_ENCODER_CMD(r6, 0xc028564d, &(0x7f0000000040)={0x0, 0x0, [0x10001, 0x8, 0x9, 0x4, 0x80, 0x1000, 0x4, 0x1]}) (rerun: 32) 29.415873378s ago: executing program 2 (id=1049): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x80010000, 0x2, 0xff}, 0x50) 29.322933475s ago: executing program 2 (id=1051): r0 = socket(0x10, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='debugfs\x00', &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mmap(&(0x7f0000800000/0x200000)=nil, 0x200000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000800000/0x200000)=nil, 0x200000, 0xe) (async) read(r2, &(0x7f0000800000), 0x200000) (async) madvise(&(0x7f0000800000/0x200000)=nil, 0x200000, 0x19) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) write(r1, &(0x7f0000000600)='3,0x7f0000800000,0x7f0000a00000,0,-1\x00', 0x24) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_START(r5, 0x5402) (async) r6 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, 0x0, 0x0, r4) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0xa) (async) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r8, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) (async) fchdir(r7) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002", 0x29}], 0x1}, 0x404c080) 29.14190958s ago: executing program 2 (id=1052): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000004000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000050020c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 12.807634544s ago: executing program 32 (id=1052): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000004000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000050020c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 9.4781832s ago: executing program 1 (id=1108): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r2, 0x5, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_id={0x72, 0x6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c041}, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x2, 0x0, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, 0x0) r10 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='&\x00', 0xfffffffffffffff9) syz_usb_connect(0x5, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030908000009058d67c8002a000009050502000000000009058b6eec"], 0x0) fstat(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x400, 0x100, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r10, r11, r12) r13 = dup(r9) ioctl$FIONREAD(r13, 0x541b, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 9.309188686s ago: executing program 3 (id=1109): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 9.16765739s ago: executing program 3 (id=1111): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0xffffff36, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x80000000, 0x0) ptrace(0x10, r0) r1 = syz_pidfd_open(r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0xa000000c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10) r4 = open$dir(&(0x7f0000000100)='.\x02\x00', 0x80080, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) openat(r4, &(0x7f0000000580)='./bus\x00', 0x82841, 0x8) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file1\x00', 0x0) 8.335993575s ago: executing program 0 (id=1114): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000002c0)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r1, 0x0, 0x5003) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x2f7036e9}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x50}}, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3) unshare(0x68040000) 8.146062703s ago: executing program 3 (id=1115): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x9, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x4, 0x5}) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x80001, 0x8c) symlinkat(&(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00') (async) read(r1, &(0x7f0000000140)=""/116, 0x74) (async) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000300)=@v3={0x3000000, [{0x0, 0x8fdf}, {0x9, 0x7f0b}], r2}, 0x18, 0x1) (async) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000003c0), 0x3a1000, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r4, 0xf517, 0x0) ioctl$VIDIOC_S_TUNER(r5, 0x4054561e, &(0x7f0000000400)={0x1ff, "906e74a7fce4d5c12f377b5aa309e12f6dbbd9a381332e0cfa1bb028aeaeeb4c", 0x4, 0x1, 0x2, 0x4, 0x1, 0x3, 0x2, 0x9a2}) (async) r6 = syz_open_dev$evdev(&(0x7f0000000480), 0x0, 0x400200) ioctl$FS_IOC_SETVERSION(r6, 0x40087602, &(0x7f00000004c0)=0xfffffffffffffff7) umount2(&(0x7f0000000500)='./file0\x00', 0x2) lsetxattr$security_capability(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), &(0x7f00000005c0)=@v2={0x2000000, [{0x5, 0x2}, {0x4, 0xce2e}]}, 0x14, 0x2) setxattr$incfs_id(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640), &(0x7f0000000680)={'0000000000000000000000000000000', 0x33}, 0x20, 0x1) (async) ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0206416, &(0x7f00000006c0)={0xfd1, 0xfffffffb, 0xd0000000, 0x7fff, 0x4, 0x7}) (async) sendmsg$nl_generic(r5, &(0x7f0000000ac0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000740)={0x314, 0x1e, 0x800, 0x70bd2c, 0x25dfdbff, {0x9}, [@typed={0xc, 0x13a, 0x0, 0x0, @u64=0x5}, @nested={0x163, 0xb2, 0x0, 0x1, [@generic="95c9ec21ffaae862ae739c9ffe2fe2913fd9cd955f7daa475c9afc5354c2632c6fb1e7808d8edcb46cb3b7a80ed43be3e2ae14aeab6874d4884523e4a09b8f6bf3893db73c94025942cbd9be8a01a5bd64f90d67be3e64745a0d36114e710eff12d378802ec640de0c81d8896bd77e9c3d99582d1147453072151f850d7704dfa6bcdf5b5fd690c69f91f30b878be88f18723ed54f1cc50308d45246f10856c4", @typed={0x34, 0x116, 0x0, 0x0, @binary="2db629d254ff7bf671fa385b64adc7fbfe55815b2649d5ab33efe6c8b2c2273a9ea20400b54721f8ce3925abec34141d"}, @generic="91776254b8080e0f13d9d383e378d5b71a85d17e64edcba19157109db0575811da54f1694f9cd35974ec91ca8cfcffee68d98473c1e0a2546e9a2ca72c40fe1e375d3e5e03d425a72c315c2b8bcf1c063551e0543b66315de79abfb1c4befcea92cdfbbcc808a6f5c98511d506644a4a8508d214b22f40fbc7b70f95d72024528f3885", @nested={0x4, 0x3e}, @nested={0x4, 0x150}]}, @nested={0xe3, 0xfb, 0x0, 0x1, [@generic="8f90bdcbda54e7e5dfec37cddcb41b8347bd89fe6cd25388b7c9e97b6222d2b7e6c0f5c2784a22013f956853057b03834b", @generic="572b14433b7cff98267e5da5d8a2f64bb775d9c8711be3ff172841ee8e391f273f9d51bd96c2861a341041d9e112fafa204604f9da20415b7ca5f8f2da1648022058111369e7b0ad1a13eac75d4cc0e20f074115162c0a7bbca49cc8b2ce50398e0eb252b01442e047089486d444a400f37b8b3b25846c6633434e8bd85a07e0c681b26741dd0eb2056ea4f3fa38412f6f0b6a913c8b3d8f34dd2c572b77d0fe0704e014722a", @typed={0x8, 0xe1, 0x0, 0x0, @ipv4=@loopback}]}, @generic="e598170c0c7b1e9d309c794efd33247e3ccad4782177d1aa8491e7f12b63161707a5d560547430585b454870229729cbcf36f7e65c05478ba329374c951f8828dfd77ddfeef80e66d0775df67ac0c42e94e387855cd4e73625f468ae9c688e47de56f173c55eb06e4f961b96a8cd7aba90dec7d2e29ac1ab0fcfb6c4fc6b12a3df3718152c27040250e5918fd499fcc416fa9e292090401a5720d30884631f0b12c8dbe5c6b2cd1c09"]}, 0x314}, 0x1, 0x0, 0x0, 0x4040800}, 0x20000005) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x88, 0x1403, 0x100, 0x70bd28, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x94, 0x1, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_FLAGS={0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfb1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x40094) (async) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000e00)={0x2, 0x9, 0x3, 0x0, 0x3}) (async) close(r5) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000e40)='net/udplite6\x00') io_uring_setup(0x6999, &(0x7f0000000e80)={0x0, 0xc450, 0x10000, 0x3, 0xfa, 0x0, r7}) (async) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000f00)=0x8) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r7, 0x6612) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000f40), 0x2, 0x0) read$FUSE(r8, &(0x7f0000000f80)={0x2020}, 0x2020) (async) pivot_root(&(0x7f0000002fc0)='./file0\x00', &(0x7f0000003000)='./file0\x00') 7.766587446s ago: executing program 3 (id=1116): socket$inet_tcp(0x2, 0x1, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, 0x0, 0x0) mlockall(0x2) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183042, 0x20) write$P9_RSETATTR(r2, &(0x7f0000000080)={0x7, 0x1b, 0x2}, 0x7) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x1bd, @empty}, 0x10) listen(r3, 0xa) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='source=//127.0.0.1/share,user=root,pass=root,port=445,vers=3.0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = accept(r3, 0x0, 0x0) write(r4, &(0x7f0000000500)="00000080fe534d4240000000000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100000300000000000000000000000000000000000000000000000010000000100000001000"/124, 0x7c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xffffffffffffffff}]}, 0x1c}}, 0x0) 7.056631487s ago: executing program 1 (id=1117): socket$inet_tcp(0x2, 0x1, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, 0x0, 0x0) mlockall(0x2) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183042, 0x20) write$P9_RSETATTR(r2, &(0x7f0000000080)={0x7, 0x1b, 0x2}, 0x7) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x1bd, @empty}, 0x10) listen(r3, 0xa) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='source=//127.0.0.1/share,user=root,pass=root,port=445,vers=3.0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = accept(r3, 0x0, 0x0) write(r4, &(0x7f0000000500)="00000080fe534d4240000000000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100000300000000000000000000000000000000000000000000000010000000100000001000"/124, 0x7c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xffffffffffffffff}]}, 0x1c}}, 0x0) 6.168793393s ago: executing program 0 (id=1118): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) lstat(&(0x7f0000002d00)='./file0\x00', 0x0) getresgid(0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000980)={0x2, @pix_mp={0x2, 0x80000001, 0x31364d4e, 0x4, 0x1, [{0xb, 0x3}, {0x4, 0x4}, {0x9, 0x4a}, {0xf194, 0x2d5b440a}, {0x1, 0x4}, {0x9, 0x6}, {0x1ff, 0xbfdc}, {0x40, 0x81}], 0x8, 0x7, 0x7, 0x2}}) 4.211991881s ago: executing program 4 (id=1120): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8000) openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000b80)={0x1, 0x0, @ioapic={0x54000, 0x4, 0x8, 0x9, 0x0, [{0x1e, 0x5, 0x8, '\x00', 0x2}, {0x0, 0x59, 0x29, '\x00', 0xef}, {0x6, 0xd, 0x1b, '\x00', 0x4}, {0x3, 0x9, 0x10, '\x00', 0xb8}, {0x2, 0x8, 0x9, '\x00', 0x5}, {0x5, 0xe9, 0x9, '\x00', 0x51}, {0x8e, 0x8, 0xff, '\x00', 0x7}, {0x9, 0x7, 0x9, '\x00', 0x5}, {0x2, 0x5, 0x2, '\x00', 0x6}, {0x6, 0x0, 0x1, '\x00', 0x6}, {0x6, 0x7, 0x4, '\x00', 0x8}, {0x7, 0x0, 0x80, '\x00', 0x6}, {0x40, 0x7, 0x1, '\x00', 0xf}, {0x0, 0x5, 0x3, '\x00', 0xa}, {0x3, 0x8, 0xf, '\x00', 0x6}, {0x2, 0x8, 0x81, '\x00', 0x9}, {0x0, 0x4, 0xa, '\x00', 0x1}, {0x3, 0x1, 0x5, '\x00', 0xb}, {0x6, 0x2, 0x0, '\x00', 0x7}, {0x7, 0x5, 0x9f, '\x00', 0x5}, {0x1c, 0x2, 0xdd}, {0x1, 0x0, 0x3, '\x00', 0x62}, {0x6, 0xfb, 0x3c, '\x00', 0xa3}, {0x7, 0x6, 0x7, '\x00', 0xf4}]}}) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x14, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf7}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x80000001, 0x8, 0x8, 0x8, 0x0, 0x45], 0x26000, 0x3c0251}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000240)="782eb475d1cc2b494a3c6c31ee22846ee3bdf08cb7e15d1e294d326c4e2519fef64768a5f35fb12c6aa22d5a55359df9b2e2f761b1319fdb80ee884efcb355274346cdb696d6a651ccd72c0d98172c7e"}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000040)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f00000009c0)=ANY=[], 0xffffffffffffffe9) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.299666041s ago: executing program 0 (id=1121): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800280, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffc33) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) write$tun(r3, &(0x7f0000001ac0)=ANY=[], 0xfca) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000080)={r7, 0x8}, &(0x7f00000000c0)=0x8) sendmmsg$inet_sctp(r6, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="200000000000000084000000e4ffffff05000802ff00000008000000", @ANYRES32=r8], 0x20, 0x4c004}], 0x1, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000340)={r7, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000400)=0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000100)=0x7, 0x4) socket(0xa, 0x3, 0x3a) 3.187195408s ago: executing program 4 (id=1122): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000080000000000000000000000850000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) 3.049674619s ago: executing program 0 (id=1123): setxattr$incfs_metadata(0x0, 0x0, &(0x7f00000031c0), 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000023c0)=ANY=[@ANYBLOB="1400000001090101"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0xc854) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) accept(r7, 0x0, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="e5", 0x1}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1200000014000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000096a1e1ac21986f40a39df35e"], 0x50) 2.940153866s ago: executing program 3 (id=1124): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0xffffff36, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x80000000, 0x0) ptrace(0x10, r0) r1 = syz_pidfd_open(r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0xa000000c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10) r4 = open$dir(&(0x7f0000000100)='.\x02\x00', 0x80080, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) openat(r4, &(0x7f0000000580)='./bus\x00', 0x82841, 0x8) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file1\x00', 0x0) 2.879889958s ago: executing program 4 (id=1125): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x3, 0x6, @local}, 0x10) close(0x3) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x0, 0x6}) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e23, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}}, 0x0, 0x0, 0x4f, 0x0, "3e4641f3cce9866040f8cb5c3e0ab71972958a84663af93d3c2eb62e424b5be5390875d92be4947a277f4d830f65459a4ca20bddc220b47f0647cd8b5989b758bc6d65fa511e8d1833f9496a0c8de6e9"}, 0xd8) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x83, 0x0, "a30b3b28af4d2f246a01a845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a0000c6df82b800"}, 0xd8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r5, 0xe4776000) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0xc, @loopback, 0x400}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754bab1cb61212bb07a2bd205f00f81bef965a071f0d1aadd97b9640d9a0cd9ea71a5e9aec7f03d4406a7710c42cb5e754b089928abcd7589d209bc45b4064028eb7fafaa8b125736e00"}, 0xd8) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x3e25}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x0) setrlimit(0x1, &(0x7f0000000180)={0x8001, 0x3ff}) 2.787758396s ago: executing program 5 (id=1095): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000007910900000000000c3000000000100009500000000000000a45c8b106d45385a1964b904e462de529745a4cd61a7a0d25ddfd38b8b9a36c14ae1ee5ae29051b28b53a4182deb5ae03bc2644f3f168925abb901765f30c1d039e73af80f39ba982e44fe40c17211db9c82e6da61712f41775115599d65c29cfcd0bffd10d2c62aebfbf41dd375c71938ddfaa1df3117a99ecbddbfee7f7abeba22c29a9cb001001079a87ed58d2cbaf30b8fc3b5fd11e6ca750a6dc5dba2cd1d9fed1fb63bafef7d7bdd5bad81e40379623de9000000000054395605"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1002, 0x40000000, 0x0, 0x7}, 0x10) write(r0, &(0x7f0000000180)="20000000129e5f0214f9f4070000fbe40a0000000000", 0x41d) 2.606483353s ago: executing program 5 (id=1126): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x2c, [{{0x9, 0x2, 0x48}}]}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_disconnect(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000500)={r3}, &(0x7f0000000600)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f00000013c0)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) syz_usb_connect$rtl8150(0x6, 0xfffffffffffffe9f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2680, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f0000000100)=0x1b) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, &(0x7f00000007c0)=ANY=[]) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6bb74189000003c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x37}], 0x1, 0x55, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001f80)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10, 0x0}}], 0x1, 0x4) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r10, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r12 = dup3(r11, r7, 0x0) ioctl$FIONREAD(r12, 0x541b, 0x0) 2.537267157s ago: executing program 1 (id=1127): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x8040, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x18, &(0x7f0000000100)=0x7, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) tkill(0x0, 0xb) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000009b80)={0x40000012}) read$FUSE(r5, &(0x7f0000000500)={0x2020}, 0x2020) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312000003f75132008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0xc, &(0x7f0000000280)=0xfffffffd, 0x4) 1.235540076s ago: executing program 4 (id=1128): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0xa381, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) readv(r3, &(0x7f0000000900)=[{&(0x7f0000000740)=""/196, 0xc4}], 0x1) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x8, 0x6, {0xffffffffffffffff}, {}, 0x1e55, 0x80000000}) prctl$PR_SCHED_CORE(0x3e, 0x3, r4, 0xf996a74d79c98056, &(0x7f00000001c0)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000080)={0x20, r1, 0x1, 0x0, &(0x7f0000000000)=[{}]}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f00000002c0)={0x28, 0x0, r2, 0x51, &(0x7f00000001c0)=""/81}) 998.299725ms ago: executing program 1 (id=1129): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async, rerun: 64) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (rerun: 64) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000100)='./file1\x00') (async) r0 = open(&(0x7f0000000000)='./file1\x00', 0x111002, 0x1c5) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (rerun: 32) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000140)) (async) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000006c0)=0x3) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0, 0x0, 0x7fff}]}) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 775.342664ms ago: executing program 1 (id=1130): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000440)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000840)={r1, 0x0, 0x1, [0x8000000000000000, 0x998, 0x7fffffff, 0x0, 0x646a5623], [0x8, 0x5, 0x6, 0x6, 0x9, 0x101, 0x7fffffffffffffff, 0x0, 0x7, 0xff, 0xffffffff7fffffff, 0x800, 0x7, 0x3, 0x4a, 0xffff, 0x80, 0x7, 0x5, 0x5, 0x9, 0x3, 0x7ff, 0x8, 0xfffffffffffffffc, 0x4, 0x3, 0xa9, 0x9, 0x155c, 0x7, 0xb, 0x5, 0x8, 0x4, 0xe, 0x5, 0x7, 0x29f, 0xffffffffffffffff, 0x8, 0x9, 0x101, 0x6, 0x8, 0x7, 0xfffffffffffffffc, 0x1000, 0x4, 0x8, 0x2, 0x32d57e4c, 0x81, 0x9, 0x9, 0x4449, 0x1, 0x40, 0xf2, 0xffffffffffffff80, 0x80, 0xfffffffffffffff7, 0x7, 0x7fff, 0x5, 0x8, 0x0, 0xd, 0xffffffffffffffff, 0x0, 0x64fe853a, 0x8, 0x1bd3, 0x9, 0x6, 0x8, 0x7fffffffffffffff, 0x100, 0x2, 0xfffffffffffffff7, 0x7, 0x5, 0x4, 0xff, 0x6, 0x4, 0x8, 0xfffffffffffffff8, 0x6c30, 0x6, 0x1, 0x9, 0x4, 0x1d7, 0x4, 0x0, 0x7, 0xb, 0xff, 0x0, 0x400, 0x0, 0x801, 0x1, 0x3, 0x9, 0x7ff, 0x1, 0xb10, 0x9, 0xd1cd, 0x5, 0x5, 0x8, 0x9, 0x5, 0x9, 0xf850, 0xabda7d4, 0x3, 0x7]}) signalfd4(r0, &(0x7f0000000400)={[0x3]}, 0x8, 0x800) setns(0xc9, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) recvfrom(r2, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) readv(r6, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/114, 0x72}], 0x1) write(r5, &(0x7f0000000500)="000000020104", 0x6) read(r4, &(0x7f0000000310), 0x6) sendto$inet(r2, &(0x7f0000000300), 0x22, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10) recvmsg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 715.957453ms ago: executing program 0 (id=1131): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000638477fbac141716e000030a44070403fe8000000000005e845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x700}, 0x2c) 607.836333ms ago: executing program 3 (id=1132): syz_usb_connect(0x4, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='rtl28', 0x5) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendfile(r2, r1, 0x0, 0x20fffe82) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, 0x0, 0x81) r5 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000780), &(0x7f0000000640)=0x60, 0x80000) recvmmsg(r5, &(0x7f00000016c0), 0x0, 0x2, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) syz_usb_connect$uac2(0x2, 0xd4, &(0x7f0000000280)=ANY=[@ANYBLOB="12010002000000ff9c241c934000010203010902c2000301061000080b000201ff2005090400000001012000092401020910240206020402b00908000000c402030c24030302030603027f0006090401000001022000090401010101022000092402013f0004bc030e2402018103090806a10a240202ff030f0037000a2402020400010080b209240201050e9905020905010920000a82010825010000660400090402000001022000090402010101022000092402010709080703090582094000050307082501800c0305000000000000000000"], &(0x7f0000000680)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x7, 0x93, 0xff, 0x20, 0x2}, 0x103, &(0x7f00000003c0)=ANY=[@ANYBLOB="050ff679bf774a5503010614100401900e9468d5ce4a2ea64e04d0bd81a35607100206d003000b100108b9000208000109bc100bec8c55cc00fbb3e330d031df774be7af194a755a99cd01c011aaf98d53d804aa989643d1cbb6651fae296635de4c76b214bac1a947a4b9b0d9620b65794abe2018e8f6d79c080c2cb1a7df917b5a9d578f4fac327715000fd3e568d9a6a571ebd7d4304058a185aa34ec4f185c28d8ce493cce5b8a4c434d010f733b30418d7d249fb5c3c9c9777315a733bbafd0a20dec58c4e2466e9752631cd758d74ef53645ac3caeb5f848cb8681b2637b9147bc58b84d514d516badbb5727b90a9fa1c30c44a6b60c100abb202000000f7806"], 0x4, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xf3dd0018926065f9}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x400a}}]}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r8, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f00000002c0)='bfs\x00', 0x800041, 0x0) poll(0x0, 0x0, 0xd4) landlock_restrict_self(0xffffffffffffffff, 0xc) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000001000000000800", @ANYRES64=r7], 0x24}}, 0x4000000) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) landlock_restrict_self(r6, 0xc) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.nlink\x00') r10 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r10, 0xc2604111, &(0x7f0000000c00)={0x0, [[0x4, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xffffffff, 0xd4a, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x8, 0xffffffff, 0x9, 0xffffffff], [0x400, 0x1, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x2, 0x5f420afb, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x200, 0xf4240, 0x0, 0x0, 0x1}]}) write$binfmt_script(r0, &(0x7f0000000700)={'#! ', './file0', [{0x20, 'tr.nlink\x001O\xef`\xd5\x13\xc7Q\x02\xa3\x1ey\x8b\r\x871}\xc81\x95\xb3$\x8e9\b\xe1\xc7-E\x84\x12\x93\xe1\xa1a*K`\xa1P\x93\xdbO\xf6\xa8VQ:'}], 0xa, "a6267e5bf2cae4a9"}, 0x4d) fsetxattr$trusted_overlay_opaque(r2, &(0x7f00000001c0), &(0x7f0000000240), 0x2, 0x3) 519.446631ms ago: executing program 0 (id=1133): socket$inet_tcp(0x2, 0x1, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) set_mempolicy(0x8006, &(0x7f0000000040)=0xffd, 0x5) mlockall(0x2) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183042, 0x20) write$P9_RSETATTR(r1, &(0x7f0000000080)={0x7, 0x1b, 0x2}, 0x7) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x1bd, @empty}, 0x10) listen(r2, 0xa) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='source=//127.0.0.1/share,user=root,pass=root,port=445,vers=3.0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = accept(r2, 0x0, 0x0) write(r3, &(0x7f0000000500)="00000080fe534d4240000000000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100000300000000000000000000000000000000000000000000000010000000100000001000"/124, 0x7c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xffffffffffffffff}]}, 0x1c}}, 0x0) 498.788403ms ago: executing program 1 (id=1134): r0 = syz_usb_connect(0x0, 0x4c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010000000109023a00020100c0320904000001020201000524001001052406000107058103ffff0a09040100020a00000007050202ffff0007058202"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000180)={0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x820}}}, &(0x7f0000000380)={0x34, &(0x7f00000001c0)={0x20, 0x15, 0x3a, "4389152f07e99005f70ed0947267bce1e02ec34b8e908d07440afcc88436cdae66e4c7e2c1a383100135b35340209d70ffe59abbad82e02737f4"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x9f}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000280)={0x20, 0x0, 0x6a, {0x68, "f93581c6b2c3513d13f78141845bde307684ad264fd0c6eb07cd6e037cf128ccdd77de51c5ec8dc4fc7c2faab7ea467210a00186bffedfba8e1818fa53a8cb31656665ebe88c65d57ce0edb7d621e12d3c2945f5e19929485492409e755240aedc4fd3df81f393e6"}}, &(0x7f0000000300)={0x20, 0x1, 0x1, 0xd}, &(0x7f0000000340)={0x20, 0x0, 0x1, 0xa}}) 139.64747ms ago: executing program 4 (id=1135): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="050026bd7000fbdbdf250f00000008000300", @ANYRES32, @ANYBLOB="60000e0080000000ffffffffffff080211000000080211000000000000006a00000000000064000100050308c7063c0400078c04"], 0x8c}}, 0x20000014) 0s ago: executing program 4 (id=1136): r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r0, 0x1, 0x70bd2b, 0x1000}, 0x14}}, 0x4000049) prlimit64(0x0, 0xf, &(0x7f0000000380)={0x1800b, 0x4000000100889}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x2, 0x6, 0x201, 0x6000000, 0x0, {0x7}}, 0x14}}, 0x850) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r5, &(0x7f0000000200), &(0x7f0000000100)=""/228}, 0x60) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r6) kernel console output (not intermixed with test programs): ot:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 238.659357][ T189] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 239.430248][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 239.430264][ T30] audit: type=1400 audit(1787692278.548:860): avc: denied { read } for pid=8031 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1806 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 239.485473][ T30] audit: type=1400 audit(1787692278.576:861): avc: denied { open } for pid=8031 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1806 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 239.664859][ T30] audit: type=1400 audit(1787692278.761:862): avc: denied { read } for pid=8038 comm="syz.4.608" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 239.759220][ T30] audit: type=1400 audit(1787692278.761:863): avc: denied { open } for pid=8038 comm="syz.4.608" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 239.921075][ T30] audit: type=1400 audit(1787692278.779:864): avc: denied { read } for pid=8038 comm="syz.4.608" dev="nsfs" ino=4026532941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 240.637983][ T30] audit: type=1400 audit(1787692278.779:865): avc: denied { open } for pid=8038 comm="syz.4.608" path="net:[4026532941]" dev="nsfs" ino=4026532941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 240.675955][ T30] audit: type=1400 audit(1787692278.779:866): avc: denied { create } for pid=8038 comm="syz.4.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 240.705869][ T30] audit: type=1400 audit(1787692278.834:867): avc: denied { write } for pid=8016 comm="syz.2.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 240.802337][ T30] audit: type=1400 audit(1787692278.834:868): avc: denied { read } for pid=8016 comm="syz.2.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 240.873268][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.611'. [ 240.901657][ T30] audit: type=1400 audit(1787692278.954:869): avc: denied { map_create } for pid=8038 comm="syz.4.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 241.238703][ T8042] capability: warning: `syz.3.609' uses deprecated v2 capabilities in a way that may be insecure [ 243.107714][ T8104] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 243.139760][ T5796] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 243.386418][ T5796] usb 2-1: Using ep0 maxpacket: 16 [ 243.449850][ T5796] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 243.486750][ T5796] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 243.525957][ T5796] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.656598][ T5796] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.668666][ T5796] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.680462][ T5796] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.692389][ T5796] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.835767][ T8116] xt_policy: output policy not valid in PREROUTING and INPUT [ 244.327128][ T189] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 244.696377][ T189] usb 5-1: Using ep0 maxpacket: 16 [ 244.834590][ T5796] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.845810][ T5796] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.857705][ T189] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 244.857970][ T5796] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.878333][ T5796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 244.886549][ T5796] usb 2-1: SerialNumber: syz [ 244.887778][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 244.887790][ T30] audit: type=1400 audit(1787692283.580:912): avc: denied { allowed } for pid=8119 comm="syz.2.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 244.893394][ T5796] usb 2-1: config 0 descriptor?? [ 244.959610][ T189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.970786][ T30] audit: type=1400 audit(1787692283.654:913): avc: denied { read write } for pid=8119 comm="syz.2.623" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 245.015724][ T5796] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input14 [ 245.017518][ T189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.026027][ T8123] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 245.071834][ T30] audit: type=1400 audit(1787692283.654:914): avc: denied { open } for pid=8119 comm="syz.2.623" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 245.102446][ T189] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 245.170926][ T189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.196097][ T30] audit: type=1400 audit(1787692283.746:915): avc: denied { mounton } for pid=8119 comm="syz.2.623" path="/126/file0" dev="tmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 245.238722][ T189] usb 5-1: config 0 descriptor?? [ 245.289319][ T30] audit: type=1400 audit(1787692283.755:916): avc: denied { mount } for pid=8119 comm="syz.2.623" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 245.381429][ T30] audit: type=1400 audit(1787692283.764:917): avc: denied { read } for pid=4948 comm="acpid" name="mouse1" dev="devtmpfs" ino=2955 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 245.472528][ T5780] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 245.477152][ T8098] input: syz1 as /devices/virtual/input/input15 [ 245.504937][ T30] audit: type=1400 audit(1787692283.764:918): avc: denied { open } for pid=4948 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2955 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 245.563758][ T30] audit: type=1400 audit(1787692283.829:919): avc: denied { setopt } for pid=8126 comm="syz.3.625" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 245.645266][ T5780] usb 4-1: Using ep0 maxpacket: 16 [ 245.651915][ T30] audit: type=1400 audit(1787692283.838:920): avc: denied { mmap_zero } for pid=8126 comm="syz.3.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 245.656754][ T5780] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 245.728354][ T30] audit: type=1400 audit(1787692283.977:921): avc: denied { write } for pid=8102 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.767374][ T8113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.813240][ T5780] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.856200][ T8113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.874364][ T5780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.906071][ T5780] usb 4-1: config 0 descriptor?? [ 246.141626][ T8113] xt_HMARK: spi-set and port-set can't be combined [ 246.395258][ T5780] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 246.424524][ T5780] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 246.433802][ T5780] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 246.452236][ T5780] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 246.465079][ T5780] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 246.486282][ T5780] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 246.589234][ C0] usb 4-1: input irq status -75 received [ 246.929220][ T189] usbhid 5-1:0.0: can't add hid device: -71 [ 246.947156][ T8153] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 246.996483][ T189] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 247.026196][ T189] usb 5-1: USB disconnect, device number 22 [ 247.127713][ T5796] usb 2-1: USB disconnect, device number 18 [ 247.138301][ T8154] X.509: Couldn't decode AuthKeyIdentifier [ 247.141081][ T4948] bcm5974 2-1:0.0: could not read from device [ 247.204315][ T5613] bcm5974 2-1:0.0: could not read from device [ 247.761673][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.629'. [ 248.351381][ T5796] usb 4-1: USB disconnect, device number 19 [ 249.199411][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 249.383004][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 249.404086][ T5796] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 249.412827][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.431451][ T9] usb 2-1: config 0 descriptor?? [ 249.453185][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 249.602374][ T5796] usb 4-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 249.634538][ T5796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.684037][ T5796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.896943][ T5796] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 250.037026][ T5796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.090518][ T5796] usb 4-1: config 0 descriptor?? [ 250.184958][ T8239] CIFS: Attempting to mount //127.0.0.1/share [ 250.211871][ T8239] CIFS: VFS: Error connecting to socket. Aborting operation. [ 250.246209][ T8239] CIFS: VFS: cifs_mount failed w/return code = -101 [ 250.327756][ T8244] netlink: 'syz.0.642': attribute type 3 has an invalid length. [ 250.372392][ T8244] netlink: 24 bytes leftover after parsing attributes in process `syz.0.642'. [ 250.409991][ T8246] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 250.412184][ T9] usb 2-1: USB disconnect, device number 19 [ 250.556848][ T5796] stadia 0003:18D1:9400.0009: missing HID_OUTPUT_REPORT 5 [ 250.606212][ T5796] stadia 0003:18D1:9400.0009: hidraw0: USB HID v0.00 Joystick [HID 18d1:9400] on usb-dummy_hcd.3-1/input0 [ 250.979535][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 250.979551][ T30] audit: type=1400 audit(1787692289.211:960): avc: denied { write } for pid=8247 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.160035][ T30] audit: type=1400 audit(1787692289.387:961): avc: denied { create } for pid=8263 comm="syz.1.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 251.229730][ T30] audit: type=1400 audit(1787692289.424:962): avc: denied { write } for pid=8264 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.438397][ T30] audit: type=1400 audit(1787692289.433:963): avc: denied { bind } for pid=8263 comm="syz.1.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 251.504603][ T30] audit: type=1400 audit(1787692289.433:964): avc: denied { setopt } for pid=8263 comm="syz.1.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 252.090371][ T5689] usb 4-1: USB disconnect, device number 20 [ 252.421641][ T30] audit: type=1400 audit(1787692290.541:965): avc: denied { write } for pid=8272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.778008][ T30] audit: type=1400 audit(1787692290.873:966): avc: denied { write } for pid=8297 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.063659][ T8280] MTDSB: Device #1 doesn't appear to exist [ 253.063659][ T8280] [ 253.405474][ T30] audit: type=1400 audit(1787692291.455:967): avc: denied { ioctl } for pid=8302 comm="syz.1.651" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 253.511307][ T30] audit: type=1400 audit(1787692291.455:968): avc: denied { set_context_mgr } for pid=8302 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 253.601650][ T30] audit: type=1400 audit(1787692291.455:969): avc: denied { map } for pid=8302 comm="syz.1.651" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 254.527380][ T5689] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 254.628842][ T8320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.657'. [ 254.701016][ T5689] usb 2-1: Using ep0 maxpacket: 8 [ 254.730647][ T5689] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 254.796166][ T5689] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.824152][ T5689] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.979380][ T8323] sg_write: data in/out 1756/14 bytes for SCSI command 0x5-- guessing data in; [ 254.979380][ T8323] program syz.0.658 not setting count and/or reply_len properly [ 254.981495][ T5689] usb 2-1: config 0 interface 0 has no altsetting 0 [ 255.131552][ T5689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.210802][ T5689] usb 2-1: config 0 descriptor?? [ 255.422141][ T8322] netlink: 'syz.0.658': attribute type 1 has an invalid length. [ 255.431001][ T8322] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.658'. [ 255.440261][ T8322] netlink: 2060 bytes leftover after parsing attributes in process `syz.0.658'. [ 255.834225][ T5689] ryos 0003:1E7D:3138.000A: unknown main item tag 0x0 [ 255.867408][ T5689] ryos 0003:1E7D:3138.000A: unknown main item tag 0x0 [ 256.343919][ T5689] ryos 0003:1E7D:3138.000A: unknown main item tag 0x0 [ 256.350790][ T5689] ryos 0003:1E7D:3138.000A: unknown main item tag 0x0 [ 256.357582][ T5689] ryos 0003:1E7D:3138.000A: unknown main item tag 0x0 [ 256.376723][ T5689] ryos 0003:1E7D:3138.000A: unknown main item tag 0x0 [ 256.404954][ T5689] ryos 0003:1E7D:3138.000A: unknown main item tag 0x0 [ 256.430744][ T5689] ryos 0003:1E7D:3138.000A: unknown main item tag 0x0 [ 256.483722][ T5689] ryos 0003:1E7D:3138.000A: unknown main item tag 0x0 [ 256.513548][ T5689] ryos 0003:1E7D:3138.000A: unknown main item tag 0x0 [ 256.535614][ T5689] ryos 0003:1E7D:3138.000A: collection stack underflow [ 256.549952][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 256.549967][ T30] audit: type=1400 audit(1787692294.353:983): avc: denied { bind } for pid=8337 comm="syz.2.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 256.560220][ T5689] ryos 0003:1E7D:3138.000A: item 0 0 0 12 parsing failed [ 256.609468][ T30] audit: type=1400 audit(1787692294.400:984): avc: denied { accept } for pid=8337 comm="syz.2.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 256.664995][ T5689] ryos 0003:1E7D:3138.000A: parse failed [ 256.694567][ T5689] ryos 0003:1E7D:3138.000A: probe with driver ryos failed with error -22 [ 256.695048][ T30] audit: type=1400 audit(1787692294.400:985): avc: denied { read } for pid=8337 comm="syz.2.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 256.742383][ T5689] usb 2-1: USB disconnect, device number 20 [ 257.097546][ T8345] geneve2: entered promiscuous mode [ 257.133005][ T30] audit: type=1400 audit(1787692294.889:986): avc: denied { watch watch_reads } for pid=8346 comm="syz.2.666" path="/dev/pts/0" dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 258.115274][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 258.129217][ T30] audit: type=1400 audit(1787692295.378:987): avc: denied { write } for pid=8349 comm="syz.1.667" name="instances" dev="tracefs" ino=432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 258.573991][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 258.600368][ T30] audit: type=1400 audit(1787692295.378:988): avc: denied { add_name } for pid=8349 comm="syz.1.667" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 258.640547][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 258.664190][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.719125][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 258.722694][ T30] audit: type=1400 audit(1787692295.378:989): avc: denied { create } for pid=8349 comm="syz.1.667" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 258.734164][ T9] pvrusb2: ********** [ 258.761291][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 258.800722][ T8364] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 258.814938][ T9] pvrusb2: Important functionality might not be entirely working. [ 258.832611][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 258.835030][ T30] audit: type=1400 audit(1787692295.766:990): avc: denied { write } for pid=8349 comm="syz.1.667" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 258.851062][ T9] pvrusb2: ********** [ 259.066236][ T5689] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 259.104525][ T2355] pvrusb2: Invalid write control endpoint [ 259.240122][ T5689] usb 5-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 259.261565][ T5704] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 259.287297][ T5689] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.306822][ T2355] pvrusb2: Invalid write control endpoint [ 259.326523][ T5689] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 259.339618][ T2355] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 259.353417][ T2355] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 259.369215][ T5689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.377781][ T2355] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 259.400180][ T2355] pvrusb2: Device being rendered inoperable [ 259.413189][ T5689] ttusb_dec_send_command: command bulk message failed: error -22 [ 259.425592][ T2355] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 259.429223][ T8351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.439683][ T5689] ttusb-dec 5-1:1.0: probe with driver ttusb-dec failed with error -22 [ 259.450872][ T2355] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 259.471597][ T5704] usb 4-1: unable to get BOS descriptor or descriptor too short [ 259.471809][ T8351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.485523][ T5704] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 259.500707][ T2355] pvrusb2: Attached sub-driver cx25840 [ 259.508297][ T2355] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 259.521914][ T5704] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 259.537149][ T2355] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 259.546651][ T5704] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 259.568992][ T5704] usb 4-1: string descriptor 0 read error: -22 [ 259.575618][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.590907][ T9] usb 3-1: USB disconnect, device number 19 [ 259.592642][ T8368] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 259.622548][ T8368] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 259.666860][ T5704] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 259.681386][ T5796] usb 5-1: USB disconnect, device number 23 [ 259.904485][ T30] audit: type=1400 audit(1787692297.455:991): avc: denied { create } for pid=8367 comm="syz.3.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 259.954475][ T30] audit: type=1400 audit(1787692297.483:992): avc: denied { bind } for pid=8367 comm="syz.3.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 260.032680][ T5704] usb 4-1: USB disconnect, device number 21 [ 260.919514][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.925922][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.003912][ T8383] syz_tun: entered promiscuous mode [ 261.034475][ T8383] macvtap1: entered promiscuous mode [ 261.046544][ T5597] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 261.063432][ T8383] macvtap1: entered allmulticast mode [ 261.076603][ T8383] syz_tun: entered allmulticast mode [ 261.087656][ T8384] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 261.093012][ T8388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.676'. [ 261.216834][ T8386] netlink: 40 bytes leftover after parsing attributes in process `syz.3.676'. [ 261.568076][ T5704] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 261.721680][ T5704] usb 4-1: device descriptor read/64, error -71 [ 261.991340][ T5704] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 262.101885][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 262.101901][ T30] audit: type=1400 audit(1787692299.486:1008): avc: denied { write } for pid=8403 comm="syz.2.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 262.169087][ T30] audit: type=1400 audit(1787692299.505:1009): avc: denied { connect } for pid=8403 comm="syz.2.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 262.200632][ T5704] usb 4-1: device descriptor read/64, error -71 [ 262.256459][ T30] audit: type=1400 audit(1787692299.505:1010): avc: denied { name_connect } for pid=8403 comm="syz.2.683" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 262.326364][ T30] audit: type=1400 audit(1787692299.533:1011): avc: denied { map } for pid=8401 comm="syz.4.682" path="socket:[20240]" dev="sockfs" ino=20240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 262.339070][ T5704] usb usb4-port1: attempt power cycle [ 262.392365][ T30] audit: type=1400 audit(1787692299.579:1012): avc: denied { getopt } for pid=8401 comm="syz.4.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 262.564031][ T30] audit: type=1400 audit(1787692299.902:1013): avc: denied { mounton } for pid=8410 comm="syz.4.685" path="/151/file0" dev="tmpfs" ino=843 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 262.606808][ T8408] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 262.626760][ T30] audit: type=1400 audit(1787692299.902:1014): avc: denied { mount } for pid=8410 comm="syz.4.685" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 262.653526][ T8408] block device autoloading is deprecated and will be removed. [ 262.685976][ T30] audit: type=1400 audit(1787692299.939:1015): avc: denied { open } for pid=8407 comm="syz.2.684" path="/dev/ptyq9" dev="devtmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 262.736043][ T30] audit: type=1400 audit(1787692299.939:1016): avc: denied { ioctl } for pid=8407 comm="syz.2.684" path="/dev/ptyq9" dev="devtmpfs" ino=128 ioctlcmd=0x5430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 262.778501][ T5704] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 262.828165][ T5704] usb 4-1: device descriptor read/8, error -71 [ 262.843155][ T30] audit: type=1400 audit(1787692299.967:1017): avc: denied { append } for pid=8407 comm="syz.2.684" name="video3" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 263.295212][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 263.517126][ T8425] nfs: Unknown parameter 'net/kcm' [ 263.852659][ T5704] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 263.887209][ T5704] usb 4-1: device descriptor read/8, error -71 [ 263.974302][ T9] usb 3-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=8b.8e [ 264.066499][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.083770][ T9] usb 3-1: Product: syz [ 264.088773][ T9] usb 3-1: Manufacturer: syz [ 264.098225][ T9] usb 3-1: SerialNumber: syz [ 264.150085][ T5704] usb usb4-port1: unable to enumerate USB device [ 264.302677][ T8433] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.374768][ T8435] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.458754.0), cmd(5) [ 264.871855][ T5780] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 264.888241][ T9] gspca_main: touptek-2.14.0 probing 0547:6801 [ 264.924148][ T9] usb 3-1: USB disconnect, device number 20 [ 265.067746][ T5780] usb 4-1: Using ep0 maxpacket: 8 [ 265.108192][ T5780] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 265.127208][ T5780] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 265.156382][ T5780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.197438][ T5780] usb 4-1: config 0 descriptor?? [ 265.512700][ T5780] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 265.774143][ T5704] kernel write not supported for file /bluetooth/6lowpan_control (pid: 5704 comm: kworker/1:4) [ 265.874034][ T5704] usb 4-1: USB disconnect, device number 26 [ 266.022946][ T8471] binder: 8470:8471 unknown command 0 [ 266.035285][ T8471] binder: 8470:8471 ioctl c0306201 200000000180 returned -22 [ 267.576347][ T8491] netlink: 'syz.3.709': attribute type 11 has an invalid length. [ 268.045524][ T8496] hpfs: Bad magic ... probably not HPFS [ 268.869437][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 268.869468][ T30] audit: type=1400 audit(1787692305.709:1091): avc: denied { append } for pid=8499 comm="syz.4.713" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 269.544295][ T30] audit: type=1400 audit(1787692306.346:1092): avc: denied { mounton } for pid=8509 comm="syz.3.716" path="/128/config" dev="configfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 269.671474][ T8517] syzkaller0: entered promiscuous mode [ 269.687858][ T8517] syzkaller0: entered allmulticast mode [ 269.729804][ T30] audit: type=1400 audit(1787692306.521:1093): avc: denied { setopt } for pid=8516 comm="syz.4.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 269.801280][ T30] audit: type=1400 audit(1787692306.549:1094): avc: denied { write } for pid=8516 comm="syz.4.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 270.138682][ T8528] block2mtd: parameter too long [ 270.316798][ T30] audit: type=1400 audit(1787692307.066:1095): avc: denied { write } for pid=8529 comm="syz.3.721" name="nullb" dev="configfs" ino=3456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 270.884325][ T30] audit: type=1400 audit(1787692307.583:1096): avc: denied { write } for pid=8511 comm="syz.1.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 271.316041][ T30] audit: type=1400 audit(1787692307.980:1097): avc: denied { read write } for pid=8529 comm="syz.3.721" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 271.385757][ T8537] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 271.394296][ T30] audit: type=1400 audit(1787692307.980:1098): avc: denied { open } for pid=8529 comm="syz.3.721" path="/131/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 271.491732][ T30] audit: type=1400 audit(1787692308.026:1099): avc: denied { ioctl } for pid=8529 comm="syz.3.721" path="/131/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 271.608181][ T30] audit: type=1800 audit(1787692308.054:1100): pid=8530 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.721" name="power" dev="configfs" ino=21528 res=0 errno=0 [ 271.733165][ T8530] null_blk: disk nullb1 created [ 272.671519][ T8550] IPv6: NLM_F_CREATE should be specified when creating new route [ 272.698063][ T8550] IPv6: Can't replace route, no match found [ 274.091942][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.729'. [ 274.103282][ T8559] fuse: Bad value for 'fd' [ 275.278381][ T8570] vlan2: entered allmulticast mode [ 275.302388][ T8570] bond0: entered allmulticast mode [ 275.335459][ T8570] bond_slave_0: entered allmulticast mode [ 275.381567][ T8570] bond_slave_1: entered allmulticast mode [ 275.942291][ T8578] 9p: Bad value for 'rfdno' [ 276.033976][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 276.033992][ T30] audit: type=1400 audit(1787692312.347:1109): avc: denied { create } for pid=8579 comm="syz.0.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 276.092497][ T30] audit: type=1400 audit(1787692312.347:1110): avc: denied { setopt } for pid=8579 comm="syz.0.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 276.144780][ T30] audit: type=1400 audit(1787692312.374:1111): avc: denied { write } for pid=8579 comm="syz.0.735" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 276.270975][ T30] audit: type=1400 audit(1787692312.374:1112): avc: denied { open } for pid=8579 comm="syz.0.735" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 276.765233][ T5689] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 277.155285][ T5689] usb 5-1: Using ep0 maxpacket: 16 [ 277.279394][ T5689] usb 5-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 277.500379][ T5689] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.749276][ T5689] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 277.973188][ T8591] Bluetooth: MGMT ver 1.23 [ 278.080770][ T5689] usb 5-1: config 0 interface 0 has no altsetting 0 [ 278.199822][ T5689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.311343][ T5689] usb 5-1: config 0 descriptor?? [ 278.355167][ T8594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.428834][ T8594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.669763][ T30] audit: type=1400 audit(1787692314.775:1113): avc: denied { setopt } for pid=8602 comm="syz.3.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 278.773080][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.740'. [ 279.750351][ T5689] usbhid 5-1:0.0: can't add hid device: -71 [ 279.862021][ T5689] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 279.922421][ T8614] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 279.933622][ T5689] usb 5-1: USB disconnect, device number 24 [ 280.504071][ T30] audit: type=1400 audit(1787692316.473:1114): avc: denied { ioctl } for pid=8615 comm="syz.3.745" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x586e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 280.581904][ T30] audit: type=1400 audit(1787692316.501:1115): avc: denied { write } for pid=8610 comm="syz.0.742" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 281.175566][ T8633] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 281.263106][ T8636] sctp: [Deprecated]: syz.4.748 (pid 8636) Use of struct sctp_assoc_value in delayed_ack socket option. [ 281.263106][ T8636] Use struct sctp_sack_info instead [ 281.322839][ T30] audit: type=1400 audit(1787692317.221:1116): avc: denied { getopt } for pid=8630 comm="syz.4.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 281.404435][ T30] audit: type=1400 audit(1787692317.249:1117): avc: denied { write } for pid=8632 comm="syz.3.750" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 281.509939][ T30] audit: type=1800 audit(1787692317.313:1118): pid=8638 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.750" name="file0" dev="overlay" ino=782 res=0 errno=0 [ 281.719268][ T30] audit: type=1400 audit(1787692317.590:1119): avc: denied { read } for pid=8634 comm="syz.1.751" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 281.767564][ T30] audit: type=1400 audit(1787692317.590:1120): avc: denied { open } for pid=8634 comm="syz.1.751" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 281.848044][ T30] audit: type=1400 audit(1787692317.590:1121): avc: denied { ioctl } for pid=8634 comm="syz.1.751" path="/dev/ptp0" dev="devtmpfs" ino=1264 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 281.961266][ T8647] FAULT_INJECTION: forcing a failure. [ 281.961266][ T8647] name failslab, interval 1, probability 0, space 0, times 0 [ 281.985047][ T8647] CPU: 1 UID: 0 PID: 8647 Comm: syz.4.753 Tainted: G L syzkaller #0 PREEMPT(full) [ 281.985075][ T8647] Tainted: [L]=SOFTLOCKUP [ 281.985081][ T8647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 281.985089][ T8647] Call Trace: [ 281.985094][ T8647] [ 281.985101][ T8647] dump_stack_lvl+0x100/0x190 [ 281.985131][ T8647] should_fail_ex.cold+0x5/0xa [ 281.985156][ T8647] should_failslab+0xc2/0x120 [ 281.985174][ T8647] kmem_cache_alloc_noprof+0x92/0x6a0 [ 281.985201][ T8647] ? ima_inode_get+0x11f/0x580 [ 281.985226][ T8647] ima_inode_get+0x11f/0x580 [ 281.985249][ T8647] process_measurement+0x1213/0x2350 [ 281.985276][ T8647] ? avc_has_perm_noaudit+0x145/0x3b0 [ 281.985301][ T8647] ? __pfx_process_measurement+0x10/0x10 [ 281.985325][ T8647] ? __pfx_avc_has_perm+0x10/0x10 [ 281.985355][ T8647] ? find_held_lock+0x2b/0x80 [ 281.985400][ T8647] ? __file_map_prot_check+0x256/0x830 [ 281.985429][ T8647] ima_file_mmap+0x1bb/0x1e0 [ 281.985450][ T8647] ? __pfx_ima_file_mmap+0x10/0x10 [ 281.985469][ T8647] ? proc_fail_nth_write+0x9f/0x220 [ 281.985496][ T8647] ? find_held_lock+0x2b/0x80 [ 281.985517][ T8647] security_mmap_file+0x278/0x9b0 [ 281.985539][ T8647] vm_mmap_pgoff+0xec/0x470 [ 281.985568][ T8647] ? find_held_lock+0x2b/0x80 [ 281.985589][ T8647] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 281.985612][ T8647] ? __fget_files+0x215/0x3d0 [ 281.985633][ T8647] ? __fget_files+0x21f/0x3d0 [ 281.985655][ T8647] ksys_mmap_pgoff+0x3cb/0x610 [ 281.985687][ T8647] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 281.985713][ T8647] ? fput+0x7c/0x100 [ 281.985731][ T8647] ? ksys_write+0x1ac/0x250 [ 281.985755][ T8647] ? __pfx_ksys_write+0x10/0x10 [ 281.985782][ T8647] __x64_sys_mmap+0x125/0x190 [ 281.985804][ T8647] do_syscall_64+0x123/0x790 [ 281.985829][ T8647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.985848][ T8647] RIP: 0033:0x7f805479e0d9 [ 281.985864][ T8647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.985881][ T8647] RSP: 002b:00007f80555f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 281.985899][ T8647] RAX: ffffffffffffffda RBX: 00007f8054a25fa0 RCX: 00007f805479e0d9 [ 281.985910][ T8647] RDX: 00000000027ffff7 RSI: 0000000000600000 RDI: 0000200000000000 [ 281.985920][ T8647] RBP: 00007f80555f2090 R08: 0000000000000007 R09: 0000000000000000 [ 281.985931][ T8647] R10: 0000000004012011 R11: 0000000000000246 R12: 0000000000000001 [ 281.985941][ T8647] R13: 00007f8054a26038 R14: 00007f8054a25fa0 R15: 00007ffcdda8df08 [ 281.985966][ T8647] [ 282.450362][ T30] audit: type=1400 audit(1787692318.255:1122): avc: denied { watch } for pid=8646 comm="syz.4.753" path="/167/file1" dev="tmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 283.382581][ T30] audit: type=1400 audit(1787692318.754:1123): avc: denied { create } for pid=8648 comm="syz.1.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 283.638572][ T8660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.693611][ T8660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.712574][ T30] audit: type=1400 audit(1787692319.428:1124): avc: denied { write } for pid=8653 comm="syz.3.755" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 283.771584][ T30] audit: type=1400 audit(1787692319.483:1125): avc: denied { ioctl } for pid=8653 comm="syz.3.755" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x128e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 283.946787][ T5689] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 284.629694][ T5689] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 284.650169][ T5689] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 284.672998][ T5689] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 284.697575][ T5689] usb 5-1: config 0 interface 0 has no altsetting 0 [ 284.720266][ T8666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.734366][ T5689] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 284.744700][ T5689] usb 5-1: Product: syz [ 284.755465][ T5689] usb 5-1: Manufacturer: syz [ 284.770250][ T5689] usb 5-1: SerialNumber: syz [ 284.775301][ T8666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.790698][ T5689] usb 5-1: config 0 descriptor?? [ 284.811760][ T5689] usb 5-1: selecting invalid altsetting 0 [ 284.980211][ T30] audit: type=1400 audit(1787692320.582:1126): avc: denied { write } for pid=8671 comm="syz.3.763" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 285.108619][ T8662] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.758'. [ 285.342908][ T8674] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.758'. [ 285.379764][ T30] audit: type=1400 audit(1787692320.969:1127): avc: denied { ioctl } for pid=8678 comm="syz.1.757" path="socket:[21900]" dev="sockfs" ino=21900 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 285.415157][ T5689] usb 5-1: USB disconnect, device number 25 [ 285.898166][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.758'. [ 285.945548][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.758'. [ 285.998422][ T8662] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 286.094312][ T8699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.116033][ T8699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.266928][ T8704] input: syz0 as /devices/virtual/input/input17 [ 286.398124][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.771'. [ 287.200404][ T8735] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 287.207210][ T8735] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 287.235647][ T8735] vhci_hcd vhci_hcd.0: Device attached [ 287.252459][ T8736] usbip_core: unknown command [ 287.263891][ T8736] vhci_hcd: unknown pdu 587202560 [ 287.269230][ T8736] usbip_core: unknown command [ 287.275152][ T5831] vhci_hcd vhci_hcd.2: stop threads [ 287.280626][ T5831] vhci_hcd vhci_hcd.2: release socket [ 287.286836][ T5831] vhci_hcd vhci_hcd.2: disconnect device [ 287.308510][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 287.308524][ T30] audit: type=1400 audit(1787692322.751:1137): avc: denied { append } for pid=8718 comm="syz.4.776" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 287.510458][ T5704] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 287.672919][ T5704] usb 2-1: Using ep0 maxpacket: 16 [ 287.682314][ T5704] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 287.705303][ T5704] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 287.714247][ T5704] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 287.724050][ T8747] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 287.750416][ T8747] CIFS: Attempting to mount //127.0.0.1/share [ 287.766118][ T5704] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 287.785857][ T5704] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 287.807824][ T5704] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 287.818243][ T5704] usb 2-1: config 0 has no interface number 0 [ 287.825139][ T5704] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 287.839400][ T5704] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 287.855632][ T5704] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 287.877709][ T5704] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 287.897066][ T5704] usb 2-1: config 0 interface 125 has no altsetting 0 [ 287.909533][ T5704] usb 2-1: config 0 interface 125 has no altsetting 2 [ 287.927134][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.938309][ T5704] usb 2-1: Product: syz [ 288.257923][ T5704] usb 2-1: Manufacturer: syz [ 288.277071][ T5704] usb 2-1: SerialNumber: syz [ 288.302785][ T5704] usb 2-1: config 0 descriptor?? [ 288.316947][ T5704] usb 2-1: selecting invalid altsetting 2 [ 288.352025][ T8747] CIFS: VFS: Error connecting to socket. Aborting operation. [ 288.359483][ T8747] CIFS: VFS: cifs_mount failed w/return code = -4 [ 288.484369][ T30] audit: type=1400 audit(1787692323.831:1138): avc: denied { bind } for pid=8758 comm="syz.3.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 288.511329][ T30] audit: type=1400 audit(1787692323.831:1139): avc: denied { listen } for pid=8758 comm="syz.3.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 288.565247][ T30] audit: type=1400 audit(1787692323.850:1140): avc: denied { connect } for pid=8758 comm="syz.3.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 288.638174][ T30] audit: type=1400 audit(1787692323.905:1141): avc: denied { ioctl } for pid=8758 comm="syz.3.787" path="socket:[22104]" dev="sockfs" ino=22104 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 288.676686][ T30] audit: type=1326 audit(1787692323.960:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8758 comm="syz.3.787" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f797df9e0d9 code=0x0 [ 288.723705][ T30] audit: type=1326 audit(1787692323.970:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8758 comm="syz.3.787" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f797df9e0d9 code=0x0 [ 288.903240][ T30] audit: type=1400 audit(1787692324.219:1144): avc: denied { mounton } for pid=8767 comm="syz.4.790" path="/173/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 288.947112][ T30] audit: type=1400 audit(1787692324.265:1145): avc: denied { bind } for pid=8767 comm="syz.4.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 289.013269][ T30] audit: type=1400 audit(1787692324.321:1146): avc: denied { read } for pid=8769 comm="syz.4.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 289.351916][ T189] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 289.407423][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.793'. [ 289.440103][ C1] usb 2-1: async_complete: urb error -71 [ 289.445851][ T5704] get_1284_register: usb error -71 [ 289.460998][ T5704] usb 2-1: USB disconnect, device number 21 [ 289.526007][ T189] usb 5-1: New USB device found, idVendor=15c2, idProduct=0037, bcdDevice=c4.46 [ 289.536306][ T189] usb 5-1: config 250 has an invalid interface number: 177 but max is 0 [ 289.544671][ T189] usb 5-1: config 250 has no interface number 0 [ 289.552793][ T189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.560986][ T189] usb 5-1: Product: syz [ 289.565229][ T189] usb 5-1: Manufacturer: syz [ 289.569901][ T189] usb 5-1: SerialNumber: syz [ 289.800979][ T189] imon 5-1:250.177: unable to register, err -19 [ 289.809839][ T189] usb 5-1: USB disconnect, device number 26 [ 290.223598][ T8781] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 290.503138][ T8784] mount: server 127.0.0.1 not responding, timed out [ 291.949249][ T8822] lo: Caught tx_queue_len zero misconfig [ 292.040066][ T5704] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 292.164138][ T8829] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=61 sclass=netlink_xfrm_socket pid=8829 comm=syz.2.815 [ 292.179035][ T189] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 292.222362][ T5704] usb 2-1: Using ep0 maxpacket: 16 [ 292.236416][ T5704] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 292.260936][ T5704] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 292.296632][ T5704] usb 2-1: config 0 has no interface number 0 [ 292.313978][ T5704] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 292.325504][ T5704] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 292.338627][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.346913][ T5704] usb 2-1: Product: syz [ 292.351214][ T5704] usb 2-1: Manufacturer: syz [ 292.357196][ T5704] usb 2-1: SerialNumber: syz [ 292.388559][ T189] usb 4-1: device descriptor read/64, error -71 [ 292.422658][ T5704] usb 2-1: config 0 descriptor?? [ 292.433784][ T8814] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 292.442366][ T8814] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 292.753161][ T189] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 293.031755][ T8814] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 293.053176][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 293.053191][ T30] audit: type=1400 audit(1787692328.050:1160): avc: denied { connect } for pid=8828 comm="syz.2.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 293.079697][ T8814] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 293.086917][ T8829] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=8829 comm=syz.2.815 [ 293.193429][ T189] usb 4-1: device descriptor read/64, error -71 [ 293.321704][ T5704] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 293.392441][ T189] usb usb4-port1: attempt power cycle [ 294.269743][ T189] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 294.304668][ T189] usb 4-1: device descriptor read/8, error -71 [ 294.576584][ T189] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 294.606996][ T189] usb 4-1: device descriptor read/8, error -71 [ 294.738163][ T189] usb usb4-port1: unable to enumerate USB device [ 295.540955][ T8862] overlayfs: missing 'lowerdir' [ 296.622496][ T8872] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 296.990623][ T5704] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 297.004264][ T5704] asix 2-1:0.34: probe with driver asix failed with error -71 [ 297.028353][ T5704] usb 2-1: USB disconnect, device number 22 [ 297.700237][ T8881] loop5: detected capacity change from 0 to 7 [ 297.745053][ T8885] xt_socket: unknown flags 0x58 [ 297.757177][ T30] audit: type=1400 audit(1787692332.389:1161): avc: denied { write } for pid=8886 comm="syz.1.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 297.777798][ T8881] Buffer I/O error on dev loop5, logical block 0, async page read [ 297.817625][ T8881] Buffer I/O error on dev loop5, logical block 0, async page read [ 297.849055][ T8881] Buffer I/O error on dev loop5, logical block 0, async page read [ 297.942699][ T8881] Buffer I/O error on dev loop5, logical block 0, async page read [ 297.954231][ T30] audit: type=1400 audit(1787692332.583:1162): avc: denied { mount } for pid=8884 comm="syz.2.831" name="/" dev="ramfs" ino=22457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 297.977004][ T8881] Buffer I/O error on dev loop5, logical block 0, async page read [ 297.996185][ T8881] Buffer I/O error on dev loop5, logical block 0, async page read [ 298.066832][ T8881] Buffer I/O error on dev loop5, logical block 0, async page read [ 298.312998][ T8881] ldm_validate_partition_table(): Disk read failed. [ 298.325826][ T8890] macvlan2: entered promiscuous mode [ 298.795500][ T8890] bridge0: entered promiscuous mode [ 298.863030][ T8890] netlink: 20 bytes leftover after parsing attributes in process `syz.2.831'. [ 298.894826][ T8881] Buffer I/O error on dev loop5, logical block 0, async page read [ 298.910255][ T8899] CIFS: Attempting to mount //127.0.0.1/share [ 298.954036][ T8881] Buffer I/O error on dev loop5, logical block 0, async page read [ 298.977441][ T8881] Buffer I/O error on dev loop5, logical block 0, async page read [ 298.994998][ T8881] Dev loop5: unable to read RDB block 0 [ 299.007416][ T8881] loop5: unable to read partition table [ 299.020711][ T8881] loop5: partition table beyond EOD, truncated [ 299.059614][ T8881] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5) [ 299.732973][ T30] audit: type=1400 audit(1787692334.226:1163): avc: denied { mount } for pid=8910 comm="syz.0.838" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 299.919350][ T30] audit: type=1400 audit(1787692334.282:1164): avc: denied { search } for pid=8910 comm="syz.0.838" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 299.982024][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.838'. [ 300.137826][ T30] audit: type=1400 audit(1787692334.282:1165): avc: denied { read write } for pid=8910 comm="syz.0.838" name="versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 300.161560][ T30] audit: type=1400 audit(1787692334.282:1166): avc: denied { open } for pid=8910 comm="syz.0.838" path="/165/nfsd_mount/versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 300.200756][ T30] audit: type=1400 audit(1787692334.476:1167): avc: denied { firmware_load } for pid=8910 comm="syz.0.838" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 300.353960][ T30] audit: type=1400 audit(1787692334.790:1168): avc: denied { unmount } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 300.525835][ T30] audit: type=1400 audit(1787692334.956:1169): avc: denied { write } for pid=8921 comm="syz.0.840" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 300.670654][ T8900] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 300.744338][ T8927] netlink: 20 bytes leftover after parsing attributes in process `syz.3.842'. [ 300.855619][ T8929] netlink: 'syz.2.843': attribute type 23 has an invalid length. [ 300.912849][ T8899] CIFS: VFS: cifs_mount failed w/return code = -112 [ 301.139541][ T8941] netlink: 'syz.0.845': attribute type 2 has an invalid length. [ 301.434558][ T30] audit: type=1400 audit(1787692335.796:1170): avc: denied { listen } for pid=8949 comm="syz.4.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 301.497673][ T30] audit: type=1400 audit(1787692335.824:1171): avc: denied { accept } for pid=8949 comm="syz.4.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 302.871925][ T30] audit: type=1400 audit(1787692337.116:1172): avc: denied { getopt } for pid=8969 comm="syz.0.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 302.952405][ T5829] IPVS: starting estimator thread 0... [ 302.983977][ T8977] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 303.019567][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 303.077232][ T8978] IPVS: using max 56 ests per chain, 134400 per kthread [ 303.439659][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.858'. [ 304.484081][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 304.813582][ T9006] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 305.058559][ T9] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 305.098139][ T9] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 305.164474][ T9] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 305.199982][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.219141][ T9] usb 2-1: Product: syz [ 305.239290][ T9] usb 2-1: Manufacturer: syz [ 305.259508][ T9] usb 2-1: SerialNumber: syz [ 305.351972][ T9] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 305.393224][ T9] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 305.450054][ T9] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 305.469041][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 305.469057][ T30] audit: type=1400 audit(1787692339.516:1174): avc: denied { setopt } for pid=9011 comm="syz.2.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 305.600247][ T30] audit: type=1400 audit(1787692339.599:1175): avc: denied { accept } for pid=9011 comm="syz.2.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 305.703530][ T30] audit: type=1400 audit(1787692339.609:1176): avc: denied { write } for pid=9011 comm="syz.2.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 305.794546][ T30] audit: type=1400 audit(1787692339.655:1177): avc: denied { read } for pid=9011 comm="syz.2.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 306.273298][ T9021] program syz.0.867 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 306.282886][ T9021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 306.312178][ T30] audit: type=1400 audit(1787692340.255:1178): avc: denied { getopt } for pid=9017 comm="syz.0.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 308.418418][ T5704] usb 2-1: USB disconnect, device number 23 [ 308.585990][ T5704] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 308.627674][ T5704] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 308.653810][ T5704] ti_usb_3410_5052 2-1:2.0: device disconnected [ 308.683533][ T9038] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 308.878830][ T30] audit: type=1400 audit(1787692342.665:1179): avc: denied { mount } for pid=9041 comm="syz.1.873" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 309.076724][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 309.324031][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 309.481835][ T9] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 309.695808][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.894007][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 310.068077][ T9] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 310.300425][ T9] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 310.537847][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 310.726343][ T9] usb 3-1: config 1 interface 1 has no altsetting 0 [ 310.935654][ T9] usb 3-1: string descriptor 0 read error: -22 [ 311.038499][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.373408][ T30] audit: type=1400 audit(1787692344.973:1180): avc: denied { getopt } for pid=9063 comm="syz.4.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 311.635419][ T9] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 311.670692][ T9] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 311.728927][ T9] usb 3-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 312.175694][ T5704] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 312.218231][ T9071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.265871][ T9071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.360000][ T5704] usb 5-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 1.00 [ 312.411745][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 312.437175][ T5704] usb 5-1: Product: syz [ 312.442581][ T30] audit: type=1326 audit(1787692345.951:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9069 comm="syz.0.880" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1759e0d9 code=0x7ffc0000 [ 312.482876][ T29] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 312.491576][ T5704] usb 5-1: Manufacturer: syz [ 312.574402][ T9] usb 3-1: 2:0: failed to get current value for ch 1 (-71) [ 312.593148][ T30] audit: type=1326 audit(1787692345.951:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9069 comm="syz.0.880" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1759e0d9 code=0x7ffc0000 [ 312.649724][ T9076] CIFS: Attempting to mount //127.0.0.1/share [ 312.682232][ T9] usb 3-1: USB disconnect, device number 21 [ 312.723582][ T30] audit: type=1326 audit(1787692346.016:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9069 comm="syz.0.880" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f3d1759e0d9 code=0x7ffc0000 [ 312.759391][ T29] usb 4-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 1.00 [ 312.778750][ T5704] msi2500 5-1:1.0: Registered as swradio24 [ 312.799725][ T5704] msi2500 5-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 312.813056][ T9064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.817998][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 312.854040][ T29] usb 4-1: Product: syz [ 312.863734][ T29] usb 4-1: Manufacturer: syz [ 312.871640][ T30] audit: type=1326 audit(1787692346.016:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9069 comm="syz.0.880" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1759e0d9 code=0x7ffc0000 [ 312.910733][ T9064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.988054][ T30] audit: type=1326 audit(1787692346.016:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9069 comm="syz.0.880" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1759e0d9 code=0x7ffc0000 [ 313.060550][ T9] usb 5-1: USB disconnect, device number 27 [ 313.099832][ T29] videodev: could not get a free minor [ 313.123148][ T29] msi2500 4-1:1.0: Failed to register as video device (-23) [ 313.131326][ T30] audit: type=1326 audit(1787692346.025:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9069 comm="syz.0.880" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d1759e0d9 code=0x7ffc0000 [ 313.191819][ T29] msi2500 4-1:1.0: probe with driver msi2500 failed with error -23 [ 313.232415][ T9070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.246047][ T30] audit: type=1326 audit(1787692346.025:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9069 comm="syz.0.880" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1759e0d9 code=0x7ffc0000 [ 313.285630][ T9070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.343739][ T30] audit: type=1326 audit(1787692346.025:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9069 comm="syz.0.880" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1759e0d9 code=0x7ffc0000 [ 313.416885][ T29] usb 4-1: USB disconnect, device number 31 [ 313.455575][ T30] audit: type=1326 audit(1787692346.034:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9069 comm="syz.0.880" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3d1759e0d9 code=0x7ffc0000 [ 313.811987][ T9079] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 313.836566][ T9076] CIFS: VFS: cifs_mount failed w/return code = -112 [ 316.369356][ T9117] lo speed is unknown, defaulting to 1000 [ 316.384233][ T9117] lo speed is unknown, defaulting to 1000 [ 316.425481][ T9117] lo speed is unknown, defaulting to 1000 [ 316.453768][ T9117] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 316.470364][ T9117] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 316.487723][ T9117] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 316.569239][ T9117] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 316.638968][ T9117] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 316.857884][ T9117] lo speed is unknown, defaulting to 1000 [ 316.884327][ T9117] lo speed is unknown, defaulting to 1000 [ 316.903701][ T9117] lo speed is unknown, defaulting to 1000 [ 316.921671][ T9117] lo speed is unknown, defaulting to 1000 [ 316.939970][ T9117] lo speed is unknown, defaulting to 1000 [ 317.056752][ T9119] smbdirect: ib_dev[syz2] removed [ 317.587350][ T9127] netlink: 64 bytes leftover after parsing attributes in process `syz.3.891'. [ 318.504510][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 318.504527][ T30] audit: type=1400 audit(1787692351.555:1243): avc: denied { write } for pid=9135 comm="syz.1.893" name="c.1" dev="configfs" ino=19311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 318.829271][ T30] audit: type=1400 audit(1787692351.850:1244): avc: denied { create } for pid=9145 comm="syz.2.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 318.883190][ T30] audit: type=1400 audit(1787692351.850:1245): avc: denied { ioctl } for pid=9145 comm="syz.2.886" path="socket:[23174]" dev="sockfs" ino=23174 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 318.986564][ T30] audit: type=1400 audit(1787692351.869:1246): avc: denied { connect } for pid=9145 comm="syz.2.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 319.036983][ T9146] ip_tables: iptables: counters copy to user failed while replacing table [ 319.089004][ T30] audit: type=1400 audit(1787692351.869:1247): avc: denied { write } for pid=9145 comm="syz.2.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 319.157669][ T30] audit: type=1400 audit(1787692352.044:1248): avc: denied { read } for pid=9145 comm="syz.2.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 319.351674][ T9159] smbdirect: ib_dev[syz5]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 319.366014][ T9159] smbdirect: ib_dev[syz5]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 319.382980][ T9159] smbdirect: ib_dev[syz5]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 319.527545][ T9159] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 320.981614][ T29] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 321.189097][ T29] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 321.211715][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.248840][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.271300][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.305476][ T29] usb 3-1: config 0 descriptor?? [ 321.643607][ T9186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.904'. [ 321.697231][ T9186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.904'. [ 321.727681][ T9189] tipc: Started in network mode [ 321.752976][ T9189] tipc: Node identity , cluster identity 4711 [ 321.781103][ T9189] tipc: Failed to set node id, please configure manually [ 321.845708][ T9189] tipc: Enabling of bearer rejected, failed to enable media [ 322.094013][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.906'. [ 322.291407][ T9201] siw: device registration error -23 [ 322.303575][ T30] audit: type=1400 audit(1787692355.063:1249): avc: denied { write } for pid=9200 comm="syz.1.909" name="kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 322.356659][ T5704] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 322.374973][ T30] audit: type=1400 audit(1787692355.063:1250): avc: denied { open } for pid=9200 comm="syz.1.909" path="/165/dev/kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 322.543907][ T5704] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 323.260085][ T5704] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 323.316111][ T5704] usb 4-1: Product: syz [ 323.337984][ T5704] usb 4-1: Manufacturer: syz [ 323.364063][ T5704] usb 4-1: SerialNumber: syz [ 323.393019][ T5704] usb 4-1: config 0 descriptor?? [ 323.504285][ T9209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.550847][ T9210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.553001][ T9209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.613879][ T9210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.641390][ T9199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.680286][ T30] audit: type=1400 audit(1787692356.319:1251): avc: denied { write } for pid=9208 comm="syz.0.913" name="functions" dev="configfs" ino=16026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 323.687760][ T9199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.784156][ T9199] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 323.856457][ T9199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.988296][ T9199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.009283][ T29] usbhid 3-1:0.0: can't add hid device: -71 [ 324.030809][ T29] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 324.066160][ T29] usb 3-1: USB disconnect, device number 22 [ 324.156773][ T5704] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 324.179915][ T5704] peak_usb 4-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 324.293809][ T5704] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 324.341047][ T5704] usb 4-1: USB disconnect, device number 32 [ 324.360574][ T5796] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 324.550354][ T5796] usb 2-1: not running at top speed; connect to a high speed hub [ 324.565308][ T5796] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 324.592690][ T5796] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.617977][ T5796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.662143][ T5796] uvcvideo 2-1:1.0: Found UVC 1.00 device (046d:0825) [ 324.670978][ T29] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 324.871145][ T29] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 324.899302][ T29] usb 3-1: config 0 has no interfaces? [ 324.919658][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.969863][ T29] usb 3-1: config 0 descriptor?? [ 325.226183][ T29] usb 3-1: USB disconnect, device number 23 [ 325.547215][ T5796] uvcvideo 2-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 325.576871][ T5796] uvcvideo 2-1:1.1: Failed to initialize the device (-5). [ 325.618006][ T5796] uvcvideo 2-1:1.0: probe with driver uvcvideo failed with error -5 [ 325.663139][ T5796] usb 2-1: USB disconnect, device number 24 [ 326.015493][ T9249] CIFS: Attempting to mount //127.0.0.1/share [ 326.044934][ T9249] CIFS: VFS: Error connecting to socket. Aborting operation. [ 326.074538][ T9249] CIFS: VFS: cifs_mount failed w/return code = -101 [ 326.328843][ T9254] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 326.366307][ T30] audit: type=1400 audit(1787692358.811:1252): avc: denied { write } for pid=9255 comm="syz.1.927" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 326.434324][ T30] audit: type=1400 audit(1787692358.811:1253): avc: denied { open } for pid=9255 comm="syz.1.927" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 326.947412][ T5796] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 327.473103][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.481160][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.533001][ T30] audit: type=1400 audit(1787692359.882:1254): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 327.588976][ T5796] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 327.600563][ T5796] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.623023][ T5796] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 327.644265][ T5796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.658115][ T5796] usb 4-1: Product: syz [ 327.671117][ T5796] usb 4-1: Manufacturer: syz [ 327.684683][ T5796] usb 4-1: SerialNumber: syz [ 327.903171][ T30] audit: type=1400 audit(1787692360.196:1255): avc: denied { connect } for pid=9265 comm="syz.1.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 328.058918][ T30] audit: type=1400 audit(1787692360.215:1256): avc: denied { read } for pid=9265 comm="syz.1.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 329.217469][ T9258] input: syz1 as /devices/virtual/input/input18 [ 329.296610][ T9274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=528 sclass=netlink_route_socket pid=9274 comm=syz.1.932 [ 329.475993][ T9276] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 329.726390][ T5796] cdc_ncm 4-1:1.0: bind() failure [ 329.783360][ T5796] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 329.797907][ T9279] kvm: kvm [9277]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000075) [ 329.840700][ T5796] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 329.865104][ T5796] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 329.909515][ T5796] usb 4-1: USB disconnect, device number 33 [ 330.287819][ T189] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 330.437220][ T189] usb 3-1: device descriptor read/64, error -71 [ 331.087352][ T189] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 331.791387][ T9295] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 332.027879][ T189] usb 3-1: device descriptor read/64, error -71 [ 332.791739][ T9301] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 332.999354][ T189] usb usb3-port1: attempt power cycle [ 333.820281][ T9309] batadv_slave_1: entered promiscuous mode [ 333.865100][ T9309] batadv_slave_1: left promiscuous mode [ 333.895396][ T5704] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 334.078076][ T5704] usb 5-1: Using ep0 maxpacket: 8 [ 334.101812][ T5704] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 334.140377][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.172317][ T5704] usb 5-1: Product: syz [ 334.177542][ T5704] usb 5-1: Manufacturer: syz [ 334.182453][ T5704] usb 5-1: SerialNumber: syz [ 334.215932][ T5704] usb 5-1: config 0 descriptor?? [ 334.478575][ T5704] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 334.902959][ T9307] smpboot: CPU 1 is now offline [ 335.371488][ T9334] ±ÿ: renamed from lo (while UP) [ 335.390460][ T5704] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 335.413685][ T9334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9334 comm=syz.1.948 [ 335.431201][ T5704] usb 5-1: USB disconnect, device number 28 [ 335.788325][ T189] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 336.005154][ T189] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 336.039600][ T189] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 336.096597][ T189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.132944][ T9342] tipc: Started in network mode [ 336.141771][ T189] usb 2-1: Product: syz [ 336.160076][ T189] usb 2-1: Manufacturer: syz [ 336.174057][ T9342] tipc: Node identity f2281e242edc, cluster identity 4711 [ 336.181470][ T189] usb 2-1: SerialNumber: syz [ 336.209730][ T189] ch9200 2-1:2.0: probe with driver ch9200 failed with error -22 [ 336.233751][ T9337] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 336.273074][ T30] audit: type=1400 audit(1787692367.951:1257): avc: denied { write } for pid=9336 comm="syz.0.949" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 336.306005][ T9342] tipc: Enabled bearer , priority 0 [ 336.356923][ T9346] syzkaller0: entered promiscuous mode [ 336.364455][ T30] audit: type=1400 audit(1787692367.951:1258): avc: denied { open } for pid=9336 comm="syz.0.949" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 336.424188][ T9346] syzkaller0: entered allmulticast mode [ 336.440750][ T189] usb 2-1: USB disconnect, device number 25 [ 336.479066][ T9348] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 336.586766][ T9350] tipc: Resetting bearer [ 336.882151][ T5780] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 337.766613][ T189] tipc: Node number set to 3706986020 [ 337.824595][ T5780] usb 3-1: Using ep0 maxpacket: 32 [ 337.843399][ T5780] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 337.951794][ T5780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.020674][ T30] audit: type=1400 audit(1787692369.567:1259): avc: denied { append } for pid=9362 comm="syz.0.955" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 338.070585][ T5780] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 338.192652][ T9366] netlink: 136 bytes leftover after parsing attributes in process `syz.1.956'. [ 338.267554][ T9366] netlink: 332 bytes leftover after parsing attributes in process `syz.1.956'. [ 338.276788][ T9366] netlink: 196 bytes leftover after parsing attributes in process `syz.1.956'. [ 338.359803][ T30] audit: type=1400 audit(1787692369.880:1260): avc: denied { read } for pid=9338 comm="syz.2.950" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 338.962298][ T5780] gspca_nw80x: reg_r err -110 [ 338.967068][ T5780] nw80x 3-1:3.0: probe with driver nw80x failed with error -110 [ 340.199679][ T9377] bridge_slave_0: entered promiscuous mode [ 341.212395][ T189] usb 3-1: USB disconnect, device number 27 [ 341.341719][ T9341] tipc: Resetting bearer [ 341.463298][ T30] audit: type=1400 audit(1787692372.742:1261): avc: denied { create } for pid=9388 comm="syz.1.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 341.584022][ T30] audit: type=1400 audit(1787692372.789:1262): avc: denied { sys_admin } for pid=9388 comm="syz.1.964" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 341.680145][ T9341] tipc: Disabling bearer [ 342.857232][ T9401] dlm: no local IP address has been set [ 342.862938][ T9401] dlm: cannot start dlm midcomms -107 [ 343.692488][ T30] audit: type=1400 audit(1787692630.806:1263): avc: denied { write } for pid=9421 comm="syz.3.974" name="functions" dev="configfs" ino=16026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 343.811775][ T30] audit: type=1400 audit(1787692630.898:1264): avc: denied { write } for pid=9421 comm="syz.3.974" name="header" dev="configfs" ino=25227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 343.937499][ T30] audit: type=1400 audit(1787692630.972:1265): avc: denied { write } for pid=9421 comm="syz.3.974" name="fs" dev="configfs" ino=25234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 344.072233][ T30] audit: type=1400 audit(1787692630.972:1266): avc: denied { write } for pid=9421 comm="syz.3.974" name="fs" dev="configfs" ino=25234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 344.210587][ T30] audit: type=1400 audit(1787692630.990:1267): avc: denied { write } for pid=9421 comm="syz.3.974" name="c.1" dev="configfs" ino=19311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 344.371569][ T30] audit: type=1400 audit(1787692630.990:1268): avc: denied { write } for pid=9421 comm="syz.3.974" name="c.1" dev="configfs" ino=19311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 344.605310][ T9] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 344.845969][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 344.874067][ T9] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 344.918912][ T9] usb 3-1: config 1 has an invalid interface number: 1 but max is 0 [ 345.024971][ T9] usb 3-1: config 1 has no interface number 0 [ 345.048411][ T9] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 345.779858][ T189] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 345.809115][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.837846][ T9] usb 3-1: Product: syz [ 345.856705][ T9] usb 3-1: Manufacturer: syz [ 345.875653][ T9] usb 3-1: SerialNumber: syz [ 345.952145][ T9] usb 3-1: selecting invalid altsetting 1 [ 345.962123][ T189] usb 4-1: Using ep0 maxpacket: 16 [ 345.991657][ T189] usb 4-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 346.027357][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 346.054642][ T189] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.071564][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 346.105249][ T189] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.162963][ T189] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.227251][ T9] DVB: Unable to find symbol cx22700_attach() [ 346.236669][ T189] usb 4-1: config 0 interface 0 has no altsetting 0 [ 346.269242][ T189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.314526][ T189] usb 4-1: config 0 descriptor?? [ 346.333155][ T9] DVB: Unable to find symbol tda10046_attach() [ 346.363244][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 346.396259][ T9473] CIFS: Attempting to mount //127.0.0.1/share [ 346.408873][ T9] usb 3-1: USB disconnect, device number 28 [ 346.810709][ T189] glorious 0003:258A:0033.000B: unknown main item tag 0x0 [ 346.868717][ T189] glorious 0003:258A:0033.000B: unknown main item tag 0x0 [ 346.903301][ T189] glorious 0003:258A:0033.000B: unknown main item tag 0x0 [ 346.935604][ T189] glorious 0003:258A:0033.000B: unknown main item tag 0x0 [ 346.974561][ T189] glorious 0003:258A:0033.000B: unknown main item tag 0x0 [ 347.008322][ T189] glorious 0003:258A:0033.000B: unknown main item tag 0x0 [ 347.048753][ T189] glorious 0003:258A:0033.000B: unknown main item tag 0x0 [ 347.065393][ T9461] batman_adv: batadv0: Adding interface: veth0 [ 347.190619][ T189] glorious 0003:258A:0033.000B: unknown main item tag 0x0 [ 347.201010][ T9461] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.266327][ T189] glorious 0003:258A:0033.000B: unknown main item tag 0x0 [ 347.294051][ T189] glorious 0003:258A:0033.000B: unknown main item tag 0x0 [ 347.346396][ T189] glorious 0003:258A:0033.000B: hidraw0: USB HID v0.04 Device [Glorious Model D] on usb-dummy_hcd.3-1/input0 [ 347.459503][ T9461] batman_adv: batadv0: Interface activated: veth0 [ 347.596775][ T9481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.472154][ T9481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.520257][ T9481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.566020][ T9481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.605805][ T9481] batman_adv: batadv0: Interface deactivated: veth0 [ 348.665295][ T9481] batman_adv: batadv0: Removing interface: veth0 [ 348.684901][ T9475] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 348.729429][ T9486] lo speed is unknown, defaulting to 1000 [ 348.735674][ T9486] lo speed is unknown, defaulting to 1000 [ 348.741709][ T9486] lo speed is unknown, defaulting to 1000 [ 348.748006][ T9486] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 348.762188][ T9486] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 348.779240][ T9486] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 348.792864][ T9486] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 348.857539][ T9486] lo speed is unknown, defaulting to 1000 [ 348.864049][ T9486] lo speed is unknown, defaulting to 1000 [ 348.870386][ T9486] lo speed is unknown, defaulting to 1000 [ 348.877040][ T9486] lo speed is unknown, defaulting to 1000 [ 348.883384][ T9486] lo speed is unknown, defaulting to 1000 [ 348.946778][ T9473] CIFS: VFS: cifs_mount failed w/return code = -112 [ 349.097590][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.984'. [ 349.131760][ T9495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.984'. [ 349.290876][ T189] usb 4-1: USB disconnect, device number 34 [ 349.324183][ T9495] netlink: 'syz.2.984': attribute type 13 has an invalid length. [ 349.586838][ T9495] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 349.669389][ T9496] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 349.733049][ T30] audit: type=1400 audit(1787692636.382:1269): avc: denied { sqpoll } for pid=9499 comm="syz.1.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 349.799341][ T9496] block device autoloading is deprecated and will be removed. [ 349.959210][ T9505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.032087][ T189] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 350.051310][ T9505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.210641][ T9507] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 350.231861][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.989'. [ 350.290778][ T9514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9514 comm=syz.2.990 [ 350.371802][ T9511] team0: Device wg0 is of different type [ 350.393882][ T30] audit: type=1400 audit(1787692636.991:1270): avc: denied { open } for pid=9499 comm="syz.1.986" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25416 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 350.479456][ T9511] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 350.504432][ T30] audit: type=1400 audit(1787692637.019:1271): avc: denied { connect } for pid=9508 comm="syz.2.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 350.696018][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 350.877684][ T9] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 350.919009][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.396164][ T9534] CIFS: Attempting to mount //127.0.0.1/share [ 351.438175][ T9534] CIFS: VFS: Error connecting to socket. Aborting operation. [ 351.501366][ T9534] CIFS: VFS: cifs_mount failed w/return code = -101 [ 352.329212][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.999'. [ 352.826976][ T5780] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 353.012932][ T5780] usb 3-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 353.069306][ T5780] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 353.098617][ T189] usb 2-1: unable to get BOS descriptor or descriptor too short [ 353.160574][ T189] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 353.173750][ T5780] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 353.215773][ T9] cxacru 5-1:1.0: send of cm 0x90 failed (-104) [ 353.226629][ T30] audit: type=1400 audit(1787692639.594:1272): avc: denied { kexec_image_load } for pid=9543 comm="syz.0.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 353.263549][ T189] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 353.307566][ T5780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.323559][ T9549] cxacru 5-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 353.334289][ T189] usb 2-1: can't read configurations, error -71 [ 353.373535][ T5780] usb 3-1: Product: syz [ 353.396827][ T9549] cxacru 5-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 353.405041][ T5780] usb 3-1: Manufacturer: syz [ 353.409774][ T30] audit: type=1400 audit(1787692639.761:1273): avc: denied { firmware_load } for pid=9549 comm="cxacru" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 353.445771][ T5780] usb 3-1: SerialNumber: syz [ 353.733244][ T5780] kaweth 3-1:1.0: Firmware present in device. [ 354.003941][ T9542] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 354.162845][ T5780] kaweth 3-1:1.0: Statistics collection: 0 [ 354.192977][ T5780] kaweth 3-1:1.0: Multicast filter limit: 0 [ 354.298861][ T5780] kaweth 3-1:1.0: MTU: 0 [ 354.317200][ T5780] kaweth 3-1:1.0: Read MAC address 00:00:00:00:00:00 [ 354.372337][ T9545] kexec: Could not allocate control_code_buffer [ 354.401301][ T5780] kaweth 3-1:1.0: probe with driver kaweth failed with error -5 [ 354.444872][ T5780] usb 3-1: USB disconnect, device number 29 [ 354.653835][ T9560] input: syz1 as /devices/virtual/input/input21 [ 354.813727][ T9564] overlay: Unknown parameter 'fowner<00000000000000000000' [ 355.491492][ T5780] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 355.665970][ T5780] usb 4-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 1.00 [ 356.388618][ T5780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 356.417978][ T5780] usb 4-1: Product: syz [ 356.437535][ T5780] usb 4-1: Manufacturer: syz [ 356.581113][ T5780] msi2500 4-1:1.0: Registered as swradio24 [ 356.609121][ T5780] msi2500 4-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 356.827020][ T9568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.924081][ T9568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.756548][ T9582] netlink: 'syz.0.1013': attribute type 54 has an invalid length. [ 357.816036][ T5780] usb 4-1: USB disconnect, device number 35 [ 357.864722][ T189] usb 5-1: USB disconnect, device number 29 [ 359.369575][ T30] audit: type=1400 audit(1787692645.281:1274): avc: denied { ioctl } for pid=9601 comm="syz.2.1010" path="socket:[27003]" dev="sockfs" ino=27003 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 360.322834][ T30] audit: type=1400 audit(1787692645.900:1275): avc: denied { accept } for pid=9605 comm="syz.3.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 361.235544][ T30] audit: type=1400 audit(1787692646.149:1276): avc: denied { write } for pid=9605 comm="syz.3.1019" name="functions" dev="configfs" ino=16026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 361.296213][ T9613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.355867][ T9613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.522347][ T30] audit: type=1400 audit(1787692647.266:1277): avc: denied { ioctl } for pid=9627 comm="syz.1.1025" path="socket:[27083]" dev="sockfs" ino=27083 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 362.338826][ T30] audit: type=1400 audit(1787692648.014:1278): avc: denied { getopt } for pid=9628 comm="syz.3.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 362.381222][ T30] audit: type=1400 audit(1787692648.060:1279): avc: denied { mount } for pid=9631 comm="syz.0.1027" name="/" dev="rpc_pipefs" ino=27104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 362.424667][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 362.505127][ T5780] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 362.577602][ T9638] ipvlan2: entered allmulticast mode [ 362.589464][ T30] audit: type=1400 audit(1787692648.254:1280): avc: denied { create } for pid=9641 comm="syz.3.1030" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 362.623387][ T9638] ip6gretap0: entered allmulticast mode [ 362.645820][ T30] audit: type=1400 audit(1787692648.272:1281): avc: denied { write } for pid=9641 comm="syz.3.1030" name="file0" dev="tmpfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 362.674860][ T9] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 362.712695][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.723578][ T9638] batman_adv: batadv0: Adding interface: ipvlan2 [ 363.112359][ T30] audit: type=1400 audit(1787692648.272:1282): avc: denied { open } for pid=9641 comm="syz.3.1030" path="/186/file0" dev="tmpfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 363.724892][ T9638] batman_adv: batadv0: Interface activated: ipvlan2 [ 363.747828][ T30] audit: type=1400 audit(1787692648.282:1283): avc: denied { ioctl } for pid=9641 comm="syz.3.1030" path="/186/file0" dev="tmpfs" ino=1048 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 363.895463][ T9] usb 3-1: USB disconnect, device number 30 [ 363.939079][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1032'. [ 364.089680][ T9659] syzkaller1: entered promiscuous mode [ 364.108185][ T9659] syzkaller1: entered allmulticast mode [ 365.042857][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 365.042868][ T30] audit: type=1400 audit(1787692650.516:1288): avc: denied { setopt } for pid=9672 comm="syz.0.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 365.224435][ T30] audit: type=1400 audit(1787692650.544:1289): avc: denied { write } for pid=9672 comm="syz.0.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 366.097675][ T30] audit: type=1400 audit(1787692650.627:1290): avc: denied { read } for pid=9672 comm="syz.0.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 366.178374][ T9689] overlayfs: failed to resolve './file0': -2 [ 366.241547][ T5329] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 366.283063][ T9689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.341804][ T9689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.383769][ T9689] binfmt_misc: register: failed to install interpreter ./file0 [ 366.419044][ T9689] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1041'. [ 366.434477][ T5329] usb 2-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 1.00 [ 366.460515][ T5329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 366.488631][ T5329] usb 2-1: Product: syz [ 366.507644][ T5329] usb 2-1: Manufacturer: syz [ 366.551113][ T30] audit: type=1400 audit(1787692651.910:1291): avc: denied { write } for pid=9691 comm="syz.3.1043" name="functions" dev="configfs" ino=16026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 366.634438][ T30] audit: type=1400 audit(1787692651.938:1292): avc: denied { write } for pid=9691 comm="syz.3.1043" name="c.1" dev="configfs" ino=19311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 366.666598][ T5329] msi2500 2-1:1.0: Registered as swradio24 [ 366.680920][ T5329] msi2500 2-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 366.698674][ T30] audit: type=1400 audit(1787692651.938:1293): avc: denied { write } for pid=9691 comm="syz.3.1043" name="c.1" dev="configfs" ino=19311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 366.796079][ T9683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.871587][ T9683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.919628][ T5329] usb 2-1: USB disconnect, device number 29 [ 367.286557][ T9706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.314159][ T9706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.662527][ T30] audit: type=1400 audit(1787692652.935:1294): avc: denied { connect } for pid=9719 comm="syz.2.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 367.683804][ T5696] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 367.872668][ T5696] usb 4-1: Using ep0 maxpacket: 32 [ 367.883607][ T5696] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 367.921122][ T5696] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 367.939123][ T5696] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 367.969789][ T5329] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 367.978914][ T5696] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 368.006627][ T5696] usb 4-1: config 1 has no interface number 0 [ 368.026067][ T5696] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 368.085427][ T5696] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 368.134450][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.143602][ T5329] usb 2-1: device descriptor read/64, error -71 [ 368.184200][ T5696] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 368.413917][ T5329] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 368.587522][ T5329] usb 2-1: device descriptor read/64, error -71 [ 368.728411][ T5329] usb usb2-port1: attempt power cycle [ 368.808098][ T5696] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 369.108295][ T5329] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 369.167100][ T5696] usb 4-1: USB disconnect, device number 36 [ 369.196116][ T5329] usb 2-1: device descriptor read/8, error -71 [ 369.212287][ T5696] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 369.486280][ T5329] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 369.529918][ T5329] usb 2-1: device descriptor read/8, error -71 [ 369.681488][ T5329] usb usb2-port1: unable to enumerate USB device [ 369.797111][ T9737] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1054'. [ 371.336116][ T9733] syz.3.1055 (9733): drop_caches: 2 [ 371.514644][ T9754] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 371.514644][ T9754] [ 371.813099][ T9754] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 371.965604][ T9762] 9p: Bad value for 'wfdno' [ 371.977976][ T9754] CIFS: Attempting to mount //127.0.0.1/share [ 372.417424][ T9754] CIFS: VFS: Error connecting to socket. Aborting operation. [ 372.457483][ T9754] CIFS: VFS: cifs_mount failed w/return code = -4 [ 372.768564][ T5696] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 372.966550][ T5696] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 373.019154][ T5696] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 373.160411][ T5696] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 373.234507][ T5696] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 373.306738][ T9777] syzkaller0: entered promiscuous mode [ 373.320316][ T5696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.362978][ T9777] syzkaller0: entered allmulticast mode [ 373.375404][ T9767] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 373.623471][ T5696] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 373.677229][ T5696] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input22 [ 373.896218][ T5696] usb 2-1: USB disconnect, device number 34 [ 373.902176][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 374.932118][ T30] audit: type=1400 audit(1787692659.628:1295): avc: denied { connect } for pid=9784 comm="syz.0.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 375.155883][ T30] audit: type=1400 audit(1787692659.849:1296): avc: denied { bind } for pid=9782 comm="syz.1.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 375.262535][ T30] audit: type=1400 audit(1787692659.914:1297): avc: denied { connect } for pid=9782 comm="syz.1.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 375.370922][ T30] audit: type=1400 audit(1787692659.914:1298): avc: denied { write } for pid=9782 comm="syz.1.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 375.637740][ T9792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9792 comm=syz.0.1069 [ 376.189917][ T9800] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1071'. [ 376.696206][ T30] audit: type=1800 audit(1787692661.271:1299): pid=9796 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1070" name="bus" dev="ramfs" ino=27905 res=0 errno=0 [ 377.105052][ T9810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1072'. [ 378.014775][ T30] audit: type=1400 audit(1787692662.490:1300): avc: denied { read } for pid=9814 comm="syz.0.1076" dev="sockfs" ino=28240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 379.089789][ T9822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.136580][ T9822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.152816][ T9826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1080'. [ 379.193760][ T9822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.227150][ T9822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.430116][ T5780] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 379.471506][ T9838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1082'. [ 379.670694][ T5780] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 379.694129][ T9838] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1082'. [ 379.708148][ T5780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.719136][ T9841] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 380.184247][ T9838] lo speed is unknown, defaulting to 1000 [ 380.578961][ T9847] SELinux: policydb magic number 0x39fd4e99 does not match expected magic number 0xf97cff8c [ 380.589688][ T30] audit: type=1400 audit(1787692664.862:1301): avc: denied { load_policy } for pid=9846 comm="syz.0.1083" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 380.632871][ T5780] cxacru 4-1:1.0: send of cm 0x90 failed (-71) [ 380.713492][ T5780] usb 4-1: USB disconnect, device number 37 [ 380.736568][ T9847] SELinux: failed to load policy [ 381.069967][ T9853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.134576][ T9853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.202100][ T9853] device-mapper: ioctl: Invalid ioctl structure: name t, dev f801 [ 381.253560][ T9853] device-mapper: ioctl: Unable to change name on mapped device t to one that already exists: j [ 382.910967][ T30] audit: type=1400 audit(1787692667.004:1302): avc: denied { write } for pid=9863 comm="syz.4.1088" name="nfsd.fh" dev="proc" ino=4026533043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 383.039356][ T30] audit: type=1400 audit(1787692667.004:1303): avc: denied { add_name } for pid=9863 comm="syz.4.1088" name="channel" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 383.096721][ T9867] nvme_fabrics: unknown parameter or missing value 'á/¢F[=zGϽÔi>óòùP ÞÄ-œº"3â~ö4"$"�è3Ï…}*2ªóÉ%I#z¬PÎpê:ñ%Tê?zúusù$1áaè#œqs' in ctrl creation request [ 383.143267][ T30] audit: type=1400 audit(1787692667.004:1304): avc: denied { create } for pid=9863 comm="syz.4.1088" name="channel" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysctl_rpc_t tclass=file permissive=1 [ 383.337498][ T30] audit: type=1400 audit(1787692667.004:1305): avc: denied { associate } for pid=9863 comm="syz.4.1088" name="channel" scontext=root:object_r:sysctl_rpc_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 383.913041][ T30] audit: type=1400 audit(1787692667.937:1306): avc: denied { write } for pid=9881 comm="syz.4.1090" name="ports" dev="configfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 384.035906][ T30] audit: type=1400 audit(1787692667.983:1307): avc: denied { write } for pid=9881 comm="syz.4.1090" name="ports" dev="configfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 384.190813][ T30] audit: type=1400 audit(1787692667.983:1308): avc: denied { rmdir } for pid=9881 comm="syz.4.1090" name="1" dev="configfs" ino=28620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 384.483873][ T30] audit: type=1400 audit(1787692668.463:1309): avc: denied { create } for pid=9896 comm="syz.1.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 384.522507][ T5602] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 384.539843][ T5602] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 384.547887][ T5602] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 384.557323][ T5602] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 384.568394][ T5602] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 385.880479][ T9919] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.946690][ T9895] lo speed is unknown, defaulting to 1000 [ 386.059804][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 386.059814][ T30] audit: type=1400 audit(1787692669.922:1312): avc: denied { bind } for pid=9924 comm="syz.0.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 386.155295][ T30] audit: type=1400 audit(1787692669.922:1313): avc: denied { name_bind } for pid=9924 comm="syz.0.1106" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 386.242576][ T30] audit: type=1400 audit(1787692669.922:1314): avc: denied { node_bind } for pid=9924 comm="syz.0.1106" saddr=224.0.0.2 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 386.472754][ T9895] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.509637][ T9895] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.539085][ T9895] bridge_slave_0: entered allmulticast mode [ 386.556054][ T9895] bridge_slave_0: entered promiscuous mode [ 386.574537][ T9926] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input23 [ 386.601303][ T9895] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.608790][ T9895] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.621004][ T9895] bridge_slave_1: entered allmulticast mode [ 386.636129][ T9895] bridge_slave_1: entered promiscuous mode [ 386.686863][ T9895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.712108][ T9895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.782502][ T9895] team0: Port device team_slave_0 added [ 386.813263][ T9895] team0: Port device team_slave_1 added [ 386.836056][ T5602] Bluetooth: hci5: command tx timeout [ 386.881905][ T9895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.912610][ T9895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.012161][ T9895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.059215][ T9895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.080313][ T9895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.194321][ T9895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.299845][ T9895] hsr_slave_0: entered promiscuous mode [ 387.321065][ T9895] hsr_slave_1: entered promiscuous mode [ 387.335324][ T9941] SELinux: invalid class [ 387.346494][ T9895] debugfs: 'hsr0' already exists in 'hsr' [ 387.362740][ T9895] Cannot create hsr debugfs directory [ 387.372092][ T9922] syz.1.1105 (9922): drop_caches: 2 [ 387.377921][ T9941] SELinux: failed to load policy [ 387.469925][ T9941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1107'. [ 387.803782][ T5696] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 387.885167][ T9895] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 387.915989][ T9895] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 387.939657][ T9895] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 387.976898][ T9895] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 387.987362][ T5696] usb 2-1: Using ep0 maxpacket: 8 [ 388.003574][ T5696] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 388.013471][ T9895] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 388.037999][ T5696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 388.054779][ T9895] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 388.499437][ T30] audit: type=1400 audit(1787692671.768:1315): avc: denied { map } for pid=9954 comm="syz.0.1113" path="socket:[29358]" dev="sockfs" ino=29358 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 388.522802][ T5696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 388.567022][ T5696] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 388.589553][ T9895] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 388.604201][ T5696] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 236 [ 388.621124][ T30] audit: type=1400 audit(1787692671.768:1316): avc: denied { read accept } for pid=9954 comm="syz.0.1113" path="socket:[29358]" dev="sockfs" ino=29358 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 388.670127][ T5696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.689105][ T5696] usb 2-1: config 0 descriptor?? [ 388.699109][ T9895] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 388.721661][ T9944] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 388.760088][ T5696] hub 2-1:0.0: bad descriptor, ignoring hub [ 388.795830][ T5696] hub 2-1:0.0: probe with driver hub failed with error -5 [ 388.887713][ T30] audit: type=1400 audit(1787692672.534:1317): avc: denied { read } for pid=9963 comm="syz.3.1115" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 388.932214][ T9895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.992260][ T9895] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.011296][ T30] audit: type=1400 audit(1787692672.534:1318): avc: denied { open } for pid=9963 comm="syz.3.1115" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 389.056851][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.063965][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.096435][ T5597] Bluetooth: hci5: command tx timeout [ 389.106016][ T5602] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 389.139177][ T5609] usb 2-1: USB disconnect, device number 35 [ 389.168590][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.176969][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.206882][ T30] audit: type=1400 audit(1787692672.580:1319): avc: denied { ioctl } for pid=9963 comm="syz.3.1115" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 389.348312][ T9972] CIFS: Attempting to mount //127.0.0.1/share [ 389.870910][ T9895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.627726][ T9991] lo speed is unknown, defaulting to 1000 [ 391.058986][ T9895] veth0_vlan: entered promiscuous mode [ 391.098420][ T9895] veth1_vlan: entered promiscuous mode [ 391.185275][ T9895] veth0_macvtap: entered promiscuous mode [ 391.244775][ T9895] veth1_macvtap: entered promiscuous mode [ 391.291696][ T30] audit: type=1400 audit(1787692674.741:1320): avc: denied { mounton } for pid=9998 comm="syz.4.1119" path="/236/dir0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 391.515192][ T5602] Bluetooth: hci5: command tx timeout [ 392.593426][ T9972] CIFS: VFS: Error connecting to socket. Aborting operation. [ 392.666211][ T9895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.762422][ T9895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.861625][ T30] audit: type=1400 audit(1787692674.870:1321): avc: denied { cmd } for pid=9998 comm="iou-wrk-10000" path="socket:[29653]" dev="sockfs" ino=29653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 392.922035][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.085500][ T9972] CIFS: VFS: cifs_mount failed w/return code = -4 [ 393.098130][ T5829] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.144105][ T5829] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.181121][T10006] kvm: pic: single mode not supported [ 393.183176][ T9985] CIFS: Attempting to mount //127.0.0.1/share [ 393.204246][ T135] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.224174][T10006] kvm: pic: single mode not supported [ 393.224324][T10006] kvm: pic: level sensitive irq not supported [ 393.490387][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.525949][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.635119][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.669828][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.902345][ T30] audit: type=1400 audit(1787692677.159:1322): avc: denied { mounton } for pid=9895 comm="syz-executor" path="/root/syzkaller.DlpZhg/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 393.998592][ T9985] CIFS: VFS: cifs_mount failed w/return code = -112 [ 394.033561][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 394.043747][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 394.055143][ T30] audit: type=1400 audit(1787692677.187:1323): avc: denied { mounton } for pid=9895 comm="syz-executor" path="/root/syzkaller.DlpZhg/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 394.169009][ T5609] hsr0: entered promiscuous mode [ 394.180419][T10027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40466 sclass=netlink_route_socket pid=10027 comm=syz.5.1095 [ 394.209047][ T30] audit: type=1400 audit(1787692677.187:1324): avc: denied { mounton } for pid=9895 comm="syz-executor" path="/root/syzkaller.DlpZhg/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=30077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 394.357921][ T30] audit: type=1400 audit(1787692677.196:1325): avc: denied { mounton } for pid=9895 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 394.572566][ T30] audit: type=1400 audit(1787692677.196:1326): avc: denied { mount } for pid=9895 comm="syz-executor" name="/" dev="gadgetfs" ino=7803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 395.624902][ T5602] Bluetooth: hci5: command tx timeout [ 395.678108][T10037] bridge_slave_0: left promiscuous mode [ 395.701882][T10037] macvtap1: left promiscuous mode [ 395.724040][ T5785] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 395.822781][ T5831] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.908209][ T30] audit: type=1400 audit(1787692677.206:1327): avc: denied { mount } for pid=9895 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 395.940234][ T5785] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 395.969036][ T5831] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.978810][T10044] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 395.998464][ T5785] usb 6-1: too many configurations: 44, using maximum allowed: 8 [ 396.035868][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.057399][ T30] audit: type=1400 audit(1787692677.206:1328): avc: denied { mounton } for pid=9895 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 396.086137][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.117725][ T5785] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.164618][ T5785] usb 6-1: Product: syz [ 396.182488][ T5785] usb 6-1: Manufacturer: syz [ 396.201533][ T5785] usb 6-1: SerialNumber: syz [ 396.478166][ T5784] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 396.493863][T10057] CIFS: Attempting to mount //127.0.0.1/share [ 396.520473][T10057] CIFS: VFS: Error connecting to socket. Aborting operation. [ 396.544963][T10057] CIFS: VFS: cifs_mount failed w/return code = -101 [ 396.715563][ T5785] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 396.925584][ T5785] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 396.964761][ T5785] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 397.009404][ T5785] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 397.064386][ T5785] usb 2-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 397.100166][ T5785] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 397.153765][ T5785] usb 2-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 397.211284][ T5785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.257212][T10060] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 397.295413][ T5785] ims_pcu 2-1:1.0: Max IN packet size is too small (0) [ 397.349374][ T5785] ims_pcu 2-1:1.0: probe with driver ims_pcu failed with error -22 [ 397.430595][T10031] binder: 10030:10031 ioctl 541b 0 returned -22 [ 403.778850][ C0] sched: DL replenish lagged too much [ 460.625633][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.329775][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 511.336735][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9952/1:b..l [ 511.345024][ C0] rcu: (detected by 0, t=10502 jiffies, g=58033, q=1943 ncpus=1) [ 511.352814][ C0] task:syz.3.1111 state:R running task stack:22968 pid:9952 tgid:9952 ppid:5593 task_flags:0x40064c flags:0x00080001 [ 511.366903][ C0] Call Trace: [ 511.370173][ C0] [ 511.373092][ C0] __schedule+0x1259/0x6920 [ 511.377592][ C0] ? get_signal+0x1ec7/0x21e0 [ 511.382241][ C0] ? unwind_get_return_address+0x59/0xa0 [ 511.387857][ C0] ? arch_stack_walk+0x88/0xf0 [ 511.392605][ C0] ? __pfx___schedule+0x10/0x10 [ 511.397437][ C0] ? rcu_is_watching+0x13/0xc0 [ 511.402184][ C0] preempt_schedule_irq+0x4e/0x90 [ 511.407188][ C0] irqentry_exit+0x205/0xa10 [ 511.411752][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 511.417717][ C0] RIP: 0010:rcu_is_watching+0x0/0xc0 [ 511.422985][ C0] Code: 5b e9 84 2b e0 09 90 0f 0b 90 5b c3 cc cc cc cc e8 05 2e 8f 00 eb cd 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 53 65 48 ff 05 9a 95 9b 12 e8 ed fe dc 09 48 c7 c3 [ 511.442573][ C0] RSP: 0000:ffffc9000359f160 EFLAGS: 00000293 [ 511.448610][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 511.456551][ C0] RDX: ffff88802ffd4b00 RSI: ffffffff8288c81c RDI: ffff88802ffd4b00 [ 511.464492][ C0] RBP: ffffea00020b77c0 R08: 0000000000000005 R09: 0000000000000000 [ 511.472434][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 511.480374][ C0] R13: 0000000006920290 R14: 0000000000000000 R15: 000000000362029d [ 511.488333][ C0] ? __update_page_owner_free_handle.isra.0+0x32c/0x4b0 [ 511.495252][ C0] __update_page_owner_free_handle.isra.0+0x331/0x4b0 [ 511.501993][ C0] ? page_ext_put+0x3e/0xd0 [ 511.506471][ C0] __reset_page_owner+0x93/0x190 [ 511.511388][ C0] free_unref_folios+0xa4a/0x1790 [ 511.516388][ C0] ? folios_put_refs+0x51d/0xaa0 [ 511.521322][ C0] ? folios_put_refs+0x51d/0xaa0 [ 511.526243][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 511.532045][ C0] folios_put_refs+0x585/0xaa0 [ 511.536796][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 511.542077][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 511.548405][ C0] shmem_undo_range+0x5e5/0x1570 [ 511.553328][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 511.558701][ C0] ? __lock_acquire+0x4c5/0x1ec0 [ 511.563649][ C0] ? find_held_lock+0x2b/0x80 [ 511.568305][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 511.573489][ C0] shmem_evict_inode+0x3b1/0xca0 [ 511.578418][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 511.583870][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 511.589922][ C0] ? find_held_lock+0x2b/0x80 [ 511.594583][ C0] ? evict+0x37e/0xad0 [ 511.598642][ C0] ? evict+0x37e/0xad0 [ 511.602694][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 511.608146][ C0] evict+0x3c2/0xad0 [ 511.612033][ C0] ? __pfx_evict+0x10/0x10 [ 511.616427][ C0] ? iput.part.0+0x981/0x1050 [ 511.621083][ C0] iput.part.0+0x989/0x1050 [ 511.625578][ C0] iput+0x35/0x40 [ 511.629203][ C0] dentry_unlink_inode+0x284/0x470 [ 511.634314][ C0] dentry_kill+0x25d/0xc20 [ 511.638715][ C0] dput.part.0+0xd7/0x240 [ 511.643065][ C0] dput+0x1f/0x30 [ 511.646676][ C0] __fput+0x519/0xb50 [ 511.650646][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 511.655834][ C0] task_work_run+0x150/0x240 [ 511.660426][ C0] ? __pfx_task_work_run+0x10/0x10 [ 511.665537][ C0] ? kasan_check_range+0x180/0x1e0 [ 511.670653][ C0] do_exit+0x951/0x2ae0 [ 511.674793][ C0] ? __pfx_do_exit+0x10/0x10 [ 511.679358][ C0] ? __pfx_proc_coredump_connector+0x10/0x10 [ 511.685355][ C0] do_group_exit+0xd5/0x2a0 [ 511.689844][ C0] get_signal+0x1ec7/0x21e0 [ 511.694326][ C0] ? __pfx_get_signal+0x10/0x10 [ 511.699169][ C0] ? __pfx_force_sig_fault+0x10/0x10 [ 511.704443][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 511.709990][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 511.716147][ C0] irqentry_exit+0x402/0xa10 [ 511.720719][ C0] asm_exc_page_fault+0x26/0x30 [ 511.725558][ C0] RIP: 0033:0x7f797df9e0e1 [ 511.729949][ C0] RSP: 002b:00000000ffffff30 EFLAGS: 00010217 [ 511.736002][ C0] RAX: 0000000000000000 RBX: 00007f797e225fa0 RCX: 00007f797df9e0d9 [ 511.743961][ C0] RDX: 0000000000000000 RSI: 00000000ffffff30 RDI: 0000000000000000 [ 511.751919][ C0] RBP: 00007f797e035024 R08: 0000000000000000 R09: 0000000000000000 [ 511.759876][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.767828][ C0] R13: 00007f797e226038 R14: 00007f797e225fa0 R15: 00007ffc6af88c78 [ 511.775803][ C0] [ 511.778816][ C0] rcu: rcu_preempt kthread starved for 558 jiffies! g58033 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 511.789630][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 511.799585][ C0] rcu: RCU grace-period kthread stack dump: [ 511.805456][ C0] task:rcu_preempt state:R running task stack:27576 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 511.818902][ C0] Call Trace: [ 511.822157][ C0] [ 511.825081][ C0] __schedule+0x1259/0x6920 [ 511.829582][ C0] ? __lock_acquire+0x4c5/0x1ec0 [ 511.834504][ C0] ? __pfx___schedule+0x10/0x10 [ 511.839325][ C0] ? find_held_lock+0x2b/0x80 [ 511.843992][ C0] ? schedule+0x225/0x2c0 [ 511.848298][ C0] schedule+0xdd/0x2c0 [ 511.852342][ C0] schedule_timeout+0x127/0x280 [ 511.857174][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 511.862525][ C0] ? __pfx_process_timeout+0x10/0x10 [ 511.867803][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 511.873595][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 511.879046][ C0] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 511.883809][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 511.889093][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 511.894042][ C0] ? rcu_is_watching+0x13/0xc0 [ 511.898796][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 511.904580][ C0] rcu_gp_kthread+0x17a/0x220 [ 511.909237][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 511.914414][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 511.920197][ C0] ? __kthread_parkme+0x18f/0x230 [ 511.925198][ C0] ? kthread+0x13a/0x450 [ 511.929416][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 511.934606][ C0] kthread+0x373/0x450 [ 511.938663][ C0] ? __pfx_kthread+0x10/0x10 [ 511.943230][ C0] ret_from_fork+0x730/0xd60 [ 511.947796][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 511.952880][ C0] ? __switch_to+0x800/0x10f0 [ 511.957535][ C0] ? __pfx_kthread+0x10/0x10 [ 511.962103][ C0] ret_from_fork_asm+0x1a/0x30 [ 511.966848][ C0] [ 511.969856][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 511.976161][ C0] CPU: 0 UID: 0 PID: 3219 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 511.987425][ C0] Tainted: [L]=SOFTLOCKUP [ 511.991737][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 512.001783][ C0] Workqueue: bat_events batadv_tt_purge [ 512.007311][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 512.013733][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 c6 a6 17 f6 48 89 df e8 de fc 17 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 d5 06 07 f6 65 48 83 3d 64 b5 bb 08 00 74 16 5b [ 512.033328][ C0] RSP: 0000:ffffc90000007c60 EFLAGS: 00000246 [ 512.039397][ C0] RAX: 0000000000000002 RBX: ffff88802b234000 RCX: 0000000000000004 [ 512.047348][ C0] RDX: 0000000000000102 RSI: ffffffff8e3e4ae2 RDI: ffffffff8c61c980 [ 512.055310][ C0] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 512.063255][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8881b7568e10 [ 512.071255][ C0] R13: ffff8881b7568e08 R14: ffff88802b86b4a3 R15: ffff88802b86b410 [ 512.079215][ C0] FS: 0000000000000000(0000) GS:ffff888123b79000(0000) knlGS:0000000000000000 [ 512.088129][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 512.094697][ C0] CR2: 00007fc801a929a8 CR3: 000000007c3c1000 CR4: 00000000003526f0 [ 512.102644][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 512.110606][ C0] DR3: 0000000000000001 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 512.118572][ C0] Call Trace: [ 512.121829][ C0] [ 512.124650][ C0] dummy_timer+0x1d89/0x3700 [ 512.129234][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 512.135015][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 512.140641][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 512.145556][ C0] ? mark_held_locks+0x40/0x70 [ 512.150297][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 512.156077][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 512.160992][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 512.166187][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 512.171274][ C0] handle_softirqs+0x1e6/0x9d0 [ 512.176018][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 512.181279][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 512.186553][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 512.192160][ C0] ? batadv_tt_purge+0x25d/0xbd0 [ 512.197077][ C0] do_softirq+0xaf/0xf0 [ 512.201220][ C0] [ 512.204132][ C0] [ 512.207052][ C0] __local_bh_enable_ip+0xff/0x120 [ 512.212137][ C0] batadv_tt_purge+0x25d/0xbd0 [ 512.216885][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 512.222151][ C0] ? process_one_work+0x906/0x1b10 [ 512.227237][ C0] ? process_one_work+0x906/0x1b10 [ 512.232328][ C0] process_one_work+0xac7/0x1b10 [ 512.237247][ C0] ? __pfx_process_one_work+0x10/0x10 [ 512.242602][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 512.247883][ C0] rescuer_thread+0x918/0x14e0 [ 512.252642][ C0] ? rescuer_thread+0x256/0x14e0 [ 512.257557][ C0] ? rescuer_thread+0x118/0x14e0 [ 512.262485][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 512.267665][ C0] ? __kthread_parkme+0x18f/0x230 [ 512.272666][ C0] ? kthread+0x13a/0x450 [ 512.277058][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 512.282232][ C0] kthread+0x373/0x450 [ 512.286297][ C0] ? __pfx_kthread+0x10/0x10 [ 512.290870][ C0] ret_from_fork+0x730/0xd60 [ 512.295493][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 512.300594][ C0] ? __switch_to+0x800/0x10f0 [ 512.305284][ C0] ? __pfx_kthread+0x10/0x10 [ 512.309876][ C0] ret_from_fork_asm+0x1a/0x30 [ 512.314654][ C0] [ 513.403420][ T1304] ieee802154 phy1 wpan1: encryption failed: -22