last executing test programs: 9m25.379448788s ago: executing program 32 (id=2324): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$null(0xffffffffffffff9c, 0x0, 0x640c83, 0x0) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000040)={0x1, 0x2, 0x9}) 9m16.256181123s ago: executing program 33 (id=2568): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) time(&(0x7f0000000080)) 8m41.809022889s ago: executing program 34 (id=2966): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000008850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc) 8m25.622780078s ago: executing program 35 (id=3144): r0 = syz_usb_connect$uac2(0x5, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030000004082054c00400001020301090296000301053009080b00010107208c0904000000010120000924010040041d000708240a0001ff23000c2403020703000400070081090401000001022000090001010101022000090501090002030b040825010000400400090402000001022000090402010101022000092402020400cc1c051024010201000400000008b8000000030905820908"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="2012bf000000f0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m11.842704317s ago: executing program 36 (id=3286): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x1, 0x13838}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x45}, 0x40000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x204, &(0x7f00000000c0)={0x0}) 6m49.722147195s ago: executing program 37 (id=4100): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./my_debugfs\x00', 0x4) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_debugfs/usb/devices\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 6m11.94037515s ago: executing program 38 (id=4669): r0 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x3, 0xb, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x9, 0x7, 0x1}) close_range(r0, r1, 0x0) 6m6.817335414s ago: executing program 39 (id=4708): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=[@rdmsr={0x66, 0x18, {0x400000b2}}], 0x18}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m38.655607548s ago: executing program 1 (id=4929): syz_emit_ethernet(0x86, &(0x7f0000000040)=ANY=[], 0x0) r0 = io_uring_setup(0x622a, &(0x7f0000000040)={0x0, 0xafd3, 0x1000, 0x2, 0x2d1}) r1 = io_uring_setup(0x66b7, &(0x7f0000000600)={0x0, 0x653f, 0x83, 0x0, 0x28e, 0x0, r0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r0], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 5m37.950257722s ago: executing program 1 (id=4932): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000805"], 0x88) 5m37.569433474s ago: executing program 1 (id=4935): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x3b}, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x2e4e}, {0xfffffffffffffff8, 0xfffffffffffffffd, 0x3}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x6c}, 0xa, @in=@empty}}, 0xe8) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000005d00)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 5m37.367080364s ago: executing program 1 (id=4937): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 5m37.155981856s ago: executing program 1 (id=4942): socket$nl_route(0x10, 0x3, 0x0) io_setup(0x5, &(0x7f0000000240)=0x0) r1 = inotify_init() io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x2c) 5m36.730070135s ago: executing program 1 (id=4946): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001014010023057000fb"], 0x20}, 0x1, 0x0, 0x0, 0x4040050}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd8f}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5m36.3084375s ago: executing program 40 (id=4946): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001014010023057000fb"], 0x20}, 0x1, 0x0, 0x0, 0x4040050}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd8f}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m24.386282479s ago: executing program 6 (id=5532): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="7b87f20f4df6"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m23.880014554s ago: executing program 6 (id=5538): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000000600)=[{0xcf, 0xc000, 0x24, &(0x7f0000000200)="6625c8e8dfaedc1286c5e6d9ca4a96074100a964e0c622a0dd73ca857d48c32b4d4b80a5"}, {0x101, 0x1010, 0x0, 0x0}], 0x2}) syz_open_procfs(0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) 4m22.304277456s ago: executing program 6 (id=5555): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket(0x11, 0x2, 0x0) bind$packet(r3, &(0x7f0000000500)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 4m21.919479486s ago: executing program 6 (id=5559): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x89101) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 4m21.551566873s ago: executing program 6 (id=5568): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, &(0x7f0000000040)="0118269db93bda7b297893dbebf7e87c", 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 4m20.608930106s ago: executing program 6 (id=5573): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x1, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in6=@loopback, 0x4d4, 0x6c}, @in=@local, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xfffffbbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x29}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 4m20.153303994s ago: executing program 41 (id=5573): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x1, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in6=@loopback, 0x4d4, 0x6c}, @in=@local, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xfffffbbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x29}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 3m13.949485938s ago: executing program 5 (id=6103): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000740)='bbr', 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000240)="c9", 0x1, 0x4044880, 0x0, 0x0) 3m13.006477817s ago: executing program 5 (id=6112): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x2, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, 0x24}, 0x94) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4080848) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7105"], 0xee) 3m12.638196295s ago: executing program 5 (id=6116): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, r0, 0xfffff000) ptrace(0x10, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) mlock(&(0x7f0000372000/0x2000)=nil, 0x2000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m12.456984285s ago: executing program 5 (id=6118): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x84) write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}]) 3m12.342612336s ago: executing program 5 (id=6119): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000340)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000090, 0x0, 0x20}]}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000400)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @sint}]}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000440)={0x1, 0x1}) 3m11.350250018s ago: executing program 5 (id=6129): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3m11.11368285s ago: executing program 42 (id=6129): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2m44.458850376s ago: executing program 9 (id=6322): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m44.229083255s ago: executing program 9 (id=6326): socket$nl_route(0x10, 0x3, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 2m43.782377628s ago: executing program 9 (id=6334): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) r0 = syz_io_uring_setup(0x7463, &(0x7f0000000540)={0x0, 0xd127, 0x800, 0x3, 0x2083}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/73, 0x49}], 0x1) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f00000002c0)={0x38, &(0x7f0000000040)=[{0x3d, '\x00', @data, 0x4db6}]}) fsmount(0xffffffffffffffff, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_SETXATTR={0x2a, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 2m43.570540881s ago: executing program 9 (id=6338): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9b1002, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 2m43.425796939s ago: executing program 9 (id=6341): socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_80211_inject_frame(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16], 0x7) 2m41.943269338s ago: executing program 9 (id=6354): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$dri(0x0, 0x1, 0xc0400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x6, 0x9, 0x0, 0xffffffffffffffff, 0x100}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m41.618605362s ago: executing program 43 (id=6354): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$dri(0x0, 0x1, 0xc0400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x6, 0x9, 0x0, 0xffffffffffffffff, 0x100}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m33.826127371s ago: executing program 3 (id=6753): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000a51000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00003cf000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x100001, 0x329}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0, 0x0) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1m32.825525675s ago: executing program 3 (id=6758): openat$sequencer2(0xffffff9c, 0x0, 0x80941, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0xe8381, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x5, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3040, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0x0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x6, 0xfc, 0xa, {0x7, 0x25, 0x1, 0x0, 0xe, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0xbf, 0x8, {0x7, 0x25, 0x1, 0x8, 0x5, 0x6}}}}}}}}]}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 1m30.290176571s ago: executing program 3 (id=6771): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x851a, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='ms_mode\x00', &(0x7f0000000200)='legacy\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='mount_timeout\x00', &(0x7f0000000280)='5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept4(r0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000300)="63657068207630323700000000000000000002001a857f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002001a857f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001ffffffffffffffff010000000100000000000000000000000007010000000000000000000000000004000000000000000000000000001000000000000100"/360, 0x16a) 1m29.183738079s ago: executing program 3 (id=6779): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000280)={[{0x4fbd, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x8, 0x1, 0x9, 0x3, 0x4, 0x6, 0x9}, {0x10, 0x400, 0x4, 0x9, 0x7, 0x6, 0x33, 0x2, 0x41, 0x7, 0x7f, 0xd, 0x201}, {0x80, 0x4c3e, 0x7f, 0xe, 0x5c, 0x8, 0x4, 0x5, 0x68, 0x7, 0x0, 0x6, 0x1e7}], 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x7fff, 0x1000200004, 0x4, 0x2, 0x5, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m28.331928193s ago: executing program 3 (id=6783): syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x7c4, 0xa000, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x0, 0x0, 0x3, 0x8, 0x6, 0xf2}}}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/kmsg\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x25f9, 0xc000, 0xa, 0xc4}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x12, 0x0, 0x0) 1m26.639909206s ago: executing program 3 (id=6793): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x80000000007, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0x5, 0xa1d, 0x7, 0x5, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0xe000, 0x0, 0x77, 0xfd, 0x3, 0xcb, 0x5, 0x0, 0x6, 0x6, 0x2}, {0xeeee0000, 0x260f0e96a1197019, 0xd, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0xf000, 0x0, 0x0, 0x7, 0xc4, 0x40, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x10, 0x4, 0x0, 0x4, 0x0, 0x8, 0x3, 0x34, 0x4}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x2, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0x80a0000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20, 0x1}, {0x0, 0x6000, 0xa, 0x1, 0xa4, 0x7, 0x8, 0x40, 0x5, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x3000, 0xfffd}, 0x0, 0x0, 0x0, 0x120, 0x0, 0xf001, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m11.42368498s ago: executing program 44 (id=6793): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x80000000007, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0x5, 0xa1d, 0x7, 0x5, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0xe000, 0x0, 0x77, 0xfd, 0x3, 0xcb, 0x5, 0x0, 0x6, 0x6, 0x2}, {0xeeee0000, 0x260f0e96a1197019, 0xd, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0xf000, 0x0, 0x0, 0x7, 0xc4, 0x40, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x10, 0x4, 0x0, 0x4, 0x0, 0x8, 0x3, 0x34, 0x4}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x2, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0x80a0000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20, 0x1}, {0x0, 0x6000, 0xa, 0x1, 0xa4, 0x7, 0x8, 0x40, 0x5, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x3000, 0xfffd}, 0x0, 0x0, 0x0, 0x120, 0x0, 0xf001, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.978811471s ago: executing program 2 (id=7150): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x54000, 0x58000, 0xa, 0xb, 0xb, 0xe6, 0x40, 0xb, 0x0, 0x1, 0x9}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0xc3, 0x75, 0x6, 0x37, 0x4, 0x5, 0x87}, {0x1000, 0xdddd0000, 0x0, 0x5, 0x9, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x1}, {0x1, 0xeee84000, 0xf, 0x6, 0x5, 0x42, 0xb, 0xff, 0x18, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x27, 0x30, 0x9, 0xab, 0x8, 0x7, 0x49, 0xf7, 0x97}, {0xf000, 0xdddd0000, 0xe, 0xa0, 0xb5, 0x8, 0xc4, 0xa1, 0x82, 0x2f, 0x1, 0x7}, {0x4, 0xfec2e000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x10, 0x9e, 0x81, 0x40, 0x70}, {0xffff1000, 0x4000, 0x8, 0x1f, 0xed, 0x7, 0x1, 0x1, 0x42, 0xc, 0xb0, 0x9}, {0xd000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x40200c, 0x2, 0x0, 0x100000, [0x0, 0xe51, 0x3, 0x200000000000008]}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0xc, 0x6, 0x3, 0x40, 0x7e, 0x42, 0x9, 0x1, 0x4, 0x2, 0x8, 0x4}, {0x3, 0x8080, 0x7, 0x0, 0x8, 0x7, 0x49, 0xff, 0x2, 0x1, 0x9, 0xf, 0x20000000006}, {0x2, 0x5, 0x5, 0x5, 0x8, 0x7, 0xfd, 0x40, 0x5, 0x5, 0x2, 0x3}], 0xf87}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.182847953s ago: executing program 8 (id=7158): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$input_event(r0, &(0x7f00000001c0)={{r1, r2/1000+60000}, 0x14, 0x4, 0x3}, 0x18) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @initdev}, &(0x7f0000000040)=0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x18, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008042}, 0x4000090) 5.952620449s ago: executing program 8 (id=7160): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xb7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x1) 4.899119255s ago: executing program 2 (id=7163): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000e0)='./file0\x00', 0x1ed) r0 = socket$rxrpc(0x21, 0x2, 0x2) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/fs/afs/cells\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='add syz0 127.0.0.1+70', 0x15) close(0xffffffffffffffff) mount$afs(&(0x7f0000000400), &(0x7f0000000500)='./file0\x00', &(0x7f0000000600), 0x0, &(0x7f0000000700)={[{@dyn}]}) openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0/syz0\x00', 0x0, 0x0) 4.220188899s ago: executing program 7 (id=7166): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80000) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)=""/89, 0x59}], 0x1}, 0x0) 4.03346294s ago: executing program 8 (id=7167): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002155a1000000000000000210"], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 3.966274391s ago: executing program 2 (id=7168): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0xc0) 3.435115987s ago: executing program 4 (id=7169): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000000, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000300)="b8180000000f01c10f01d9c3", 0xc}], 0x1, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.291650465s ago: executing program 8 (id=7170): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') 3.290531596s ago: executing program 2 (id=7171): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x4000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000300)='xB', 0x2, 0x20048810, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x81}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x2, 0x1}, 0x8) 3.102087476s ago: executing program 7 (id=7172): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x20000023896) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x6, r3, 0x1}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x4b, r3, 0x2}, 0xc) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 2.789541676s ago: executing program 2 (id=7173): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 2.561708523s ago: executing program 4 (id=7174): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x1000, 0x1, 0x1, 0xfffffffe, 0x0, [{0x7, 0xc, 0x4, '\x00', 0x38}, {0x3, 0xfe, 0x7c, '\x00', 0x2f}, {0x6, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x9, 0x1, '\x00', 0x6}, {0x5, 0x5, 0x6, '\x00', 0x79}, {0x81, 0x80, 0x2, '\x00', 0x6}, {0x4, 0x8, 0x1, '\x00', 0x45}, {0x52, 0x9, 0x1, '\x00', 0x7}, {0x40, 0x6, 0x73, '\x00', 0xff}, {0x1, 0xb7, 0x89, '\x00', 0x80}, {0x16, 0x24, 0xa5, '\x00', 0x1}, {0x7, 0x1, 0x7, '\x00', 0x4}, {0x6, 0xc, 0x5, '\x00', 0x3}, {0x1, 0x10, 0x8c}, {0x5, 0xc0, 0x8, '\x00', 0x3}, {0x8, 0x2, 0xcb, '\x00', 0x5}, {0x7, 0x6, 0xb, '\x00', 0x5}, {0x9, 0x0, 0x4, '\x00', 0x5}, {0x6, 0x3, 0x7, '\x00', 0x6}, {0xf4, 0x8, 0x7, '\x00', 0xf8}, {0x4, 0x5, 0x31, '\x00', 0xf7}, {0x6, 0x7, 0xfe, '\x00', 0xa}, {0xff, 0x0, 0x3, '\x00', 0x7}, {0x16, 0x85, 0x5, '\x00', 0xff}]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) 2.25671081s ago: executing program 7 (id=7175): fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x8440}], 0x1, 0x0, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r2, &(0x7f0000000100)=""/253, 0xfd, 0x1) 2.01226562s ago: executing program 2 (id=7176): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f0000000000)={0x1, 0x6, 0x1, 0x4000000fffa}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {0x1, 0x4}, [], {}, [], {0x10, 0x7}}, 0x24, 0x2) 1.933352552s ago: executing program 4 (id=7177): open(&(0x7f0000000280)='.\x00', 0x0, 0x122) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) memfd_create(&(0x7f0000000040)='!\x00', 0x5) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x20000000, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000100)={0x1, 0x2}, 0x1) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, &(0x7f0000000240)) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000280)={0x2e, 0x5, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xeec}}}, 0x0) 1.728929579s ago: executing program 8 (id=7178): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8}) mq_timedreceive(r1, 0x0, 0xfffffffffffffee3, 0x1, 0x0) mq_timedreceive(r1, &(0x7f0000000440)=""/30, 0x1e, 0x80000000, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='dax\x00', 0x10, 0x0) 1.653752719s ago: executing program 0 (id=7179): socket$nl_generic(0x10, 0x3, 0x10) r0 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='8'], 0x38}}, 0x20000000) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 1.3926824s ago: executing program 0 (id=7180): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r1, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/225, 0xe1}, {&(0x7f0000001240)=""/106, 0x6a}, {&(0x7f0000000000)=""/149, 0x95}, {&(0x7f0000000300)=""/71, 0x47}], 0x4, 0x7, 0x20000000) 1.203152395s ago: executing program 7 (id=7181): socket$netlink(0x10, 0x3, 0xb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x10583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x7, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x800005, 0x6a], 0xeeee8000, 0x1000d6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.190492614s ago: executing program 0 (id=7182): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000e80)=[{&(0x7f0000000500)=""/232, 0xe8}], 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000880)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/277, &(0x7f00000002c0)='/\x00\x01\x00H\x98', 0x0) tkill(r2, 0xb) 888.778888ms ago: executing program 4 (id=7183): socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[], 0x78) 742.727121ms ago: executing program 7 (id=7184): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'bridge_slave_1\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 688.803395ms ago: executing program 0 (id=7185): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x68, 0x0, 0x0, 0x1ff8, 0xfa8, &(0x7f0000000480)={@flat=@weak_binder={0x77622a85, 0x100b}, @ptr={0x70742a85, 0x80000, 0x0, 0x0, 0x800001, 0x11}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000600)={0x25, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 439.311524ms ago: executing program 0 (id=7186): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) select(0x40, &(0x7f0000000080)={0x8, 0x62dc, 0x5, 0x0, 0x800, 0x8000000000000000, 0x6, 0x1ff}, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3, 0x1, {}, 0x0, 0x0, r1}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 438.348204ms ago: executing program 4 (id=7187): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x210b}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) dup3(r0, r3, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 399.311534ms ago: executing program 7 (id=7188): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) write(r0, &(0x7f0000000000)="320d9f925ab0787ed97f2ac837bd4303c0e8f1e341b60b04a50e15d89f41a26edf0cb4a8663144a6303704b23b4c5c256d1407498edb1322eab5bebf36abbd7310095969b2d02bee1a96f00363317743602ad854c4298e6aec01edb1ce498c4c27d396eb49a7251cbbab9e02975ceeede0b8824bdd8a53ef4291", 0x7a) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000940)='dummy_udc.0', 0xb) 282.26356ms ago: executing program 8 (id=7189): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x0, 0x17}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) r5 = dup2(r4, r4) write$FUSE_STATX(r5, &(0x7f00000003c0)={0x130, 0x0, r1, {0xc, 0x400, 0x0, '\x00', {0x1, 0x2, 0x5, 0x3, r2, r3, 0xc000, '\x00', 0x81, 0xd5, 0xe, 0x5, {0xe, 0x24f05796}, {0x1, 0x96f}, {0x80000001, 0x401}, {0x40, 0xffffffff}, 0x769a, 0x7f, 0x2, 0x6}}}, 0x130) dup3(r4, r0, 0x80000) 87.94334ms ago: executing program 0 (id=7190): r0 = socket$inet_icmp(0x2, 0x2, 0x1) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x6c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x28, 0x7, 0x6, 0x301, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x64, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x1388}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x2710}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) poll(0x0, 0x0, 0x4b0) close(r2) poll(0x0, 0x0, 0x4b0) 0s ago: executing program 4 (id=7191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x2, 0x9, 0x0, 0xaba}, 0x4, 0x0, 0x3ff, 0x1, 0x9, 0x19, 0x6, 0x1f, 0x5, 0x9, {0x8, 0x400, 0x80, 0x8274, 0x3, 0x15}}}}]}, 0x78}}, 0x20040084) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=@newtfilter={0x24, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfffd, 0xfff3}, {0x1, 0xfff1}, {0x8, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8080) kernel console output (not intermixed with test programs): hcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 640.221250][ T31] audit: type=1400 audit(28752.900:4318): avc: denied { write } for pid=24294 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 640.533136][ T5701] i801_smbus 0000:00:00.0: SMBus base address uninitialized, upgrade BIOS [ 640.578168][ T5701] i801_smbus 0000:00:01.0: SMBus base address uninitialized, upgrade BIOS [ 640.675115][T24304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6270'. [ 640.732827][ T5701] ACPI: \_SB_.LNKA: Enabled at IRQ 11 [ 640.776987][ T5701] i801_smbus 0000:00:05.0: SMBus base address uninitialized, upgrade BIOS [ 640.790343][T24304] 8021q: adding VLAN 0 to HW filter on device bond5 [ 640.866834][T24308] bond5: (slave gretap4): Enslaving as an active interface with an up link [ 641.008205][T24304] bond5 (unregistering): (slave gretap4): Releasing backup interface [ 641.036708][T24304] bond5 (unregistering): Released all slaves [ 641.331541][ T31] audit: type=1400 audit(28754.010:4319): avc: denied { write } for pid=24296 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 641.398192][T24324] netlink: 15143 bytes leftover after parsing attributes in process `syz.2.6274'. [ 641.448000][T24331] No such timeout policy "n" [ 641.448024][T24331] netlink: Failed to associated timeout policy 'n' [ 641.592146][T24336] MTRR 0 not used [ 641.614339][ T31] audit: type=1400 audit(28754.300:4320): avc: denied { write } for pid=24334 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 641.645157][T24339] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 641.721489][T24339] team0: No ports can be present during mode change [ 642.898915][ T31] audit: type=1400 audit(28755.580:4321): avc: denied { read } for pid=24377 comm="syz.2.6294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 642.958728][T24383] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 643.263288][ T5701] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 643.414482][ T5701] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 643.424500][ T5701] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF [ 643.424524][ T5701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 140, setting to 64 [ 643.451821][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.451844][ T5701] usb 3-1: Product: syz [ 643.451864][ T5701] usb 3-1: Manufacturer: syz [ 643.451874][ T5701] usb 3-1: SerialNumber: syz [ 643.461604][ T5701] usb 3-1: config 0 descriptor?? [ 643.490457][T24387] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 643.686918][T24401] netlink: 'syz.0.6300': attribute type 10 has an invalid length. [ 643.751404][T24387] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 643.994464][T24387] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 643.994656][T24387] snd-usb-audio 3-1:0.0: Runtime PM usage count underflow! [ 644.136262][ T31] audit: type=1400 audit(28756.820:4322): avc: denied { setattr } for pid=24406 comm="syz.3.6304" name="/" dev="configfs" ino=1086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 644.178587][ T5701] usb 3-1: USB disconnect, device number 59 [ 644.838071][T24421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6310'. [ 644.869397][T24421] bond5: entered promiscuous mode [ 644.875130][T24421] 8021q: adding VLAN 0 to HW filter on device bond5 [ 644.940997][T24421] 8021q: adding VLAN 0 to HW filter on device bond5 [ 644.941192][T24421] bond5: (slave ipip1): The slave device specified does not support setting the MAC address [ 644.958644][T24421] bond5: (slave ipip1): Error -95 calling set_mac_address [ 645.023204][ T5701] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 645.174888][ T5701] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 645.187882][ T5701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.187909][ T5701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.187929][ T5701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 645.187952][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.221377][ T5701] usb 3-1: config 0 descriptor?? [ 645.443936][T24429] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 645.682780][ T5701] plantronics 0003:047F:FFFF.004C: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 646.210875][T24419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.224725][T24419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.241585][T24419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.256329][T24419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.507373][T24453] fuse: fd is not a fuse device [ 646.667738][T24460] fuse: fd is not a fuse device [ 646.716705][T24462] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 646.807550][T24462] team0: Device xfrm0 is of different type [ 646.839724][T24462] tipc: Started in network mode [ 646.839750][T24462] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 646.839898][T24462] tipc: Enabled bearer , priority 0 [ 647.310588][T24486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6336'. [ 647.529327][T24495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6340'. [ 647.579528][T24495] 8021q: adding VLAN 0 to HW filter on device bond6 [ 647.671993][T15382] usb 10-1: USB disconnect, device number 5 [ 647.709077][T15382] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 647.709386][T15382] keyspan 10-1:0.133: device disconnected [ 647.739733][T24495] macvlan2: entered promiscuous mode [ 647.747478][T24495] macvlan2: entered allmulticast mode [ 647.760705][T24495] bond6: entered promiscuous mode [ 647.780622][T24495] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 647.809086][T24495] bond6: left promiscuous mode [ 647.825978][ T5787] usb 3-1: USB disconnect, device number 60 [ 647.993866][ T5338] tipc: Node number set to 11578026 [ 648.415804][T24524] fuse: fd is not a fuse device [ 649.553933][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 649.585665][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 649.593963][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 649.602845][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 649.610437][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 649.935097][ T31] audit: type=1400 audit(28762.610:4323): avc: denied { read write } for pid=24552 comm="syz.3.6359" name="file0" dev="fuse" ino=16390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 649.935139][ T31] audit: type=1400 audit(28762.610:4324): avc: denied { open } for pid=24552 comm="syz.3.6359" path="/132/file0/file0" dev="fuse" ino=16390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 650.412681][T24570] comedi comedi1: rti802: I/O base address not correctly aligned [ 650.536473][ T31] audit: type=1400 audit(28763.220:4325): avc: denied { bind } for pid=24573 comm="syz.0.6365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 650.559018][ T31] audit: type=1400 audit(28763.240:4326): avc: denied { listen } for pid=24573 comm="syz.0.6365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 650.595977][ T31] audit: type=1400 audit(28763.280:4327): avc: denied { connect } for pid=24573 comm="syz.0.6365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 650.649831][ T31] audit: type=1400 audit(28763.330:4328): avc: denied { accept } for pid=24573 comm="syz.0.6365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 651.311983][T24548] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.312228][T24548] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.312297][T24548] bridge_slave_0: entered allmulticast mode [ 651.339260][T24548] bridge_slave_0: entered promiscuous mode [ 651.347158][T24548] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.350186][T24548] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.367877][T24548] bridge_slave_1: entered allmulticast mode [ 651.368596][T24548] bridge_slave_1: entered promiscuous mode [ 651.383818][ T5787] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 651.463614][T24548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.479373][T24548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.534880][T24548] team0: Port device team_slave_0 added [ 651.545069][ T5787] usb 3-1: Using ep0 maxpacket: 32 [ 651.555622][T24548] team0: Port device team_slave_1 added [ 651.624323][T24548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.624344][T24548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.624365][T24548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.683123][ T52] Bluetooth: hci3: command tx timeout [ 651.701645][T24548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.709997][T24548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.710025][T24548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.879132][T24548] hsr_slave_0: entered promiscuous mode [ 651.890299][T24548] hsr_slave_1: entered promiscuous mode [ 651.900441][T24606] netlink: 'syz.0.6374': attribute type 1 has an invalid length. [ 651.909271][T24548] debugfs: 'hsr0' already exists in 'hsr' [ 651.915854][T24548] Cannot create hsr debugfs directory [ 651.979252][T24606] 8021q: adding VLAN 0 to HW filter on device bond7 [ 652.135739][T24606] bond7: (slave geneve3): making interface the new active one [ 652.174923][ T5787] usb 3-1: unable to get BOS descriptor or descriptor too short [ 652.174957][ T5787] usb 3-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 652.192304][ T5787] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 652.192324][ T5787] usb 3-1: can't read configurations, error -71 [ 652.216418][T24606] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 652.381050][T24622] ipvlan0: Caught tx_queue_len zero misconfig [ 652.479722][T24626] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6380'. [ 652.590850][T24631] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 652.646607][T23215] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.646906][T23215] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.646947][T23215] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.646978][T23215] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.530152][ T31] audit: type=1400 audit(28766.210:4329): avc: denied { create } for pid=24649 comm="syz.4.6388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 653.576982][ T31] audit: type=1400 audit(28766.260:4330): avc: denied { setopt } for pid=24649 comm="syz.4.6388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 653.697152][T24655] netlink: 'syz.4.6388': attribute type 13 has an invalid length. [ 653.765796][ T52] Bluetooth: hci3: command tx timeout [ 654.058190][T24664] CacheFiles: Failed to register: -95 [ 654.075968][ T31] audit: type=1400 audit(28766.760:4331): avc: denied { write } for pid=24642 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 654.448311][ T31] audit: type=1400 audit(28767.130:4332): avc: denied { write } for pid=24671 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 655.056245][T24692] netlink: 'syz.4.6398': attribute type 1 has an invalid length. [ 655.262112][T24692] 8021q: adding VLAN 0 to HW filter on device bond3 [ 655.364312][T24702] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 655.471262][T24697] bond3: (slave geneve2): making interface the new active one [ 655.649306][T24697] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 655.727954][T24710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6404'. [ 655.844349][ T52] Bluetooth: hci3: command tx timeout [ 655.971882][ T31] audit: type=1400 audit(28768.650:4333): avc: denied { write } for pid=24690 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 656.226769][T24726] CIFS: Attempting to mount //127.0.0.1/share [ 656.264765][ T31] audit: type=1400 audit(28768.940:4334): avc: denied { write } for pid=24727 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 656.977561][T24734] dummy_hcd dummy_hcd.0: remove, state 1 [ 656.977785][T24734] usb usb1: USB disconnect, device number 1 [ 657.006223][T24734] dummy_hcd dummy_hcd.0: stopped [ 657.006241][T24734] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 657.098662][T24726] CIFS: VFS: Error connecting to socket. Aborting operation. [ 657.098727][T24726] CIFS: VFS: cifs_mount failed w/return code = -4 [ 657.305938][T24740] openvswitch: netlink: IP tunnel dst address not specified [ 657.325831][T24740] usb usb8: usbfs: process 24740 (syz.3.6412) did not claim interface 0 before use [ 658.666138][T24748] syz.2.6414 (24748): drop_caches: 2 [ 658.674569][ T52] Bluetooth: hci3: command tx timeout [ 659.403637][T24548] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 659.418501][T24548] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 659.431203][T24548] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 659.472021][T24548] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 659.634705][T24548] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 659.650502][T24548] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 659.660510][T24548] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 659.695166][T24548] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 660.240336][ T31] audit: type=1400 audit(28772.920:4335): avc: denied { map } for pid=24784 comm="syz.4.6425" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 660.240395][ T31] audit: type=1400 audit(28772.920:4336): avc: denied { execute } for pid=24784 comm="syz.4.6425" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 660.354391][T24788] netlink: 'syz.2.6426': attribute type 83 has an invalid length. [ 660.364009][T24548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.438331][T24548] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.464955][T24791] netlink: 'syz.2.6426': attribute type 83 has an invalid length. [ 660.490295][T23216] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.490368][T23216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.526079][T12468] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.526151][T12468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.545350][T24790] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 660.545374][T24790] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 660.854260][T24797] netlink: 'syz.3.6430': attribute type 13 has an invalid length. [ 661.116402][T10128] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.131744][T23216] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.133053][T23216] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.274448][T10128] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.522143][ T31] audit: type=1400 audit(28775.200:4337): avc: denied { write } for pid=24813 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 662.581318][T24548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 662.599148][T24840] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4232229815 (16928919260 ns) > initial count (6530613556 ns). Using initial count to start timer. [ 662.915374][ T31] audit: type=1400 audit(28775.590:4338): avc: denied { write } for pid=24849 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 664.351602][T24548] veth0_vlan: entered promiscuous mode [ 664.382557][T24548] veth1_vlan: entered promiscuous mode [ 664.502590][ T31] audit: type=1400 audit(28777.180:4339): avc: denied { write } for pid=24863 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 664.601455][T24548] veth0_macvtap: entered promiscuous mode [ 664.634827][T24548] veth1_macvtap: entered promiscuous mode [ 664.749477][T24548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.787357][T24548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.924832][T23215] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.925120][T23215] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.925160][T23215] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.925190][T23215] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.079025][ T31] audit: type=1400 audit(28777.760:4340): avc: denied { write } for pid=24883 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 665.308624][T23215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.308657][T23215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.546133][T12470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.546165][T12470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.920461][T10122] IPVS: starting estimator thread 0... [ 667.015493][T24928] IPVS: using max 77 ests per chain, 184800 per kthread [ 667.301171][T24935] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6462'. [ 667.301233][T24935] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6462'. [ 667.410693][T24934] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 667.459771][T24937] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6462'. [ 667.459833][T24937] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6462'. [ 667.509942][T24935] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6462'. [ 667.510002][T24935] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6462'. [ 667.659934][T24937] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6462'. [ 667.684461][T24937] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6462'. [ 667.731104][T24944] netlink: 'syz.2.6464': attribute type 1 has an invalid length. [ 667.823255][T24944] 8021q: adding VLAN 0 to HW filter on device bond1 [ 667.859420][T24935] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6462'. [ 667.859488][T24935] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6462'. [ 667.956224][T24947] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 668.416842][T24956] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 668.479543][ T31] audit: type=1326 audit(28781.150:4341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24955 comm="syz.2.6468" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3b5879e0d9 code=0x0 [ 670.230268][T25000] netlink: 'syz.3.6484': attribute type 39 has an invalid length. [ 670.440796][T25002] netlink: 'syz.4.6485': attribute type 13 has an invalid length. [ 671.041441][ T31] audit: type=1400 audit(28783.720:4342): avc: denied { getopt } for pid=25007 comm="syz.3.6487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 672.020646][ T52] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 672.035538][ T52] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:200' [ 672.045245][ T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 672.045267][ T52] Tainted: [L]=SOFTLOCKUP [ 672.045272][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 672.045281][ T52] Workqueue: hci1 hci_rx_work [ 672.045300][ T52] Call Trace: [ 672.045306][ T52] [ 672.045312][ T52] dump_stack_lvl+0x100/0x190 [ 672.045332][ T52] sysfs_warn_dup.cold+0x1c/0x28 [ 672.045352][ T52] sysfs_create_dir_ns+0x24b/0x2b0 [ 672.045368][ T52] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 672.045382][ T52] ? find_held_lock+0x2b/0x80 [ 672.045399][ T52] ? kobject_add_internal+0x25f/0x930 [ 672.045412][ T52] ? kobject_add_internal+0x25f/0x930 [ 672.045427][ T52] ? do_raw_spin_unlock+0x145/0x1e0 [ 672.045443][ T52] kobject_add_internal+0x2c8/0x930 [ 672.045456][ T52] ? kobject_add+0x121/0x1e0 [ 672.045471][ T52] kobject_add+0x16a/0x1e0 [ 672.045484][ T52] ? __pfx_kobject_add+0x10/0x10 [ 672.045497][ T52] ? class_to_subsys+0x10f/0x150 [ 672.045512][ T52] ? kobject_put+0xb9/0x640 [ 672.045523][ T52] ? _raw_spin_unlock+0x28/0x50 [ 672.045548][ T52] device_add+0x294/0x1970 [ 672.045567][ T52] ? __pfx_dev_set_name+0x10/0x10 [ 672.045583][ T52] ? __pfx_device_add+0x10/0x10 [ 672.045600][ T52] ? find_held_lock+0x2b/0x80 [ 672.045617][ T52] ? hci_find_link_key+0x1a4/0x3c0 [ 672.045635][ T52] ? hci_find_link_key+0x1a4/0x3c0 [ 672.045658][ T52] hci_conn_add_sysfs+0x1a3/0x260 [ 672.045678][ T52] hci_conn_complete_evt+0x5bb/0x13f0 [ 672.045696][ T52] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 672.045711][ T52] ? __skb_clone+0x570/0x760 [ 672.045726][ T52] ? skb_pull_data+0x15f/0x1e0 [ 672.045739][ T52] hci_event_packet+0x8e9/0xcd0 [ 672.045755][ T52] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 672.045769][ T52] ? __pfx_hci_event_packet+0x10/0x10 [ 672.045787][ T52] ? lockdep_hardirqs_on+0x7d/0x110 [ 672.045807][ T52] hci_rx_work+0x451/0xfc0 [ 672.045824][ T52] process_one_work+0xac7/0x1b10 [ 672.045848][ T52] ? __pfx_process_one_work+0x10/0x10 [ 672.045872][ T52] ? __pfx_hci_rx_work+0x10/0x10 [ 672.045888][ T52] worker_thread+0x5ef/0xe50 [ 672.045911][ T52] ? kthread+0x13a/0x450 [ 672.045926][ T52] ? __pfx_worker_thread+0x10/0x10 [ 672.045942][ T52] kthread+0x373/0x450 [ 672.045957][ T52] ? __pfx_kthread+0x10/0x10 [ 672.045974][ T52] ret_from_fork+0x730/0xd60 [ 672.045988][ T52] ? __pfx_ret_from_fork+0x10/0x10 [ 672.046002][ T52] ? __switch_to+0x800/0x10f0 [ 672.046018][ T52] ? __pfx_kthread+0x10/0x10 [ 672.046035][ T52] ret_from_fork_asm+0x1a/0x30 [ 672.046055][ T52] [ 672.046117][ T52] kobject: kobject_add_internal failed for hci1:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 672.046151][ T52] Bluetooth: hci1: failed to register connection device [ 673.063156][T25056] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 673.119141][T25061] __nla_validate_parse: 4 callbacks suppressed [ 673.119180][T25061] netlink: 2036 bytes leftover after parsing attributes in process `syz.3.6505'. [ 673.119201][T25061] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6505'. [ 673.338229][T25066] fuse: fd is not a fuse device [ 674.084719][ T52] Bluetooth: hci1: command tx timeout [ 675.308505][T25121] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 675.585886][T25126] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6528'. [ 675.585927][T25126] netlink: 'syz.2.6528': attribute type 7 has an invalid length. [ 675.585953][T25126] netlink: 'syz.2.6528': attribute type 8 has an invalid length. [ 675.585962][T25126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6528'. [ 676.165680][ T52] Bluetooth: hci1: command tx timeout [ 677.125319][T25144] FAULT_INJECTION: forcing a failure. [ 677.125319][T25144] name failslab, interval 1, probability 0, space 0, times 0 [ 677.125372][T25144] CPU: 0 UID: 0 PID: 25144 Comm: syz.8.6534 Tainted: G L syzkaller #0 PREEMPT(full) [ 677.125393][T25144] Tainted: [L]=SOFTLOCKUP [ 677.125398][T25144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 677.125406][T25144] Call Trace: [ 677.125410][T25144] [ 677.125416][T25144] dump_stack_lvl+0x100/0x190 [ 677.125438][T25144] should_fail_ex.cold+0x5/0xa [ 677.125455][T25144] should_failslab+0xc2/0x120 [ 677.125470][T25144] kmem_cache_alloc_noprof+0x92/0x6a0 [ 677.125482][T25144] ? __asan_memcpy+0x3c/0x60 [ 677.125499][T25144] ? __kernfs_new_node+0xd2/0xa10 [ 677.125519][T25144] __kernfs_new_node+0xd2/0xa10 [ 677.125538][T25144] ? __pfx___kernfs_new_node+0x10/0x10 [ 677.125558][T25144] ? find_held_lock+0x2b/0x80 [ 677.125575][T25144] ? kernfs_root+0xee/0x2a0 [ 677.125588][T25144] ? kernfs_root+0xee/0x2a0 [ 677.125605][T25144] kernfs_create_dir_ns+0xa6/0x2b0 [ 677.125625][T25144] sysfs_create_dir_ns+0x13a/0x2b0 [ 677.125639][T25144] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 677.125652][T25144] ? find_held_lock+0x2b/0x80 [ 677.125667][T25144] ? kobject_add_internal+0x25f/0x930 [ 677.125681][T25144] ? kobject_add_internal+0x25f/0x930 [ 677.125695][T25144] ? do_raw_spin_unlock+0x145/0x1e0 [ 677.125711][T25144] kobject_add_internal+0x2c8/0x930 [ 677.125727][T25144] kobject_init_and_add+0x121/0x180 [ 677.125741][T25144] ? __pfx_kobject_init_and_add+0x10/0x10 [ 677.125754][T25144] ? rtnetlink_rcv_msg+0x95e/0xe90 [ 677.125772][T25144] ? ____sys_sendmsg+0xa4d/0xbe0 [ 677.125784][T25144] ? ___sys_sendmsg+0x190/0x1e0 [ 677.125796][T25144] ? __sys_sendmsg+0x160/0x210 [ 677.125811][T25144] ? do_syscall_64+0x123/0x790 [ 677.125826][T25144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.125844][T25144] netdev_queue_update_kobjects+0x32d/0x6f0 [ 677.125863][T25144] netdev_register_kobject+0x2e9/0x410 [ 677.125879][T25144] register_netdevice+0x15b6/0x25a0 [ 677.125900][T25144] ? __pfx_register_netdevice+0x10/0x10 [ 677.125922][T25144] bond_newlink+0x6a/0x100 [ 677.125939][T25144] ? __pfx_bond_newlink+0x10/0x10 [ 677.125954][T25144] rtnl_newlink+0x1697/0x2620 [ 677.125976][T25144] ? __pfx_rtnl_newlink+0x10/0x10 [ 677.125994][T25144] ? find_held_lock+0x2b/0x80 [ 677.126010][T25144] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 677.126024][T25144] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 677.126066][T25144] ? find_held_lock+0x2b/0x80 [ 677.126083][T25144] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 677.126101][T25144] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 677.126119][T25144] ? __pfx_rtnl_newlink+0x10/0x10 [ 677.126138][T25144] rtnetlink_rcv_msg+0x95e/0xe90 [ 677.126158][T25144] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 677.126180][T25144] ? ref_tracker_free+0x37e/0x6c0 [ 677.126202][T25144] netlink_rcv_skb+0x159/0x420 [ 677.126218][T25144] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 677.126237][T25144] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 677.126257][T25144] ? netlink_deliver_tap+0x1ae/0xcc0 [ 677.126274][T25144] netlink_unicast+0x585/0x850 [ 677.126291][T25144] ? __pfx_netlink_unicast+0x10/0x10 [ 677.126310][T25144] netlink_sendmsg+0x8b0/0xda0 [ 677.126327][T25144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 677.126343][T25144] ? selinux_socket_sendmsg+0x198/0x2f0 [ 677.126361][T25144] ____sys_sendmsg+0xa4d/0xbe0 [ 677.126372][T25144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 677.126388][T25144] ? __pfx_____sys_sendmsg+0x10/0x10 [ 677.126407][T25144] ___sys_sendmsg+0x190/0x1e0 [ 677.126421][T25144] ? __pfx____sys_sendmsg+0x10/0x10 [ 677.126434][T25144] ? futex_wait+0x11e/0x370 [ 677.126458][T25144] ? find_held_lock+0x2b/0x80 [ 677.126483][T25144] __sys_sendmsg+0x160/0x210 [ 677.126500][T25144] ? __pfx___sys_sendmsg+0x10/0x10 [ 677.126524][T25144] do_syscall_64+0x123/0x790 [ 677.126543][T25144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.126555][T25144] RIP: 0033:0x7fc02f39e0d9 [ 677.126567][T25144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.126578][T25144] RSP: 002b:00007fc03033f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 677.126591][T25144] RAX: ffffffffffffffda RBX: 00007fc02f625fa0 RCX: 00007fc02f39e0d9 [ 677.126599][T25144] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 677.126606][T25144] RBP: 00007fc02f435024 R08: 0000000000000000 R09: 0000000000000000 [ 677.126613][T25144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.126620][T25144] R13: 00007fc02f626038 R14: 00007fc02f625fa0 R15: 00007ffedf4549f8 [ 677.126636][T25144] [ 677.126722][T25144] kobject: kobject_add_internal failed for tx-15 (error: -12 parent: queues) [ 677.682278][T25144] bond1 (unregistered): Released all slaves [ 678.151266][T25156] vivid-000: disconnect [ 678.180542][T25155] vivid-000: reconnect [ 678.245515][ T5604] Bluetooth: hci1: command 0x0405 tx timeout [ 679.522131][T25177] netlink: 'syz.0.6545': attribute type 1 has an invalid length. [ 679.622244][T25177] 8021q: adding VLAN 0 to HW filter on device bond8 [ 679.786937][T25181] bond8: (slave gretap5): Enslaving as a backup interface with an up link [ 679.855971][T10123] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 679.889934][T25177] bond8: (slave dummy0): Enslaving as a backup interface with an up link [ 679.958121][T25177] netlink: 'syz.0.6545': attribute type 10 has an invalid length. [ 679.958154][T25177] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6545'. [ 679.985974][T10123] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 680.030414][T25177] dummy0: entered promiscuous mode [ 680.064227][T12468] bond8: (slave dummy0): link status up again after 0 ms [ 680.087847][T12468] bond8: (slave dummy0): link status up again after 0 ms [ 680.103183][T23215] bond8: (slave dummy0): link status up again after 0 ms [ 680.114343][T23215] bond8: Warning: Found an uninitialized port [ 680.123071][T23215] bond8: (slave dummy0): link status up again after 0 ms [ 680.141989][T25177] bond8: (slave dummy0): Releasing backup interface [ 680.169675][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.323243][ T5604] Bluetooth: hci1: command 0x0405 tx timeout [ 680.569731][T25196] overlayfs: failed to clone upperpath [ 681.314277][ T5338] usb 3-1: new low-speed USB device number 63 using dummy_hcd [ 681.475661][ T5338] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 681.497186][ T5338] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 681.497220][ T5338] usb 3-1: config 0 has no interface number 0 [ 681.497258][ T5338] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 681.497284][ T5338] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 681.497310][ T5338] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 681.497326][ T5338] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 681.497352][ T5338] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 681.497378][ T5338] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 681.497418][ T5338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.610798][ T5338] usb 3-1: config 0 descriptor?? [ 681.618634][T25209] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 681.618731][T25209] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 681.647519][ T5338] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 681.994651][ T5338] usb 3-1: USB disconnect, device number 63 [ 682.000858][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 682.030469][ T5338] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 682.345578][T25225] ldusb: No device or device unplugged -19 [ 682.390371][T25225] ldusb: No device or device unplugged -19 [ 682.390423][T25225] ldusb: No device or device unplugged -19 [ 682.390442][T25225] ldusb: No device or device unplugged -19 [ 682.404190][ T5604] Bluetooth: hci1: command 0x0405 tx timeout [ 683.164691][ T5338] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 683.323358][ T5338] usb 9-1: Using ep0 maxpacket: 16 [ 683.329439][ T5338] usb 9-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 683.349153][ T5338] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.349185][ T5338] usb 9-1: Product: syz [ 683.349212][ T5338] usb 9-1: Manufacturer: syz [ 683.349223][ T5338] usb 9-1: SerialNumber: syz [ 683.775096][T25245] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.775436][T25245] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.136881][T25245] bridge_slave_0: left allmulticast mode [ 684.148908][T25245] bridge_slave_0: left promiscuous mode [ 684.149083][T25245] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.227146][T25245] bridge_slave_1: left allmulticast mode [ 684.237055][T25245] bridge_slave_1: left promiscuous mode [ 684.249048][T25245] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.262703][T25256] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 684.379110][T25263] netlink: 'syz.2.6570': attribute type 10 has an invalid length. [ 684.483151][ T5604] Bluetooth: hci1: command 0x0405 tx timeout [ 684.545638][ T5338] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 684.553419][ T5338] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 684.597588][T25245] bond0: (slave bond_slave_0): Releasing backup interface [ 684.617608][T25245] bond0: (slave bond_slave_1): Releasing backup interface [ 684.641859][T25245] team0: Port device team_slave_0 removed [ 684.663815][T25245] team0: Port device team_slave_1 removed [ 684.676396][T25245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 684.688237][T25245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 684.702232][ T5338] usb 9-1: USB disconnect, device number 16 [ 684.710459][T25245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 684.728231][T25245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 684.791283][T25245] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 684.859162][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 685.013587][T25263] syz_tun: entered promiscuous mode [ 685.036782][T25263] bond1: (slave syz_tun): Removing an active aggregator [ 685.088112][T25263] bond1: (slave syz_tun): Releasing backup interface [ 685.114706][T25263] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 685.126917][T15382] syz5: Port: 1 Link DOWN [ 685.590494][T25276] binder: 25275:25276 ioctl c0306201 0 returned -14 [ 685.783529][ T5338] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 685.893040][T15385] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 685.933614][ T5338] usb 9-1: Using ep0 maxpacket: 16 [ 685.939733][ T5338] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 685.950303][ T5338] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.950346][ T5338] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.950366][ T5338] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 685.950425][ T5338] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.999126][ T5338] usb 9-1: config 0 descriptor?? [ 686.044711][T15385] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 686.055818][T15385] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 686.055863][T15385] usb 4-1: can't read configurations, error -61 [ 686.193137][T15385] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 686.286458][ T5338] usbhid 9-1:0.0: can't add hid device: -71 [ 686.292792][ T5338] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 686.310120][ T5338] usb 9-1: USB disconnect, device number 17 [ 686.345230][T15385] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 686.358144][T15385] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 686.358194][T15385] usb 4-1: can't read configurations, error -61 [ 686.358357][T15385] usb usb4-port1: attempt power cycle [ 686.563992][ T52] Bluetooth: hci1: command 0x0405 tx timeout [ 686.713097][T15385] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 686.747138][T15385] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 686.761158][T15385] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 686.761194][T15385] usb 4-1: can't read configurations, error -61 [ 686.904661][T15385] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 686.931275][T15385] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 686.943353][T15385] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 686.943395][T15385] usb 4-1: can't read configurations, error -61 [ 686.943580][T15385] usb usb4-port1: unable to enumerate USB device [ 687.000409][T25294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6582'. [ 687.000443][T25294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6582'. [ 687.046187][ T5701] hid-generic 0006:0008:0008.004D: unknown main item tag 0x0 [ 687.054374][ T5701] hid-generic 0006:0008:0008.004D: unknown main item tag 0x0 [ 687.062702][ T5701] hid-generic 0006:0008:0008.004D: unknown main item tag 0x0 [ 687.076328][ T5701] hid-generic 0006:0008:0008.004D: unknown main item tag 0x0 [ 687.086005][ T5701] hid-generic 0006:0008:0008.004D: unknown main item tag 0x0 [ 687.094551][ T5701] hid-generic 0006:0008:0008.004D: unknown main item tag 0x0 [ 687.102416][ T5701] hid-generic 0006:0008:0008.004D: unknown main item tag 0x0 [ 687.102439][ T5701] hid-generic 0006:0008:0008.004D: unknown main item tag 0x0 [ 687.102452][ T5701] hid-generic 0006:0008:0008.004D: unknown main item tag 0x0 [ 687.102474][ T5701] hid-generic 0006:0008:0008.004D: unknown main item tag 0x0 [ 687.140801][ T5701] hid-generic 0006:0008:0008.004D: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 687.267189][T25296] fido_id[25296]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 687.428002][ T31] audit: type=1326 audit(28800.110:4343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25302 comm="syz.8.6585" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc02f39e0d9 code=0x0 [ 690.061661][T25353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6602'. [ 690.061696][T25353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6602'. [ 690.107505][ T31] audit: type=1804 audit(28802.790:4344): pid=25354 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.6601" name="/newroot/181/file0" dev="tmpfs" ino=957 res=1 errno=0 [ 690.967253][T25367] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6607'. [ 690.967287][T25367] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6607'. [ 690.967456][T25367] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6607'. [ 690.967476][T25367] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6607'. [ 691.032536][T25361] Process accounting resumed [ 691.594674][ T5338] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 691.747587][ T31] audit: type=1400 audit(28804.430:4345): avc: denied { unmount } for pid=23669 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 691.772332][ T5338] usb 9-1: Using ep0 maxpacket: 16 [ 691.778464][ T5338] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 691.796502][ T5338] usb 9-1: config 0 has an invalid interface number: 68 but max is 0 [ 691.796534][ T5338] usb 9-1: config 0 has no interface number 0 [ 691.796570][ T5338] usb 9-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.845033][ T5338] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.845067][ T5338] usb 9-1: Product: syz [ 691.845083][ T5338] usb 9-1: Manufacturer: syz [ 691.845104][ T5338] usb 9-1: SerialNumber: syz [ 691.880236][ T5338] usb 9-1: config 0 descriptor?? [ 692.067276][ T5338] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 692.229790][T12457] usb 9-1: Failed to submit usb control message: -71 [ 692.229837][T12457] usb 9-1: unable to send the bmi data to the device: -71 [ 692.229856][T12457] usb 9-1: unable to get target info from device [ 692.229876][T12457] usb 9-1: could not get target info (-71) [ 692.230086][T12457] usb 9-1: could not probe fw (-71) [ 692.305059][T15385] usb 9-1: USB disconnect, device number 18 [ 693.326212][T25407] Process accounting resumed [ 693.743222][ T5701] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 693.914951][ T5701] usb 3-1: New USB device found, idVendor=05c6, idProduct=9215, bcdDevice= 0.00 [ 693.936465][ T5701] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 693.936498][ T5701] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 5 [ 693.936527][ T5701] usb 3-1: config 1 has no interface number 0 [ 693.936557][ T5701] usb 3-1: config 1 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 693.983187][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 693.983221][ T5701] usb 3-1: Product: syz [ 693.983247][ T5701] usb 3-1: Manufacturer: syz [ 694.031593][ T5701] qmi_wwan 3-1:1.4: probe with driver qmi_wwan failed with error -22 [ 694.178756][T25429] fuse: fd is not a fuse device [ 694.325026][T15385] usb 3-1: USB disconnect, device number 64 [ 694.578783][T25435] binder: 25434:25435 ioctl c0306201 0 returned -14 [ 694.663100][ T5701] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 694.823520][ T5701] usb 4-1: Using ep0 maxpacket: 32 [ 694.829410][ T5701] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 694.842644][ T5701] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 694.842681][ T5701] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 694.842704][ T5701] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 694.842738][ T5701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 694.842753][ T5701] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 694.842777][ T5701] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 694.842811][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.926209][ T5701] usb 4-1: config 0 descriptor?? [ 695.152058][ T5701] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 58 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 695.492517][ T5701] usb 4-1: USB disconnect, device number 58 [ 695.513962][ T5701] usblp0: removed [ 695.702779][T25451] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6636'. [ 695.773588][T10123] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.782805][T10123] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.783800][T12468] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.783831][T12468] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.892009][T25451] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6636'. [ 697.223248][ T5701] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 697.274821][ T5338] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 697.386704][ T5701] usb 9-1: Using ep0 maxpacket: 16 [ 697.395023][ T5701] usb 9-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 697.413235][ T5701] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 697.413277][ T5701] usb 9-1: config 0 interface 0 has no altsetting 0 [ 697.434944][ T5701] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.434976][ T5701] usb 9-1: Product: syz [ 697.435002][ T5701] usb 9-1: Manufacturer: syz [ 697.435013][ T5701] usb 9-1: SerialNumber: syz [ 697.451300][ T5338] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=32.4c [ 697.473210][ T5338] usb 4-1: config 34 has an invalid interface number: 116 but max is 0 [ 697.473243][ T5338] usb 4-1: config 34 has no interface number 0 [ 697.473276][ T5338] usb 4-1: config 34 interface 116 has no altsetting 0 [ 697.497213][ T5701] usb 9-1: config 0 descriptor?? [ 697.518499][ T5338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.518532][ T5338] usb 4-1: Product: syz [ 697.518558][ T5338] usb 4-1: Manufacturer: syz [ 697.518568][ T5338] usb 4-1: SerialNumber: syz [ 697.799681][ C0] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 697.822200][T25460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.822537][T25460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.968321][ T5338] comedi comedi5: could not set alternate setting 3 in high speed [ 697.968354][ T5338] usbdux 4-1:34.116: driver 'usbdux' failed to auto-configure device. [ 697.994167][ T5701] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input73 [ 698.011186][ T5338] usbdux 4-1:34.116: probe with driver usbdux failed with error -71 [ 698.055783][ T5338] usb 4-1: USB disconnect, device number 59 [ 698.203083][ T5701] imon:send_packet: packet tx failed (-71) [ 698.225594][ T5701] imon 9-1:0.0: panel buttons/knobs setup failed [ 698.363973][ T5701] rc_core: IR keymap rc-imon-pad not found [ 698.364004][ T5701] Registered IR keymap rc-empty [ 698.364065][ T5701] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 698.364078][ T5701] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 698.377713][ T5701] imon:send_packet: packet tx failed (-71) [ 698.400277][ T5701] imon 9-1:0.0: remote input dev register failed [ 698.400376][ T5701] imon 9-1:0.0: imon_init_intf0: rc device setup failed [ 698.622164][ T5701] imon 9-1:0.0: unable to initialize intf0, err 0 [ 698.633784][ T5701] imon:imon_probe: failed to initialize context! [ 698.640605][ T5701] imon 9-1:0.0: unable to register, err -19 [ 698.664374][ T5701] usb 9-1: USB disconnect, device number 19 [ 698.761679][T25479] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 698.983088][ T5701] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 699.023913][T25488] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 699.134297][ T5701] usb 9-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 699.158455][ T5701] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 699.170276][ T5701] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 699.170295][ T5701] usb 9-1: config 0 interface 0 has no altsetting 0 [ 699.197616][ T5701] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.197651][ T5701] usb 9-1: Product: syz [ 699.197677][ T5701] usb 9-1: Manufacturer: syz [ 699.197688][ T5701] usb 9-1: SerialNumber: syz [ 699.236537][ T5701] usb 9-1: config 0 descriptor?? [ 699.252311][T25459] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 699.567170][ C0] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 699.635933][ T5701] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input75 [ 700.046131][ T5701] rc_core: IR keymap rc-imon-pad not found [ 700.046162][ T5701] Registered IR keymap rc-empty [ 700.046759][ T5701] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 700.046784][ T5701] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 700.126740][ T5701] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 700.180023][ T5701] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input76 [ 700.288563][ T5701] imon 9-1:0.0: iMON device (15c2:0045, intf0) on usb<9:20> initialized [ 700.590522][T25459] imon:lcd_write: invalid payload size: 0 (expected 8) [ 700.783758][T25516] netlink: 'syz.0.6658': attribute type 39 has an invalid length. [ 700.987621][T25521] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 701.191052][T25527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6662'. [ 701.244570][T10122] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.244624][T10122] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.244661][T10122] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.244694][T10122] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.326955][T25527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6662'. [ 701.327392][T25527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6662'. [ 701.404181][T25529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6663'. [ 702.731198][T15382] usb 9-1: USB disconnect, device number 20 [ 703.135291][T25549] netlink: 'syz.2.6670': attribute type 11 has an invalid length. [ 703.135323][T25549] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6670'. [ 703.322677][T25556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6672'. [ 703.375329][T21540] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.375373][T21540] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.375420][T21540] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.375441][T21540] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.426117][T25556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6672'. [ 703.787458][T15382] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 703.851887][T25562] syzkaller1: entered promiscuous mode [ 703.851925][T25562] syzkaller1: entered allmulticast mode [ 703.944426][T15382] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=32.4c [ 703.956095][T15382] usb 3-1: config 34 has an invalid interface number: 116 but max is 0 [ 703.956127][T15382] usb 3-1: config 34 has no interface number 0 [ 703.956158][T15382] usb 3-1: config 34 interface 116 has no altsetting 0 [ 703.988382][T15382] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.988415][T15382] usb 3-1: Product: syz [ 703.988441][T15382] usb 3-1: Manufacturer: syz [ 703.988452][T15382] usb 3-1: SerialNumber: syz [ 704.047579][ T31] audit: type=1800 audit(28816.730:4346): pid=25554 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.6671" name="/" dev="fuse" ino=4 res=0 errno=0 [ 704.283503][T25560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.283855][T25560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.369422][T15382] comedi comedi5: could not set alternate setting 3 in high speed [ 704.369458][T15382] usbdux 3-1:34.116: driver 'usbdux' failed to auto-configure device. [ 704.391602][T15382] usbdux 3-1:34.116: probe with driver usbdux failed with error -71 [ 704.410242][T15382] usb 3-1: USB disconnect, device number 65 [ 704.779821][ T31] audit: type=1400 audit(28817.460:4347): avc: denied { write } for pid=25567 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 705.094073][ T31] audit: type=1400 audit(28817.780:4348): avc: denied { write } for pid=25593 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 705.209323][T25599] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6684'. [ 705.382493][T25604] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6685'. [ 705.382555][T25604] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6685'. [ 705.394517][ T5701] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 705.556185][ T5701] usb 3-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 705.568489][ T5701] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 705.568530][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.599361][T25596] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 705.619624][ T5701] opticon 3-1:1.0: opticon converter detected [ 705.646139][ T5701] usb 3-1: opticon converter now attached to ttyUSB0 [ 706.198974][T25606] __nla_validate_parse: 8 callbacks suppressed [ 706.199060][T25606] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6685'. [ 706.199100][T25606] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6685'. [ 706.632728][T25620] Process accounting resumed [ 706.874141][ T31] audit: type=1400 audit(28819.550:4349): avc: denied { write } for pid=25600 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 707.494655][ T31] audit: type=1400 audit(28820.180:4350): avc: denied { write } for pid=25645 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 707.643356][T15382] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 707.796165][T15382] usb 9-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=32.4c [ 707.816091][T15382] usb 9-1: config 34 has an invalid interface number: 116 but max is 0 [ 707.816191][T15382] usb 9-1: config 34 has no interface number 0 [ 707.816223][T15382] usb 9-1: config 34 interface 116 has no altsetting 0 [ 707.868096][T15382] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.868188][T15382] usb 9-1: Product: syz [ 707.868215][T15382] usb 9-1: Manufacturer: syz [ 707.868226][T15382] usb 9-1: SerialNumber: syz [ 708.071066][ T5701] usb 3-1: USB disconnect, device number 66 [ 708.114946][ T5701] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 708.124877][ T5701] opticon 3-1:1.0: device disconnected [ 708.204640][T25649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.214884][T25649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.282168][T15382] comedi comedi5: could not set alternate setting 3 in high speed [ 708.282200][T15382] usbdux 9-1:34.116: driver 'usbdux' failed to auto-configure device. [ 708.304547][T15382] usbdux 9-1:34.116: probe with driver usbdux failed with error -71 [ 708.378860][T15382] usb 9-1: USB disconnect, device number 21 [ 708.627840][T25669] orangefs_devreq_open: device cannot be opened in blocking mode [ 708.647253][T25671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 708.732637][T25667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 708.802606][T25671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 709.390644][T25688] ceph: No mds server is up or the cluster is laggy [ 709.501167][T25693] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 709.521660][T25696] sch_tbf: burst 4233 is lower than device lo mtu (65550) ! [ 709.715937][T25699] netlink: 'syz.0.6713': attribute type 1 has an invalid length. [ 709.789079][T25699] 8021q: adding VLAN 0 to HW filter on device bond9 [ 710.028920][T25703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6714'. [ 710.039424][T25703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6714'. [ 710.798520][T25718] tipc: Enabled bearer , priority 0 [ 710.833615][T25718] syzkaller0: MTU too low for tipc bearer [ 710.839758][T25718] tipc: Disabling bearer [ 710.908571][T25721] netlink: 'syz.8.6720': attribute type 3 has an invalid length. [ 710.908604][T25721] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6720'. [ 710.947885][T25712] Process accounting resumed [ 711.137378][T25724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6721'. [ 713.719486][ T31] audit: type=1400 audit(28826.390:4351): avc: denied { setopt } for pid=25756 comm="syz.8.6733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 714.023085][T15382] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 714.186092][T15382] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 714.198083][T15382] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 714.198120][T15382] usb 4-1: config 0 interface 0 has no altsetting 0 [ 714.219180][T15382] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 714.219212][T15382] usb 4-1: Product: syz [ 714.219238][T15382] usb 4-1: Manufacturer: syz [ 714.219249][T15382] usb 4-1: SerialNumber: syz [ 714.245602][T15382] usb 4-1: config 0 descriptor?? [ 714.270440][T15382] usb 4-1: selecting invalid altsetting 0 [ 714.359313][ T31] audit: type=1400 audit(28827.040:4352): avc: denied { write } for pid=25772 comm="syz.8.6739" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 714.786514][T15382] usb 4-1: USB disconnect, device number 60 [ 715.738169][T25794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6745'. [ 716.582373][ T5604] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 716.585099][ T5604] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:200' [ 716.595325][ T5604] CPU: 0 UID: 0 PID: 5604 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 716.595349][ T5604] Tainted: [L]=SOFTLOCKUP [ 716.595355][ T5604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 716.595364][ T5604] Workqueue: hci0 hci_rx_work [ 716.595383][ T5604] Call Trace: [ 716.595388][ T5604] [ 716.595394][ T5604] dump_stack_lvl+0x100/0x190 [ 716.595414][ T5604] sysfs_warn_dup.cold+0x1c/0x28 [ 716.595433][ T5604] sysfs_create_dir_ns+0x24b/0x2b0 [ 716.595448][ T5604] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 716.595462][ T5604] ? find_held_lock+0x2b/0x80 [ 716.595479][ T5604] ? kobject_add_internal+0x25f/0x930 [ 716.595493][ T5604] ? kobject_add_internal+0x25f/0x930 [ 716.595507][ T5604] ? do_raw_spin_unlock+0x145/0x1e0 [ 716.595524][ T5604] kobject_add_internal+0x2c8/0x930 [ 716.595541][ T5604] kobject_add+0x16a/0x1e0 [ 716.595554][ T5604] ? __pfx_kobject_add+0x10/0x10 [ 716.595566][ T5604] ? class_to_subsys+0x10f/0x150 [ 716.595580][ T5604] ? kobject_put+0xb9/0x640 [ 716.595592][ T5604] ? _raw_spin_unlock+0x28/0x50 [ 716.595610][ T5604] device_add+0x294/0x1970 [ 716.595629][ T5604] ? __pfx_dev_set_name+0x10/0x10 [ 716.595642][ T5604] ? __pfx_device_add+0x10/0x10 [ 716.595659][ T5604] ? find_held_lock+0x2b/0x80 [ 716.595675][ T5604] ? hci_find_link_key+0x1a4/0x3c0 [ 716.595692][ T5604] ? hci_find_link_key+0x1a4/0x3c0 [ 716.595713][ T5604] hci_conn_add_sysfs+0x1a3/0x260 [ 716.595732][ T5604] hci_conn_complete_evt+0x5bb/0x13f0 [ 716.595748][ T5604] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 716.595763][ T5604] ? __skb_clone+0x570/0x760 [ 716.595779][ T5604] ? skb_pull_data+0x15f/0x1e0 [ 716.595793][ T5604] hci_event_packet+0x8e9/0xcd0 [ 716.595808][ T5604] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 716.595822][ T5604] ? __pfx_hci_event_packet+0x10/0x10 [ 716.595840][ T5604] ? lockdep_hardirqs_on+0x7d/0x110 [ 716.595860][ T5604] hci_rx_work+0x451/0xfc0 [ 716.595877][ T5604] process_one_work+0xac7/0x1b10 [ 716.595902][ T5604] ? irqentry_exit+0x24d/0xa10 [ 716.595919][ T5604] ? __pfx_process_one_work+0x10/0x10 [ 716.595942][ T5604] ? __pfx_hci_rx_work+0x10/0x10 [ 716.595959][ T5604] worker_thread+0x5ef/0xe50 [ 716.595980][ T5604] ? __pfx_worker_thread+0x10/0x10 [ 716.595998][ T5604] ? kthread+0x13a/0x450 [ 716.596013][ T5604] ? __pfx_worker_thread+0x10/0x10 [ 716.596029][ T5604] kthread+0x373/0x450 [ 716.596044][ T5604] ? __pfx_kthread+0x10/0x10 [ 716.596068][ T5604] ret_from_fork+0x730/0xd60 [ 716.596083][ T5604] ? __pfx_ret_from_fork+0x10/0x10 [ 716.596097][ T5604] ? rcu_is_watching+0x13/0xc0 [ 716.596113][ T5604] ? __switch_to+0x800/0x10f0 [ 716.596130][ T5604] ? __pfx_kthread+0x10/0x10 [ 716.596148][ T5604] ret_from_fork_asm+0x1a/0x30 [ 716.596168][ T5604] [ 716.596281][ T5604] kobject: kobject_add_internal failed for hci0:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 716.596314][ T5604] Bluetooth: hci0: failed to register connection device [ 717.529399][T15382] hid_parser_main: 7 callbacks suppressed [ 717.537068][T15382] hid-generic 0006:0008:0008.004E: unknown main item tag 0x0 [ 717.548181][T15382] hid-generic 0006:0008:0008.004E: unknown main item tag 0x0 [ 717.548218][T15382] hid-generic 0006:0008:0008.004E: unknown main item tag 0x0 [ 717.548243][T15382] hid-generic 0006:0008:0008.004E: unknown main item tag 0x0 [ 717.548257][T15382] hid-generic 0006:0008:0008.004E: unknown main item tag 0x0 [ 717.548281][T15382] hid-generic 0006:0008:0008.004E: unknown main item tag 0x0 [ 717.548304][T15382] hid-generic 0006:0008:0008.004E: unknown main item tag 0x0 [ 717.548318][T15382] hid-generic 0006:0008:0008.004E: unknown main item tag 0x0 [ 717.548341][T15382] hid-generic 0006:0008:0008.004E: unknown main item tag 0x0 [ 717.548355][T15382] hid-generic 0006:0008:0008.004E: unknown main item tag 0x0 [ 717.627478][T15382] hid-generic 0006:0008:0008.004E: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 717.719708][T25825] fido_id[25825]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 718.057216][ T5701] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 718.215503][ T5701] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 718.230689][ T5701] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 718.230727][ T5701] usb 3-1: config 0 interface 0 has no altsetting 0 [ 718.268025][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 718.268060][ T5701] usb 3-1: Product: syz [ 718.268091][ T5701] usb 3-1: Manufacturer: syz [ 718.268111][ T5701] usb 3-1: SerialNumber: syz [ 718.299715][ T5701] usb 3-1: config 0 descriptor?? [ 718.327011][ T5701] usb 3-1: selecting invalid altsetting 0 [ 718.644670][ T52] Bluetooth: hci0: command tx timeout [ 718.653158][T15382] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 718.848370][ T5701] usb 3-1: USB disconnect, device number 67 [ 718.863172][T15382] usb 4-1: Using ep0 maxpacket: 16 [ 718.880101][T15382] usb 4-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 718.903086][T15382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.911447][T15382] usb 4-1: Product: syz [ 718.911470][T15382] usb 4-1: Manufacturer: syz [ 718.911480][T15382] usb 4-1: SerialNumber: syz [ 719.494570][T15382] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 719.504613][T15382] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 719.580939][T15382] usb 4-1: USB disconnect, device number 61 [ 719.655205][ T5592] udevd[5592]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 720.239107][ T31] audit: type=1326 audit(28833.918:4353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25860 comm="syz.2.6769" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5879e0d9 code=0x7ffc0000 [ 720.268149][ T31] audit: type=1326 audit(28833.958:4354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25860 comm="syz.2.6769" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5879e0d9 code=0x7ffc0000 [ 720.299996][ T31] audit: type=1326 audit(28833.988:4355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25860 comm="syz.2.6769" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5879e0d9 code=0x7ffc0000 [ 720.300056][ T31] audit: type=1326 audit(28833.988:4356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25860 comm="syz.2.6769" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5879e0d9 code=0x7ffc0000 [ 720.360232][ T31] audit: type=1326 audit(28834.048:4357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25860 comm="syz.2.6769" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b5875e90e code=0x7ffc0000 [ 720.390274][ T31] audit: type=1326 audit(28834.078:4358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25860 comm="syz.2.6769" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3b5879e0d9 code=0x7ffc0000 [ 720.421923][ T31] audit: type=1326 audit(28834.108:4359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25860 comm="syz.2.6769" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b5875e90e code=0x7ffc0000 [ 720.457504][ T31] audit: type=1326 audit(28834.138:4360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25860 comm="syz.2.6769" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b5875e90e code=0x7ffc0000 [ 720.496856][ T31] audit: type=1326 audit(28834.178:4361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25860 comm="syz.2.6769" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b5875e90e code=0x7ffc0000 [ 720.531376][ T31] audit: type=1326 audit(28834.208:4362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25860 comm="syz.2.6769" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b5875e90e code=0x7ffc0000 [ 720.647767][T25868] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6770'. [ 720.658277][T25868] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6770'. [ 720.723753][ T52] Bluetooth: hci0: command tx timeout [ 720.748233][T25868] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6770'. [ 720.758787][T25868] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6770'. [ 720.786158][T25873] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6770'. [ 720.786220][T25873] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6770'. [ 720.909073][T25873] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6770'. [ 720.909136][T25873] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6770'. [ 721.079428][T25868] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6770'. [ 721.079479][T25868] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6770'. [ 721.171642][T25873] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6770'. [ 721.171703][T25873] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6770'. [ 721.462481][T25867] ceph: No mds server is up or the cluster is laggy [ 722.804467][ T52] Bluetooth: hci0: command tx timeout [ 723.037712][T15385] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 723.238185][T15385] usb 4-1: New USB device found, idVendor=07c4, idProduct=a000, bcdDevice= 0.01 [ 723.259776][T15385] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.259809][T15385] usb 4-1: Product: syz [ 723.259825][T15385] usb 4-1: Manufacturer: syz [ 723.259845][T15385] usb 4-1: SerialNumber: syz [ 723.273215][T15385] ums-datafab 4-1:1.0: USB Mass Storage device detected [ 723.341894][T15385] ums-datafab 4-1:1.0: This device (07c4,a000,0001 S 06 P f2) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 723.341894][T15385] Please send a copy of this message to and [ 723.386902][T15385] scsi host1: usb-storage 4-1:1.0 [ 723.710186][T15385] usb 4-1: USB disconnect, device number 62 [ 724.884478][ T52] Bluetooth: hci0: command tx timeout [ 725.564689][T25950] team0 (unregistering): Port device bridge1 removed [ 726.028149][T25961] netlink: 'syz.8.6801': attribute type 39 has an invalid length. [ 726.269719][T25966] netlink: 'syz.8.6803': attribute type 11 has an invalid length. [ 726.286724][T25967] erspan0: entered promiscuous mode [ 726.292392][T25967] __nla_validate_parse: 12 callbacks suppressed [ 726.299263][T25967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6802'. [ 726.963340][ T52] Bluetooth: hci0: command tx timeout [ 727.134918][T15382] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 727.293921][T15382] usb 9-1: Using ep0 maxpacket: 16 [ 727.300921][T15382] usb 9-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 727.312263][T15382] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 727.312307][T15382] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.337814][T15382] usb 9-1: config 0 descriptor?? [ 727.472103][T25987] netlink: 'syz.4.6810': attribute type 13 has an invalid length. [ 727.786005][T15382] hid (null): global environment stack underflow [ 727.786036][T15382] hid (null): unknown global tag 0xc [ 727.786063][T15382] hid (null): bogus close delimiter [ 727.786093][T15382] hid (null): report_id 18220 is invalid [ 727.786112][T15382] hid (null): unknown global tag 0xc [ 727.786132][T15382] hid (null): bogus close delimiter [ 727.786141][T15382] hid (null): unknown global tag 0xd [ 727.786161][T15382] hid (null): unknown global tag 0xc [ 727.854810][T15382] hid_parser_main: 7 callbacks suppressed [ 727.863857][T15382] nzxt-kraken2 0003:1E71:170E.004F: unknown main item tag 0x0 [ 727.863905][T15382] nzxt-kraken2 0003:1E71:170E.004F: unknown main item tag 0x0 [ 727.863951][T15382] nzxt-kraken2 0003:1E71:170E.004F: unknown main item tag 0x0 [ 727.863967][T15382] nzxt-kraken2 0003:1E71:170E.004F: unknown main item tag 0x0 [ 727.863993][T15382] nzxt-kraken2 0003:1E71:170E.004F: unknown main item tag 0x0 [ 727.864017][T15382] nzxt-kraken2 0003:1E71:170E.004F: unknown main item tag 0x0 [ 727.864034][T15382] nzxt-kraken2 0003:1E71:170E.004F: unknown main item tag 0x1 [ 727.864060][T15382] nzxt-kraken2 0003:1E71:170E.004F: unknown main item tag 0x1 [ 727.864085][T15382] nzxt-kraken2 0003:1E71:170E.004F: unknown main item tag 0x3 [ 727.864100][T15382] nzxt-kraken2 0003:1E71:170E.004F: unknown main item tag 0x2 [ 727.864124][T15382] nzxt-kraken2 0003:1E71:170E.004F: global environment stack underflow [ 727.864145][T15382] nzxt-kraken2 0003:1E71:170E.004F: item 0 2 1 11 parsing failed [ 727.864558][T15382] nzxt-kraken2 0003:1E71:170E.004F: hid parse failed with -22 [ 727.864622][T15382] nzxt-kraken2 0003:1E71:170E.004F: probe with driver nzxt-kraken2 failed with error -22 [ 728.035626][T15382] usb 9-1: USB disconnect, device number 22 [ 728.447631][T25993] syzkaller0: entered promiscuous mode [ 728.453585][T25993] syzkaller0: entered allmulticast mode [ 729.092690][ T31] kauditd_printk_skb: 87 callbacks suppressed [ 729.092724][ T31] audit: type=1400 audit(28842.768:4450): avc: denied { map } for pid=26004 comm="syz.2.6817" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 729.149378][ T31] audit: type=1400 audit(28842.828:4451): avc: denied { call } for pid=26004 comm="syz.2.6817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 729.422222][T26012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6820'. [ 729.547197][T26018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6821'. [ 729.586292][T26016] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 729.608215][T26016] bond3 (unregistering): Released all slaves [ 731.301121][T26043] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6830'. [ 735.047326][T26099] netlink: 'syz.8.6849': attribute type 13 has an invalid length. [ 735.101308][T26097] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 737.422630][ T31] audit: type=1326 audit(28851.098:4452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26132 comm="syz.0.6864" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f721b79e0d9 code=0x0 [ 737.475331][ T31] audit: type=1400 audit(28851.158:4453): avc: denied { write } for pid=26137 comm="syz.8.6865" name="functions" dev="configfs" ino=8519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 737.830494][T26143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.093549][ T31] audit: type=1800 audit(28851.768:4454): pid=26138 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.6863" name="/" dev="fuse" ino=1 res=0 errno=0 [ 738.380181][T26157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6871'. [ 738.380215][T26157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6871'. [ 738.702761][T26161] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 738.702795][T26161] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 739.422892][T26167] netlink: 'syz.4.6874': attribute type 1 has an invalid length. [ 739.433348][T15382] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 739.441601][T26167] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.6874'. [ 739.605804][T15382] usb 9-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 739.625330][T15382] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.625365][T15382] usb 9-1: Product: syz [ 739.625381][T15382] usb 9-1: Manufacturer: syz [ 739.625402][T15382] usb 9-1: SerialNumber: syz [ 739.667609][T15382] usb 9-1: NFC: intf ffff88804d57a000 id ffffffff8fe88480 [ 740.038692][T15382] nfcmrvl 9-1:1.0: NFC: registered with nci successfully [ 740.059329][ T5604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 740.071459][ T5604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 740.079979][ T5604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 740.099114][ T5604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 740.107111][ T5604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 740.317398][T23218] nfcmrvl 9-1:1.0: NFC: send entry, len 4 [ 740.651300][T26188] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6879'. [ 741.616880][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 741.647278][T21540] bridge_slave_1: left allmulticast mode [ 741.655862][T21540] bridge_slave_1: left promiscuous mode [ 741.658974][T21540] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.702737][T21540] bridge_slave_0: left allmulticast mode [ 741.711325][T21540] bridge_slave_0: left promiscuous mode [ 741.711517][T21540] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.242735][T26164] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 742.256377][ C0] nfcmrvl 9-1:1.0: NFC: urb ffff8880756b1a00 status -2 count 0 [ 742.281239][ T5604] Bluetooth: hci5: command tx timeout [ 742.338815][ T5338] usb 9-1: USB disconnect, device number 23 [ 742.340242][ T5338] usb 9-1: NFC: intf ffff88804d57a000 [ 743.156566][T21540] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 743.166947][T21540] bridge1 (unregistering): left promiscuous mode [ 743.186420][T21540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 743.199641][T21540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 743.209545][T21540] bond0 (unregistering): Released all slaves [ 743.226390][T21540] bond1 (unregistering): Released all slaves [ 743.384831][T26214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.392850][T26214] 8021q: adding VLAN 0 to HW filter on device team0 [ 743.409689][T26214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.458861][T26214] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 743.683361][ T5604] Bluetooth: hci0: command 0x0406 tx timeout [ 744.074188][T26229] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 744.119119][T26229] syzkaller0: entered promiscuous mode [ 744.119152][T26229] syzkaller0: entered allmulticast mode [ 744.208697][ T31] audit: type=1326 audit(28857.888:4455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26237 comm="syz.4.6892" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4a32f9e0d9 code=0x0 [ 744.242714][T21540] hsr_slave_0: left promiscuous mode [ 744.249807][T21540] hsr_slave_1: left promiscuous mode [ 744.256316][T21540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.265981][T21540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.334187][ T52] Bluetooth: hci5: command tx timeout [ 744.588161][T26247] netlink: 'syz.0.6895': attribute type 1 has an invalid length. [ 744.666231][T21540] team0 (unregistering): Port device team_slave_1 removed [ 744.696343][T21540] team0 (unregistering): Port device team_slave_0 removed [ 744.768269][T26250] netlink: 'syz.0.6895': attribute type 10 has an invalid length. [ 744.778077][T26250] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6895'. [ 744.940099][T21540] smc: removing net device lo with user defined pnetid SYZ0 [ 745.120217][T26247] 8021q: adding VLAN 0 to HW filter on device bond10 [ 745.184108][T26248] bond10: (slave gretap6): making interface the new active one [ 745.221881][T26248] bond10: (slave gretap6): Enslaving as an active interface with an up link [ 745.231387][T26249] dummy0: left promiscuous mode [ 745.265385][T26249] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 745.292183][T26250] dummy0: entered promiscuous mode [ 745.308965][T26250] bond10: (slave dummy0): Releasing active interface [ 745.652825][T15382] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 745.691175][T21540] IPVS: stop unused estimator thread 0... [ 745.834123][T15382] usb 3-1: Using ep0 maxpacket: 8 [ 745.844997][T15382] usb 3-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 745.863470][T15382] usb 3-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 19, changing to 8 [ 745.863508][T15382] usb 3-1: config 0 interface 0 has no altsetting 0 [ 745.863541][T15382] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.893420][T15382] usb 3-1: config 0 descriptor?? [ 746.064540][ T31] audit: type=1400 audit(28859.748:4456): avc: denied { append } for pid=26271 comm="syz.4.6902" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 746.135036][T26272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 746.146434][T26178] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.154306][T26178] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.162029][T26178] bridge_slave_0: entered allmulticast mode [ 746.171901][T26178] bridge_slave_0: entered promiscuous mode [ 746.183393][T26178] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.183469][T26178] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.183571][T26178] bridge_slave_1: entered allmulticast mode [ 746.209090][T26178] bridge_slave_1: entered promiscuous mode [ 746.306878][T26178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.335107][T26178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.350514][ T31] audit: type=1800 audit(28860.038:4457): pid=26256 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.6897" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 746.403353][ T52] Bluetooth: hci5: command tx timeout [ 746.433263][T15382] lenovo 0003:17EF:6067.0050: unknown main item tag 0x0 [ 746.440628][T15382] lenovo 0003:17EF:6067.0050: unknown main item tag 0x0 [ 746.448235][T15382] lenovo 0003:17EF:6067.0050: unknown main item tag 0x0 [ 746.455743][T15382] lenovo 0003:17EF:6067.0050: unknown main item tag 0x0 [ 746.463154][T15382] lenovo 0003:17EF:6067.0050: unknown main item tag 0x0 [ 746.470579][T15382] lenovo 0003:17EF:6067.0050: unknown main item tag 0x0 [ 746.479862][T15382] lenovo 0003:17EF:6067.0050: unknown main item tag 0x0 [ 746.487680][T15382] lenovo 0003:17EF:6067.0050: unknown main item tag 0x0 [ 746.487701][T15382] lenovo 0003:17EF:6067.0050: unknown main item tag 0x0 [ 746.487725][T15382] lenovo 0003:17EF:6067.0050: unknown main item tag 0x0 [ 746.524022][T15382] lenovo 0003:17EF:6067.0050: hidraw0: USB HID v0.7b Device [HID 17ef:6067] on usb-dummy_hcd.2-1/input0 [ 746.571537][T26178] team0: Port device team_slave_0 added [ 746.592769][T26178] team0: Port device team_slave_1 added [ 746.665070][T26178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.672442][T26178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.672469][T26178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.717491][T26178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.730797][T26178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.730836][T26178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.854281][T15382] usb 3-1: USB disconnect, device number 68 [ 746.956276][T26178] hsr_slave_0: entered promiscuous mode [ 746.979592][T26178] hsr_slave_1: entered promiscuous mode [ 746.980003][T26178] debugfs: 'hsr0' already exists in 'hsr' [ 746.980021][T26178] Cannot create hsr debugfs directory [ 747.168372][ T31] audit: type=1400 audit(28860.848:4458): avc: denied { map } for pid=26285 comm="syz.8.6907" path="/dev/sg0" dev="devtmpfs" ino=872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 747.198053][ T31] audit: type=1400 audit(28860.878:4459): avc: denied { execute } for pid=26285 comm="syz.8.6907" path="/dev/sg0" dev="devtmpfs" ino=872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 747.811862][ T9] hid-generic 0000:0000:0000.0051: hidraw0: HID v0.00 Device [syz1] on syz0 [ 748.486046][ T52] Bluetooth: hci5: command tx timeout [ 748.688296][T10123] IPVS: starting estimator thread 0... [ 748.784118][T26322] IPVS: using max 76 ests per chain, 182400 per kthread [ 748.800951][T26178] netdevsim netdevsim7 eth8 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.831459][ T31] audit: type=1400 audit(28862.508:4460): avc: denied { write } for pid=26297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 749.193784][ T31] audit: type=1400 audit(28862.878:4461): avc: denied { write } for pid=26333 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 749.677256][T26178] netdevsim netdevsim7 eth7 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.904030][T26178] netdevsim netdevsim7 eth6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.082377][T26178] netdevsim netdevsim7 eth5 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.586393][ T31] audit: type=1804 audit(28864.218:4462): pid=26355 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.6921" name="/newroot/87/file0" dev="fuse" ino=1 res=1 errno=0 [ 750.714833][ T31] audit: type=1400 audit(28864.398:4463): avc: denied { write } for pid=26340 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 750.943580][ T31] audit: type=1400 audit(28864.628:4464): avc: denied { write } for pid=26367 comm="syz.8.6923" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 751.031827][ T31] audit: type=1400 audit(28864.708:4465): avc: denied { write } for pid=26369 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 751.219049][T26375] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 751.227975][T26375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=26375 comm=syz.0.6925 [ 751.672045][T26178] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 751.700487][T26178] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 751.708848][T26178] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 751.754049][T26178] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 751.762214][T26178] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 751.792575][T26178] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 751.803638][T26178] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 751.854096][T26178] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 752.311796][T26178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.372702][T26178] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.390608][T10123] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.390689][T10123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.447280][T23216] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.447355][T23216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 752.468330][ T31] audit: type=1400 audit(28866.148:4466): avc: denied { write } for pid=26379 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.756296][ T31] audit: type=1400 audit(28866.438:4467): avc: denied { write } for pid=26405 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 753.243505][ T31] audit: type=1804 audit(28866.928:4468): pid=26417 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.6933" name="/newroot/158/file0" dev="fuse" ino=1 res=1 errno=0 [ 753.549284][ T31] audit: type=1400 audit(28867.228:4469): avc: denied { write } for pid=26433 comm="syz.2.6935" name="instances" dev="tracefs" ino=822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 754.055460][T26439] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 754.176679][ T31] audit: type=1400 audit(28867.858:4470): avc: denied { write } for pid=26410 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 754.220844][T26446] syzkaller0: entered promiscuous mode [ 754.220876][T26446] syzkaller0: entered allmulticast mode [ 754.388984][T26178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 754.455032][ T31] audit: type=1400 audit(28868.138:4471): avc: denied { write } for pid=26450 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 755.368355][T26178] veth0_vlan: entered promiscuous mode [ 755.428442][T26178] veth1_vlan: entered promiscuous mode [ 755.596480][ T31] kauditd_printk_skb: 63 callbacks suppressed [ 755.596513][ T31] audit: type=1326 audit(28869.278:4535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26462 comm="syz.8.6941" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc02f35e90e code=0x7ffc0000 [ 755.634890][ T31] audit: type=1326 audit(28869.318:4536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26462 comm="syz.8.6941" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc02f35e90e code=0x7ffc0000 [ 755.664547][T26178] veth0_macvtap: entered promiscuous mode [ 755.674279][ T31] audit: type=1326 audit(28869.358:4537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26462 comm="syz.8.6941" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc02f35e90e code=0x7ffc0000 [ 755.712487][ T31] audit: type=1326 audit(28869.388:4538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26462 comm="syz.8.6941" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc02f35e90e code=0x7ffc0000 [ 755.762616][T26178] veth1_macvtap: entered promiscuous mode [ 755.820029][ T31] audit: type=1400 audit(28869.498:4539): avc: denied { write } for pid=26459 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 755.849627][T26178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 755.877513][T26178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 756.005938][T12457] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.052490][T23216] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.053736][T23216] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.053950][T23216] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.142322][ T31] audit: type=1326 audit(28869.818:4540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26462 comm="syz.8.6941" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc02f39e0d9 code=0x7ffc0000 [ 756.142381][ T31] audit: type=1326 audit(28869.818:4541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26462 comm="syz.8.6941" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc02f39e0d9 code=0x7ffc0000 [ 756.400334][ T31] audit: type=1400 audit(28870.078:4542): avc: denied { write } for pid=26485 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 756.499875][T10122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.499904][T10122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.755199][T10122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.767221][T10122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.664679][ T5701] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 757.844934][ T5701] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 757.856881][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.856915][ T5701] usb 3-1: Product: syz [ 757.856930][ T5701] usb 3-1: Manufacturer: syz [ 757.856950][ T5701] usb 3-1: SerialNumber: syz [ 757.897690][ T5701] usb 3-1: NFC: intf ffff88807dc85000 id ffffffff8fe88480 [ 757.941302][ T31] audit: type=1400 audit(28871.628:4543): avc: denied { write } for pid=26491 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 758.029526][ T5701] nfcmrvl 3-1:1.0: NFC: registered with nci successfully [ 758.145218][T26519] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 758.173335][T26519] netlink: 'syz.4.6950': attribute type 1 has an invalid length. [ 758.173369][T26519] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6950'. [ 758.312499][ T31] audit: type=1326 audit(28871.988:4544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26518 comm="syz.7.6949" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c7119e0d9 code=0x0 [ 758.446809][T12468] nfcmrvl 3-1:1.0: NFC: send entry, len 4 [ 760.358805][T26505] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 760.378669][ C0] nfcmrvl 3-1:1.0: NFC: urb ffff888054d3df00 status -2 count 0 [ 760.476380][ T5701] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 760.523525][T15382] usb 3-1: USB disconnect, device number 69 [ 760.564135][T15382] usb 3-1: NFC: intf ffff88807dc85000 [ 760.644589][ T5701] usb 8-1: Using ep0 maxpacket: 16 [ 760.655363][ T5701] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 760.666723][ T5701] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 760.666757][ T5701] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 760.696256][ T5701] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.696289][ T5701] usb 8-1: Product: syz [ 760.696327][ T5701] usb 8-1: Manufacturer: syz [ 760.696347][ T5701] usb 8-1: SerialNumber: syz [ 760.731515][ T5701] usb 8-1: config 0 descriptor?? [ 760.763564][ T5701] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 760.763606][ T5701] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 760.899095][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 760.899130][ T31] audit: type=1326 audit(28874.578:4549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26577 comm="syz.0.6964" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721b79e0d9 code=0x7ffc0000 [ 760.935566][ T31] audit: type=1326 audit(28874.618:4550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26577 comm="syz.0.6964" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721b79e0d9 code=0x7ffc0000 [ 760.970144][ T31] audit: type=1326 audit(28874.648:4551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26577 comm="syz.0.6964" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721b79e0d9 code=0x7ffc0000 [ 760.970236][ T31] audit: type=1326 audit(28874.648:4552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26577 comm="syz.0.6964" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721b79e0d9 code=0x7ffc0000 [ 761.028866][ T31] audit: type=1326 audit(28874.718:4553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26577 comm="syz.0.6964" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f721b75e90e code=0x7ffc0000 [ 761.065139][ T31] audit: type=1326 audit(28874.748:4554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26577 comm="syz.0.6964" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f721b79e0d9 code=0x7ffc0000 [ 761.098073][ T31] audit: type=1326 audit(28874.778:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26577 comm="syz.0.6964" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f721b75e90e code=0x7ffc0000 [ 761.134643][ T31] audit: type=1326 audit(28874.818:4556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26577 comm="syz.0.6964" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f721b75e90e code=0x7ffc0000 [ 761.169858][ T31] audit: type=1326 audit(28874.848:4557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26577 comm="syz.0.6964" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f721b75e90e code=0x7ffc0000 [ 761.201336][ T31] audit: type=1326 audit(28874.888:4558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26577 comm="syz.0.6964" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f721b75e90e code=0x7ffc0000 [ 761.645325][ T5701] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 761.652163][ T5701] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 762.146611][T26568] bridge0: port 3(vlan2) entered blocking state [ 762.154880][T26568] bridge0: port 3(vlan2) entered disabled state [ 762.155026][T26568] vlan2: entered allmulticast mode [ 762.155041][T26568] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 762.189154][T26568] vlan2: entered promiscuous mode [ 762.195888][T26568] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 762.248294][ T5701] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 762.248327][ T5701] em28xx 8-1:0.0: No AC97 audio processor [ 762.276832][ T5701] usb 8-1: USB disconnect, device number 17 [ 762.277783][ T5701] em28xx 8-1:0.0: Disconnecting em28xx [ 762.319108][ T5701] em28xx: Freeing device [ 762.955283][T26622] binder: 26616:26622 ioctl c0306201 200000000080 returned -14 [ 762.974333][T26622] binder: 26616:26622 ioctl c0306201 2000000003c0 returned -14 [ 763.755498][T26648] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 764.830069][T26676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6981'. [ 765.056441][T15382] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 765.141416][T26686] TC_ACT_REPEAT abuse ? [ 765.219465][T15382] usb 3-1: Using ep0 maxpacket: 8 [ 765.225788][T15382] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 765.256532][T15382] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 765.256576][T15382] usb 3-1: config 0 has no interface number 0 [ 765.256613][T15382] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 765.256629][T15382] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 765.256653][T15382] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 765.256680][T15382] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 765.256716][T15382] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.361472][T15382] usb 3-1: config 0 descriptor?? [ 765.387039][T15382] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 765.400761][T26680] syzkaller0: entered promiscuous mode [ 765.412579][T26680] syzkaller0: entered allmulticast mode [ 765.934853][ T31] kauditd_printk_skb: 63 callbacks suppressed [ 765.934894][ T31] audit: type=1400 audit(28879.618:4622): avc: denied { write } for pid=26673 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 766.386901][ T31] audit: type=1400 audit(28880.068:4623): avc: denied { write } for pid=26706 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 766.864306][T15385] usb 3-1: USB disconnect, device number 70 [ 766.864340][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 766.881473][T15385] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 767.661963][ T31] audit: type=1400 audit(28881.338:4624): avc: denied { write } for pid=26714 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 768.012193][ T31] audit: type=1400 audit(28881.688:4625): avc: denied { write } for pid=26740 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 768.969544][T26746] netlink: 'syz.4.6994': attribute type 11 has an invalid length. [ 769.858871][T26764] fuse: fd is not a fuse device [ 771.188518][T26779] netlink: 'syz.2.7004': attribute type 1 has an invalid length. [ 774.407960][ T5604] Bluetooth: hci3: command 0x0405 tx timeout [ 775.984305][T26779] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 776.043505][T26783] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 777.960660][ T5338] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 778.135033][ T5338] usb 8-1: Using ep0 maxpacket: 16 [ 778.141289][ T5338] usb 8-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 778.178607][ T5338] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 165, changing to 11 [ 778.178647][ T5338] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.178679][ T5338] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 778.178706][ T5338] usb 8-1: config 0 interface 0 has no altsetting 0 [ 778.178735][ T5338] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.246385][ T5338] usb 8-1: config 0 descriptor?? [ 778.496559][ T31] audit: type=1326 audit(28892.178:4626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26802 comm="syz.7.7022" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7119e0d9 code=0x7ffc0000 [ 778.525251][ T31] audit: type=1326 audit(28892.178:4627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26802 comm="syz.7.7022" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7119e0d9 code=0x7ffc0000 [ 778.558870][ T31] audit: type=1326 audit(28892.238:4628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26802 comm="syz.7.7022" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7119e0d9 code=0x7ffc0000 [ 778.600446][ T31] audit: type=1326 audit(28892.278:4629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26802 comm="syz.7.7022" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7119e0d9 code=0x7ffc0000 [ 778.600491][ T31] audit: type=1326 audit(28892.278:4630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26802 comm="syz.7.7022" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7119e0d9 code=0x7ffc0000 [ 778.600540][ T31] audit: type=1326 audit(28892.278:4631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26802 comm="syz.7.7022" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0c7119e0d9 code=0x7ffc0000 [ 778.600584][ T31] audit: type=1326 audit(28892.278:4632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26802 comm="syz.7.7022" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7119e0d9 code=0x7ffc0000 [ 778.600619][ T31] audit: type=1326 audit(28892.278:4633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26802 comm="syz.7.7022" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7119e0d9 code=0x7ffc0000 [ 778.771432][ T31] audit: type=1326 audit(28892.458:4634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26802 comm="syz.7.7022" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7119e0d9 code=0x7ffc0000 [ 778.771501][ T31] audit: type=1326 audit(28892.458:4635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26802 comm="syz.7.7022" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7119e0d9 code=0x7ffc0000 [ 779.118044][ T5338] usbhid 8-1:0.0: can't add hid device: -71 [ 779.118132][ T5338] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 779.136817][ T5338] usb 8-1: USB disconnect, device number 18 [ 779.242335][T23216] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 779.242391][T23216] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 779.242424][T23216] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.491207][T23216] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 779.528801][T23216] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 779.544625][T23216] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.736000][T23216] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 779.747828][T23216] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 779.747859][T23216] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.884761][ T5338] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 780.020633][T23216] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 780.033181][T23216] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 780.033233][T23216] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.057362][ T5338] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 780.061706][ T5338] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.061741][ T5338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.108580][ T5338] usb 3-1: config 0 descriptor?? [ 780.127967][ T5338] pwc: Askey VC010 type 2 USB webcam detected. [ 780.587745][ T5338] pwc: recv_control_msg error -32 req 02 val 2b00 [ 780.596382][ T5338] pwc: recv_control_msg error -32 req 02 val 2700 [ 780.614965][ T5338] pwc: recv_control_msg error -32 req 02 val 2c00 [ 780.636789][ T5338] pwc: recv_control_msg error -32 req 04 val 1000 [ 780.668529][ T5338] pwc: recv_control_msg error -32 req 04 val 1300 [ 780.678467][ T5338] pwc: recv_control_msg error -32 req 04 val 1400 [ 780.734123][T26863] netlink: 'syz.8.7029': attribute type 4 has an invalid length. [ 780.783559][T26864] netlink: 'syz.8.7029': attribute type 4 has an invalid length. [ 780.914891][ T5338] pwc: recv_control_msg error -71 req 02 val 2100 [ 780.921833][ T5338] pwc: recv_control_msg error -71 req 04 val 1500 [ 780.929755][ T5338] pwc: recv_control_msg error -71 req 02 val 2500 [ 780.940256][ T5338] pwc: recv_control_msg error -71 req 02 val 2400 [ 780.950927][ T5338] pwc: recv_control_msg error -71 req 02 val 2600 [ 780.960145][ T5338] pwc: recv_control_msg error -71 req 02 val 2900 [ 780.971283][ T5338] pwc: recv_control_msg error -71 req 02 val 2800 [ 780.981315][ T5338] pwc: recv_control_msg error -71 req 04 val 1100 [ 780.989742][ T5338] pwc: recv_control_msg error -71 req 04 val 1200 [ 781.048979][ T5338] pwc: Registered as video103. [ 781.065981][ T5338] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input77 [ 781.156990][ T5338] usb 3-1: USB disconnect, device number 71 [ 781.256114][T10123] netdevsim netdevsim9 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.431786][T10123] netdevsim netdevsim9 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.514452][T26880] overlayfs: failed to clone upperpath [ 781.571699][T26880] overlayfs: failed to clone upperpath [ 781.793520][T12468] netdevsim netdevsim9 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.933186][T10123] netdevsim netdevsim9 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.982710][T23216] bond4: left allmulticast mode [ 782.034957][T23216] bond4: left promiscuous mode [ 782.062223][T23216] bridge0: port 3(bond4) entered disabled state [ 782.146120][T23216] bridge_slave_1: left promiscuous mode [ 782.154018][T23216] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.189106][T23216] bridge_slave_0: left promiscuous mode [ 782.197985][T23216] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.536842][ T31] kauditd_printk_skb: 47 callbacks suppressed [ 783.536877][ T31] audit: type=1400 audit(28897.218:4683): avc: denied { write } for pid=26924 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 784.699703][T23216] bond1 (unregistering): (slave geneve2): Releasing active interface [ 785.118486][T23216] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 785.131632][T23216] bridge1 (unregistering): left promiscuous mode [ 785.190459][T23216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 785.212665][T23216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 785.241092][T23216] bond0 (unregistering): Released all slaves [ 785.265072][T23216] bond1 (unregistering): Released all slaves [ 785.312298][T23216] bond2 (unregistering): Released all slaves [ 785.368256][T23216] bond3 (unregistering): Released all slaves [ 785.424679][T23216] bond4 (unregistering): Released all slaves [ 785.476111][T26910] tipc: Enabled bearer , priority 0 [ 785.487778][ T5266] 8021q: adding VLAN 0 to HW filter on device eth5 [ 785.736780][T26965] netlink: set zone limit has 4 unknown bytes [ 785.760463][T23216] tipc: Left network mode [ 786.926977][ T31] audit: type=1400 audit(28900.608:4684): avc: denied { ioctl } for pid=26993 comm="syz.4.7064" path="socket:[117046]" dev="sockfs" ino=117046 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 787.037841][T26995] pimreg: entered allmulticast mode [ 787.109639][T23216] hsr_slave_0: left promiscuous mode [ 787.122751][T23216] hsr_slave_1: left promiscuous mode [ 787.140908][ T31] audit: type=1400 audit(28900.818:4685): avc: denied { write } for pid=26976 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 787.485174][ T31] audit: type=1400 audit(28901.168:4686): avc: denied { write } for pid=27006 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 787.746214][T23216] team0 (unregistering): Port device team_slave_1 removed [ 787.806494][T23216] team0 (unregistering): Port device team_slave_0 removed [ 788.208566][T26992] pimreg: left allmulticast mode [ 788.590606][ T5266] 8021q: adding VLAN 0 to HW filter on device eth6 [ 788.809761][T23216] IPVS: stop unused estimator thread 0... [ 788.898044][T27032] fuse: fd is not a fuse device [ 789.861813][ T31] audit: type=1400 audit(28903.538:4687): avc: denied { write } for pid=27030 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 790.331905][ T31] audit: type=1400 audit(28904.008:4688): avc: denied { write } for pid=27050 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 790.463382][T27054] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7075'. [ 792.060323][T27068] netlink: 'syz.8.7082': attribute type 11 has an invalid length. [ 792.192147][T27051] bond2: left promiscuous mode [ 792.201243][T27051] bridge1: left promiscuous mode [ 792.269483][T27051] batman_adv: batadv0: Interface deactivated: gretap2 [ 792.629116][T10123] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 792.640553][T10123] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.640614][T10123] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 792.640641][T10123] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.640673][T10123] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 792.640689][T10123] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.640719][T10123] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 792.640745][T10123] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.717812][ T5266] 8021q: adding VLAN 0 to HW filter on device eth7 [ 793.193520][T27088] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7088'. [ 793.947075][T15382] libceph: connect (1)[c::]:6789 error -101 [ 793.953600][T15382] libceph: mon0 (1)[c::]:6789 connect error [ 793.963601][T15382] libceph: connect (1)[c::]:6789 error -101 [ 793.984069][ T31] audit: type=1400 audit(28907.668:4689): avc: denied { write } for pid=27085 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 794.020397][T15382] libceph: mon0 (1)[c::]:6789 connect error [ 794.180339][T27113] ceph: No mds server is up or the cluster is laggy [ 794.306730][T15382] libceph: connect (1)[c::]:6789 error -101 [ 794.306891][T15382] libceph: mon0 (1)[c::]:6789 connect error [ 794.369038][T27125] binder: 27124:27125 ioctl c0306201 200000000080 returned -14 [ 794.454895][T27125] binder: 27124:27125 ioctl c0306201 2000000003c0 returned -14 [ 794.496100][ T31] audit: type=1400 audit(28908.178:4690): avc: denied { write } for pid=27126 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 794.872449][ T31] audit: type=1400 audit(28908.548:4691): avc: denied { watch watch_reads } for pid=27132 comm="syz.2.7098" path="/" dev="ramfs" ino=117608 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 794.903225][ T5266] 8021q: adding VLAN 0 to HW filter on device eth8 [ 795.940759][ T31] audit: type=1400 audit(28909.618:4692): avc: denied { write } for pid=27144 comm="syz.8.7099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 796.304418][ T5338] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 796.396860][T27160] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 796.463848][ T5338] usb 8-1: Using ep0 maxpacket: 8 [ 796.471417][ T5338] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 796.484311][ T5338] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 796.484344][ T5338] usb 8-1: config 0 has no interface number 0 [ 796.484381][ T5338] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 796.484408][ T5338] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 796.484425][ T5338] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 796.484452][ T5338] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 796.484486][ T5338] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.569984][ T5338] usb 8-1: config 0 descriptor?? [ 796.605248][ T5338] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 797.269093][T27167] netlink: 'syz.8.7104': attribute type 83 has an invalid length. [ 797.339421][T27168] netlink: 'syz.8.7104': attribute type 83 has an invalid length. [ 797.756256][ T31] audit: type=1800 audit(28911.438:4693): pid=27134 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.7098" name="bus" dev="ramfs" ino=117609 res=0 errno=0 [ 798.300978][ T5338] usb 8-1: USB disconnect, device number 19 [ 798.301088][ C0] ldusb 8-1:0.55: usb_submit_urb failed (-19) [ 798.319031][ T5338] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 798.398908][T27177] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7106'. [ 801.055146][T27246] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5612] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ   [ 801.082442][T27248] jffs2: notice: (27248) jffs2_build_xattr_subsystem: complete building xattr subsystem, 11 of xdatum (5 unchecked, 3 orphan) and 12 of xref (0 dead, 4 orphan) found. [ 801.261181][ T31] audit: type=1400 audit(28914.938:4694): avc: denied { write } for pid=27247 comm="syz.8.7126" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 803.042088][T27288] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 803.064605][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.227876][ T31] audit: type=1400 audit(28916.918:4695): avc: denied { mounton } for pid=27291 comm="syz.2.7140" path="/197/file0" dev="hugetlbfs" ino=118343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 803.448047][T27302] netlink: 'syz.2.7144': attribute type 2 has an invalid length. [ 803.448069][T27302] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.7144'. [ 803.449098][T27302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7144'. [ 803.492823][T27304] fuse: fd is not a fuse device [ 803.709055][T27311] pimreg: entered allmulticast mode [ 803.738791][T27311] pimreg: left allmulticast mode [ 804.367824][T27323] netlink: 'syz.8.7152': attribute type 4 has an invalid length. [ 804.861918][ T31] audit: type=1400 audit(28918.538:4696): avc: denied { getopt } for pid=27336 comm="syz.8.7158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 806.573258][T27360] virtio-fs: tag not found [ 806.600733][T27360] virtio-fs: tag not found [ 806.608912][T27360] virtio-fs: tag not found [ 806.915645][ T31] audit: type=1400 audit(28920.598:4697): avc: denied { write } for pid=27347 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 807.128136][T27372] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7167'. [ 807.292390][ T31] audit: type=1400 audit(28920.968:4698): avc: denied { write } for pid=27373 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 807.957602][T27392] syz_tun: entered allmulticast mode [ 808.007790][T27392] pim6reg: entered allmulticast mode [ 808.404837][T27392] syz_tun (unregistering): left allmulticast mode [ 808.854752][ T31] audit: type=1400 audit(28922.538:4699): avc: denied { write } for pid=27383 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 808.909081][T27410] lo: entered allmulticast mode [ 809.269723][ T31] audit: type=1400 audit(28922.948:4700): avc: denied { write } for pid=27414 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 809.634707][T27407] lo: left allmulticast mode [ 809.862583][ T5338] libceph: connect (1)[c::]:6789 error -101 [ 809.869116][ T5338] libceph: mon0 (1)[c::]:6789 connect error [ 809.880914][ T5338] libceph: connect (1)[c::]:6789 error -101 [ 809.887371][ T5338] libceph: mon0 (1)[c::]:6789 connect error [ 809.999732][T27436] ceph: No mds server is up or the cluster is laggy [ 810.664272][T27456] netlink: 'syz.0.7186': attribute type 21 has an invalid length. [ 810.664303][T27456] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7186'. [ 810.664358][T27456] netlink: 'syz.0.7186': attribute type 5 has an invalid length. [ 810.664378][T27456] netlink: 'syz.0.7186': attribute type 6 has an invalid length. [ 810.664388][T27456] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7186'. [ 810.741447][ T31] audit: type=1400 audit(28924.418:4701): avc: denied { write } for pid=27427 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 810.781355][ T31] audit: type=1400 audit(28924.458:4702): avc: denied { write } for pid=27458 comm="syz.7.7188" name="configs" dev="configfs" ino=8520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 810.830522][ T31] audit: type=1400 audit(28924.508:4703): avc: denied { write } for pid=27458 comm="syz.7.7188" name="c.1" dev="configfs" ino=119063 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 810.969268][T27464] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 810.981406][T27464] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 810.989810][T27464] CPU: 0 UID: 0 PID: 27464 Comm: syz.7.7188 Tainted: G L syzkaller #0 PREEMPT(full) [ 811.000737][T27464] Tainted: [L]=SOFTLOCKUP [ 811.005037][T27464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 811.015068][T27464] RIP: 0010:dummy_set_selfpowered+0xe4/0x1c0 [ 811.021028][T27464] Code: c1 ea 03 80 3c 02 00 0f 85 e6 00 00 00 48 8b 9b 90 06 00 00 e8 cd 1d 2f fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 b2 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 811.040613][T27464] RSP: 0018:ffffc90004b3f8e0 EFLAGS: 00010246 [ 811.046655][T27464] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90007049000 [ 811.054602][T27464] RDX: 0000000000000000 RSI: ffffffff87dcb663 RDI: ffff88801e35d290 [ 811.062566][T27464] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000005 [ 811.070509][T27464] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000003 [ 811.078453][T27464] R13: ffff88801e35c068 R14: ffff88801e35cc58 R15: ffff888078f70510 [ 811.086399][T27464] FS: 00007f0c71fed6c0(0000) GS:ffff888123b6d000(0000) knlGS:0000000000000000 [ 811.095305][T27464] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 811.101892][T27464] CR2: 00005555859d2a08 CR3: 000000005fe72000 CR4: 00000000003526f0 [ 811.109840][T27464] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 811.117788][T27464] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 811.125733][T27464] Call Trace: [ 811.128991][T27464] [ 811.131901][T27464] ? __pfx_dummy_set_selfpowered+0x10/0x10 [ 811.137688][T27464] usb_gadget_set_selfpowered+0x73/0x2b0 [ 811.143296][T27464] composite_dev_prepare+0x254/0x420 [ 811.148560][T27464] configfs_composite_bind+0xd2/0x1960 [ 811.153994][T27464] ? kernfs_create_link+0x1bd/0x240 [ 811.159166][T27464] gadget_bind_driver+0x28c/0xbf0 [ 811.164171][T27464] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 811.169780][T27464] ? __pfx_gadget_bind_driver+0x10/0x10 [ 811.175317][T27464] really_probe+0x241/0xa60 [ 811.179803][T27464] __driver_probe_device+0x210/0x460 [ 811.185064][T27464] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 811.190847][T27464] driver_probe_device+0x4a/0x140 [ 811.195850][T27464] __driver_attach+0x21f/0x5b0 [ 811.200593][T27464] ? __pfx___driver_attach+0x10/0x10 [ 811.205855][T27464] bus_for_each_dev+0x13e/0x1d0 [ 811.210679][T27464] ? __pfx_bus_for_each_dev+0x10/0x10 [ 811.216023][T27464] ? bus_add_driver+0x2b5/0x5b0 [ 811.220851][T27464] bus_add_driver+0x305/0x5b0 [ 811.225518][T27464] driver_register+0x1e2/0x360 [ 811.230260][T27464] usb_gadget_register_driver_owner+0x132/0x210 [ 811.236477][T27464] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 811.242089][T27464] configfs_write_iter+0x302/0x4e0 [ 811.247179][T27464] vfs_write+0x6af/0x1050 [ 811.251491][T27464] ? __pfx_configfs_write_iter+0x10/0x10 [ 811.257101][T27464] ? __pfx_vfs_write+0x10/0x10 [ 811.261841][T27464] ? find_held_lock+0x2b/0x80 [ 811.266501][T27464] ksys_write+0x12a/0x250 [ 811.270809][T27464] ? __pfx_ksys_write+0x10/0x10 [ 811.275654][T27464] do_syscall_64+0x123/0x790 [ 811.280225][T27464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.286092][T27464] RIP: 0033:0x7f0c7119e0d9 [ 811.290483][T27464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.310063][T27464] RSP: 002b:00007f0c71fed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 811.318449][T27464] RAX: ffffffffffffffda RBX: 00007f0c71426090 RCX: 00007f0c7119e0d9 [ 811.326393][T27464] RDX: 000000000000000b RSI: 0000200000000940 RDI: 0000000000000004 [ 811.334336][T27464] RBP: 00007f0c71235024 R08: 0000000000000000 R09: 0000000000000000 [ 811.342280][T27464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 811.350236][T27464] R13: 00007f0c71426128 R14: 00007f0c71426090 R15: 00007fff4444bbf8 [ 811.358184][T27464] [ 811.361183][T27464] Modules linked in: [ 811.375692][T27464] ---[ end trace 0000000000000000 ]--- [ 811.396461][ T31] audit: type=1400 audit(28925.078:4704): avc: denied { create } for pid=27458 comm="syz.7.7188" name="midi2.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 811.396499][ T31] audit: type=1400 audit(28925.078:4705): avc: denied { write } for pid=27458 comm="syz.7.7188" name="c.1" dev="configfs" ino=119063 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 811.470684][ T31] audit: type=1400 audit(28925.148:4706): avc: denied { write } for pid=27468 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 811.680929][T27464] RIP: 0010:dummy_set_selfpowered+0xe4/0x1c0 [ 811.687862][T27464] Code: c1 ea 03 80 3c 02 00 0f 85 e6 00 00 00 48 8b 9b 90 06 00 00 e8 cd 1d 2f fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 b2 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 811.708308][T27464] RSP: 0018:ffffc90004b3f8e0 EFLAGS: 00010246 [ 811.714656][T27464] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90007049000 [ 811.725152][T27464] RDX: 0000000000000000 RSI: ffffffff87dcb663 RDI: ffff88801e35d290 [ 811.734395][T27464] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000005 [ 811.742682][T27464] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000003 [ 811.751907][T27464] R13: ffff88801e35c068 R14: ffff88801e35cc58 R15: ffff888078f70510 [ 811.762761][T27464] FS: 00007f0c71fed6c0(0000) GS:ffff888123b6d000(0000) knlGS:0000000000000000 [ 811.774137][T27464] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 811.781005][T27464] CR2: 00007f6025801a90 CR3: 000000005fe72000 CR4: 00000000003526f0 [ 811.789364][T27464] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 811.797706][T27464] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 811.814221][T27464] Kernel panic - not syncing: Fatal exception [ 811.820317][T27464] Kernel Offset: disabled [ 811.824616][T27464] Rebooting in 86400 seconds..