last executing test programs: 1m24.0911204s ago: executing program 1 (id=84): syz_emit_ethernet(0x86, &(0x7f0000000bc0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x3, 0x2, 0x0, 0x0, {0x0, 0x6, "0208d0", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x1c, '\x00', [@ra={0x5, 0x2f, 0x1}]}], "fb807f04442be993894b35a336eeca6f"}}}}}}}, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='r', 0x1) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="940000000206012400000000000000000200000705000400020000000d000300686173683a6e6574000000000900020073797a310000000044000780050014000500000018000280140602fe80000000000000b4a77fab8d71018d15ce0b9327bd00000000000000aa0800174000008000060004404e210000089dc809060006400000000a08001340000000060c000300686173683a69"], 0x94}, 0x1, 0x0, 0x0, 0x4010}, 0x20040001) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000200)={@mcast1, r1}, 0x14) 1m23.813908172s ago: executing program 1 (id=87): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) fsmount(0xffffffffffffffff, 0xf7421b7d232801cb, 0x0) syz_clone(0xa00, &(0x7f0000000700)="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", 0xc00, &(0x7f0000001700), &(0x7f0000001740), &(0x7f0000001780)="9e2711") r2 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r4) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r7, 0xc) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x0, 0x1, 0x1, 0xf, 0x300, 0x1}, &(0x7f0000000080)=0x20) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000140), 0x10) dup3(0xffffffffffffffff, r2, 0x80000) sendmsg$can_bcm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000780)={0x2c, &(0x7f0000000580)={0x40, 0x4, 0x31, {0x31, 0x5, "6fe5b2cd31fb65f4ebbc3406d1ebcc250b290a7bf67e7933087b8bf80181d02c058f6539614d6f481d8a1bc5187132"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010400000000000000000a00000a0900010073797a31000000000700000000000000090001006d6574610000000044000280080001400000000c080003400000000008000240000000190800014000000009080001400000000b08000140000000120700000000000015080003"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x10004880) 1m23.246254477s ago: executing program 1 (id=92): timer_create(0x1, 0x0, &(0x7f0000000100)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.stat\x00', 0x26e1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a030000000000000001000100000009"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0xe, 0x4000080000000700, 0x0, 0x0, 0x19, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000004000", [0xfffffffffffffffc, 0x31]}}) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) lseek(r0, 0x54, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0xffff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x4}, [@tmpl={0x44, 0x5, [{{@in=@multicast2, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x1, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@private1, @in6=@dev={0xfe, 0x80, '\x00', 0x8}, 0x4e20, 0x5, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1, @in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}}, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, 0x0, 0x2400c040) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80, 0x143) getdents64(r9, &(0x7f0000000580)=""/174, 0xff56) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) 1m22.504999888s ago: executing program 1 (id=93): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') ftruncate(0xffffffffffffffff, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r4, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 1m21.994526148s ago: executing program 0 (id=97): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) 1m21.921928303s ago: executing program 1 (id=98): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f3040a37a71d6037ed400000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='usb3503 0x08\n\x00', 0xd) 1m21.305540405s ago: executing program 1 (id=101): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f0977", 0x8}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e02801", 0x4d}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d08", 0xc7}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r6) mount(0x0, &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='my_configfs/nullb/nullb1/size\x00', 0x1, 0x0) write(r7, &(0x7f0000000300)='10', 0x2) 1m21.010197675s ago: executing program 32 (id=101): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f0977", 0x8}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e02801", 0x4d}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d08", 0xc7}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r6) mount(0x0, &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='my_configfs/nullb/nullb1/size\x00', 0x1, 0x0) write(r7, &(0x7f0000000300)='10', 0x2) 1m19.630145176s ago: executing program 0 (id=105): r0 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) readv(r0, &(0x7f0000000080), 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1) 1m19.398986912s ago: executing program 0 (id=107): r0 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) socketpair(0xa, 0x2, 0x3a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdff030018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="bb64000000f9ff36040300ffffff00000000", @ANYRES32=r5, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x4005}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0xc0) shutdown(r1, 0x0) 1m18.961773877s ago: executing program 0 (id=108): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') ftruncate(0xffffffffffffffff, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r4, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 1m18.445404175s ago: executing program 0 (id=110): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1, 0x0, 0x240}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000025c0)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)="c954", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002c00)="18ab", 0x2}], 0x1}}], 0x4, 0x40480c0) 1m15.776148214s ago: executing program 0 (id=115): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x4000000) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, &(0x7f0000000000)) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000180)={0x2, 0x3, 0x40}) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) 1m15.356969809s ago: executing program 33 (id=115): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x4000000) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, &(0x7f0000000000)) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000180)={0x2, 0x3, 0x40}) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) 54.441825338s ago: executing program 2 (id=179): syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0xc}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f0000000040)={0x1, 0x103, 0x4, {0x1, 0xd, 0x4, 0x1}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r4, 0x1, 0x1d, &(0x7f0000000080)=0xf6e8, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) socket$nl_netfilter(0x10, 0x3, 0xc) 54.39288168s ago: executing program 2 (id=180): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e86dd6012000800303a00fe800000000000000000000000000000000000000000aa08029078000000006000081000001100ff010000000000000000000000000001fc"], 0x0) (async, rerun: 64) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async, rerun: 64) syz_extract_tcp_res(&(0x7f0000000080), 0x6, 0x3) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000780)) (async) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff2, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x9}}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0x401}, @TCA_FLOWER_KEY_CT_ZONE={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20045010}, 0x0) (async, rerun: 32) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0) (async, rerun: 32) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r3, 0x4b52, &(0x7f0000000040)={0xfa, &(0x7f0000000000)=[{0x2000, 0x5}]}) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1}) (async, rerun: 32) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001980)=0x1) (rerun: 32) 54.250923366s ago: executing program 2 (id=181): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1', 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='1', 0x1) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x10) close_range(r4, r5, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000140)={0x1, 0x2, 0x3}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x7, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x917}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 53.05457194s ago: executing program 2 (id=184): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') ftruncate(0xffffffffffffffff, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r5, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 49.227191052s ago: executing program 2 (id=194): syz_usb_connect$hid(0x4, 0x36, &(0x7f0000002500)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0x1b3e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x40, 0x0, "", [{{0x9, 0x4, 0x0, 0xfa, 0x2, 0x3, 0x1, 0x0, 0x3, {0x9, 0x21, 0x5, 0x51, 0x1, {0x22, 0xe9d}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xa, 0x1, 0x6}}}}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000002680)=@lang_id={0x4, 0x3, 0x384d}}, {0xce, &(0x7f00000026c0)=@string={0xce, 0x3, "a2288f179e3caa5d6fa69f95c4283dbfb9cd5cf38072767c36b60054b1470402faf9aecff7be8ca40470d3a41f53862250c5d2cd045e7e4d0e2720dc5eec25adbb61109514209313e3e3b5437e7e4a2e09d2e2805dd9628d5c80cc98f561d487c205d294ebddf6e89181e914895d6b5fe308f1e36d3f482e3e34e52c1216b85d1082204187afd2c8b19a612f19b523d8a45b0711597a63992551d003d7062d0220c915efbcbc4c79874a1c1339153b5cbf22d170c7e33bc0e70782e2b0390c01813aaa9010f56fd355bfa4d8"}}]}) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000002d40)={'wg0\x00', {0x2, 0x4e22, @broadcast}}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac3(0x2, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) 46.406125149s ago: executing program 2 (id=199): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') ftruncate(0xffffffffffffffff, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r5, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 44.48870591s ago: executing program 34 (id=199): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') ftruncate(0xffffffffffffffff, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r5, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 10.078774833s ago: executing program 5 (id=309): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvmmsg(r0, &(0x7f0000004d40)=[{{&(0x7f0000000040)=@x25, 0x80, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/205, 0xcd}, {&(0x7f0000000240)=""/71, 0x47}, {&(0x7f00000002c0)=""/115, 0x73}, {&(0x7f0000000340)=""/91, 0x5b}, {&(0x7f00000003c0)=""/162, 0xa2}], 0x5, &(0x7f0000000500)=""/160, 0xa0}, 0x3}, {{&(0x7f00000005c0)=@generic, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000640)=""/238, 0xee}, {&(0x7f0000000740)=""/63, 0x3f}, {&(0x7f0000000780)=""/196, 0xc4}, {&(0x7f0000000880)=""/143, 0x8f}, {&(0x7f0000000940)=""/225, 0xe1}, {&(0x7f0000000a40)=""/127, 0x7f}, {&(0x7f0000000ac0)=""/248, 0xf8}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/133, 0x85}], 0x9, &(0x7f0000001d40)}, 0x3}, {{&(0x7f0000001d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002100)=[{&(0x7f0000001e00)=""/60, 0x3c}, {&(0x7f0000001e40)=""/23, 0x17}, {&(0x7f0000001e80)=""/81, 0x51}, {&(0x7f0000001f00)=""/247, 0xf7}, {&(0x7f0000002000)=""/223, 0xdf}], 0x5, &(0x7f0000002180)=""/11, 0xb}, 0x8}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f00000021c0)=""/141, 0x8d}, {&(0x7f0000002280)=""/140, 0x8c}, {&(0x7f0000002340)=""/137, 0x89}, {&(0x7f0000002400)=""/180, 0xb4}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/182, 0xb6}], 0x6, &(0x7f0000003600)=""/4, 0x4}, 0x8}, {{&(0x7f0000003640)=@x25={0x9, @remote}, 0x80, &(0x7f00000048c0)=[{&(0x7f00000036c0)=""/32, 0x20}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/192, 0xc0}, {&(0x7f00000047c0)=""/229, 0xe5}], 0x4}, 0x2}, {{0x0, 0x0, &(0x7f0000004c40)=[{&(0x7f0000004900)=""/122, 0x7a}, {&(0x7f0000004980)=""/15, 0xf}, {&(0x7f00000049c0)=""/104, 0x68}, {&(0x7f0000004a40)=""/185, 0xb9}, {&(0x7f0000004b00)=""/40, 0x28}, {&(0x7f0000004b40)=""/90, 0x5a}, {&(0x7f0000004bc0)=""/115, 0x73}], 0x7, &(0x7f0000004cc0)=""/90, 0x5a}, 0xb}], 0x6, 0x10040, &(0x7f0000004ec0)={0x77359400}) syz_open_dev$sndmidi(&(0x7f0000000000), 0x6, 0x4a0380) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000200)) 9.913547371s ago: executing program 5 (id=310): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x23, 0x301, 0x270bd24, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4000000) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x94c, 0x10, 0x8, 0xd1}) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x523}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}}, 0x10) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x20000000000003cb, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x110009}, 0x94) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r8, 0xc1007c00, &(0x7f0000000080)) syz_usb_control_io(r2, &(0x7f0000000140)={0x18, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) 8.115067611s ago: executing program 4 (id=318): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r1 = dup(r0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205649, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019300)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x40400, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r4 = socket(0x11, 0x2, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x8, 0x0, 0x0, 0x0) setsockopt(r4, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) r7 = syz_open_dev$sg(0x0, 0x0, 0x40042) write$binfmt_aout(r7, 0x0, 0x125) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r6, r4) socket$packet(0x11, 0x2, 0x300) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff000000004fa100001a00000007010000f8ffffffb702000008000000b70300000000000085000000990000d2a5b30f73a82e60fe1eb5966803ecfb78cd0aded7f2bb3d8f57f10b16"], &(0x7f0000000000)='syzkaller\x00', 0xa}, 0x94) 7.49624728s ago: executing program 7 (id=319): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000006800010000000000000000000000000000000000060003000000000008000100000000001c000200010081ffffff"], 0x44}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x5c, 0x0, 0x1, 0x5}, 0x28) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x22000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000340)={{0x2, 0x4e24, @rand_addr=0x64010100}, {0x306}, 0x2, {0x2, 0x4e23, @multicast1}, 'gre0\x00'}) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='\f\x00\x00\x00'], 0x408100) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000480)={0x2, &(0x7f0000000280)=[{0x3e, '\x00', @data=0x8, 0x8}, {0x15, '\x00', @data=0x2, 0x1c}]}) close(0x4) 6.367273859s ago: executing program 7 (id=320): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100039042abd70000000e40400000000", @ANYRES32=r1, @ANYBLOB="0118020003110000280012800b00010065727370616e00001800028004001200050017000000000008000400"], 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') r4 = socket$inet_icmp(0x2, 0x2, 0x1) syz_open_dev$video4linux(&(0x7f0000000000), 0xffffffffffffffff, 0xb00) ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000000980)={0xe7, 0x0, {0xc86, 0x8, 0x1004, 0x0, 0x5, 0x6, 0x0, 0x4}}) fcntl$getown(r4, 0x9) syz_io_uring_setup(0x246a, &(0x7f00000000c0)={0x0, 0xba2a, 0x80, 0x2, 0x1c4, 0x0, r3}, &(0x7f0000000140), &(0x7f0000000180), 0x0) pread64(r3, &(0x7f00000003c0)=""/262, 0x106, 0x4) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x4a7) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@eui64={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x1, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'pim6reg\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d8) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='attr/prev\x00') r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB='l\b\x00dno=', @ANYRESHEX=r7, @ANYBLOB=',\x00']) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x7, 0x4, 0x408, 0x210, 0x210, 0x0, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000040), {[{{@arp={@loopback, @loopback, 0xff000000, 0xffffffff, 0x2, 0x9, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x9, 0x1, 0x3, 0x7, 0x2, 0x1, 'team0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x1a3}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "41670bbbff805e081d5630c5035c28dfbdce9fb06feacab39d2c31e9dc65"}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x3b}, @local, 0x0, 0xff000000, 0x0, 0x8, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x9, 0x7, 0x7ff, 0xe63, 0x800, 0x78fa, 'veth1_to_team\x00', 'tunl0\x00', {0xff}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@multicast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @multicast2, @empty, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) dup2(r0, r0) r9 = socket(0x10, 0x4, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f00000001c0)={0xffeffffb, 0x0, 0xd}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000012009702caed68d399a24fb707", @ANYRES16=r9], 0x2c}}, 0x40000) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000000)={"197733584c96aec0518b340c1c9525d9ad5af331958f0c6cd3406328cd61fb82"}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 6.3559188s ago: executing program 5 (id=321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000880)=""/112, 0x70}], 0x1, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x25, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x4, 0x0, [{0xa7b, 0x0, 0xfffffffffffffff6}, {0x0, 0x0, 0x3}, {0x2e0, 0x0, 0x4}, {0xb4a, 0x0, 0x5}]}) r5 = signalfd(0xffffffffffffffff, &(0x7f0000006540), 0x8) r6 = syz_usb_connect(0x0, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010003185d9f4004041203c142010203010902560001a01380050904a80806f03b6f010905011020008103080705f4ba35c2ba090507073902c309050710210006050109050a10ff030504730705e97bdd47ce09050c1e"], &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$printer(r6, 0x0, &(0x7f00000002c0)={0x34, &(0x7f0000000440)={0x40, 0xa, 0xe6, "52d61830d3611ab08c1cd31b3b00000000315ae2cb336be922f579384c69749240b9029e1ce6ff356049ef42501a289f74ced4d3e0cc5e14d62524e8cf5dd72a37afa066a0bd37b5b52fb2193a4451691438dfdb88e44b6bf2d92ba8355e9ab8fc4f951a7ea33245ae2388f5e75dff21b1ef81fcc48b69e5e73353d51033e849df8489d417cf24448eb0fa997811c980bff13b213f539d2371f80d050ec5b0b29398ec853bc02626044a733d98fae89bd547d93366a0fc17977e1256f050ea69c057e13ed355248806c6bdff4bfd9ce503dc6dee6c2e3f7d91eac1eb8608fc00000000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r5, 0x7, 0x0) fcntl$lock(r5, 0x24, &(0x7f0000000680)={0x0, 0x0, 0x1ff}) r7 = syz_open_dev$dvb_dvr(0x0, 0x0, 0x100) fcntl$dupfd(r7, 0x0, r7) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r8, 0xb0d, 0x70bd26, 0x25dfdbff}, 0x14}}, 0x20004884) 6.213952599s ago: executing program 4 (id=322): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2, 0x80805, 0x0) poll(&(0x7f0000000380), 0x0, 0xfa2) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x60a40) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_dev$vim2m(0x0, 0x40000080000000, 0x2) pwritev2(r3, &(0x7f0000000600)=[{&(0x7f0000000240)="c5", 0x1}], 0x1, 0x25e, 0x1, 0x1) r4 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0xfd89, 0x40) msync(&(0x7f0000d5c000/0x2000)=nil, 0xfffffffffffffef1, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(r4, 0xc00c6f3e, &(0x7f0000000080)={0x0, 0x80000, r2}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file1\x00', &(0x7f0000002100), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYRES16=0x0, @ANYBLOB="9f9613922907466d927b582a3c2cd1bcfc2ac5f588c29354a602bcd0c216102293e3fa453b643d26e9bd29e103f5296800c97effac3e0ff1e53d6432a121c9aae5721b1292d9df9dbdec39ebadbc08f9fcf5cc8d5839fa18646dc0e635a1db79d4387d4f473c68528ebb804a5ffd0873dc040bcac814bc5c5acd93084cb7865c113d1cd8210f084a6d32b43558346e95fd8ea737ddb986d9967c98fe48a52b218999609dd35133473c1f5ed6d28d2dffd33c7af712d86387b9ccedbf890a7550ff0bc69e02d24a0fa179c7", @ANYBLOB="2c67726f758b5f69643d", @ANYRESDEC=0x0, @ANYRESHEX=r7, @ANYRES8=r5, @ANYRESHEX=r1, @ANYRESDEC=r7, @ANYRESHEX=r3, @ANYRES32=0x0]) read$FUSE(r7, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r11}) write$FUSE_INIT(r7, &(0x7f0000000400)={0x50, 0x0, r8, {0x7, 0x2b, 0x10, 0x1c20044, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x120}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r9, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x3, 0x40000020d04, 0xfffffffffffffffb, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x7, 0x5, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r9, r10, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x2080, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='pvfs2\x00', 0x800004, 0x0) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000080)={0x209d}, 0x10) write(r12, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000100)={0xc}) 5.828578766s ago: executing program 7 (id=324): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x3c, r2, 0x1, 0x0, 0x0, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) close(r3) r4 = socket(0x2, 0x80805, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e9"], 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x3a09007, 0x0) sendmmsg$inet(r4, &(0x7f00000008c0), 0x0, 0x4000800) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write(r0, &(0x7f0000000080)='4', 0x1) 5.694325167s ago: executing program 3 (id=325): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x3c, r2, 0x1, 0x0, 0x0, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0) capset(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = socket(0x2, 0x80805, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ptrace$poke(0x2, 0x0, &(0x7f00000011c0), 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, &(0x7f0000000280)) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', 0x0, 0x0, 0x3a09007, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731a97fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000028850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x9}, 0x94) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmmsg$inet(r3, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)}}, {{&(0x7f0000000540)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000980)}], 0x1}}], 0x2, 0x4000800) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xffff7a5f}, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) write(r0, &(0x7f0000000080)='4', 0x1) 5.202527269s ago: executing program 4 (id=327): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) socket$key(0xf, 0x3, 0x2) write(0xffffffffffffffff, &(0x7f00000001c0)='kvm:', 0x4) 5.01050737s ago: executing program 3 (id=328): openat$nvram(0xffffffffffffff9c, 0x0, 0x210c80, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x10, 0x0, 0x3, 0x800000}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_pidfd_open(r0, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x1100, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}}) setns(r5, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./nfsd\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./nfsd/v4_end_grace\x00', 0x1, 0x0) write(r7, 0x0, 0x0) 4.899654497s ago: executing program 4 (id=329): r0 = socket(0x40000000015, 0x5, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r2, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f0000000040)={0x18, r2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[], 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89}, 0x50) unshare(0xe040400) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, &(0x7f00000025c0), &(0x7f0000000600), 0x80, r4, 0x0, 0x7}, 0x38) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x3}, 0x2}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000000c0)={0xf0f02a, 0x17}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @remote, 0xe79}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) 4.113774403s ago: executing program 7 (id=330): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000003000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x79, 0x0, &(0x7f00000000c0)="21715afa3a7216555b6028f77516ad0fdd29b6e42d90e81e04b58e139811335af28518fe36a92e94123441d9ce2e1e7602a682652aca297f61afb16f5f91f0dbc9e3dc86b881ff750052de6e9ba2f8058b28c3a6047d8a010000000000000000d11219b647e9ee644b2dad000000000000000000b4140000c6", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x6, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000b00)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fd", 0x1d) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socket$rxrpc(0x21, 0x2, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000200000000000000001c000095f50b3c3c3ac153d7656f563ebb"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x6f}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x26}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="8580f83288e1aaaaaaaaaa1c08004515001c00670000000290780a012de802e0000001118190782ecb514f7607ea642c06e48dbbef68b2ae1025c123797aa6b3ed40cc2493855725c4f2d4504079eddde57a50de2fd90c6c0aae5b1d8091efbd0274183043f03466"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 3.735694425s ago: executing program 3 (id=332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d10300000c000440000000002df31ab30c00008008000340000000020100000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.554466603s ago: executing program 6 (id=333): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='usb3503 0x08\n\x00', 0xd) 3.400448953s ago: executing program 3 (id=334): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="68000008020601000000000600000000000000000e0003006269746d61703a697000000005000500020000000900020073797a30000000002000078005000300000000000cb08b8008000140ac1414aa05001400000000000500040000000000050001"], 0x68}}, 0x4000000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x4c, 0x3, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="0e0000004a0000000700000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80a80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000040) r2 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wg0\x00'}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f00000000c0)={0x0, 'erspan0\x00', {0x1}, 0x26}) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') lseek(r6, 0x2000, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/118}, 0x7e, 0x2, 0x1000) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f0000000000)) 3.14792617s ago: executing program 4 (id=335): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902240001000000000904000901030001000921050000012205000905810300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = epoll_create(0x81) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x80002010}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000002c0), 0x4) 2.206085167s ago: executing program 3 (id=336): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="170000007a006bcd9e3f88dc6e0800000709000018c000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000bfd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) pwritev(r1, &(0x7f0000000a80)=[{0x0}, {&(0x7f0000000500)="0d3e8dd1", 0x4}, {0x0, 0xfffffd48}], 0x3, 0x1, 0x9) 1.904878035s ago: executing program 5 (id=337): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) socket$key(0xf, 0x3, 0x2) write(0xffffffffffffffff, &(0x7f00000001c0)='kvm:', 0x4) 1.750238348s ago: executing program 6 (id=338): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x154, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xac}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2e}]}, @IPSET_ATTR_ADT={0x88, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x6}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_ADT={0x44, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x21}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7}}]}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x8, 0x1a, ':-}\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4}, 0x20000881) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x1}, 0x6) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r3 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f00000003c0)=[@ioring_restriction_sqe_op], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r3, 0xc, 0x0, 0x0) io_uring_enter(r3, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000280)={0x40000000001, 0x1, 0x100004, 0x0, 0xfffffff5, 0x5, "0f6d00", 0x0, 0x2, 0x0, 0x4, 0x0, 0x4, 0xff}) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 1.46627683s ago: executing program 6 (id=339): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) socket$key(0xf, 0x3, 0x2) write(0xffffffffffffffff, &(0x7f00000001c0)='kvm:', 0x4) 1.347941295s ago: executing program 6 (id=340): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x1, 0x5800003a, r1, 0x0) pwrite64(r0, &(0x7f0000000c00)='W', 0x1, 0x4) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000002c0)) socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0xa, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0xc, 0xb9, 0x3, 0x8e, 0x4, 0xc50}, {0x804, 0x1, 0x4, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xfffdffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r6, 0x7b1, &(0x7f0000000240)={0x0, 0x6, 0x0, 0x7}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)=@deltfilter={0xa8, 0x2d, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0x7, 0xa}, {0x4, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x6}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x1}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xffffffff}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x2}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x3}]}}, @TCA_CHAIN={0x8, 0xb, 0x40}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}, @TCA_RATE={0x6, 0x5, {0xff, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4800}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 1.229427284s ago: executing program 7 (id=341): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="0f2391ba4300b000eedad09a09895d00f30fc2cb99f080a308cf0d2e0f01c2baa00066b80b00000066ef670f060f20d86635080000000f22d8", 0x39}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x2, 0x0, 0x7f, 0x44233, 0x200000000007, 0x81, 0x941, 0x1, 0x1205, 0x4, 0x1000000004004, 0x0, 0xfffffdfffffffffd], 0x2, 0x84340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.174460103s ago: executing program 3 (id=342): sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000300)={0xa, 0x9d1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='\x00\b', @ANYRES16, @ANYBLOB="000425bd7000fcdbdf25170000000c00990007000000170000000a000600ffffffffffff00000a00060008021100000100000a00060008021100000000000a0006000802110000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40040c0}, 0x8000) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000340)={0x2}) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r1, 0x80079a3) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) getpid() 875.509655ms ago: executing program 5 (id=343): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) fsmount(0xffffffffffffffff, 0xf7421b7d232801cb, 0x0) syz_clone(0xa00, &(0x7f0000000700)="d8921b1e7f80f6f2a3026d5fedacd80590d235b54a3ce8f76c379a991eb751104a01956f50ce05903ea4c0e7dd3d8da65a6fd260e6b8bdbcb84df1c0e9df531f46c22380954ba515dbab554e49d4605a468fc643347a2922f17259e3a87c6bd61225e3e7aa5e55d50d9ccda8565971349e888e1ee37038d504e61ae9bd2bd024fa13dc3286aa7e4ed54e25438beaa43ab564cc53078ff20c56fbbdbbb9585ee1b10a54bc3f836be5aab820b23cb46b688a25e707545e353473ffe0f3f29d4310975cb6e21590db257356c0fa7366f66cbdd925ebfcfdf4bcc29e41b450ea0a12f7e0a5920b362f2620ecd2b73bd075688c043d213be2718e4f9c1e6d7c9189f9fc557784f0e61318c689d3d7dd472970ef333577b713113453749580020c0b1e2df73c17a46f14f483a892db09ef8eed562513e4eafe224e98039129ecba1af833d2ce79f2d7a3ec690db0d4baa83b8586db3f99b538ac33b880d85398267d171019bb5ae847a7e1ea97e827dc228b6ed93a4fd80103a61798741d7fda0bf53514e331fc8780af27a717a2b6f0598fc2dd876f27fe9f10c8b18590b10d7e5ba3d6e634243170c554199124c5a3cfa3fa637f87c14da8080eccb8836ad6bdda07b76ce4777639599ebac9f238dac4b8bff064d11b7923a673839417b5fb12b69672ec5c9df6a60b9aae336939b149c7b6eb384aebf069defa1da113d6c14ab848258f47c57162c7b34736d8bcdb692f1d290c06812616765fe7757c56af98cafd5437aee8223d6f16413d31677bef8d5e20798074af3a76a6ddf8889a6c7e4c541d1cf21120c8a9731ac2c186171d9630b21051847949a1bfc6c5571ed4ffb01318a2f9bf19ac2b4f3626dfc5ff712c0eea46cf0697d03e1319843106df2e33d66f6eaa9fa60793e5bc595bfbbd68b24fa4e74318b5443c687498d88b954378d58401080573a3b4eb7307d4d9866ed8a2329d29699e5b92b7c67375cd420ea6b51f47663220a27e16aa9a60dac447f17890468ac7e7af0e5e85d4b2af63aae8b3d2cd9657c5f8717cc2a9d7a3a09f4c6cfb3f40642de9b262956bef23910f2b78c040f4896f5b4e88b33e544f8a2db2426e0d969c24a6973bb22829cb591e7ac679dfef1c11023ceab5a76ff0bca50587d67a23abe616fa31b582f281518501853fc60c8babde609792afb0c36be1e7d9595a3e2ef39257f91039303e17a01792852a95426a8c6268489a9c3465fe70a0464d1ab1d22ae07ec4cba6e2d20a8f5905265e7375acc4c2bbab603bf66d1b89fb8353959dc8552be94e8348b6d760e522736136f05830a675256d9234d1c8ffb1c49abe3d20d76d6b4c5a6c000485e9bceef811b0463c7d4eaf9a52efcd7d7ff06f1f6835c6ba178ac81a3be5b97c065bc243124897d7b575278ba209f36cc53b42f595f7d5c02301525be421fc4323522f6372d4f23dcbf4ba3192f2350a8ef847014131786a1b4136a82a0d65346aaf52840dd57d445105a560048f12dd6b2a4bfb6840b876c07fcd5d6b02733b787433181951f1b1a8651fbca4cb193bedbd89b1fcf489d97e38a685720d24290d68a120af91bb459e2fe9f50ba846bd409f8cabbc58e1eb4addc5f14ccd2ffcc4d8f5353def424122bcf53321d15f69b0d3859b0dadec52a1bb4446ccb943c238a5ee94735d473c70eeaad49a654c0813f674f7da7f9117f76ccc434291e5e4e0a2aa84b46a68700d944b1259dd2c1370308bf590e1ee5a55017fb6798022a3edee9a0ec66fc9ac7670e6c4d7a3970921ee9fdbf85684ff4b4e4eb221e682c9f1c743476838acc1342ad52ce153f99e76c07b9802cd67a9043e698873a199eb2ad65e7922e4af8e15b5a2106c71feddc5b13a1a6cbde4dbc926b754c4ae77c5b038c1a3c060b13439695670fd0a4fdf36b7b59745020353471455424eb3f792fb2db212215843128dbc8df5109fc066981aff3e445528f6f8c759b44f2a220c37208ea9bdbe95cca1f24db6aef1d2b7d23ffba01c54e974f7a5ae7785a7d3e4a876df1046ec0e83e5516c07b2ada11c1b93e41c8806b5414da91fe8eb3b7cdf8e3e8cb66267e2f960910901a94002862a2ebd5b57de4be734d93a2de4646d8618968efe6b3ca6b1150161baace79bab9f70412fac8fc4f595c5f32e7aaf047d2b944fd5cb50872a7571bbe1e7f2af817ab6610185880f1a2d8085422ce6d9e25a65b98d484909e4f8b3d8bb77411e19db99f5c6afe89ec618ddcfddf626ee053987f44c6203949951f1b15a5db71b3d01f22d569b9620d5368cc43b92f94d7331661b276b3740cf470245e83583be858a432ff44499c25e53c365b70375d42b16ea9e0d13c29a79fb9d285e4361088d37821bf6e97635564b6f4fb8b8212d4b2c055715f20d0592da166152439ee2c0a23128db05d0c68dbc8bd7de15d6d7ae85bdb393ae434b5471379f2b9032f8bd7e1bea480f44532cd7258255ced93cc65f1f64fa4a99206da42a0c5cff44cd1e599e329cac578f476d59472e74f0a9d3518d05b58df3cc35e440998e94c6b718749f8c2a555d687e9742b5fe73ccd69024243b156cedf81dae7892de2059f94912e55a496f37a35fe67769523b9ae40b0876a7bc3678951537ffa1a6808e2f0ff3d962eda3e703e0e89fa4d341df800d04443a968f475854000cb8a68e8b98c433adfe1ef4d2e1440db18ab989ce6ee85ce9bd51d8f327d713f5d4d229015399dc50050acaf79d649fb3f2ec0cbb26b8c6f826dc579baa6ec0a2e04dc308016402e19d9c18f6614ca62f58b0063a30deed54444a3348e253494981e77dd63d6fc885fbf8e9d63a441bcbebee55b33f30de0dc4a707a410f41e25db3046a1910f065bc0804e340e171352a29103d229769538af7988badb7498d961fadb160cc56635aa8dbb433419df032985c910a545560055ef913856c810a0445e3e755201bee18092f4b7d52df6e9a677438edf12e0a0e4c58515e9b96047321639d646837c49a6544bfb6e2bda2a2d1c55850b5aa442af2e3e2a127851a3808bc5f061fac36646bf1e9f6185d5854fe58d676df329ec3b4767fdb6d9f8e66c02faa8e84a8151b06c3a76ba40b5e3d3cbf818068c21d09d670e5e91ef55510e50a428f827abf44fc1737771e1fa84de7247117b32ca1e0908d458c5a94feb188d33c4c0bb221c4888e3f6a63617ae00845d5101535a67920fbb835035e244292f4f5d4176b2f904ad1e3cfb5c636ede945274ecbd155e70b38d53c6e82e74a5e52fe693cba7bd13b4494f47970070b777d0b2c492821ac958d10797a6507e2ebab7c1ce246041486433e4652eee93f512387b3cb12123dbcb2c152579570245a5bb10ac39b0123c901d145d5613a875a706e3aa971181ff34471830526c73b9c1e20d9d7ffa316d048ba6a9a9bb07a1f4579c81851fff7cb3ad17bc0ffd68646f3e87b17fd88336ab7f0a5d9c516239a89cdeb4f0c0290ee6e5cf8bf140568954592827fa6684be404e113f798ff9244f302535fd6ce68ade08cbcc71edb32b6dfddfd5afe0c93cfddbb59dd35ad9a5a15ca2ad1ca4df6e217c0bcdba2cec802a86b1ebdda45f715d0758e8f0e9d43135ea7616076fd8d65b49c8abbbfe44bba19d53d8ef9fb2fa89a9efa06c178624ab2060c48120ec0747fd2ca291e08158354d0d228d187e13b22e0b4cb3713c6d846df6f1ac3125e84f0943d98453cac43bb4c98a420ce2a32aff3a2d38ccfa934978e4864171608bc54bf889f62f74a251bd13a810cdbb0ebb777c320f5595f882d28853f47f5020fe3de26fb949ff66e069aa9e4067a091706b8244b3f8a3dfa7fe1e999120bd49bbc068c3bde48379727ee362303a677d5ae153fb651c6d72dfd96582cc3d15b2fc6b608a901d1084ea409120f963b3a6a97d6a50a2f73c98b9d56bd3ff9c1c11a3fb928f96b9c7dc9f4a45ec2f6e544ca897374c829d00b779428d3e0cae41c67fbc98483d41f724d55de39ec1fbbe9a4ad3baaaa540ddb603b21986a30da8bbcfe26f98f05830145870e11be69e6875eb3da363ba40e106b5874f617cf4ab8ece367e402ef79a6bbde1ae6ca4a635d3078b049f3df2315f16afa187a0a07d95317ec6225bad71e0c32f0cb02eff8514d514928f8966e6ec720482a52b2b9613dfc20f22828e844faf44a0acb435c8b553e3a2105d4d3e129e5ca55cbf63436bbd8691fc9cb63e499bb8aa574aa35d4d66d01ebed6665a2b7f56297b74b1399bc57212a667d9d52f55ed76e57dfdaa193da2140a4597bf04dc87c1173ff8df6753c03a7a4e0a5cacd74086ebac82d2c790ae582fe0f8f26f797efe36ad58", 0xc00, &(0x7f0000001700), &(0x7f0000001740), &(0x7f0000001780)="9e2711") r2 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r4) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r7, 0xc) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x0, 0x1, 0x1, 0xf, 0x300, 0x1}, &(0x7f0000000080)=0x20) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000140), 0x10) dup3(0xffffffffffffffff, r2, 0x80000) sendmsg$can_bcm(r8, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000780)={0x2c, &(0x7f0000000580)={0x40, 0x4, 0x31, {0x31, 0x5, "6fe5b2cd31fb65f4ebbc3406d1ebcc250b290a7bf67e7933087b8bf80181d02c058f6539614d6f481d8a1bc5187132"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010400000000000000000a00000a0900010073797a31000000000700000000000000090001006d6574610000000044000280080001400000000c080003400000000008000240000000190800014000000009080001400000000b08000140000000120700000000000015080003"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x10004880) 865.170866ms ago: executing program 7 (id=344): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x4, 0xe, 0x0, 0x1, 0x3, 0x3e, 0xffffffea, 0x283, 0x40, 0x0, 0x0, 0xcf31, 0x38, 0x0, 0xfffb, 0x500, 0xa}}, 0x40) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141042, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) rename(&(0x7f0000000200)='./file3\x00', &(0x7f0000000240)='./file1\x00') r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x9) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0xa, 0x4) r2 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000300)='ms_mode\x00', &(0x7f0000000400)='secure\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000500)={0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 301.514609ms ago: executing program 4 (id=345): ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket(0x28, 0x80000, 0xfbfffffe) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) getpeername$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000180)={0x0, 0x0, 0x9d, r2, 0xffffffcc}, 0xc) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x9, 0x1) fchdir(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 242.518786ms ago: executing program 6 (id=346): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 41.984357ms ago: executing program 6 (id=347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) r3 = socket$unix(0x1, 0x1, 0x0) listen(r3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0\n', 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x1f, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180062d47c0cffff000000d58000"/32], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 0s ago: executing program 5 (id=348): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='usb3503 0x08\n\x00', 0xd) kernel console output (not intermixed with test programs): cd [ 94.890438][ T5702] usb usb1-port1: unable to enumerate USB device [ 94.961157][ T5739] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 94.991501][ T5739] usb 4-1: USB disconnect, device number 4 [ 95.005131][ T189] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 95.071228][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.105145][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 95.113860][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 95.136035][ T10] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 95.155882][ T189] usb 3-1: device descriptor read/64, error -71 [ 95.165020][ T10] usb 5-1: string descriptor 0 read error: -22 [ 95.180582][ T10] usb 5-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 95.199390][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.293584][ T189] usb usb3-port1: attempt power cycle [ 95.362437][ T6106] evm: overlay not supported [ 95.516506][ T5710] usb 5-1: USB disconnect, device number 4 [ 95.645362][ T189] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 95.675564][ T189] usb 3-1: device descriptor read/8, error -71 [ 95.718160][ T5607] overlayfs: failed lookup in lower (newroot/19, name='bus', err=-40): overlapping layers [ 95.732972][ T5607] overlayfs: failed lookup in lower (newroot/19, name='bus', err=-40): overlapping layers [ 95.785737][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 95.877143][ T5717] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 95.925773][ T189] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 95.947949][ T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 95.958252][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.968347][ T189] usb 3-1: device descriptor read/8, error -71 [ 95.977910][ T10] usb 4-1: config 0 descriptor?? [ 95.985486][ T10] cp210x 4-1:0.0: cp210x converter detected [ 96.039665][ T5717] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 96.067338][ T5717] usb 1-1: config 1 has no interface number 0 [ 96.073157][ T84] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.094875][ T5717] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 96.099776][ T189] usb usb3-port1: unable to enumerate USB device [ 96.135404][ T5717] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 96.156722][ T5717] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.172282][ T5717] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 96.222901][ T6113] tmpfs: Bad value for 'mpol' [ 96.260459][ T84] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.278642][ T5717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.288107][ T10] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 96.314468][ T10] cp210x 4-1:0.0: querying part number failed [ 96.315107][ T5717] usb 1-1: Product: syz [ 96.332054][ T5717] usb 1-1: Manufacturer: syz [ 96.343717][ T10] usb 4-1: cp210x converter now attached to ttyUSB0 [ 96.344622][ T5717] usb 1-1: SerialNumber: syz [ 96.374671][ T6116] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 96.427291][ T84] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.510731][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 96.510746][ T29] audit: type=1400 audit(1785654941.506:343): avc: denied { getopt } for pid=6119 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.519403][ T6113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.566891][ T84] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.580207][ T6113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.593910][ T6116] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 96.684667][ T29] audit: type=1400 audit(1785654941.676:344): avc: denied { search } for pid=5270 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.752885][ T29] audit: type=1400 audit(1785654941.676:345): avc: denied { search } for pid=5270 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.823687][ T5717] usb 1-1: Incompatible driver and firmware versions [ 96.837660][ T29] audit: type=1400 audit(1785654941.676:346): avc: denied { search } for pid=5270 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.865338][ T5610] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.865468][ T84] bridge_slave_1: left allmulticast mode [ 96.875588][ T5610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.890153][ T6126] ======================================================= [ 96.890153][ T6126] WARNING: The mand mount option has been deprecated and [ 96.890153][ T6126] and is ignored by this kernel. Remove the mand [ 96.890153][ T6126] option from the mount to silence this warning. [ 96.890153][ T6126] ======================================================= [ 96.891116][ T5610] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.936633][ T5610] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.945949][ T5610] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.955090][ T5717] usb 1-1: USB disconnect, device number 11 [ 96.959515][ T84] bridge_slave_1: left promiscuous mode [ 96.968160][ T29] audit: type=1400 audit(1785654941.676:347): avc: denied { read } for pid=5270 comm="dhcpcd" name="n30" dev="tmpfs" ino=2375 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 97.010962][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.023520][ T29] audit: type=1400 audit(1785654941.676:348): avc: denied { open } for pid=5270 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2375 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 97.078355][ T84] bridge_slave_0: left allmulticast mode [ 97.102987][ T84] bridge_slave_0: left promiscuous mode [ 97.118617][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.129988][ T29] audit: type=1400 audit(1785654941.676:349): avc: denied { getattr } for pid=5270 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2375 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 97.302315][ T29] audit: type=1400 audit(1785654941.846:350): avc: denied { ioctl } for pid=6128 comm="syz-executor" path="socket:[10153]" dev="sockfs" ino=10153 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.329126][ T29] audit: type=1400 audit(1785654941.946:351): avc: denied { read } for pid=6130 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.351918][ T189] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 97.373180][ T29] audit: type=1400 audit(1785654941.946:352): avc: denied { read open } for pid=6130 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.947139][ T6138] vivid-000: disconnect [ 97.952464][ T6137] vivid-000: reconnect [ 98.048624][ T189] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.067589][ T189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 98.090164][ T189] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.129974][ T189] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 98.157396][ T189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.188176][ T189] usb 5-1: config 0 descriptor?? [ 98.421000][ T189] ath6kl: Failed to submit usb control message: -71 [ 98.447004][ T189] ath6kl: unable to send the bmi data to the device: -71 [ 98.470228][ T189] ath6kl: Unable to send get target info: -71 [ 98.482735][ T189] ath6kl: Failed to init ath6kl core: -71 [ 98.500747][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.501665][ T189] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 98.531004][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.554904][ T84] bond0 (unregistering): Released all slaves [ 98.562406][ T189] usb 5-1: USB disconnect, device number 5 [ 98.596081][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1 [ 99.075617][ T5610] Bluetooth: hci2: command tx timeout [ 99.199403][ T5605] overlayfs: failed lookup in lower (newroot/15, name='bus', err=-40): overlapping layers [ 99.231508][ T5605] overlayfs: failed lookup in lower (newroot/15, name='bus', err=-40): overlapping layers [ 99.357335][ T84] hsr_slave_0: left promiscuous mode [ 99.382760][ T84] hsr_slave_1: left promiscuous mode [ 99.408599][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.462614][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.479692][ T10] usb 4-1: USB disconnect, device number 5 [ 99.502240][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 99.512796][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.548351][ T10] cp210x 4-1:0.0: device disconnected [ 99.560970][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.633107][ T6185] loop7: detected capacity change from 0 to 7 [ 99.713993][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 99.724273][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 99.766996][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 99.776691][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 99.794583][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 99.804263][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 99.813365][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 99.822967][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 99.844699][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 99.854383][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 99.878257][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 99.887934][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 99.930543][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 99.940216][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 99.948202][ T6185] ldm_validate_partition_table(): Disk read failed. [ 99.960426][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 99.970219][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 100.007034][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 100.016752][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 100.080754][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 100.090467][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 100.107731][ T6185] Dev loop7: unable to read RDB block 0 [ 100.123299][ T6185] loop7: unable to read partition table [ 100.129097][ T6185] loop7: partition table beyond EOD, truncated [ 100.135308][ T6185] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 100.444200][ T6182] mmap: syz.4.109 (6182) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 100.465858][ T84] veth1_macvtap: left promiscuous mode [ 100.546970][ T84] veth0_macvtap: left promiscuous mode [ 100.576559][ T6191] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 100.615476][ T84] veth1_vlan: left promiscuous mode [ 100.621354][ T84] veth0_vlan: left promiscuous mode [ 100.646717][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.111'. [ 100.682520][ T6191] Zero length message leads to an empty skb [ 101.010148][ T6210] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 101.022533][ T6210] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 101.034490][ T6210] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 101.045322][ T6210] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 101.059937][ T6210] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 101.076951][ T6210] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 101.088860][ T6210] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 101.100435][ T6210] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 101.112775][ T6210] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 101.145686][ T84] team0 (unregistering): Port device team_slave_1 removed [ 101.156957][ T5610] Bluetooth: hci2: command tx timeout [ 101.163987][ T84] team0 (unregistering): Port device team_slave_0 removed [ 101.195369][ T189] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 101.359539][ T189] usb 4-1: Using ep0 maxpacket: 32 [ 101.369470][ T189] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.382185][ T189] usb 4-1: config 0 has no interfaces? [ 101.388850][ T5270] 8021q: adding VLAN 0 to HW filter on device eth2 [ 101.400178][ T6206] netlink: 'syz.2.112': attribute type 2 has an invalid length. [ 101.411545][ T6206] netlink: 20 bytes leftover after parsing attributes in process `syz.2.112'. [ 101.424672][ T189] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 101.435180][ T189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.443202][ T189] usb 4-1: Product: syz [ 101.479808][ T189] usb 4-1: Manufacturer: syz [ 101.504394][ T189] usb 4-1: SerialNumber: syz [ 101.543613][ T189] usb 4-1: config 0 descriptor?? [ 101.687131][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 101.687142][ T29] audit: type=1400 audit(1785654946.686:369): avc: denied { getopt } for pid=6215 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.859969][ T29] audit: type=1400 audit(1785654946.716:370): avc: denied { name_bind } for pid=6215 comm="syz.2.114" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 101.974686][ T29] audit: type=1400 audit(1785654946.726:371): avc: denied { create } for pid=6215 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 102.037664][ T29] audit: type=1400 audit(1785654946.726:372): avc: denied { ioctl } for pid=6215 comm="syz.2.114" path="socket:[11096]" dev="sockfs" ino=11096 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 102.189005][ T84] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.214036][ T6128] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.231912][ T6128] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.245217][ T6128] bridge_slave_0: entered allmulticast mode [ 102.252489][ T29] audit: type=1400 audit(1785654947.246:373): avc: denied { write } for pid=6214 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.254631][ T6128] bridge_slave_0: entered promiscuous mode [ 102.339041][ T84] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.339903][ T6240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.117'. [ 102.359124][ T29] audit: type=1400 audit(1785654947.346:374): avc: denied { bind } for pid=6239 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 102.417713][ T29] audit: type=1400 audit(1785654947.416:375): avc: denied { write } for pid=6242 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.476551][ T29] audit: type=1400 audit(1785654947.456:376): avc: denied { name_bind } for pid=6238 comm="syz.2.117" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 102.535763][ T6128] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.552110][ T6128] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.566790][ T6128] bridge_slave_1: entered allmulticast mode [ 102.574170][ T6128] bridge_slave_1: entered promiscuous mode [ 102.581527][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.678410][ T29] audit: type=1400 audit(1785654947.656:377): avc: denied { read write } for pid=6239 comm="syz.4.118" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 102.678622][ T29] audit: type=1400 audit(1785654947.656:378): avc: denied { open } for pid=6239 comm="syz.4.118" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 102.688475][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.693368][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.700654][ T5608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.704491][ T5608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.937878][ T6243] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 102.951719][ T6243] batman_adv: batadv0: Adding interface: gretap1 [ 102.958622][ T6243] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.984903][ T6243] batman_adv: batadv0: Interface activated: gretap1 [ 102.994888][ T5270] 8021q: adding VLAN 0 to HW filter on device eth3 [ 103.051546][ T84] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.092231][ T6128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.105870][ T6128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.202309][ T84] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.235101][ T5610] Bluetooth: hci2: command tx timeout [ 103.276810][ T6128] team0: Port device team_slave_0 added [ 103.301465][ T6128] team0: Port device team_slave_1 added [ 103.442067][ T6128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.477722][ T6128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.562699][ T6128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.589823][ T6128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.604722][ T6128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.656919][ T6128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.778762][ T6128] hsr_slave_0: entered promiscuous mode [ 103.785865][ T6128] hsr_slave_1: entered promiscuous mode [ 103.792234][ T6128] debugfs: 'hsr0' already exists in 'hsr' [ 103.798385][ T6128] Cannot create hsr debugfs directory [ 103.835192][ T5702] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 103.959945][ T84] bridge_slave_1: left allmulticast mode [ 103.972618][ T84] bridge_slave_1: left promiscuous mode [ 103.984144][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.996283][ T46] usb 4-1: USB disconnect, device number 6 [ 104.004434][ T84] bridge_slave_0: left allmulticast mode [ 104.010383][ T5702] usb 5-1: Using ep0 maxpacket: 8 [ 104.019699][ T84] bridge_slave_0: left promiscuous mode [ 104.033759][ T5702] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.047441][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.061652][ T5702] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 104.077170][ T5702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.098666][ T5702] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 104.121844][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 104.138254][ T5702] usb 5-1: Product: syz [ 104.152116][ T5702] usb 5-1: Manufacturer: syz [ 104.161264][ T5702] usb 5-1: SerialNumber: syz [ 104.184222][ T5702] usb 5-1: config 0 descriptor?? [ 104.275104][ T5702] rc_core: IR keymap rc-imon-rsc not found [ 104.286581][ T5702] Registered IR keymap rc-empty [ 104.303994][ T5702] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 104.319700][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.332756][ T5702] input: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 104.346594][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.361823][ T84] bond0 (unregistering): Released all slaves [ 104.415829][ T84] bond1 (unregistering): Released all slaves [ 104.445309][ T46] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 104.505292][ T5702] usb 5-1: USB disconnect, device number 6 [ 104.560399][ T5270] 8021q: adding VLAN 0 to HW filter on device eth4 [ 104.618152][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 104.636644][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.655468][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.666232][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 104.680369][ T46] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 104.692054][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.766585][ T46] usb 4-1: config 0 descriptor?? [ 104.983785][ T6285] netlink: 4104 bytes leftover after parsing attributes in process `syz.3.121'. [ 104.998476][ T5610] Bluetooth: hci1: command tx timeout [ 105.014483][ T6285] openvswitch: netlink: Flow key attr not present in new flow. [ 105.119673][ T84] hsr_slave_0: left promiscuous mode [ 105.142749][ T84] hsr_slave_1: left promiscuous mode [ 105.164353][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.173402][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.207191][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.215973][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.267966][ T84] veth1_macvtap: left promiscuous mode [ 105.273615][ T84] veth0_macvtap: left promiscuous mode [ 105.305312][ T84] veth1_vlan: left promiscuous mode [ 105.315634][ T5610] Bluetooth: hci2: command tx timeout [ 105.322872][ T84] veth0_vlan: left promiscuous mode [ 105.343677][ T46] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0001/input/input8 [ 105.468393][ T46] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 105.552196][ T46] usb 4-1: USB disconnect, device number 7 [ 105.662128][ T6311] fido_id[6311]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 105.971718][ T84] team0 (unregistering): Port device team_slave_1 removed [ 106.011081][ T84] team0 (unregistering): Port device team_slave_0 removed [ 106.226316][ T6322] Mass Storage Function, version: 2009/09/11 [ 106.241633][ T6322] LUN: removable file: (no medium) [ 106.404474][ T5270] 8021q: adding VLAN 0 to HW filter on device eth5 [ 106.737147][ T6128] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 106.856204][ T6128] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.894422][ T6128] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 107.729587][ T5610] Bluetooth: hci1: command tx timeout [ 107.798996][ T6128] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.337755][ T6128] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 108.359897][ T6128] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.390737][ T6128] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 108.402442][ T6128] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.454027][ T6247] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.456176][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 108.456190][ T29] audit: type=1400 audit(1785654953.446:414): avc: denied { append } for pid=6356 comm="syz.2.132" name="comedi1" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 108.461493][ T6247] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.507177][ T6247] bridge_slave_0: entered allmulticast mode [ 108.514834][ T6247] bridge_slave_0: entered promiscuous mode [ 108.528393][ T6247] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.538805][ T6247] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.546734][ T6247] bridge_slave_1: entered allmulticast mode [ 108.554254][ T6247] bridge_slave_1: entered promiscuous mode [ 108.588357][ T6247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.601348][ T6247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.202760][ T29] audit: type=1400 audit(1785654953.956:415): avc: denied { bind } for pid=6356 comm="syz.2.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 109.243555][ T6128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.324172][ T29] audit: type=1400 audit(1785654954.316:416): avc: denied { read } for pid=6372 comm="syz.3.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.453249][ T6247] team0: Port device team_slave_0 added [ 109.490226][ T6247] team0: Port device team_slave_1 added [ 109.613790][ T29] audit: type=1400 audit(1785654954.606:417): avc: denied { create } for pid=6377 comm="syz.2.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 110.122524][ T5610] Bluetooth: hci1: command tx timeout [ 110.162217][ T6247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.170095][ T6247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.196712][ T46] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 110.211280][ T6247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.223551][ T6380] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6380 comm=syz.2.136 [ 110.244969][ T6247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.255574][ T6247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.371824][ T6247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.375875][ T6390] dyndbg: bad flag-op f, at start of f_subset.cZ+p [ 110.382572][ T29] audit: type=1400 audit(1785654955.366:418): avc: denied { mount } for pid=6377 comm="syz.2.136" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 110.414367][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 110.446788][ T46] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 110.463166][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.471472][ T46] usb 4-1: Product: syz [ 110.475684][ T46] usb 4-1: Manufacturer: syz [ 110.480299][ T46] usb 4-1: SerialNumber: syz [ 110.485962][ T6390] dyndbg: flags parse failed [ 110.560830][ T46] usb 4-1: config 0 descriptor?? [ 110.573676][ T6128] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.593728][ T29] audit: type=1400 audit(1785654955.586:419): avc: denied { ioctl } for pid=6377 comm="syz.2.136" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x643c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 111.028681][ T6188] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.035827][ T6188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.053515][ T46] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 111.085158][ T46] pctv452e: pctv452e_power_ctrl: 1 [ 111.085158][ T46] [ 111.119105][ T46] usb 4-1: selecting invalid altsetting 3 [ 111.135659][ T29] audit: type=1400 audit(1785654956.126:420): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 111.156910][ T6247] hsr_slave_0: entered promiscuous mode [ 111.171178][ T6247] hsr_slave_1: entered promiscuous mode [ 111.182454][ T6247] debugfs: 'hsr0' already exists in 'hsr' [ 111.191330][ T46] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 111.191330][ T46] [ 111.201733][ T6247] Cannot create hsr debugfs directory [ 111.241910][ T46] dvb-usb: bulk message failed: -22 (5/0) [ 111.265691][ T29] audit: type=1400 audit(1785654956.256:421): avc: denied { write } for pid=6375 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.346293][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.353382][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.416911][ T46] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 111.450251][ T46] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 111.465380][ T6401] dvb-usb: bulk message failed: -22 (7/0) [ 111.486191][ T46] usb 4-1: media controller created [ 111.488268][ T29] audit: type=1400 audit(1785654956.476:422): avc: denied { setopt } for pid=6403 comm="syz.4.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.566535][ T6401] pctv452e: I2C error -22; AA 01 80 00 03 -> aa 01 31 03 80 00 03 [ 111.599133][ T29] audit: type=1400 audit(1785654956.596:423): avc: denied { read } for pid=6403 comm="syz.4.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.652198][ T46] dvb-usb: bulk message failed: -22 (8/0) [ 111.688736][ T46] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 111.727153][ T46] dvb-usb: MAC address reading failed. [ 111.821307][ T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.926511][ T5270] 8021q: adding VLAN 0 to HW filter on device eth6 [ 112.047102][ T46] DVB: Unable to find symbol stb0899_attach() [ 112.078683][ T6247] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 112.093519][ T46] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 112.111206][ T6247] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.129400][ T6247] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 112.156038][ T6247] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.187131][ T6247] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 112.195201][ T5610] Bluetooth: hci1: command tx timeout [ 112.221186][ T6247] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.240869][ T6247] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 112.255116][ T46] rc_core: IR keymap rc-tt-1500 not found [ 112.271760][ T46] Registered IR keymap rc-empty [ 112.278260][ T46] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 112.280960][ T6247] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.291374][ T46] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input10 [ 112.338197][ T46] dvb-usb: schedule remote query interval to 100 msecs. [ 112.353181][ T46] pctv452e: pctv452e_power_ctrl: 0 [ 112.353181][ T46] [ 112.373069][ T46] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 112.457484][ T804] dvb-usb: bulk message failed: -22 (4/0) [ 112.499171][ T804] dvb-usb: error -22 while querying for an remote control event. [ 112.655867][ T46] dvb-usb: bulk message failed: -22 (4/0) [ 112.673978][ T46] dvb-usb: error -22 while querying for an remote control event. [ 112.741632][ T6247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.815690][ T46] dvb-usb: bulk message failed: -22 (4/0) [ 112.817633][ T6247] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.855928][ T46] dvb-usb: error -22 while querying for an remote control event. [ 112.892805][ T1035] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.899998][ T1035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.956438][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.963602][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.985707][ T46] dvb-usb: bulk message failed: -22 (4/0) [ 112.995770][ T46] dvb-usb: error -22 while querying for an remote control event. [ 113.133585][ T6128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.143560][ T46] dvb-usb: bulk message failed: -22 (4/0) [ 113.156856][ T46] dvb-usb: error -22 while querying for an remote control event. [ 113.275720][ T46] dvb-usb: bulk message failed: -22 (4/0) [ 113.294201][ T46] dvb-usb: error -22 while querying for an remote control event. [ 113.295352][ T5703] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 113.445144][ T804] dvb-usb: bulk message failed: -22 (4/0) [ 113.466738][ T804] dvb-usb: error -22 while querying for an remote control event. [ 113.507154][ T5703] usb 5-1: unable to get BOS descriptor or descriptor too short [ 113.538742][ T5703] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.570708][ T5703] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.605310][ T804] dvb-usb: bulk message failed: -22 (4/0) [ 113.611514][ T5703] usb 5-1: string descriptor 0 read error: -22 [ 113.631704][ T5703] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 113.636639][ T804] dvb-usb: error -22 while querying for an remote control event. [ 113.679623][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.754494][ T5703] usb 5-1: selecting invalid altsetting 1 [ 113.766041][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 113.766057][ T29] audit: type=1400 audit(1785654958.766:426): avc: denied { write } for pid=6464 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.780383][ T6128] veth0_vlan: entered promiscuous mode [ 113.814343][ T5703] usb 5-1: unit 3 not found! [ 113.819008][ T46] dvb-usb: bulk message failed: -22 (4/0) [ 113.819048][ T46] dvb-usb: error -22 while querying for an remote control event. [ 113.909523][ T6128] veth1_vlan: entered promiscuous mode [ 113.927393][ T5724] dvb-usb: bulk message failed: -22 (4/0) [ 113.933776][ T5724] dvb-usb: error -22 while querying for an remote control event. [ 114.011605][ T5270] 8021q: adding VLAN 0 to HW filter on device eth7 [ 114.034572][ T29] audit: type=1400 audit(1785654959.026:427): avc: denied { connect } for pid=6447 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.036045][ T6128] veth0_macvtap: entered promiscuous mode [ 114.068936][ T5702] usb 4-1: USB disconnect, device number 8 [ 114.076230][ T804] dvb-usb: bulk message failed: -22 (4/0) [ 114.076484][ T5703] usb 5-1: unit 0 not found! [ 114.090615][ T804] dvb-usb: error -22 while querying for an remote control event. [ 114.166222][ T6128] veth1_macvtap: entered promiscuous mode [ 114.254127][ T6128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.309416][ T6128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.324159][ T5702] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 114.366678][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.451358][ T5703] usb 5-1: USB disconnect, device number 7 [ 114.765209][ T1035] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.786018][ T6247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.856547][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.895546][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.981421][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.145'. [ 114.990352][ T46] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 115.012433][ T6188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.045410][ T6188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.064447][ T29] audit: type=1400 audit(1785654960.056:428): avc: denied { write } for pid=6479 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.132885][ T29] audit: type=1400 audit(1785654960.116:429): avc: denied { connect } for pid=6497 comm="syz.4.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 115.175567][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 115.264498][ T46] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 115.424965][ T46] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 115.552252][ T29] audit: type=1400 audit(1785654960.116:430): avc: denied { write } for pid=6497 comm="syz.4.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 115.556515][ T46] usb 3-1: config 0 interface 0 has no altsetting 0 [ 115.599309][ T1035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.629617][ T1035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.643440][ T46] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 115.667689][ T29] audit: type=1400 audit(1785654960.576:431): avc: denied { mmap_zero } for pid=6502 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 115.685794][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.741627][ T46] usb 3-1: config 0 descriptor?? [ 115.763543][ T29] audit: type=1400 audit(1785654960.706:432): avc: denied { write } for pid=6504 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.804016][ T29] audit: type=1400 audit(1785654960.746:433): avc: denied { mounton } for pid=6128 comm="syz-executor" path="/root/syzkaller.yxsMU4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=13382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 115.870818][ T5270] 8021q: adding VLAN 0 to HW filter on device eth8 [ 115.961390][ T6247] veth0_vlan: entered promiscuous mode [ 115.991956][ T6247] veth1_vlan: entered promiscuous mode [ 115.998367][ T5703] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 116.061068][ T6247] veth0_macvtap: entered promiscuous mode [ 116.084916][ T6247] veth1_macvtap: entered promiscuous mode [ 116.128975][ T6247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.143874][ T6247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.155113][ T5703] usb 4-1: Invalid ep0 maxpacket: 64 [ 116.280954][ T46] redragon 0003:0C45:760B.0002: hidraw0: USB HID v10.01 Device [HID 0c45:760b] on usb-dummy_hcd.2-1/input0 [ 116.317088][ T5703] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 116.385349][ T6188] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.403511][ T6188] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.461151][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.475967][ T1101] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.481618][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.495880][ T1101] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.498731][ T5703] usb 4-1: Invalid ep0 maxpacket: 64 [ 116.526168][ T5703] usb usb4-port1: attempt power cycle [ 116.569369][ T29] audit: type=1400 audit(1785654961.566:434): avc: denied { connect } for pid=6524 comm="syz.4.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 116.572665][ T6526] usb_phy_generic pcspkr: dummy supplies not allowed for exclusive requests (id=vbus) [ 116.618602][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.629620][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.769010][ T5702] usb 3-1: USB disconnect, device number 10 [ 116.859456][ T6532] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 116.896966][ T5703] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 117.294984][ T5703] usb 4-1: Invalid ep0 maxpacket: 64 [ 117.445560][ T5703] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 117.477533][ T5703] usb 4-1: Invalid ep0 maxpacket: 64 [ 117.487142][ T5703] usb usb4-port1: unable to enumerate USB device [ 117.571810][ T6546] netlink: 20 bytes leftover after parsing attributes in process `syz.5.154'. [ 117.590103][ T6546] team0 (unregistering): Port device team_slave_0 removed [ 117.602939][ T6546] team0 (unregistering): Port device team_slave_1 removed [ 117.623753][ T29] audit: type=1400 audit(1785654962.616:435): avc: denied { read } for pid=6544 comm="syz.5.154" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 117.653667][ T6549] netlink: 24 bytes leftover after parsing attributes in process `syz.4.155'. [ 117.666481][ T46] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 118.000068][ T46] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 118.031854][ T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.126638][ T5724] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 118.183879][ T46] usb 7-1: config 0 descriptor?? [ 118.269882][ T46] cp210x 7-1:0.0: cp210x converter detected [ 118.295265][ T5724] usb 5-1: device descriptor read/64, error -71 [ 118.512866][ T6541] tmpfs: Bad value for 'mpol' [ 118.649348][ T5724] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 118.659635][ T46] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 118.676465][ T46] cp210x 7-1:0.0: querying part number failed [ 118.687579][ T46] usb 7-1: cp210x converter now attached to ttyUSB0 [ 118.835926][ T5724] usb 5-1: device descriptor read/64, error -71 [ 118.851911][ T6541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.863351][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 118.863366][ T29] audit: type=1400 audit(1785654963.866:438): avc: denied { setopt } for pid=6555 comm="syz.5.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 118.899140][ T6541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.925349][ T29] audit: type=1400 audit(1785654963.866:439): avc: denied { ioctl } for pid=6555 comm="syz.5.157" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x5459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 118.954683][ T29] audit: type=1400 audit(1785654963.886:440): avc: denied { map } for pid=6555 comm="syz.5.157" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 118.957800][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 118.985907][ T5724] usb usb5-port1: attempt power cycle [ 119.012221][ T6558] macvtap1: entered promiscuous mode [ 119.021209][ T6558] vlan0: entered promiscuous mode [ 119.031812][ T6558] team0: Device macvtap1 failed to register rx_handler [ 119.043497][ T6558] vlan0: left promiscuous mode [ 119.145796][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 119.152539][ T29] audit: type=1326 audit(1785654964.146:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.3.160" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f69f799e019 code=0x0 [ 119.180939][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.207816][ T29] audit: type=1326 audit(1785654964.206:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.3.160" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f69f799e019 code=0x0 [ 119.243699][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 119.296607][ T24] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 119.321678][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.345165][ T5724] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 119.372868][ T24] usb 3-1: config 0 descriptor?? [ 119.386113][ T5724] usb 5-1: device descriptor read/8, error -71 [ 119.634829][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 119.680141][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 119.681668][ T6566] netlink: 52 bytes leftover after parsing attributes in process `syz.3.160'. [ 119.688111][ T5724] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 119.772826][ T24] usb 3-1: USB disconnect, device number 11 [ 119.796270][ T5724] usb 5-1: device descriptor read/8, error -71 [ 119.842539][ T6566] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 119.943261][ T5724] usb usb5-port1: unable to enumerate USB device [ 120.017191][ T29] audit: type=1400 audit(1785654964.986:443): avc: denied { setopt } for pid=6569 comm="syz.5.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 120.303666][ T29] audit: type=1400 audit(1785654965.296:444): avc: denied { append } for pid=6573 comm="syz.2.162" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 121.391290][ T5703] usb 7-1: USB disconnect, device number 2 [ 121.410722][ T5703] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 121.462015][ T5703] cp210x 7-1:0.0: device disconnected [ 121.741857][ T6587] warning: `syz.3.165' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 121.910544][ T29] audit: type=1400 audit(1785654966.906:445): avc: denied { write } for pid=6590 comm="syz.4.166" name="mcfilter" dev="proc" ino=4026533385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 121.990047][ T29] audit: type=1326 audit(1785654966.906:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.6.167" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577e39e019 code=0x7ffc0000 [ 122.046665][ T29] audit: type=1326 audit(1785654966.906:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.6.167" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577e39e019 code=0x7ffc0000 [ 123.030570][ T6635] netlink: 220 bytes leftover after parsing attributes in process `syz.6.177'. [ 123.135313][ T189] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 123.297108][ T189] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 123.315464][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 123.331497][ T189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.362569][ T189] usb 6-1: config 0 descriptor?? [ 123.388799][ T189] cp210x 6-1:0.0: cp210x converter detected [ 123.759418][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 123.759706][ T6628] tmpfs: Bad value for 'mpol' [ 123.841824][ T6655] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 123.859010][ T5724] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 124.240135][ T189] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 124.319612][ T189] cp210x 6-1:0.0: querying part number failed [ 124.323504][ T24] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 124.335366][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.346854][ T24] usb 7-1: config 0 descriptor?? [ 124.353778][ T189] usb 6-1: cp210x converter now attached to ttyUSB0 [ 124.373025][ T6628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.391707][ T6628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.485135][ T5724] usb 5-1: Using ep0 maxpacket: 16 [ 124.496734][ T5724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.513077][ T5724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.535387][ T5724] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 124.566810][ T5724] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 124.583653][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 124.591243][ T5724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.604767][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 124.620555][ T5724] usb 5-1: config 0 descriptor?? [ 124.636147][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 124.652857][ T24] usb 7-1: media controller created [ 124.703358][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 124.796175][ T6635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.815559][ T6635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.837057][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 124.837073][ T29] audit: type=1400 audit(1785654969.826:475): avc: denied { open } for pid=6634 comm="syz.6.177" path="/dev/ptyr0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 125.049995][ T5724] microsoft 0003:045E:07DA.0003: unexpected long global item [ 125.080269][ T24] az6027: usb out operation failed. (-71) [ 125.089349][ T5724] microsoft 0003:045E:07DA.0003: parse failed [ 125.113494][ T24] stb0899_attach: Driver disabled by Kconfig [ 125.119700][ T5724] microsoft 0003:045E:07DA.0003: probe with driver microsoft failed with error -22 [ 125.138885][ T24] az6027: no front-end attached [ 125.138885][ T24] [ 125.154793][ T24] az6027: usb out operation failed. (-71) [ 125.163675][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 125.200799][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input11 [ 125.238772][ T29] audit: type=1400 audit(1785654970.226:476): avc: denied { read } for pid=4960 comm="acpid" name="event4" dev="devtmpfs" ino=2925 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 125.239243][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 125.317709][ T5724] usb 5-1: USB disconnect, device number 12 [ 125.360839][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 125.375355][ T24] usb 7-1: USB disconnect, device number 3 [ 125.400682][ T29] audit: type=1400 audit(1785654970.226:477): avc: denied { open } for pid=4960 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2925 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 125.533841][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 125.553999][ T29] audit: type=1400 audit(1785654970.226:478): avc: denied { ioctl } for pid=4960 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2925 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 126.405223][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 126.528567][ T5710] usb 6-1: USB disconnect, device number 2 [ 126.566554][ T5710] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 126.585826][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 126.619823][ T5710] cp210x 6-1:0.0: device disconnected [ 126.640155][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 126.707111][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 126.747604][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 126.779143][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.804554][ T24] usb 5-1: Product: syz [ 126.811691][ T24] usb 5-1: Manufacturer: syz [ 126.831266][ T24] usb 5-1: SerialNumber: syz [ 126.853489][ T24] usb 5-1: config 0 descriptor?? [ 126.881826][ T24] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 126.923823][ T24] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 127.140383][ T29] audit: type=1400 audit(1785654972.136:479): avc: denied { setopt } for pid=6682 comm="syz.6.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 127.293598][ T24] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 127.336827][ T5710] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 127.401551][ T5717] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 127.498435][ T5717] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 127.535155][ T5710] usb 4-1: Using ep0 maxpacket: 32 [ 127.566299][ T5710] usb 4-1: config index 0 descriptor too short (expected 27632, got 27) [ 127.604724][ T5710] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 127.650700][ T5710] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 127.709473][ T5710] usb 4-1: config 1 has no interface number 0 [ 127.753888][ T29] audit: type=1400 audit(1785654972.746:480): avc: denied { write } for pid=6674 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.849366][ T5710] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.916883][ T5710] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 127.989968][ T5710] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 128.028192][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.073622][ T5710] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 128.286073][ T29] audit: type=1400 audit(1785654973.286:481): avc: denied { write } for pid=6700 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.361792][ T24] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 128.384576][ T5710] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 128.417405][ T24] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 128.419578][ T5612] overlayfs: failed lookup in lower (newroot/43, name='bus', err=-40): overlapping layers [ 128.895921][ T6705] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 128.991684][ T6705] comedi comedi2: board detection failed [ 129.013668][ T6705] netlink: 12 bytes leftover after parsing attributes in process `syz.6.193'. [ 129.205058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 129.345200][ T6705] gre0: entered promiscuous mode [ 129.350182][ T6705] gre0: entered allmulticast mode [ 129.495076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 129.559504][ T29] audit: type=1400 audit(1785654973.886:482): avc: denied { mounton } for pid=6703 comm="syz.6.193" path="/11/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 129.587611][ T5612] overlayfs: failed lookup in lower (newroot/43, name='bus', err=-40): overlapping layers [ 129.600166][ T5717] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 129.628192][ T24] em28xx 5-1:0.0: No AC97 audio processor [ 129.688932][ T29] audit: type=1400 audit(1785654973.906:483): avc: denied { read } for pid=6703 comm="syz.6.193" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 129.740379][ T29] audit: type=1400 audit(1785654973.906:484): avc: denied { read } for pid=6703 comm="syz.6.193" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 130.434397][ T24] usb 5-1: USB disconnect, device number 13 [ 130.464405][ T24] em28xx 5-1:0.0: Disconnecting em28xx [ 130.549683][ T24] em28xx 5-1:0.0: Freeing device [ 131.192745][ T6188] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.755731][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 131.755745][ T29] audit: type=1400 audit(1785654976.746:489): avc: denied { write } for pid=6710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.844388][ T6689] fuse: Unknown parameter 'rootmnde' [ 131.861828][ T29] audit: type=1400 audit(1785654976.836:490): avc: denied { mounton } for pid=6688 comm="syz.3.189" path="/38/file0" dev="tmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 131.980663][ T6188] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.001760][ T29] audit: type=1400 audit(1785654976.996:491): avc: denied { write } for pid=6733 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.031203][ T189] usb 4-1: USB disconnect, device number 13 [ 132.071829][ T189] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 132.357544][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.379590][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.078170][ T29] audit: type=1400 audit(1785654977.146:492): avc: denied { getopt } for pid=6735 comm="syz.6.195" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.098450][ T29] audit: type=1400 audit(1785654977.156:493): avc: denied { write } for pid=6735 comm="syz.6.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 133.268850][ T5608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 133.282512][ T5608] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 133.294905][ T5608] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 133.303892][ T5608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 133.313843][ T5608] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 133.344041][ T29] audit: type=1400 audit(1785654978.336:494): avc: denied { module_request } for pid=6745 comm="syz-executor" kmod="netdev-nr7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 133.346627][ T6188] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.401611][ T6743] xt_TPROXY: Can be used only with -p tcp or -p udp [ 134.615570][ T6768] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 134.623290][ T6768] audit: out of memory in audit_log_start [ 134.771368][ T6757] syzkaller0: entered promiscuous mode [ 134.785672][ T6757] syzkaller0: entered allmulticast mode [ 135.012076][ T6188] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.227324][ T5717] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 135.405229][ T5717] usb 6-1: Using ep0 maxpacket: 8 [ 135.410465][ T5610] Bluetooth: hci3: command tx timeout [ 135.429298][ T6799] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 135.429767][ T29] audit: type=1400 audit(1785654980.426:495): avc: denied { write } for pid=6777 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.464441][ T5717] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 135.479690][ T5717] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 135.494580][ T6188] bridge_slave_1: left allmulticast mode [ 135.502689][ T6188] bridge_slave_1: left promiscuous mode [ 135.511099][ T5717] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 135.532407][ T6188] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.547018][ T5717] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 135.574656][ T5717] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 135.595935][ T5717] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.614689][ T5717] usb 6-1: Product: syz [ 135.622005][ T5717] usb 6-1: Manufacturer: syz [ 135.647589][ T6188] bridge_slave_0: left allmulticast mode [ 135.653604][ T5717] usb 6-1: SerialNumber: syz [ 135.669648][ T6188] bridge_slave_0: left promiscuous mode [ 135.680260][ T5717] usb 6-1: config 0 descriptor?? [ 135.691453][ T6188] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.700919][ T6784] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 135.710588][ T29] audit: type=1400 audit(1785654980.706:496): avc: denied { write } for pid=6804 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.770985][ T6188] batman_adv: batadv0: Interface deactivated: gretap1 [ 135.929425][ T5717] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 135.987076][ T5717] input: Griffin SoundKnob as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input12 [ 136.135051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 136.155065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 136.298525][ T6188] batman_adv: batadv0: Removing interface: gretap1 [ 136.371726][ T6188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.391784][ T6188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.409073][ T6188] bond0 (unregistering): Released all slaves [ 136.490219][ C1] powermate: config urb returned -71 [ 136.491524][ T189] usb 6-1: USB disconnect, device number 3 [ 136.495540][ C1] powermate: usb_submit_urb(config) failed [ 136.495864][ C1] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 137.055345][ T6188] hsr_slave_0: left promiscuous mode [ 137.088498][ T6188] hsr_slave_1: left promiscuous mode [ 137.094587][ T6188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.104252][ T6188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.123305][ T6188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.133334][ T6188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.180523][ T6831] xt_TPROXY: Can be used only with -p tcp or -p udp [ 137.198379][ T6188] veth1_macvtap: left promiscuous mode [ 137.213981][ T6188] veth0_macvtap: left promiscuous mode [ 137.217539][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 137.217551][ T29] audit: type=1400 audit(1785654982.206:499): avc: denied { write } for pid=6814 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.284542][ T6188] veth1_vlan: left promiscuous mode [ 137.308689][ T6188] veth0_vlan: left promiscuous mode [ 137.369258][ T29] audit: type=1400 audit(1785654982.366:500): avc: denied { write } for pid=6836 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.420868][ T29] audit: type=1400 audit(1785654982.406:501): avc: denied { read } for pid=6839 comm="syz.4.217" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 137.459697][ T29] audit: type=1400 audit(1785654982.406:502): avc: denied { open } for pid=6839 comm="syz.4.217" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 137.484772][ T5610] Bluetooth: hci3: command tx timeout [ 137.486887][ T6837] sd 0:0:1:0: PR command failed: 1026 [ 137.517113][ T6842] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 137.537906][ T6837] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 137.550670][ T6837] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 137.578990][ T29] audit: type=1400 audit(1785654982.446:503): avc: denied { read } for pid=6833 comm="syz.3.216" name="file0" dev="fuse" ino=36028797018963968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 137.656576][ T29] audit: type=1400 audit(1785654982.446:504): avc: denied { open } for pid=6833 comm="syz.3.216" path="/42/file0/file0" dev="fuse" ino=36028797018963968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 137.687465][ T29] audit: type=1400 audit(1785654982.456:505): avc: denied { ioctl } for pid=6833 comm="syz.3.216" path="/42/file0/file0" dev="fuse" ino=36028797018963968 ioctlcmd=0x70cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 137.721126][ T29] audit: type=1400 audit(1785654982.496:506): avc: denied { append } for pid=6839 comm="syz.4.217" name="frontend0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 137.755250][ T5606] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 137.841974][ T6188] team0 (unregistering): Port device team_slave_1 removed [ 137.874416][ T6188] team0 (unregistering): Port device team_slave_0 removed [ 137.947559][ T5606] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 137.970632][ T5606] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 137.998483][ T5606] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 138.026962][ T5606] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 138.038218][ T5606] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.070221][ T5606] usb 6-1: Product: syz [ 138.080003][ T5606] usb 6-1: Manufacturer: syz [ 138.110804][ T5606] usb 6-1: SerialNumber: syz [ 138.132177][ T5606] usb 6-1: config 0 descriptor?? [ 138.138311][ T6840] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 138.225164][ T5606] rc_core: IR keymap rc-streamzap not found [ 138.237634][ T5606] Registered IR keymap rc-empty [ 138.249561][ T5606] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 138.328762][ T5606] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input13 [ 138.409128][ T6861] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 138.438221][ T6840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.713982][ T6840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.078517][ T6871] FAULT_INJECTION: forcing a failure. [ 139.078517][ T6871] name failslab, interval 1, probability 0, space 0, times 0 [ 139.095871][ T6871] CPU: 1 UID: 0 PID: 6871 Comm: syz.6.222 Not tainted syzkaller #0 PREEMPT(full) [ 139.095895][ T6871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 139.095907][ T6871] Call Trace: [ 139.095913][ T6871] [ 139.095920][ T6871] dump_stack_lvl+0x100/0x190 [ 139.095955][ T6871] should_fail_ex.cold+0x5/0xa [ 139.095977][ T6871] should_failslab+0xc2/0x120 [ 139.096002][ T6871] __kmalloc_noprof+0xfc/0x820 [ 139.096028][ T6871] ? ovl_encode_real_fh+0x331/0x410 [ 139.096052][ T6871] ? ovl_get_index_name_fh+0x55/0x190 [ 139.096073][ T6871] ovl_get_index_name_fh+0x55/0x190 [ 139.096091][ T6871] ovl_lookup_index+0x118/0x660 [ 139.096110][ T6871] ? __pfx_ovl_lookup_index+0x10/0x10 [ 139.096127][ T6871] ? ovl_lookup_layers+0x13ff/0x2ac0 [ 139.096150][ T6871] ovl_lookup_layers+0x60b/0x2ac0 [ 139.096181][ T6871] ? __pfx_ovl_lookup_layers+0x10/0x10 [ 139.096199][ T6871] ? trace_kmem_cache_alloc+0xdd/0x100 [ 139.096230][ T6871] ? find_held_lock+0x2b/0x80 [ 139.096247][ T6871] ? d_alloc_parallel+0x46e/0x14b0 [ 139.096273][ T6871] ? d_alloc_parallel+0x46e/0x14b0 [ 139.096303][ T6871] ovl_lookup+0x4a8/0x6b0 [ 139.096320][ T6871] ? d_alloc_parallel+0x9ed/0x14b0 [ 139.096348][ T6871] ? __pfx_ovl_lookup+0x10/0x10 [ 139.096370][ T6871] ? __pfx_d_alloc_parallel+0x10/0x10 [ 139.096404][ T6871] ? down_read+0x13b/0x4c0 [ 139.096428][ T6871] ? __pfx_down_read+0x10/0x10 [ 139.096454][ T6871] __lookup_slow+0x155/0x320 [ 139.096480][ T6871] lookup_slow+0x50/0x70 [ 139.096510][ T6871] path_lookupat+0x5e8/0xc40 [ 139.096540][ T6871] filename_lookup+0x202/0x590 [ 139.096556][ T6871] ? do_getname+0x35/0x390 [ 139.096580][ T6871] ? __pfx_filename_lookup+0x10/0x10 [ 139.096626][ T6871] filename_linkat+0x145/0x640 [ 139.096651][ T6871] ? __pfx_filename_linkat+0x10/0x10 [ 139.096680][ T6871] ? do_getname+0x191/0x390 [ 139.096705][ T6871] __x64_sys_linkat+0xf6/0x150 [ 139.096728][ T6871] do_syscall_64+0x115/0x870 [ 139.096749][ T6871] ? clear_bhb_loop+0x40/0x90 [ 139.096770][ T6871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.096788][ T6871] RIP: 0033:0x7f577e39e019 [ 139.096803][ T6871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.096820][ T6871] RSP: 002b:00007f577c5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 139.096837][ T6871] RAX: ffffffffffffffda RBX: 00007f577e625fa0 RCX: 00007f577e39e019 [ 139.096848][ T6871] RDX: ffffffffffffff9c RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 139.096859][ T6871] RBP: 00007f577c5f6090 R08: 0000000000001000 R09: 0000000000000000 [ 139.096869][ T6871] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 139.096879][ T6871] R13: 00007f577e626038 R14: 00007f577e625fa0 R15: 00007ffc42ee9b28 [ 139.096903][ T6871] [ 139.432336][ T29] audit: type=1326 audit(1785654984.416:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.4.224" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f545759e019 code=0x0 [ 139.509619][ T6745] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.520156][ T6745] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.527597][ T6745] bridge_slave_0: entered allmulticast mode [ 139.535771][ T6745] bridge_slave_0: entered promiscuous mode [ 139.544270][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.218'. [ 139.553535][ T5606] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 139.561301][ T5610] Bluetooth: hci3: command tx timeout [ 139.620917][ T6872] netlink: 'syz.5.218': attribute type 5 has an invalid length. [ 139.681206][ T6745] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.688397][ T6745] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.695599][ T6745] bridge_slave_1: entered allmulticast mode [ 139.703323][ T6745] bridge_slave_1: entered promiscuous mode [ 139.736669][ T6745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.751940][ T29] audit: type=1400 audit(1785654984.746:508): avc: denied { write } for pid=6853 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.754119][ T5606] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 139.788809][ T5606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.809017][ T6745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.819136][ T5606] usb 4-1: Product: syz [ 139.827259][ T10] usb 6-1: USB disconnect, device number 4 [ 139.836190][ T5606] usb 4-1: Manufacturer: syz [ 139.853717][ T5606] usb 4-1: SerialNumber: syz [ 139.897995][ T5606] usb 4-1: config 0 descriptor?? [ 139.915108][ T5717] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 139.929530][ T5606] ch341 4-1:0.0: ch341-uart converter detected [ 139.939714][ T6745] team0: Port device team_slave_0 added [ 139.966553][ T6745] team0: Port device team_slave_1 added [ 140.041820][ T6745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.049318][ T6745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.075536][ T5717] usb 7-1: Using ep0 maxpacket: 32 [ 140.081285][ T6745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.093755][ T5717] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 140.108800][ T5717] usb 7-1: config 0 has no interface number 0 [ 140.116884][ T5717] usb 7-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.143107][ T6745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.158276][ T6745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.184484][ T5717] usb 7-1: config 0 interface 85 has no altsetting 0 [ 140.203422][ T5717] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 140.218514][ T5717] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.234481][ T5717] usb 7-1: Product: syz [ 140.239274][ T6745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.251819][ T5717] usb 7-1: Manufacturer: syz [ 140.257058][ T5717] usb 7-1: SerialNumber: syz [ 140.274609][ T5717] usb 7-1: config 0 descriptor?? [ 140.291307][ T5717] appletouch 7-1:0.85: Could not find int-in endpoint [ 140.299440][ T5717] appletouch 7-1:0.85: probe with driver appletouch failed with error -5 [ 140.325477][ T5717] usbhid 7-1:0.85: couldn't find an input interrupt endpoint [ 140.340858][ T6745] hsr_slave_0: entered promiscuous mode [ 140.358303][ T6745] hsr_slave_1: entered promiscuous mode [ 140.504576][ T6895] xt_TPROXY: Can be used only with -p tcp or -p udp [ 140.768047][ T6745] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 140.784195][ T6745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 140.793767][ T6745] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 140.804739][ T6745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 140.814240][ T6745] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 140.825003][ T6745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 140.840106][ T6745] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 140.862695][ T6745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 141.034429][ T5606] ch341-uart ttyUSB0: break control not supported, using simulated break [ 141.052158][ T5606] usb 4-1: ch341-uart converter now attached to ttyUSB0 [ 141.114171][ T6745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.185485][ T6745] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.216306][ T6188] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.223412][ T6188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.266107][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.273242][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.635282][ T5610] Bluetooth: hci3: command tx timeout [ 142.013051][ T6745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.272692][ T5717] usb 4-1: USB disconnect, device number 14 [ 142.353934][ T5717] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 142.379804][ T5717] ch341 4-1:0.0: device disconnected [ 142.451173][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 142.451186][ T29] audit: type=1400 audit(1785654987.446:514): avc: denied { write } for pid=6941 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.617720][ T6745] veth0_vlan: entered promiscuous mode [ 142.688107][ T29] audit: type=1400 audit(1785654987.676:515): avc: denied { write } for pid=6961 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.699000][ T5606] usb 7-1: USB disconnect, device number 4 [ 142.733944][ T5717] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 142.783109][ T29] audit: type=1400 audit(1785654987.776:516): avc: denied { read append } for pid=6966 comm="syz.5.230" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 142.820149][ T6963] : entered promiscuous mode [ 142.851271][ T6745] veth1_vlan: entered promiscuous mode [ 142.861054][ T6964] openvswitch: : Dropping previously announced user features [ 142.881503][ T29] audit: type=1400 audit(1785654987.806:517): avc: denied { open } for pid=6966 comm="syz.5.230" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 142.905145][ T5717] usb 4-1: Using ep0 maxpacket: 8 [ 142.919470][ T5717] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 142.923819][ T5270] 8021q: adding VLAN 0 to HW filter on device eth9 [ 142.937457][ T5717] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 142.954137][ T29] audit: type=1400 audit(1785654987.816:518): avc: denied { map } for pid=6966 comm="syz.5.230" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 142.970044][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 142.987165][ T6745] veth0_macvtap: entered promiscuous mode [ 142.992757][ T6967] netlink: 'syz.5.230': attribute type 29 has an invalid length. [ 143.015992][ T6745] veth1_macvtap: entered promiscuous mode [ 143.029922][ T6967] netlink: 596 bytes leftover after parsing attributes in process `syz.5.230'. [ 143.039231][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 143.053132][ T29] audit: type=1400 audit(1785654987.816:519): avc: denied { write execute } for pid=6966 comm="syz.5.230" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 143.094589][ T6745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.113785][ T5717] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 143.129856][ T6745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.142342][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.147949][ T29] audit: type=1400 audit(1785654987.886:520): avc: denied { write } for pid=6968 comm="syz.6.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 143.165070][ T5717] usb 4-1: Product: syz [ 143.193321][ T5717] usb 4-1: Manufacturer: syz [ 143.200052][ T29] audit: type=1400 audit(1785654988.086:521): avc: denied { ioctl } for pid=6966 comm="syz.5.230" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 143.221223][ T5717] usb 4-1: SerialNumber: syz [ 143.238473][ T5606] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 143.270362][ T73] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.303005][ T73] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.306286][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.233'. [ 143.328230][ T5717] usb 4-1: config 0 descriptor?? [ 143.338407][ T6956] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 143.386410][ T1035] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.417060][ T5606] usb 7-1: config 7 has an invalid interface number: 223 but max is 0 [ 143.418432][ T1035] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.434455][ T5606] usb 7-1: config 7 has no interface number 0 [ 143.454172][ T5606] usb 7-1: too many endpoints for config 7 interface 223 altsetting 7: 36, using maximum allowed: 30 [ 143.476742][ T5606] usb 7-1: config 7 interface 223 altsetting 7 has an endpoint descriptor with address 0x52, changing to 0x2 [ 143.504901][ T5606] usb 7-1: config 7 interface 223 altsetting 7 endpoint 0x2 has invalid maxpacket 60846, setting to 64 [ 143.540459][ T5606] usb 7-1: config 7 interface 223 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 143.542856][ T1035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.569518][ T5717] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 143.585958][ T5606] usb 7-1: config 7 interface 223 altsetting 7 has 5 endpoint descriptors, different from the interface descriptor's value: 36 [ 143.591935][ T1035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.632580][ T5717] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input14 [ 143.648880][ T5606] usb 7-1: config 7 interface 223 has no altsetting 0 [ 143.678593][ T5606] usb 7-1: New USB device found, idVendor=1199, idProduct=0023, bcdDevice=58.16 [ 143.718261][ T5606] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.746719][ T5606] usb 7-1: Product: syz [ 143.760379][ T29] audit: type=1400 audit(1785654988.756:522): avc: denied { write } for pid=6973 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.783523][ T5606] usb 7-1: Manufacturer: syz [ 143.795448][ T5606] usb 7-1: SerialNumber: syz [ 143.846443][ T6992] veth3: entered promiscuous mode [ 143.870440][ T6992] veth3: entered allmulticast mode [ 143.891703][ T6188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.921085][ T6188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.973916][ T29] audit: type=1400 audit(1785654988.966:524): avc: denied { write } for pid=6997 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.140385][ C1] powermate: config urb returned -71 [ 144.146048][ C1] powermate: config urb returned -71 [ 144.151594][ C1] powermate: config urb returned -71 [ 144.157030][ T5724] usb 4-1: USB disconnect, device number 15 [ 144.162950][ C1] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 144.190117][ T5270] 8021q: adding VLAN 0 to HW filter on device eth10 [ 144.279771][ T6993] xt_hashlimit: size too large, truncated to 1048576 [ 144.387952][ T5606] sierra 7-1:7.223: Sierra USB modem converter detected [ 144.491890][ T5606] usb 7-1: Sierra USB modem converter now attached to ttyUSB0 [ 144.552037][ T7007] xt_connbytes: Forcing CT accounting to be enabled [ 144.602224][ T7007] Cannot find set identified by id 0 to match [ 144.614003][ T5606] usb 7-1: USB disconnect, device number 5 [ 144.645797][ T5606] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 144.697502][ T5606] sierra 7-1:7.223: device disconnected [ 145.822684][ T5270] 8021q: adding VLAN 0 to HW filter on device eth11 [ 145.905758][ T189] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 145.965097][ T5703] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 146.051368][ T7042] netlink: 16 bytes leftover after parsing attributes in process `syz.6.243'. [ 146.090826][ T189] usb 8-1: unable to get BOS descriptor or descriptor too short [ 146.100615][ T189] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.125670][ T5703] usb 6-1: Using ep0 maxpacket: 8 [ 146.141340][ T189] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.157722][ T5703] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 146.216636][ T189] usb 8-1: string descriptor 0 read error: -22 [ 146.223322][ T5703] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.243775][ T189] usb 8-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 146.296459][ T189] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.310972][ T5703] pvrusb2: Hardware description: Terratec Grabster AV400 [ 146.380776][ T5703] pvrusb2: ********** [ 146.401952][ T189] usb 8-1: skipping empty audio interface (v1) [ 146.410085][ T5703] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 146.470653][ T5703] pvrusb2: Important functionality might not be entirely working. [ 146.493041][ T5703] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 146.517473][ T189] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 146.526575][ T5703] pvrusb2: ********** [ 146.543026][ T2362] pvrusb2: Invalid write control endpoint [ 146.568645][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.673429][ T5703] usb 8-1: USB disconnect, device number 2 [ 146.725995][ T2362] pvrusb2: Invalid write control endpoint [ 146.736134][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 146.759540][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 146.782526][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 146.883079][ T7058] comedi comedi3: aio_aio12_8: I/O port conflict (0x100,32) [ 146.960458][ T2362] pvrusb2: Device being rendered inoperable [ 146.996010][ T2362] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 147.189292][ T2362] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 147.252954][ T2362] pvrusb2: Attached sub-driver cx25840 [ 147.279942][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 147.314371][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 147.386797][ T5270] 8021q: adding VLAN 0 to HW filter on device eth12 [ 147.539222][ T7065] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 147.598171][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 147.598187][ T29] audit: type=1400 audit(1785654992.596:537): avc: denied { read } for pid=7064 comm="syz.7.244" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 148.016417][ T5606] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 148.041627][ T29] audit: type=1400 audit(1785654993.036:538): avc: denied { getopt } for pid=7074 comm="syz.4.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 148.138486][ T7076] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 148.403522][ T29] audit: type=1400 audit(1785654993.066:539): avc: denied { write } for pid=7074 comm="syz.4.246" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 148.428142][ T5606] usb 8-1: Using ep0 maxpacket: 8 [ 148.465830][ T5606] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 148.478064][ T5606] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 148.539058][ T5606] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.550668][ T29] audit: type=1400 audit(1785654993.126:540): avc: denied { read write } for pid=7074 comm="syz.4.246" name="sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 148.582368][ T5606] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.806895][ T10] usb 6-1: USB disconnect, device number 5 [ 149.468334][ T5606] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 149.480756][ T29] audit: type=1400 audit(1785654993.126:541): avc: denied { open } for pid=7074 comm="syz.4.246" path="/dev/sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 149.504557][ T5606] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.514180][ T29] audit: type=1400 audit(1785654993.136:542): avc: denied { ioctl } for pid=7074 comm="syz.4.246" path="/dev/sg0" dev="devtmpfs" ino=718 ioctlcmd=0x5319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 149.549863][ T29] audit: type=1400 audit(1785654993.156:543): avc: denied { write } for pid=7074 comm="syz.4.246" name="usbmon4" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 149.593195][ T29] audit: type=1400 audit(1785654993.156:544): avc: denied { open } for pid=7074 comm="syz.4.246" path="/dev/usbmon4" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 149.649329][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.5.248'. [ 149.662334][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 149.672650][ T29] audit: type=1400 audit(1785654993.186:545): avc: denied { ioctl } for pid=7074 comm="syz.4.246" path="/dev/usbmon4" dev="devtmpfs" ino=734 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 149.708629][ T7088] netlink: 'syz.4.250': attribute type 30 has an invalid length. [ 149.727813][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 149.747935][ T7091] netlink: 'syz.4.250': attribute type 30 has an invalid length. [ 149.772990][ T29] audit: type=1400 audit(1785654994.766:546): avc: denied { create } for pid=7084 comm="syz.5.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 149.830503][ T7093] overlayfs: missing 'lowerdir' [ 149.886076][ T5606] usb 8-1: GET_CAPABILITIES returned 0 [ 149.886115][ T5606] usbtmc 8-1:16.0: can't read capabilities [ 149.943273][ T7088] vxlan0: entered promiscuous mode [ 149.943298][ T7088] vxlan0: entered allmulticast mode [ 150.017239][ T7091] vxlan1: entered promiscuous mode [ 150.026497][ T7091] vxlan1: entered allmulticast mode [ 150.071095][ T7100] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 150.100605][ T7069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.124697][ T7069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.156198][ T189] usb 8-1: USB disconnect, device number 3 [ 150.165341][ T6188] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.182086][ T6188] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.214217][ T6188] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.285227][ T6188] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.342381][ T7086] PID 7086 killed due to inadequate hugepage pool [ 150.776630][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.7.254'. [ 150.876644][ T189] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 151.595081][ T189] usb 6-1: Using ep0 maxpacket: 8 [ 151.602678][ T189] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 151.614452][ T189] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 151.631207][ T189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 151.643247][ T189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 151.702540][ T189] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 151.733193][ T189] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.760929][ T189] usb 6-1: Product: syz [ 151.772479][ T189] usb 6-1: Manufacturer: syz [ 151.786168][ T189] usb 6-1: SerialNumber: syz [ 151.813703][ T189] usb 6-1: config 0 descriptor?? [ 151.830994][ T7107] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 151.995121][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 152.300377][ T10] usb 8-1: device descriptor read/64, error -71 [ 152.331145][ T189] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 152.363947][ T189] input: Griffin SoundKnob as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input16 [ 152.545143][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 152.625117][ T5606] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 152.685919][ T10] usb 8-1: device descriptor read/64, error -71 [ 152.776712][ T5606] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.789474][ C0] powermate: config urb returned -71 [ 152.793563][ T24] usb 6-1: USB disconnect, device number 6 [ 152.794782][ C0] powermate: usb_submit_urb(config) failed [ 152.800917][ C0] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 152.804981][ T5606] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 152.809306][ T10] usb usb8-port1: attempt power cycle [ 152.817246][ T5606] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 152.835056][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 152.835071][ T29] audit: type=1326 audit(1785654997.826:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7126 comm="syz.6.259" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f577e39e019 code=0x0 [ 152.847513][ T5606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.918561][ T5606] usb 5-1: config 0 descriptor?? [ 152.953367][ T5606] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 153.176086][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 153.219165][ T10] usb 8-1: device descriptor read/8, error -71 [ 153.382739][ T7142] netlink: 52 bytes leftover after parsing attributes in process `syz.5.261'. [ 153.392555][ T7142] netlink: 32 bytes leftover after parsing attributes in process `syz.5.261'. [ 153.477159][ T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 153.515700][ T10] usb 8-1: device descriptor read/8, error -71 [ 153.626575][ T10] usb usb8-port1: unable to enumerate USB device [ 154.422911][ T7156] kvm: emulating exchange as write [ 154.457655][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'. [ 155.119877][ T29] audit: type=1400 audit(1785654999.656:551): avc: denied { bind } for pid=7161 comm="syz.3.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 155.153121][ T29] audit: type=1400 audit(1785654999.656:552): avc: denied { connect } for pid=7161 comm="syz.3.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 155.192103][ T29] audit: type=1400 audit(1785654999.666:553): avc: denied { write } for pid=7161 comm="syz.3.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 155.245296][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 155.396889][ T7173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58386 sclass=netlink_route_socket pid=7173 comm=syz.3.269 [ 155.409658][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 155.422601][ T5717] usb 5-1: USB disconnect, device number 14 [ 155.431196][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.467475][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 155.481730][ T24] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 155.497167][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.515653][ T24] usb 6-1: Product: syz [ 155.515963][ T7170] cgroup: none used incorrectly [ 155.524696][ T24] usb 6-1: Manufacturer: syz [ 155.848875][ T24] usb 6-1: SerialNumber: syz [ 155.885664][ T24] usb 6-1: config 0 descriptor?? [ 155.976821][ T7182] SELinux: Context system_u:object_r:dbusd_exec_t:s0 is not valid (left unmapped). [ 156.017478][ T29] audit: type=1400 audit(1785655001.016:554): avc: denied { relabelto } for pid=7181 comm="syz.3.272" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dbusd_exec_t:s0" [ 156.046947][ T29] audit: type=1400 audit(1785655001.016:555): avc: denied { associate } for pid=7181 comm="syz.3.272" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dbusd_exec_t:s0" [ 156.135680][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.6.271'. [ 156.184257][ T29] audit: type=1400 audit(1785655001.076:556): avc: denied { connect } for pid=7183 comm="syz.6.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 156.246487][ T29] audit: type=1400 audit(1785655001.076:557): avc: denied { write } for pid=7183 comm="syz.6.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 156.650775][ T29] audit: type=1400 audit(1785655001.076:558): avc: denied { read } for pid=7183 comm="syz.6.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 156.748344][ T29] audit: type=1400 audit(1785655001.076:559): avc: denied { create } for pid=7183 comm="syz.6.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 156.865177][ T7194] IPv6: A: Disabled Multicast RS [ 157.312620][ T7218] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7218 comm=syz.7.278 [ 157.345703][ T7218] tipc: Started in network mode [ 157.350823][ T7218] tipc: Node identity 4, cluster identity 4711 [ 157.357054][ T7218] tipc: Node number set to 4 [ 157.662663][ T7203] netlink: 24 bytes leftover after parsing attributes in process `syz.4.274'. [ 157.682776][ T7202] /dev/nullb0: Can't open blockdev [ 157.696174][ T24] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 157.867635][ T24] usb 8-1: unable to get BOS descriptor or descriptor too short [ 157.894325][ T24] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.911548][ T24] usb 8-1: string descriptor 0 read error: -22 [ 157.920242][ T24] usb 8-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 157.930698][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.015097][ T7227] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 158.550843][ T7234] 9p: Bad value for 'rfdno' [ 158.583465][ T10] usb 6-1: USB disconnect, device number 7 [ 159.054713][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.5.286'. [ 159.082528][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 159.097758][ T7254] netlink: 'syz.5.286': attribute type 10 has an invalid length. [ 159.252141][ T7254] netlink: 12 bytes leftover after parsing attributes in process `syz.5.286'. [ 159.583910][ T7265] netlink: 36 bytes leftover after parsing attributes in process `syz.4.285'. [ 160.286051][ T189] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 160.305868][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 160.312351][ T10] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 160.330735][ T10] usb 4-1: config 0 has no interface number 0 [ 160.337680][ T10] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 160.376346][ T24] usb 8-1: 1:1: cannot set freq 48000 to ep 0x1 [ 160.446440][ T10] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 160.467190][ T7254] geneve2: entered promiscuous mode [ 160.473691][ T10] usb 4-1: config 0 interface 85 has no altsetting 0 [ 160.480622][ T7254] geneve2: entered allmulticast mode [ 160.507335][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 160.538987][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.547115][ T189] usb 7-1: Using ep0 maxpacket: 16 [ 160.567618][ T10] usb 4-1: Product: syz [ 160.577617][ T189] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.578433][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 160.578445][ T29] audit: type=1400 audit(1785655005.576:565): avc: denied { write } for pid=7242 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.680358][ T10] usb 4-1: Manufacturer: syz [ 160.699654][ T10] usb 4-1: SerialNumber: syz [ 160.735374][ T189] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.750073][ T10] usb 4-1: config 0 descriptor?? [ 160.782941][ T189] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.811333][ T189] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.823854][ T5703] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 160.858427][ T5703] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 160.869722][ T189] usb 7-1: Product: syz [ 160.888796][ T189] usb 7-1: Manufacturer: syz [ 160.908405][ T189] usb 7-1: SerialNumber: syz [ 160.930675][ T24] usb 8-1: USB disconnect, device number 8 [ 160.947117][ T189] usb 7-1: 0:2 : does not exist [ 161.111134][ T29] audit: type=1400 audit(1785655006.106:566): avc: denied { write } for pid=7278 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.232906][ T10] appletouch 4-1:0.85: Geyser mode initialized. [ 161.263045][ T10] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input17 [ 161.285688][ T5703] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 161.427174][ T7253] netlink: 76 bytes leftover after parsing attributes in process `syz.6.284'. [ 161.427549][ T7283] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan0, syncid = 2, id = 0 [ 161.476231][ T5703] usb 6-1: Using ep0 maxpacket: 8 [ 161.494874][ T5703] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.514022][ T10] usb 4-1: USB disconnect, device number 16 [ 161.523384][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz.6.284'. [ 161.533812][ T5703] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 161.559020][ T5703] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 161.578395][ T10] appletouch 4-1:0.85: input: appletouch disconnected [ 161.637261][ T5703] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 161.660897][ T5703] usb 6-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 161.671197][ T5703] usb 6-1: Product: syz [ 161.675667][ T24] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 161.679514][ T5703] usb 6-1: Manufacturer: syz [ 161.688365][ T7248] hsr_slave_1 (unregistering): left promiscuous mode [ 161.703566][ T5703] usb 6-1: SerialNumber: syz [ 161.719236][ T5703] usb 6-1: config 0 descriptor?? [ 161.798774][ T5702] usb 7-1: USB disconnect, device number 6 [ 161.848032][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 161.858537][ T5703] rc_core: IR keymap rc-imon-rsc not found [ 161.873979][ T5703] Registered IR keymap rc-empty [ 161.883910][ T24] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 161.902237][ T24] usb 8-1: config 0 has no interface number 0 [ 161.911885][ T24] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.923172][ T24] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.931968][ T5703] rc rc0: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 161.933117][ T24] usb 8-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 161.956923][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.983487][ T29] audit: type=1400 audit(1785655006.976:567): avc: denied { write } for pid=7285 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.984166][ T24] usb 8-1: config 0 descriptor?? [ 162.009602][ T5703] input: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input18 [ 162.079780][ T5703] usb 6-1: USB disconnect, device number 8 [ 162.669589][ T7304] netlink: 36 bytes leftover after parsing attributes in process `syz.4.291'. [ 162.909458][ T7304] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.291'. [ 162.955212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 163.075046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 163.215046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 163.355045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 163.450461][ T29] audit: type=1400 audit(1785655008.446:568): avc: denied { write } for pid=7299 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.935890][ T29] audit: type=1400 audit(1785655008.876:569): avc: denied { getopt } for pid=7320 comm="syz.3.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 164.227006][ T7267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.442221][ T7267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.465685][ T5724] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 164.666036][ T24] usbhid 8-1:0.1: can't add hid device: -71 [ 164.686606][ T24] usbhid 8-1:0.1: probe with driver usbhid failed with error -71 [ 164.732760][ T24] usb 8-1: USB disconnect, device number 9 [ 164.756090][ T5724] usb 6-1: Using ep0 maxpacket: 8 [ 164.801965][ T5724] usb 6-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 164.842230][ T5724] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.900497][ T5724] usb 6-1: Product: syz [ 164.919457][ T5724] usb 6-1: Manufacturer: syz [ 164.944079][ T29] audit: type=1400 audit(1785655009.936:570): avc: denied { name_bind } for pid=7335 comm="syz.3.297" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 164.976056][ T5724] usb 6-1: SerialNumber: syz [ 165.094896][ T5724] usb 6-1: config 0 descriptor?? [ 165.230218][ T5724] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 165.910421][ T29] audit: type=1400 audit(1785655010.856:571): avc: denied { write } for pid=7317 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.988551][ T29] audit: type=1400 audit(1785655010.906:572): avc: denied { write } for pid=7343 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.004235][ T7346] netlink: 44 bytes leftover after parsing attributes in process `syz.7.300'. [ 166.148140][ T7346] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 166.198004][ T7346] netlink: 48 bytes leftover after parsing attributes in process `syz.7.300'. [ 166.217026][ T7356] dummy_hcd dummy_hcd.0: remove, state 4 [ 166.223327][ T7356] usb usb1: USB disconnect, device number 1 [ 166.277107][ T7346] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 166.283796][ T7346] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 166.311318][ T7346] vhci_hcd vhci_hcd.0: Device attached [ 166.321952][ T7356] dummy_hcd dummy_hcd.0: stopped [ 166.347908][ T7358] vhci_hcd: connection closed [ 166.352869][ T12] vhci_hcd vhci_hcd.7: stop threads [ 166.365126][ T24] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 166.382615][ T7356] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 166.432413][ T12] vhci_hcd vhci_hcd.7: release socket [ 166.460878][ T12] vhci_hcd vhci_hcd.7: disconnect device [ 166.507937][ T29] audit: type=1400 audit(1785655011.506:573): avc: denied { map } for pid=7365 comm="syz.6.303" path="socket:[16875]" dev="sockfs" ino=16875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 166.539453][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.549992][ T24] usb 5-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 166.567506][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.622807][ T24] usb 5-1: config 0 descriptor?? [ 166.632072][ T29] audit: type=1400 audit(1785655011.616:574): avc: denied { write } for pid=7348 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.748654][ T5703] usb 6-1: USB disconnect, device number 9 [ 166.894915][ T29] audit: type=1400 audit(1785655011.886:575): avc: denied { write } for pid=7378 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.964118][ T7382] netlink: 72 bytes leftover after parsing attributes in process `syz.4.293'. [ 167.193454][ T24] usb 5-1: string descriptor 0 read error: -71 [ 167.207604][ T24] cypress_m8 5-1:0.0: DeLorme Earthmate USB converter detected [ 167.246600][ T24] earthmate ttyUSB0: required endpoint is missing [ 167.278600][ T24] usb 5-1: USB disconnect, device number 15 [ 167.301536][ T24] cypress_m8 5-1:0.0: device disconnected [ 167.618225][ T29] audit: type=1400 audit(1785655012.616:576): avc: denied { read } for pid=7391 comm="syz.5.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 167.702751][ T29] audit: type=1400 audit(1785655012.636:577): avc: denied { getopt } for pid=7391 comm="syz.5.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 167.983248][ T7397] usb3503 0-0008: unknown mode is requested [ 167.989353][ T7397] usb3503 0-0008: usb3503_probe: probed in standby mode [ 167.998662][ T7397] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 168.222846][ T7395] binder: 7394:7395 ioctl c018620b 0 returned -14 [ 168.231793][ T29] audit: type=1400 audit(1785655013.216:578): avc: denied { ioctl } for pid=7394 comm="syz.5.310" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 168.476440][ T5710] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 168.859534][ T29] audit: type=1400 audit(1785655013.856:579): avc: denied { connect } for pid=7403 comm="syz.4.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 169.298083][ T7411] Invalid argument reading file caps for ./file0 [ 169.793946][ T5606] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 169.847667][ T7421] netlink: 14 bytes leftover after parsing attributes in process `syz.4.318'. [ 170.195866][ T5606] usb 7-1: Using ep0 maxpacket: 32 [ 170.212897][ T5606] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 170.224724][ T5606] usb 7-1: config 0 has no interface number 0 [ 170.232787][ T5606] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 170.245553][ T5606] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 170.268041][ T5606] usb 7-1: config 0 interface 85 has no altsetting 0 [ 170.284203][ T5606] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 170.295102][ T5606] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.303892][ T5606] usb 7-1: Product: syz [ 170.308862][ T5606] usb 7-1: Manufacturer: syz [ 170.314638][ T5606] usb 7-1: SerialNumber: syz [ 170.356908][ T5606] usb 7-1: config 0 descriptor?? [ 171.259137][ T5606] appletouch 7-1:0.85: Geyser mode initialized. [ 171.267069][ T5606] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input19 [ 171.334104][ T5606] usb 7-1: USB disconnect, device number 7 [ 171.518056][ T5606] appletouch 7-1:0.85: input: appletouch disconnected [ 171.549231][ T29] audit: type=1400 audit(1785655016.536:580): avc: denied { read append } for pid=7433 comm="syz.7.320" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 171.628660][ T7435] xt_hashlimit: size too large, truncated to 1048576 [ 171.644212][ T29] audit: type=1400 audit(1785655016.536:581): avc: denied { open } for pid=7433 comm="syz.7.320" path="/dev/ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 171.668449][ T7435] 9p: Bad value for 'rfdno' [ 171.775083][ T29] audit: type=1400 audit(1785655016.736:582): avc: denied { setopt } for pid=7433 comm="syz.7.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 171.892744][ T7446] [U]  [ 172.058903][ T5702] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 172.109634][ T5702] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 172.195132][ T5710] usb 6-1: device descriptor read/64, error -71 [ 172.353151][ T7440] orangefs_mount: mount request failed with -4 [ 172.447115][ T5710] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 172.640743][ T5710] usb 6-1: unable to get BOS descriptor or descriptor too short [ 172.680375][ T5710] usb 6-1: config 160 has an invalid interface number: 168 but max is 0 [ 172.720330][ T5710] usb 6-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 172.740729][ T5710] usb 6-1: config 160 has no interface number 0 [ 172.762347][ T5710] usb 6-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 172.812980][ T5710] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0x84 has invalid maxpacket 49717, setting to 1024 [ 173.169013][ T7462] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.175856][ T29] audit: type=1400 audit(1785655017.996:583): avc: denied { mount } for pid=7458 comm="syz.3.328" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 173.175900][ T29] audit: type=1400 audit(1785655018.016:584): avc: denied { search } for pid=7458 comm="syz.3.328" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 173.175932][ T29] audit: type=1400 audit(1785655018.016:585): avc: denied { write } for pid=7458 comm="syz.3.328" name="v4_end_grace" dev="nfsd" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 173.175961][ T29] audit: type=1400 audit(1785655018.016:586): avc: denied { open } for pid=7458 comm="syz.3.328" path="/nfsd/v4_end_grace" dev="nfsd" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 173.178500][ T5710] usb 6-1: config 160 interface 168 altsetting 8 bulk endpoint 0x84 has invalid maxpacket 1024 [ 173.431933][ T5710] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0x7 has an invalid bInterval 195, changing to 11 [ 173.477257][ T5710] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 173.552239][ T5710] usb 6-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xE9, changing to 0x89 [ 173.593972][ T5710] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0x89 has an invalid bInterval 206, changing to 11 [ 173.634390][ T5710] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0x89 has invalid maxpacket 18397, setting to 1024 [ 173.680880][ T5710] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0xC has invalid wMaxPacketSize 0 [ 173.715040][ T5710] usb 6-1: config 160 interface 168 altsetting 8 bulk endpoint 0xC has invalid maxpacket 0 [ 173.740714][ T5710] usb 6-1: config 160 interface 168 has no altsetting 0 [ 173.766907][ T5710] usb 6-1: string descriptor 0 read error: -22 [ 173.807958][ T5710] usb 6-1: New USB device found, idVendor=0404, idProduct=0312, bcdDevice=42.c1 [ 173.846822][ T5710] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.931903][ T7434] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 173.939351][ T7434] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 173.948156][ T5710] io_edgeport 6-1:160.168: EPiC device converter detected [ 173.982228][ T5710] usb 6-1: detected [ 174.177077][ T5710] usb 6-1: EPiC device converter now attached to ttyUSB0 [ 174.422440][ T5710] usb 6-1: USB disconnect, device number 11 [ 174.428397][ C1] usb 6-1: edge_interrupt_callback - Error -19 submitting control urb [ 174.532186][ T5710] epic ttyUSB0: EPiC device converter now disconnected from ttyUSB0 [ 174.563022][ T5710] io_edgeport 6-1:160.168: device disconnected [ 174.589372][ T29] audit: type=1400 audit(1785655019.586:587): avc: denied { ioctl } for pid=7478 comm="syz.3.334" path="socket:[18381]" dev="sockfs" ino=18381 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 175.285965][ T29] audit: type=1400 audit(1785655019.726:588): avc: denied { write } for pid=7480 comm="syz.4.335" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 175.399531][ T5724] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 175.502823][ T7485] loop5: detected capacity change from 0 to 7 [ 175.522002][ T7477] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 175.610299][ T5724] usb 5-1: Using ep0 maxpacket: 16 [ 175.644779][ T5724] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.712500][ T5724] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.786811][ T5724] usb 5-1: config 0 interface 0 has no altsetting 0 [ 175.817637][ T5724] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 175.871995][ T5724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.941015][ C0] blk_print_req_error: 10 callbacks suppressed [ 175.941056][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 175.957384][ C0] buffer_io_error: 10 callbacks suppressed [ 175.957395][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 175.976470][ T7485] Dev loop5: unable to read RDB block 7 [ 175.983376][ T5724] usb 5-1: config 0 descriptor?? [ 176.070835][ T7485] loop5: unable to read partition table [ 176.121674][ T7485] loop5: partition table beyond EOD, truncated [ 176.198586][ T7485] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 176.491268][ T5724] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 176.723063][ T5702] usb 5-1: USB disconnect, device number 16 [ 176.910567][ T7496] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 177.004131][ T5610] Bluetooth: hci1: Unknown advertising packet type: 0x76 [ 177.004170][ T5610] Bluetooth: hci1: Malformed LE Event: 0x0d [ 177.171466][ T5702] libceph: connect (2)127.0.0.1:6789 error -101 [ 177.193827][ T5702] libceph: ceph_tcp_connect failed: -101 [ 177.213298][ T5702] libceph: mon0 (2)127.0.0.1:6789 connect error [ 177.253092][ T5702] libceph: connect (2)127.0.0.1:6789 error -101 [ 177.283320][ T5702] libceph: ceph_tcp_connect failed: -101 [ 177.308933][ T5702] libceph: mon0 (2)127.0.0.1:6789 connect error [ 177.422958][ T29] audit: type=1326 audit(1785655022.416:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7519 comm="syz.4.345" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f545759e019 code=0x0 [ 177.576444][ T5702] libceph: connect (2)127.0.0.1:6789 error -101 [ 177.588304][ T5702] libceph: ceph_tcp_connect failed: -101 [ 177.606292][ T5702] libceph: mon0 (2)127.0.0.1:6789 connect error [ 177.720147][ T7509] ceph: No mds server is up or the cluster is laggy [ 177.886404][ T7530] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 177.898501][ T7530] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 177.906903][ T7530] CPU: 1 UID: 0 PID: 7530 Comm: syz.6.347 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.917662][ T7530] Tainted: [L]=SOFTLOCKUP [ 177.921966][ T7530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 177.932004][ T7530] RIP: 0010:dummy_set_selfpowered+0xe4/0x1c0 [ 177.937977][ T7530] Code: c1 ea 03 80 3c 02 00 0f 85 e6 00 00 00 48 8b 9b 90 06 00 00 e8 4d 8a 39 fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 b2 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 177.957583][ T7530] RSP: 0018:ffffc9000388f8e0 EFLAGS: 00010246 [ 177.963639][ T7530] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000e14c000 [ 177.971595][ T7530] RDX: 0000000000000000 RSI: ffffffff87d0d793 RDI: ffff88802b695290 [ 177.979555][ T7530] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000005 [ 177.987514][ T7530] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000003 [ 177.995484][ T7530] R13: ffff88802b694068 R14: ffff88802b694c58 R15: ffff888055cb7910 [ 178.003473][ T7530] FS: 00007f577c5b46c0(0000) GS:ffff888123ed8000(0000) knlGS:0000000000000000 [ 178.012398][ T7530] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.018978][ T7530] CR2: 000000110c3ade0e CR3: 0000000032e05000 CR4: 00000000003526f0 [ 178.026937][ T7530] Call Trace: [ 178.030201][ T7530] [ 178.033118][ T7530] ? __pfx_dummy_set_selfpowered+0x10/0x10 [ 178.038952][ T7530] usb_gadget_set_selfpowered+0x73/0x2b0 [ 178.044575][ T7530] composite_dev_prepare+0x254/0x420 [ 178.049870][ T7530] configfs_composite_bind+0xd2/0x1960 [ 178.055319][ T7530] ? kernfs_create_link+0x1bd/0x240 [ 178.060512][ T7530] gadget_bind_driver+0x28c/0xbf0 [ 178.065520][ T7530] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 178.071179][ T7530] ? __pfx_gadget_bind_driver+0x10/0x10 [ 178.076709][ T7530] really_probe+0x241/0xa60 [ 178.081209][ T7530] __driver_probe_device+0x20e/0x450 [ 178.086478][ T7530] ? __kasan_check_read+0x4/0x20 [ 178.091400][ T7530] driver_probe_device+0x4a/0x140 [ 178.096412][ T7530] __driver_attach+0x21f/0x5b0 [ 178.101165][ T7530] ? __pfx___driver_attach+0x10/0x10 [ 178.106439][ T7530] bus_for_each_dev+0x13e/0x1d0 [ 178.111286][ T7530] ? __pfx_bus_for_each_dev+0x10/0x10 [ 178.116644][ T7530] bus_add_driver+0x305/0x5b0 [ 178.121304][ T7530] driver_register+0x1e2/0x360 [ 178.126054][ T7530] usb_gadget_register_driver_owner+0x132/0x210 [ 178.132301][ T7530] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 178.138012][ T7530] configfs_write_iter+0x302/0x4e0 [ 178.143136][ T7530] vfs_write+0x6ac/0x1050 [ 178.147471][ T7530] ? __pfx_configfs_write_iter+0x10/0x10 [ 178.153269][ T7530] ? __pfx_vfs_write+0x10/0x10 [ 178.158026][ T7530] ? ksys_write+0x8c/0x250 [ 178.162433][ T7530] ksys_write+0x12a/0x250 [ 178.166748][ T7530] ? __pfx_ksys_write+0x10/0x10 [ 178.171718][ T7530] do_syscall_64+0x115/0x870 [ 178.176295][ T7530] ? clear_bhb_loop+0x40/0x90 [ 178.180956][ T7530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.186829][ T7530] RIP: 0033:0x7f577e39e019 [ 178.191240][ T7530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.210831][ T7530] RSP: 002b:00007f577c5b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 178.219229][ T7530] RAX: ffffffffffffffda RBX: 00007f577e626180 RCX: 00007f577e39e019 [ 178.227188][ T7530] RDX: 000000000000000c RSI: 0000200000000680 RDI: 0000000000000005 [ 178.235150][ T7530] RBP: 00007f577e43500c R08: 0000000000000000 R09: 0000000000000000 [ 178.243128][ T7530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.251196][ T7530] R13: 00007f577e626218 R14: 00007f577e626180 R15: 00007ffc42ee9b28 [ 178.259161][ T7530] [ 178.262160][ T7530] Modules linked in: [ 178.266298][ T7530] ---[ end trace 0000000000000000 ]--- [ 178.272493][ T7530] RIP: 0010:dummy_set_selfpowered+0xe4/0x1c0 [ 178.278547][ T7530] Code: c1 ea 03 80 3c 02 00 0f 85 e6 00 00 00 48 8b 9b 90 06 00 00 e8 4d 8a 39 fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 b2 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 178.298215][ T7530] RSP: 0018:ffffc9000388f8e0 EFLAGS: 00010246 [ 178.304415][ T7530] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000e14c000 [ 178.312501][ T7530] RDX: 0000000000000000 RSI: ffffffff87d0d793 RDI: ffff88802b695290 [ 178.320516][ T7530] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000005 [ 178.328565][ T7530] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000003 [ 178.336570][ T7530] R13: ffff88802b694068 R14: ffff88802b694c58 R15: ffff888055cb7910 [ 178.344557][ T7530] FS: 00007f577c5b46c0(0000) GS:ffff888123ed8000(0000) knlGS:0000000000000000 [ 178.353537][ T7530] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.360304][ T7530] CR2: 000000110c3ade0e CR3: 0000000032e05000 CR4: 00000000003526f0 [ 178.368337][ T7530] Kernel panic - not syncing: Fatal exception [ 178.374590][ T7530] Kernel Offset: disabled [ 178.378888][ T7530] Rebooting in 86400 seconds..