Warning: Permanently added '[localhost]:53036' (ECDSA) to the list of known hosts. [ 54.035682][ T39] audit: type=1400 audit(1661442988.284:75): avc: denied { execute } for pid=3645 comm="sh" name="syz-fuzzer" dev="sda1" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 54.055526][ T39] audit: type=1400 audit(1661442988.284:76): avc: denied { execute_no_trans } for pid=3645 comm="sh" path="/syz-fuzzer" dev="sda1" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2022/08/25 15:56:28 fuzzer started 2022/08/25 15:56:29 dialing manager at localhost:40007 [ 55.056370][ T39] audit: type=1400 audit(1661442989.304:77): avc: denied { mounton } for pid=3665 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 55.063304][ T3665] cgroup: Unknown subsys name 'net' [ 55.073398][ T39] audit: type=1400 audit(1661442989.314:78): avc: denied { mount } for pid=3665 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.093896][ T39] audit: type=1400 audit(1661442989.334:79): avc: denied { unmount } for pid=3665 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.260067][ T3665] cgroup: Unknown subsys name 'rlimit' [ 55.415497][ T39] audit: type=1400 audit(1661442989.664:80): avc: denied { mounton } for pid=3665 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 2022/08/25 15:56:29 syscalls: 3757 2022/08/25 15:56:29 code coverage: enabled 2022/08/25 15:56:29 comparison tracing: enabled 2022/08/25 15:56:29 extra coverage: enabled 2022/08/25 15:56:29 delay kcov mmap: enabled 2022/08/25 15:56:29 setuid sandbox: enabled 2022/08/25 15:56:29 namespace sandbox: enabled 2022/08/25 15:56:29 Android sandbox: enabled 2022/08/25 15:56:29 fault injection: enabled 2022/08/25 15:56:29 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2022/08/25 15:56:29 net packet injection: enabled 2022/08/25 15:56:29 net device setup: enabled 2022/08/25 15:56:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/08/25 15:56:29 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/08/25 15:56:29 USB emulation: enabled 2022/08/25 15:56:29 hci packet injection: enabled 2022/08/25 15:56:29 wifi device emulation: failed to parse kernel version (6.0.0-rc2-syzkaller-00054-gc40e8341e3b3) 2022/08/25 15:56:29 802.15.4 emulation: enabled [ 55.445586][ T39] audit: type=1400 audit(1661442989.674:81): avc: denied { mount } for pid=3665 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 55.467612][ T39] audit: type=1400 audit(1661442989.674:82): avc: denied { setattr } for pid=3665 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 2022/08/25 15:56:29 fetching corpus: 0, signal 0/2000 (executing program) 2022/08/25 15:56:30 fetching corpus: 50, signal 42860/46331 (executing program) 2022/08/25 15:56:31 fetching corpus: 100, signal 62518/67434 (executing program) 2022/08/25 15:56:31 fetching corpus: 150, signal 76545/82832 (executing program) 2022/08/25 15:56:31 fetching corpus: 200, signal 83250/90877 (executing program) 2022/08/25 15:56:31 fetching corpus: 250, signal 92471/101258 (executing program) 2022/08/25 15:56:31 fetching corpus: 300, signal 101457/111374 (executing program) 2022/08/25 15:56:32 fetching corpus: 350, signal 107610/118694 (executing program) 2022/08/25 15:56:32 fetching corpus: 400, signal 113180/125366 (executing program) 2022/08/25 15:56:32 fetching corpus: 450, signal 120123/133299 (executing program) 2022/08/25 15:56:32 fetching corpus: 500, signal 127413/141453 (executing program) 2022/08/25 15:56:32 fetching corpus: 550, signal 132677/147602 (executing program) 2022/08/25 15:56:33 fetching corpus: 600, signal 137669/153484 (executing program) 2022/08/25 15:56:33 fetching corpus: 650, signal 141991/158685 (executing program) 2022/08/25 15:56:33 fetching corpus: 700, signal 144806/162478 (executing program) 2022/08/25 15:56:33 fetching corpus: 750, signal 149931/168253 (executing program) 2022/08/25 15:56:34 fetching corpus: 800, signal 154682/173698 (executing program) 2022/08/25 15:56:34 fetching corpus: 850, signal 158026/177848 (executing program) 2022/08/25 15:56:34 fetching corpus: 900, signal 160924/181541 (executing program) 2022/08/25 15:56:34 fetching corpus: 950, signal 163771/185086 (executing program) 2022/08/25 15:56:35 fetching corpus: 1000, signal 166963/188891 (executing program) 2022/08/25 15:56:35 fetching corpus: 1050, signal 169715/192329 (executing program) 2022/08/25 15:56:35 fetching corpus: 1100, signal 171814/195170 (executing program) 2022/08/25 15:56:35 fetching corpus: 1150, signal 175877/199683 (executing program) 2022/08/25 15:56:36 fetching corpus: 1200, signal 177923/202468 (executing program) 2022/08/25 15:56:36 fetching corpus: 1250, signal 181126/206173 (executing program) 2022/08/25 15:56:36 fetching corpus: 1299, signal 183443/209093 (executing program) 2022/08/25 15:56:36 fetching corpus: 1349, signal 186855/212886 (executing program) 2022/08/25 15:56:37 fetching corpus: 1399, signal 190792/217063 (executing program) 2022/08/25 15:56:37 fetching corpus: 1449, signal 192496/219355 (executing program) 2022/08/25 15:56:37 fetching corpus: 1499, signal 194626/221990 (executing program) 2022/08/25 15:56:37 fetching corpus: 1549, signal 196611/224529 (executing program) 2022/08/25 15:56:38 fetching corpus: 1599, signal 199169/227499 (executing program) 2022/08/25 15:56:38 fetching corpus: 1649, signal 200968/229788 (executing program) 2022/08/25 15:56:38 fetching corpus: 1697, signal 202807/232048 (executing program) 2022/08/25 15:56:39 fetching corpus: 1747, signal 205655/235111 (executing program) 2022/08/25 15:56:39 fetching corpus: 1797, signal 207983/237722 (executing program) 2022/08/25 15:56:39 fetching corpus: 1847, signal 209893/240020 (executing program) 2022/08/25 15:56:40 fetching corpus: 1897, signal 211715/242196 (executing program) 2022/08/25 15:56:40 fetching corpus: 1947, signal 214227/244951 (executing program) 2022/08/25 15:56:40 fetching corpus: 1997, signal 216713/247608 (executing program) 2022/08/25 15:56:40 fetching corpus: 2047, signal 218930/250059 (executing program) 2022/08/25 15:56:41 fetching corpus: 2097, signal 220679/252172 (executing program) 2022/08/25 15:56:41 fetching corpus: 2147, signal 222483/254217 (executing program) 2022/08/25 15:56:41 fetching corpus: 2197, signal 224378/256355 (executing program) 2022/08/25 15:56:42 fetching corpus: 2247, signal 226311/258564 (executing program) 2022/08/25 15:56:42 fetching corpus: 2297, signal 227973/260504 (executing program) 2022/08/25 15:56:42 fetching corpus: 2347, signal 230516/263078 (executing program) 2022/08/25 15:56:42 fetching corpus: 2397, signal 232371/265096 (executing program) 2022/08/25 15:56:43 fetching corpus: 2447, signal 234242/267093 (executing program) 2022/08/25 15:56:43 fetching corpus: 2497, signal 235733/268821 (executing program) 2022/08/25 15:56:43 fetching corpus: 2547, signal 237415/270622 (executing program) 2022/08/25 15:56:43 fetching corpus: 2597, signal 239158/272415 (executing program) 2022/08/25 15:56:44 fetching corpus: 2647, signal 241129/274354 (executing program) 2022/08/25 15:56:44 fetching corpus: 2697, signal 242738/276053 (executing program) 2022/08/25 15:56:44 fetching corpus: 2747, signal 243950/277464 (executing program) 2022/08/25 15:56:44 fetching corpus: 2797, signal 245075/278793 (executing program) 2022/08/25 15:56:45 fetching corpus: 2847, signal 246921/280556 (executing program) 2022/08/25 15:56:45 fetching corpus: 2897, signal 247914/281805 (executing program) 2022/08/25 15:56:45 fetching corpus: 2947, signal 249534/283423 (executing program) 2022/08/25 15:56:45 fetching corpus: 2997, signal 250992/284916 (executing program) 2022/08/25 15:56:45 fetching corpus: 3047, signal 252053/286148 (executing program) 2022/08/25 15:56:45 fetching corpus: 3097, signal 253291/287467 (executing program) 2022/08/25 15:56:46 fetching corpus: 3147, signal 254258/288568 (executing program) 2022/08/25 15:56:46 fetching corpus: 3197, signal 255346/289834 (executing program) 2022/08/25 15:56:46 fetching corpus: 3247, signal 256377/291051 (executing program) 2022/08/25 15:56:46 fetching corpus: 3297, signal 257419/292209 (executing program) 2022/08/25 15:56:47 fetching corpus: 3347, signal 258907/293589 (executing program) 2022/08/25 15:56:47 fetching corpus: 3397, signal 260327/294974 (executing program) 2022/08/25 15:56:47 fetching corpus: 3447, signal 261533/296183 (executing program) 2022/08/25 15:56:47 fetching corpus: 3497, signal 262520/297201 (executing program) 2022/08/25 15:56:47 fetching corpus: 3547, signal 263414/298203 (executing program) 2022/08/25 15:56:48 fetching corpus: 3597, signal 264452/299281 (executing program) 2022/08/25 15:56:48 fetching corpus: 3647, signal 266333/300795 (executing program) 2022/08/25 15:56:48 fetching corpus: 3697, signal 268278/302375 (executing program) 2022/08/25 15:56:48 fetching corpus: 3747, signal 269249/303350 (executing program) 2022/08/25 15:56:49 fetching corpus: 3797, signal 270611/304514 (executing program) 2022/08/25 15:56:49 fetching corpus: 3847, signal 271851/305607 (executing program) 2022/08/25 15:56:49 fetching corpus: 3897, signal 272735/306531 (executing program) 2022/08/25 15:56:49 fetching corpus: 3947, signal 273602/307440 (executing program) 2022/08/25 15:56:50 fetching corpus: 3997, signal 274862/308553 (executing program) 2022/08/25 15:56:50 fetching corpus: 4047, signal 275622/309359 (executing program) 2022/08/25 15:56:50 fetching corpus: 4097, signal 276472/310209 (executing program) 2022/08/25 15:56:50 fetching corpus: 4147, signal 277944/311350 (executing program) 2022/08/25 15:56:50 fetching corpus: 4197, signal 279049/312284 (executing program) 2022/08/25 15:56:51 fetching corpus: 4245, signal 279918/313119 (executing program) 2022/08/25 15:56:51 fetching corpus: 4295, signal 280862/313991 (executing program) 2022/08/25 15:56:51 fetching corpus: 4345, signal 281962/314931 (executing program) [ 77.511329][ T1351] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.517506][ T1351] ieee802154 phy1 wpan1: encryption failed: -22 2022/08/25 15:56:52 fetching corpus: 4395, signal 282659/315650 (executing program) 2022/08/25 15:56:52 fetching corpus: 4445, signal 284031/316679 (executing program) 2022/08/25 15:56:52 fetching corpus: 4495, signal 285093/317529 (executing program) 2022/08/25 15:56:52 fetching corpus: 4545, signal 285661/318141 (executing program) 2022/08/25 15:56:53 fetching corpus: 4595, signal 286787/318991 (executing program) 2022/08/25 15:56:53 fetching corpus: 4645, signal 287968/319892 (executing program) 2022/08/25 15:56:53 fetching corpus: 4695, signal 288811/320622 (executing program) 2022/08/25 15:56:53 fetching corpus: 4745, signal 289611/321295 (executing program) 2022/08/25 15:56:54 fetching corpus: 4795, signal 290419/322016 (executing program) 2022/08/25 15:56:54 fetching corpus: 4844, signal 291253/322672 (executing program) 2022/08/25 15:56:54 fetching corpus: 4894, signal 291901/323276 (executing program) 2022/08/25 15:56:54 fetching corpus: 4944, signal 292986/324042 (executing program) 2022/08/25 15:56:54 fetching corpus: 4994, signal 293980/324775 (executing program) 2022/08/25 15:56:55 fetching corpus: 5044, signal 295041/325628 (executing program) 2022/08/25 15:56:55 fetching corpus: 5094, signal 295976/326260 (executing program) 2022/08/25 15:56:55 fetching corpus: 5144, signal 296750/326905 (executing program) 2022/08/25 15:56:55 fetching corpus: 5194, signal 297597/327525 (executing program) 2022/08/25 15:56:55 fetching corpus: 5244, signal 298426/328149 (executing program) 2022/08/25 15:56:56 fetching corpus: 5294, signal 299060/328701 (executing program) 2022/08/25 15:56:56 fetching corpus: 5343, signal 299985/329360 (executing program) 2022/08/25 15:56:56 fetching corpus: 5393, signal 300783/329953 (executing program) 2022/08/25 15:56:57 fetching corpus: 5442, signal 301784/330615 (executing program) 2022/08/25 15:56:57 fetching corpus: 5492, signal 302733/331225 (executing program) 2022/08/25 15:56:57 fetching corpus: 5542, signal 303748/331847 (executing program) 2022/08/25 15:56:57 fetching corpus: 5591, signal 304516/332356 (executing program) 2022/08/25 15:56:57 fetching corpus: 5641, signal 305185/332859 (executing program) 2022/08/25 15:56:58 fetching corpus: 5689, signal 305992/333354 (executing program) 2022/08/25 15:56:58 fetching corpus: 5738, signal 306689/333798 (executing program) 2022/08/25 15:56:59 fetching corpus: 5787, signal 307272/334232 (executing program) 2022/08/25 15:56:59 fetching corpus: 5836, signal 308040/334746 (executing program) 2022/08/25 15:56:59 fetching corpus: 5884, signal 308893/335279 (executing program) 2022/08/25 15:56:59 fetching corpus: 5933, signal 309800/335810 (executing program) 2022/08/25 15:56:59 fetching corpus: 5982, signal 311002/336396 (executing program) 2022/08/25 15:57:00 fetching corpus: 6031, signal 311678/336774 (executing program) 2022/08/25 15:57:00 fetching corpus: 6080, signal 312544/337279 (executing program) 2022/08/25 15:57:00 fetching corpus: 6127, signal 313611/337771 (executing program) 2022/08/25 15:57:01 fetching corpus: 6177, signal 314346/338177 (executing program) 2022/08/25 15:57:01 fetching corpus: 6227, signal 314908/338489 (executing program) 2022/08/25 15:57:01 fetching corpus: 6277, signal 316474/339124 (executing program) 2022/08/25 15:57:01 fetching corpus: 6327, signal 317443/339582 (executing program) 2022/08/25 15:57:02 fetching corpus: 6377, signal 318525/339995 (executing program) 2022/08/25 15:57:02 fetching corpus: 6427, signal 319009/340298 (executing program) 2022/08/25 15:57:02 fetching corpus: 6477, signal 319753/340671 (executing program) 2022/08/25 15:57:02 fetching corpus: 6527, signal 320565/341035 (executing program) 2022/08/25 15:57:03 fetching corpus: 6577, signal 321271/341334 (executing program) 2022/08/25 15:57:03 fetching corpus: 6627, signal 322135/341672 (executing program) 2022/08/25 15:57:03 fetching corpus: 6676, signal 323246/342053 (executing program) 2022/08/25 15:57:03 fetching corpus: 6725, signal 323970/342360 (executing program) 2022/08/25 15:57:03 fetching corpus: 6775, signal 324691/342642 (executing program) 2022/08/25 15:57:04 fetching corpus: 6825, signal 325182/342901 (executing program) 2022/08/25 15:57:04 fetching corpus: 6874, signal 326026/343198 (executing program) 2022/08/25 15:57:04 fetching corpus: 6924, signal 326584/343450 (executing program) 2022/08/25 15:57:04 fetching corpus: 6973, signal 327153/343674 (executing program) 2022/08/25 15:57:04 fetching corpus: 7022, signal 327735/343911 (executing program) 2022/08/25 15:57:05 fetching corpus: 7070, signal 328841/344238 (executing program) 2022/08/25 15:57:05 fetching corpus: 7120, signal 329554/344459 (executing program) 2022/08/25 15:57:05 fetching corpus: 7169, signal 330300/344665 (executing program) 2022/08/25 15:57:05 fetching corpus: 7219, signal 331502/344949 (executing program) 2022/08/25 15:57:05 fetching corpus: 7268, signal 332232/345174 (executing program) 2022/08/25 15:57:06 fetching corpus: 7318, signal 333214/345358 (executing program) 2022/08/25 15:57:06 fetching corpus: 7366, signal 333731/345513 (executing program) 2022/08/25 15:57:06 fetching corpus: 7416, signal 334386/345700 (executing program) 2022/08/25 15:57:06 fetching corpus: 7466, signal 335404/345866 (executing program) 2022/08/25 15:57:06 fetching corpus: 7516, signal 336549/346050 (executing program) 2022/08/25 15:57:07 fetching corpus: 7566, signal 337395/346217 (executing program) [ 92.874251][ T2676] cfg80211: failed to load regulatory.db 2022/08/25 15:57:07 fetching corpus: 7615, signal 338041/346336 (executing program) 2022/08/25 15:57:07 fetching corpus: 7665, signal 338710/346463 (executing program) 2022/08/25 15:57:07 fetching corpus: 7701, signal 339119/346547 (executing program) 2022/08/25 15:57:07 fetching corpus: 7701, signal 339119/346599 (executing program) 2022/08/25 15:57:07 fetching corpus: 7701, signal 339119/346663 (executing program) 2022/08/25 15:57:07 fetching corpus: 7701, signal 339119/346704 (executing program) 2022/08/25 15:57:07 fetching corpus: 7701, signal 339119/346770 (executing program) 2022/08/25 15:57:07 fetching corpus: 7701, signal 339119/346807 (executing program) 2022/08/25 15:57:07 fetching corpus: 7701, signal 339119/346845 (executing program) 2022/08/25 15:57:07 fetching corpus: 7701, signal 339119/346897 (executing program) 2022/08/25 15:57:07 fetching corpus: 7701, signal 339119/346933 (executing program) 2022/08/25 15:57:07 fetching corpus: 7701, signal 339119/346974 (executing program) 2022/08/25 15:57:07 fetching corpus: 7701, signal 339119/347032 (executing program) 2022/08/25 15:57:07 fetching corpus: 7701, signal 339119/347071 (executing program) 2022/08/25 15:57:07 fetching corpus: 7701, signal 339119/347117 (executing program) 2022/08/25 15:57:07 fetching corpus: 7701, signal 339119/347159 (executing program) 2022/08/25 15:57:07 fetching corpus: 7701, signal 339119/347199 (executing program) 2022/08/25 15:57:07 fetching corpus: 7701, signal 339119/347256 (executing program) 2022/08/25 15:57:07 fetching corpus: 7701, signal 339119/347258 (executing program) 2022/08/25 15:57:07 fetching corpus: 7701, signal 339119/347258 (executing program) 2022/08/25 15:57:11 starting 4 fuzzer processes 15:57:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1de77f0813657e88e83b8fe9ff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = dup(r2) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4fb1c7e501ab8750f77aa6f7b6f9dba29a43a3"}) r4 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r4, 0x541b, &(0x7f0000000140)) 15:57:11 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 15:57:11 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)) 15:57:11 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$sock(r0, &(0x7f0000001280)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="1d", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000001c0)="9b", 0x7ffff000}], 0x1}}], 0x2, 0x0) [ 97.109452][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 97.109481][ T39] audit: type=1400 audit(1661443031.364:86): avc: denied { execmem } for pid=3704 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 97.457025][ T39] audit: type=1400 audit(1661443031.704:87): avc: denied { mounton } for pid=3707 comm="syz-executor.1" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 97.477260][ T39] audit: type=1400 audit(1661443031.714:88): avc: denied { mount } for pid=3707 comm="syz-executor.1" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 97.492184][ T39] audit: type=1400 audit(1661443031.714:89): avc: denied { create } for pid=3707 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.505742][ T39] audit: type=1400 audit(1661443031.714:90): avc: denied { read write } for pid=3707 comm="syz-executor.1" name="vhci" dev="devtmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 97.521868][ T39] audit: type=1400 audit(1661443031.714:91): avc: denied { open } for pid=3707 comm="syz-executor.1" path="/dev/vhci" dev="devtmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 98.495402][ T39] audit: type=1400 audit(1661443032.744:92): avc: denied { ioctl } for pid=3708 comm="syz-executor.2" path="socket:[31850]" dev="sockfs" ino=31850 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.524252][ T3714] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.531614][ T3714] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.534782][ T3715] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.541561][ T3714] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.545662][ T3715] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.552337][ T3714] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.562777][ T3718] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.564383][ T3714] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 98.569500][ T3718] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.575279][ T3721] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.585877][ T3722] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.592246][ T3719] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.594637][ T39] audit: type=1400 audit(1661443032.844:93): avc: denied { read } for pid=3708 comm="syz-executor.2" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 98.599326][ T3719] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.623279][ T3719] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.624672][ T3718] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.625391][ T3722] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 98.625695][ T3722] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.629969][ T3719] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.637288][ T39] audit: type=1400 audit(1661443032.844:94): avc: denied { open } for pid=3708 comm="syz-executor.2" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 98.640565][ T3719] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.645927][ T3718] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 98.651972][ T3719] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.669404][ T39] audit: type=1400 audit(1661443032.854:95): avc: denied { mounton } for pid=3708 comm="syz-executor.2" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 98.669946][ T3718] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.677681][ T3719] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 98.723525][ T3719] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.024885][ T3708] chnl_net:caif_netlink_parms(): no params data found [ 99.045297][ T3707] chnl_net:caif_netlink_parms(): no params data found [ 99.133961][ T3709] chnl_net:caif_netlink_parms(): no params data found [ 99.500265][ T3708] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.507021][ T3708] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.516121][ T3708] device bridge_slave_0 entered promiscuous mode [ 99.533919][ T3708] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.539199][ T3708] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.544882][ T3708] device bridge_slave_1 entered promiscuous mode [ 99.673004][ T3707] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.678713][ T3707] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.686805][ T3707] device bridge_slave_0 entered promiscuous mode [ 99.723784][ T3709] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.730136][ T3709] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.735983][ T3709] device bridge_slave_0 entered promiscuous mode [ 99.744254][ T3710] chnl_net:caif_netlink_parms(): no params data found [ 99.788500][ T3707] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.794837][ T3707] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.804649][ T3707] device bridge_slave_1 entered promiscuous mode [ 99.846893][ T3709] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.852263][ T3709] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.858167][ T3709] device bridge_slave_1 entered promiscuous mode [ 99.907692][ T3708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.981440][ T3708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.992930][ T3707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.034826][ T3709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.079697][ T3707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.136250][ T3709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.198021][ T3707] team0: Port device team_slave_0 added [ 100.233985][ T3708] team0: Port device team_slave_0 added [ 100.253922][ T3707] team0: Port device team_slave_1 added [ 100.335477][ T3709] team0: Port device team_slave_0 added [ 100.343321][ T3708] team0: Port device team_slave_1 added [ 100.428285][ T3709] team0: Port device team_slave_1 added [ 100.449322][ T3707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.455393][ T3707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.476201][ T3707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.487338][ T3710] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.492119][ T3710] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.498333][ T3710] device bridge_slave_0 entered promiscuous mode [ 100.507065][ T3710] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.513890][ T3710] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.522025][ T3710] device bridge_slave_1 entered promiscuous mode [ 100.575506][ T3707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.580743][ T3707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.599714][ T3707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.630252][ T41] Bluetooth: hci0: command 0x0409 tx timeout [ 100.695691][ T3708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.702127][ T3708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.707507][ T2676] Bluetooth: hci1: command 0x0409 tx timeout [ 100.708052][ T15] Bluetooth: hci3: command 0x0409 tx timeout [ 100.724444][ T3708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.745981][ T3710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.755019][ T3709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.760258][ T3709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.780399][ T3709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.790579][ T41] Bluetooth: hci2: command 0x0409 tx timeout [ 100.801069][ T3709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.807635][ T3709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.829142][ T3709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.840543][ T3708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.845267][ T3708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.870316][ T3708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.881029][ T3710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.030000][ T3707] device hsr_slave_0 entered promiscuous mode [ 101.036936][ T3707] device hsr_slave_1 entered promiscuous mode [ 101.092191][ T3710] team0: Port device team_slave_0 added [ 101.101829][ T3708] device hsr_slave_0 entered promiscuous mode [ 101.111230][ T3708] device hsr_slave_1 entered promiscuous mode [ 101.117319][ T3708] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.123359][ T3708] Cannot create hsr debugfs directory [ 101.173365][ T3709] device hsr_slave_0 entered promiscuous mode [ 101.181853][ T3709] device hsr_slave_1 entered promiscuous mode [ 101.192339][ T3709] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.200487][ T3709] Cannot create hsr debugfs directory [ 101.207808][ T3710] team0: Port device team_slave_1 added [ 101.424180][ T3710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.429893][ T3710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.452610][ T3710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.465286][ T3710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.470988][ T3710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.491227][ T3710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.736042][ T3710] device hsr_slave_0 entered promiscuous mode [ 101.743839][ T3710] device hsr_slave_1 entered promiscuous mode [ 101.752395][ T3710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.759503][ T3710] Cannot create hsr debugfs directory [ 101.963769][ T3709] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.984987][ T3709] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.999782][ T3709] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.011336][ T3709] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.034761][ T3707] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.042379][ T3707] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.055111][ T3707] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.066468][ T3707] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.131430][ T3708] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.147761][ T3708] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.158458][ T3708] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.169808][ T3708] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.245013][ T3710] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.263564][ T3710] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.270665][ T3710] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.288982][ T3710] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.371497][ T3709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.419482][ T3707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.426163][ T1938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.435690][ T1938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.446678][ T3709] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.471800][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.480378][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.487713][ T3741] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.493301][ T3741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.500941][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.522042][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.531814][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.539184][ T170] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.543738][ T170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.553137][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.559231][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.569975][ T3707] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.594644][ T1938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.606680][ T1938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.614287][ T1938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.624046][ T1938] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.628756][ T1938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.646583][ T1938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.671190][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.680435][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.690287][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.698007][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.704545][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.718413][ T3744] Bluetooth: hci0: command 0x041b tx timeout [ 102.727437][ T1381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.735243][ T1381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.741982][ T1381] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.757728][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.765159][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.775590][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.784875][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.792879][ T40] Bluetooth: hci1: command 0x041b tx timeout [ 102.798204][ T40] Bluetooth: hci3: command 0x041b tx timeout [ 102.809021][ T3710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.822240][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.829211][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.835836][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.844654][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.853265][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.860974][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.869656][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.877295][ T170] Bluetooth: hci2: command 0x041b tx timeout [ 102.881358][ T3708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.897739][ T1381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.906566][ T1381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.925230][ T3710] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.935219][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.945443][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.952138][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.960314][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.979641][ T3707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.988513][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 102.995559][ T1938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.001631][ T1938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.008786][ T1938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.015189][ T1938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.021231][ T1938] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.026121][ T1938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.032198][ T1938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.044316][ T3709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.053169][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.059327][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.066181][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.079144][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.089132][ T3741] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.095119][ T3741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.113001][ T3708] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.133244][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.141578][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.149332][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.155517][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.163194][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.185947][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.193011][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.201037][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.208729][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.214770][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.244037][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.250564][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.258187][ T3749] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.263965][ T3749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.271349][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.280256][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.290943][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.300574][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.308311][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.317674][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.331357][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.339754][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.348050][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.374165][ T3707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.385578][ T1381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.392409][ T1381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.399584][ T1381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.405200][ T1381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.411336][ T1381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.419341][ T1381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.435275][ T3709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.454312][ T39] audit: type=1400 audit(1661443037.704:96): avc: denied { module_request } for pid=3707 comm="syz-executor.1" kmod="netdev-xfrm0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 103.462140][ T3708] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 103.483112][ T3708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.496510][ T3710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.508397][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.518051][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.527383][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.536087][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.543304][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.551899][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.560097][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.570431][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.592233][ T39] audit: type=1400 audit(1661443037.844:97): avc: denied { sys_module } for pid=3707 comm="syz-executor.1" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 103.609419][ T3710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.619358][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.625139][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.632370][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.638331][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.654791][ T3708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.755344][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.765626][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.799377][ T1938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.809824][ T1938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.824918][ T3707] device veth0_vlan entered promiscuous mode [ 103.851304][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.861857][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.869398][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.875976][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.906008][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.912658][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.919506][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.926139][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.946224][ T3707] device veth1_vlan entered promiscuous mode [ 103.954787][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 103.960454][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.966225][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.972494][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.979602][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.992536][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.998121][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.003805][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.010856][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.019330][ T3710] device veth0_vlan entered promiscuous mode [ 104.025930][ T3709] device veth0_vlan entered promiscuous mode [ 104.048089][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 104.055491][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.063734][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.074229][ T3709] device veth1_vlan entered promiscuous mode [ 104.084071][ T3710] device veth1_vlan entered promiscuous mode [ 104.092809][ T3708] device veth0_vlan entered promiscuous mode [ 104.102158][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 104.121197][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 104.128897][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.135929][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.172957][ T3708] device veth1_vlan entered promiscuous mode [ 104.198794][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 104.207058][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 104.213966][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 104.222612][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 104.228693][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.235134][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.258721][ T3707] device veth0_macvtap entered promiscuous mode [ 104.277799][ T3707] device veth1_macvtap entered promiscuous mode [ 104.295225][ T3709] device veth0_macvtap entered promiscuous mode [ 104.313507][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.322307][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.336123][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.349486][ T3709] device veth1_macvtap entered promiscuous mode [ 104.364080][ T3707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.374717][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.382579][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.390148][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.397898][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.405502][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.426081][ T3707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.449128][ T3708] device veth0_macvtap entered promiscuous mode [ 104.467684][ T3710] device veth0_macvtap entered promiscuous mode [ 104.476020][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.483846][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.491296][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.499089][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.506815][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.515628][ T3707] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.523971][ T3707] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.531546][ T3707] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.539385][ T3707] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.556317][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.572512][ T3710] device veth1_macvtap entered promiscuous mode [ 104.580033][ T3709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 104.589964][ T3709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.600985][ T3709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.608923][ T3708] device veth1_macvtap entered promiscuous mode [ 104.617873][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.624336][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.631594][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.638394][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.646261][ T3709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 104.653513][ T3709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.661789][ T3709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.694799][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.703188][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.715726][ T3709] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.724827][ T3709] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.732519][ T3709] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.740537][ T3709] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.771800][ T3710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 104.773067][ T39] audit: type=1400 audit(1661443039.024:98): avc: denied { mounton } for pid=3707 comm="syz-executor.1" path="/dev/binderfs" dev="devtmpfs" ino=2383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 104.783315][ T3710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.799804][ T39] audit: type=1400 audit(1661443039.024:99): avc: denied { mount } for pid=3707 comm="syz-executor.1" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 104.807578][ T170] Bluetooth: hci0: command 0x040f tx timeout [ 104.809632][ T3710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 104.835597][ T3710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.846726][ T3710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.859339][ T3708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 104.867660][ T170] Bluetooth: hci3: command 0x040f tx timeout [ 104.867752][ T170] Bluetooth: hci1: command 0x040f tx timeout [ 104.872926][ T3708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.885959][ T3708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 104.892874][ T3708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.900552][ T3708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 104.908053][ T3708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.917038][ T3708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.930525][ T3708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 104.939823][ T3708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.946657][ T3708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 104.954681][ T3708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.964544][ T3708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.971343][ T170] Bluetooth: hci2: command 0x040f tx timeout [ 104.979768][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.988009][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.995213][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.002392][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.009701][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.016017][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.024689][ T3710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 105.032503][ T3710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.039535][ T3710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 105.046029][ T3710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.053239][ T3710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 105.060802][ T3710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.072749][ T3710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.102449][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.110379][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.111581][ T39] audit: type=1400 audit(1661443039.364:100): avc: denied { read write } for pid=3707 comm="syz-executor.1" name="loop1" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.124300][ T3710] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.142501][ T39] audit: type=1400 audit(1661443039.364:101): avc: denied { open } for pid=3707 comm="syz-executor.1" path="/dev/loop1" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.143658][ T3710] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.161653][ T39] audit: type=1400 audit(1661443039.364:102): avc: denied { ioctl } for pid=3707 comm="syz-executor.1" path="/dev/loop1" dev="devtmpfs" ino=657 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 15:57:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000001000)={0xa4, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x74, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast2}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1158c370ca73a479c5574fb7a630f33b136d1a0b1853fe2e13d9f604fccd6c5b"}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0xa4}}, 0x0) [ 105.170014][ T3710] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.185738][ T39] audit: type=1400 audit(1661443039.394:103): avc: denied { create } for pid=3780 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 105.192241][ T3710] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.206834][ T39] audit: type=1400 audit(1661443039.404:104): avc: denied { connect } for pid=3780 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 105.230371][ T3708] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.239738][ T3708] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.247521][ T3708] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.255885][ T3708] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 15:57:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000001000)={0xa4, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x74, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast2}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1158c370ca73a479c5574fb7a630f33b136d1a0b1853fe2e13d9f604fccd6c5b"}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0xa4}}, 0x0) 15:57:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000001000)={0xa4, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x74, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast2}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1158c370ca73a479c5574fb7a630f33b136d1a0b1853fe2e13d9f604fccd6c5b"}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0xa4}}, 0x0) [ 105.406664][ T39] audit: type=1400 audit(1661443039.654:105): avc: denied { read write } for pid=3789 comm="syz-executor.2" name="video5" dev="devtmpfs" ino=882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 15:57:19 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)) 15:57:20 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$sock(r0, &(0x7f0000001280)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="1d", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000001c0)="9b", 0x7ffff000}], 0x1}}], 0x2, 0x0) 15:57:20 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)) 15:57:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1de77f0813657e88e83b8fe9ff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = dup(r2) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4fb1c7e501ab8750f77aa6f7b6f9dba29a43a3"}) r4 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r4, 0x541b, &(0x7f0000000140)) 15:57:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000001000)={0xa4, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x74, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast2}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1158c370ca73a479c5574fb7a630f33b136d1a0b1853fe2e13d9f604fccd6c5b"}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0xa4}}, 0x0) 15:57:20 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)) 15:57:20 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$sock(r0, &(0x7f0000001280)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="1d", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000001c0)="9b", 0x7ffff000}], 0x1}}], 0x2, 0x0) 15:57:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1de77f0813657e88e83b8fe9ff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = dup(r2) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4fb1c7e501ab8750f77aa6f7b6f9dba29a43a3"}) r4 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r4, 0x541b, &(0x7f0000000140)) 15:57:20 executing program 2: r0 = fsopen(&(0x7f0000000080)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='\x00\x00\x00\x00\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0xf203000000000000) 15:57:20 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$sock(r0, &(0x7f0000001280)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="1d", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000001c0)="9b", 0x7ffff000}], 0x1}}], 0x2, 0x0) [ 106.867342][ T170] Bluetooth: hci0: command 0x0419 tx timeout [ 106.948292][ T170] Bluetooth: hci1: command 0x0419 tx timeout [ 106.954109][ T170] Bluetooth: hci3: command 0x0419 tx timeout [ 107.028427][ T170] Bluetooth: hci2: command 0x0419 tx timeout 15:57:21 executing program 2: r0 = fsopen(&(0x7f0000000080)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='\x00\x00\x00\x00\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0xf203000000000000) 15:57:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1de77f0813657e88e83b8fe9ff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = dup(r2) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4fb1c7e501ab8750f77aa6f7b6f9dba29a43a3"}) r4 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r4, 0x541b, &(0x7f0000000140)) 15:57:21 executing program 3: inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x6000b0a) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private}]}}}]}, 0x40}}, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB='osx./dev/nvmecs\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000840)='-@^}\x00', 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c000000660001eac60100000028800000755eaf8e7f00fbdbff0483c8affe7ebc1cf32fccd386a7720b5b5755c285d66800161adade3cbd2dcd3ca67f7000006c90cbf86d04d725e54bd7d15caaa22c7ccf1c2958199f02788d08fe244c41db327dace19d5a895d82f870bc676c0eba75f2f404d296997631833bca34dda89817ff3e9f0b460a7d4929d934bb2a0000", @ANYRES32=0x0, @ANYBLOB="e8ff0f0006000c000300000008000b000300000008000b0000b4de0008000b000100000008000b000700000008000b0008000000"], 0x4c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e21, 0x5, @local}}, 0x0, 0x0, 0x46, 0x0, "58abcd68e5f46c05506f7a865d08c9a5482b559fbe12c5d44fcc812b07d9f00654a1d73e89f5b734db61a49d0d20edef976006bad13891fd5380df197ff5544d429df2731b42ec0ad673ff7e26dacb24"}, 0xd8) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000004c0)="047aa374832f5d793688ed86ec743840fa9c9529fdd001c67c8e591a0e412c3632d88f9cf8732d6c86ab129c932e37494af3d48badc9f6a7104db7859b3e995b92ce3be7adceaa5686af612db4718ecb2579dbb1e2ea9a8de6ea393e62f2e6ec2dbdb678c25b7ae41d66b4f3c0451936aee789256ff94444a077194f43d695bffad4ad194635d152fe93fc2151454472366ed85b65339b1f1df322d39cde687863fb4e8bc6c1599eaa0d25282d0c56944128404efb10e38ef9123cf3c2c9c9636a220df0fef3bb03efe1a0497de1dee32c2c474a25da8c0fcb4093002a8457a19ea7", 0xe2}], 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x7f, 0x6, @multicast}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)=""/80, &(0x7f0000000300)=0x50) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x20002}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000) 15:57:21 executing program 2: r0 = fsopen(&(0x7f0000000080)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='\x00\x00\x00\x00\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0xf203000000000000) [ 107.173814][ T3828] 8021q: adding VLAN 0 to HW filter on device macvlan2 15:57:21 executing program 2: r0 = fsopen(&(0x7f0000000080)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='\x00\x00\x00\x00\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0xf203000000000000) 15:57:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1de77f0813657e88e83b8fe9ff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = dup(r2) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4fb1c7e501ab8750f77aa6f7b6f9dba29a43a3"}) r4 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r4, 0x541b, &(0x7f0000000140)) 15:57:21 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)="7819d45ba854f8ab87b8b0542f0a75f882346711b50666bfb45c6335655f4ac7f31535465d4982f4e63f721caa3516c4a36bf6ca77cd92d7a00c3c034b2dd657b3ebc809845feda0705929047b2c8089260151779da2becdbf1c6cede3d1f67c2c5d62c06d4409b42fc67df5ab549dfdf586353804918f3095fdd7c12407e78f5ca79986660f6471ea5b4da0b2a7e07e", 0x90) 15:57:21 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)="7819d45ba854f8ab87b8b0542f0a75f882346711b50666bfb45c6335655f4ac7f31535465d4982f4e63f721caa3516c4a36bf6ca77cd92d7a00c3c034b2dd657b3ebc809845feda0705929047b2c8089260151779da2becdbf1c6cede3d1f67c2c5d62c06d4409b42fc67df5ab549dfdf586353804918f3095fdd7c12407e78f5ca79986660f6471ea5b4da0b2a7e07e", 0x90) 15:57:21 executing program 3: inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x6000b0a) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private}]}}}]}, 0x40}}, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB='osx./dev/nvmecs\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000840)='-@^}\x00', 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c000000660001eac60100000028800000755eaf8e7f00fbdbff0483c8affe7ebc1cf32fccd386a7720b5b5755c285d66800161adade3cbd2dcd3ca67f7000006c90cbf86d04d725e54bd7d15caaa22c7ccf1c2958199f02788d08fe244c41db327dace19d5a895d82f870bc676c0eba75f2f404d296997631833bca34dda89817ff3e9f0b460a7d4929d934bb2a0000", @ANYRES32=0x0, @ANYBLOB="e8ff0f0006000c000300000008000b000300000008000b0000b4de0008000b000100000008000b000700000008000b0008000000"], 0x4c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e21, 0x5, @local}}, 0x0, 0x0, 0x46, 0x0, "58abcd68e5f46c05506f7a865d08c9a5482b559fbe12c5d44fcc812b07d9f00654a1d73e89f5b734db61a49d0d20edef976006bad13891fd5380df197ff5544d429df2731b42ec0ad673ff7e26dacb24"}, 0xd8) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000004c0)="047aa374832f5d793688ed86ec743840fa9c9529fdd001c67c8e591a0e412c3632d88f9cf8732d6c86ab129c932e37494af3d48badc9f6a7104db7859b3e995b92ce3be7adceaa5686af612db4718ecb2579dbb1e2ea9a8de6ea393e62f2e6ec2dbdb678c25b7ae41d66b4f3c0451936aee789256ff94444a077194f43d695bffad4ad194635d152fe93fc2151454472366ed85b65339b1f1df322d39cde687863fb4e8bc6c1599eaa0d25282d0c56944128404efb10e38ef9123cf3c2c9c9636a220df0fef3bb03efe1a0497de1dee32c2c474a25da8c0fcb4093002a8457a19ea7", 0xe2}], 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x7f, 0x6, @multicast}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)=""/80, &(0x7f0000000300)=0x50) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x20002}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000) [ 107.332270][ T3842] 8021q: adding VLAN 0 to HW filter on device macvlan2 15:57:22 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)="7819d45ba854f8ab87b8b0542f0a75f882346711b50666bfb45c6335655f4ac7f31535465d4982f4e63f721caa3516c4a36bf6ca77cd92d7a00c3c034b2dd657b3ebc809845feda0705929047b2c8089260151779da2becdbf1c6cede3d1f67c2c5d62c06d4409b42fc67df5ab549dfdf586353804918f3095fdd7c12407e78f5ca79986660f6471ea5b4da0b2a7e07e", 0x90) 15:57:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1de77f0813657e88e83b8fe9ff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = dup(r2) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4fb1c7e501ab8750f77aa6f7b6f9dba29a43a3"}) r4 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r4, 0x541b, &(0x7f0000000140)) 15:57:22 executing program 3: inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x6000b0a) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private}]}}}]}, 0x40}}, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB='osx./dev/nvmecs\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000840)='-@^}\x00', 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c000000660001eac60100000028800000755eaf8e7f00fbdbff0483c8affe7ebc1cf32fccd386a7720b5b5755c285d66800161adade3cbd2dcd3ca67f7000006c90cbf86d04d725e54bd7d15caaa22c7ccf1c2958199f02788d08fe244c41db327dace19d5a895d82f870bc676c0eba75f2f404d296997631833bca34dda89817ff3e9f0b460a7d4929d934bb2a0000", @ANYRES32=0x0, @ANYBLOB="e8ff0f0006000c000300000008000b000300000008000b0000b4de0008000b000100000008000b000700000008000b0008000000"], 0x4c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e21, 0x5, @local}}, 0x0, 0x0, 0x46, 0x0, "58abcd68e5f46c05506f7a865d08c9a5482b559fbe12c5d44fcc812b07d9f00654a1d73e89f5b734db61a49d0d20edef976006bad13891fd5380df197ff5544d429df2731b42ec0ad673ff7e26dacb24"}, 0xd8) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000004c0)="047aa374832f5d793688ed86ec743840fa9c9529fdd001c67c8e591a0e412c3632d88f9cf8732d6c86ab129c932e37494af3d48badc9f6a7104db7859b3e995b92ce3be7adceaa5686af612db4718ecb2579dbb1e2ea9a8de6ea393e62f2e6ec2dbdb678c25b7ae41d66b4f3c0451936aee789256ff94444a077194f43d695bffad4ad194635d152fe93fc2151454472366ed85b65339b1f1df322d39cde687863fb4e8bc6c1599eaa0d25282d0c56944128404efb10e38ef9123cf3c2c9c9636a220df0fef3bb03efe1a0497de1dee32c2c474a25da8c0fcb4093002a8457a19ea7", 0xe2}], 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x7f, 0x6, @multicast}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)=""/80, &(0x7f0000000300)=0x50) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x20002}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000) [ 108.041775][ T3848] 8021q: adding VLAN 0 to HW filter on device macvlan2 15:57:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1de77f0813657e88e83b8fe9ff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = dup(r2) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4fb1c7e501ab8750f77aa6f7b6f9dba29a43a3"}) r4 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r4, 0x541b, &(0x7f0000000140)) 15:57:22 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)="7819d45ba854f8ab87b8b0542f0a75f882346711b50666bfb45c6335655f4ac7f31535465d4982f4e63f721caa3516c4a36bf6ca77cd92d7a00c3c034b2dd657b3ebc809845feda0705929047b2c8089260151779da2becdbf1c6cede3d1f67c2c5d62c06d4409b42fc67df5ab549dfdf586353804918f3095fdd7c12407e78f5ca79986660f6471ea5b4da0b2a7e07e", 0x90) 15:57:22 executing program 2: inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x6000b0a) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private}]}}}]}, 0x40}}, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB='osx./dev/nvmecs\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000840)='-@^}\x00', 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c000000660001eac60100000028800000755eaf8e7f00fbdbff0483c8affe7ebc1cf32fccd386a7720b5b5755c285d66800161adade3cbd2dcd3ca67f7000006c90cbf86d04d725e54bd7d15caaa22c7ccf1c2958199f02788d08fe244c41db327dace19d5a895d82f870bc676c0eba75f2f404d296997631833bca34dda89817ff3e9f0b460a7d4929d934bb2a0000", @ANYRES32=0x0, @ANYBLOB="e8ff0f0006000c000300000008000b000300000008000b0000b4de0008000b000100000008000b000700000008000b0008000000"], 0x4c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e21, 0x5, @local}}, 0x0, 0x0, 0x46, 0x0, "58abcd68e5f46c05506f7a865d08c9a5482b559fbe12c5d44fcc812b07d9f00654a1d73e89f5b734db61a49d0d20edef976006bad13891fd5380df197ff5544d429df2731b42ec0ad673ff7e26dacb24"}, 0xd8) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000004c0)="047aa374832f5d793688ed86ec743840fa9c9529fdd001c67c8e591a0e412c3632d88f9cf8732d6c86ab129c932e37494af3d48badc9f6a7104db7859b3e995b92ce3be7adceaa5686af612db4718ecb2579dbb1e2ea9a8de6ea393e62f2e6ec2dbdb678c25b7ae41d66b4f3c0451936aee789256ff94444a077194f43d695bffad4ad194635d152fe93fc2151454472366ed85b65339b1f1df322d39cde687863fb4e8bc6c1599eaa0d25282d0c56944128404efb10e38ef9123cf3c2c9c9636a220df0fef3bb03efe1a0497de1dee32c2c474a25da8c0fcb4093002a8457a19ea7", 0xe2}], 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x7f, 0x6, @multicast}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)=""/80, &(0x7f0000000300)=0x50) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x20002}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000) 15:57:22 executing program 3: inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x6000b0a) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private}]}}}]}, 0x40}}, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB='osx./dev/nvmecs\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000840)='-@^}\x00', 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c000000660001eac60100000028800000755eaf8e7f00fbdbff0483c8affe7ebc1cf32fccd386a7720b5b5755c285d66800161adade3cbd2dcd3ca67f7000006c90cbf86d04d725e54bd7d15caaa22c7ccf1c2958199f02788d08fe244c41db327dace19d5a895d82f870bc676c0eba75f2f404d296997631833bca34dda89817ff3e9f0b460a7d4929d934bb2a0000", @ANYRES32=0x0, @ANYBLOB="e8ff0f0006000c000300000008000b000300000008000b0000b4de0008000b000100000008000b000700000008000b0008000000"], 0x4c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e21, 0x5, @local}}, 0x0, 0x0, 0x46, 0x0, "58abcd68e5f46c05506f7a865d08c9a5482b559fbe12c5d44fcc812b07d9f00654a1d73e89f5b734db61a49d0d20edef976006bad13891fd5380df197ff5544d429df2731b42ec0ad673ff7e26dacb24"}, 0xd8) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000004c0)="047aa374832f5d793688ed86ec743840fa9c9529fdd001c67c8e591a0e412c3632d88f9cf8732d6c86ab129c932e37494af3d48badc9f6a7104db7859b3e995b92ce3be7adceaa5686af612db4718ecb2579dbb1e2ea9a8de6ea393e62f2e6ec2dbdb678c25b7ae41d66b4f3c0451936aee789256ff94444a077194f43d695bffad4ad194635d152fe93fc2151454472366ed85b65339b1f1df322d39cde687863fb4e8bc6c1599eaa0d25282d0c56944128404efb10e38ef9123cf3c2c9c9636a220df0fef3bb03efe1a0497de1dee32c2c474a25da8c0fcb4093002a8457a19ea7", 0xe2}], 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x7f, 0x6, @multicast}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)=""/80, &(0x7f0000000300)=0x50) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x20002}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000) [ 108.240898][ T3862] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 108.268747][ T3863] 8021q: adding VLAN 0 to HW filter on device macvlan2 15:57:22 executing program 2: inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x6000b0a) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private}]}}}]}, 0x40}}, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB='osx./dev/nvmecs\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000840)='-@^}\x00', 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c000000660001eac60100000028800000755eaf8e7f00fbdbff0483c8affe7ebc1cf32fccd386a7720b5b5755c285d66800161adade3cbd2dcd3ca67f7000006c90cbf86d04d725e54bd7d15caaa22c7ccf1c2958199f02788d08fe244c41db327dace19d5a895d82f870bc676c0eba75f2f404d296997631833bca34dda89817ff3e9f0b460a7d4929d934bb2a0000", @ANYRES32=0x0, @ANYBLOB="e8ff0f0006000c000300000008000b000300000008000b0000b4de0008000b000100000008000b000700000008000b0008000000"], 0x4c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e21, 0x5, @local}}, 0x0, 0x0, 0x46, 0x0, "58abcd68e5f46c05506f7a865d08c9a5482b559fbe12c5d44fcc812b07d9f00654a1d73e89f5b734db61a49d0d20edef976006bad13891fd5380df197ff5544d429df2731b42ec0ad673ff7e26dacb24"}, 0xd8) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000004c0)="047aa374832f5d793688ed86ec743840fa9c9529fdd001c67c8e591a0e412c3632d88f9cf8732d6c86ab129c932e37494af3d48badc9f6a7104db7859b3e995b92ce3be7adceaa5686af612db4718ecb2579dbb1e2ea9a8de6ea393e62f2e6ec2dbdb678c25b7ae41d66b4f3c0451936aee789256ff94444a077194f43d695bffad4ad194635d152fe93fc2151454472366ed85b65339b1f1df322d39cde687863fb4e8bc6c1599eaa0d25282d0c56944128404efb10e38ef9123cf3c2c9c9636a220df0fef3bb03efe1a0497de1dee32c2c474a25da8c0fcb4093002a8457a19ea7", 0xe2}], 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x7f, 0x6, @multicast}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)=""/80, &(0x7f0000000300)=0x50) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x20002}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000) [ 108.413094][ T3865] 8021q: adding VLAN 0 to HW filter on device macvlan2 15:57:22 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x89, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0) chdir(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0xb0e57337fe7a0aee) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) stat(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r5, 0x0, 0x10000) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 108.494399][ T39] kauditd_printk_skb: 11 callbacks suppressed [ 108.494418][ T39] audit: type=1400 audit(1661443042.754:117): avc: denied { read write } for pid=3866 comm="syz-executor.3" name="raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 108.522027][ T39] audit: type=1400 audit(1661443042.754:118): avc: denied { open } for pid=3866 comm="syz-executor.3" path="/dev/raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 108.542599][ T39] audit: type=1400 audit(1661443042.754:119): avc: denied { ioctl } for pid=3866 comm="syz-executor.3" path="/dev/raw-gadget" dev="devtmpfs" ino=760 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 108.767514][ T40] usb 8-1: new high-speed USB device number 2 using dummy_hcd 15:57:23 executing program 2: inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x6000b0a) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private}]}}}]}, 0x40}}, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB='osx./dev/nvmecs\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000840)='-@^}\x00', 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c000000660001eac60100000028800000755eaf8e7f00fbdbff0483c8affe7ebc1cf32fccd386a7720b5b5755c285d66800161adade3cbd2dcd3ca67f7000006c90cbf86d04d725e54bd7d15caaa22c7ccf1c2958199f02788d08fe244c41db327dace19d5a895d82f870bc676c0eba75f2f404d296997631833bca34dda89817ff3e9f0b460a7d4929d934bb2a0000", @ANYRES32=0x0, @ANYBLOB="e8ff0f0006000c000300000008000b000300000008000b0000b4de0008000b000100000008000b000700000008000b0008000000"], 0x4c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e21, 0x5, @local}}, 0x0, 0x0, 0x46, 0x0, "58abcd68e5f46c05506f7a865d08c9a5482b559fbe12c5d44fcc812b07d9f00654a1d73e89f5b734db61a49d0d20edef976006bad13891fd5380df197ff5544d429df2731b42ec0ad673ff7e26dacb24"}, 0xd8) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000004c0)="047aa374832f5d793688ed86ec743840fa9c9529fdd001c67c8e591a0e412c3632d88f9cf8732d6c86ab129c932e37494af3d48badc9f6a7104db7859b3e995b92ce3be7adceaa5686af612db4718ecb2579dbb1e2ea9a8de6ea393e62f2e6ec2dbdb678c25b7ae41d66b4f3c0451936aee789256ff94444a077194f43d695bffad4ad194635d152fe93fc2151454472366ed85b65339b1f1df322d39cde687863fb4e8bc6c1599eaa0d25282d0c56944128404efb10e38ef9123cf3c2c9c9636a220df0fef3bb03efe1a0497de1dee32c2c474a25da8c0fcb4093002a8457a19ea7", 0xe2}], 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x7f, 0x6, @multicast}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)=""/80, &(0x7f0000000300)=0x50) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x20002}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000) 15:57:23 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) signalfd(r3, &(0x7f0000001fc0)={[0x2]}, 0x8) r5 = dup(r4) r6 = dup(0xffffffffffffffff) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 15:57:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c63940d0324fc6010000a", 0x17}], 0x1}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) [ 108.934543][ T3869] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 108.966055][ T39] audit: type=1400 audit(1661443043.214:120): avc: denied { create } for pid=3870 comm="syz-executor.0" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 15:57:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c63940d0324fc6010000a", 0x17}], 0x1}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) [ 108.987320][ T39] audit: type=1400 audit(1661443043.234:121): avc: denied { map } for pid=3870 comm="syz-executor.0" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 15:57:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c63940d0324fc6010000a", 0x17}], 0x1}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) [ 109.008587][ T39] audit: type=1400 audit(1661443043.234:122): avc: denied { read write } for pid=3870 comm="syz-executor.0" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 15:57:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c63940d0324fc6010000a", 0x17}], 0x1}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) 15:57:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_newnexthop={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8}, @NHA_BLACKHOLE={0x4}]}, 0x24}}, 0x0) [ 109.122811][ T3882] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 109.127698][ T40] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.145429][ T40] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.173211][ T40] usb 8-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 109.180356][ T40] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.202973][ T40] usb 8-1: config 0 descriptor?? [ 109.564817][ T39] audit: type=1400 audit(1661443043.814:123): avc: denied { bpf } for pid=3866 comm="syz-executor.3" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 109.580000][ T39] audit: type=1400 audit(1661443043.834:124): avc: denied { prog_load } for pid=3866 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 109.593258][ T39] audit: type=1400 audit(1661443043.834:125): avc: denied { perfmon } for pid=3866 comm="syz-executor.3" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 109.754793][ T39] audit: type=1400 audit(1661443044.004:126): avc: denied { prog_run } for pid=3866 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 15:57:25 executing program 2: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r0, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @loopback}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00'}]}, 0x5c}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/86, 0x56}, {&(0x7f0000001180)=""/239, 0xef}, {&(0x7f0000001280)}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/67, 0x43}], 0x6) 15:57:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_newnexthop={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8}, @NHA_BLACKHOLE={0x4}]}, 0x24}}, 0x0) 15:57:25 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) signalfd(r3, &(0x7f0000001fc0)={[0x2]}, 0x8) r5 = dup(r4) r6 = dup(0xffffffffffffffff) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 15:57:25 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x89, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0) chdir(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0xb0e57337fe7a0aee) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) stat(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r5, 0x0, 0x10000) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 111.616071][ T3890] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 15:57:25 executing program 2: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r0, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @loopback}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00'}]}, 0x5c}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/86, 0x56}, {&(0x7f0000001180)=""/239, 0xef}, {&(0x7f0000001280)}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/67, 0x43}], 0x6) 15:57:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_newnexthop={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8}, @NHA_BLACKHOLE={0x4}]}, 0x24}}, 0x0) [ 111.654197][ T3897] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 111.657472][ T40] usbhid 8-1:0.0: can't add hid device: -71 [ 111.664704][ T40] usbhid: probe of 8-1:0.0 failed with error -71 15:57:25 executing program 2: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r0, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @loopback}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00'}]}, 0x5c}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/86, 0x56}, {&(0x7f0000001180)=""/239, 0xef}, {&(0x7f0000001280)}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/67, 0x43}], 0x6) 15:57:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_newnexthop={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8}, @NHA_BLACKHOLE={0x4}]}, 0x24}}, 0x0) [ 111.683673][ T3901] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 15:57:25 executing program 2: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r0, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @loopback}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00'}]}, 0x5c}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/86, 0x56}, {&(0x7f0000001180)=""/239, 0xef}, {&(0x7f0000001280)}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/67, 0x43}], 0x6) 15:57:25 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x89, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0) chdir(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0xb0e57337fe7a0aee) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) stat(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r5, 0x0, 0x10000) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 111.729769][ T40] usb 8-1: USB disconnect, device number 2 [ 112.017293][ T41] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 112.128533][ T40] usb 8-1: new high-speed USB device number 3 using dummy_hcd 15:57:26 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) signalfd(r3, &(0x7f0000001fc0)={[0x2]}, 0x8) r5 = dup(r4) r6 = dup(0xffffffffffffffff) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 112.387702][ T41] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.397426][ T41] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.408476][ T41] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 112.414875][ T41] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.427033][ T41] usb 6-1: config 0 descriptor?? [ 112.499128][ T40] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.506750][ T40] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.515047][ T40] usb 8-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 112.522910][ T40] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.541573][ T40] usb 8-1: config 0 descriptor?? 15:57:28 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x89, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0) chdir(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0xb0e57337fe7a0aee) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) stat(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r5, 0x0, 0x10000) syz_usb_control_io$hid(r0, 0x0, 0x0) 15:57:28 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x89, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0) chdir(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0xb0e57337fe7a0aee) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) stat(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r5, 0x0, 0x10000) syz_usb_control_io$hid(r0, 0x0, 0x0) 15:57:28 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) signalfd(r3, &(0x7f0000001fc0)={[0x2]}, 0x8) r5 = dup(r4) r6 = dup(0xffffffffffffffff) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 15:57:29 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x89, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0) chdir(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0xb0e57337fe7a0aee) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) stat(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r5, 0x0, 0x10000) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 114.768321][ T40] usbhid 8-1:0.0: can't add hid device: -71 [ 114.773669][ T40] usbhid: probe of 8-1:0.0 failed with error -71 [ 114.793017][ T40] usb 8-1: USB disconnect, device number 3 [ 114.860290][ T41] usbhid 6-1:0.0: can't add hid device: -71 [ 114.864505][ T41] usbhid: probe of 6-1:0.0 failed with error -71 [ 114.882925][ T41] usb 6-1: USB disconnect, device number 2 [ 114.997615][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd 15:57:29 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x89, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0) chdir(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0xb0e57337fe7a0aee) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) stat(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r5, 0x0, 0x10000) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 115.197384][ T40] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 115.247586][ T41] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 115.377531][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.388205][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.396986][ T24] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 115.404676][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.415186][ T24] usb 7-1: config 0 descriptor?? [ 115.467417][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 115.597506][ T40] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.605165][ T40] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.616716][ T40] usb 8-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 115.623690][ T40] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.637494][ T41] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.637618][ T40] usb 8-1: config 0 descriptor?? [ 115.646823][ T41] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.658066][ T41] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 115.664156][ T41] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.670682][ T41] usb 6-1: config 0 descriptor?? [ 115.809510][ T39] kauditd_printk_skb: 6 callbacks suppressed [ 115.809522][ T39] audit: type=1804 audit(1661443050.064:133): pid=3934 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir830594253/syzkaller.Nbu4dl/19/bus" dev="sda1" ino=1160 res=1 errno=0 [ 115.832882][ T39] audit: type=1800 audit(1661443050.064:134): pid=3934 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1160 res=0 errno=0 [ 115.841188][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.853679][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.864895][ T29] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 115.870425][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.876985][ T29] usb 5-1: config 0 descriptor?? [ 116.084483][ T39] audit: type=1804 audit(1661443050.334:135): pid=3941 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir670731525/syzkaller.kNVvyi/17/bus" dev="sda1" ino=1165 res=1 errno=0 [ 116.108377][ T39] audit: type=1800 audit(1661443050.334:136): pid=3941 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1165 res=0 errno=0 [ 116.179773][ T39] audit: type=1804 audit(1661443050.434:137): pid=3939 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir1909404638/syzkaller.rLBvIo/10/bus" dev="sda1" ino=1164 res=1 errno=0 [ 116.223805][ T39] audit: type=1800 audit(1661443050.434:138): pid=3939 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1164 res=0 errno=0 [ 116.311326][ T39] audit: type=1804 audit(1661443050.564:139): pid=3946 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir2432181880/syzkaller.QaPBre/8/bus" dev="sda1" ino=1166 res=1 errno=0 [ 116.357023][ T39] audit: type=1800 audit(1661443050.564:140): pid=3946 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1166 res=0 errno=0 15:57:32 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x89, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0) chdir(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0xb0e57337fe7a0aee) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) stat(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r5, 0x0, 0x10000) syz_usb_control_io$hid(r0, 0x0, 0x0) 15:57:32 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x89, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0) chdir(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0xb0e57337fe7a0aee) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) stat(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r5, 0x0, 0x10000) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 117.877565][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 117.882781][ T24] usbhid: probe of 7-1:0.0 failed with error -71 [ 117.891993][ T24] usb 7-1: USB disconnect, device number 2 [ 117.937975][ T40] usbhid 8-1:0.0: can't add hid device: -71 [ 117.944019][ T40] usbhid: probe of 8-1:0.0 failed with error -71 [ 117.952469][ T40] usb 8-1: USB disconnect, device number 4 [ 118.257299][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 118.317843][ T40] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 118.399788][ T3941] syz-executor.1 (3941) used greatest stack depth: 23392 bytes left 15:57:32 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x89, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0) chdir(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0xb0e57337fe7a0aee) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) stat(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r5, 0x0, 0x10000) syz_usb_control_io$hid(r0, 0x0, 0x0) 15:57:32 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x89, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0) chdir(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0xb0e57337fe7a0aee) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) stat(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r5, 0x0, 0x10000) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 118.507448][ T29] usbhid 5-1:0.0: can't add hid device: -71 [ 118.511597][ T29] usbhid: probe of 5-1:0.0 failed with error -71 [ 118.520393][ T29] usb 5-1: USB disconnect, device number 2 [ 118.537437][ T41] usbhid 6-1:0.0: can't add hid device: -71 [ 118.541576][ T41] usbhid: probe of 6-1:0.0 failed with error -71 [ 118.547713][ T41] usb 6-1: USB disconnect, device number 3 [ 118.677458][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.677603][ T40] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.688760][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.696142][ T40] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.696181][ T40] usb 8-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 118.696197][ T40] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.697883][ T40] usb 8-1: config 0 descriptor?? [ 118.702096][ T24] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 118.730850][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.739258][ T24] usb 7-1: config 0 descriptor?? [ 118.887315][ T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 118.927388][ T41] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 119.109170][ T39] audit: type=1804 audit(1661443053.364:141): pid=3962 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir1909404638/syzkaller.rLBvIo/11/bus" dev="sda1" ino=1163 res=1 errno=0 [ 119.128149][ T39] audit: type=1800 audit(1661443053.364:142): pid=3962 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1163 res=0 errno=0 [ 119.267680][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.277791][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.288914][ T29] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 119.296259][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.305503][ T29] usb 5-1: config 0 descriptor?? [ 119.327624][ T41] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.336540][ T41] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.357344][ T41] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 119.365751][ T41] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.388427][ T41] usb 6-1: config 0 descriptor?? 15:57:35 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x89, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0) chdir(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0xb0e57337fe7a0aee) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) stat(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r5, 0x0, 0x10000) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 121.247601][ T40] usbhid 8-1:0.0: can't add hid device: -71 [ 121.252481][ T40] usbhid: probe of 8-1:0.0 failed with error -71 [ 121.273227][ T40] usb 8-1: USB disconnect, device number 5 15:57:35 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x89, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0) chdir(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0xb0e57337fe7a0aee) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) stat(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r5, 0x0, 0x10000) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 121.637448][ T40] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 121.639473][ T29] usbhid 5-1:0.0: can't add hid device: -71 [ 121.662145][ T29] usbhid: probe of 5-1:0.0 failed with error -71 15:57:35 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) signalfd(r3, &(0x7f0000001fc0)={[0x2]}, 0x8) r5 = dup(r4) r6 = dup(0xffffffffffffffff) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 121.690608][ T29] usb 5-1: USB disconnect, device number 3 15:57:35 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x89, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0) chdir(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0xb0e57337fe7a0aee) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) stat(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r5, 0x0, 0x10000) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 121.727430][ T41] usbhid 6-1:0.0: can't add hid device: -71 [ 121.732424][ T41] usbhid: probe of 6-1:0.0 failed with error -71 [ 121.744767][ T41] usb 6-1: USB disconnect, device number 4 [ 121.778204][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 121.783554][ T24] usbhid: probe of 7-1:0.0 failed with error -71 [ 121.809339][ T24] usb 7-1: USB disconnect, device number 3 [ 122.067570][ T40] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.076883][ T40] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.086092][ T40] usb 8-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 122.094355][ T40] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.105412][ T40] usb 8-1: config 0 descriptor?? [ 122.107268][ T29] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 122.207397][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd 15:57:36 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) signalfd(r3, &(0x7f0000001fc0)={[0x2]}, 0x8) r5 = dup(r4) r6 = dup(0xffffffffffffffff) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 122.517550][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.524665][ T39] kauditd_printk_skb: 6 callbacks suppressed [ 122.524678][ T39] audit: type=1804 audit(1661443056.774:149): pid=3990 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir1909404638/syzkaller.rLBvIo/12/bus" dev="sda1" ino=1163 res=1 errno=0 [ 122.526547][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.531076][ T39] audit: type=1800 audit(1661443056.774:150): pid=3990 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1163 res=0 errno=0 [ 122.576471][ T29] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 122.577800][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.592580][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.602031][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.616273][ T24] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 122.623914][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.638733][ T29] usb 5-1: config 0 descriptor?? [ 122.641121][ T24] usb 7-1: config 0 descriptor?? [ 123.085008][ T39] audit: type=1804 audit(1661443057.334:151): pid=3995 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir2432181880/syzkaller.QaPBre/10/bus" dev="sda1" ino=1164 res=1 errno=0 [ 123.121181][ T39] audit: type=1800 audit(1661443057.334:152): pid=3995 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1164 res=0 errno=0 [ 123.157440][ T39] audit: type=1804 audit(1661443057.374:153): pid=3996 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir830594253/syzkaller.Nbu4dl/21/bus" dev="sda1" ino=1165 res=1 errno=0 15:57:37 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) signalfd(r3, &(0x7f0000001fc0)={[0x2]}, 0x8) r5 = dup(r4) r6 = dup(0xffffffffffffffff) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 123.223755][ T39] audit: type=1800 audit(1661443057.374:154): pid=3996 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1165 res=0 errno=0 15:57:38 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) [ 124.177665][ T39] audit: type=1400 audit(1661443058.434:155): avc: denied { bind } for pid=4004 comm="syz-executor.1" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 15:57:38 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) [ 124.198338][ T39] audit: type=1400 audit(1661443058.434:156): avc: denied { node_bind } for pid=4004 comm="syz-executor.1" saddr=fe80:: scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 124.218116][ T39] audit: type=1400 audit(1661443058.444:157): avc: denied { connect } for pid=4004 comm="syz-executor.1" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 15:57:39 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x89, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0) chdir(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0xb0e57337fe7a0aee) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) stat(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r5, 0x0, 0x10000) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 125.407797][ T40] usbhid 8-1:0.0: can't add hid device: -71 [ 125.414391][ T40] usbhid: probe of 8-1:0.0 failed with error -71 [ 125.425804][ T40] usb 8-1: USB disconnect, device number 6 15:57:39 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x9d49, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) fsync(0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000180)={0x1, {0x14, 0x6, 0x9, 0xfff}}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f742e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffffc654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x84, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x58, 0x2, [@TCA_PIE_TARGET={0x8}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}]}, @qdisc_kind_options=@q_plug={{0x9}, {0xc}}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x84}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="7449b5392be7449c1469001e61068e2096bf97f7", @ANYRES16=0x0, @ANYBLOB="200027bd7000fbdbdf2504000000140002006d61637365633000000000000000000014000200626f6e6430000000000000000000000005000400010000000900030073797a30000000000900030073797a32000000000900010073797a31000000000900010073797a3000000000"], 0x74}, 0x1, 0x0, 0x0, 0x6}, 0x80) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x2000000000, 0x80) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x4800000, 0x101) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/60, 0x3c}], 0x1, 0x40000a1e, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x36) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x9, 0x1}) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 15:57:39 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) 15:57:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f80100200040000000000000000000800029e3286cf153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ffffffff078000ffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8fffffff0ffffffff078000ffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="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", 0x120, 0x600}, {&(0x7f0000010500)="2e20202020202020202020100094e970325132510000e97032510300000000002e2e202020202020202020100094e970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200094e970325132510000e970325104001a040000", 0x80, 0x2400}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x3400}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x4400}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x8400}], 0x0, &(0x7f0000010d00)) 15:57:39 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) [ 125.517551][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 125.523895][ T24] usbhid: probe of 7-1:0.0 failed with error -71 [ 125.542513][ T24] usb 7-1: USB disconnect, device number 4 15:57:39 executing program 1: add_key(&(0x7f0000000280)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="10e384866a0ea16f92967e74633d4c18b12a32c5b0d5160b52e8d94a4b646ccec0b27d6a39f8273055b2ab4f4c5709", 0x2f, 0xffffffffffffffff) [ 125.555050][ T39] audit: type=1400 audit(1661443059.804:158): avc: denied { bind } for pid=4014 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.557941][ T29] usbhid 5-1:0.0: can't add hid device: -71 [ 125.565425][ T4015] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 125.565456][ T4015] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 125.565472][ T4015] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 125.565486][ T4015] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 125.580528][ T4017] trusted_key: encrypted_key: master key parameter '' is invalid [ 125.589295][ T29] usbhid: probe of 5-1:0.0 failed with error -71 15:57:39 executing program 1: add_key(&(0x7f0000000280)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="10e384866a0ea16f92967e74633d4c18b12a32c5b0d5160b52e8d94a4b646ccec0b27d6a39f8273055b2ab4f4c5709", 0x2f, 0xffffffffffffffff) [ 125.616773][ T4019] loop0: detected capacity change from 0 to 132 [ 125.631541][ T4021] trusted_key: encrypted_key: master key parameter '' is invalid [ 125.633152][ T29] usb 5-1: USB disconnect, device number 4 [ 125.636810][ T3984] loop0: 15:57:39 executing program 1: add_key(&(0x7f0000000280)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="10e384866a0ea16f92967e74633d4c18b12a32c5b0d5160b52e8d94a4b646ccec0b27d6a39f8273055b2ab4f4c5709", 0x2f, 0xffffffffffffffff) [ 125.688849][ T4024] trusted_key: encrypted_key: master key parameter '' is invalid [ 125.827452][ T40] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 126.187597][ T40] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.196123][ T40] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.203109][ T40] usb 8-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 126.209822][ T40] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.217621][ T40] usb 8-1: config 0 descriptor?? 15:57:42 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x89, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0) chdir(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0xb0e57337fe7a0aee) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) stat(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r5, 0x0, 0x10000) syz_usb_control_io$hid(r0, 0x0, 0x0) 15:57:42 executing program 1: add_key(&(0x7f0000000280)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="10e384866a0ea16f92967e74633d4c18b12a32c5b0d5160b52e8d94a4b646ccec0b27d6a39f8273055b2ab4f4c5709", 0x2f, 0xffffffffffffffff) 15:57:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x2000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:57:42 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x9d49, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) fsync(0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000180)={0x1, {0x14, 0x6, 0x9, 0xfff}}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f742e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffffc654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x84, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x58, 0x2, [@TCA_PIE_TARGET={0x8}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}]}, @qdisc_kind_options=@q_plug={{0x9}, {0xc}}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x84}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="7449b5392be7449c1469001e61068e2096bf97f7", @ANYRES16=0x0, @ANYBLOB="200027bd7000fbdbdf2504000000140002006d61637365633000000000000000000014000200626f6e6430000000000000000000000005000400010000000900030073797a30000000000900030073797a32000000000900010073797a31000000000900010073797a3000000000"], 0x74}, 0x1, 0x0, 0x0, 0x6}, 0x80) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x2000000000, 0x80) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x4800000, 0x101) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/60, 0x3c}], 0x1, 0x40000a1e, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x36) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x9, 0x1}) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) [ 128.451066][ T4031] trusted_key: encrypted_key: master key parameter '' is invalid [ 128.455877][ T4032] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 128.459895][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 128.459910][ T39] audit: type=1400 audit(1661443062.714:164): avc: denied { read } for pid=4033 comm="syz-executor.0" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 15:57:42 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x9d49, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) fsync(0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000180)={0x1, {0x14, 0x6, 0x9, 0xfff}}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f742e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffffc654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x84, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x58, 0x2, [@TCA_PIE_TARGET={0x8}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}]}, @qdisc_kind_options=@q_plug={{0x9}, {0xc}}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x84}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="7449b5392be7449c1469001e61068e2096bf97f7", @ANYRES16=0x0, @ANYBLOB="200027bd7000fbdbdf2504000000140002006d61637365633000000000000000000014000200626f6e6430000000000000000000000005000400010000000900030073797a30000000000900030073797a32000000000900010073797a31000000000900010073797a3000000000"], 0x74}, 0x1, 0x0, 0x0, 0x6}, 0x80) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x2000000000, 0x80) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x4800000, 0x101) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/60, 0x3c}], 0x1, 0x40000a1e, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x36) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x9, 0x1}) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) [ 128.466494][ T4032] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 128.470213][ T39] audit: type=1400 audit(1661443062.714:165): avc: denied { open } for pid=4033 comm="syz-executor.0" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 128.493342][ T4034] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 128.502245][ T4032] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 128.502273][ T4032] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 128.512080][ T39] audit: type=1400 audit(1661443062.724:166): avc: denied { append } for pid=3115 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 128.523377][ T40] usbhid 8-1:0.0: can't add hid device: -71 [ 128.525605][ T4032] blktrace: Concurrent blktraces are not allowed on loop5 [ 128.554650][ T39] audit: type=1400 audit(1661443062.724:167): avc: denied { open } for pid=3115 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 15:57:42 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x9d49, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) fsync(0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000180)={0x1, {0x14, 0x6, 0x9, 0xfff}}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f742e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffffc654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x84, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x58, 0x2, [@TCA_PIE_TARGET={0x8}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}]}, @qdisc_kind_options=@q_plug={{0x9}, {0xc}}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x84}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="7449b5392be7449c1469001e61068e2096bf97f7", @ANYRES16=0x0, @ANYBLOB="200027bd7000fbdbdf2504000000140002006d61637365633000000000000000000014000200626f6e6430000000000000000000000005000400010000000900030073797a30000000000900030073797a32000000000900010073797a31000000000900010073797a3000000000"], 0x74}, 0x1, 0x0, 0x0, 0x6}, 0x80) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x2000000000, 0x80) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x4800000, 0x101) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/60, 0x3c}], 0x1, 0x40000a1e, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x36) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x9, 0x1}) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) [ 128.570989][ T40] usbhid: probe of 8-1:0.0 failed with error -71 [ 128.572029][ T4037] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 128.572045][ T4037] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 128.585487][ T39] audit: type=1400 audit(1661443062.724:168): avc: denied { getattr } for pid=3115 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 128.585533][ T39] audit: type=1400 audit(1661443062.724:169): avc: denied { ioctl } for pid=4033 comm="syz-executor.0" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 128.627700][ T4044] blktrace: Concurrent blktraces are not allowed on loop5 [ 128.653172][ T40] usb 8-1: USB disconnect, device number 7 [ 128.659562][ T4043] blktrace: Concurrent blktraces are not allowed on loop5 [ 128.672170][ T4041] ------------[ cut here ]------------ [ 128.676980][ T4041] WARNING: CPU: 2 PID: 4041 at kernel/cpu.c:347 lockdep_assert_cpus_held+0xbd/0xe0 [ 128.684341][ T4041] Modules linked in: [ 128.693380][ T4041] CPU: 1 PID: 4041 Comm: kvm-nx-lpage-re Not tainted 6.0.0-rc2-syzkaller-00054-gc40e8341e3b3 #0 [ 128.700752][ T4041] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 128.707260][ T4041] RIP: 0010:lockdep_assert_cpus_held+0xbd/0xe0 [ 128.712182][ T4041] Code: e8 88 11 34 00 be ff ff ff ff 48 c7 c7 70 39 e3 8b e8 b7 14 38 08 31 ff 89 c3 89 c6 e8 2c 0e 34 00 85 db 75 d5 e8 63 11 34 00 <0f> 0b eb cc 48 c7 c7 04 c4 dd 8d e8 93 b7 7f 00 e9 62 ff ff ff 48 [ 128.727472][ T4041] RSP: 0018:ffffc90003577c28 EFLAGS: 00010293 [ 128.731767][ T4041] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 128.738128][ T4041] RDX: ffff8880674c0180 RSI: ffffffff814728bd RDI: 0000000000000005 [ 128.744265][ T4041] RBP: ffff8880671da000 R08: 0000000000000005 R09: 0000000000000000 [ 128.751005][ T4041] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90003577de0 [ 128.756333][ T4041] R13: ffffffff8bfd96e0 R14: 1ffff920006aef8c R15: ffffc90003577e04 [ 128.763139][ T4041] FS: 0000000000000000(0000) GS:ffff88802ca00000(0000) knlGS:0000000000000000 [ 128.768855][ T4041] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.773011][ T4041] CR2: 0000001b33529000 CR3: 000000001a8f2000 CR4: 0000000000152ee0 [ 128.778343][ T4041] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 128.783371][ T4041] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 128.788862][ T4041] Call Trace: [ 128.791034][ T4041] [ 128.792992][ T4041] cpuset_attach+0x92/0x520 [ 128.796207][ T4041] ? guarantee_online_cpus+0x4d0/0x4d0 [ 128.800128][ T4041] ? preempt_schedule_thunk+0x16/0x18 [ 128.805102][ T4041] cgroup_migrate_execute+0xbc7/0x1220 [ 128.810076][ T4041] cgroup_attach_task+0x416/0x7c0 [ 128.813549][ T4041] ? cgroup_migrate+0x1f0/0x1f0 [ 128.816886][ T4041] ? _raw_spin_unlock_irq+0x1f/0x40 [ 128.821693][ T4041] ? _raw_spin_unlock_irq+0x1f/0x40 [ 128.825906][ T4041] cgroup_attach_task_all+0xde/0x140 [ 128.831424][ T4041] kvm_vm_worker_thread+0xdd/0x5a0 [ 128.835637][ T4041] ? kvm_mmu_pte_write+0xdc0/0xdc0 [ 128.839578][ T4041] ? __bpf_trace_kvm_unmap_hva_range+0xe0/0xe0 [ 128.844271][ T4041] kthread+0x2e4/0x3a0 [ 128.847672][ T4041] ? kthread_complete_and_exit+0x40/0x40 [ 128.851678][ T4041] ret_from_fork+0x1f/0x30 [ 128.855180][ T4041] [ 128.857849][ T4041] Kernel panic - not syncing: panic_on_warn set ... [ 128.862903][ T4041] CPU: 2 PID: 4041 Comm: kvm-nx-lpage-re Not tainted 6.0.0-rc2-syzkaller-00054-gc40e8341e3b3 #0 [ 128.871038][ T4041] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 128.878460][ T4041] Call Trace: [ 128.881185][ T4041] [ 128.883620][ T4041] dump_stack_lvl+0xcd/0x134 [ 128.887479][ T4041] panic+0x2c8/0x627 [ 128.890755][ T4041] ? panic_print_sys_info.part.0+0x10b/0x10b [ 128.895374][ T4041] ? __warn.cold+0x248/0x2c4 [ 128.898897][ T4041] ? lockdep_assert_cpus_held+0xbd/0xe0 [ 128.903029][ T4041] __warn.cold+0x259/0x2c4 [ 128.906492][ T4041] ? lockdep_assert_cpus_held+0xbd/0xe0 [ 128.910667][ T4041] report_bug+0x1bc/0x210 [ 128.914271][ T4041] handle_bug+0x3c/0x60 [ 128.917618][ T4041] exc_invalid_op+0x14/0x40 [ 128.921092][ T4041] asm_exc_invalid_op+0x16/0x20 [ 128.925016][ T4041] RIP: 0010:lockdep_assert_cpus_held+0xbd/0xe0 [ 128.929866][ T4041] Code: e8 88 11 34 00 be ff ff ff ff 48 c7 c7 70 39 e3 8b e8 b7 14 38 08 31 ff 89 c3 89 c6 e8 2c 0e 34 00 85 db 75 d5 e8 63 11 34 00 <0f> 0b eb cc 48 c7 c7 04 c4 dd 8d e8 93 b7 7f 00 e9 62 ff ff ff 48 [ 128.945550][ T4041] RSP: 0018:ffffc90003577c28 EFLAGS: 00010293 [ 128.950277][ T4041] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 128.956680][ T4041] RDX: ffff8880674c0180 RSI: ffffffff814728bd RDI: 0000000000000005 [ 128.962942][ T4041] RBP: ffff8880671da000 R08: 0000000000000005 R09: 0000000000000000 [ 128.968549][ T4041] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90003577de0 [ 128.973671][ T4041] R13: ffffffff8bfd96e0 R14: 1ffff920006aef8c R15: ffffc90003577e04 [ 128.978354][ T4041] ? lockdep_assert_cpus_held+0xbd/0xe0 [ 128.982155][ T4041] ? lockdep_assert_cpus_held+0xbd/0xe0 [ 128.986362][ T4041] cpuset_attach+0x92/0x520 [ 128.989922][ T4041] ? guarantee_online_cpus+0x4d0/0x4d0 [ 128.994133][ T4041] ? preempt_schedule_thunk+0x16/0x18 [ 128.998512][ T4041] cgroup_migrate_execute+0xbc7/0x1220 [ 129.002824][ T4041] cgroup_attach_task+0x416/0x7c0 [ 129.007093][ T4041] ? cgroup_migrate+0x1f0/0x1f0 [ 129.011191][ T4041] ? _raw_spin_unlock_irq+0x1f/0x40 [ 129.014505][ T4041] ? _raw_spin_unlock_irq+0x1f/0x40 [ 129.017703][ T4041] cgroup_attach_task_all+0xde/0x140 [ 129.022089][ T4041] kvm_vm_worker_thread+0xdd/0x5a0 [ 129.026586][ T4041] ? kvm_mmu_pte_write+0xdc0/0xdc0 [ 129.030995][ T4041] ? __bpf_trace_kvm_unmap_hva_range+0xe0/0xe0 [ 129.036110][ T4041] kthread+0x2e4/0x3a0 [ 129.039483][ T4041] ? kthread_complete_and_exit+0x40/0x40 [ 129.043413][ T4041] ret_from_fork+0x1f/0x30 [ 129.047031][ T4041] [ 129.051401][ T4041] Kernel Offset: disabled [ 129.054419][ T4041] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:57:43 Registers: info registers vcpu 0 RAX=00000000000832bf RBX=ffffffff8bcbc980 RCX=ffffffff897f4825 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffffff8bc07e18 R8 =0000000000000001 R9 =ffff88802c834c4b R10=ffffed1005906989 R11=0000000000000001 R12=fffffbfff1797930 R13=0000000000000000 R14=ffffffff8dddf3d0 R15=0000000000000000 RIP=ffffffff89824e5b RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b33428000 CR3=0000000062201000 CR4=00152ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffffe8ffada0be20 RCX=ffffffff817085e7 RDX=ffff8880153d8100 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90005207940 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=fffff91ff5b417c5 R13=0000000000000002 R14=dffffc0000000000 R15=0000000000000001 RIP=ffffffff817b35cc RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c900000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b3352c000 CR3=000000000bc8e000 CR4=00152ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffff00000000000000000000 XMM02=0000ff00000000000000000000000000 XMM03=00ff00000000ff00000000ff000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000ffffffffffffff00ffffff00 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=65770075253a7325202773252720676e XMM09=00000000000000000000000000000000 XMM10=73737373737371f27373737373737373 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=00000000000400f6 RBX=00000000000c00fc RCX=1ffffffff1bbbe76 RDX=1ffffffff1743765 RSI=0000000000000004 RDI=00000000000c00fc RBP=fffffbffffebf860 RSP=ffffc900052078f0 R8 =0000000000000000 R9 =ffffffff8dddf3b3 R10=fffffbfff1bbbe76 R11=0000000000000000 R12=ffff88802ca3b150 R13=ffffffff8dddf5c0 R14=1ffff1100594762a R15=00000000ffffffff RIP=ffffffff813407dd RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802ca00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b33529000 CR3=000000000bc8e000 CR4=00152ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=000000000008769d RBX=ffff888012536080 RCX=ffffffff897f4825 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000003 RSP=ffffc9000069fe00 R8 =0000000000000001 R9 =ffff88802cb34c4b R10=ffffed1005966989 R11=0000000000000001 R12=ffffed10024a6c10 R13=0000000000000003 R14=ffffffff8dddf3d0 R15=0000000000000000 RIP=ffffffff89824e5b RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cb00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5c48fa6d38 CR3=0000000067926000 CR4=00152ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffff00000000000000000000 XMM02=0000000000000000ff0000000000ff00 XMM03=00ff00000000ff00000000ff000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=ffff000000000000ffff00000000ff00 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=2064657461657263000a73253a47000a XMM09=00000000000000000000000000000000 XMM10=73737373737371f27373737373737373 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000