last executing test programs: 4m57.491185246s ago: executing program 1 (id=1050): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4m57.314227872s ago: executing program 1 (id=1054): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x82000, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000140)={0x20, 0x6, 0x0, 0x7c, 0x4}) 4m57.173413312s ago: executing program 1 (id=1056): socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 4m56.215290636s ago: executing program 1 (id=1069): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x2284, &(0x7f0000000000)) 4m55.471829225s ago: executing program 1 (id=1075): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x4000, r0}, 0x18) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x98, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000006c0)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 4m55.198451766s ago: executing program 1 (id=1081): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x14, &(0x7f0000000440)=@raw=[@generic={0xbf, 0x6, 0x1}, @generic={0xb7, 0x2}, @generic={0x7b, 0xa, 0x2, 0xfff8}, @generic={0x7b, 0xa, 0x2, 0xffe0}, @generic={0x7b, 0xa, 0x2, 0xffd0}, @generic={0x7b, 0xa, 0x2, 0xffc8}, @generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0xb7, 0x2, 0x0, 0x0, 0x1}, @generic={0x63, 0xa, 0x2, 0xffc8}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x63, 0xa, 0x2, 0xffcc}, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0x2d, 0x0, &(0x7f0000000600)="001122334455001122334456080045000028000000004006f8ce0a0000010a0000020050005000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m39.974267674s ago: executing program 32 (id=1081): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x14, &(0x7f0000000440)=@raw=[@generic={0xbf, 0x6, 0x1}, @generic={0xb7, 0x2}, @generic={0x7b, 0xa, 0x2, 0xfff8}, @generic={0x7b, 0xa, 0x2, 0xffe0}, @generic={0x7b, 0xa, 0x2, 0xffd0}, @generic={0x7b, 0xa, 0x2, 0xffc8}, @generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0xb7, 0x2, 0x0, 0x0, 0x1}, @generic={0x63, 0xa, 0x2, 0xffc8}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x63, 0xa, 0x2, 0xffcc}, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0x2d, 0x0, &(0x7f0000000600)="001122334455001122334456080045000028000000004006f8ce0a0000010a0000020050005000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m26.514412082s ago: executing program 2 (id=1209): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x0, 0x20008}}, 0x20}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000040) 4m25.636550757s ago: executing program 2 (id=1212): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x806f, 0x0, 0x2d5, 0x5, 0x6], [0x9d8, 0x5, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc3c, 0x3, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x4, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x100, 0x1, 0x83, 0x538a, 0xc, 0xfffffffffffffffb, 0x4, 0x0, 0x4, 0x5, 0x8, 0x8000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0x14, 0x5bc, 0x1, 0x7ffffffb, 0x4, 0x8000, 0xc9, 0x7, 0x3, 0x9, 0x82c, 0x7ff, 0xe000000000000, 0xe4, 0xf, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x7, 0x0, 0x6, 0x6, 0xb, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x8, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0xfffffffffffffffe, 0x100000003, 0x4, 0x7, 0x406, 0x3, 0x6, 0x2, 0x0, 0x3, 0x3d, 0x7bffffff, 0x7, 0xe, 0x3]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x3, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x2f) 4m24.279597011s ago: executing program 2 (id=1215): epoll_create1(0x80000) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_emit_ethernet(0x42, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371"}}}}}, 0x0) 4m21.650321462s ago: executing program 2 (id=1222): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x4000, r0}, 0x18) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r5, r4, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x98, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000006c0)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 4m20.807041729s ago: executing program 2 (id=1225): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2f082, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/diskstats\x00', 0x0, 0x0) pread64(r5, &(0x7f00000022c0)=""/208, 0xd0, 0x1) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) 4m19.485409758s ago: executing program 2 (id=1229): socket(0x6, 0x80000, 0x5) close(0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000005000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000005000)='./sys\x00', &(0x7f0000006000)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000007000)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0xe1, 0x0, 0x0, 0x7f, 0x100000, 0x1, 0x2004c8, 0x80000000, 0x80000000000, 0x3, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x3000, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000000)=@arm64) write(r0, &(0x7f0000008000)='1', 0x1) socket(0xa, 0x80000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001900)={r6, 0x1, 0x6}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 4m19.074648885s ago: executing program 33 (id=1229): socket(0x6, 0x80000, 0x5) close(0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000005000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000005000)='./sys\x00', &(0x7f0000006000)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000007000)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0xe1, 0x0, 0x0, 0x7f, 0x100000, 0x1, 0x2004c8, 0x80000000, 0x80000000000, 0x3, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x3000, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000000)=@arm64) write(r0, &(0x7f0000008000)='1', 0x1) socket(0xa, 0x80000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001900)={r6, 0x1, 0x6}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 3m20.304425331s ago: executing program 0 (id=1467): openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='attr/prev\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2204490, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 3m20.26023665s ago: executing program 0 (id=1468): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x3481cc60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) r3 = dup2(r2, r0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x6) 3m20.209920826s ago: executing program 0 (id=1469): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000005d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004000) 3m20.16899988s ago: executing program 0 (id=1470): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x28, 0x41, 0x109, 0xfffffffe, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0x20000080) 3m20.074844971s ago: executing program 0 (id=1471): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x4000, r0}, 0x18) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x98, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000006c0)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 3m19.92058981s ago: executing program 0 (id=1474): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) 3m4.862963628s ago: executing program 4 (id=1539): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='%\x00', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='1', 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000100)='500\x00', 0x3) ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000180)) close(r2) renameat2(r2, &(0x7f0000000080)='./sys\x00', r1, &(0x7f0000000140)='./sys\x00', 0x3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r2, 0xffffffffffffffff}, 0x4) r4 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) ppoll(&(0x7f0000000240)=[{r1, 0x1080}, {r1, 0x510}, {r1, 0x8040}, {r3, 0x1088}, {r1, 0x4084}, {r0, 0x40}, {r4, 0x10}, {0xffffffffffffffff, 0x8000}, {r0, 0x40}], 0x9, &(0x7f00000002c0)={0x0, 0x3938700}, &(0x7f0000000300)={[0x7fffffff]}, 0x8) 3m4.847826244s ago: executing program 34 (id=1474): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) 3m4.77523109s ago: executing program 4 (id=1542): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r1, &(0x7f00000001c0)='\\', 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) 3m4.10056358s ago: executing program 4 (id=1544): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/126, 0x7e}], 0x1, 0x1, 0x7) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x3, 0x2, 0x1, 0x2, 0x4}) 3m3.109111414s ago: executing program 4 (id=1550): socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x1ff) recvmmsg(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x44000) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x5}) 3m1.679784591s ago: executing program 4 (id=1554): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x98, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000006c0)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 2m59.999235666s ago: executing program 4 (id=1559): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/126, 0x7e}], 0x1, 0x1, 0x7) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x3, 0x2, 0x1, 0x2, 0x4}) 2m44.53047669s ago: executing program 35 (id=1559): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/126, 0x7e}], 0x1, 0x1, 0x7) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x3, 0x2, 0x1, 0x2, 0x4}) 1m26.692574253s ago: executing program 5 (id=1904): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xffffffffffffff98) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) shutdown(0xffffffffffffffff, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800}) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r3 = socket$kcm(0x1e, 0x5, 0x0) recvmsg$kcm(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000016c0)=[{0x0}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r4, &(0x7f0000000280)='1', 0x1) 1m24.44541229s ago: executing program 5 (id=1913): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000140)='\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0xffffffff, @local, 0x2}, 0x1c) listen(r3, 0xfff) r4 = epoll_create(0x7) r5 = epoll_create1(0x0) r6 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000280)={0x2000}) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000140)={0x60000000}) syz_emit_ethernet(0x4b, &(0x7f0000003540)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x15, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x3}, {"f1"}}}}}}}, 0x0) accept(r3, 0x0, 0x0) syz_emit_ethernet(0x4b, &(0x7f00000002c0)={@local, @random="b84fbdff8a20", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x15, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4f}, {'p'}}}}}}}, 0x0) syz_emit_ethernet(0x4b, &(0x7f0000003540)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x15, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0xffff}, {"f1"}}}}}}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_eee={0x45, 0x7, 0x2, 0x2, 0x4, 0x400, 0x6, 0x4, [0x4, 0x2]}}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x2000000000000014}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0)=0x307ea, 0x4) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000540)='fou\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x802, 0x0) 1m23.494207712s ago: executing program 5 (id=1919): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8004, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x11e, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r1 = syz_io_uring_setup(0x5c65, &(0x7f0000000580)={0x0, 0x3, 0x10000, 0x8000001, 0x1db}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000640)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x9) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x60, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xbe664cb1589c0c84, {0x0, 0x0, 0xf}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 1m22.972096867s ago: executing program 5 (id=1923): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xffffffffffffff98) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) shutdown(0xffffffffffffffff, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800}) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r3 = socket$kcm(0x1e, 0x5, 0x0) recvmsg$kcm(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000016c0)=[{0x0}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r4, &(0x7f0000000280)='1', 0x1) 1m20.717750822s ago: executing program 5 (id=1929): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2', 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4) 1m18.281598725s ago: executing program 5 (id=1941): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x158}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = io_uring_setup(0xaae, 0x0) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/events/kmem/kmalloc/filter\x00', 0x2, 0x0) write(r7, &(0x7f0000000300), 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) writev(r2, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x1d0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xff000000, 0x1ffffff01], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 1m2.242912253s ago: executing program 36 (id=1941): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x158}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = io_uring_setup(0xaae, 0x0) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/events/kmem/kmalloc/filter\x00', 0x2, 0x0) write(r7, &(0x7f0000000300), 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) writev(r2, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x1d0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xff000000, 0x1ffffff01], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 10.645763485s ago: executing program 6 (id=2161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="39000000130003470fbb65e1c3e4ffff060060001600000056000000250000001900b3c0b6d20300070a0000000084db26b9e4e20000000000", 0x39}], 0x1) 10.523424942s ago: executing program 9 (id=2162): syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x4, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x20000000000000, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) syz_usbip_server_init(0x3) 9.5136555s ago: executing program 6 (id=2166): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 9.242236563s ago: executing program 6 (id=2168): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902120001"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000001a40)={&(0x7f0000000080)=[{0x5b, 0x2010, 0x0, 0x0}, {0x5, 0x0, 0x0, 0x0}], 0x2}) 8.49129516s ago: executing program 7 (id=2169): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 6.78005914s ago: executing program 7 (id=2170): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}]}, 0x44}}, 0x0) 6.281443846s ago: executing program 9 (id=2173): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000181000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x10000080000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0xfc, 0x0, 0x0, 0x68, 0x18, &(0x7f0000002200)={@flat=@handle={0x73682a85, 0xb, 0x1}, @ptr={0x70742a85, 0x7fffc, 0x0, 0x50, 0x1, 0x26}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x3e}}, &(0x7f0000000300)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 5.901722097s ago: executing program 3 (id=2174): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000080)={[{@size={'size', 0x3d, [0x34, 0x4d]}}]}) 5.714234897s ago: executing program 9 (id=2175): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x75) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 5.618583366s ago: executing program 3 (id=2176): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[], 0x98) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x44, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}]}, &(0x7f0000000140)=0x10) 5.60193858s ago: executing program 9 (id=2177): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000540)}], 0x1}, 0x0) 5.504121903s ago: executing program 8 (id=2178): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c"}) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) 5.413019778s ago: executing program 6 (id=2179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x11, 0x2, 0x300) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 5.411301491s ago: executing program 7 (id=2180): r0 = add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r1, 0x1c, 0x900}, &(0x7f0000000040)={'enc=', 'pkcs1', ' hash=', {'sha512\x00'}}, 0x0, 0x0) 5.376011903s ago: executing program 9 (id=2181): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0xc, 0xb0, 0xf, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8ae}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x5, 0x6, 0x5}, {0x6, 0x24, 0x1a, 0x3, 0xc}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x2, 0x8, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x9, 0x50, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x2d, 0x4, 0x9}}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 5.291929262s ago: executing program 3 (id=2182): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000001a40)={&(0x7f00000003c0)=[{0x4, 0xc000, 0x0, 0x0}, {0x7, 0x5401, 0x27, &(0x7f0000000340)="079b9b8623f9879837b68518b8ce694d2bcd5aeae56afee839d735ca52a0dd301a1063b4a99fae"}], 0x2}) 5.178818255s ago: executing program 7 (id=2183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x44000) 5.14186355s ago: executing program 8 (id=2184): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x5, 0x0, 0x0, 0x11}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2f, 0x0, 0x1}, 0x28) 4.792906943s ago: executing program 7 (id=2185): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x2010042, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x200, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r5}]}, 0x24}}, 0x0) 4.728105012s ago: executing program 8 (id=2186): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x10) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./cifs\x00', 0x1ed) mount(&(0x7f0000000800)=@filename='\\\\::1\\share\x00', 0x0, &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='ip=::1,port=20000,user=root,password=root,vers=3.1.1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000900)='./proc\x00', &(0x7f0000000a00)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/fs/cifs/Stats\x00', 0x0, 0x0) read(r1, &(0x7f0000000c00), 0x1000) 4.72408799s ago: executing program 8 (id=2187): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141302) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_open_dev$mtd(&(0x7f0000000000), 0x46, 0x2801) ioctl$MEMREADOOB64(r1, 0x1269, &(0x7f00000000c0)={0x2, 0x0, 0x0, &(0x7f0000000380)}) 4.39109083s ago: executing program 6 (id=2188): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) readlink(&(0x7f0000000180)='./config/usb_gadget/g1/UDC\x00', &(0x7f00000001c0)=""/130, 0x82) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f000022b000/0x2000)=nil, 0x2000, 0x13) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x10) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000940)='dummy_udc.0', 0xb) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r4, 0x3ba0, &(0x7f0000000800)={0x48, 0x14, 0x0, 0x0, 0x1004000, 0x0, 0x0}) 3.4842276s ago: executing program 7 (id=2189): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x10}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000001ec0)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xa7f5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000240)="c1d1ba969be8464478155454456ef74911e911be4508928d4ded202efa89f5f29839c6563a45a18ef37501fb117bdcf7705acb7da98a8281fa33a4c77b1438b452f7fb1453bf17586b3654fcde6d46400c6d7987713251081d47ed1a644655c84e506fb712c280f31e18902b4c28f52a05092878", 0x74}, {&(0x7f0000000300)}, {&(0x7f0000000880)="ecb2d51111bfd77b1abfa88cabf6e5bfdb73ab9a76596a32b4746d0ebd7799df1577cd6e3abb01452a8f8c547d3818529b4d5648df326d9168a9359cb43c2efcaee5e873a74afb751ac05e2d4a2b1a06f7838713ff26d7433f07cc9aab504e8510eb8db8d866ecbef7e8112b7086862a9bba3b3d70108632921bda8338b2f33376493514e6b738a6eedf16fb555a928ea3f1759583b94e8fcbee7052855e5cd2cbee61c49e1f91cd61059516f5eb06e75219afdee2e4368f0d4741aec1fe95435a9b0968119f9b7863e79eed45f52d40603216c10c60e1074ffbcd6cb25340620ea87964b643a8a580c84d4da1e0abd1c6c5c4bac9f7acfde32fdf6d7554b936d5253968e9b210f1ae2e5bfee7e76e15f36e2ed448bea9acccd681b8ecce100653bad5c63246241f5de04d245c4b44cb71829c5e1780e16527583dfd4d348a56484ae3abdbb36380d8a5ec57aa0d9b51f174d32c922c866ecff7e9fcd97788f012ee02bb0ac1687843a3a060cc3d5b5014b5db2ceee9959cd3537356897c77844de36c3df5edc2d30697b044da5c6f80f9c723036950dfe298245020c11490fa16b7d176bbeae880ed965ddf4a650d89b5e079efd0396ac9c5f3450b1373dbbbc6ea907ed9a765eab4c34bd355902d12b9ccf92543fa34b0994e0097ca831c7f58f0a14336cd319c9debe414b12b6894b6541770adc72db963c5d0dfdaefcdcb00c04fb9ad613172541e7580fb69c9ba32e6a01560590cdc6f57b8de80e21b13dc6f8267899bb5a5c0209699105705650332281b063eb49da6ce129f2d7a9331e5d5c8f22665d0511c3a1abef16b4c1a829472d9d6e1bd8bf87a89ed27c5128703c686e4ec69a8a02e778395f3be376464bd89791474f31decb0b25ed8651c71c7e22415e7f02ec02c5fa7f18fa2cf13d2a42c4b6f637f2a7c3c34648108581d65e13acb4d65c6f9a3f6529a4bdb1b887e9ecad19d922e2887b931082f99eb1d7543995156bcf861b1d71fb5919a9e77750128008f60d9f8058e47848649c3a45cefe0e0dd7ba12290b04a55f25c12bf71ce8624fd845dfd8a0e3d69720dfd33831719b58f3e948fbff9dcc5cbe1d720e5b09f329de4f13eba96cd367e91ac24553b4fb2b5fbd270c30d45fed3ae227b45f3318fc76aa205a18e8d48ec50ba130d7c96de5fafe43565f31cb47fd94b59f7a99092ead363b480fca79012aaa22140bbfd5c8be6d36bba547971d596da06f6319bcfa295167477af30706303c58b1f3a84bbbf399450fd3ad50fa91c308ef464413b95c95555186a5cf52519f9185db65008ffd3e357d06993df711c594a92390eccf8d3d395f18cf32b12d3cc2d778159d592050a71cb2819fd468be9ffd3516f883bec59cbb5242ea932091fec5be23e1dee5133df8fb5d321e1f5c9bd6b7ff34a30bc5e3947e0d00b6a835729774245410fe6044a94e7ee88ce8097b314fc07e9eff9085a820404ef39a69c9d0b762e78d903cea502066922c6aca366f14f6192ace9ac6cbfc3a50f82f02e7b6be736675df90740f085a23e7355e5706824ec43a68c6948fa36d3f6a34da44c1947623df31c46b8d3f57ca3f9db64d508e0d15db698c342c37232fa53f0a9b6767899246a583ad7950d4940c86868c8bd47558bfa74d63a1e10d903893c4d1663bd5767a1661a728f33284e6072347cadd08f26eabc5edcd25956baa484a45c10181efa36a074020d7522e6ea493730eb00fa6e4a8522f7227d86f26262fdb1e2f766577869ac852a5d15bd4b021cf190872eae806d7cb01bc41a54293a132f9fa54a40aff6b6012f997b1be7850bd6c74114e2d43d0e8b04c5f01d21b99d0df6ae4e5da6e75bb931a2b99689d81e129e3376bdd8b2fbd334498bf06b8a50ff55d12f3e0e4d0c3c1c0919976c94b09f4af10b34ebbaf6914e2eee154c7189688881d97c823b1b2841d6fc9fd87b6e8afcb9790021e45a014ea02cfb34a500ba105892875988088650087006a8766cefaaa707608f0c5ddc6622563691827c75445326b53adfa93c2e3ac459dcd49545bff44f413b041b9a6e37c33af802947438aa2c1b0dbd2719304bcb2b507e8b9a8eabe8c18f4d15ebb23de685e9afd5566a6fbcbaa7ded62031f78d2f0e93f1f1152333fc20cebfc5ef87523bd7451a7aa7e1902d8164c54c19afa48c708384a568ad724214838ca88e23c58defb3b382572017a6e8dfaedab41ec237a90bb9715e6636894affb210de5f4bec9fa8c479f4dd50650f0c928b89076a6ce63448bb7f491b5ffb6d86531ded15841ac3bd27e28f331a1af0058a793cb7bd95e4249e64906bc8768a969e2c46c63546741879002b315204f08a5c08b8c2f3a7d70cf10972ea3f7006f4c84af517f2f6d7f1d8d6e00f6459964d4e610860c98b76f3e49a3196cc42a327a472023168a78121af8c2231435d82bcee8febdabd165dd79d550908e2b3d000ea8b63461e1bf935011227d05219ca25aaf9fb7eaeee5277929ec0fab72f7e19f4310bfb166c5caa55ae6c8bd4633a404ef918d5b2ad0bc1c74a37077aeae04097a67069491115df94be87a7a8e389859a1db009afd727e49e83518e612c0bd6d0583a10259aa6bc9c69c5beaff2f685dd6df31d97eebc9a5501238cd1d28cbdae50a45c94a6f963e760c98acb56b16eb6ed9809fc0926998469f6720757287c09506a5ad97733f11b4cb3ed11b0d143c840e6dc4f0d6487b6ac77e80a05ffc3bea693a82d7ef8d762c338b1f98c7c4211d1648d8387a6763ccae114fb1e50289b7d4f1ead3a15df7c6673ae18085ecb687b6ea109e3150c1e6806235327b8840b8ebce60e631617e8f5e790626abc5651f3fc69ef9588e8dfa81a885f5f77a68bcd4f310f316ac8bce5c4763496d8ba482ff564d8eb01a16949feaec7d97ed5af85bd52ceb54180f9727652143811f970e3719bb9c79caf6e40a64837f6f87437d80435f35ead7e4f0d400c3640022b08c8e56a1fb98b97d1bf9dc2df7db1bc7564bf2ef4dc0836413691500d3598d9d75df430cd172a9fcc95d30c9e4ee359fcd9b326f8b0bda9f1a5809d5ae70602302713a104e430a55082833c381162e121278cd27cf8d1dd7c94fddcf817978b4dc610008f61c6b356abdf98ac6713d060fee7e8a84744ce59cbfdfc2feb24dba1d8340db3915fb3440cd13c24a39efcf8ae41a4e77efc8e0c499a582743b2148cc350af8ee66f08215be02701685f85a1470aee5fc68760bfc0b87ee1f6acc608942e18bd86254f62ed7c91b8d8bd7d2d4a615e0b590cb12e8c7a410b4a966c659a607a692b8cdfd5037b5906e539fc85d32a90b7b3fd9ec29610f862021ba36d3257b32445d63f1c1008f73bb459f75c13c3fbd77b63e0463e4b71251abe00b68d3a71dc009ecf80793e0c3aee762f7f47c63d42e2f7bf5e533d7bef28d37e77ade362fd1f955b2d4334e2c965bed65a6b38393baaa1cd0f1540322f2f963f4e154523c0389327de9f20ceaf84d445dbf123a5a688c5ae142035aaee5ed5cabef807e3f2cee0c9374f3e055457672d2b0b320e84e7837afff7fae2ecf5e7663dde8b91b14c05b33b8432a45d270771ba206c7d2d86bdd2cb590cdab37eab705605d48d76063dc32aa0d5b39d311e484358b2db53d266a1b5d69c959916a325f89bec6a4220662b1934b0ce69c3cea1fa21806edd804375d4bd94ddc4c33c8bef813d19253f9cdd47dc1e7058d9a9a670bc6466e48e0e9225e0863d8d146ea12752779be6d91dcd2944ec134ba3ef6d8673e009271e819841f7cb52454ce7e613f1e28005de9266ff049b7572e89c0a567be2d6c1ab9de4696d4f6a22cc91c69f3fd657f2c642738cacd81fafe0eb0ca40e443a00c86fd45d70f02e04475daca2d022f0bcd1289143e72cd4f8d2b7d2a3711eff94af78d16eb8ec99ec5a5a97553ead36f2b48cd3fc833432f44fd7088ec9b1078a8329824738602abcf5b25437cb20fbdff33a137daaf2b941c74f0b6e3eed7dd4bad4968f289d049ec20cbf207765666cb386aaad8712c03838139bd4393fd4e93faf7374b48dd7111bd85b654bd00e544c8864d0b5e496452348ddd2fa709ddfac9f5b9dff5b006604a0b13b9ed521ed09de7080a2713e154a919bec88b183f5f28a4b5aa485f85de10f5408e6ed4935b4fd569bbd51d2387e496dba3d819933027d54fc10fdfe778e8b0a3dad2e071c97eabaf471648a1e7cc4eed9623aadd256a789b1d81dfd396de1a29adf80203b9e98f04d9b7c2a1c7a77ddf3680e64d3b39086e481631cfccc502e7f87d31c1f290ba514a39ab6ffaa31b5028d78e8e194819be93db563618b8e261ed4ed71401daa082167070fae913a8e455a70c784a4a14e33b354e11716910d047522df4cb5840ce6cd2df25c05ef38cb5385e94def2e85a2a76affb61f9f507a5fcaf120eff2eaf7a658ebff188c937bd1c9fe95121e53bedd8f9814f1939fe3a788e6a41d70cafc72b2f931854ce309ed7a29f454ab94461c370b55b8708937d8f3f4a35c1da4800a72efbc2b830a768855cbc97829d213309a1595740939eef856a7d9cfe0c4311a8155d82035fcc7a11413952a2a109a7baff29e8c1eeb4051fe2186f024d0cd9eeb69a029db67157ae8a73fbc36dae819eec27704618bced6e913436519908b80f6d60499d7a6aa625d95c7bd0e7412640dbd829071d0f4d9e56aaf23070e48c15d65444d973335620eed3ab0f2087911950c570c3ddd5e674b2d98ac36e53660874db3cee9357e2275b68fc487f3c4d3661a4cb69d44777889789edac32a09d6d95e4e8e282e1a2b6754754a71392358d015e0b16dc45f9ccca8f2cf259cfdb096d05f63fc02ddd0245da079b4fff2997750bb3e446c5b6e53e6dc7aff581b59dd7044685445c277addc3352cf92580ee2830a9486e8554797aa1852ddfa87f8c6e038dd52dc335e953654792a7dc38d1ae75a78d2709b9dc3021d749baab20cbac43c30280a74f2d4f413113c7e745396484ab07ee34e03c41d5b3d12d29739eb2641c0711cc850701c16c0ba16a1887e6e6490a41454d8697a2cb27703e677ef2b3a467e4b332f86b8c156acb9e765be96d325ef3112b5834a8bd3a040a3f63cb287cee931466ccb1fe129321a679a7c841903fd68bc523f95e09a6a9c965f8965c57e6ba0d2ef616b0d2076ac68be3a3ae9ddb54602079da871205393a02b687fa61b3fb21fd063514d941e594f5292aee7f1710077ffb0701225859acd208bd356ab7710bfe157a1d60a00a10085589490e3b8cfa58d68cdcb253dc738b1fae19c972802b91e452cbc37a59cd71790dbd1cb7d3583bc453953c44326f076864c6ca75bdb5d15c6b756c808e1c7ea180f7dadb95fe367e6785031b5bd89e7425274cdbaf46ca4ce8e96850f2603324e819b4afa60141ff849ecf684ec3122de568f998c6bb669ecffa456c2127e95698eb85832bf9c31500da8e5277a57d2cf5fc0ae8d04acfb5dc206c2ad895992b8b3b6e859b7072f800f85fbb9bd9a5d70811df0aaa8cb1ae70753ef0e7c00a31c0cf6364f6079b85a118f142ebe6ec5237e878110eaa911f4d8586428cca53637bf8be4f89e1a6afdfbfd837954b9d79f457dd026ef23edb63f359a184a6e343ad889f4f0ee89495af67c9a350978d9e3a722b911d3fa0ce2de183c5e611f09c6da92095b889e86c737fce2d3a34d6ee7f03fcece5a06a719e6b207c335c067c7428bb114b64ab1fca3325521243ba45a5c77d1f27cd6904319cb20c40dcb", 0x1000}], 0x3}}, {{&(0x7f00000018c0)={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800}, 0x1c, &(0x7f0000001dc0)=[{&(0x7f0000001900)="ce610928087a6b09734001741f3959a6bee162a6b17126641ee4649cceee1b190f3e92dc087019b8ff189545c245b9f97427052208774c96cf", 0x39}, {&(0x7f0000001940)="4619ccd512c105ff81349414b9caf2f5f4efcf56537482829000701b673cce16242d5cf7a477b2229f2c5b80abf9a4ccc2e1e8be8e74153e0be689df24309ee0ef365bb9497a39e342628396da9f36aea9f79a0057f494c2ddea", 0x5a}, {&(0x7f00000019c0)="f3479dc7b214cd84d70014da98b554fe6bd0ff8c8789", 0x16}, {&(0x7f0000001a00)="bc7a5801d714cb1a3b23f5df1ccfe1b0cf4659b7182b0b38a290564c3a1ded02c2d398a253d2ae32f721a99439eb3f30a097093f5e0e3f08e7fdbec54c07e510fd6f2e80310b1e861157aeaea5e452dc23aae904e3aa10063e64bf009877e02a3d673dcf32c2d27c21c85e3748d6537741450d97e97696d3a1ed8311418fe7c932fe80d7ffaf3e0f3f987710c655446e87194200c1398d542c427d25705b6e9f2dbc686d34396b7bdd718a5d7d88af85341fb4e10d19018fb626e8f38c1ca5317b5f1efcef61425982fd5f7a959fa7e82c1c", 0xd2}, {&(0x7f0000001b00)="0edadeee393e60b779aaf42305fe2a69d685e81c3652c6049037a6550d7b37fc447c45b2b563eb319c4e94c2a925cf700db827377536c4471450ee71d6e556fdd598456ff5fa95259aa0089ff2330ff74dc6238210c59125c311ddf04c1df298cf6de33b70fb8d3b5ca451039ba4eb1d774b9e69060685a0df1140989bf5f5b82deef12a5fc6969ee4b220362a5203ea96b2d43bffcb86422429f4e1881839726417f3a05d6db994bfa846f318d651b1b5965ae16d58ee5e288b9dd96e02cfbedf24bda65d62899725426b9c46c3994c8450019da58e875e3ebd78c73636d377a7796df0fdaae4033b69112ce590da462bfd652b84", 0xf5}, {&(0x7f0000001c00)="9b5b370d84d037b5ef7ad79e45", 0xd}, {&(0x7f0000001c40)="09c6ac0b3494ba22c44eec3834520a35c93baff3a439923f23a078de1026211d5705b928e50eeb5263804b5bd6e2bfe3d51301b761d6804f1b075cf3fa571f82d689662d7cbc6f35210537265e2b564e6e14daebe255b6a6d1edfcd12b085f917cb8a6a0ce37d259aec2b48103230f5ac033a465", 0x74}, {&(0x7f0000001cc0)="3f1ce21c9df68e8ff296b2cdbbf09dcd0a83472a14203ee3658094816690e16a2ff5cf5465914b05a43026ebc8792a6b0c21960f1549f1a6a4d4f049defd573560f1bd7d57a032a5f64338880d07ee33dadc663515540c086e", 0x59}, {&(0x7f0000001d40)="16864aa7435d8a8e655ca527fe3e69fbdf0405689649239b354f35f2bb57b3aa573a7d7a51dcff9f53af955694f5658d368e5bcfe7f3feb97016560a6db9784ec64d3455f3af197a2eb559c366a368686c5b116dccab9e7ee9696ea3aaccdd39d9dcc61b0454", 0x66}], 0x9, &(0x7f0000001e80)=[@tclass={{0x14, 0x29, 0x43, 0x7fff}}], 0x18}}], 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080060000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="03040000b5000000"], 0xc8) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402004c68e01000000010902120001000000000904"], 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)=0x9c) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f00005e3000/0x3000)=nil, 0x3000}, 0x1}) 3.097680633s ago: executing program 6 (id=2190): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000001a40)={&(0x7f0000000080)=[{0x5b, 0x2010, 0x0, 0x0}, {0x5, 0x0, 0x0, 0x0}], 0x2}) 3.066081233s ago: executing program 3 (id=2191): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='%\x00', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/acpi/parameters/ec_delay\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='500\x00', 0x3) ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000180)) close(r2) renameat2(r2, &(0x7f0000000080)='./sys\x00', r1, &(0x7f0000000140)='./sys\x00', 0x3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r2, 0xffffffffffffffff}, 0x4) r4 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) ppoll(&(0x7f0000000240)=[{r1, 0x1080}, {r1, 0x510}, {r1, 0x8040}, {r3, 0x1088}, {r0, 0x40}, {r4, 0x10}, {0xffffffffffffffff, 0x8000}, {r0, 0x40}], 0x8, &(0x7f00000002c0)={0x0, 0x3938700}, &(0x7f0000000300)={[0x7fffffff]}, 0x8) 2.81700775s ago: executing program 3 (id=2192): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[], 0x98) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x44, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}]}, &(0x7f0000000140)=0x10) 2.795940147s ago: executing program 8 (id=2193): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) utimensat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0xe71c99d373a27e8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x56, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x20, 0x67, 0x0, @dev, @local, {[@hopopts={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x8a}, @jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x8, {0x2, 0x0, 0x40, 0x7}}, @enc_lim]}]}}}}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x48, 0x2, 0x48, 0x5}, {0x6, 0x27, 0x2, 0x207}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xd, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x17}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000500), 0x40902, 0x0) 1.418012913s ago: executing program 8 (id=2194): r0 = add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r1, 0x1c, 0x900}, &(0x7f0000000040)={'enc=', 'pkcs1', ' hash=', {'sha512\x00'}}, 0x0, 0x0) 690.341229ms ago: executing program 9 (id=2195): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setresuid(0x0, 0xee00, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 3 (id=2196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x44000) kernel console output (not intermixed with test programs): 2][ T983] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 374.682804][T10438] hsr_slave_0: entered promiscuous mode [ 374.689388][T10438] hsr_slave_1: entered promiscuous mode [ 374.695784][T10438] debugfs: 'hsr0' already exists in 'hsr' [ 374.701645][T10438] Cannot create hsr debugfs directory [ 374.712657][ T5812] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 374.773998][ T983] usb 4-1: Using ep0 maxpacket: 32 [ 374.776802][ T983] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 374.781236][ T983] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 374.781262][ T983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 374.781283][ T983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 374.781301][ T983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 374.784228][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.784251][ T983] usb 4-1: Product: syz [ 374.784263][ T983] usb 4-1: Manufacturer: syz [ 374.784276][ T983] usb 4-1: SerialNumber: syz [ 374.790600][ T983] usb 4-1: config 0 descriptor?? [ 374.903037][ T5812] usb 6-1: Using ep0 maxpacket: 16 [ 374.926287][ T5812] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 374.927850][ T98] rxrpc: Leaked peer 250 {1} 127.0.0.1:7003 [ 374.944717][ T5812] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 374.944754][ T5812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 375.011729][ T5812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.011775][ T5812] usb 6-1: Product: syz [ 375.011806][ T5812] usb 6-1: Manufacturer: syz [ 375.011825][ T5812] usb 6-1: SerialNumber: syz [ 375.039588][ T5812] usb 6-1: config 0 descriptor?? [ 375.079396][ T5812] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 375.088819][ T5812] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 375.510417][ T98] hsr_slave_0: left promiscuous mode [ 375.510938][ T98] hsr_slave_1: left promiscuous mode [ 375.560489][ T98] veth1_macvtap: left promiscuous mode [ 375.560553][ T98] veth0_macvtap: left promiscuous mode [ 375.560664][ T98] veth1_vlan: left promiscuous mode [ 375.560722][ T98] veth0_vlan: left promiscuous mode [ 375.676425][ T5812] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 375.683811][ T5812] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 376.096069][ T5812] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 376.096113][ T5812] em28xx 6-1:0.0: No AC97 audio processor [ 376.160928][ T5266] 8021q: adding VLAN 0 to HW filter on device eth10 [ 376.171209][T10438] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 376.172564][ T5608] Bluetooth: hci4: command tx timeout [ 376.182193][T10438] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 376.186700][T10438] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 376.214816][T10438] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 376.215655][T10438] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 376.228029][T10438] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 376.228660][T10438] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 376.236813][T10438] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 376.516195][T10438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.547699][T10438] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.572315][ T1419] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.573102][ T1419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.600230][ T9811] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.600332][ T9811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.109478][T10438] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 377.109549][T10438] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 377.429439][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 377.429481][ T30] audit: type=1400 audit(1788350162.395:772): avc: denied { write } for pid=10547 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.441266][ T983] usb 4-1: USB disconnect, device number 24 [ 377.445634][ T985] usb 6-1: USB disconnect, device number 9 [ 377.446874][ T985] em28xx 6-1:0.0: Disconnecting em28xx [ 377.473236][ T985] em28xx: Freeing device [ 377.643631][T10569] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1563'. [ 377.712154][ T30] audit: type=1400 audit(1788350162.675:773): avc: denied { write } for pid=10571 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.818415][ T5266] 8021q: adding VLAN 0 to HW filter on device eth11 [ 378.242807][ T5608] Bluetooth: hci4: command tx timeout [ 378.500892][T10438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.884273][ T30] audit: type=1400 audit(1788350163.845:774): avc: denied { write } for pid=10582 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 379.301995][ T30] audit: type=1400 audit(1788350164.265:775): avc: denied { write } for pid=10615 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 379.462459][ T5712] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 379.489380][ T5266] 8021q: adding VLAN 0 to HW filter on device eth12 [ 379.502495][T10438] veth0_vlan: entered promiscuous mode [ 379.521208][T10438] veth1_vlan: entered promiscuous mode [ 379.565336][T10438] veth0_macvtap: entered promiscuous mode [ 379.586754][T10438] veth1_macvtap: entered promiscuous mode [ 379.592748][ T5712] usb 7-1: device descriptor read/64, error -71 [ 379.614690][T10438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.621915][T10438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.717073][ T37] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.717495][ T37] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.717541][ T37] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.717573][ T37] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.772649][ T5812] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 379.790276][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.790313][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.882549][ T5712] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 379.924666][ T5812] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 379.928406][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.928423][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.952940][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.953013][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.953056][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.986490][ T5812] usb 4-1: config 0 descriptor?? [ 379.996905][ T30] audit: type=1400 audit(1788350164.965:776): avc: denied { unmount } for pid=10438 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 380.042463][ T5712] usb 7-1: device descriptor read/64, error -71 [ 380.175136][ T5712] usb usb7-port1: attempt power cycle [ 380.733746][ T5812] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 380.733805][ T5812] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 380.733837][ T5812] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 380.733858][ T5812] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 380.733879][ T5812] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 380.733900][ T5812] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 380.733921][ T5812] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 380.739893][ T5812] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 380.851701][ T5812] cp2112 0003:10C4:EA90.0003: error requesting version [ 380.904826][ T5812] cp2112 0003:10C4:EA90.0003: probe with driver cp2112 failed with error -71 [ 380.917213][ T5812] usb 4-1: USB disconnect, device number 25 [ 380.971875][ T30] audit: type=1400 audit(1788350165.935:777): avc: denied { create } for pid=10641 comm="syz.7.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 381.012434][ T5712] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 381.034796][ T5712] usb 7-1: device descriptor read/8, error -71 [ 381.292422][ T5712] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 381.313725][ T5712] usb 7-1: device descriptor read/8, error -71 [ 381.432691][ T5712] usb usb7-port1: unable to enumerate USB device [ 381.790619][T10642] fido_id[10642]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 382.333156][ T985] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 382.493185][ T985] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 382.505253][ T985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.505292][ T985] usb 4-1: Product: syz [ 382.505317][ T985] usb 4-1: Manufacturer: syz [ 382.505335][ T985] usb 4-1: SerialNumber: syz [ 382.785141][ T5608] Bluetooth: hci0: link tx timeout [ 382.789168][ T5608] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 382.803414][ T5608] Bluetooth: hci0: link tx timeout [ 382.803494][ T5608] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 383.392458][ T30] audit: type=1400 audit(1788350168.355:778): avc: denied { firmware_load } for pid=983 comm="kworker/0:2" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 383.450902][T10672] capability: warning: `syz.7.1587' uses 32-bit capabilities (legacy support in use) [ 383.482577][ T983] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 384.537001][ T985] usb 4-1: USB disconnect, device number 26 [ 384.698486][ T30] audit: type=1400 audit(1788350169.665:779): avc: denied { setcurrent } for pid=10686 comm="syz.7.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 384.882461][ T5614] Bluetooth: hci0: command 0x0406 tx timeout [ 385.123964][ T5712] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 385.286364][ T5712] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 385.297697][ T5712] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 385.297755][ T5712] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 385.297786][ T5712] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 385.297823][ T5712] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.417944][ T983] usb 4-1: Service connection timeout for: 257 [ 385.417963][ T983] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 385.490352][ T983] ath9k_htc: Failed to initialize the device [ 385.507342][ T985] usb 4-1: ath9k_htc: USB layer deinitialized [ 385.916468][ T5712] dvb_ttusb_budget: ttusb_init_controller: error [ 385.916502][ T5712] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 386.063474][ T5712] DVB: Unable to find symbol stv0299_attach() [ 386.455172][ T30] audit: type=1400 audit(1788350171.425:780): avc: denied { ioctl } for pid=10712 comm="syz.6.1601" path="socket:[30756]" dev="sockfs" ino=30756 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 386.480796][ T30] audit: type=1400 audit(1788350171.425:781): avc: denied { setopt } for pid=10712 comm="syz.6.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 386.514062][ T5712] DVB: Unable to find symbol tda8083_attach() [ 386.514488][ T5712] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 386.604532][ T5712] usb 6-1: USB disconnect, device number 10 [ 386.691393][ T30] audit: type=1400 audit(1788350171.635:782): avc: denied { write } for pid=10712 comm="syz.6.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 387.202468][ T5614] Bluetooth: hci0: command 0x0406 tx timeout [ 389.873241][T10758] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1617'. [ 390.612857][T10772] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[10773] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[10772] [ 391.631110][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 391.642732][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 391.655337][ T5614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 391.680910][ T5614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 391.693524][ T5614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 391.841844][ T30] audit: type=1400 audit(1788350176.805:783): avc: denied { write } for pid=10759 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 391.967947][ T1120] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.396981][ T30] audit: type=1400 audit(1788350177.365:784): avc: denied { write } for pid=10797 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 392.681596][ T1120] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.490599][ T1120] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.594887][T10827] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1632'. [ 393.764392][ T5608] Bluetooth: hci1: command tx timeout [ 393.898724][ T1120] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.939621][ T30] audit: type=1400 audit(1788350178.905:785): avc: denied { write } for pid=10810 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 395.117601][ T30] audit: type=1400 audit(1788350180.085:786): avc: denied { write } for pid=10847 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.224898][ T5608] Bluetooth: hci1: command tx timeout [ 396.230960][ T30] audit: type=1400 audit(1788350180.755:787): avc: denied { mount } for pid=10851 comm="syz.5.1638" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 396.679703][ T1120] bridge_slave_1: left allmulticast mode [ 396.679739][ T1120] bridge_slave_1: left promiscuous mode [ 396.680565][ T1120] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.709307][ T1120] bridge_slave_0: left allmulticast mode [ 396.709356][ T1120] bridge_slave_0: left promiscuous mode [ 396.709531][ T1120] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.993502][ T1120] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 396.993541][ T1120] ip6gre1 (unregistering): left promiscuous mode [ 397.235165][ T30] audit: type=1400 audit(1788350182.205:788): avc: denied { write } for pid=10859 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 398.048211][ T1120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.075240][ T1120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.086635][ T1120] bond0 (unregistering): Released all slaves [ 398.116878][ T1120] bond1 (unregistering): Released all slaves [ 398.208417][ T30] audit: type=1400 audit(1788350183.175:789): avc: denied { write } for pid=10884 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 398.252636][ T5608] Bluetooth: hci1: command tx timeout [ 399.043322][T10783] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.050769][T10783] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.058368][T10783] bridge_slave_0: entered allmulticast mode [ 399.072852][T10783] bridge_slave_0: entered promiscuous mode [ 399.081277][T10783] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.081363][T10783] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.088942][T10783] bridge_slave_1: entered allmulticast mode [ 399.108327][T10783] bridge_slave_1: entered promiscuous mode [ 399.211040][T10783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.314376][ T30] audit: type=1400 audit(1788350184.255:790): avc: denied { bind } for pid=10899 comm="syz.6.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 399.335279][ T30] audit: type=1400 audit(1788350184.255:791): avc: denied { listen } for pid=10899 comm="syz.6.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 399.641901][T10783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.988620][ T5614] Bluetooth: hci1: command tx timeout [ 401.003897][ T30] audit: type=1400 audit(1788350185.505:792): avc: denied { setopt } for pid=10906 comm="syz.5.1647" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 401.052664][ T5608] Bluetooth: hci5: command 0x0406 tx timeout [ 401.255680][ T30] audit: type=1400 audit(1788350186.225:793): avc: denied { write } for pid=10905 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 401.311880][T10783] team0: Port device team_slave_0 added [ 401.351003][ T1120] hsr_slave_0: left promiscuous mode [ 401.355328][ T1120] hsr_slave_1: left promiscuous mode [ 401.355950][ T1120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.355966][ T1120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.372055][ T1120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.372075][ T1120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.414497][ T1120] veth1_macvtap: left promiscuous mode [ 401.414534][ T1120] veth0_macvtap: left promiscuous mode [ 401.414613][ T1120] veth1_vlan: left promiscuous mode [ 401.414660][ T1120] veth0_vlan: left promiscuous mode [ 401.514859][ T30] audit: type=1400 audit(1788350186.485:794): avc: denied { write } for pid=10929 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.051418][ T1120] team0 (unregistering): Port device team_slave_1 removed [ 402.111872][ T1120] team0 (unregistering): Port device team_slave_0 removed [ 402.999518][T10783] team0: Port device team_slave_1 added [ 403.160625][T10783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.160648][T10783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.160669][T10783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.165309][T10783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.165321][T10783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.165340][T10783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.932824][T10949] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[10950] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[10949] [ 404.400537][T10783] hsr_slave_0: entered promiscuous mode [ 404.401242][T10783] hsr_slave_1: entered promiscuous mode [ 405.436709][T10979] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1664'. [ 405.461872][ T30] audit: type=1400 audit(1788350190.425:795): avc: denied { write } for pid=10956 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 405.499893][T10783] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 405.514715][T10783] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 405.523467][T10783] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 405.539045][T10783] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 405.548429][T10783] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 405.561268][T10783] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 405.569407][T10783] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 405.579345][T10783] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 405.700601][T10783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.716610][ T30] audit: type=1400 audit(1788350190.685:796): avc: denied { write } for pid=10988 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 405.740672][T10783] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.759561][ T9811] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.759641][ T9811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.790705][ T9083] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.790803][ T9083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.918700][ T5266] 8021q: adding VLAN 0 to HW filter on device eth13 [ 406.674824][T11003] overlayfs: overlapping lowerdir path [ 407.261597][T11007] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 408.124464][T11025] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[11026] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[11025] [ 409.237171][ T30] audit: type=1400 audit(1788350194.205:797): avc: denied { write } for pid=10998 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.608434][ T30] audit: type=1400 audit(1788350194.575:798): avc: denied { write } for pid=11044 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.733420][T10783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.780048][ T5266] 8021q: adding VLAN 0 to HW filter on device eth14 [ 410.303417][ T25] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 410.439625][T10783] veth0_vlan: entered promiscuous mode [ 410.478045][ T25] usb 8-1: unable to get BOS descriptor or descriptor too short [ 410.496256][ T25] usb 8-1: not running at top speed; connect to a high speed hub [ 410.505470][ T25] usb 8-1: New USB device found, idVendor=2013, idProduct=025c, bcdDevice=a4.f9 [ 410.682270][ T25] usb 8-1: config 12 has an invalid interface number: 126 but max is 0 [ 410.691441][ T25] usb 8-1: config 12 has no interface number 0 [ 410.691668][ T25] usb 8-1: config 12 interface 126 has no altsetting 0 [ 410.692311][ T5812] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 410.809645][ T25] usb 8-1: string descriptor 0 read error: -22 [ 410.823649][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.895436][ T5812] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 410.910438][ T5812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.918810][ T5812] usb 7-1: Product: syz [ 410.923446][ T5812] usb 7-1: Manufacturer: syz [ 410.928348][ T5812] usb 7-1: SerialNumber: syz [ 411.150095][ T25] dvb-usb: found a 'PCTV 2002e' in cold state, will try to load a firmware [ 411.354971][T10783] veth1_vlan: entered promiscuous mode [ 411.574731][T10783] veth0_macvtap: entered promiscuous mode [ 411.603775][ T25] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 411.603849][ T25] dib0700: firmware download failed at 7 with -22 [ 411.605254][T10783] veth1_macvtap: entered promiscuous mode [ 411.629975][ T25] usb 8-1: USB disconnect, device number 2 [ 411.654875][T10783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.667441][T10783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.694650][ T5812] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 411.694712][ T5812] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 411.703008][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.703139][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.703176][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.703210][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.766229][ T30] audit: type=1400 audit(1788350196.735:799): avc: denied { write } for pid=11056 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 411.926852][ T5812] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 411.926913][ T5812] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 411.927436][ T5812] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 411.966157][ T5812] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 411.974131][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.974150][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.003992][ T5812] usb 7-1: USB disconnect, device number 12 [ 412.039672][ T30] audit: type=1400 audit(1788350197.005:800): avc: denied { write } for pid=11096 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.126636][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.136659][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.158245][ T5266] 8021q: adding VLAN 0 to HW filter on device eth15 [ 414.476990][ T30] audit: type=1400 audit(1788350199.435:801): avc: denied { write } for pid=11120 comm="syz.5.1684" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 414.477122][ T30] audit: type=1400 audit(1788350199.435:802): avc: denied { open } for pid=11120 comm="syz.5.1684" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 414.477282][ T30] audit: type=1400 audit(1788350199.445:803): avc: denied { ioctl } for pid=11120 comm="syz.5.1684" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 415.428340][ T30] audit: type=1400 audit(1788350200.395:804): avc: denied { write } for pid=11105 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 415.869362][ T5608] Bluetooth: hci5: unexpected event for opcode 0x200c [ 416.398593][ T30] audit: type=1400 audit(1788350201.365:805): avc: denied { write } for pid=11149 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.199187][ T5608] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 418.353717][ T5266] 8021q: adding VLAN 0 to HW filter on device eth16 [ 418.506508][ T5338] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 418.506630][ T5812] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 418.652544][ T5338] usb 4-1: Using ep0 maxpacket: 16 [ 418.656006][ T5338] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 418.659131][ T5338] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.666079][ T5338] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 418.666173][ T5338] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 418.681651][ T5338] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 418.682126][ T5338] usb 4-1: Manufacturer: syz [ 418.710803][ T5812] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 418.948452][ T5338] usb 4-1: config 0 descriptor?? [ 418.955909][ T5812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.955935][ T5812] usb 7-1: Product: syz [ 418.955952][ T5812] usb 7-1: Manufacturer: syz [ 418.955967][ T5812] usb 7-1: SerialNumber: syz [ 420.450676][ T5812] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 420.450741][ T5812] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 420.530248][ T25] usb 4-1: USB disconnect, device number 27 [ 420.661738][ T5812] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 420.661802][ T5812] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 420.738915][ T5812] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 420.749743][ T5812] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 420.768550][ T5812] usb 7-1: USB disconnect, device number 13 [ 420.858875][ T30] audit: type=1400 audit(1788350205.825:806): avc: denied { setopt } for pid=11202 comm="syz.8.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 421.097419][ T5608] Bluetooth: hci5: unexpected event for opcode 0x200c [ 421.835726][T11220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.904735][T11221] Invalid ELF header type: 3 != 1 [ 421.929920][T11221] netlink: 540 bytes leftover after parsing attributes in process `syz.6.1720'. [ 422.436351][ T5705] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 422.773645][ T5705] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 422.774515][ T5705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.793425][ T5705] usb 6-1: config 0 descriptor?? [ 422.797112][ T5705] cp210x 6-1:0.0: cp210x converter detected [ 422.850216][T11242] FAULT_INJECTION: forcing a failure. [ 422.850216][T11242] name failslab, interval 1, probability 0, space 0, times 0 [ 422.866352][T11242] CPU: 1 UID: 0 PID: 11242 Comm: syz.7.1712 Not tainted syzkaller #0 PREEMPT(full) [ 422.866379][T11242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 422.866389][T11242] Call Trace: [ 422.866395][T11242] [ 422.866402][T11242] dump_stack_lvl+0x100/0x190 [ 422.866434][T11242] should_fail_ex.cold+0x5/0xa [ 422.866461][T11242] should_failslab+0xc2/0x120 [ 422.866488][T11242] __kmalloc_noprof+0xfc/0x840 [ 422.866506][T11242] ? __register_sysctl_table+0xbc8/0x1650 [ 422.866530][T11242] ? __register_sysctl_table+0xbe4/0x1650 [ 422.866558][T11242] __register_sysctl_table+0xbe4/0x1650 [ 422.866587][T11242] ? __pfx___register_sysctl_table+0x10/0x10 [ 422.866608][T11242] ? setup_mq_sysctls+0x5d/0x240 [ 422.866634][T11242] ? __asan_memcpy+0x3c/0x60 [ 422.866660][T11242] setup_mq_sysctls+0x124/0x240 [ 422.866687][T11242] copy_ipcs+0x524/0x7e0 [ 422.866713][T11242] create_new_namespaces+0x20a/0xac0 [ 422.866731][T11242] ? security_capable+0x80/0x260 [ 422.866757][T11242] unshare_nsproxy_namespaces+0xf2/0x220 [ 422.866778][T11242] ksys_unshare+0x4a2/0xa70 [ 422.866797][T11242] ? __pfx_ksys_unshare+0x10/0x10 [ 422.866824][T11242] __x64_sys_unshare+0x31/0x40 [ 422.866843][T11242] do_syscall_64+0x123/0x790 [ 422.866863][T11242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.866885][T11242] RIP: 0033:0x7f105b79e159 [ 422.866899][T11242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.866915][T11242] RSP: 002b:00007f105c649028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 422.866933][T11242] RAX: ffffffffffffffda RBX: 00007f105ba25fa0 RCX: 00007f105b79e159 [ 422.866945][T11242] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 422.866957][T11242] RBP: 00007f105b835024 R08: 0000000000000000 R09: 0000000000000000 [ 422.866969][T11242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.866978][T11242] R13: 00007f105ba26038 R14: 00007f105ba25fa0 R15: 00007ffdc1d107c8 [ 422.867000][T11242] [ 422.974767][T11242] sysctl could not get directory: /fs -12 [ 422.978406][T11245] fuse: Unknown parameter 'use00000000000000000000' [ 423.018212][T11228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.018556][T11228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.032879][ T30] audit: type=1400 audit(1788350208.005:807): avc: denied { append } for pid=11227 comm="syz.5.1721" name="event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 424.434214][ T5608] Bluetooth: hci2: unexpected event for opcode 0x200c [ 424.622594][ T983] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 424.692210][ T5705] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 424.692244][ T5705] cp210x 6-1:0.0: querying part number failed [ 424.710487][ T5705] usb 6-1: cp210x converter now attached to ttyUSB0 [ 424.730424][ T5705] usb 6-1: USB disconnect, device number 11 [ 424.820278][ T5705] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 424.831882][ T5705] cp210x 6-1:0.0: device disconnected [ 424.872437][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 424.880414][ T30] audit: type=1400 audit(1788350209.845:808): avc: denied { bind } for pid=11269 comm="syz.6.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 424.883854][ T983] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 424.914181][ T983] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.914210][ T983] usb 8-1: Product: syz [ 424.914239][ T983] usb 8-1: Manufacturer: syz [ 424.914253][ T983] usb 8-1: SerialNumber: syz [ 425.873738][ T10] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 425.874436][ T10] usb 1-1: Dual-Role OTG device on HNP port [ 425.876399][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.888733][ T10] gspca_main: spca501-2.14.0 probing 0000:0000 [ 425.889148][ T10] gspca_spca501: reg write: error -32 [ 425.889171][ T10] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 425.889250][ T10] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 426.800113][ T983] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 426.800198][ T983] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 426.800803][ T983] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 426.825290][T11295] FAULT_INJECTION: forcing a failure. [ 426.825290][T11295] name failslab, interval 1, probability 0, space 0, times 0 [ 426.825319][T11295] CPU: 1 UID: 0 PID: 11295 Comm: syz.5.1739 Not tainted syzkaller #0 PREEMPT(full) [ 426.825339][T11295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 426.825349][T11295] Call Trace: [ 426.825355][T11295] [ 426.825363][T11295] dump_stack_lvl+0x100/0x190 [ 426.825392][T11295] should_fail_ex.cold+0x5/0xa [ 426.825417][T11295] should_failslab+0xc2/0x120 [ 426.825436][T11295] __kmalloc_noprof+0xfc/0x840 [ 426.825451][T11295] ? __register_sysctl_table+0xbc8/0x1650 [ 426.825475][T11295] ? __register_sysctl_table+0xbe4/0x1650 [ 426.825507][T11295] __register_sysctl_table+0xbe4/0x1650 [ 426.825534][T11295] ? __pfx___register_sysctl_table+0x10/0x10 [ 426.825556][T11295] ? setup_mq_sysctls+0x5d/0x240 [ 426.825582][T11295] ? __asan_memcpy+0x3c/0x60 [ 426.825607][T11295] setup_mq_sysctls+0x124/0x240 [ 426.825634][T11295] copy_ipcs+0x524/0x7e0 [ 426.825657][T11295] create_new_namespaces+0x20a/0xac0 [ 426.825676][T11295] ? security_capable+0x80/0x260 [ 426.825700][T11295] unshare_nsproxy_namespaces+0xf2/0x220 [ 426.825720][T11295] ksys_unshare+0x4a2/0xa70 [ 426.825739][T11295] ? __pfx_ksys_unshare+0x10/0x10 [ 426.825765][T11295] __x64_sys_unshare+0x31/0x40 [ 426.825783][T11295] do_syscall_64+0x123/0x790 [ 426.825803][T11295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.825820][T11295] RIP: 0033:0x7fe97a39e159 [ 426.825834][T11295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.825849][T11295] RSP: 002b:00007fe97b220028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 426.825866][T11295] RAX: ffffffffffffffda RBX: 00007fe97a625fa0 RCX: 00007fe97a39e159 [ 426.825876][T11295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 426.825891][T11295] RBP: 00007fe97a435024 R08: 0000000000000000 R09: 0000000000000000 [ 426.825901][T11295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.825910][T11295] R13: 00007fe97a626038 R14: 00007fe97a625fa0 R15: 00007fff9cae1d58 [ 426.825931][T11295] [ 426.826182][T11295] sysctl could not get directory: /fs -12 [ 426.847917][ T983] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 427.089148][ T983] usb 8-1: USB disconnect, device number 3 [ 428.672459][ T983] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 428.824172][ T983] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 428.837483][ T983] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.837547][ T983] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.837579][ T983] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 428.837618][ T983] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.898900][ T983] usb 8-1: config 0 descriptor?? [ 429.422014][T11344] fuse: Unknown parameter 'user_i00000000000000000000' [ 429.492577][ T983] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 430.052083][ T30] audit: type=1400 audit(1788350215.015:809): avc: denied { write } for pid=11321 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.272436][ T983] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 430.474537][ T983] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 430.486395][ T983] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 430.494575][ T983] usb 6-1: config 0 has no interface number 0 [ 430.503318][ T983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.511673][ T983] usb 6-1: Product: syz [ 430.511715][ T983] usb 6-1: Manufacturer: syz [ 430.511730][ T983] usb 6-1: SerialNumber: syz [ 430.533356][ T983] usb 6-1: config 0 descriptor?? [ 430.922567][ T983] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 431.096893][ T983] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 431.113413][ T983] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 431.122884][ T983] usb 6-1: media controller created [ 431.191912][ T30] audit: type=1400 audit(1788350216.155:810): avc: denied { write } for pid=11366 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.232715][ T983] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 431.260575][T11370] evm: overlay not supported [ 431.275872][ T983] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 431.333904][ T983] usb 6-1: USB disconnect, device number 12 [ 431.858853][T11395] fuse: Unknown parameter 'user_i00000000000000000000' [ 431.950908][ T10] usb 8-1: USB disconnect, device number 4 [ 431.970851][ T30] audit: type=1400 audit(1788350216.935:811): avc: denied { write } for pid=11374 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 432.172072][ T30] audit: type=1400 audit(1788350217.135:812): avc: denied { write } for pid=11404 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 432.240203][T11407] binder: 11406:11407 ioctl 4018620d 0 returned -22 [ 434.935932][T11429] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[11433] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[11429] [ 435.502306][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 435.504720][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 436.561810][T11447] FAULT_INJECTION: forcing a failure. [ 436.561810][T11447] name fail_futex, interval 1, probability 0, space 0, times 0 [ 436.561859][T11447] CPU: 1 UID: 0 PID: 11447 Comm: syz.3.1783 Not tainted syzkaller #0 PREEMPT(full) [ 436.561881][T11447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 436.561892][T11447] Call Trace: [ 436.561899][T11447] [ 436.561906][T11447] dump_stack_lvl+0x100/0x190 [ 436.561939][T11447] should_fail_ex.cold+0x5/0xa [ 436.561972][T11447] get_futex_key+0x1d0/0x14f0 [ 436.562001][T11447] ? __pfx_get_futex_key+0x10/0x10 [ 436.562025][T11447] ? __pfx_futex_hash+0x10/0x10 [ 436.562048][T11447] ? get_pid_task+0xfc/0x250 [ 436.562072][T11447] ? get_pid_task+0xfc/0x250 [ 436.562100][T11447] futex_wake+0xf4/0x5e0 [ 436.562127][T11447] ? futex_wait+0x11e/0x370 [ 436.562159][T11447] ? __pfx_futex_wake+0x10/0x10 [ 436.562190][T11447] ? rcu_read_lock_any_held+0x6a/0x90 [ 436.562216][T11447] ? find_held_lock+0x2b/0x80 [ 436.562247][T11447] do_futex+0x2b2/0x440 [ 436.562273][T11447] ? __pfx_do_futex+0x10/0x10 [ 436.562294][T11447] ? __fget_files+0x215/0x3d0 [ 436.562323][T11447] __x64_sys_futex+0x34f/0x4d0 [ 436.562347][T11447] ? __pfx___x64_sys_futex+0x10/0x10 [ 436.562368][T11447] ? __sys_setsockopt+0x1b5/0x220 [ 436.562402][T11447] do_syscall_64+0x123/0x790 [ 436.562427][T11447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.562446][T11447] RIP: 0033:0x7feb26d9e159 [ 436.562462][T11447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.562479][T11447] RSP: 002b:00007feb27c2f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 436.562498][T11447] RAX: ffffffffffffffda RBX: 00007feb27025fa8 RCX: 00007feb26d9e159 [ 436.562509][T11447] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007feb27025fac [ 436.562519][T11447] RBP: 00007feb27025fa0 R08: 0000000000000001 R09: 0000000000000000 [ 436.562530][T11447] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 436.562542][T11447] R13: 00007feb27026038 R14: 00007fffb1ecbbb0 R15: 00007fffb1ecbc98 [ 436.562568][T11447] [ 436.676866][ T5614] Bluetooth: hci5: unexpected event for opcode 0x200c [ 436.914504][ T30] audit: type=1400 audit(1788350221.885:813): avc: denied { write } for pid=11414 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 437.019948][ T30] audit: type=1400 audit(1788350221.985:814): avc: denied { write } for pid=11456 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 437.112596][T11460] binder: 11457:11460 ioctl 4018620d 0 returned -22 [ 437.298235][ T30] audit: type=1400 audit(1788350222.265:815): avc: denied { bind } for pid=11465 comm="syz.8.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 437.320699][ T30] audit: type=1400 audit(1788350222.285:816): avc: denied { node_bind } for pid=11465 comm="syz.8.1789" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 437.662954][ T985] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 438.122506][ T985] usb 7-1: Using ep0 maxpacket: 8 [ 438.128568][ T985] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 438.139301][ T985] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 438.148048][ T985] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 438.158450][ T985] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 438.158517][ T985] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 438.158543][ T985] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.158585][ T985] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.457022][ T985] usb 7-1: usb_control_msg returned -32 [ 438.457095][ T985] usbtmc 7-1:16.0: can't read capabilities [ 439.264667][ T30] audit: type=1400 audit(1788350224.235:817): avc: denied { write } for pid=11463 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 439.933417][T11505] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[11508] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[11505] [ 440.459392][T11503] FAULT_INJECTION: forcing a failure. [ 440.459392][T11503] name fail_futex, interval 1, probability 0, space 0, times 0 [ 440.459436][T11503] CPU: 1 UID: 0 PID: 11503 Comm: syz.5.1797 Not tainted syzkaller #0 PREEMPT(full) [ 440.459461][T11503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 440.459471][T11503] Call Trace: [ 440.459477][T11503] [ 440.459483][T11503] dump_stack_lvl+0x100/0x190 [ 440.459512][T11503] should_fail_ex.cold+0x5/0xa [ 440.459538][T11503] get_futex_key+0x1d0/0x14f0 [ 440.459562][T11503] ? __pfx_get_futex_key+0x10/0x10 [ 440.459581][T11503] ? find_held_lock+0x2b/0x80 [ 440.459602][T11503] ? futex_wake+0x4ea/0x5e0 [ 440.459631][T11503] futex_wake+0xf4/0x5e0 [ 440.459653][T11503] ? futex_wait+0x11e/0x370 [ 440.459684][T11503] ? __pfx_futex_wake+0x10/0x10 [ 440.459710][T11503] ? rcu_read_lock_any_held+0x6a/0x90 [ 440.459732][T11503] ? find_held_lock+0x2b/0x80 [ 440.459757][T11503] do_futex+0x2b2/0x440 [ 440.459780][T11503] ? __pfx_do_futex+0x10/0x10 [ 440.459801][T11503] ? __fget_files+0x215/0x3d0 [ 440.459826][T11503] __x64_sys_futex+0x34f/0x4d0 [ 440.459853][T11503] ? __pfx___x64_sys_futex+0x10/0x10 [ 440.459876][T11503] ? __sys_setsockopt+0x1b5/0x220 [ 440.459908][T11503] do_syscall_64+0x123/0x790 [ 440.459928][T11503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.459945][T11503] RIP: 0033:0x7fe97a39e159 [ 440.459959][T11503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.459974][T11503] RSP: 002b:00007fe97b2200e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 440.459991][T11503] RAX: ffffffffffffffda RBX: 00007fe97a625fa8 RCX: 00007fe97a39e159 [ 440.460002][T11503] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe97a625fac [ 440.460013][T11503] RBP: 00007fe97a625fa0 R08: 0000000000000001 R09: 0000000000000000 [ 440.460022][T11503] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 440.460033][T11503] R13: 00007fe97a626038 R14: 00007fff9cae1c70 R15: 00007fff9cae1d58 [ 440.460056][T11503] [ 440.743821][ T5812] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 440.771327][ T30] audit: type=1400 audit(1788350225.735:818): avc: denied { write } for pid=11512 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 440.886433][ T5812] usb 9-1: device descriptor read/64, error -71 [ 441.122534][ T5812] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 441.351416][ T30] audit: type=1400 audit(1788350226.305:819): avc: denied { create } for pid=11522 comm="syz.5.1803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 441.372266][ T30] audit: type=1400 audit(1788350226.315:820): avc: denied { write } for pid=11522 comm="syz.5.1803" path="socket:[32752]" dev="sockfs" ino=32752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 441.372715][ T5812] usb 9-1: device descriptor read/64, error -71 [ 441.439501][ T5338] usb 7-1: USB disconnect, device number 14 [ 441.483371][ T5812] usb usb9-port1: attempt power cycle [ 441.847904][ T5812] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 441.882310][ T5812] usb 9-1: device descriptor read/8, error -71 [ 442.372434][ T5812] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 442.520186][ T5812] usb 9-1: device descriptor read/8, error -71 [ 442.628416][T11538] SET target dimension over the limit! [ 442.692660][ T30] audit: type=1400 audit(1788350227.605:821): avc: denied { listen } for pid=11530 comm="syz.7.1806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 442.763337][ T5812] usb usb9-port1: unable to enumerate USB device [ 443.875571][ T5727] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 444.684612][T11556] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[11562] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[11556] [ 445.209453][ T5727] usb 4-1: unable to get BOS descriptor or descriptor too short [ 445.221636][ T5727] usb 4-1: New USB device found, idVendor=2013, idProduct=025c, bcdDevice=a4.f9 [ 445.233096][ T5727] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 445.233163][ T5727] usb 4-1: can't read configurations, error -71 [ 445.714117][T11568] CIFS: Attempting to mount //::1/share [ 445.934382][ T30] audit: type=1400 audit(1788350230.905:822): avc: denied { write } for pid=11573 comm="syz.8.1818" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 446.240245][T11568] CIFS: VFS: cifs_mount failed w/return code = -512 [ 446.860235][ T30] audit: type=1400 audit(1788350231.825:823): avc: denied { create } for pid=11582 comm="syz.5.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 446.884366][ T30] audit: type=1400 audit(1788350231.855:824): avc: denied { bind } for pid=11582 comm="syz.5.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 447.915980][ T30] audit: type=1400 audit(1788350232.885:825): avc: denied { create } for pid=11582 comm="syz.5.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 447.970079][ T30] audit: type=1400 audit(1788350232.935:826): avc: denied { sys_admin } for pid=11582 comm="syz.5.1821" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 448.602637][T11268] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 448.922546][T11268] usb 4-1: unable to get BOS descriptor or descriptor too short [ 448.946243][T11268] usb 4-1: New USB device found, idVendor=2013, idProduct=025c, bcdDevice=a4.f9 [ 448.949298][T11268] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 448.954317][T11268] usb 4-1: can't read configurations, error -71 [ 450.390627][T11631] binder: 11630:11631 ioctl c0306201 0 returned -14 [ 450.493440][ T1766] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 450.604286][ T30] audit: type=1400 audit(1788350235.575:827): avc: denied { read } for pid=11637 comm="syz.7.1838" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 450.642427][ T1766] usb 7-1: Using ep0 maxpacket: 16 [ 450.643337][ T1766] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 450.644166][ T1766] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 450.644186][ T1766] usb 7-1: config 0 has no interface number 0 [ 450.673606][ T1766] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.673642][ T1766] usb 7-1: Product: syz [ 450.673771][ T1766] usb 7-1: Manufacturer: syz [ 450.673895][ T1766] usb 7-1: SerialNumber: syz [ 450.703549][ T1766] usb 7-1: config 0 descriptor?? [ 450.719758][ T1766] hub 7-1:0.132: bad descriptor, ignoring hub [ 450.719835][ T1766] hub 7-1:0.132: probe with driver hub failed with error -5 [ 450.795934][ T1766] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.132/input/input18 [ 450.925774][ T30] audit: type=1400 audit(1788350235.885:828): avc: denied { write } for pid=11636 comm="syz.3.1836" name="functions" dev="configfs" ino=19162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 450.953677][ T30] audit: type=1400 audit(1788350235.895:829): avc: denied { read } for pid=11610 comm="syz.6.1817" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 450.953721][ T30] audit: type=1400 audit(1788350235.895:830): avc: denied { open } for pid=11610 comm="syz.6.1817" path="/dev/input/mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 452.535452][ T1766] usb 7-1: USB disconnect, device number 15 [ 453.287627][ T30] audit: type=1400 audit(1788350238.255:831): avc: denied { connect } for pid=11656 comm="syz.6.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 453.460924][T11662] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 453.502412][ T5727] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 454.569094][ T5727] usb 8-1: unable to get BOS descriptor or descriptor too short [ 454.578301][ T5727] usb 8-1: not running at top speed; connect to a high speed hub [ 454.589205][ T5727] usb 8-1: New USB device found, idVendor=2013, idProduct=025c, bcdDevice=a4.f9 [ 454.600136][ T5727] usb 8-1: config 12 has an invalid interface number: 126 but max is 0 [ 454.610681][ T5727] usb 8-1: config 12 has no interface number 0 [ 454.616960][ T5727] usb 8-1: config 12 interface 126 has no altsetting 0 [ 454.633457][ T5727] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.633500][ T5727] usb 8-1: Product: syz [ 454.633524][ T5727] usb 8-1: Manufacturer: syz [ 454.633540][ T5727] usb 8-1: SerialNumber: syz [ 454.751302][ T30] audit: type=1326 audit(1788350239.715:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11674 comm="syz.3.1850" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb26d9e159 code=0x7ffc0000 [ 454.751363][ T30] audit: type=1326 audit(1788350239.715:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11674 comm="syz.3.1850" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb26d9e159 code=0x7ffc0000 [ 454.752641][ T30] audit: type=1326 audit(1788350239.725:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11674 comm="syz.3.1850" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb26d9e159 code=0x7ffc0000 [ 454.752827][ T30] audit: type=1326 audit(1788350239.725:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11674 comm="syz.3.1850" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb26d9e159 code=0x7ffc0000 [ 454.758351][ T30] audit: type=1326 audit(1788350239.725:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11674 comm="syz.3.1850" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7feb26d9e159 code=0x7ffc0000 [ 454.758400][ T30] audit: type=1326 audit(1788350239.725:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11674 comm="syz.3.1850" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb26d9e159 code=0x7ffc0000 [ 454.758449][ T30] audit: type=1326 audit(1788350239.725:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11674 comm="syz.3.1850" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb26d9e159 code=0x7ffc0000 [ 454.761658][ T30] audit: type=1326 audit(1788350239.725:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11674 comm="syz.3.1850" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb26d9e159 code=0x7ffc0000 [ 454.761705][ T30] audit: type=1326 audit(1788350239.725:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11674 comm="syz.3.1850" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb26d9e159 code=0x7ffc0000 [ 454.935326][ T5727] dvb-usb: found a 'PCTV 2002e' in cold state, will try to load a firmware [ 454.936705][ T5727] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 454.936739][ T5727] dib0700: firmware download failed at 7 with -22 [ 456.125781][ T5727] usb 8-1: USB disconnect, device number 5 [ 457.708390][T11708] fuse: Unknown parameter '0x0000000000000003' [ 458.413922][ T30] kauditd_printk_skb: 88 callbacks suppressed [ 458.413956][ T30] audit: type=1400 audit(1788350243.215:929): avc: denied { read } for pid=11700 comm="syz.3.1858" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 458.413998][ T30] audit: type=1400 audit(1788350243.215:930): avc: denied { open } for pid=11700 comm="syz.3.1858" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 460.553578][T11742] fuse: Unknown parameter '0x0000000000000003' [ 460.572548][ T5338] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 461.182448][ T5338] usb 8-1: Using ep0 maxpacket: 32 [ 461.183129][ T5338] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 461.184452][ T5338] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.184714][ T5338] usb 8-1: config 0 has no interfaces? [ 461.186493][ T5338] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.186518][ T5338] usb 8-1: Product: syz [ 461.186542][ T5338] usb 8-1: Manufacturer: syz [ 461.186558][ T5338] usb 8-1: SerialNumber: syz [ 461.190962][ T5338] usb 8-1: config 0 descriptor?? [ 462.250254][ T30] audit: type=1400 audit(1788350247.215:931): avc: denied { write } for pid=11752 comm="syz.6.1877" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 462.510208][T11759] CIFS: Attempting to mount //::1/share [ 462.523372][ T5338] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 462.695578][ T5338] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 462.697339][ T5338] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.699062][ T5338] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.699081][ T5338] usb 7-1: Product: syz [ 462.699093][ T5338] usb 7-1: Manufacturer: syz [ 462.699105][ T5338] usb 7-1: SerialNumber: syz [ 462.924762][ T5338] snd-usb-6fire 7-1:1.0: unknown device firmware state received from device: [ 462.924803][ T5338] eb aa 00 00 00 00 00 00 [ 462.927392][ T5338] snd-usb-6fire 7-1:1.0: probe with driver snd-usb-6fire failed with error -5 [ 463.282168][ T25] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 463.336140][T11759] CIFS: VFS: cifs_mount failed w/return code = -112 [ 463.517588][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 463.522359][ T25] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 463.523493][ T25] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 463.523526][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 463.523546][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 463.523568][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 463.523587][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 463.528800][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.528823][ T25] usb 4-1: Product: syz [ 463.528836][ T25] usb 4-1: Manufacturer: syz [ 463.528848][ T25] usb 4-1: SerialNumber: syz [ 463.531136][ T25] usb 4-1: config 0 descriptor?? [ 463.736889][T11775] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 463.736915][T11775] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 463.737001][T11775] vhci_hcd vhci_hcd.0: Device attached [ 463.743792][T11779] vhci_hcd: connection closed [ 463.751738][ T45] vhci_hcd vhci_hcd.5: stop threads [ 463.751767][ T45] vhci_hcd vhci_hcd.5: release socket [ 463.751782][ T45] vhci_hcd vhci_hcd.5: disconnect device [ 463.782133][ T10] usb 8-1: USB disconnect, device number 6 [ 463.869010][ T983] usb 7-1: USB disconnect, device number 16 [ 465.630596][T11809] fuse: Unknown parameter 'group_i00000000000000000000' [ 465.690828][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1891'. [ 466.998103][ T25] usb 4-1: USB disconnect, device number 32 [ 467.363357][T11826] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 467.363383][T11826] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 467.363459][T11826] vhci_hcd vhci_hcd.0: Device attached [ 467.372798][T11829] vhci_hcd: connection closed [ 467.373131][ T1419] vhci_hcd vhci_hcd.8: stop threads [ 467.373156][ T1419] vhci_hcd vhci_hcd.8: release socket [ 467.373170][ T1419] vhci_hcd vhci_hcd.8: disconnect device [ 467.872533][T11842] fuse: Unknown parameter 'group_id00000000000000000000' [ 469.771308][ T5614] Bluetooth: hci0: unexpected event for opcode 0x200c [ 470.084805][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 470.249300][T11877] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[11878] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[11877] [ 470.266842][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 470.273087][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 470.284972][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.285007][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 470.285033][ T10] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 470.285079][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 470.332525][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 470.341485][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 470.350102][ T10] usb 4-1: Manufacturer: syz [ 470.361804][ T10] usb 4-1: config 0 descriptor?? [ 471.440657][ T30] audit: type=1400 audit(1788350256.385:932): avc: denied { mount } for pid=11899 comm="syz.7.1921" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 472.743573][T11918] fuse: Bad value for 'user_id' [ 472.743608][T11918] fuse: Bad value for 'user_id' [ 473.395471][T11924] netlink: 'syz.7.1928': attribute type 1 has an invalid length. [ 473.545091][T11924] 8021q: adding VLAN 0 to HW filter on device bond1 [ 473.956417][ T983] usb 4-1: USB disconnect, device number 33 [ 474.069061][T11924] bond1: (slave geneve2): making interface the new active one [ 474.087891][T11924] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 474.164147][ T30] audit: type=1400 audit(1788350259.135:933): avc: denied { mounton } for pid=11930 comm="syz.5.1929" path="/136/proc/fs/nfsd" dev="proc" ino=4026531847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 474.774712][T11937] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[11938] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[11937] [ 475.658190][T11942] gadgetfs: bound to dummy_udc driver [ 475.841388][T11941] gadgetfs: suspended from state 2 [ 475.898845][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 475.988130][ T30] audit: type=1400 audit(1788350260.955:934): avc: denied { unmount } for pid=9314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 476.374098][ T5727] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 476.986704][T11965] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[11966] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[11965] [ 477.437418][ T5727] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 477.443526][ T5727] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 477.443553][ T5727] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 477.443573][ T5727] usb 4-1: config 1 interface 0 has no altsetting 0 [ 477.454100][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.454123][ T5727] usb 4-1: Product: syz [ 477.454135][ T5727] usb 4-1: Manufacturer: syz [ 477.454148][ T5727] usb 4-1: SerialNumber: syz [ 477.471421][T11955] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 477.471533][T11955] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 477.727182][T11955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.764769][T11955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.362472][ T5338] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 478.522853][ T5338] usb 8-1: Using ep0 maxpacket: 32 [ 478.529125][ T5338] usb 8-1: New USB device found, idVendor=2040, idProduct=c604, bcdDevice= 1.8e [ 478.529215][ T5338] usb 8-1: no configurations [ 478.529250][ T5338] usb 8-1: can't read configurations, error -22 [ 478.712521][ T5338] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 478.902771][ T5338] usb 8-1: Using ep0 maxpacket: 32 [ 478.917259][ T5338] usb 8-1: New USB device found, idVendor=2040, idProduct=c604, bcdDevice= 1.8e [ 478.927800][ T5338] usb 8-1: no configurations [ 478.933282][ T5338] usb 8-1: can't read configurations, error -22 [ 478.944785][ T5338] usb usb8-port1: attempt power cycle [ 479.313813][ T5338] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 479.367501][ T5727] rtl8150 4-1:1.0: couldn't reset the device [ 479.367773][ T5727] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 479.409857][ T5727] usb 4-1: USB disconnect, device number 34 [ 479.816462][ T5338] usb 8-1: device descriptor read/8, error -71 [ 480.048113][ T30] audit: type=1400 audit(1788350265.015:935): avc: denied { bind } for pid=11983 comm="syz.7.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 480.071995][T11985] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 480.072028][T11985] audit: out of memory in audit_log_start [ 480.086556][ T30] audit: type=1400 audit(1788350265.055:936): avc: denied { read } for pid=11983 comm="syz.7.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 480.675582][T11995] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1955'. [ 480.732930][T11997] SET target dimension over the limit! [ 481.650201][ T5614] Bluetooth: hci0: unexpected event for opcode 0x200c [ 481.883104][ T5338] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 481.968952][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1961'. [ 482.342624][ T5338] usb 8-1: Using ep0 maxpacket: 16 [ 482.344338][ T5338] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 482.345151][ T5338] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.345184][ T5338] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 482.345206][ T5338] usb 8-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 482.345224][ T5338] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 482.346109][ T5338] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 482.346127][ T5338] usb 8-1: Manufacturer: syz [ 482.354848][ T5338] usb 8-1: config 0 descriptor?? [ 482.482902][ T983] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 482.649860][T12020] binder: 12019:12020 ioctl 4018620d 0 returned -22 [ 482.657461][ T983] usb 9-1: Using ep0 maxpacket: 8 [ 482.664829][ T983] usb 9-1: unable to get BOS descriptor or descriptor too short [ 482.672793][ T983] usb 9-1: New USB device found, idVendor=0d9f, idProduct=0002, bcdDevice=fe.96 [ 482.683047][ T983] usb 9-1: config 243 has an invalid interface number: 8 but max is 0 [ 482.683097][ T983] usb 9-1: config 243 has no interface number 0 [ 482.683134][ T983] usb 9-1: config 243 interface 8 has no altsetting 0 [ 482.704933][ T985] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 482.715802][ T983] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.723909][ T983] usb 9-1: Product: syz [ 482.723928][ T983] usb 9-1: Manufacturer: syz [ 482.723942][ T983] usb 9-1: SerialNumber: syz [ 482.865896][ T985] usb 7-1: unable to get BOS descriptor or descriptor too short [ 482.874338][ T985] usb 7-1: not running at top speed; connect to a high speed hub [ 482.874405][ T985] usb 7-1: New USB device found, idVendor=2013, idProduct=025c, bcdDevice=a4.f9 [ 482.892467][ T985] usb 7-1: config 12 has an invalid interface number: 126 but max is 0 [ 482.900813][ T985] usb 7-1: config 12 has no interface number 0 [ 482.900846][ T985] usb 7-1: config 12 interface 126 has no altsetting 0 [ 482.917035][ T985] usb 7-1: string descriptor 0 read error: -22 [ 482.923458][ T985] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.948629][ T30] audit: type=1400 audit(1788350267.915:937): avc: denied { setopt } for pid=12011 comm="syz.8.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 482.972412][ T983] cypress_m8 9-1:243.8: HID->COM RS232 Adapter converter detected [ 482.984618][ T983] cyphidcom ttyUSB0: required endpoint is missing [ 482.996813][ T983] usb 9-1: USB disconnect, device number 6 [ 483.006609][ T983] cypress_m8 9-1:243.8: device disconnected [ 483.142219][ T985] dvb-usb: found a 'PCTV 2002e' in cold state, will try to load a firmware [ 483.153328][ T985] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 483.163987][ T985] dib0700: firmware download failed at 7 with -22 [ 483.182208][ T985] usb 7-1: USB disconnect, device number 17 [ 485.055908][ T985] usb 8-1: USB disconnect, device number 11 [ 487.528345][T12063] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1975'. [ 487.540799][T12063] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1975'. [ 488.202569][ T5712] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 488.439425][ T5712] usb 4-1: unable to get BOS descriptor or descriptor too short [ 488.448530][ T5712] usb 4-1: not running at top speed; connect to a high speed hub [ 488.489261][ T5712] usb 4-1: New USB device found, idVendor=2013, idProduct=025c, bcdDevice=a4.f9 [ 488.519067][ T5712] usb 4-1: config 12 has an invalid interface number: 126 but max is 0 [ 488.529068][ T5712] usb 4-1: config 12 has no interface number 0 [ 488.539402][ T5712] usb 4-1: config 12 interface 126 has no altsetting 0 [ 488.642780][ T5712] usb 4-1: string descriptor 0 read error: -22 [ 488.642899][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.792161][ T30] audit: type=1400 audit(1788350273.755:938): avc: denied { sqpoll } for pid=12080 comm="syz.6.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 488.902493][ T5712] dvb-usb: found a 'PCTV 2002e' in cold state, will try to load a firmware [ 488.903679][ T5712] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 488.903732][ T5712] dib0700: firmware download failed at 7 with -22 [ 488.952308][ T5712] usb 4-1: USB disconnect, device number 35 [ 492.532536][ T30] audit: type=1400 audit(1788350277.465:939): avc: denied { lock } for pid=12106 comm="syz.7.1989" path="socket:[35556]" dev="sockfs" ino=35556 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 492.852405][ T25] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 493.003173][ T5608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 493.015174][ T5608] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 493.022835][ T5608] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 493.025722][ T5608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 493.026159][ T5608] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 493.045189][ T25] usb 7-1: Using ep0 maxpacket: 32 [ 493.045843][ T25] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 493.049115][ T25] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 493.049135][ T25] usb 7-1: config 0 has no interface number 0 [ 493.049165][ T25] usb 7-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 493.049184][ T25] usb 7-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 493.086119][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.086142][ T25] usb 7-1: Product: syz [ 493.086155][ T25] usb 7-1: Manufacturer: syz [ 493.086167][ T25] usb 7-1: SerialNumber: syz [ 493.095943][ T25] usb 7-1: config 0 descriptor?? [ 493.102164][ T25] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 493.336214][ T25] usb 7-1: qt2_setup_urbs - submit read urb failed -90 [ 493.336413][ T25] quatech2 7-1:0.51: probe with driver quatech2 failed with error -90 [ 494.505662][ T25] usb 7-1: USB disconnect, device number 18 [ 494.572434][ T10] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 494.727458][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 494.736531][ T10] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 494.747045][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.747097][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 494.747155][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 494.747180][ T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 494.747204][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.803628][ T10] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 494.812536][ T10] usb 8-1: Manufacturer: syz [ 494.820977][ T10] usb 8-1: config 0 descriptor?? [ 495.002198][ T37] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.124166][ T5608] Bluetooth: hci3: command tx timeout [ 495.239585][ T37] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.373563][ T37] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.477367][ T37] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.595033][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.596535][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.728721][ T30] audit: type=1400 audit(1788350281.695:940): avc: denied { read } for pid=5266 comm="dhcpcd" name="n46" dev="tmpfs" ino=9886 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 496.728808][ T30] audit: type=1400 audit(1788350281.695:941): avc: denied { open } for pid=5266 comm="dhcpcd" path="/run/udev/data/n46" dev="tmpfs" ino=9886 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 496.728838][ T30] audit: type=1400 audit(1788350281.695:942): avc: denied { getattr } for pid=5266 comm="dhcpcd" path="/run/udev/data/n46" dev="tmpfs" ino=9886 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 496.946630][ T10] rc_core: IR keymap rc-hauppauge not found [ 496.946661][ T10] Registered IR keymap rc-empty [ 496.947150][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 496.968073][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 496.998238][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 496.998989][ T37] bridge_slave_1: left allmulticast mode [ 496.999028][ T37] bridge_slave_1: left promiscuous mode [ 497.000577][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.019186][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input19 [ 497.217019][ T5608] Bluetooth: hci3: command tx timeout [ 497.336475][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 497.357920][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 497.426692][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 497.443675][ T5712] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 497.459593][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 497.477674][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 497.500767][ T37] bridge_slave_0: left allmulticast mode [ 497.509518][ T37] bridge_slave_0: left promiscuous mode [ 497.585434][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.585557][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 497.617474][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 497.632542][ T5712] usb 7-1: Using ep0 maxpacket: 32 [ 497.643904][ T5712] usb 7-1: New USB device found, idVendor=2040, idProduct=c604, bcdDevice= 1.8e [ 497.650518][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 497.676629][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 497.687188][ T5712] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.743263][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 497.835574][ T5712] usb 7-1: config 0 descriptor?? [ 498.100527][ T10] mceusb 8-1:0.0: Registered with mce emulator interface version 1 [ 498.100570][ T10] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 498.123333][ T5712] usb 7-1: dvb_usb_v2: found a 'Hauppauge 126xxx DVBT' in warm state [ 498.489575][ T5712] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 498.523449][ T5712] dvbdev: DVB: registering new adapter (Hauppauge 126xxx DVBT) [ 498.534388][ T5712] usb 7-1: media controller created [ 499.292489][ T5608] Bluetooth: hci3: command tx timeout [ 499.295306][ T10] usb 8-1: USB disconnect, device number 12 [ 499.488362][ T5712] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 499.640691][ T5712] usb 7-1: selecting invalid altsetting 2 [ 499.650531][ T5712] set interface failed [ 499.650586][ T5712] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 499.663516][ T5712] error writing reg: 0xff, val: 0x00 [ 499.757779][ T5712] dvb_usb_mxl111sf 7-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 500.542192][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.586863][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.610705][ T37] bond0 (unregistering): Released all slaves [ 500.812160][ T5727] usb 7-1: USB disconnect, device number 19 [ 500.931263][ T30] audit: type=1400 audit(1788350285.895:943): avc: denied { write } for pid=12161 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 500.931784][ T30] audit: type=1400 audit(1788350285.895:944): avc: denied { create } for pid=12161 comm="dhcpcd-run-hook" name="resolv.conf.eth17.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 500.932215][ T30] audit: type=1400 audit(1788350285.895:945): avc: denied { write } for pid=12161 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth17.link" dev="tmpfs" ino=9932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 500.937770][ T30] audit: type=1400 audit(1788350285.905:946): avc: denied { append } for pid=12161 comm="dhcpcd-run-hook" name="resolv.conf.eth17.link" dev="tmpfs" ino=9932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 501.022489][ T5608] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 501.098624][ T30] audit: type=1400 audit(1788350286.065:947): avc: denied { write } for pid=12187 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.098701][ T30] audit: type=1400 audit(1788350286.065:948): avc: denied { unlink } for pid=12187 comm="rm" name="resolv.conf.eth17.link" dev="tmpfs" ino=9932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 501.288532][ T5266] 8021q: adding VLAN 0 to HW filter on device eth17 [ 501.362493][ T5608] Bluetooth: hci3: command tx timeout [ 501.492390][ T5338] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 501.581146][T12114] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.581238][T12114] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.581369][T12114] bridge_slave_0: entered allmulticast mode [ 501.592024][T12114] bridge_slave_0: entered promiscuous mode [ 501.593915][T12114] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.593997][T12114] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.594096][T12114] bridge_slave_1: entered allmulticast mode [ 501.595780][T12114] bridge_slave_1: entered promiscuous mode [ 501.742416][ T5338] usb 4-1: Using ep0 maxpacket: 32 [ 501.749563][ T5338] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 501.763555][ T5338] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 501.775504][ T5338] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 501.787814][ T5338] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 501.798492][ T5338] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 501.821363][ T5338] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 501.850573][ T5338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.859112][ T5338] usb 4-1: Product: syz [ 501.859164][ T5338] usb 4-1: Manufacturer: syz [ 501.859208][ T5338] usb 4-1: SerialNumber: syz [ 501.890336][ T5338] usb 4-1: config 0 descriptor?? [ 501.976400][ T37] hsr_slave_0: left promiscuous mode [ 501.984814][ T37] hsr_slave_1: left promiscuous mode [ 501.991198][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.998883][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.010120][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.017804][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.037180][ T37] veth1_macvtap: left promiscuous mode [ 502.037233][ T37] veth0_macvtap: left promiscuous mode [ 502.037346][ T37] veth1_vlan: left promiscuous mode [ 502.037403][ T37] veth0_vlan: left promiscuous mode [ 502.124683][ T5338] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 502.131271][ T5338] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 502.142130][ T5338] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 502.167416][ T5338] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 502.381046][ T5338] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 502.387486][ T5338] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 502.398223][ T5338] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 502.399532][ T5338] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 502.402983][ T5338] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 502.403485][ T5338] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 502.403861][ T5338] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 502.404194][ T5338] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 502.406233][ T5338] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 502.406559][ T5338] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 502.406876][ T5338] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 502.407016][T12209] fuse: Unknown parameter 'use00000000000000000000' [ 502.409614][ T5338] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 502.409924][ T5338] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 502.410220][ T5338] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 502.410523][ T5338] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 502.410553][ T5338] input input20: Timeout waiting for response from device. [ 502.431599][ T5338] usb 4-1: USB disconnect, device number 36 [ 502.633114][ T5727] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 503.059993][ T37] team0 (unregistering): Port device team_slave_1 removed [ 503.185189][ T37] team0 (unregistering): Port device team_slave_0 removed [ 503.224248][ T5727] usb 7-1: Using ep0 maxpacket: 32 [ 503.226263][ T5727] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 503.228098][ T5727] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 503.228148][ T5727] usb 7-1: config 0 interface 0 has no altsetting 0 [ 503.228172][ T5727] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.356899][ T5727] usb 7-1: config 0 descriptor?? [ 503.999694][T12114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.003148][T12114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.082296][T12114] team0: Port device team_slave_0 added [ 504.095279][T12114] team0: Port device team_slave_1 added [ 504.229175][T12114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.229206][T12114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.229227][T12114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.235223][T12114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.235237][T12114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.235257][T12114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.345237][T12114] hsr_slave_0: entered promiscuous mode [ 504.345934][T12114] hsr_slave_1: entered promiscuous mode [ 504.348296][T12114] debugfs: 'hsr0' already exists in 'hsr' [ 504.348313][T12114] Cannot create hsr debugfs directory [ 504.392182][ T5727] corsair-psu 0003:1B1C:1C09.0005: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.6-1/input0 [ 504.611090][ T30] audit: type=1400 audit(1788350289.575:949): avc: denied { connect } for pid=12242 comm="syz.8.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 504.732444][ T5727] corsair-psu 0003:1B1C:1C09.0005: unable to initialize device (-110) [ 504.759059][ T5727] corsair-psu 0003:1B1C:1C09.0005: probe with driver corsair-psu failed with error -110 [ 504.804533][ T5727] usb 7-1: USB disconnect, device number 20 [ 505.399805][T12114] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 505.424753][T12114] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 505.426811][T12114] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 505.439769][ T30] audit: type=1400 audit(1788350290.405:950): avc: denied { write } for pid=12239 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 505.471180][T12114] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 505.481004][T12114] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 505.510300][T12114] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 505.515530][T12114] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 505.540377][T12114] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 505.613209][T11268] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 505.649526][ T30] audit: type=1400 audit(1788350290.615:951): avc: denied { write } for pid=12264 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 505.721779][T12114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.735899][T12114] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.740833][T11998] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.740910][T11998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.777364][T11998] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.777457][T11998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.436593][ T5266] 8021q: adding VLAN 0 to HW filter on device eth18 [ 507.232677][T12114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.270011][ T30] audit: type=1400 audit(1788350292.235:952): avc: denied { write } for pid=12290 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.325168][T11268] usb 4-1: unable to get BOS descriptor or descriptor too short [ 507.325608][T11268] usb 4-1: not running at top speed; connect to a high speed hub [ 507.325648][T11268] usb 4-1: New USB device found, idVendor=2013, idProduct=025c, bcdDevice=a4.f9 [ 507.326450][T11268] usb 4-1: config 12 has an invalid interface number: 126 but max is 0 [ 507.326486][T11268] usb 4-1: config 12 has no interface number 0 [ 507.326506][T11268] usb 4-1: config 12 interface 126 has no altsetting 0 [ 507.328804][T11268] usb 4-1: string descriptor 0 read error: -22 [ 507.328888][T11268] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.588280][T11268] dvb-usb: found a 'PCTV 2002e' in warm state. [ 507.619655][T11268] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 507.622162][T11268] dvbdev: DVB: registering new adapter (PCTV 2002e) [ 507.622199][T11268] usb 4-1: media controller created [ 507.628971][T11268] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 507.744225][T11268] DVB: Unable to find symbol dib7000p_attach() [ 507.744285][T11268] dvb-usb: no frontend was attached by 'PCTV 2002e' [ 507.744295][T11268] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 507.744822][T11268] dvbdev: DVB: registering new adapter (PCTV 2002e) [ 507.744875][T11268] usb 4-1: media controller created [ 507.746682][T11268] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 507.929277][ T30] audit: type=1400 audit(1788350292.895:953): avc: denied { write } for pid=12318 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.944776][T11268] DVB: Unable to find symbol dib7000p_attach() [ 507.944790][T11268] dvb-usb: no frontend was attached by 'PCTV 2002e' [ 508.070350][T12114] veth0_vlan: entered promiscuous mode [ 508.099381][T12114] veth1_vlan: entered promiscuous mode [ 508.103404][T11268] rc_core: IR keymap rc-dib0700-rc5 not found [ 508.103417][T11268] Registered IR keymap rc-empty [ 508.103895][T11268] dvb-usb: could not initialize remote control. [ 508.103904][T11268] dvb-usb: PCTV 2002e successfully initialized and connected. [ 508.135586][T11268] usb 4-1: USB disconnect, device number 37 [ 508.156091][ T5266] 8021q: adding VLAN 0 to HW filter on device eth20 [ 508.194821][T11268] dvb-usb: PCTV 2002e successfully deinitialized and disconnected. [ 508.209657][T12114] veth0_macvtap: entered promiscuous mode [ 508.222410][ T985] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 508.234520][T12114] veth1_macvtap: entered promiscuous mode [ 508.266761][T12114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.281884][T12114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.303055][ T37] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.303752][ T37] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.303780][ T37] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.303825][ T37] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.386754][ T985] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 508.390630][ T985] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 508.390673][ T985] usb 8-1: config 0 has no interface number 0 [ 508.401173][ T985] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.401195][ T985] usb 8-1: Product: syz [ 508.401208][ T985] usb 8-1: Manufacturer: syz [ 508.401220][ T985] usb 8-1: SerialNumber: syz [ 508.421734][ T985] usb 8-1: config 0 descriptor?? [ 508.548948][ T98] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.548979][ T98] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.611458][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.611490][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.653971][ T985] usb 8-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 508.662795][ T985] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 508.668009][ T985] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 508.668049][ T985] usb 8-1: media controller created [ 508.714987][ T985] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 508.801847][ T30] audit: type=1400 audit(1788350293.765:954): avc: denied { write } for pid=12330 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.008327][T12351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12351 comm=syz.8.2038 [ 509.063821][ T30] audit: type=1400 audit(1788350294.035:955): avc: denied { write } for pid=12346 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.148228][ T5266] 8021q: adding VLAN 0 to HW filter on device eth19 [ 509.286910][T12360] fuse: Unknown parameter 'use00000000000000000000' [ 509.598423][ T30] audit: type=1400 audit(1788350294.565:956): avc: denied { bind } for pid=12368 comm="syz.3.2044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 510.223084][T12322] usb 8-1: dvb_usb_ec168: I2C read not implemented [ 510.223179][ T985] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 510.280690][ T985] usb 8-1: USB disconnect, device number 13 [ 510.871746][ C1] vcan0: j1939_tp_rxtimer: 0xffff888078fd4c00: rx timeout, send abort [ 510.874629][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888078fd4c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 510.933891][ T30] audit: type=1400 audit(1788350295.875:957): avc: denied { read } for pid=4953 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 510.958833][ T30] audit: type=1400 audit(1788350295.875:958): avc: denied { search } for pid=4953 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.958916][ T30] audit: type=1400 audit(1788350295.875:959): avc: denied { write search } for pid=4953 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.958957][ T30] audit: type=1400 audit(1788350295.875:960): avc: denied { add_name } for pid=4953 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.958996][ T30] audit: type=1400 audit(1788350295.875:961): avc: denied { create } for pid=4953 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 510.959055][ T30] audit: type=1400 audit(1788350295.875:962): avc: denied { append open } for pid=4953 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 510.959094][ T30] audit: type=1400 audit(1788350295.875:963): avc: denied { getattr } for pid=4953 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 512.045296][T12402] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[12403] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[12402] [ 513.053732][T12414] SET target dimension over the limit! [ 513.532294][ T5614] Bluetooth: hci4: command 0x0406 tx timeout [ 513.549971][ T44] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 513.715238][ T44] usb 7-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 513.724883][ T44] usb 7-1: config 0 has no interfaces? [ 513.724925][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.747743][ T44] usb 7-1: config 0 descriptor?? [ 513.958081][ T10] usb 7-1: USB disconnect, device number 21 [ 514.014097][ T30] audit: type=1400 audit(1788350298.985:964): avc: denied { bind } for pid=12430 comm="syz.8.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 514.032657][ T30] audit: type=1400 audit(1788350298.985:965): avc: denied { setopt } for pid=12430 comm="syz.8.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 514.126420][T12435] fuse: Unknown parameter 'user00000000000000000000' [ 514.612656][ T5712] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 514.784010][ T5712] usb 4-1: Using ep0 maxpacket: 8 [ 514.793194][ T5712] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 514.885848][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.895710][ T5712] usb 4-1: Product: syz [ 514.895730][ T5712] usb 4-1: Manufacturer: syz [ 514.895796][ T5712] usb 4-1: SerialNumber: syz [ 515.041921][ T5712] usb 4-1: config 0 descriptor?? [ 515.413004][ T5712] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 516.687468][ T5712] usb write operation failed. (-71) [ 516.706300][ T5712] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 516.717364][ T5712] dvbdev: DVB: registering new adapter (Terratec H7) [ 516.724630][ T5712] usb 4-1: media controller created [ 516.730464][ T5712] usb read operation failed. (-71) [ 516.739975][ T5712] usb write operation failed. (-71) [ 516.748483][ T5712] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 516.765150][ T5712] usb 4-1: USB disconnect, device number 38 [ 517.465533][T12487] fuse: Unknown parameter 'user_i00000000000000000000' [ 518.136306][ T30] audit: type=1400 audit(1788350302.855:966): avc: denied { write } for pid=12484 comm="syz.3.2083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 520.592812][T12511] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[12517] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[12511] [ 521.662656][ T25] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 521.813757][ T25] usb 8-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 521.814599][ T25] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.814617][ T25] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 521.814644][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.821519][ T25] usb 8-1: config 0 descriptor?? [ 521.972471][ T30] audit: type=1400 audit(1788350306.935:967): avc: denied { write } for pid=12518 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.132185][T12522] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 522.132213][T12522] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 522.132685][T12522] vhci_hcd vhci_hcd.0: Device attached [ 522.237985][ T30] audit: type=1400 audit(1788350307.205:968): avc: denied { write } for pid=12542 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.331904][T12544] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(12) [ 522.331932][T12544] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 522.352050][T12544] vhci_hcd vhci_hcd.0: Device attached [ 523.334651][ T25] usb 47-1: new high-speed USB device number 2 using vhci_hcd [ 523.362975][T12544] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(14) [ 523.363002][T12544] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 523.377626][T12544] vhci_hcd vhci_hcd.0: Device attached [ 523.393888][T12554] vhci_hcd: connection closed [ 523.395400][T12546] vhci_hcd: connection closed [ 523.397257][T12538] vhci_hcd: connection reset by peer [ 523.398245][T10312] vhci_hcd vhci_hcd.7: stop threads [ 523.398268][T10312] vhci_hcd vhci_hcd.7: release socket [ 523.399052][T10312] vhci_hcd vhci_hcd.7: disconnect device [ 523.401497][T10312] vhci_hcd vhci_hcd.7: stop threads [ 523.401510][T10312] vhci_hcd vhci_hcd.7: release socket [ 523.401585][T10312] vhci_hcd vhci_hcd.7: disconnect device [ 523.441459][T10312] vhci_hcd vhci_hcd.7: stop threads [ 523.441478][T10312] vhci_hcd vhci_hcd.7: release socket [ 523.441520][T10312] vhci_hcd vhci_hcd.7: disconnect device [ 523.465849][ T5705] usb 8-1: USB disconnect, device number 14 [ 523.798418][ T30] audit: type=1400 audit(1788350308.765:969): avc: denied { write } for pid=12556 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.823145][ T5812] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 523.900700][T12573] CIFS: Attempting to mount //::1/share [ 523.966747][ T30] audit: type=1400 audit(1788350308.935:970): avc: denied { write } for pid=12572 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.993319][ T5812] usb 10-1: Invalid ep0 maxpacket: 64 [ 524.122402][ T5812] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 524.285550][ T5812] usb 10-1: Invalid ep0 maxpacket: 64 [ 524.285778][ T5812] usb usb10-port1: attempt power cycle [ 524.445877][ T30] audit: type=1326 audit(1788350309.415:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.3.2101" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb26d9e159 code=0x7ffc0000 [ 524.446268][ T30] audit: type=1326 audit(1788350309.415:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.3.2101" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb26d9e159 code=0x7ffc0000 [ 524.501345][ T30] audit: type=1326 audit(1788350309.475:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.3.2101" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7feb26d9e159 code=0x7ffc0000 [ 524.528205][ T30] audit: type=1326 audit(1788350309.505:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.3.2101" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb26d9e159 code=0x7ffc0000 [ 524.564090][ T30] audit: type=1326 audit(1788350309.535:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.3.2101" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb26d9e159 code=0x7ffc0000 [ 524.596220][ T30] audit: type=1326 audit(1788350309.565:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.3.2101" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb26d9e159 code=0x7ffc0000 [ 524.597864][ T30] audit: type=1326 audit(1788350309.565:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.3.2101" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb26d9e159 code=0x7ffc0000 [ 524.632497][ T5812] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 524.643013][ T30] audit: type=1326 audit(1788350309.595:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.3.2101" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7feb26d9e159 code=0x7ffc0000 [ 524.652130][T11268] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 524.660508][ T5812] usb 10-1: Invalid ep0 maxpacket: 64 [ 524.736428][T12573] CIFS: VFS: cifs_mount failed w/return code = -112 [ 524.788103][ T5812] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 524.821493][ T5812] usb 10-1: Invalid ep0 maxpacket: 64 [ 524.823642][ T5812] usb usb10-port1: unable to enumerate USB device [ 524.835223][T11268] usb 8-1: Using ep0 maxpacket: 32 [ 524.837488][T11268] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 524.857282][T11268] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 524.857319][T11268] usb 8-1: config 0 has no interface number 0 [ 524.876924][T11268] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.885084][T11268] usb 8-1: Product: syz [ 524.885135][T11268] usb 8-1: Manufacturer: syz [ 524.885174][T11268] usb 8-1: SerialNumber: syz [ 524.908345][T11268] usb 8-1: config 0 descriptor?? [ 524.933191][T11268] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 525.167782][T11268] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 525.698776][T11268] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 525.727119][ C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 525.735161][ T44] usb 8-1: USB disconnect, device number 15 [ 525.753170][ T44] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 525.775266][ T44] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 525.789036][ T44] quatech2 8-1:0.51: device disconnected [ 527.434826][T11268] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 527.553786][T12635] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2112'. [ 527.584059][T11268] usb 9-1: Using ep0 maxpacket: 8 [ 527.584639][T11268] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 527.588487][T11268] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 527.588527][T11268] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 527.588546][T11268] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 527.588565][T11268] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 527.588585][T11268] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 527.588634][T11268] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.817871][T11268] usb 9-1: usb_control_msg returned -32 [ 527.817932][T11268] usbtmc 9-1:16.0: can't read capabilities [ 527.845961][T11268] usb 9-1: USB disconnect, device number 7 [ 528.447140][T12656] process 'syz.8.2118' launched './file0' with NULL argv: empty string added [ 528.472414][ T25] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 530.052438][ T5705] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 530.222401][ T5705] usb 4-1: Invalid ep0 maxpacket: 64 [ 530.362687][ T5705] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 530.522394][ T5705] usb 4-1: Invalid ep0 maxpacket: 64 [ 530.522606][ T5705] usb usb4-port1: attempt power cycle [ 530.582403][T11268] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 530.745312][T11268] usb 8-1: Using ep0 maxpacket: 8 [ 530.750850][T11268] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 530.762213][T11268] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 530.762252][T11268] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 530.762272][T11268] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 530.762287][T11268] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 530.762360][T11268] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 530.762396][T11268] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.872421][ T5705] usb 4-1: new low-speed USB device number 41 using dummy_hcd [ 530.893555][ T5705] usb 4-1: Invalid ep0 maxpacket: 64 [ 531.022427][ T5705] usb 4-1: new low-speed USB device number 42 using dummy_hcd [ 531.032449][T11268] usb 8-1: usb_control_msg returned -32 [ 531.038582][T11268] usbtmc 8-1:16.0: can't read capabilities [ 531.045331][ T5705] usb 4-1: Invalid ep0 maxpacket: 64 [ 531.045532][ T5705] usb usb4-port1: unable to enumerate USB device [ 531.109536][T11268] usb 8-1: USB disconnect, device number 16 [ 534.030690][ T5614] Bluetooth: hci1: command 0x0406 tx timeout [ 536.642467][ T5727] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 536.803714][ T5727] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 536.818767][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.827678][ T5727] usb 4-1: Product: syz [ 536.831936][ T5727] usb 4-1: Manufacturer: syz [ 536.836650][ T5727] usb 4-1: SerialNumber: syz [ 537.076652][ T25] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 537.222498][ T44] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 537.242480][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 537.270347][ T25] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 537.289177][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.297543][ T25] usb 8-1: Product: syz [ 537.297590][ T25] usb 8-1: Manufacturer: syz [ 537.297623][ T25] usb 8-1: SerialNumber: syz [ 537.321670][ T25] usb 8-1: config 0 descriptor?? [ 537.364350][ T25] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 537.376697][T12740] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 537.376721][T12740] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 537.376887][T12740] vhci_hcd vhci_hcd.0: Device attached [ 537.432929][ T44] usb 7-1: Using ep0 maxpacket: 8 [ 537.446433][ T44] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 537.466150][ T44] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 537.474897][ T44] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 537.474953][ T44] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 537.475003][ T44] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 537.475080][ T44] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 537.485453][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.493788][ T5727] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 537.493831][ T5727] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 537.533718][ T5727] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 537.533778][ T5727] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 537.534274][ T5727] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 537.553328][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 537.553344][ T30] audit: type=1400 audit(1788350322.525:1022): avc: denied { setopt } for pid=12733 comm="syz.7.2146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 537.578458][ T5727] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 537.593937][ T5727] usb 4-1: USB disconnect, device number 43 [ 537.772600][ T1766] usb 49-1: new high-speed USB device number 2 using vhci_hcd [ 537.818416][T12741] vhci_hcd: connection reset by peer [ 537.825146][ T44] usb 7-1: usb_control_msg returned -32 [ 537.825456][ T44] usbtmc 7-1:16.0: can't read capabilities [ 537.831115][T11998] vhci_hcd vhci_hcd.8: stop threads [ 537.831140][T11998] vhci_hcd vhci_hcd.8: release socket [ 537.831208][T11998] vhci_hcd vhci_hcd.8: disconnect device [ 537.853985][ T44] usb 7-1: USB disconnect, device number 22 [ 538.672558][T12749] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[12750] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[12749] [ 538.785141][ T25] gspca_sonixj: reg_r err -110 [ 538.785212][ T25] sonixj 8-1:0.0: probe with driver sonixj failed with error -110 [ 539.138867][T12759] SET target dimension over the limit! [ 541.528414][ T5705] usb 8-1: USB disconnect, device number 17 [ 541.874377][ T30] audit: type=1400 audit(1788350326.845:1023): avc: denied { mounton } for pid=12776 comm="syz.7.2160" path="/proc/321/task" dev="proc" ino=37878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 543.794739][ T1766] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 543.822835][ T30] audit: type=1400 audit(1788350328.785:1024): avc: denied { associate } for pid=12784 comm="syz.7.2160" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 545.692679][ T5705] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 545.843194][ T5705] usb 4-1: Using ep0 maxpacket: 16 [ 545.854730][ T5705] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 545.866944][ T5705] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.867003][ T5705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 545.867061][ T5705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 545.867085][ T5705] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 545.867110][ T5705] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 545.925527][ T5705] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 545.925564][ T5705] usb 4-1: Manufacturer: syz [ 545.945085][ T5705] usb 4-1: config 0 descriptor?? [ 545.962282][T12812] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 545.962311][T12812] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 545.964395][T12812] vhci_hcd vhci_hcd.0: Device attached [ 545.984007][ T1766] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 547.082863][ T1766] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 547.086373][ T1766] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.086394][ T1766] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 547.090101][ T1766] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.090122][ T1766] usb 7-1: Product: syz [ 547.090140][ T1766] usb 7-1: Manufacturer: syz [ 547.090152][ T1766] usb 7-1: SerialNumber: syz [ 547.095231][ T1766] usb 7-1: config 0 descriptor?? [ 547.100014][T12813] vhci_hcd: connection closed [ 547.114798][ T13] vhci_hcd vhci_hcd.9: stop threads [ 547.114825][ T13] vhci_hcd vhci_hcd.9: release socket [ 547.114859][ T13] vhci_hcd vhci_hcd.9: disconnect device [ 547.172466][ T5712] usb 51-1: new high-speed USB device number 2 using vhci_hcd [ 547.172534][ T5712] usb 51-1: enqueue for inactive port 0 [ 547.222357][ T5705] rc_core: IR keymap rc-hauppauge not found [ 547.228428][ T5705] Registered IR keymap rc-empty [ 547.233601][ T5705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 547.242395][ T5712] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 547.253560][ T5705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 547.273493][ T5705] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 547.288185][ T5705] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input22 [ 547.309664][ T5705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 547.332477][ T5705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 547.352572][ T5705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 547.372437][ T5705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 547.392468][ T5705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 547.412493][ T5705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 547.432439][ T5705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 547.452434][ T5705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 547.472642][ T5705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 547.492424][ T5705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 547.516838][ T5705] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 547.526088][ T5705] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 547.579874][ T44] usb 4-1: USB disconnect, device number 44 [ 548.880023][ T5727] usb 7-1: USB disconnect, device number 23 [ 549.323920][ T5705] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 549.393105][T11268] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 549.486255][ T5705] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 549.507142][ T5705] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.519614][ T5705] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.540565][ T5705] usb 10-1: config 0 descriptor?? [ 549.555555][T11268] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 549.569017][T11268] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 549.569075][T11268] usb 4-1: config 0 has no interface number 0 [ 549.588948][T11268] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.599575][T11268] usb 4-1: Product: syz [ 549.599642][T11268] usb 4-1: Manufacturer: syz [ 549.599658][T11268] usb 4-1: SerialNumber: syz [ 549.624315][T11268] usb 4-1: config 0 descriptor?? [ 550.898007][T11268] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 550.907524][ T5705] usbhid 10-1:0.0: can't add hid device: -71 [ 550.907605][ T5705] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 550.927889][T11268] usb 4-1: USB disconnect, device number 45 [ 550.935418][ T5705] usb 10-1: USB disconnect, device number 6 [ 551.507257][ T5705] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 551.812418][T11268] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 551.852867][ T5705] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 552.878741][ T5705] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.878820][ T5705] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.906766][ T1766] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 553.043474][T11268] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 553.072759][ T1766] usb 8-1: Using ep0 maxpacket: 32 [ 553.080280][ T1766] usb 8-1: New USB device found, idVendor=2040, idProduct=c604, bcdDevice= 1.8e [ 553.087674][T11268] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.087695][T11268] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 553.098050][ T5705] usb 10-1: config 0 descriptor?? [ 553.129181][ T1766] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.243700][ T1766] usb 8-1: config 0 descriptor?? [ 553.345637][T11268] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.345683][T11268] usb 7-1: Product: syz [ 553.345697][T11268] usb 7-1: Manufacturer: syz [ 553.345730][T11268] usb 7-1: SerialNumber: syz [ 553.372196][ T1766] usb 8-1: dvb_usb_v2: found a 'Hauppauge 126xxx DVBT' in warm state [ 553.477844][ T1766] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 553.496286][ T1766] dvbdev: DVB: registering new adapter (Hauppauge 126xxx DVBT) [ 553.507209][ T1766] usb 8-1: media controller created [ 553.636994][ T5705] usb 10-1: can't set config #0, error -71 [ 553.716176][T11268] usb 7-1: config 0 descriptor?? [ 553.763899][ T5705] usb 10-1: USB disconnect, device number 7 [ 554.110078][ T1766] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 554.572496][T12897] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN NOPTI [ 554.584584][T12897] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 554.592996][T12897] CPU: 1 UID: 0 PID: 12897 Comm: syz.6.2190 Tainted: G L syzkaller #0 PREEMPT(full) [ 554.603922][T12897] Tainted: [L]=SOFTLOCKUP [ 554.608250][T12897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 554.618316][T12897] RIP: 0010:__mutex_lock+0x15d/0x1bd0 [ 554.623684][T12897] Code: 08 84 d2 0f 85 62 14 00 00 44 8b 0d 9d 48 c8 0f 45 85 c9 75 29 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 59 14 00 00 48 3b 5b 58 0f 85 88 07 00 00 bf 01 [ 554.643283][T12897] RSP: 0018:ffffc900001077c0 EFLAGS: 00010206 [ 554.649353][T12897] RAX: dffffc0000000000 RBX: 0000000000000068 RCX: 0000000000000001 [ 554.657312][T12897] RDX: 0000000000000018 RSI: ffffffff8e3c4c52 RDI: 00000000000000c0 [ 554.665269][T12897] RBP: ffffc90000107930 R08: ffffffff8840e3d5 R09: 0000000000000000 [ 554.673226][T12897] R10: ffffc90000107948 R11: 0000000000000001 R12: 0000000000000000 [ 554.681179][T12897] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000001 [ 554.689134][T12897] FS: 00007fe06a9106c0(0000) GS:ffff888123c61000(0000) knlGS:0000000000000000 [ 554.698073][T12897] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 554.704646][T12897] CR2: 0000001b31723ffc CR3: 0000000055493000 CR4: 00000000003526f0 [ 554.712627][T12897] Call Trace: [ 554.715905][T12897] [ 554.718823][T12897] ? dvb_usbv2_generic_write+0x25/0x50 [ 554.724273][T12897] ? __mutex_lock+0x26c/0x1bd0 [ 554.729027][T12897] ? mxl111sf_ctrl_msg+0xb8/0x2b0 [ 554.734036][T12897] ? __pfx___schedule+0x10/0x10 [ 554.738886][T12897] ? __pfx___mutex_lock+0x10/0x10 [ 554.743913][T12897] ? __pfx___mutex_lock+0x10/0x10 [ 554.748924][T12897] ? preempt_schedule_thunk+0x16/0x40 [ 554.754299][T12897] ? preempt_schedule_common+0x3c/0xb0 [ 554.759753][T12897] ? dvb_usbv2_generic_write+0x25/0x50 [ 554.765202][T12897] dvb_usbv2_generic_write+0x25/0x50 [ 554.770474][T12897] mxl111sf_ctrl_msg+0x179/0x2b0 [ 554.775405][T12897] mxl111sf_write_reg+0x96/0x130 [ 554.780329][T12897] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 554.785859][T12897] ? __pick_next_task+0x40a/0x710 [ 554.790866][T12897] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 554.796761][T12897] mxl111sf_i2c_start+0x6e/0x220 [ 554.801685][T12897] mxl111sf_i2c_xfer+0x178e/0x3240 [ 554.806783][T12897] ? rcu_is_watching+0x13/0xc0 [ 554.811533][T12897] ? trace_sched_exit_tp+0x120/0x160 [ 554.816814][T12897] ? __schedule+0x126b/0x6920 [ 554.821472][T12897] ? kasan_save_track+0x14/0x30 [ 554.826319][T12897] ? __kasan_kmalloc+0xaa/0xb0 [ 554.831082][T12897] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 554.836527][T12897] ? __lock_acquire+0x4c5/0x1ec0 [ 554.841469][T12897] ? __lock_acquire+0x4c5/0x1ec0 [ 554.846396][T12897] __i2c_transfer+0x5d4/0x1740 [ 554.851151][T12897] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 554.856942][T12897] ? __pfx___i2c_transfer+0x10/0x10 [ 554.862132][T12897] ? rt_mutex_slowtrylock+0x93/0x100 [ 554.867420][T12897] i2c_transfer+0x158/0x380 [ 554.871913][T12897] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 554.876839][T12897] i2cdev_ioctl+0x19d/0x830 [ 554.881329][T12897] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 554.886343][T12897] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 554.891371][T12897] __x64_sys_ioctl+0x18e/0x210 [ 554.896130][T12897] do_syscall_64+0x123/0x790 [ 554.900711][T12897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.906603][T12897] RIP: 0033:0x7fe06999e159 [ 554.911013][T12897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.930602][T12897] RSP: 002b:00007fe06a910028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 554.938998][T12897] RAX: ffffffffffffffda RBX: 00007fe069c26090 RCX: 00007fe06999e159 [ 554.946955][T12897] RDX: 0000200000001a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 554.954909][T12897] RBP: 00007fe069a35024 R08: 0000000000000000 R09: 0000000000000000 [ 554.963125][T12897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 554.971079][T12897] R13: 00007fe069c26128 R14: 00007fe069c26090 R15: 00007ffe6f8c3f48 [ 554.979037][T12897] [ 554.982039][T12897] Modules linked in: [ 554.987152][T12897] ---[ end trace 0000000000000000 ]--- [ 555.039664][T12897] RIP: 0010:__mutex_lock+0x15d/0x1bd0 [ 555.045631][T12897] Code: 08 84 d2 0f 85 62 14 00 00 44 8b 0d 9d 48 c8 0f 45 85 c9 75 29 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 59 14 00 00 48 3b 5b 58 0f 85 88 07 00 00 bf 01 [ 555.069696][T12897] RSP: 0018:ffffc900001077c0 EFLAGS: 00010206 [ 555.075888][T12897] RAX: dffffc0000000000 RBX: 0000000000000068 RCX: 0000000000000001 [ 555.083932][T12897] RDX: 0000000000000018 RSI: ffffffff8e3c4c52 RDI: 00000000000000c0 [ 555.091978][T12897] RBP: ffffc90000107930 R08: ffffffff8840e3d5 R09: 0000000000000000 [ 555.100044][T12897] R10: ffffc90000107948 R11: 0000000000000001 R12: 0000000000000000 [ 555.108282][T12897] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000001 [ 555.150818][ T1766] usb 8-1: selecting invalid altsetting 2 ** replaying previous printk message ** [ 555.150846][ T1766] set interface failed [ 555.184971][T12897] FS: 00007fe06a9106c0(0000) GS:ffff888123b61000(0000) knlGS:0000000000000000 [ 555.185010][T12897] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 555.185025][T12897] CR2: 0000564ab419ebe8 CR3: 0000000055493000 CR4: 00000000003526f0 [ 555.185039][T12897] Kernel panic - not syncing: Fatal exception [ 555.222385][T12897] Kernel Offset: disabled [ 555.226692][T12897] Rebooting in 86400 seconds..