last executing test programs: 34m50.823291074s ago: executing program 0 (id=272): ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000280)={{}, {0xf, 0x40}, 0x0, 0x6}) 34m49.557113352s ago: executing program 0 (id=276): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() r1 = syz_open_dev$video(&(0x7f0000003a40), 0x9, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000000)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r0, 0xddccaa0f7567b426, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c020000190001000500000001000000fe8800000000000000120000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000000000000000900000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000010001000000000084010500ac1414aa00000000000000000000000000000000330000000000000064010100000000000000000000000000ff340000000000000000000000000000402000007f000001000000000000000000000000000020003c00000002000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac14144300000000000000000000000000000000330000000200000000000000000000000000ffffac1414aa000000000000000000000000000000000000000020010000000000000000000000000000000004d26c000000000000000000000000000000000000000000000100000000000000000c0000000000000000000000ac1e0101000000000000000000000000000004d26c00000002000000e00000020000000000000000000000000000000002000100"/500], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4b77}}], 0x18}, 0x4000004) setsockopt$inet_int(r6, 0x0, 0x22, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000000)) setsockopt$inet_int(r6, 0x0, 0xc, &(0x7f0000000040)=0x95, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x9, 0x10}, 0xc) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5f997dfd1362b9e4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000140), &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080), &(0x7f0000000180)=[0x0, 0x0], 0x0, 0xa, 0x0, 0x2}) 34m47.857365393s ago: executing program 0 (id=282): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0xf0, 0x0, 0x0, 0x0, 0x0}, 0x50) 34m47.701462576s ago: executing program 0 (id=284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x9, 0x7, 0x36, @local, @local, 0x8000, 0x20, 0x4, 0x7fff}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES32=r2, @ANYBLOB="08000600030000000800040015000000340006801400040020010000000000000000000000000002060005004e23000014000400fe8000050000000000000000000000bb080002000300000005000500050000005ea34c6383508aa3d1f6c93d425f4097f9"], 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x40c0) socket(0xa, 0x3, 0x87) socket(0x400000000010, 0x3, 0x0) socket(0x15, 0x5, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) socket$inet_sctp(0x2, 0x5, 0x84) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xbb, &(0x7f00000010c0)=""/187, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r8, 0x29, 0x13, 0x0, &(0x7f0000000080)) r9 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r10 = openat$binfmt(0xffffffffffffff9c, r9, 0x42, 0x1ff) close(r10) execveat$binfmt(0xffffffffffffff9c, r9, 0x0, 0x0, 0x0) r11 = openat$binfmt(0xffffffffffffff9c, r9, 0x2, 0x0) close(r11) 34m45.372988155s ago: executing program 0 (id=289): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) accept4(r0, &(0x7f0000000040)=@nl=@proc, &(0x7f00000000c0)=0x80, 0x80800) (async) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0xe56c) (async) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x0) (async) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 34m44.200803385s ago: executing program 0 (id=295): prlimit64(0x0, 0xf, &(0x7f0000000300)={0xa, 0xe0cf}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = getpgid(0x0) ptrace$ARCH_SET_CPUID(0x1e, r0, 0x1, 0x1012) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x7, @win={{0xafb6, 0x8, 0x1, 0x8}, 0x6, 0x4, &(0x7f0000000080)={{0x1, 0x8, 0xf, 0x1}, &(0x7f0000000040)={{0x7b3, 0x6, 0xe14, 0x4}}}, 0x7, 0x0, 0xf}}) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) poll(&(0x7f0000000280)=[{r1, 0x82a1}, {r1, 0x2001}, {r2, 0x2520}, {r1, 0x200}, {r1, 0xc}, {r1, 0x4050}, {0xffffffffffffffff, 0x200}], 0x7, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) r4 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r4, &(0x7f00000000c0)=""/27, 0xd87ae55a18a1d655, 0x40002000, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000340), 0x2, 0x2) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000380)=0x9, 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r5, 0x40049366, &(0x7f0000000440)=0x4) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000480)={0x6, 0x1000, 0x33, 0x401}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x21000044}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="000126bd7000"/22], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000000600)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000640)={0x0, 0x4}, &(0x7f0000000680)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000006c0)={r8, 0x5, 0x0, 0x5}, 0x10) r9 = syz_open_dev$ndb(&(0x7f0000000700), 0x0, 0x0) ioctl$NBD_PRINT_DEBUG(r9, 0xab06) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000800)={'wg2\x00'}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000008c0)={0x3ff}, 0x8) 34m28.099930172s ago: executing program 32 (id=295): prlimit64(0x0, 0xf, &(0x7f0000000300)={0xa, 0xe0cf}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = getpgid(0x0) ptrace$ARCH_SET_CPUID(0x1e, r0, 0x1, 0x1012) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x7, @win={{0xafb6, 0x8, 0x1, 0x8}, 0x6, 0x4, &(0x7f0000000080)={{0x1, 0x8, 0xf, 0x1}, &(0x7f0000000040)={{0x7b3, 0x6, 0xe14, 0x4}}}, 0x7, 0x0, 0xf}}) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) poll(&(0x7f0000000280)=[{r1, 0x82a1}, {r1, 0x2001}, {r2, 0x2520}, {r1, 0x200}, {r1, 0xc}, {r1, 0x4050}, {0xffffffffffffffff, 0x200}], 0x7, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) r4 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r4, &(0x7f00000000c0)=""/27, 0xd87ae55a18a1d655, 0x40002000, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000340), 0x2, 0x2) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000380)=0x9, 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r5, 0x40049366, &(0x7f0000000440)=0x4) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000480)={0x6, 0x1000, 0x33, 0x401}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x21000044}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="000126bd7000"/22], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000000600)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000640)={0x0, 0x4}, &(0x7f0000000680)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000006c0)={r8, 0x5, 0x0, 0x5}, 0x10) r9 = syz_open_dev$ndb(&(0x7f0000000700), 0x0, 0x0) ioctl$NBD_PRINT_DEBUG(r9, 0xab06) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000800)={'wg2\x00'}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000008c0)={0x3ff}, 0x8) 33m29.099428788s ago: executing program 2 (id=457): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002580)=@newtaction={0x14, 0x5a, 0x5, 0x70bd29, 0x25dfdbfb, {0x2}}, 0x14}}, 0x8080) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x0, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x20008844) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3fd, 0x4000009, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x40000, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2, 0x5000000}]}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x3e}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x15, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40090}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x404080, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r7 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r7, 0x400455c8, 0x1) ioctl$TIOCSETD(r7, 0x5412, &(0x7f0000000140)=0xffffffc0) 33m26.45267836s ago: executing program 2 (id=465): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x10448) r0 = socket(0x8, 0x4, 0x3) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000004b00)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d4000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000008000000000000000000000000000000000000000000000000000000000000000000d000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000fdffffff0000000001010000000000000c000800080c48"], 0xd4}, 0x1, 0x0, 0x0, 0x48081}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') (async) unshare(0x6a040000) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x10448) (async) socket(0x8, 0x4, 0x3) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_open_procfs$namespace(0x0, &(0x7f0000004b00)='ns/cgroup\x00') (async) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d4000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000008000000000000000000000000000000000000000000000000000000000000000000d000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000fdffffff0000000001010000000000000c000800080c48"], 0xd4}, 0x1, 0x0, 0x0, 0x48081}, 0x0) (async) 33m25.392791227s ago: executing program 2 (id=470): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x3}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) sendmsg$AUDIT_TRIM(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) timer_create(0x0, &(0x7f0000000480)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xfffe, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006100010000000000000000000a0000000000000000000000080018004e234e23115d9eafde4d3b9d01000000000000001f166e09b49eae874ecfb52e6686bd4fa80fc6c6b659c0f75441908c89c1d2d2914a1a99857ea75457d0468d73f01777aefec7064d0ebb60e2419d792272edc2aa120fb3f6d08adc91d2943a5ce2841197defeac014c07ad988b75247f88583b23c7a23a210eb30b0dfcb8d3f68b10f53d0f3c5f8d7ea97779339f9ebe6425549c55cf360710bc2f1a19e4a941217ce8fc972391bab479"], 0x24}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f00000001c0)={0xe9b, {"4ac84c090829139d2e39e106b0af319c", "f651751751426b42a73bac2e05602052", "1e5d41057420f5c22ecdccef8094db00"}, 0x9, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) 33m22.179452106s ago: executing program 2 (id=482): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89801) move_mount(r1, &(0x7f0000000600)='.\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x50) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0xb}}, './file0/file0\x00'}) r6 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SYNC(r6, 0x9408, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)='B'}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) 33m21.728789864s ago: executing program 2 (id=483): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x6}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd700000dcdf251200000008000300", @ANYRES32=r5, @ANYBLOB="0a0006000802110073bdc9f404008100080014"], 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) connect$unix(r7, &(0x7f00000003c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r7, 0x3328}], 0x1, 0x0, 0x0, 0x0) close(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008031, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(0x0, 0x24fd, 0x143102) shutdown(r0, 0x1) 33m21.037255683s ago: executing program 2 (id=487): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x3}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xd) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000003c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r5, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e23, 0xffffffff, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b0050000000000002900000036"], 0x5b0}, 0x20008001) sendto$inet6(r5, 0x0, 0x0, 0xc00c800, 0x0, 0x0) 33m20.975447349s ago: executing program 33 (id=487): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x3}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xd) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000003c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r5, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e23, 0xffffffff, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b0050000000000002900000036"], 0x5b0}, 0x20008001) sendto$inet6(r5, 0x0, 0x0, 0xc00c800, 0x0, 0x0) 7.09690145s ago: executing program 3 (id=6169): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) r3 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r5, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.076183052s ago: executing program 5 (id=6216): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r0, 0x0, 0x0, 0x407f0b00}]) 1.797100825s ago: executing program 5 (id=6218): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r2, 0x800454cf, 0x1fffffffffff8) 1.739282547s ago: executing program 4 (id=6219): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000000)={0xa4, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) 1.554330026s ago: executing program 5 (id=6222): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 1.554194151s ago: executing program 6 (id=6223): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x58a7b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}}, 0x4004000) 1.476121541s ago: executing program 4 (id=6225): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000bc0)={0x9, 0x2, 0x2}) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000c00)='wg0\x00', 0x4) 1.392821964s ago: executing program 6 (id=6226): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7, 0x0, 0x0, 0x41}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.365343342s ago: executing program 4 (id=6227): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000e, 0x5d032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x1, 0xfe}) syz_io_uring_setup(0x2c0e, &(0x7f0000000400)={0x0, 0xb17f, 0xc002}, 0x0, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x5c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000280)={{&(0x7f000062f000/0x4000)=nil, 0x4000}}) 1.317589659s ago: executing program 1 (id=6228): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000005c0)=0x9, 0xfc17) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'syz_tun\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x100f, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.041064843s ago: executing program 1 (id=6229): chdir(&(0x7f0000000540)='./cgroup\x00') r0 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf64(r1, 0x0, 0x1cb) close(r1) 944.067528ms ago: executing program 1 (id=6230): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x6e0, 0x0, 0x200000000000000}]}) 859.902936ms ago: executing program 3 (id=6175): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56113335ae6adec59300db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06460635ed21c4c11cd1a8ec778064c9f62efba2927828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb1180300"}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r2, &(0x7f00000001c0)=0xdd86ffffffffffff, 0xe80) 684.970965ms ago: executing program 3 (id=6231): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 658.682877ms ago: executing program 1 (id=6232): r0 = socket(0xa, 0x2, 0x0) r1 = inotify_init() r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast1, r4}, 0xc) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0004000, @private=0xa010100, r4}, 0xc) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @local, r4}, 0xc) 611.787803ms ago: executing program 3 (id=6233): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d80762ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x80000001, 0x0, 0x0, 0x10000004, {0x40, 0xd08, 0x0, 0xfe, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TIOCGPTPEER(r2, 0x935, 0x200000000005) 509.139139ms ago: executing program 5 (id=6234): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0000306001c000000000000000000000008000000", @ANYRES32=r2, @ANYBLOB="64010101ffffffff000000001c000000000000000000000008"], 0x58}}], 0x1, 0x4880) 509.01519ms ago: executing program 6 (id=6235): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r1}) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) 508.918224ms ago: executing program 1 (id=6236): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000380)="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") ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x8, 0x0, 0x2, 0x0, 0x5, 0x0, 0xfc, 0x80, 0x9, 0x3, 0x0, 0xf, 0xfffffef8, 0x0, 0x0, 0xff, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 484.067818ms ago: executing program 6 (id=6237): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) listxattr(&(0x7f0000000800)='./bus\x00', &(0x7f0000000840)=""/42, 0x2a) 410.591931ms ago: executing program 4 (id=6238): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) 324.967919ms ago: executing program 6 (id=6239): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) 324.857902ms ago: executing program 3 (id=6240): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0x6, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 247.207588ms ago: executing program 5 (id=6241): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x9, 0x2}) 203.278323ms ago: executing program 4 (id=6242): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8", 0x2}], 0x1}}], 0x1, 0x2090) 76.962132ms ago: executing program 4 (id=6243): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4) 76.800383ms ago: executing program 1 (id=6244): msgctl$IPC_SET(0x0, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x0) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) close_range(r0, 0xffffffffffffffff, 0x0) 76.739429ms ago: executing program 6 (id=6245): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x14, r1, 0x3141e0b2751b0f9b, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x6051}, 0x4000) 28.034069ms ago: executing program 5 (id=6246): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmmsg$unix(r2, &(0x7f0000008380)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000811}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e2c}, 0x6e, 0x0}}], 0x2, 0x40008004) 0s ago: executing program 3 (id=6247): prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): "syz.6.5760" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=114275 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2076.574681][T28205] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.5762' sets config #2 [ 2076.580778][ T30] audit: type=1400 audit(2000000662.197:2372): avc: denied { write } for pid=28202 comm="syz.6.5762" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2076.678860][ T30] audit: type=1400 audit(2000000662.207:2373): avc: denied { read write } for pid=28203 comm="syz.1.5761" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2076.830350][ T30] audit: type=1400 audit(2000000662.207:2374): avc: denied { open } for pid=28203 comm="syz.1.5761" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2076.964971][ T30] audit: type=1400 audit(2000000662.327:2375): avc: denied { read } for pid=28203 comm="syz.1.5761" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2077.245207][ T30] audit: type=1400 audit(2000000662.327:2376): avc: denied { open } for pid=28203 comm="syz.1.5761" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2078.700467][T28230] lo speed is unknown, defaulting to 1000 [ 2078.711138][T28230] lo speed is unknown, defaulting to 1000 [ 2079.779296][T26343] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 2080.013403][T26343] usb 5-1: config 0 has no interfaces? [ 2080.030776][T26343] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2080.061211][T26343] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2081.040310][T26343] usb 5-1: Manufacturer: syz [ 2081.148876][T28245] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5770'. [ 2081.253946][T26343] usb 5-1: config 0 descriptor?? [ 2081.324096][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 2081.324112][ T30] audit: type=1400 audit(2000000666.947:2397): avc: denied { create } for pid=28249 comm="syz.3.5771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2081.385919][ T30] audit: type=1400 audit(2000000666.977:2398): avc: denied { read write } for pid=28249 comm="syz.3.5771" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 2081.433964][ T30] audit: type=1400 audit(2000000666.977:2399): avc: denied { open } for pid=28249 comm="syz.3.5771" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 2081.472596][T26343] usb 5-1: USB disconnect, device number 28 [ 2081.479900][T28250] 9p: Unknown access argument A: -22 [ 2081.489236][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 2081.535797][ T30] audit: type=1400 audit(2000000666.977:2400): avc: denied { mount } for pid=28249 comm="syz.3.5771" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 2081.608940][ T30] audit: type=1400 audit(2000000667.097:2401): avc: denied { create } for pid=28249 comm="syz.3.5771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2081.658769][ T30] audit: type=1400 audit(2000000667.097:2402): avc: denied { read write } for pid=28249 comm="syz.3.5771" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 2081.693441][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 2081.726399][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2081.741579][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2081.752649][ T30] audit: type=1400 audit(2000000667.097:2403): avc: denied { open } for pid=28249 comm="syz.3.5771" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 2081.798077][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2081.828901][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40 [ 2081.838040][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2081.856821][ T30] audit: type=1400 audit(2000000667.107:2404): avc: denied { mounton } for pid=28249 comm="syz.3.5771" path="/516/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 2081.880013][ T9] usb 6-1: Product: syz [ 2081.888672][ T9] usb 6-1: Manufacturer: syz [ 2081.899110][ T9] usb 6-1: SerialNumber: syz [ 2082.129963][ T9] usb 6-1: 0:1 : does not exist [ 2082.136815][ T9] usb 6-1: 0:2 : does not exist [ 2082.179144][ T9] usb 6-1: USB disconnect, device number 12 [ 2083.201838][ T30] audit: type=1400 audit(2000000668.827:2405): avc: denied { write } for pid=28261 comm="syz.1.5775" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2084.195996][T28271] lo speed is unknown, defaulting to 1000 [ 2084.207729][T28271] lo speed is unknown, defaulting to 1000 [ 2084.369812][ T30] audit: type=1400 audit(2000000669.987:2406): avc: denied { sys_module } for pid=28263 comm="syz.5.5776" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2086.118466][T11943] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2086.281944][T11943] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2086.318123][T11943] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2086.388837][T11943] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 2086.415364][T11943] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2086.431026][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 2086.431042][ T30] audit: type=1400 audit(2000000672.057:2413): avc: denied { connect } for pid=28296 comm="syz.4.5785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2086.521051][T11943] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 2086.527989][ T30] audit: type=1400 audit(2000000672.057:2414): avc: denied { name_connect } for pid=28296 comm="syz.4.5785" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 2086.562636][T11943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2086.578670][T11943] usb 4-1: Product: syz [ 2086.593221][T11943] usb 4-1: Manufacturer: syz [ 2086.601663][T11943] usb 4-1: SerialNumber: syz [ 2086.623291][ T30] audit: type=1400 audit(2000000672.057:2415): avc: denied { listen } for pid=28296 comm="syz.4.5785" lport=54663 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2087.042867][ T30] audit: type=1400 audit(2000000672.057:2416): avc: denied { accept } for pid=28296 comm="syz.4.5785" lport=54663 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2087.068141][ T30] audit: type=1400 audit(2000000672.057:2417): avc: denied { write } for pid=28296 comm="syz.4.5785" path="socket:[114461]" dev="sockfs" ino=114461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 2087.096632][ T30] audit: type=1400 audit(2000000672.087:2418): avc: denied { setopt } for pid=28296 comm="syz.4.5785" lport=54663 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 2087.138796][ T24] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2087.358924][ T30] audit: type=1400 audit(2000000672.257:2419): avc: denied { read write } for pid=28300 comm="syz.5.5786" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2087.383483][ T30] audit: type=1400 audit(2000000672.257:2420): avc: denied { open } for pid=28300 comm="syz.5.5786" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2087.414380][ T24] usb 2-1: config 0 has no interfaces? [ 2087.490537][ T24] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2087.499881][ T24] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2087.507916][ T24] usb 2-1: Manufacturer: syz [ 2087.514770][ T30] audit: type=1400 audit(2000000672.257:2421): avc: denied { ioctl } for pid=28300 comm="syz.5.5786" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2087.543753][ T24] usb 2-1: config 0 descriptor?? [ 2087.633680][T11943] usb 4-1: USB disconnect, device number 8 [ 2087.699941][ T30] audit: type=1400 audit(2000000672.607:2422): avc: denied { ioctl } for pid=28296 comm="syz.4.5785" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2087.760197][ T24] usb 2-1: USB disconnect, device number 43 [ 2087.913880][T28323] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5789'. [ 2090.713542][T28358] overlayfs: failed to clone upperpath [ 2091.314689][T28351] 9p: Bad value for 'rfdno' [ 2091.398588][T28351] netlink: 'syz.4.5798': attribute type 3 has an invalid length. [ 2091.424318][T28351] netlink: 'syz.4.5798': attribute type 3 has an invalid length. [ 2091.443788][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 2091.443803][ T30] audit: type=1400 audit(2000000677.067:2444): avc: denied { create } for pid=28365 comm="syz.1.5801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2091.750083][ T30] audit: type=1400 audit(2000000677.097:2445): avc: denied { bind } for pid=28365 comm="syz.1.5801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2091.878274][ T30] audit: type=1400 audit(2000000677.507:2446): avc: denied { bind } for pid=28371 comm="syz.1.5803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2091.898535][ T5892] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 2091.928478][T28351] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5798'. [ 2091.967677][ T30] audit: type=1400 audit(2000000677.527:2447): avc: denied { ioctl } for pid=28371 comm="syz.1.5803" path="socket:[114586]" dev="sockfs" ino=114586 ioctlcmd=0x9366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2092.099443][ T30] audit: type=1400 audit(2000000677.527:2448): avc: denied { write } for pid=28371 comm="syz.1.5803" name="tcp6" dev="proc" ino=4026534322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 2092.160751][ T30] audit: type=1400 audit(2000000677.757:2449): avc: denied { setopt } for pid=28362 comm="syz.6.5800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2092.189333][ T5892] usb 4-1: config 0 has no interfaces? [ 2092.198660][ T5892] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2092.211785][ T5892] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2092.238936][ T5892] usb 4-1: Manufacturer: syz [ 2092.252254][ T5892] usb 4-1: config 0 descriptor?? [ 2092.469467][ T24] usb 4-1: USB disconnect, device number 9 [ 2092.516262][ T30] audit: type=1400 audit(2000000678.137:2450): avc: denied { getopt } for pid=28374 comm="syz.4.5804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2092.653884][T28377] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.5804'. [ 2092.761267][T28377] syz.4.5804 (28377): drop_caches: 2 [ 2092.815879][ T30] audit: type=1400 audit(2000000678.277:2451): avc: denied { read } for pid=28374 comm="syz.4.5804" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2092.852510][T28379] netlink: 'syz.1.5806': attribute type 4 has an invalid length. [ 2093.021126][ T30] audit: type=1400 audit(2000000678.277:2452): avc: denied { open } for pid=28374 comm="syz.4.5804" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2093.248286][ T24] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 2093.528446][ T30] audit: type=1400 audit(2000000678.287:2453): avc: denied { ioctl } for pid=28374 comm="syz.4.5804" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2093.638377][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 2093.645297][ T24] usb 2-1: config 1 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2093.734532][ T24] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2093.788227][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 2093.797583][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2093.807031][ T24] usb 2-1: Product: syz [ 2093.811813][ T24] usb 2-1: Manufacturer: syz [ 2093.816450][ T24] usb 2-1: SerialNumber: syz [ 2096.407565][ T24] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input89 [ 2096.443301][ T24] usb 2-1: USB disconnect, device number 44 [ 2096.469488][ T24] appletouch 2-1:1.0: input: appletouch disconnected [ 2096.850186][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 2096.850198][ T30] audit: type=1400 audit(2000000682.478:2460): avc: denied { read write } for pid=28421 comm="syz.5.5816" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2096.885682][ T24] hid_parser_main: 30 callbacks suppressed [ 2096.885696][ T24] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 2097.330893][T11943] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 2097.379435][ T30] audit: type=1400 audit(2000000682.508:2461): avc: denied { open } for pid=28421 comm="syz.5.5816" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2097.403558][ T24] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2097.451012][ T30] audit: type=1400 audit(2000000682.818:2462): avc: denied { map } for pid=28421 comm="syz.5.5816" path="socket:[115700]" dev="sockfs" ino=115700 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2097.525577][T11943] usb 5-1: Using ep0 maxpacket: 8 [ 2097.537001][ T30] audit: type=1400 audit(2000000682.818:2463): avc: denied { read } for pid=28421 comm="syz.5.5816" path="socket:[115700]" dev="sockfs" ino=115700 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2097.581669][T11943] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2097.609220][T11943] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd [ 2097.626951][T11943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2097.656488][T11943] usb 5-1: Product: syz [ 2097.675303][T11943] usb 5-1: Manufacturer: syz [ 2097.680319][T11943] usb 5-1: SerialNumber: syz [ 2098.766338][ T30] audit: type=1400 audit(2000000683.778:2464): avc: denied { write } for pid=28430 comm="syz.5.5821" path="socket:[114672]" dev="sockfs" ino=114672 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2098.791916][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.844191][T28420] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2099.088590][ T30] audit: type=1400 audit(2000000683.778:2465): avc: denied { write } for pid=28430 comm="syz.5.5821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2099.199786][T11943] kalmia 5-1:1.0: probe with driver kalmia failed with error -22 [ 2099.234020][T11943] usb 5-1: USB disconnect, device number 29 [ 2101.364654][ T30] audit: type=1400 audit(2000000686.988:2466): avc: denied { write } for pid=28460 comm="syz.1.5828" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2102.001721][T28469] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5830'. [ 2102.037561][T28473] netlink: 4096 bytes leftover after parsing attributes in process `syz.6.5831'. [ 2102.553356][ T30] audit: type=1400 audit(2000000688.178:2467): avc: denied { setopt } for pid=28478 comm="syz.6.5834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2102.670121][ T30] audit: type=1400 audit(2000000688.178:2468): avc: denied { accept } for pid=28478 comm="syz.6.5834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2102.767570][ T30] audit: type=1400 audit(2000000688.178:2469): avc: denied { write } for pid=28478 comm="syz.6.5834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2103.424067][ T30] audit: type=1400 audit(2000000688.178:2470): avc: denied { read } for pid=28478 comm="syz.6.5834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2103.489212][ T30] audit: type=1400 audit(2000000688.208:2471): avc: denied { mount } for pid=28475 comm="syz.1.5832" name="/" dev="overlay" ino=2960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2103.703193][ T30] audit: type=1400 audit(2000000688.208:2472): avc: denied { watch } for pid=28475 comm="syz.1.5832" path="/543/bus/file1" dev="overlay" ino=2967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2103.919574][ T30] audit: type=1400 audit(2000000688.288:2473): avc: denied { unmount } for pid=18049 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2103.971551][ T30] audit: type=1400 audit(2000000688.298:2474): avc: denied { write } for pid=28485 comm="syz.5.5835" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2104.004059][ T30] audit: type=1400 audit(2000000688.298:2475): avc: denied { open } for pid=28485 comm="syz.5.5835" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2104.170676][ T30] audit: type=1400 audit(2000000688.358:2476): avc: denied { create } for pid=28487 comm="syz.6.5838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2105.094796][T28520] syzkaller0: entered promiscuous mode [ 2105.101175][T28520] syzkaller0: entered allmulticast mode [ 2105.586566][T28526] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5847'. [ 2105.599563][T28527] netlink: 'syz.4.5845': attribute type 11 has an invalid length. [ 2105.607657][T28527] netlink: 2796 bytes leftover after parsing attributes in process `syz.4.5845'. [ 2105.938616][T28533] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2107.097321][ T5892] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 2107.305697][ T5892] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 2107.339163][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2107.388652][ T5892] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2107.408100][ T5892] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2107.417086][ T5892] usb 2-1: Manufacturer: syz [ 2108.398907][ T5892] usb 2-1: config 0 descriptor?? [ 2108.436923][ T5892] igorplugusb 2-1:0.0: incorrect number of endpoints [ 2108.643682][ T24] usb 2-1: USB disconnect, device number 45 [ 2109.946315][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 2109.946334][ T30] audit: type=1400 audit(2000000695.558:2486): avc: denied { write } for pid=28552 comm="syz.5.5850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2110.057139][ T30] audit: type=1400 audit(2000000695.558:2487): avc: denied { nlmsg_write } for pid=28552 comm="syz.5.5850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2110.934822][ T30] audit: type=1400 audit(2000000696.559:2488): avc: denied { ioctl } for pid=28550 comm="syz.1.5853" path="socket:[116035]" dev="sockfs" ino=116035 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2112.676040][ T30] audit: type=1400 audit(2000000698.299:2489): avc: denied { create } for pid=28567 comm="syz.5.5858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 2112.828997][T28575] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 2112.993482][T28541] lo speed is unknown, defaulting to 1000 [ 2113.009317][T28541] lo speed is unknown, defaulting to 1000 [ 2113.075375][T28582] xt_hashlimit: size too large, truncated to 1048576 [ 2113.237090][T28585] xt_hashlimit: size too large, truncated to 1048576 [ 2113.246320][T28585] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 2114.517590][ T5892] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2115.089243][T28605] FAULT_INJECTION: forcing a failure. [ 2115.089243][T28605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2115.107490][ T5892] usb 2-1: device descriptor read/64, error -71 [ 2115.128341][T28605] CPU: 1 UID: 0 PID: 28605 Comm: syz.6.5866 Tainted: G L syzkaller #0 PREEMPT(full) [ 2115.128360][T28605] Tainted: [L]=SOFTLOCKUP [ 2115.128364][T28605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2115.128370][T28605] Call Trace: [ 2115.128374][T28605] [ 2115.128379][T28605] dump_stack_lvl+0x100/0x190 [ 2115.128402][T28605] should_fail_ex.cold+0x5/0xa [ 2115.128417][T28605] _copy_from_user+0x2e/0xd0 [ 2115.128429][T28605] do_ip_vs_set_ctl+0x526/0x10c0 [ 2115.128446][T28605] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 2115.128457][T28605] ? trace_contention_end+0x140/0x180 [ 2115.128471][T28605] ? __mutex_lock+0x26a/0x1b90 [ 2115.128488][T28605] ? nf_sockopt_find.isra.0+0x222/0x290 [ 2115.128506][T28605] ? nf_sockopt_find.isra.0+0x222/0x290 [ 2115.128527][T28605] ? __mutex_unlock_slowpath+0x15c/0x790 [ 2115.128554][T28605] ? nf_setsockopt+0x8d/0xf0 [ 2115.128563][T28605] nf_setsockopt+0x8d/0xf0 [ 2115.128575][T28605] ip_setsockopt+0xcb/0xf0 [ 2115.128588][T28605] sctp_setsockopt+0x161/0xb370 [ 2115.128603][T28605] ? __pfx_sctp_setsockopt+0x10/0x10 [ 2115.128614][T28605] ? __fget_files+0x215/0x3d0 [ 2115.128629][T28605] ? selinux_socket_setsockopt+0x6a/0x80 [ 2115.128643][T28605] ? sock_common_setsockopt+0x2e/0xf0 [ 2115.128660][T28605] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2115.128682][T28605] do_sock_setsockopt+0xf3/0x1d0 [ 2115.128709][T28605] __sys_setsockopt+0x195/0x220 [ 2115.128735][T28605] __x64_sys_setsockopt+0xbd/0x160 [ 2115.128753][T28605] ? do_syscall_64+0x95/0xf80 [ 2115.128768][T28605] ? lockdep_hardirqs_on+0x78/0x100 [ 2115.128783][T28605] do_syscall_64+0x106/0xf80 [ 2115.128798][T28605] ? clear_bhb_loop+0x40/0x90 [ 2115.128811][T28605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2115.128823][T28605] RIP: 0033:0x7f984db9c799 [ 2115.128833][T28605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2115.128843][T28605] RSP: 002b:00007f984e98c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2115.128855][T28605] RAX: ffffffffffffffda RBX: 00007f984de15fa0 RCX: 00007f984db9c799 [ 2115.128862][T28605] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000003 [ 2115.128868][T28605] RBP: 00007f984e98c090 R08: 000000000000002c R09: 0000000000000000 [ 2115.128875][T28605] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 2115.128881][T28605] R13: 00007f984de16038 R14: 00007f984de15fa0 R15: 00007ffdb5d63d98 [ 2115.128895][T28605] [ 2115.129223][T28605] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20001 [ 2115.403295][ T30] audit: type=1400 audit(2000000701.009:2490): avc: denied { mounton } for pid=28604 comm="syz.6.5866" path="mnt:[4026532963]" dev="nsfs" ino=4026532963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2115.555933][T28608] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5867'. [ 2115.587453][ T5892] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2115.596205][T28608] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5867'. [ 2115.614327][ T30] audit: type=1400 audit(2000000701.239:2491): avc: denied { create } for pid=28607 comm="syz.6.5867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2115.687842][ T30] audit: type=1400 audit(2000000701.279:2492): avc: denied { connect } for pid=28607 comm="syz.6.5867" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2115.737375][ T5892] usb 2-1: device descriptor read/64, error -71 [ 2115.858698][ T5892] usb usb2-port1: attempt power cycle [ 2116.227644][ T5892] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 2116.236781][T11943] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 2116.257833][ T5892] usb 2-1: device descriptor read/8, error -71 [ 2116.386907][T11943] usb 6-1: Using ep0 maxpacket: 8 [ 2116.402072][T25445] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 2116.406270][T11943] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 2116.422935][T11943] usb 6-1: config 0 has no interface number 0 [ 2116.429479][T11943] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2116.440937][T11943] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2116.457412][T11943] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2116.468667][T28619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5871'. [ 2116.483271][T11943] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2116.496882][T28619] dummy0: entered promiscuous mode [ 2116.502146][T28619] macsec1: entered allmulticast mode [ 2116.507644][T11943] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2116.516850][T28619] dummy0: entered allmulticast mode [ 2116.517227][ T5892] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 2116.523736][T11943] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2116.549258][T11943] usb 6-1: config 0 descriptor?? [ 2116.560729][ T5892] usb 2-1: device descriptor read/8, error -71 [ 2116.568243][T11943] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2116.580261][T25445] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 2116.588915][T25445] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2116.607274][T25445] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2116.618487][T25445] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2116.646418][T25445] usb 5-1: Manufacturer: syz [ 2116.687738][T25445] usb 5-1: config 0 descriptor?? [ 2116.715461][ T30] audit: type=1400 audit(2000000702.339:2493): avc: denied { name_bind } for pid=28620 comm="syz.3.5872" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 2116.715471][ T5892] usb usb2-port1: unable to enumerate USB device [ 2116.854289][T25445] igorplugusb 5-1:0.0: incorrect number of endpoints [ 2117.005489][T28613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2117.024637][T11943] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 2117.038053][T28613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2117.094292][ T24] usb 5-1: USB disconnect, device number 30 [ 2117.108921][ T5892] usb 6-1: USB disconnect, device number 13 [ 2117.121224][ T5892] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 2117.187238][T11943] usb 4-1: Using ep0 maxpacket: 32 [ 2117.199466][T11943] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 2117.209807][T11943] usb 4-1: config 0 has no interface number 0 [ 2117.224547][ T30] audit: type=1400 audit(2000000702.849:2494): avc: denied { setopt } for pid=28623 comm="syz.1.5873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2117.245682][T11943] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2117.274424][T11943] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2117.287168][T11943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2117.295340][T11943] usb 4-1: Product: syz [ 2117.300826][T11943] usb 4-1: Manufacturer: syz [ 2117.305502][T11943] usb 4-1: SerialNumber: syz [ 2117.324761][T11943] usb 4-1: config 0 descriptor?? [ 2117.393077][T28622] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 2117.472371][ T30] audit: type=1400 audit(2000000703.099:2495): avc: denied { nlmsg_read } for pid=28631 comm="syz.1.5875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2117.525719][ T30] audit: type=1400 audit(2000000703.139:2496): avc: denied { create } for pid=28631 comm="syz.1.5875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2117.570398][ T30] audit: type=1400 audit(2000000703.139:2497): avc: denied { getopt } for pid=28631 comm="syz.1.5875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2117.639031][T28621] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 2117.849696][T11943] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 2117.878499][T11943] asix 4-1:0.188: probe with driver asix failed with error -61 [ 2118.953026][ T30] audit: type=1400 audit(2000000704.489:2498): avc: denied { write } for pid=28652 comm="syz.4.5881" name="sg0" dev="devtmpfs" ino=800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2119.239322][ T30] audit: type=1400 audit(2000000704.519:2499): avc: denied { block_suspend } for pid=28652 comm="syz.4.5881" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2119.654381][T11943] usb 4-1: USB disconnect, device number 10 [ 2119.947627][ T5892] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 2121.218365][ T5892] usb 5-1: config index 0 descriptor too short (expected 64776, got 68) [ 2121.228780][ T5892] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 2121.240073][ T5892] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 2121.263808][ T5892] usb 5-1: config index 1 descriptor too short (expected 64776, got 68) [ 2121.273473][ T5892] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 2121.299478][ T5892] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 2121.306581][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 2121.500800][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 2121.500819][ T30] audit: type=1400 audit(2000000706.959:2508): avc: denied { getopt } for pid=28679 comm="syz.3.5888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2121.770831][ T5892] usb 5-1: string descriptor 0 read error: -71 [ 2121.778034][ T5892] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2121.788013][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2121.803857][ T5892] usb 5-1: can't set config #1, error -71 [ 2121.811876][ T5892] usb 5-1: USB disconnect, device number 31 [ 2121.834754][ T30] audit: type=1400 audit(2000000706.959:2509): avc: denied { connect } for pid=28682 comm="syz.1.5889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2121.961184][ T30] audit: type=1400 audit(2000000707.349:2510): avc: denied { ioctl } for pid=28685 comm="syz.1.5890" path="socket:[117185]" dev="sockfs" ino=117185 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2122.016498][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 2122.047948][ T24] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 2122.056565][ T24] usb 6-1: config 0 has no interface number 0 [ 2122.074419][ T24] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2122.086530][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2122.094952][ T24] usb 6-1: Product: syz [ 2122.099861][ T24] usb 6-1: Manufacturer: syz [ 2122.104522][ T24] usb 6-1: SerialNumber: syz [ 2122.142467][ T24] usb 6-1: config 0 descriptor?? [ 2122.584333][ T24] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2122.611847][ T24] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2122.950434][T28701] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5895'. [ 2122.966546][ T5892] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 2122.981374][ T30] audit: type=1400 audit(2000000708.609:2511): avc: denied { write } for pid=28698 comm="syz.1.5894" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2123.045992][T28678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2123.082938][T28678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2123.107898][ T30] audit: type=1400 audit(2000000708.669:2512): avc: denied { read } for pid=28677 comm="syz.5.5887" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 2123.136535][ T24] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2124.142961][ T5892] usb 5-1: Using ep0 maxpacket: 32 [ 2124.150172][ T5892] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 2124.167770][ T5892] usb 5-1: config 0 has no interface number 0 [ 2124.181710][ T24] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 2124.187893][ T5892] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2124.215461][ T24] usb 6-1: USB disconnect, device number 14 [ 2124.221717][ T30] audit: type=1400 audit(2000000708.669:2513): avc: denied { ioctl } for pid=28677 comm="syz.5.5887" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 2124.278435][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2124.326827][ T5892] usb 5-1: Product: syz [ 2124.331008][ T5892] usb 5-1: Manufacturer: syz [ 2124.335600][ T5892] usb 5-1: SerialNumber: syz [ 2124.378516][ T5892] usb 5-1: config 0 descriptor?? [ 2124.389574][ T5892] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2125.232218][T28718] lo speed is unknown, defaulting to 1000 [ 2125.239126][T28718] lo speed is unknown, defaulting to 1000 [ 2125.757041][ T5892] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2125.827026][ T5892] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2125.948728][ T30] audit: type=1400 audit(2000000711.569:2514): avc: denied { connect } for pid=28704 comm="syz.6.5896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2126.022592][ T30] audit: type=1400 audit(2000000711.569:2515): avc: denied { ioctl } for pid=28704 comm="syz.6.5896" path="socket:[116464]" dev="sockfs" ino=116464 ioctlcmd=0x6e8a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2126.077815][T28724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5893'. [ 2126.572875][ T30] audit: type=1400 audit(2000000712.199:2516): avc: denied { ioctl } for pid=28732 comm="syz.3.5905" path="socket:[116490]" dev="sockfs" ino=116490 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2126.637715][ T30] audit: type=1400 audit(2000000712.229:2517): avc: denied { create } for pid=28730 comm="syz.6.5904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2126.699613][ T30] audit: type=1400 audit(2000000712.229:2518): avc: denied { setopt } for pid=28730 comm="syz.6.5904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2126.805207][ T30] audit: type=1400 audit(2000000712.239:2519): avc: denied { read } for pid=28730 comm="syz.6.5904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2126.884364][ T30] audit: type=1400 audit(2000000712.309:2520): avc: denied { create } for pid=28732 comm="syz.3.5905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2126.931368][ T30] audit: type=1400 audit(2000000712.319:2521): avc: denied { getopt } for pid=28732 comm="syz.3.5905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2127.056356][ T5892] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 2128.282595][ T5892] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2128.292467][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2128.463274][ T5892] usb 4-1: config 0 descriptor?? [ 2128.499487][ T5892] cp210x 4-1:0.0: cp210x converter detected [ 2128.572917][ T30] audit: type=1400 audit(2000000714.200:2522): avc: denied { mount } for pid=28747 comm="syz.5.5901" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2129.930738][ T5892] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 2129.955537][ T5892] cp210x 4-1:0.0: querying part number failed [ 2130.046610][ T5892] usb 4-1: cp210x converter now attached to ttyUSB2 [ 2130.346113][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 2130.380501][T28758] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5911'. [ 2130.597152][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2130.611855][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2130.615587][T26343] usb 5-1: USB disconnect, device number 32 [ 2130.640077][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2130.660185][T26343] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2130.680311][ T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 2130.701234][T26343] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2130.716560][ T24] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2130.733659][T26343] quatech2 5-1:0.51: device disconnected [ 2130.743223][ T24] usb 6-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 2130.755142][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2130.766900][ T24] usb 6-1: Product: syz [ 2130.772062][ T24] usb 6-1: Manufacturer: syz [ 2130.794091][ T24] usb 6-1: SerialNumber: syz [ 2130.822427][ T30] audit: type=1400 audit(2000000716.450:2523): avc: denied { name_bind } for pid=28756 comm="syz.1.5911" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 2131.175650][T28773] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2131.206750][ T5892] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 2131.233041][ T30] audit: type=1400 audit(2000000716.790:2524): avc: denied { mount } for pid=28767 comm="syz.6.5909" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 2131.423386][T25445] usb 4-1: USB disconnect, device number 11 [ 2131.511313][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2131.551378][T25445] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 2131.584128][ T30] audit: type=1400 audit(2000000716.790:2525): avc: denied { mounton } for pid=28767 comm="syz.6.5909" path="/576/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 2131.621495][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2131.654106][T25445] cp210x 4-1:0.0: device disconnected [ 2131.701385][ T5892] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 2131.785359][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2131.817345][ T30] audit: type=1400 audit(2000000716.920:2526): avc: denied { read } for pid=28767 comm="syz.6.5909" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 2131.981757][ T5892] usb 2-1: config 0 descriptor?? [ 2132.149653][ T30] audit: type=1400 audit(2000000716.930:2527): avc: denied { open } for pid=28767 comm="syz.6.5909" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 2132.274276][T28777] binder: 28776:28777 ioctl 8010af78 200000000100 returned -22 [ 2132.609524][ T30] audit: type=1400 audit(2000000717.870:2528): avc: denied { set_context_mgr } for pid=28776 comm="syz.3.5914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2133.283966][ T30] audit: type=1400 audit(2000000718.320:2529): avc: denied { mount } for pid=28763 comm="syz.1.5913" name="/" dev="autofs" ino=117522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 2133.398822][T28781] SELinux: failed to load policy [ 2133.413414][ T30] audit: type=1400 audit(2000000718.330:2530): avc: denied { read } for pid=28763 comm="syz.1.5913" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2133.524675][ T30] audit: type=1400 audit(2000000718.330:2531): avc: denied { open } for pid=28763 comm="syz.1.5913" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2133.670408][ T30] audit: type=1400 audit(2000000718.340:2532): avc: denied { ioctl } for pid=28763 comm="syz.1.5913" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2133.769806][ T30] audit: type=1400 audit(2000000718.800:2533): avc: denied { write } for pid=28778 comm="syz.4.5915" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 2133.837118][ T30] audit: type=1400 audit(2000000718.800:2534): avc: denied { open } for pid=28778 comm="syz.4.5915" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 2133.853329][ T24] usb 6-1: USB disconnect, device number 15 [ 2135.150664][ T5892] usbhid 2-1:0.0: can't add hid device: -71 [ 2135.176200][ T5892] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2135.194429][ T5892] usb 2-1: USB disconnect, device number 50 [ 2135.270840][T28798] FAULT_INJECTION: forcing a failure. [ 2135.270840][T28798] name failslab, interval 1, probability 0, space 0, times 0 [ 2135.301264][T28798] CPU: 0 UID: 0 PID: 28798 Comm: syz.1.5922 Tainted: G L syzkaller #0 PREEMPT(full) [ 2135.301292][T28798] Tainted: [L]=SOFTLOCKUP [ 2135.301298][T28798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2135.301308][T28798] Call Trace: [ 2135.301314][T28798] [ 2135.301321][T28798] dump_stack_lvl+0x100/0x190 [ 2135.301355][T28798] should_fail_ex.cold+0x5/0xa [ 2135.301378][T28798] ? asymmetric_key_hex_to_key_id+0x88/0x120 [ 2135.301398][T28798] should_failslab+0xc2/0x120 [ 2135.301416][T28798] __kmalloc_noprof+0xe0/0x850 [ 2135.301440][T28798] ? key_task_permission+0x2c7/0x3c0 [ 2135.301469][T28798] asymmetric_key_hex_to_key_id+0x88/0x120 [ 2135.301488][T28798] ? __pfx_asymmetric_key_cmp_partial+0x10/0x10 [ 2135.301505][T28798] asymmetric_key_match_preparse+0x22d/0x400 [ 2135.301524][T28798] ? __pfx_asymmetric_key_match_preparse+0x10/0x10 [ 2135.301543][T28798] keyring_search+0x15b/0x3d0 [ 2135.301562][T28798] ? __pfx_keyring_search+0x10/0x10 [ 2135.301582][T28798] ? __pfx_key_default_cmp+0x10/0x10 [ 2135.301603][T28798] ? _copy_from_user+0x59/0xd0 [ 2135.301627][T28798] keyctl_keyring_search+0x1e2/0x450 [ 2135.301649][T28798] ? __pfx_keyctl_keyring_search+0x10/0x10 [ 2135.301673][T28798] ? ksys_write+0x1ac/0x250 [ 2135.301689][T28798] ? __pfx_ksys_write+0x10/0x10 [ 2135.301709][T28798] __do_sys_keyctl+0x353/0x5a0 [ 2135.301733][T28798] do_syscall_64+0x106/0xf80 [ 2135.301756][T28798] ? clear_bhb_loop+0x40/0x90 [ 2135.301779][T28798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2135.301797][T28798] RIP: 0033:0x7f2c59f9c799 [ 2135.301812][T28798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2135.301833][T28798] RSP: 002b:00007f2c5ae2c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 2135.301851][T28798] RAX: ffffffffffffffda RBX: 00007f2c5a215fa0 RCX: 00007f2c59f9c799 [ 2135.301862][T28798] RDX: 0000200000000300 RSI: 00000000153e2870 RDI: 000000000000000a [ 2135.301874][T28798] RBP: 00007f2c5ae2c090 R08: 0000000000000000 R09: 0000000000000000 [ 2135.301884][T28798] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2135.301894][T28798] R13: 00007f2c5a216038 R14: 00007f2c5a215fa0 R15: 00007fffb6440838 [ 2135.301920][T28798] [ 2136.112807][T28810] xt_hashlimit: size too large, truncated to 1048576 [ 2136.783758][T28807] lo speed is unknown, defaulting to 1000 [ 2136.807331][T28807] lo speed is unknown, defaulting to 1000 [ 2137.082895][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 2137.082920][ T30] audit: type=1400 audit(2000000001.780:2538): avc: denied { connect } for pid=28811 comm="syz.5.5925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2137.397410][ T30] audit: type=1400 audit(2000000001.840:2539): avc: denied { unmount } for pid=18393 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 2138.263651][ T30] audit: type=1400 audit(2000000002.960:2540): avc: denied { create } for pid=28818 comm="syz.6.5926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2138.674289][ T30] audit: type=1400 audit(2000000002.970:2541): avc: denied { getopt } for pid=28818 comm="syz.6.5926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2139.887704][ T5892] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 2139.912224][T28835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5930'. [ 2139.921659][T28834] overlayfs: failed to clone upperpath [ 2139.952422][T28835] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5930'. [ 2140.076927][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 2140.358719][ T5892] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 2140.403990][ T30] audit: type=1400 audit(2000000005.120:2542): avc: denied { setopt } for pid=28833 comm="syz.3.5929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2140.412441][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2140.439487][ T5892] usb 2-1: Product: syz [ 2140.443744][ T5892] usb 2-1: SerialNumber: syz [ 2140.471821][ T5892] usb 2-1: config 0 descriptor?? [ 2141.511669][ T5892] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 2141.521251][ T5892] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 2141.530957][ T5892] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 2141.538116][ T5892] dvb_usb_af9035 2-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 2142.772529][ T30] audit: type=1400 audit(2000000007.470:2543): avc: denied { create } for pid=28854 comm="syz.4.5935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 2142.807856][ T30] audit: type=1400 audit(2000000007.470:2544): avc: denied { ioctl } for pid=28854 comm="syz.4.5935" path="socket:[116733]" dev="sockfs" ino=116733 ioctlcmd=0x6180 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 2142.849175][ T30] audit: type=1400 audit(2000000007.490:2545): avc: denied { write } for pid=28854 comm="syz.4.5935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 2142.866224][T28858] lo speed is unknown, defaulting to 1000 [ 2142.901209][T28858] lo speed is unknown, defaulting to 1000 [ 2143.256619][T28865] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2143.387037][T28866] Device name cannot be null; rc = [-22] [ 2143.441366][ T30] audit: type=1400 audit(2000000008.140:2546): avc: denied { mounton } for pid=28864 comm="syz.4.5937" path="/syzcgroup/unified/syz4" dev="pstore" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 2143.531610][ T30] audit: type=1400 audit(2000000008.150:2547): avc: denied { mount } for pid=28864 comm="syz.4.5937" name="/" dev="rpc_pipefs" ino=117783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 2144.233469][T25445] usb 2-1: USB disconnect, device number 51 [ 2147.400653][T28888] tipc: Enabled bearer , priority 0 [ 2147.566349][T28895] syzkaller0: entered promiscuous mode [ 2147.571849][T28895] syzkaller0: entered allmulticast mode [ 2147.628366][T28888] tipc: Resetting bearer [ 2147.757580][T28888] tipc: Disabling bearer [ 2147.955905][T28908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5948'. [ 2149.219765][ T30] audit: type=1400 audit(2000000013.940:2548): avc: denied { read } for pid=28909 comm="syz.3.5949" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2149.423488][ T30] audit: type=1400 audit(2000000013.980:2549): avc: denied { ioctl } for pid=28909 comm="syz.3.5949" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2150.223044][ T30] audit: type=1400 audit(2000000014.590:2550): avc: denied { connect } for pid=28919 comm="syz.1.5951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2150.582963][ T30] audit: type=1400 audit(2000000014.590:2551): avc: denied { write } for pid=28919 comm="syz.1.5951" laddr=fe80::13 lport=38843 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2154.228318][T28953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5959'. [ 2156.621372][T28970] openvswitch: netlink: IPv6 tunnel dst address is zero [ 2157.613732][ T30] audit: type=1400 audit(2000000022.331:2552): avc: denied { recv } for pid=17615 comm="syz-executor" saddr=10.128.0.169 src=35990 daddr=10.128.1.34 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2159.591168][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2159.917708][ T9] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 2160.169589][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2160.179397][ T9] usb 2-1: config 0 has no interface number 0 [ 2160.559074][ T9] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 2160.655103][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2160.710103][ T9] usb 2-1: config 0 descriptor?? [ 2160.817023][ T9] usb 2-1: selecting invalid altsetting 1 [ 2160.825485][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 2160.831827][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2160.884439][T29005] ubi: mtd0 is already attached to ubi31 [ 2161.401269][ T30] audit: type=1326 audit(2000000026.121:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29011 comm="syz.4.5969" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc998d9c799 code=0x0 [ 2161.459063][ T9] DVB: Unable to find symbol cx22700_attach() [ 2161.507273][ T30] audit: type=1400 audit(2000000026.181:2554): avc: denied { connect } for pid=29011 comm="syz.4.5969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2161.971524][ T9] DVB: Unable to find symbol tda10046_attach() [ 2161.982117][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2162.663855][ T9] usb 2-1: USB disconnect, device number 52 [ 2166.064012][T11943] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 2166.216113][T11943] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2166.245743][T11943] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 64 [ 2166.270494][T11943] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2166.303980][T11943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2166.329158][T29038] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2166.340257][T11943] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2166.439762][T29046] mkiss: ax0: crc mode is auto. [ 2167.178423][T11943] usb 5-1: USB disconnect, device number 33 [ 2167.861241][ T30] audit: type=1400 audit(2000000032.321:2555): avc: denied { listen } for pid=29060 comm="syz.6.5988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2168.102723][T29071] syzkaller0: entered promiscuous mode [ 2168.133583][T29071] syzkaller0: entered allmulticast mode [ 2168.196936][T29071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5989'. [ 2168.227480][T29071] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5989'. [ 2170.223910][ T30] audit: type=1400 audit(2000000034.941:2556): avc: denied { ioctl } for pid=29083 comm="syz.6.5996" path="socket:[119414]" dev="sockfs" ino=119414 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2172.867461][T29121] lo speed is unknown, defaulting to 1000 [ 2172.895014][T29121] lo speed is unknown, defaulting to 1000 [ 2174.452556][ T30] audit: type=1400 audit(2000000039.152:2557): avc: denied { shutdown } for pid=29124 comm="syz.4.6005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2174.893953][T25445] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 2175.324036][T25445] usb 5-1: Using ep0 maxpacket: 16 [ 2175.344057][T25445] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2175.363930][T25445] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 2175.407166][T25445] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2175.468717][T25445] usb 5-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 2175.499119][T25445] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2175.805496][T25445] usb 5-1: config 0 descriptor?? [ 2176.240871][T25445] smartjoyplus 0003:6666:8801.001E: unknown main item tag 0x0 [ 2176.260871][T25445] smartjoyplus 0003:6666:8801.001E: unknown main item tag 0x0 [ 2176.289739][T25445] smartjoyplus 0003:6666:8801.001E: unknown main item tag 0x0 [ 2176.309281][T25445] smartjoyplus 0003:6666:8801.001E: unknown main item tag 0x0 [ 2176.310763][ T30] audit: type=1400 audit(2000000041.032:2558): avc: denied { watch watch_reads } for pid=29148 comm="syz.6.6006" path="/594" dev="tmpfs" ino=3231 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2176.496402][T25445] smartjoyplus 0003:6666:8801.001E: unknown main item tag 0x0 [ 2176.504974][T25445] smartjoyplus 0003:6666:8801.001E: unknown main item tag 0x0 [ 2176.512456][T25445] smartjoyplus 0003:6666:8801.001E: unknown main item tag 0x0 [ 2176.521016][T25445] smartjoyplus 0003:6666:8801.001E: collection stack underflow [ 2176.564770][T25445] smartjoyplus 0003:6666:8801.001E: item 0 0 0 12 parsing failed [ 2176.601812][T25445] smartjoyplus 0003:6666:8801.001E: parse failed [ 2176.616021][T25445] smartjoyplus 0003:6666:8801.001E: probe with driver smartjoyplus failed with error -22 [ 2176.661631][T25445] usb 5-1: USB disconnect, device number 34 [ 2176.674982][T29155] FAULT_INJECTION: forcing a failure. [ 2176.674982][T29155] name failslab, interval 1, probability 0, space 0, times 0 [ 2176.700442][T29155] CPU: 0 UID: 0 PID: 29155 Comm: syz.6.6014 Tainted: G L syzkaller #0 PREEMPT(full) [ 2176.700472][T29155] Tainted: [L]=SOFTLOCKUP [ 2176.700479][T29155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2176.700489][T29155] Call Trace: [ 2176.700496][T29155] [ 2176.700503][T29155] dump_stack_lvl+0x100/0x190 [ 2176.700540][T29155] should_fail_ex.cold+0x5/0xa [ 2176.700565][T29155] should_failslab+0xc2/0x120 [ 2176.700590][T29155] __kmalloc_cache_node_noprof+0x7d/0x770 [ 2176.700619][T29155] ? __get_vm_area_node+0x101/0x330 [ 2176.700638][T29155] ? stack_trace_save+0x8e/0xc0 [ 2176.700667][T29155] __get_vm_area_node+0x101/0x330 [ 2176.700692][T29155] __vmalloc_node_range_noprof+0x213/0x1530 [ 2176.700715][T29155] ? dvb_dmxdev_filter_start+0x914/0xdd0 [ 2176.700734][T29155] ? dvb_demux_do_ioctl+0x6b5/0x1200 [ 2176.700749][T29155] ? dvb_usercopy+0x167/0x340 [ 2176.700773][T29155] ? dvb_demux_ioctl+0x29/0x40 [ 2176.700797][T29155] ? do_syscall_64+0x106/0xf80 [ 2176.700821][T29155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2176.700843][T29155] ? dvb_dmxdev_filter_start+0x914/0xdd0 [ 2176.700869][T29155] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2176.700903][T29155] ? dvb_dmxdev_filter_start+0x914/0xdd0 [ 2176.700921][T29155] __vmalloc_node_noprof+0xad/0xf0 [ 2176.700942][T29155] ? dvb_dmxdev_filter_start+0x914/0xdd0 [ 2176.700964][T29155] dvb_dmxdev_filter_start+0x914/0xdd0 [ 2176.700984][T29155] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 2176.701015][T29155] dvb_demux_do_ioctl+0xe64/0x1200 [ 2176.701041][T29155] dvb_usercopy+0x167/0x340 [ 2176.701066][T29155] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 2176.701085][T29155] ? __pfx_dvb_usercopy+0x10/0x10 [ 2176.701121][T29155] ? selinux_file_ioctl+0x139/0x290 [ 2176.701147][T29155] ? selinux_file_ioctl+0xb4/0x290 [ 2176.701174][T29155] dvb_demux_ioctl+0x29/0x40 [ 2176.701199][T29155] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 2176.701225][T29155] __x64_sys_ioctl+0x18e/0x210 [ 2176.701255][T29155] do_syscall_64+0x106/0xf80 [ 2176.701278][T29155] ? clear_bhb_loop+0x40/0x90 [ 2176.701299][T29155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2176.701317][T29155] RIP: 0033:0x7f984db9c799 [ 2176.701333][T29155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2176.701349][T29155] RSP: 002b:00007f984e98c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2176.701366][T29155] RAX: ffffffffffffffda RBX: 00007f984de15fa0 RCX: 00007f984db9c799 [ 2176.701378][T29155] RDX: 00002000000000c0 RSI: 0000000040146f2c RDI: 0000000000000003 [ 2176.701388][T29155] RBP: 00007f984e98c090 R08: 0000000000000000 R09: 0000000000000000 [ 2176.701398][T29155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2176.701409][T29155] R13: 00007f984de16038 R14: 00007f984de15fa0 R15: 00007ffdb5d63d98 [ 2176.701435][T29155] [ 2176.701445][T29155] syz.6.6014: vmalloc error: size 8192, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2177.120430][T29155] CPU: 0 UID: 0 PID: 29155 Comm: syz.6.6014 Tainted: G L syzkaller #0 PREEMPT(full) [ 2177.120461][T29155] Tainted: [L]=SOFTLOCKUP [ 2177.120468][T29155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2177.120478][T29155] Call Trace: [ 2177.120490][T29155] [ 2177.120498][T29155] dump_stack_lvl+0x100/0x190 [ 2177.120532][T29155] warn_alloc.cold+0x95/0x1c1 [ 2177.120562][T29155] ? __pfx_warn_alloc+0x10/0x10 [ 2177.120586][T29155] ? trace_kmalloc+0x101/0x130 [ 2177.120606][T29155] ? __kmalloc_cache_node_noprof+0x2d9/0x770 [ 2177.120636][T29155] ? __kasan_kmalloc+0x8a/0xb0 [ 2177.120663][T29155] ? __get_vm_area_node+0x208/0x330 [ 2177.120687][T29155] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 2177.120708][T29155] ? dvb_demux_do_ioctl+0x6b5/0x1200 [ 2177.120725][T29155] ? dvb_usercopy+0x167/0x340 [ 2177.120748][T29155] ? dvb_demux_ioctl+0x29/0x40 [ 2177.120773][T29155] ? do_syscall_64+0x106/0xf80 [ 2177.120796][T29155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2177.120816][T29155] ? dvb_dmxdev_filter_start+0x914/0xdd0 [ 2177.120841][T29155] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2177.120875][T29155] ? dvb_dmxdev_filter_start+0x914/0xdd0 [ 2177.120891][T29155] __vmalloc_node_noprof+0xad/0xf0 [ 2177.120912][T29155] ? dvb_dmxdev_filter_start+0x914/0xdd0 [ 2177.120932][T29155] dvb_dmxdev_filter_start+0x914/0xdd0 [ 2177.120952][T29155] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 2177.120983][T29155] dvb_demux_do_ioctl+0xe64/0x1200 [ 2177.121008][T29155] dvb_usercopy+0x167/0x340 [ 2177.121033][T29155] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 2177.121053][T29155] ? __pfx_dvb_usercopy+0x10/0x10 [ 2177.121090][T29155] ? selinux_file_ioctl+0x139/0x290 [ 2177.121117][T29155] ? selinux_file_ioctl+0xb4/0x290 [ 2177.121144][T29155] dvb_demux_ioctl+0x29/0x40 [ 2177.121168][T29155] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 2177.121194][T29155] __x64_sys_ioctl+0x18e/0x210 [ 2177.121223][T29155] do_syscall_64+0x106/0xf80 [ 2177.121245][T29155] ? clear_bhb_loop+0x40/0x90 [ 2177.121267][T29155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2177.121285][T29155] RIP: 0033:0x7f984db9c799 [ 2177.121301][T29155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2177.121317][T29155] RSP: 002b:00007f984e98c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2177.121335][T29155] RAX: ffffffffffffffda RBX: 00007f984de15fa0 RCX: 00007f984db9c799 [ 2177.121347][T29155] RDX: 00002000000000c0 RSI: 0000000040146f2c RDI: 0000000000000003 [ 2177.121358][T29155] RBP: 00007f984e98c090 R08: 0000000000000000 R09: 0000000000000000 [ 2177.121368][T29155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2177.121378][T29155] R13: 00007f984de16038 R14: 00007f984de15fa0 R15: 00007ffdb5d63d98 [ 2177.121403][T29155] [ 2177.121411][T29155] Mem-Info: [ 2177.475909][T29155] active_anon:73264 inactive_anon:0 isolated_anon:0 [ 2177.475909][T29155] active_file:27326 inactive_file:41962 isolated_file:0 [ 2177.475909][T29155] unevictable:768 dirty:382 writeback:0 [ 2177.475909][T29155] slab_reclaimable:14599 slab_unreclaimable:100315 [ 2177.475909][T29155] mapped:44743 shmem:63341 pagetables:1942 [ 2177.475909][T29155] sec_pagetables:0 bounce:0 [ 2177.475909][T29155] kernel_misc_reclaimable:0 [ 2177.475909][T29155] free:1169894 free_pcp:27674 free_cma:0 [ 2177.550407][T29155] Node 0 active_anon:292856kB inactive_anon:0kB active_file:109140kB inactive_file:167624kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:178784kB dirty:1524kB writeback:0kB shmem:251628kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13292kB pagetables:7580kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2177.632261][T29155] Node 1 active_anon:0kB inactive_anon:0kB active_file:164kB inactive_file:224kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:188kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2177.815760][T29155] Node 0 DMA free:15220kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:108kB local_pcp:32kB free_cma:0kB [ 2178.326932][T29155] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 2178.353056][T29155] Node 0 DMA32 free:737604kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:304992kB inactive_anon:0kB active_file:109140kB inactive_file:167624kB unevictable:1536kB writepending:1524kB zspages:0kB present:3129332kB managed:2537108kB mlocked:0kB bounce:0kB free_pcp:76004kB local_pcp:40172kB free_cma:0kB [ 2178.573300][T29155] lowmem_reserve[]: 0 0 1 1 1 [ 2178.580512][T29155] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1048kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2178.643958][T29155] lowmem_reserve[]: 0 0 0 0 0 [ 2178.666971][T29155] Node 1 Normal free:3926516kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:164kB inactive_file:224kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22320kB local_pcp:10588kB free_cma:0kB [ 2179.015317][T29155] lowmem_reserve[]: 0 0 0 0 0 [ 2179.020102][T29155] Node 0 DMA: 1*4kB (M) 2*8kB (M) 0*16kB 1*32kB (M) 1*64kB (U) 2*128kB (UM) 2*256kB (UM) 2*512kB (UM) 1*1024kB (M) 2*2048kB (M) 2*4096kB (U) = 15220kB [ 2179.390806][T29155] Node 0 DMA32: 4299*4kB (UME) 5291*8kB (UME) 2669*16kB (UME) 758*32kB (UME) 642*64kB (UME) 423*128kB (UME) 365*256kB (UME) 253*512kB (UM) 148*1024kB (UM) 22*2048kB (UM) 25*4096kB (UM) = 743700kB [ 2179.460210][T29155] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2180.169037][T29155] Node 1 Normal: 10*4kB (UM) 11*8kB (UM) 7*16kB (UME) 6*32kB (UM) 9*64kB (U) 14*128kB (UME) 10*256kB (UM) 11*512kB (UME) 8*1024kB (UME) 8*2048kB (UME) 950*4096kB (UM) = 3926768kB [ 2180.230382][T29155] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2180.262159][T29155] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=1 hugepages_size=2048kB [ 2180.313652][T29155] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2180.406475][T29155] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2180.433193][T29155] 131976 total pagecache pages [ 2180.443218][T29155] 0 pages in swap cache [ 2180.451572][T29155] Free swap = 124996kB [ 2180.483618][T29155] Total swap = 124996kB [ 2180.488162][T29155] 2097051 pages RAM [ 2180.511409][T29155] 0 pages HighMem/MovableOnly [ 2180.526150][T29155] 430897 pages reserved [ 2180.704495][T29155] 0 pages cma reserved [ 2182.816166][T29214] can0: slcan on ttyS3. [ 2183.293949][T25680] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 2183.364978][T29207] can0 (unregistered): slcan off ttyS3. [ 2183.468123][T25680] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 2184.471043][T25680] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2184.488237][T25680] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2184.531805][T25680] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2184.572099][T25680] usb 6-1: Manufacturer: syz [ 2184.617622][T25680] usb 6-1: config 0 descriptor?? [ 2184.654507][T25680] igorplugusb 6-1:0.0: incorrect number of endpoints [ 2184.907495][T25680] usb 6-1: USB disconnect, device number 16 [ 2185.010077][T29227] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6034'. [ 2185.344103][ T30] audit: type=1400 audit(2000000050.062:2559): avc: denied { open } for pid=29224 comm="syz.6.6034" path="/dev/ptyr0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 2185.470551][ T30] audit: type=1400 audit(2000000050.072:2560): avc: denied { ioctl } for pid=29224 comm="syz.6.6034" path="/dev/ptyr0" dev="devtmpfs" ino=135 ioctlcmd=0x5404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 2185.525797][T29222] tipc: Enabled bearer , priority 10 [ 2185.634539][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2185.688407][ T30] audit: type=1400 audit(2000000050.412:2561): avc: denied { map } for pid=29229 comm="syz.6.6035" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2185.720933][T29230] binder: 29229:29230 ioctl c0306201 2000000003c0 returned -14 [ 2185.729488][T29230] binder: 29229:29230 ioctl c0306201 200000000280 returned -14 [ 2185.741602][T29222] tipc: Resetting bearer [ 2185.755381][T29230] binder: 29229:29230 ioctl c0306201 2000000001c0 returned -14 [ 2185.842997][ T30] audit: type=1400 audit(2000000050.442:2562): avc: denied { mount } for pid=29229 comm="syz.6.6035" name="/" dev="hugetlbfs" ino=118760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 2186.193762][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2186.545825][T24296] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2186.562711][T24296] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2186.571952][T24296] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2186.605340][T24296] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2186.639224][T24296] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2186.669108][T24224] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2186.676920][T24224] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2186.684797][T24224] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2186.692434][T24224] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2186.709905][T24224] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2186.729467][ T30] audit: type=1400 audit(2000000051.442:2563): avc: denied { mounton } for pid=29236 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 2187.104937][T29236] lo speed is unknown, defaulting to 1000 [ 2187.121699][T29236] lo speed is unknown, defaulting to 1000 [ 2187.131658][T29241] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2083872708 (133367853312 ns) > initial count (40966367616 ns). Using initial count to start timer. [ 2188.426302][T29236] chnl_net:caif_netlink_parms(): no params data found [ 2188.696945][T29236] bridge0: port 1(bridge_slave_0) entered blocking state [ 2189.678983][T24224] Bluetooth: hci3: command tx timeout [ 2189.703136][T29236] bridge0: port 1(bridge_slave_0) entered disabled state [ 2189.710328][T29236] bridge_slave_0: entered allmulticast mode [ 2189.784720][T29236] bridge_slave_0: entered promiscuous mode [ 2189.804123][T29236] bridge0: port 2(bridge_slave_1) entered blocking state [ 2189.815108][T29236] bridge0: port 2(bridge_slave_1) entered disabled state [ 2189.840890][T29236] bridge_slave_1: entered allmulticast mode [ 2189.864653][T29236] bridge_slave_1: entered promiscuous mode [ 2189.895254][T29259] lo speed is unknown, defaulting to 1000 [ 2189.901640][T29259] lo speed is unknown, defaulting to 1000 [ 2190.011784][T29236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2190.149024][T29236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2190.387252][T29236] team0: Port device team_slave_0 added [ 2190.401221][T29236] team0: Port device team_slave_1 added [ 2190.574755][T29236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2190.581795][T29236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2190.778925][T29236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2190.806151][T29236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2190.836609][T29236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2190.873200][T29236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2190.993118][T25445] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2191.021791][T29236] hsr_slave_0: entered promiscuous mode [ 2191.029292][T29236] hsr_slave_1: entered promiscuous mode [ 2191.144851][T25445] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 2191.182267][T25445] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2191.331587][T25445] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2191.365475][T25445] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2191.400404][T25445] usb 5-1: Manufacturer: syz [ 2191.427335][T25445] usb 5-1: config 0 descriptor?? [ 2191.508332][T29236] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2191.622721][T25445] rc_core: IR keymap rc-hauppauge not found [ 2191.633072][T25445] Registered IR keymap rc-empty [ 2191.668127][T25445] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2191.684471][T29236] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2191.704153][T24224] Bluetooth: hci3: command tx timeout [ 2191.705536][T25445] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input91 [ 2191.789040][T25445] usb 5-1: USB disconnect, device number 35 [ 2191.803424][T29236] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2191.865913][T29281] dvmrp1: entered allmulticast mode [ 2191.890033][T29279] dvmrp1: left allmulticast mode [ 2191.967958][T29236] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2192.346052][T29236] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2192.354468][ T30] audit: type=1326 audit(2000000057.083:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29287 comm="syz.4.6049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc998d9c799 code=0x7ffc0000 [ 2192.395847][T29236] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2192.417458][ T30] audit: type=1326 audit(2000000057.083:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29287 comm="syz.4.6049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc998d9c799 code=0x7ffc0000 [ 2192.458294][T29236] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2192.497200][T29236] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2192.546464][ T30] audit: type=1326 audit(2000000057.083:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29287 comm="syz.4.6049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fc998d9c799 code=0x7ffc0000 [ 2192.606626][ T30] audit: type=1326 audit(2000000057.223:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29287 comm="syz.4.6049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc998d9c799 code=0x7ffc0000 [ 2192.860896][ T30] audit: type=1326 audit(2000000057.223:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29287 comm="syz.4.6049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc998d9c799 code=0x7ffc0000 [ 2192.983336][ T30] audit: type=1400 audit(2000000057.333:2569): avc: denied { setopt } for pid=29297 comm="syz.4.6052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2193.227838][ T30] audit: type=1400 audit(2000000057.633:2570): avc: denied { setopt } for pid=29304 comm="syz.4.6053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2193.236604][T29236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2193.306215][T29236] 8021q: adding VLAN 0 to HW filter on device team0 [ 2193.332284][ T7500] bridge0: port 1(bridge_slave_0) entered blocking state [ 2193.339453][ T7500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2193.379270][T27143] bridge0: port 2(bridge_slave_1) entered blocking state [ 2193.386461][T27143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2193.603756][T29314] ocfs2: Bad value for 'barrier' [ 2193.685230][ T24] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 2193.784924][T24224] Bluetooth: hci3: command tx timeout [ 2193.836634][T29236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2193.881011][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2193.912792][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2193.921824][ T24] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2193.962694][T26343] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 2193.991936][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2194.023608][ T24] usb 6-1: config 0 descriptor?? [ 2194.126253][T26343] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2194.143314][T26343] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2194.162581][T26343] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 2194.197832][T26343] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2194.225502][T29236] veth0_vlan: entered promiscuous mode [ 2194.229737][T26343] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 2194.246694][T29236] veth1_vlan: entered promiscuous mode [ 2194.271829][T26343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2194.291044][T29236] veth0_macvtap: entered promiscuous mode [ 2194.292405][T26343] usb 5-1: Product: syz [ 2194.300947][T26343] usb 5-1: Manufacturer: syz [ 2194.318352][T26343] usb 5-1: SerialNumber: syz [ 2194.319387][T29236] veth1_macvtap: entered promiscuous mode [ 2194.358035][T29236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2194.389851][T29236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2194.417719][ T7500] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2194.427441][T25445] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 2194.461185][ T7500] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2194.476747][ T7500] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2194.497694][ T7500] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2194.587353][T25445] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 2194.599475][T25445] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2194.880572][T25445] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2195.129295][T25445] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2195.239324][T25445] usb 2-1: Manufacturer: syz [ 2195.369338][T25445] usb 2-1: config 0 descriptor?? [ 2195.862956][T24224] Bluetooth: hci3: command tx timeout [ 2196.717229][ T7500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2196.740133][T25445] rc_core: IR keymap rc-hauppauge not found [ 2196.775669][T25445] Registered IR keymap rc-empty [ 2196.811012][ T7500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2196.833603][T25445] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2196.875094][T25445] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input92 [ 2196.930847][T27143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2196.951240][T26343] usb 5-1: USB disconnect, device number 36 [ 2196.951996][T25680] usb 6-1: USB disconnect, device number 17 [ 2196.967217][T25445] usb 2-1: USB disconnect, device number 53 [ 2196.977780][T27143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2197.021293][ T30] audit: type=1400 audit(2000000061.743:2571): avc: denied { mounton } for pid=29236 comm="syz-executor" path="/root/syzkaller.UovwBy/syz-tmp" dev="sda1" ino=2061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 2197.065157][T29354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6063'. [ 2197.108377][ T30] audit: type=1400 audit(2000000061.743:2572): avc: denied { mount } for pid=29236 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2197.684162][ T30] audit: type=1400 audit(2000000061.743:2573): avc: denied { mount } for pid=29236 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2197.708018][ T30] audit: type=1400 audit(2000000061.753:2574): avc: denied { mounton } for pid=29236 comm="syz-executor" path="/root/syzkaller.UovwBy/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 2197.757078][ T30] audit: type=1400 audit(2000000061.753:2575): avc: denied { mounton } for pid=29236 comm="syz-executor" path="/root/syzkaller.UovwBy/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=120665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 2197.927553][ T30] audit: type=1400 audit(2000000062.003:2576): avc: denied { mounton } for pid=29236 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 2198.012841][T25680] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 2198.077672][ T30] audit: type=1400 audit(2000000062.003:2577): avc: denied { mount } for pid=29236 comm="syz-executor" name="/" dev="gadgetfs" ino=6828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 2198.100428][ T30] audit: type=1400 audit(2000000062.013:2578): avc: denied { mount } for pid=29236 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2198.161574][ T30] audit: type=1400 audit(2000000062.013:2579): avc: denied { mounton } for pid=29236 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 2198.592649][T25680] usb 6-1: Using ep0 maxpacket: 32 [ 2198.603697][T25680] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 2198.622650][T25680] usb 6-1: config 0 has no interface number 0 [ 2198.654209][T25680] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2198.693103][T25680] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2198.701144][T25680] usb 6-1: Product: syz [ 2198.729904][T25680] usb 6-1: Manufacturer: syz [ 2198.744251][T25680] usb 6-1: SerialNumber: syz [ 2198.756354][T25680] usb 6-1: config 0 descriptor?? [ 2199.011481][T25680] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2199.112539][T24296] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2199.132858][T24296] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2199.144256][T24296] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2199.156865][T24296] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2199.164298][ T30] audit: type=1400 audit(2000000063.893:2580): avc: denied { append } for pid=29375 comm="syz.6.6069" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2199.197082][T24296] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2199.249660][T25680] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2199.293621][T25680] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2199.350319][T29373] lo speed is unknown, defaulting to 1000 [ 2199.374013][T29373] lo speed is unknown, defaulting to 1000 [ 2199.432578][T25445] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 2199.603575][T25445] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2199.644902][T25445] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2199.662645][T25445] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 2199.687386][T25445] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2199.717503][T25445] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 2199.740909][T29391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6063'. [ 2199.749922][T25445] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2199.772571][T25445] usb 4-1: Product: syz [ 2199.776790][T25445] usb 4-1: Manufacturer: syz [ 2199.781873][T25445] usb 4-1: SerialNumber: syz [ 2199.895891][T29373] chnl_net:caif_netlink_parms(): no params data found [ 2201.322144][T24224] Bluetooth: hci5: command tx timeout [ 2201.762297][T26343] usb 6-1: USB disconnect, device number 18 [ 2201.762469][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2201.804810][T26343] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2201.866892][T25445] usb 4-1: USB disconnect, device number 12 [ 2201.890621][T26343] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2201.940941][T29373] bridge0: port 1(bridge_slave_0) entered blocking state [ 2201.951623][T26343] quatech2 6-1:0.51: device disconnected [ 2201.969731][T29373] bridge0: port 1(bridge_slave_0) entered disabled state [ 2201.979303][T29373] bridge_slave_0: entered allmulticast mode [ 2201.989497][T29373] bridge_slave_0: entered promiscuous mode [ 2202.091362][T29373] bridge0: port 2(bridge_slave_1) entered blocking state [ 2202.109221][T29373] bridge0: port 2(bridge_slave_1) entered disabled state [ 2202.126484][T29373] bridge_slave_1: entered allmulticast mode [ 2202.153400][T29373] bridge_slave_1: entered promiscuous mode [ 2202.309188][T29373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2202.347863][T29373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2202.493938][ T30] audit: type=1400 audit(2000000067.223:2581): avc: denied { module_load } for pid=29411 comm="syz.1.6078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 2202.559817][T29373] team0: Port device team_slave_0 added [ 2202.606802][T29413] Invalid ELF header magic: != ELF [ 2202.876009][ T30] audit: type=1400 audit(2000000067.253:2582): avc: denied { read } for pid=29409 comm="syz.5.6076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2203.453575][T24224] Bluetooth: hci5: command tx timeout [ 2204.251625][T29373] team0: Port device team_slave_1 added [ 2205.479836][T29373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2205.508880][T29425] vivid-001: ================= START STATUS ================= [ 2205.531121][T24224] Bluetooth: hci5: command tx timeout [ 2205.564798][T29373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2205.613360][T29425] vivid-001: Radio HW Seek Mode: Bounded [ 2205.627896][ T30] audit: type=1400 audit(2000000070.283:2583): avc: denied { ioctl } for pid=29427 comm="syz.1.6082" path="/dev/sg0" dev="devtmpfs" ino=800 ioctlcmd=0x2283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2205.933988][T29425] vivid-001: Radio Programmable HW Seek: false [ 2206.007946][T29373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2206.223281][T29425] vivid-001: RDS Rx I/O Mode: Block I/O [ 2206.252824][T29425] vivid-001: Generate RBDS Instead of RDS: false [ 2206.273883][T29425] vivid-001: RDS Reception: true [ 2206.279829][T29373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2206.312016][T29373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2206.321761][T29425] vivid-001: RDS Program Type: [ 2206.401989][T29373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2206.402153][T29425] 0 inactive [ 2206.445704][T29425] vivid-001: RDS PS Name: inactive [ 2206.461460][T29425] vivid-001: RDS Radio Text: inactive [ 2206.550729][T29425] vivid-001: RDS Traffic Announcement: false inactive [ 2206.555271][T29373] hsr_slave_0: entered promiscuous mode [ 2206.564068][ T30] audit: type=1400 audit(2000000071.293:2584): avc: denied { ioctl } for pid=29434 comm="syz.1.6084" path="socket:[121919]" dev="sockfs" ino=121919 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2206.566719][T29373] hsr_slave_1: entered promiscuous mode [ 2206.595018][T29425] vivid-001: RDS Traffic Program: false inactive [ 2206.601375][T29425] vivid-001: RDS Music: false inactive [ 2206.607036][T29425] vivid-001: ================== END STATUS ================== [ 2206.610746][ T30] audit: type=1400 audit(2000000071.293:2585): avc: denied { bind } for pid=29434 comm="syz.1.6084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2206.615839][T29373] debugfs: 'hsr0' already exists in 'hsr' [ 2206.672351][ T30] audit: type=1400 audit(2000000071.293:2586): avc: denied { write } for pid=29434 comm="syz.1.6084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2206.714896][ T30] audit: type=1400 audit(2000000071.293:2587): avc: denied { read } for pid=29434 comm="syz.1.6084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2207.012180][T25445] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 2207.291914][T29373] Cannot create hsr debugfs directory [ 2207.423614][T25445] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2207.442200][T25445] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2207.472619][T25445] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2207.503662][T25445] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2207.526631][T25445] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2207.565605][T25445] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2207.587595][T25445] usb 2-1: invalid MIDI out EP 0 [ 2207.623489][T24224] Bluetooth: hci5: command tx timeout [ 2207.642211][ T5892] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 2207.706837][T29373] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2207.737391][T25445] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2207.806456][ T5892] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 2207.816756][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2207.840975][ T5892] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2207.857590][ T5892] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2207.879853][ T5892] usb 4-1: Manufacturer: syz [ 2208.004424][ T5892] usb 4-1: config 0 descriptor?? [ 2208.013397][T29373] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2208.530641][T29373] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2208.554183][ T5892] rc_core: IR keymap rc-hauppauge not found [ 2208.566639][ T5892] Registered IR keymap rc-empty [ 2208.579983][ T5892] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2208.617274][ T5861] usb 2-1: USB disconnect, device number 54 [ 2208.628333][ T5892] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input93 [ 2208.654482][ T5892] usb 4-1: USB disconnect, device number 13 [ 2208.666122][T29373] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 2208.713250][T29373] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2208.855296][ T5861] IPVS: starting estimator thread 0... [ 2208.942592][T29456] IPVS: using max 54 ests per chain, 129600 per kthread [ 2209.082907][T29373] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2209.132071][T29373] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2209.210683][T29373] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2209.234920][T29463] block nbd1: Dead connection, failed to find a fallback [ 2209.316934][T29463] block nbd1: shutting down sockets [ 2209.510824][T29463] blk_print_req_error: 10 callbacks suppressed [ 2209.511111][T29463] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2209.519869][T29466] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6094'. [ 2209.537103][T29463] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2209.556631][T29463] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2209.559121][T29373] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2209.625187][T29463] Buffer I/O error on dev nbd1, logical block 1, async page read [ 2209.641540][T29466] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6094'. [ 2210.123658][T29463] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2210.183767][T29463] Buffer I/O error on dev nbd1, logical block 2, async page read [ 2210.222328][T29463] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2210.270432][T29463] Buffer I/O error on dev nbd1, logical block 3, async page read [ 2210.331942][ T30] audit: type=1400 audit(2000000075.054:2588): avc: denied { read } for pid=29478 comm="syz.3.6095" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2210.365394][T29463] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2210.391181][T29463] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2210.398021][T29373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2210.424319][ T30] audit: type=1400 audit(2000000075.064:2589): avc: denied { open } for pid=29478 comm="syz.3.6095" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2210.453180][T29463] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2210.484518][T29463] Buffer I/O error on dev nbd1, logical block 1, async page read [ 2210.512073][T29373] 8021q: adding VLAN 0 to HW filter on device team0 [ 2210.518810][ T30] audit: type=1400 audit(2000000075.064:2590): avc: denied { ioctl } for pid=29478 comm="syz.3.6095" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2210.558585][ T6519] bridge0: port 1(bridge_slave_0) entered blocking state [ 2210.565801][ T6519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2210.595195][T29463] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2210.611507][T29463] Buffer I/O error on dev nbd1, logical block 2, async page read [ 2210.619469][T29463] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2210.633280][T29463] Buffer I/O error on dev nbd1, logical block 3, async page read [ 2210.645612][T27143] bridge0: port 2(bridge_slave_1) entered blocking state [ 2210.652769][T27143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2210.661961][T29463] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2210.680017][T29463] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2210.695566][T29463] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2210.747529][T29463] Buffer I/O error on dev nbd1, logical block 1, async page read [ 2210.772829][T29463] ldm_validate_partition_table(): Disk read failed. [ 2210.825435][T29463] Dev nbd1: unable to read RDB block 0 [ 2210.865808][T29463] nbd1: unable to read partition table [ 2210.913948][T29463] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd1": -EINTR [ 2211.369195][T29373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2212.732521][T26214] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2212.743733][T29487] lo speed is unknown, defaulting to 1000 [ 2212.784723][T29487] lo speed is unknown, defaulting to 1000 [ 2212.797134][T29373] veth0_vlan: entered promiscuous mode [ 2212.897462][T29373] veth1_vlan: entered promiscuous mode [ 2212.991209][T26214] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 2213.197557][T26214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2213.940025][T26214] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2214.009532][T26214] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2214.072619][T26214] usb 4-1: Manufacturer: syz [ 2214.126011][T29373] veth0_macvtap: entered promiscuous mode [ 2214.168678][T29522] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6105'. [ 2214.184705][T29373] veth1_macvtap: entered promiscuous mode [ 2214.190507][T29522] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6105'. [ 2214.207334][T29373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2214.242056][T26214] usb 4-1: config 0 descriptor?? [ 2214.294899][T29526] 9p: Bad value for 'rfdno' [ 2214.301041][T29526] netlink: 'syz.1.6104': attribute type 3 has an invalid length. [ 2214.309547][T29526] netlink: 'syz.1.6104': attribute type 3 has an invalid length. [ 2214.327681][T29526] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6104'. [ 2214.448358][T26214] rc_core: IR keymap rc-hauppauge not found [ 2214.457512][T26214] Registered IR keymap rc-empty [ 2214.464632][T26214] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2214.482671][T26214] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input94 [ 2214.526266][T26214] usb 4-1: USB disconnect, device number 14 [ 2214.565995][T29373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2214.631846][ T1158] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2214.660195][ T1158] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2214.775710][ T1158] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2214.854968][ T1158] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2214.880959][ T30] audit: type=1400 audit(2000000079.604:2591): avc: denied { getopt } for pid=29530 comm="syz.6.6106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2215.021747][ T1031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2215.029657][ T1031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2215.110488][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2215.123451][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2215.396079][T29535] lo speed is unknown, defaulting to 1000 [ 2215.411973][T29535] lo speed is unknown, defaulting to 1000 [ 2216.258121][T29541] ntfs3(nullb0): Primary boot signature is not NTFS. [ 2216.299284][T29541] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 2216.680861][T29545] netlink: 'syz.5.6110': attribute type 29 has an invalid length. [ 2216.881394][T24296] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2216.892542][T24296] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2216.900899][T24296] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2216.909228][T24296] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2216.916785][T24296] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2217.108370][T29546] lo speed is unknown, defaulting to 1000 [ 2217.146005][T29546] lo speed is unknown, defaulting to 1000 [ 2217.740845][T29546] chnl_net:caif_netlink_parms(): no params data found [ 2217.793843][T27143] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2217.935449][T27143] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2218.255656][ T30] audit: type=1400 audit(2000000082.984:2592): avc: denied { lock } for pid=29553 comm="syz.4.6112" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2218.313703][T27143] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2219.111213][T24296] Bluetooth: hci4: command tx timeout [ 2219.623786][T29577] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6115'. [ 2219.724069][T29577] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6115'. [ 2220.028801][T27143] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2220.474498][T29546] bridge0: port 1(bridge_slave_0) entered blocking state [ 2220.527296][T29546] bridge0: port 1(bridge_slave_0) entered disabled state [ 2220.579502][T29546] bridge_slave_0: entered allmulticast mode [ 2220.614055][T29546] bridge_slave_0: entered promiscuous mode [ 2220.761255][T29546] bridge0: port 2(bridge_slave_1) entered blocking state [ 2220.788349][T29546] bridge0: port 2(bridge_slave_1) entered disabled state [ 2220.801486][ T5861] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 2220.806552][T29546] bridge_slave_1: entered allmulticast mode [ 2221.161429][T24224] Bluetooth: hci4: command tx timeout [ 2221.266344][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.315576][T29546] bridge_slave_1: entered promiscuous mode [ 2221.353764][ T5861] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 2221.377289][ T5861] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2221.403687][T29546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2221.427028][ T5861] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2221.443406][T29546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2221.453079][ T5861] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2221.468850][ T5861] usb 6-1: Manufacturer: syz [ 2221.522862][ T5861] usb 6-1: config 0 descriptor?? [ 2221.660443][T29546] team0: Port device team_slave_0 added [ 2221.682004][ T5861] rc_core: IR keymap rc-hauppauge not found [ 2221.687932][ T5861] Registered IR keymap rc-empty [ 2221.709305][T29546] team0: Port device team_slave_1 added [ 2221.720718][ T5861] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2222.553631][ T5861] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input95 [ 2222.615963][T29594] lo speed is unknown, defaulting to 1000 [ 2222.622844][T29594] lo speed is unknown, defaulting to 1000 [ 2222.683173][ T5861] usb 6-1: USB disconnect, device number 19 [ 2222.718819][T29546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2222.758664][T29600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6121'. [ 2222.777912][T29546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2222.897121][T29546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2222.932497][T29546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2222.939454][T29546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2223.010738][T29546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2223.557889][T24296] Bluetooth: hci4: command tx timeout [ 2223.596476][T29546] hsr_slave_0: entered promiscuous mode [ 2223.612380][T29546] hsr_slave_1: entered promiscuous mode [ 2223.631304][T29546] debugfs: 'hsr0' already exists in 'hsr' [ 2223.647693][T29546] Cannot create hsr debugfs directory [ 2223.661806][T27143] bridge_slave_1: left allmulticast mode [ 2223.667593][T27143] bridge_slave_1: left promiscuous mode [ 2223.688580][T27143] bridge0: port 2(bridge_slave_1) entered disabled state [ 2223.777714][ T30] audit: type=1400 audit(2000000088.474:2593): avc: denied { write } for pid=29606 comm="syz.3.6122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2223.827132][T27143] bridge_slave_0: left allmulticast mode [ 2223.875441][T27143] bridge_slave_0: left promiscuous mode [ 2223.920373][T27143] bridge0: port 1(bridge_slave_0) entered disabled state [ 2223.935694][ T30] audit: type=1400 audit(2000000088.474:2594): avc: denied { listen } for pid=29606 comm="syz.3.6122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2224.155051][ T30] audit: type=1326 audit(2000000088.534:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29606 comm="syz.3.6122" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5bb219c799 code=0x0 [ 2224.932896][T27143] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 2224.954909][T27143] ip6gretap1 (unregistering): left allmulticast mode [ 2225.229358][T27143] bond4 (unregistering): (slave gretap1): Releasing active interface [ 2225.861799][T24296] Bluetooth: hci4: command tx timeout [ 2225.960981][T27143] bond1 (unregistering): (slave geneve2): Releasing active interface [ 2226.039796][T29621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6126'. [ 2226.060302][T27143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2226.070701][T29621] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6126'. [ 2226.093087][T27143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2226.123882][T27143] bond0 (unregistering): Released all slaves [ 2226.144752][T27143] bond1 (unregistering): Released all slaves [ 2226.179578][T27143] bond2 (unregistering): Released all slaves [ 2226.216011][T27143] bond3 (unregistering): Released all slaves [ 2226.250739][T27143] bond4 (unregistering): Released all slaves [ 2228.012235][T27143] tipc: Disabling bearer [ 2228.070908][T27143] tipc: Disabling bearer [ 2228.124320][T27143] tipc: Left network mode [ 2228.135286][T29635] lo speed is unknown, defaulting to 1000 [ 2228.146921][T29635] lo speed is unknown, defaulting to 1000 [ 2228.211080][T27143] IPVS: stopping master sync thread 25783 ... [ 2228.237424][ T30] audit: type=1400 audit(2000000092.955:2596): avc: denied { bind } for pid=29639 comm="syz.4.6129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2228.491587][T11943] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 2228.716968][T11943] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2228.799262][T11943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2228.843702][T11943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2228.868339][T11943] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2228.914923][T11943] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2228.940408][T11943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2228.969676][T11943] usb 5-1: config 0 descriptor?? [ 2229.585230][T11943] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 2229.961859][T11943] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 2230.010157][T11943] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 2230.045047][T11943] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 2230.088008][T11943] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 2230.163271][T11943] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2230.200589][T11943] usb 5-1: USB disconnect, device number 37 [ 2230.235016][T27143] hsr_slave_0: left promiscuous mode [ 2230.270434][T27143] hsr_slave_1: left promiscuous mode [ 2230.276326][T27143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2230.312376][T27143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2230.354334][T27143] veth1_macvtap: left allmulticast mode [ 2230.359914][T27143] veth1_macvtap: left promiscuous mode [ 2230.390415][T27143] veth0_macvtap: left promiscuous mode [ 2230.420102][T27143] veth1_vlan: left promiscuous mode [ 2230.430435][T27143] veth0_vlan: left promiscuous mode [ 2231.695806][T29682] kvm: kvm [29680]: vcpu0, guest rIP: 0x55d80 Unhandled WRMSR(0x186) = 0xd637fe [ 2231.806364][T29546] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2231.841657][T29546] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2231.855924][T29546] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2231.932425][T29546] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2231.983431][T29694] kvm: user requested TSC rate below hardware speed [ 2232.304044][T29546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2232.336330][T29710] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2232.383721][T27143] IPVS: stop unused estimator thread 0... [ 2232.389899][T29546] 8021q: adding VLAN 0 to HW filter on device team0 [ 2232.434926][ T1031] bridge0: port 1(bridge_slave_0) entered blocking state [ 2232.442125][ T1031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2232.470533][ T1031] bridge0: port 2(bridge_slave_1) entered blocking state [ 2232.477641][ T1031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2232.551105][T29718] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 2232.568252][T29546] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2232.580601][T29718] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 2232.606311][T29718] kvm: requested 55314 ns i8254 timer period limited to 200000 ns [ 2232.680624][T29718] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 2232.693478][T29718] kvm: requested 189409 ns i8254 timer period limited to 200000 ns [ 2232.710524][T29718] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 2232.728946][T29718] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 2232.754782][T29718] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 2232.776707][T29718] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 2232.797997][T29718] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 2233.126392][T29738] kvm: emulating exchange as write [ 2233.185364][T29546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2233.318076][T29546] veth0_vlan: entered promiscuous mode [ 2233.345272][T29546] veth1_vlan: entered promiscuous mode [ 2233.439497][T29546] veth0_macvtap: entered promiscuous mode [ 2233.456874][T29546] veth1_macvtap: entered promiscuous mode [ 2233.517503][T29546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2233.535039][T29546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2233.602772][T15245] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2233.628880][T15245] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2233.672920][T15245] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2233.687957][T15245] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2233.847196][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2233.866371][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2233.933276][T27143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2233.943104][T27143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2234.154081][T29772] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2234.160618][T29777] netlink: 'syz.1.6108': attribute type 1 has an invalid length. [ 2234.202793][ T30] audit: type=1400 audit(2000000098.925:2597): avc: denied { write } for pid=29775 comm="syz.1.6108" path="socket:[127109]" dev="sockfs" ino=127109 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2234.210781][T29779] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6108'. [ 2234.292324][T29777] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6108'. [ 2234.600458][T29789] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2234.636679][T24224] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2234.659422][T24224] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2234.677336][T24224] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2234.695157][T24224] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2234.704921][T24224] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2234.807497][T29798] lo speed is unknown, defaulting to 1000 [ 2234.833741][T29802] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2234.843674][T29798] lo speed is unknown, defaulting to 1000 [ 2234.995206][T29807] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2235.217400][T29814] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2235.299021][T29798] chnl_net:caif_netlink_parms(): no params data found [ 2235.616627][T29798] bridge0: port 1(bridge_slave_0) entered blocking state [ 2235.670994][T29798] bridge0: port 1(bridge_slave_0) entered disabled state [ 2235.683863][T29798] bridge_slave_0: entered allmulticast mode [ 2235.705446][T29798] bridge_slave_0: entered promiscuous mode [ 2235.727867][T29798] bridge0: port 2(bridge_slave_1) entered blocking state [ 2235.749200][T29798] bridge0: port 2(bridge_slave_1) entered disabled state [ 2235.774977][T29798] bridge_slave_1: entered allmulticast mode [ 2235.807002][T29798] bridge_slave_1: entered promiscuous mode [ 2235.894787][T29833] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3509204078 (449178121984 ns) > initial count (29842936192 ns). Using initial count to start timer. [ 2235.904509][T29798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2235.954581][T29798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2236.064161][T29798] team0: Port device team_slave_0 added [ 2236.085698][T29798] team0: Port device team_slave_1 added [ 2236.137811][T29840] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2236.222868][T29798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2236.229829][T29798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2236.319897][T29798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2236.379049][T29798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2236.387575][T29798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2236.446983][T29798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2236.681420][T29798] hsr_slave_0: entered promiscuous mode [ 2236.702918][T29798] hsr_slave_1: entered promiscuous mode [ 2236.742300][T29798] debugfs: 'hsr0' already exists in 'hsr' [ 2236.748929][T29798] Cannot create hsr debugfs directory [ 2236.749987][T24296] Bluetooth: hci2: command tx timeout [ 2236.925499][ T30] audit: type=1400 audit(2000000101.645:2598): avc: denied { execute } for pid=29866 comm="syz.1.6197" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=129054 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2237.015412][ T30] audit: type=1800 audit(2000000101.645:2599): pid=29867 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.6197" name="[kvm-gmem]" dev="guest_memfd" ino=129054 res=0 errno=0 [ 2237.223295][T29798] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2237.236090][T29798] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2237.378180][T29798] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2237.394322][T29879] kvm: kvm [29878]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 2237.405170][T29798] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2237.422312][T29879] kvm: kvm [29878]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0x8000000000000 [ 2237.480209][T29884] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2237.547526][T29798] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2237.565410][T29798] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2237.774791][T29798] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2237.812277][T29798] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2238.090378][T29903] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2238.172993][T29798] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2238.209564][T29798] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2238.237891][T29798] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2238.266410][T29798] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2238.498856][T29798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2238.569226][T29798] 8021q: adding VLAN 0 to HW filter on device team0 [ 2238.602111][ T1031] bridge0: port 1(bridge_slave_0) entered blocking state [ 2238.609248][ T1031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2238.833583][T24296] Bluetooth: hci2: command tx timeout [ 2238.858462][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 2238.865587][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2239.152030][T29928] KVM: debugfs: duplicate directory 29928-7 [ 2239.351661][T29798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2239.478031][T29798] veth0_vlan: entered promiscuous mode [ 2239.517135][T29798] veth1_vlan: entered promiscuous mode [ 2239.600348][T29798] veth0_macvtap: entered promiscuous mode [ 2239.641952][T29798] veth1_macvtap: entered promiscuous mode [ 2239.692682][T29798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2239.752309][T29798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2239.772434][ T1031] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2239.792028][ T1031] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2239.811342][ T1031] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2239.841887][ T1031] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2239.866023][ T30] audit: type=1400 audit(2000000104.585:2600): avc: denied { execute } for pid=29956 comm="syz.4.6227" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=130910 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 2239.994591][ T30] audit: type=1400 audit(2000000104.665:2601): avc: denied { map } for pid=29956 comm="syz.4.6227" path="pipe:[120678]" dev="pipefs" ino=120678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 2240.077716][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2240.109439][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2240.156257][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2240.175971][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2240.642143][ T30] audit: type=1400 audit(2000000105.365:2602): avc: denied { getopt } for pid=29977 comm="syz.6.6235" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2240.722573][ T30] audit: type=1400 audit(2000000105.425:2603): avc: denied { read } for pid=29974 comm="syz.3.6233" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 2240.809789][ T30] audit: type=1400 audit(2000000105.425:2604): avc: denied { open } for pid=29974 comm="syz.3.6233" path="/2/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 2240.899234][ T30] audit: type=1400 audit(2000000105.425:2605): avc: denied { ioctl } for pid=29974 comm="syz.3.6233" path="/2/file0/file0" dev="fuse" ino=64 ioctlcmd=0x935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 2240.924851][T24296] Bluetooth: hci2: command tx timeout [ 2240.959818][ T30] audit: type=1400 audit(2000000105.435:2606): avc: denied { ioctl } for pid=29976 comm="syz.5.6234" path="socket:[132165]" dev="sockfs" ino=132165 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2241.153420][T30005] [ 2241.155772][T30005] ====================================================== [ 2241.162787][T30005] WARNING: possible circular locking dependency detected [ 2241.169802][T30005] syzkaller #0 Tainted: G L [ 2241.175773][T30005] ------------------------------------------------------ [ 2241.182770][T30005] syz.1.6244/30005 is trying to acquire lock: [ 2241.188824][T30005] ffffffff8e9ab580 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 2241.198653][T30005] [ 2241.198653][T30005] but task is already holding lock: [ 2241.205999][T30005] ffff88807b8c1be0 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: inet_stream_connect+0x43/0xa0 [ 2241.215551][T30005] [ 2241.215551][T30005] which lock already depends on the new lock. [ 2241.215551][T30005] [ 2241.225932][T30005] [ 2241.225932][T30005] the existing dependency chain (in reverse order) is: [ 2241.234922][T30005] [ 2241.234922][T30005] -> #7 (k-sk_lock-AF_INET){+.+.}-{0:0}: [ 2241.242722][T30005] lock_sock_nested+0x41/0xf0 [ 2241.247909][T30005] mptcp_listen+0x1ef/0x4c0 [ 2241.252917][T30005] __sys_listen_socket+0x108/0x150 [ 2241.258533][T30005] __sys_listen+0xa7/0x130 [ 2241.263448][T30005] __x64_sys_listen+0x53/0x80 [ 2241.268630][T30005] do_syscall_64+0x106/0xf80 [ 2241.273722][T30005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2241.280141][T30005] [ 2241.280141][T30005] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 2241.287767][T30005] lock_sock_nested+0x41/0xf0 [ 2241.292965][T30005] inet_shutdown+0x67/0x410 [ 2241.297974][T30005] nbd_mark_nsock_dead+0xae/0x5c0 [ 2241.303502][T30005] recv_work+0x5fb/0x8c0 [ 2241.308252][T30005] process_one_work+0xa23/0x19a0 [ 2241.313692][T30005] worker_thread+0x5ef/0xe50 [ 2241.318782][T30005] kthread+0x370/0x450 [ 2241.323359][T30005] ret_from_fork+0x754/0xd80 [ 2241.328447][T30005] ret_from_fork_asm+0x1a/0x30 [ 2241.333737][T30005] [ 2241.333737][T30005] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 2241.341363][T30005] __mutex_lock+0x1a2/0x1b90 [ 2241.346460][T30005] nbd_queue_rq+0x428/0x1080 [ 2241.351546][T30005] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 2241.357596][T30005] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 2241.364431][T30005] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 2241.370917][T30005] blk_mq_run_hw_queue+0x23c/0x670 [ 2241.376528][T30005] blk_mq_dispatch_list+0x51d/0x1360 [ 2241.382317][T30005] blk_mq_flush_plug_list+0x130/0x600 [ 2241.388193][T30005] __blk_flush_plug+0x2c4/0x4b0 [ 2241.393543][T30005] __submit_bio+0x584/0x6c0 [ 2241.398544][T30005] submit_bio_noacct_nocheck+0x562/0xc10 [ 2241.404680][T30005] submit_bio_noacct+0xd17/0x2010 [ 2241.410207][T30005] submit_bh_wbc+0x59c/0x770 [ 2241.415297][T30005] block_read_full_folio+0x264/0x8e0 [ 2241.421086][T30005] filemap_read_folio+0xfc/0x3b0 [ 2241.426527][T30005] do_read_cache_folio+0x2d7/0x6b0 [ 2241.432141][T30005] read_part_sector+0xd1/0x370 [ 2241.437412][T30005] adfspart_check_ICS+0x93/0x910 [ 2241.442859][T30005] bdev_disk_changed+0x7f8/0xc80 [ 2241.448300][T30005] blkdev_get_whole+0x187/0x290 [ 2241.453659][T30005] bdev_open+0x2c7/0xe40 [ 2241.458413][T30005] bdev_file_open_by_dev+0x179/0x210 [ 2241.464221][T30005] setup_bdev_super+0x385/0x730 [ 2241.469590][T30005] get_tree_bdev_flags+0x363/0x620 [ 2241.475219][T30005] vfs_get_tree+0x92/0x320 [ 2241.480147][T30005] path_mount+0x7d0/0x23d0 [ 2241.485068][T30005] __x64_sys_mount+0x293/0x310 [ 2241.490336][T30005] do_syscall_64+0x106/0xf80 [ 2241.495434][T30005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2241.501837][T30005] [ 2241.501837][T30005] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 2241.509030][T30005] __mutex_lock+0x1a2/0x1b90 [ 2241.514129][T30005] nbd_queue_rq+0xba/0x1080 [ 2241.519134][T30005] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 2241.525188][T30005] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 2241.532022][T30005] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 2241.538506][T30005] blk_mq_run_hw_queue+0x23c/0x670 [ 2241.544119][T30005] blk_mq_dispatch_list+0x51d/0x1360 [ 2241.549909][T30005] blk_mq_flush_plug_list+0x130/0x600 [ 2241.555785][T30005] __blk_flush_plug+0x2c4/0x4b0 [ 2241.561154][T30005] __submit_bio+0x584/0x6c0 [ 2241.566161][T30005] submit_bio_noacct_nocheck+0x562/0xc10 [ 2241.572293][T30005] submit_bio_noacct+0xd17/0x2010 [ 2241.577819][T30005] submit_bh_wbc+0x59c/0x770 [ 2241.582912][T30005] block_read_full_folio+0x264/0x8e0 [ 2241.588705][T30005] filemap_read_folio+0xfc/0x3b0 [ 2241.594146][T30005] do_read_cache_folio+0x2d7/0x6b0 [ 2241.599761][T30005] read_part_sector+0xd1/0x370 [ 2241.605034][T30005] adfspart_check_ICS+0x93/0x910 [ 2241.610469][T30005] bdev_disk_changed+0x7f8/0xc80 [ 2241.615906][T30005] blkdev_get_whole+0x187/0x290 [ 2241.621256][T30005] bdev_open+0x2c7/0xe40 [ 2241.626000][T30005] bdev_file_open_by_dev+0x179/0x210 [ 2241.631786][T30005] setup_bdev_super+0x385/0x730 [ 2241.637143][T30005] get_tree_bdev_flags+0x363/0x620 [ 2241.642758][T30005] vfs_get_tree+0x92/0x320 [ 2241.647700][T30005] path_mount+0x7d0/0x23d0 [ 2241.652616][T30005] __x64_sys_mount+0x293/0x310 [ 2241.657892][T30005] do_syscall_64+0x106/0xf80 [ 2241.662986][T30005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2241.669380][T30005] [ 2241.669380][T30005] -> #3 (set->srcu){.+.+}-{0:0}: [ 2241.676476][T30005] __synchronize_srcu+0xa1/0x2a0 [ 2241.681916][T30005] blk_mq_quiesce_queue+0x149/0x1c0 [ 2241.687612][T30005] elevator_switch+0x17b/0x7e0 [ 2241.692876][T30005] elevator_change+0x352/0x530 [ 2241.698137][T30005] elevator_set_default+0x29e/0x360 [ 2241.703834][T30005] blk_register_queue+0x412/0x590 [ 2241.709356][T30005] __add_disk+0x73f/0xe40 [ 2241.714189][T30005] add_disk_fwnode+0x118/0x5c0 [ 2241.719457][T30005] nbd_dev_add+0x77a/0xb10 [ 2241.724464][T30005] nbd_init+0x291/0x2b0 [ 2241.729115][T30005] do_one_initcall+0x11d/0x760 [ 2241.734378][T30005] kernel_init_freeable+0x6e5/0x7a0 [ 2241.740075][T30005] kernel_init+0x1f/0x1e0 [ 2241.744901][T30005] ret_from_fork+0x754/0xd80 [ 2241.749987][T30005] ret_from_fork_asm+0x1a/0x30 [ 2241.755267][T30005] [ 2241.755267][T30005] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 2241.763064][T30005] __mutex_lock+0x1a2/0x1b90 [ 2241.768159][T30005] elevator_change+0x1bc/0x530 [ 2241.773421][T30005] elevator_set_none+0x92/0xf0 [ 2241.778685][T30005] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 2241.784998][T30005] nbd_start_device+0x1a6/0xbd0 [ 2241.790357][T30005] nbd_genl_connect+0xff2/0x1a40 [ 2241.795796][T30005] genl_family_rcv_msg_doit+0x214/0x300 [ 2241.801845][T30005] genl_rcv_msg+0x560/0x800 [ 2241.806844][T30005] netlink_rcv_skb+0x159/0x420 [ 2241.812110][T30005] genl_rcv+0x28/0x40 [ 2241.816598][T30005] netlink_unicast+0x5aa/0x870 [ 2241.821864][T30005] netlink_sendmsg+0x8b0/0xda0 [ 2241.827132][T30005] ____sys_sendmsg+0x9e1/0xb70 [ 2241.832400][T30005] ___sys_sendmsg+0x190/0x1e0 [ 2241.837576][T30005] __sys_sendmsg+0x170/0x220 [ 2241.842667][T30005] do_syscall_64+0x106/0xf80 [ 2241.847763][T30005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2241.854155][T30005] [ 2241.854155][T30005] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 2241.862734][T30005] blk_alloc_queue+0x610/0x790 [ 2241.867997][T30005] blk_mq_alloc_queue+0x174/0x290 [ 2241.873527][T30005] __blk_mq_alloc_disk+0x29/0x120 [ 2241.879054][T30005] nbd_dev_add+0x492/0xb10 [ 2241.883974][T30005] nbd_init+0x291/0x2b0 [ 2241.888626][T30005] do_one_initcall+0x11d/0x760 [ 2241.893893][T30005] kernel_init_freeable+0x6e5/0x7a0 [ 2241.899588][T30005] kernel_init+0x1f/0x1e0 [ 2241.904417][T30005] ret_from_fork+0x754/0xd80 [ 2241.909594][T30005] ret_from_fork_asm+0x1a/0x30 [ 2241.914862][T30005] [ 2241.914862][T30005] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 2241.922047][T30005] __lock_acquire+0x14b8/0x2630 [ 2241.927401][T30005] lock_acquire+0x1cf/0x380 [ 2241.932397][T30005] fs_reclaim_acquire+0xc4/0x100 [ 2241.937832][T30005] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 2241.944142][T30005] __alloc_skb+0x140/0x710 [ 2241.949058][T30005] tcp_stream_alloc_skb+0x34/0x660 [ 2241.954666][T30005] tcp_connect+0xe8c/0x5630 [ 2241.959668][T30005] tcp_v4_connect+0x1603/0x1b40 [ 2241.965021][T30005] __inet_stream_connect+0x208/0xfa0 [ 2241.970805][T30005] inet_stream_connect+0x57/0xa0 [ 2241.976239][T30005] p9_fd_create_tcp+0x379/0x4d0 [ 2241.981589][T30005] p9_client_create+0x563/0xd40 [ 2241.986944][T30005] v9fs_session_init+0x40/0xce0 [ 2241.992298][T30005] v9fs_get_tree+0xb8/0xb50 [ 2241.997300][T30005] vfs_get_tree+0x92/0x320 [ 2242.002218][T30005] path_mount+0x7d0/0x23d0 [ 2242.007135][T30005] __x64_sys_mount+0x293/0x310 [ 2242.012397][T30005] do_syscall_64+0x106/0xf80 [ 2242.017487][T30005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2242.023877][T30005] [ 2242.023877][T30005] other info that might help us debug this: [ 2242.023877][T30005] [ 2242.034090][T30005] Chain exists of: [ 2242.034090][T30005] fs_reclaim --> sk_lock-AF_INET --> k-sk_lock-AF_INET [ 2242.034090][T30005] [ 2242.046836][T30005] Possible unsafe locking scenario: [ 2242.046836][T30005] [ 2242.054256][T30005] CPU0 CPU1 [ 2242.059597][T30005] ---- ---- [ 2242.064947][T30005] lock(k-sk_lock-AF_INET); [ 2242.069512][T30005] lock(sk_lock-AF_INET); [ 2242.076423][T30005] lock(k-sk_lock-AF_INET); [ 2242.083856][T30005] lock(fs_reclaim); [ 2242.087813][T30005] [ 2242.087813][T30005] *** DEADLOCK *** [ 2242.087813][T30005] [ 2242.095930][T30005] 1 lock held by syz.1.6244/30005: [ 2242.101013][T30005] #0: ffff88807b8c1be0 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: inet_stream_connect+0x43/0xa0 [ 2242.110993][T30005] [ 2242.110993][T30005] stack backtrace: [ 2242.116865][T30005] CPU: 1 UID: 0 PID: 30005 Comm: syz.1.6244 Tainted: G L syzkaller #0 PREEMPT(full) [ 2242.116886][T30005] Tainted: [L]=SOFTLOCKUP [ 2242.116891][T30005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2242.116900][T30005] Call Trace: [ 2242.116905][T30005] [ 2242.116910][T30005] dump_stack_lvl+0x100/0x190 [ 2242.116933][T30005] print_circular_bug.cold+0x178/0x1c7 [ 2242.116956][T30005] check_noncircular+0x146/0x160 [ 2242.116981][T30005] __lock_acquire+0x14b8/0x2630 [ 2242.116995][T30005] ? ipv4_dst_check+0x1a8/0x3b0 [ 2242.117009][T30005] lock_acquire+0x1cf/0x380 [ 2242.117021][T30005] ? kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 2242.117044][T30005] ? __lock_acquire+0x4a5/0x2630 [ 2242.117058][T30005] fs_reclaim_acquire+0xc4/0x100 [ 2242.117072][T30005] ? kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 2242.117092][T30005] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 2242.117112][T30005] ? __alloc_skb+0x140/0x710 [ 2242.117130][T30005] __alloc_skb+0x140/0x710 [ 2242.117147][T30005] ? __pfx___alloc_skb+0x10/0x10 [ 2242.117165][T30005] tcp_stream_alloc_skb+0x34/0x660 [ 2242.117180][T30005] tcp_connect+0xe8c/0x5630 [ 2242.117200][T30005] ? __pfx_tcp_connect+0x10/0x10 [ 2242.117214][T30005] ? get_random_u16+0x583/0x7d0 [ 2242.117228][T30005] ? tcp_fastopen_cookie_check+0x44a/0x450 [ 2242.117252][T30005] tcp_v4_connect+0x1603/0x1b40 [ 2242.117268][T30005] ? __pfx_tcp_v4_connect+0x10/0x10 [ 2242.117281][T30005] ? __lock_acquire+0x4a5/0x2630 [ 2242.117295][T30005] __inet_stream_connect+0x208/0xfa0 [ 2242.117311][T30005] ? __pfx___inet_stream_connect+0x10/0x10 [ 2242.117325][T30005] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2242.117342][T30005] ? __local_bh_enable_ip+0x9e/0x120 [ 2242.117361][T30005] inet_stream_connect+0x57/0xa0 [ 2242.117375][T30005] p9_fd_create_tcp+0x379/0x4d0 [ 2242.117391][T30005] ? __pfx_p9_fd_create_tcp+0x10/0x10 [ 2242.117411][T30005] ? lockdep_init_map_type+0x5c/0x250 [ 2242.117426][T30005] p9_client_create+0x563/0xd40 [ 2242.117446][T30005] ? __pfx_p9_client_create+0x10/0x10 [ 2242.117468][T30005] ? lockdep_init_map_type+0x5c/0x250 [ 2242.117482][T30005] ? __raw_spin_lock_init+0x3a/0x110 [ 2242.117499][T30005] v9fs_session_init+0x40/0xce0 [ 2242.117520][T30005] ? kasan_save_track+0x14/0x30 [ 2242.117542][T30005] v9fs_get_tree+0xb8/0xb50 [ 2242.117556][T30005] ? rcu_is_watching+0x12/0xc0 [ 2242.117573][T30005] ? __pfx_v9fs_get_tree+0x10/0x10 [ 2242.117588][T30005] ? bpf_lsm_capable+0x9/0x10 [ 2242.117602][T30005] ? security_capable+0x80/0x260 [ 2242.117618][T30005] vfs_get_tree+0x92/0x320 [ 2242.117638][T30005] path_mount+0x7d0/0x23d0 [ 2242.117657][T30005] ? __pfx_path_mount+0x10/0x10 [ 2242.117674][T30005] ? lockdep_hardirqs_on+0x78/0x100 [ 2242.117693][T30005] ? putname+0xb1/0x110 [ 2242.117708][T30005] ? kmem_cache_free+0x124/0x6a0 [ 2242.117728][T30005] ? __x64_sys_mount+0x293/0x310 [ 2242.117745][T30005] __x64_sys_mount+0x293/0x310 [ 2242.117763][T30005] ? __pfx___x64_sys_mount+0x10/0x10 [ 2242.117783][T30005] do_syscall_64+0x106/0xf80 [ 2242.117807][T30005] ? clear_bhb_loop+0x40/0x90 [ 2242.117823][T30005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2242.117837][T30005] RIP: 0033:0x7fe40a99c799 [ 2242.117849][T30005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2242.117864][T30005] RSP: 002b:00007fe40b91c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2242.117877][T30005] RAX: ffffffffffffffda RBX: 00007fe40ac15fa0 RCX: 00007fe40a99c799 [ 2242.117887][T30005] RDX: 00002000000006c0 RSI: 0000200000000680 RDI: 0000200000000640 [ 2242.117896][T30005] RBP: 00007fe40aa32c99 R08: 0000200000000080 R09: 0000000000000000 [ 2242.117904][T30005] R10: 0000000000008010 R11: 0000000000000246 R12: 0000000000000000 [ 2242.117914][T30005] R13: 00007fe40ac16038 R14: 00007fe40ac15fa0 R15: 00007ffd4f727678 [ 2242.117927][T30005] [ 2242.671840][T30005] 9pnet_fd: p9_fd_create_tcp (30005): problem connecting socket to 127.0.0.1 [ 2242.785882][ T30] audit: type=1400 audit(2000000107.506:2607): avc: denied { mount } for pid=30010 comm="syz.5.6246" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 2242.980270][T24296] Bluetooth: hci2: command tx timeout