last executing test programs: 10.675773286s ago: executing program 0 (id=4595): r0 = socket$kcm(0x10, 0x7, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x5a, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESHEX=0x0], 0x0) setitimer(0x1, &(0x7f0000000080)={{0xfffffffffffffff5, 0x8876}, {0x80000, 0x8}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) socket$kcm(0x10, 0x7, 0x0) (async) syz_usb_connect$cdc_ecm(0x3, 0x5a, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESHEX=0x0], 0x0) (async) setitimer(0x1, &(0x7f0000000080)={{0xfffffffffffffff5, 0x8876}, {0x80000, 0x8}}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) (async) 7.559673859s ago: executing program 0 (id=4620): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x2, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf0}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) 6.651394431s ago: executing program 0 (id=4630): ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="687567653d6e847665722c1494450645e20bf4fe59cbe65c3654ad3a15dd151c71a85aa0504f07dbb21fd2cff13d00006dd591c61ad7f91882ffc80e5431746b8ec901f11d298b47f8ab8512192eb8c2a1024ac4d37815767e03707845ba0eb36734ff7f2fa774dae5fa910a5288951238c415a361802a68e57c4cf12c336d7c775b1404d99ca54fcd8050735d5ab4932a62ded63f0d76cffd3faed7b7cba6162865ec"]) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_extract_tcp_res(&(0x7f0000000080), 0x80000000, 0xd) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x3, 0x480000) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_clone(0x18200000, 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000006c0)="047be0a508f3fb1565f8ed576140b1037c584e3823ce7f7704c22f58cab985e100") writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e22, [0xfffffffc, 0x0, 0xcd7e], [], 0x0, [0x1]}, 0x0, 0x2000}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "06010000"}]}, 0x54}}, 0x20000080) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003380)={0x2020}, 0x2020) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000040532b24004000010203010902690003012b4006080b0201010320080904000000010120000924010080090900090904010000010220000904010101010220000905010910003200090825010230000100090402000001022000090402010101022000090582"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 5.542573117s ago: executing program 3 (id=4638): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x2, 0x0) ioctl$XFS_IOC_GETBMAP(0xffffffffffffffff, 0xc0205826, &(0x7f0000000040)={0x8000000000000001, 0x2, 0x7, 0x3, 0x10001}) r1 = socket$kcm(0x2, 0xd, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=r2, @ANYRESOCT=r0, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRES32=r0], 0x50) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/time_for_children\x00') ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) r4 = dup(r3) r5 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0xc048aec8, &(0x7f0000000080)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x0, 0x0, 0xfb}, {0x0, 0x0, 0x8}, {}, {0x0, 0x4, 0x0, '\x00', 0x1}, {0x0, 0xff}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x3}, {0x0, 0x0, 0x9}, {}, {}, {}, {0x20, 0x0, 0xff}, {}, {0x0, 0x0, 0x9, '\x00', 0x6}, {0x3}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x40}]}}) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) prctl$PR_MCE_KILL_GET(0x22) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f0000000080)) ioctl$int_in(r5, 0x40000000af01, 0x0) 4.871014729s ago: executing program 3 (id=4641): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x38, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYBLOB="98cdfc08b68109ea23bf0000000000000000000000000000818e000000000000", @ANYBLOB="1000000000000000280012800b00010062726964676500", @ANYRES32], 0x48}}, 0x10001) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x5e, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x13, 0x0, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000000), 0xf7cb, 0x400) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000040)={[0x8000000000000001, 0x0, 0x6, 0x80000000000000a, 0x80000004, 0x4, 0xc8ba, 0xa, 0x48, 0x80000000007, 0x3, 0x6, 0x7fff, 0x1, 0x5, 0xc5b], 0xeeee0000, 0x2400}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f00000001c0)={0x40000, 0x0, {[0x9, 0x8, 0xfffffffffffffff6, 0x9, 0x200, 0xffff, 0x3, 0xffffffffffffff80]}}) 4.622287741s ago: executing program 3 (id=4645): r0 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000002800000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB='.\x00\x00', @ANYBLOB], 0x20) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r3, {0xd, 0x10}, {0xfff8, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000000)=0x4031, 0x2b) connect$can_bcm(r7, &(0x7f00000005c0), 0x10) recvmmsg(r7, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000006040)=""/4086, 0x1000}, {&(0x7f0000000040)=""/111}, {&(0x7f0000000480)=""/143}, {&(0x7f0000000180)=""/132}, {&(0x7f0000000340)=""/151}], 0x1}, 0x8000}], 0x1c26679f6db3718, 0x10002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20048048) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r8, 0x2, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2, r0}]) 3.686296257s ago: executing program 3 (id=4653): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) 3.61615138s ago: executing program 3 (id=4655): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet6(0xa, 0x5, 0x81) r0 = socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000001100)=0x3fa, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x6, 0x1}]}, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003e50300000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x4c) syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0) 3.271882327s ago: executing program 0 (id=4656): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$yama_ptrace_scope(r1, &(0x7f0000000000)='1\x00', 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.098359179s ago: executing program 1 (id=4657): r0 = syz_usb_connect$cdc_ncm(0x3, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") 2.546096914s ago: executing program 4 (id=4660): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="000fff0000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.934274063s ago: executing program 0 (id=4661): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$rtc(0xffffff9c, 0x0, 0xc2440, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000000c0)=r3) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000440)="5800000014001923060000000000000010ff000000000069d6e580dfee0000004e32f61bcdf1e422676b001000000100800000000000001000aadc28dad12c0d03cf77ce8196c2b228742e6faa000000c600000000000000", 0x58}], 0x1) r9 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) connect$pptp(r6, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r10, 0x4068aea3, &(0x7f0000000000)={0xdc, 0x0, 0xabd}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r11, @ANYBLOB="080026009015000008005700"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r7, &(0x7f0000003080)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003040)={&(0x7f00000014c0)={0xbb4, r2, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IE={0x1a3, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x99, 0x1}}, @tim={0x5, 0xda, {0x5, 0xa2, 0xff, "8d1b90490462f101cf3cedb9bacfa406eb84bbc72113ad6e3ef29a92beac6fd869373d7e58c520e90ebb4edf0c77bbbe5973b74e825c360fa8bcbc929d4ee3fe8a4e0f9a73b289dde2b3d370e1fd1032e86b44d766ae8b0f10cb93be79f882d9f08e41e7ae422d0bc4b9763b58f142008d2d4f53596c84af316eb7cd264127c60b14c02d6a6978e54cccb3d68ebe0371d3c9f5bc33b4a31640655361de24b9f41ee201d06e18d3dcbf92984562f31293e53aa03baa9e8301ff937ced714291e68da9c54c12c90188464f1f1a1f1108a530ba3e9a4fae54"}}, @erp={0x2a, 0x1}, @prep={0x83, 0x1f, {{}, 0x7, 0xf5, @broadcast, 0x5, @void, 0xee2b, 0xf, @device_a, 0x1}}, @mic={0x8c, 0x18, {0x278, "8d43146f4d6c", @long="868511678ace7db4434ae09d507143b1"}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @ssid={0x0, 0x6, @default_ap_ssid}, @cf={0x4, 0x6, {0xc3, 0x6, 0xd84, 0x8}}, @fast_bss_trans={0x37, 0x65, {0x5, 0x1, "bd754bc83d10500a86127c51f466f71a", "53916417912cd1cba3a35fb757f70dcd474904dbb3e39fb79348535ef34e2fb6", "7c5adb63630c8df346b091837421352d85011d807c8de460f6960d670c7b528b", [{0x4, 0x11, "5c44b21b9786eef0ee14ed7c833dd45ce1"}]}}, @chsw_timing={0x68, 0x4, {0x8, 0xf}}]}, @NL80211_ATTR_FTM_RESPONDER={0x1cc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x6a, 0x2, "f916a51b2d82f3c17dea9b73daa680e55467a4dacf9c5768e5a0a80cd9e17835fa13808be2d7da60a3089e9d4a71bb26b9209ebff8f62a537f8777f954d7133b05785a00efcef635e1f37a9412826c6a68dafb04d027a48bd51d56d6c5fe5768d9a291609e43"}, @NL80211_FTM_RESP_ATTR_LCI={0x6c, 0x2, "0e1dbd40157efc987bad696c33ce32a292c2732a0015f8e9f9f80150757e2b18d0930309cbafe31aff434531f40ba75c6d3e26390d8682f992fc40e376801e49f03d70c05adcea16531f4a55174a53f26f3ca1f8549376262028762d0d153a96d0aca2852adb5e40"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xf0, 0x3, "d4bf37ef4a58ad7332c13e977dee2603f6fdfff48f9c96ee0adff5d7791b2d063939424bc6421a8ec2a0acc531e269b5cb8379273b43c7ce2f8d5cde6835958a7649fe2e66a05190c5bc97d3b2c9f52c052f895dc9e202182be7517ae6b664db8550cfbc9c17201de469f3c14bdc9144dd503d27b18a52051492ee4e59df0117df675a2832cd23beeed03b2560d5f4ef5ca5904e8892802d47ebe238c79179c65c3917bd1b208562c0a44072f6e13b706577197ee4edf9b2f52c6c7b5017e856bd3da33decab1d643a3457dc8d5476ff3ce63add95eedbdee3debe39b394c7251800ae3e10ee2ec508432653"}]}, @NL80211_ATTR_FTM_RESPONDER={0x3d0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xe9, 0x3, "29cb41bd07250f0d5932f70b1c74e0957ae6e452bb09c491d906b2064c43dbbcc4045e93093b214dde5aee0acc3cd8a072a1ed7ead6ac16e8cfa8769f80e722a97e99e040fd1bed6b0655c06ed4871714dcf4d0dd86b4c958b2183b10ba9b92cb2d7196de9af0d46490c62733c786069f1081afc3ff669f339376640c217970f6740bff21c47145c0e32f89c088eaba0f8204215e110d6c99d8bb90edb0d8735c898be6d938e45769dfc3587088383a600b929c3bc996b9a1764a7aad3e3d4402322b89b6ac57568b36ab94f2dbae96553b2e4fb62b1310b63ead0c010a8548519690b5cfc"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x41, 0x3, "5c0359841c5c039cc2663d60ee42b5cf6a0a994295b62dbf151e92a405e17d0b63ca4954f98353f65854c14cbb41f05da3d62b1cbe98fcbdd24ae357f5"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x34, 0x3, "841f2243b64bc0ef86db7ae0d342224c37d5faeded0c6d67da37b7a9b1534cfe62813545c47ff0b116d78934a5363715"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xec, 0x2, "5a4a46e3d8d0f2b8d0bc4525759913ae623abb111dee4f26b33c261b3e48487556294533150a5d5be373bf37715f22be3e54fa191dbc0643d0bc3a00000000000000000000000000b91e95d4f0b80445d885048dda9ec2c3fdeebdaf60c36f9eb1294b44685da4134ee33fcff9d4daae888001e161e588001d1bf310732476593033e18d36074834d62e58629827cc5128b0e643febb5ebcd47226fbb02090af739224ddd2886b2a0958ae6f2e8b965d7c1342ba86208852e79b0017b123f8346c6df548aa39a62d88fb0ec488dc999d9f36cfcbbf4fa3d9e754519a831638a0915efb62177aeaf3"}, @NL80211_FTM_RESP_ATTR_LCI={0x9f, 0x2, "0cb9d14d6a9a90caa070d3be49bd9b95dcfc23bfdaf42dc2ad2630760578b3c92576dfde57e972825a2d5e793863cbd93f66cc5207590aa137a92fd33fa3ad8421d88e2ac7d2366f021291c4086600e447aa5d2dd0f390a705247763b58337583b85748eb111c393d564967e5f2914ec5091a682de6bddcaa9312b2ba7c9b9fd6c34810fd16cb44b340539599482f3426891ee337e8309e45bccd0"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x8a, 0x3, "fae711e15e4bc5becfb303007ee798b3173fd021747e2938a2a15abdd772ef803c3a4819443a07a7bfa4b05de86f41c160a1fd70de60103650f3ba994f3e582ace5bcd3c4fedaf4ddee3589287ab9ce88ce710ff99e6df4a60172576574e7b0b5f65b0e1c91203de9e36943ab5970db3d706f2fe50e74dbc867ed4d65b0eb84f353b5f5b28cc"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x40, 0x2, "ef0ec2f41003438f16201e59f52a3dd69cc0c39df047c4f2297ba6d4e069e19c83c86206ee125fcaa22f8e2bb7ab3ffff3905dcf7b8db3096a2b4bc9"}]}, @NL80211_ATTR_BEACON_TAIL={0xf1, 0xf, [@preq={0x82, 0x67, {{0x1, 0x1}, 0xb, 0xa, 0x100, @device_b, 0x1ec, @void, 0x7, 0x2, 0x7, [{{0x1}, @broadcast, 0x100}, {{0x1}, @device_b, 0x7ff}, {{0x1}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0xcc4}, {{}, @device_a, 0x8}, {{0x1}, @broadcast, 0x77adde3a}, {{0x1, 0x0, 0x1}, @device_b, 0x1}]}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x0, 0xa5, 0x9}}, @preq={0x82, 0x2b, {{0x0, 0x0, 0x0, 0x0, 0x1}, 0x3, 0xe3, 0x5, @broadcast, 0x7, @value, 0x7, 0xa69, 0x1, [{{0x1, 0x0, 0x1}, @broadcast}]}}, @ibss={0x6, 0x2, 0x2}, @mesh_chsw={0x76, 0x6, {0x7, 0x5, 0x42}}, @random_vendor={0xdd, 0x3f, "2b5469ff0e82363dae447739d681849a82f74b14172a7ccbe10337316be22cb4963dd489b136b78de3f190fcb77c83420128d0cf135602c4f781f0e4716f6b"}, @ibss={0x6, 0x2, 0x1}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xc, 0x80, [@mesh_id={0x72, 0x6}]}, @NL80211_ATTR_PROBE_RESP={0x356, 0x91, "b86429f2100b5d1382a0652c758767295bf42e6dcd2589739ccf802180095a98227fd702e707e403146c7e48dbb4a8faf2f1e95c8f80c52eb00870d35390091fd146b9baa57138148189dd4d77428081c7b34d33806fd8d4fc1d1934990d511e0c1be54a97463eb3f2a2e7e90b6e4b0db634d13dfd32675a0e2a504d9d6e3f78fdc4adfbecf3f1513afa96f0dfb3297897b1f8d9efd1f411588d5664aded6410ab17ef570800cccdfdca7d994524112e5738e108fa88e807af7c1d6e1ca859d12216abcc9eddf0ec9fcf5489ea8f902a84cfc059d80b2466cbe51bc27f87c8a844c9bd33f35810558278ec737a101a9f47a61c2ea146b4103a0a5f6a942a36d051f30be1f59d29697bfc564f7e3343f596f1c77906148d4a48c879b22ab744c3be2bfb17774b3fe2a35a53b2954ed8ef068c90b74407cae1f4563dba3209b20bf034a66e20f52a71c56aa2748e02eb85da81946476bb83fb199dc914c1e7052471db56a46126cf59676e5144abd99d494a731a61488a5b114b5b333b7ae0eae5a996b8f39e7c02a6b8dda042202805d199aab6472e0e762a4639b653f28da481b712e332776471e95e72ca04ca00a125cc5493a7b857976ed41538e1a8d9b800332ed161ecfd096d2364ff785f778bc7f1a5b269ef94a8f967ffd5d6a4e148a7c4bd6eb133927837bbf070ca6b4c3d2b05b06305b5a4b1efc93988f6ce075c9340d36a7598e74b4f0b61faf795e87836ded42a49903a14633ffd80f1d2757e580cc06d935b0a4b8fbb86f2adccf9c6ce74f4e389fa69db3b9a20de96b4be1ea8035c8e54aec6f7af5264c14699bd916d455865db2f1fa4ee61972be338ef61a4e90473a470d4cf069b7ec93f9c29106019a04924c9eb996b29e78fd24d0671c0c9227502682c8d707dc9a30ef022dbdcd793f3477364aab2af28b1f4d22948d61853655bb96723f7b423872e95720f6b34054564a250396e0777a663111c1fae41b29f2bedf60b8a10bbfe4450f4e66e34056bcf945358179873b19ce79fef898b9ea19e5de1e5e2f4feefb589cd59df59bc975d8327a4d1c411551eb7cf5de943f5076b058272afba47d2cd1be035b3cb21db64fd80eefbcb29d0169fefba9a4d89a0c8278126b43394866a8163a00327cd1a469e7f701674d649713594a20a973227d7e20bbe5eb4869358a6ce5d664f1f"}]}, 0xbb4}, 0x1, 0x0, 0x0, 0x40000}, 0x4040005) 1.4979426s ago: executing program 4 (id=4662): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/kexec_crash_size', 0x141a82, 0x104) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000140)=0x1, 0xc4ffffff) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f00000001c0), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x8}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={[&(0x7f0000000100)='\x00', 0x0]}, 0x0) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0) close(r2) write$UHID_DESTROY(r0, &(0x7f0000000000), 0xfffffffffffffed0) 1.493368681s ago: executing program 1 (id=4663): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000500440012800b00010067656e6576650000340002800500090000000000050009030100000005000a"], 0x6c}}, 0x40) 1.26760688s ago: executing program 1 (id=4664): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012e4003fffffff3006506020001cd010271187c0000000000c3640000f1f3ff007b0b00fe0000000085000000a000000079a000fe000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e6191a12bebf9f9804ea033388cd15b65877ad4b200000000000000000beca090f32050e436fe275daf51efd601b6bf01c8e8b1abe4fef3bef7074815ae98743d1ace4c46631256dd19aed0d600c0b6199fe3ff3128e599b0eaebbdbd7359a48f5b0afc3996792043a6787bac46aa7aa400000000000069669622208266f896ba2c9e73c2efeec2dc565fbafb2cb63f5fef9ab79ff8abaa8a08f54a062107e9bb3e980fff675c8d3e91df6648a7a6aebcb63e0867b75690152af27711f0cbb9c06018d21bf3f87b8eb65323b4267a526d53442db8e48dbc5ce47d67d07441a7975d5e41b14fd0154a8246249952a8b61633ce068220defe09d3b1136af6d03e9cf996c13d1bfcdc54567a9ca80dec2e943fe4ae7c617cc071f7add70cfbd48f8f6b50fe6a8297d88efa73e7e601040000b4a685969f28902bdecf66ef39755de79ed2c711477febc96231a53984d00877301d0ec62427a8e38618fdd1ce9aaed569ebc5f2e58d6028e66139a737cc7146a131d47dcebb32ed67021d76e983223c998aec22242ae54e87f438d26982876b58f9134366952f7399a733f07138a736924f3709000000e97f0c117ec439c6b7b965752bbc06eced08d97a32ae4b1ad4d11c5b6f68ee841975233e4cea13f3ef04b2cab9cc256d4539dbafd888c7097c1169e0bebcc81ca3da40bf34b6c9c1da2d6ed8acaf2a8091820ff4cf6be74ddca8bf2eed0e11b2139e8c3ec95436af5269d5792decda7d8b5dcf8640b504ba23c6d0a7f67cdfd27328100ebf9319a56f0f9cee17deecf747f3493f1dc39551f4c9a40b3e93fa80b8234ccbf39a9ef09bd97321f0dc20956f44ba2c5ec2e7569b05cf4690ddc189f174046a8b214acf23f42fb51ed4819e6b4cb5a8bf2b559d0c198fe0315483b8beb9801d06c58b22dd713fe3b7ef18e21081aacfd091b754125a488cea18255f79bebcb3051f622f8a1d9af1908e88a58774a24f35a4ccdbedea6212286c23dd89c2b4b90647f17231472af8dda7f3ab20f093aad3ce875f7458039ee6d0a50deb7bc8eb393f056a5e7725531c5485278e0362338e2e2710fe00465e0d182a322091022cf5b814eeb9b3cab21196581e4d92d0b6fe5525285eea359274f1f21d69233bbe94941f10ba292100000000000000000000000000000000c18e93a0c5231779f2ee201e9fe7e63e84b57b5f05ecd278919bad330ffcb594b8255b3085b352ca9533d6c31c1a30158c30352f8a126a65cb6582e58aa641007418611df53a601c3a8fb8d2286e86abf98136f345446730f68f5d6d1817a9e1b09e5650d2599fbe719a45337d29eb3fef5f7f565457660dec6fe903a1c2ea4f40a8ea1c179892afa219fc69a44163f0d731de418e9fd82a8c4661caea674b19242d1840d047882f640ea248457288c5ffb63e857da03ff5c0475c3cfff41c4806f1dc750eb1c45ec3a2a0b064834010604d6f88a29e8e9bda2bc9c18d1b53a08f25d62ccaa46bc0235c830a7b3fe64bc6031b431bcad6b698a1ba6027870ea9e55fafbbf140c5f82a33ee4ac793b989c12a5827a7957f4d8136cf918b7cbf5bc5fc64c8001992536584586edded6f65bdd371ac84fd5cc60ab79b84e9e85a1c54d5666a5d133e95eff121621dff14b9de7a188b8c5387f9da63c2cce405bc44079e34e2db2b275bfbb54841d647338cad74be91144b780cf381a6860f641446ef73bd11d45f5e4df8f3c6440d8425fd7382225cf8c2cada01bf3cd5cbc6a403173e0c89a491c75efc3c21b7825a521c6011945eef94abc3000000000000000000000000000000d71b794e9b4c145caf050429937eef4364d9e1cbe9150bccd9b2e73757f1f5e8ac50736cd3cbc029ede2869642841371bb4b9c1aaa8826889a909e6716b60e4b568b6761f8ccc7d35b0e66357746b10fc481b47e67f1e14408c1ef3e018a5e647e3f607654f3bf82bcfb42be038a272d82f8362944f608b3810000000019fda0b1b607f1ab34194ed954973f7a5accc0938d3364ab07574d0b32fc30f3ab73d012b63ee905e98ab6989ec2c840cd216eb18fedfb3b204e94e170bae930660368d3799c9b1bf7556ac57164966791626f06ad2e332341965f72141ec140b80efd7720ccdaa890b79bc4523386bd66553121543c9a35b7adcf2f6b257fefef1d6e1da2ee94d3f822bf45aad21e5b5a3788ab584090664065af39b0f43968dcd7c5f8e5a8dc6298691423fbf7e8e012260bc62f9422434a547ef7ca37953d435098d9b71edd1a03e46d0ade465d0c0db0a51f9e29cac05e5a04f94e"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) 1.132122473s ago: executing program 1 (id=4665): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) 995.304816ms ago: executing program 0 (id=4666): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0x9, 0x4, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) syz_usb_connect$uac1(0x0, 0x81, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x582, 0x74, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x6f, 0x20, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x40, 0xad1b8355a12257fc}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xf3, 0x1, 0x6, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x6b, 0x5, 0x5, {0x7, 0x25, 0x1, 0xc, 0x5, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xfd, 0x8, 0x4, {0x7, 0x25, 0x1, 0xc, 0x96, 0x8}}}}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 830.360415ms ago: executing program 2 (id=4667): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x2, 0x0) ioctl$XFS_IOC_GETBMAP(0xffffffffffffffff, 0xc0205826, &(0x7f0000000040)={0x8000000000000001, 0x2, 0x7, 0x3, 0x10001}) r1 = socket$kcm(0x2, 0xd, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=0x1, @ANYRESOCT=r0, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRES32=r0], 0x50) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/time_for_children\x00') ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) r4 = dup(r3) r5 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0xc048aec8, &(0x7f0000000080)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x0, 0x0, 0xfb}, {0x0, 0x0, 0x8}, {}, {0x0, 0x4, 0x0, '\x00', 0x1}, {0x0, 0xff}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x3}, {0x0, 0x0, 0x9}, {}, {}, {}, {0x20, 0x0, 0xff}, {}, {0x0, 0x0, 0x9, '\x00', 0x6}, {0x3}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x40}]}}) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) prctl$PR_MCE_KILL_GET(0x22) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f0000000080)) ioctl$int_in(r5, 0x40000000af01, 0x0) 683.793055ms ago: executing program 1 (id=4668): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x18}, 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) 681.491767ms ago: executing program 4 (id=4669): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000100000000000000000000000000000001050000001000ffff0f00000000000003000000000100000001"], 0x0, 0x53}, 0x28) 658.785569ms ago: executing program 1 (id=4670): syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)=ANY=[@ANYBLOB="120100030000000835120c8040000102030109026e000301fc100c080b0105f22130060904000000010130000a2401100a0007000000090401"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x3, 0x50, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e, 0x1, 0x1, 0x8, 0x0, 0xd, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x8, 0x24, 0x6, 0x0, 0x0, "b1e6d8"}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0xa5, 0x7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0xe, 0x40, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x10, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x210, 0xd, 0x7, 0x4, 0x20, 0xf}, 0x36, &(0x7f0000000140)={0x5, 0xf, 0x36, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x81, 0x9, 0xfff8}, @ss_container_id={0x14, 0x10, 0x4, 0x39, "662d788b7f081a11484bd6625b3a4de2"}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x2, 0xee00, 0x6, [0x0]}]}, 0x2, [{0x64, &(0x7f0000000180)=@string={0x64, 0x3, "fb7dd7d1f6e4b04f10bc6c2f36ab491f70fa3916d98fb0401ffd4002913074bbeb0e50e93b6282a351b951e18d481da76ccfadb86c3ed115c22a374c1e0b30750c8bbfe86b7bcce2ec45b6c0421dfe01f92f95734ae4cf512d4e80dbbda9f87daab6"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x42d}}]}) 601.863305ms ago: executing program 4 (id=4671): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000100)) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, &(0x7f0000019580)=""/102385, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x29, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c000000d77acf44ae632133c89fd71980f206d55affb51147de584dde4ffd813f22804c05a759347701238dbd541fb1b2723841b5ddd5c5fb2972c2accba8ae7a31a6d820926190ad34935dadfb9fef2a73a7c4f49516524f37abbdc5877eb83b56ab6264624598bebd0ba1e1fc2a2d8ef64634903dba2a0aea69b99a7e20c11f24325d66b3c288c160ec3dd4376b623ca35d7645329f2b9107217ba6abd2c387ec20e6ea3c6607543e8d44a17faf0fcc95c6d5bad2c470b6369e25099c3b1e7451adfcece2f10ec741923ef06540d5544d776d355ea71bdecc99a8476c30c08bc0047e42552d910857ca03c7b34bba", @ANYRES16=0x0, @ANYBLOB="01002bbd700000000000350000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800730002000000"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x0, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000008000000109b020000000000000000000000009500000000000000"], 0x0, 0x5}, 0x94) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, 0x0, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 499.675854ms ago: executing program 3 (id=4672): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e01000000010902120001000000000904"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket(0x2, 0x805, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140)={0x9, 0x0}, 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r6, 0xffffffffffffffff, 0x37}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB='\'\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r7, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x40100) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000005580)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendto$packet(r2, &(0x7f0000000100)="000088a8", 0x4, 0x14000b01, &(0x7f00000000c0)={0x11, 0x8100, r3, 0x1, 0x84, 0x6, @multicast}, 0x14) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000004c0)={0x5, 0x0, [{0xe000, 0xea, &(0x7f0000000200)=""/234}, {0x56000, 0x8c, &(0x7f0000000300)=""/140}, {0x5e000, 0x11, &(0x7f00000003c0)=""/17}, {0x30000, 0x72, &(0x7f0000000400)=""/114}, {0x2000, 0x2d, &(0x7f0000000480)=""/45}]}) sendmsg$nl_route_sched(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6, 0x5, {0x80, 0xd}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40488c0}, 0x0) 448.533535ms ago: executing program 2 (id=4673): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e65766500003400028005000900000000000500090001007fff05000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) 400.232689ms ago: executing program 2 (id=4674): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000005c0)={r0, &(0x7f00000004c0)='\x00', 0x2, &(0x7f0000000500)={@_ha_fsid={[0x2, 0x200]}, {0x7, 0xc, 0x422, 0x6}}, 0x99, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x11, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x1, 0xa, 0xa, 0xc, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000300)='syzkaller\x00', 0x2, 0xe9, &(0x7f0000000340)=""/233, 0x41100, 0x10, '\x00', r2, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f59f, 0xffffffffffffffff, 0x8, &(0x7f0000000680)=[r4], &(0x7f00000006c0)=[{0x3, 0x3, 0x5, 0x6}, {0x2, 0x1, 0x7, 0xa}, {0x4, 0x4, 0x6}, {0x5, 0x4, 0x7, 0x3}, {0x3, 0x3, 0xf, 0xc}, {0x5, 0x3, 0x1, 0x3}, {0x2, 0x2, 0x1, 0xc}, {0x4, 0x4, 0xb, 0x4}], 0x10, 0x10000}, 0x94) 321.521127ms ago: executing program 2 (id=4675): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 320.07267ms ago: executing program 2 (id=4676): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x0, 0x399}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, 0x0) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) 240.006703ms ago: executing program 2 (id=4677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000001000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 100.229792ms ago: executing program 4 (id=4678): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x9}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000010095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 0s ago: executing program 4 (id=4679): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x81}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}], {0x95, 0x0, 0x0, 0x8000000}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d}, 0x94) kernel console output (not intermixed with test programs): 8291][ T7099] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 743.289310][ T7099] usb 3-1: config 0 has an invalid interface number: 74 but max is 1 [ 743.326679][ T7099] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.339327][T19339] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=19339 comm=syz.0.3995 [ 743.353045][T19339] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=46 sclass=netlink_audit_socket pid=19339 comm=syz.0.3995 [ 743.368117][ T7099] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 743.386140][ T7099] usb 3-1: config 0 has no interface number 0 [ 743.400309][ T7099] usb 3-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 743.419812][ T7099] usb 3-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 743.421315][T19339] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=18 sclass=netlink_audit_socket pid=19339 comm=syz.0.3995 [ 743.442612][ T7099] usb 3-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 743.467728][T19339] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=63 sclass=netlink_audit_socket pid=19339 comm=syz.0.3995 [ 743.484112][ T7099] usb 3-1: config 0 interface 74 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 743.497599][T19339] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=19339 comm=syz.0.3995 [ 743.515535][ T7099] usb 3-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 743.527627][ T7099] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.540407][T19339] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=19339 comm=syz.0.3995 [ 743.545435][ T7099] usb 3-1: Product: syz [ 743.565619][ T7099] usb 3-1: Manufacturer: syz [ 743.573081][ T7099] usb 3-1: SerialNumber: syz [ 743.581506][T19339] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=19339 comm=syz.0.3995 [ 743.590082][ T7099] usb 3-1: config 0 descriptor?? [ 743.816932][T19329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.826530][T19329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.841404][ T7099] cypress_m8 3-1:0.74: HID->COM RS232 Adapter converter detected [ 743.851748][ T7099] usb 3-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 743.870440][ T7099] usb 3-1: USB disconnect, device number 75 [ 743.882420][T19366] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.4002'. [ 743.892520][ T7099] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 743.914380][T19366] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.4002'. [ 743.925669][ T7099] cypress_m8 3-1:0.74: device disconnected [ 743.942309][T19366] netlink: 640 bytes leftover after parsing attributes in process `syz.0.4002'. [ 744.156621][T19388] xt_hashlimit: size too large, truncated to 1048576 [ 744.173064][ T5732] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 744.342682][ T5732] usb 5-1: Using ep0 maxpacket: 8 [ 744.349215][ T5732] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 744.357677][ T5732] usb 5-1: config 179 has no interface number 0 [ 744.364069][ T5732] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 744.375180][ T5732] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 744.386491][ T5732] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 744.398214][ T5732] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 744.410016][ T5732] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 744.424601][ T5732] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 744.434298][ T5732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.445252][T19368] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 744.619117][ T7099] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 744.626908][T14465] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 744.676689][T19401] can0: slcan on ttyS3. [ 744.779125][ T29] usb 5-1: USB disconnect, device number 122 [ 744.779137][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 744.792368][T14465] usb 2-1: Using ep0 maxpacket: 32 [ 744.793747][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 744.804512][ T7099] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 744.853099][T19401] can0 (unregistered): slcan off ttyS3. [ 745.009287][T14465] usb 2-1: config 0 has no interfaces? [ 745.021132][T14465] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 745.031182][T14465] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.039376][ T7099] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 745.050311][ T7099] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.060540][T14465] usb 2-1: Product: syz [ 745.065089][T14465] usb 2-1: Manufacturer: syz [ 745.069746][ T7099] usb 1-1: Product: syz [ 745.074570][T14465] usb 2-1: SerialNumber: syz [ 745.079236][ T7099] usb 1-1: Manufacturer: syz [ 745.085655][T14465] usb 2-1: config 0 descriptor?? [ 745.091295][ T7099] usb 1-1: SerialNumber: syz [ 745.104588][ T7099] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 745.705483][T19388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.724148][ T7099] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 745.724446][T19388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.759187][ T7099] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 745.805049][T19424] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4017'. [ 745.881343][ T7099] usb 1-1: media controller created [ 745.915137][ T7099] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 745.969551][T19419] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4017'. [ 745.991922][ T7099] usb 1-1: USB disconnect, device number 73 [ 746.006770][ T7412] udevd[7412]: setting mode of /dev/bus/usb/001/073 to 020664 failed: No such file or directory [ 746.028465][T19419] nbd: nbd64 already in use [ 746.052050][ T7412] udevd[7412]: setting owner of /dev/bus/usb/001/073 to uid=0, gid=0 failed: No such file or directory [ 746.166199][T19433] binder: 19430:19433 ioctl c0306201 0 returned -14 [ 746.241635][T14465] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 746.481449][T14465] usb 3-1: device descriptor read/64, error -71 [ 746.555730][ T7099] usb 2-1: USB disconnect, device number 107 [ 746.698677][T19450] binder: 19449:19450 unknown command 0 [ 746.704368][T19450] binder: 19449:19450 ioctl c0306201 200000000080 returned -22 [ 746.721334][T14465] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 746.752172][ T30] audit: type=1400 audit(1781992027.343:1049): avc: denied { bind } for pid=19442 comm="syz.0.4024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 746.796453][ T30] audit: type=1400 audit(1781992027.343:1050): avc: denied { name_bind } for pid=19442 comm="syz.0.4024" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 746.824888][T19455] loop3: detected capacity change from 0 to 7 [ 746.833435][T19455] Dev loop3: unable to read RDB block 7 [ 746.839311][T19455] loop3: unable to read partition table [ 746.841767][ T30] audit: type=1400 audit(1781992027.343:1051): avc: denied { node_bind } for pid=19442 comm="syz.0.4024" saddr=100.1.1.0 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 746.845517][T19455] loop3: partition table beyond EOD, [ 746.868321][T14465] usb 3-1: device descriptor read/64, error -71 [ 746.880408][T19455] truncated [ 746.883854][T19455] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 746.933704][T19457] syzkaller0: entered promiscuous mode [ 746.939264][T19457] syzkaller0: entered allmulticast mode [ 747.001625][T14465] usb usb3-port1: attempt power cycle [ 747.011261][ T5732] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 747.058430][ T30] audit: type=1400 audit(1781992027.653:1052): avc: denied { read write } for pid=19462 comm="syz.4.4032" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 747.084438][ T30] audit: type=1400 audit(1781992027.653:1053): avc: denied { open } for pid=19462 comm="syz.4.4032" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 747.085830][ T5696] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 747.121521][ T5696] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 747.181509][ T5732] usb 2-1: device descriptor read/64, error -71 [ 747.351141][T14465] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 747.374264][T19463] lo speed is unknown, defaulting to 1000 [ 747.395708][ T30] audit: type=1400 audit(1781992027.994:1054): avc: denied { connect } for pid=19462 comm="syz.4.4032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 747.435292][ T5732] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 747.701284][ T5732] usb 2-1: device descriptor read/64, error -71 [ 747.814666][ T5732] usb usb2-port1: attempt power cycle [ 748.260777][ T5732] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 748.317390][T19476] netlink: 'syz.0.4035': attribute type 10 has an invalid length. [ 748.326523][T19476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 748.330946][T14465] usb 3-1: device descriptor read/8, error -71 [ 748.333471][ T5732] usb 2-1: device descriptor read/8, error -71 [ 748.390539][T19476] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 748.452121][T19476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 748.483858][T19476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 748.505406][T19476] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 748.521112][T19476] bond0 (unregistering): Released all slaves [ 748.616439][T19491] binder: 19490:19491 unknown command 0 [ 748.632142][T19491] binder: 19490:19491 ioctl c0306201 200000000080 returned -22 [ 748.650348][ T9] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 748.660935][ T5732] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 748.691337][ T5732] usb 2-1: device descriptor read/8, error -71 [ 748.723593][T19496] loop3: detected capacity change from 0 to 7 [ 748.744073][T19496] Dev loop3: unable to read RDB block 7 [ 748.752946][T19496] loop3: unable to read partition table [ 748.759271][T19496] loop3: partition table beyond EOD, truncated [ 748.767425][T19498] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4044'. [ 748.771470][T19496] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 748.818976][ T9] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 748.833419][ T4975] Dev loop3: unable to read RDB block 7 [ 748.833985][ T5732] usb usb2-port1: unable to enumerate USB device [ 748.839831][ T4975] loop3: unable to read partition table [ 748.850511][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.866586][ T4975] loop3: partition table beyond EOD, truncated [ 748.931197][ T9] usb 5-1: config 0 descriptor?? [ 749.146345][T19503] qrtr: Invalid version 0 [ 749.177010][ T9] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 749.186384][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 749.380763][ T9] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 749.483427][ T9] [drm] Initialized udl on minor 2 [ 749.493434][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 749.502539][ T9] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 749.511541][ T9] usb 5-1: USB disconnect, device number 123 [ 749.519359][ T5696] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 749.601639][T19518] syzkaller0: entered promiscuous mode [ 749.611717][T19518] syzkaller0: entered allmulticast mode [ 749.785355][T19530] binder: 19529:19530 unknown command 0 [ 749.792015][T19530] binder: 19529:19530 ioctl c0306201 200000000080 returned -22 [ 749.916577][T19533] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4053'. [ 749.975054][T19530] binder_alloc: 19529: binder_alloc_buf, no vma [ 749.980663][ T30] audit: type=1400 audit(1781992030.575:1055): avc: denied { read } for pid=4960 comm="acpid" name="event#" dev="devtmpfs" ino=4075 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 750.132115][ T30] audit: type=1400 audit(1781992030.575:1056): avc: denied { open } for pid=4960 comm="acpid" path="/dev/input/event#" dev="devtmpfs" ino=4075 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 750.156945][ T30] audit: type=1400 audit(1781992030.575:1057): avc: denied { ioctl } for pid=4960 comm="acpid" path="/dev/input/event#" dev="devtmpfs" ino=4075 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 750.415999][ T5800] udevd[5800]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 750.469524][ T5704] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 750.868033][ T30] audit: type=1400 audit(1781992031.465:1058): avc: denied { map } for pid=19551 comm="syz.3.4059" path="socket:[78529]" dev="sockfs" ino=78529 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 750.980274][ T5704] usb 3-1: device descriptor read/64, error -71 [ 751.457872][ T5704] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 751.465887][ T29] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 751.527108][T19568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 751.680190][ T5704] usb 3-1: device descriptor read/64, error -71 [ 751.708925][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 751.741068][ T29] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.752627][ T29] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.763456][ T29] usb 4-1: config 0 interface 0 has no altsetting 0 [ 751.770329][ T29] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 751.779679][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.822025][ T5704] usb usb3-port1: attempt power cycle [ 751.849387][ T29] usb 4-1: config 0 descriptor?? [ 752.156820][T19585] syzkaller0: entered promiscuous mode [ 752.164131][T19585] syzkaller0: entered allmulticast mode [ 752.209124][ T5704] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 752.228967][ T5704] usb 3-1: device descriptor read/8, error -71 [ 752.295702][T14465] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 752.888184][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 752.948156][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 753.434503][T14465] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 753.478430][ T5704] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 753.511017][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 753.511034][ T30] audit: type=1400 audit(1781992034.117:1061): avc: denied { execute } for pid=19606 comm="syz.4.4079" path="/dev/audio1" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 753.612729][ T29] usbhid 4-1:0.0: can't add hid device: -71 [ 753.621278][T19617] syzkaller0: entered promiscuous mode [ 753.628032][ T29] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 753.635006][T19617] syzkaller0: entered allmulticast mode [ 753.650064][ T29] usb 4-1: USB disconnect, device number 108 [ 753.660596][T19617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.676828][T19617] tipc: Enabled bearer , priority 0 [ 753.687428][T19615] tipc: Resetting bearer [ 753.694954][T19615] tipc: Disabling bearer [ 753.724912][ T5704] usb 3-1: device not accepting address 83, error -71 [ 753.742141][ T5704] usb usb3-port1: unable to enumerate USB device [ 754.027838][T14465] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 754.144432][T19629] qrtr: Invalid version 0 [ 754.201481][T14465] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 754.211362][T14465] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.220042][T14465] usb 2-1: Product: syz [ 754.225191][T14465] usb 2-1: Manufacturer: syz [ 754.230310][T14465] usb 2-1: SerialNumber: syz [ 754.259114][T15103] Bluetooth: hci3: command 0x1003 tx timeout [ 754.265191][ T5611] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 754.451933][T14465] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 112 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 754.496636][T14465] usb 2-1: USB disconnect, device number 112 [ 754.516600][T14465] usblp0: removed [ 754.544428][T19651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4091'. [ 755.076471][T19674] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.4100'. [ 755.093096][T19674] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.4100'. [ 755.104059][T19674] netlink: 640 bytes leftover after parsing attributes in process `syz.1.4100'. [ 755.482785][T19698] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 755.552762][ T30] audit: type=1326 audit(1781992036.088:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19689 comm="syz.1.4107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd47919ce59 code=0x0 [ 756.583878][T19704] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4111'. [ 756.596641][T19704] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4111'. [ 757.605983][T19720] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.4116'. [ 757.683884][T19720] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.4116'. [ 757.705865][T19720] netlink: 640 bytes leftover after parsing attributes in process `syz.0.4116'. [ 757.719850][T19723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4117'. [ 757.728748][ T30] audit: type=1400 audit(1781992038.329:1063): avc: denied { map } for pid=19722 comm="syz.1.4117" path="socket:[80171]" dev="sockfs" ino=80171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 757.752172][ T30] audit: type=1400 audit(1781992038.329:1064): avc: denied { accept } for pid=19722 comm="syz.1.4117" path="socket:[80171]" dev="sockfs" ino=80171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 757.795650][T19721] SELinux: Context system_u:object_r:setfiles_exec_t:s0 is not valid (left unmapped). [ 757.853981][ T30] audit: type=1400 audit(1781992038.459:1065): avc: denied { relabelto } for pid=19715 comm="syz.3.4115" name="file1" dev="tmpfs" ino=679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:setfiles_exec_t:s0" [ 757.888620][ T30] audit: type=1400 audit(1781992038.459:1066): avc: denied { associate } for pid=19715 comm="syz.3.4115" name="file1" dev="tmpfs" ino=679 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:setfiles_exec_t:s0" [ 758.161572][T19739] binder: 19731:19739 ioctl c0306201 0 returned -14 [ 758.307527][ T30] audit: type=1400 audit(1781992038.909:1067): avc: denied { mmap_zero } for pid=19733 comm="syz.0.4121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 759.218575][ T30] audit: type=1400 audit(1781992039.800:1068): avc: denied { lock } for pid=19733 comm="syz.0.4121" path="/dev/vbi1" dev="devtmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 759.818356][ T30] audit: type=1400 audit(1781992040.430:1069): avc: denied { write } for pid=19753 comm="syz.2.4127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 759.822738][T19757] vlan2: entered promiscuous mode [ 759.843209][T19757] bridge0: entered promiscuous mode [ 760.086237][ T5704] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 760.271306][T19760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.296065][ T5704] usb 5-1: unable to get BOS descriptor or descriptor too short [ 760.322868][T19760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.348794][ T5704] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 760.373170][ T5732] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 760.386747][ T5704] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 760.410448][ T30] audit: type=1400 audit(1781992040.980:1070): avc: denied { unlink } for pid=17344 comm="syz-executor" name="file1" dev="tmpfs" ino=679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:setfiles_exec_t:s0" [ 760.465766][ T7099] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 760.494419][ T5704] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 760.511845][ T30] audit: type=1400 audit(1781992041.020:1071): avc: denied { append } for pid=19759 comm="syz.1.4129" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 760.550166][ T5704] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 760.560160][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.577081][ T5704] usb 5-1: Product: syz [ 760.590548][ T5704] usb 5-1: Manufacturer: syz [ 760.601146][ T5704] usb 5-1: SerialNumber: syz [ 760.615874][T19766] qrtr: Invalid version 0 [ 760.634777][ T5732] usb 3-1: device descriptor read/64, error -71 [ 760.793663][T19772] FAULT_INJECTION: forcing a failure. [ 760.793663][T19772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 760.810149][T19772] CPU: 1 UID: 0 PID: 19772 Comm: syz.3.4135 Tainted: G L syzkaller #0 PREEMPT(full) [ 760.810171][T19772] Tainted: [L]=SOFTLOCKUP [ 760.810175][T19772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 760.810183][T19772] Call Trace: [ 760.810187][T19772] [ 760.810192][T19772] dump_stack_lvl+0x100/0x190 [ 760.810209][T19772] should_fail_ex.cold+0x5/0xa [ 760.810224][T19772] _copy_from_iter+0x1f4/0x1690 [ 760.810241][T19772] ? __pfx__copy_from_iter+0x10/0x10 [ 760.810255][T19772] ? rcu_is_watching+0x12/0xc0 [ 760.810273][T19772] ? trace_kmalloc+0xeb/0x110 [ 760.810285][T19772] ? __kasan_kmalloc+0xaa/0xb0 [ 760.810295][T19772] ? __kmalloc_noprof+0x321/0x840 [ 760.810311][T19772] qrtr_tun_write_iter+0xe7/0x1b0 [ 760.810327][T19772] vfs_write+0x6ac/0x1050 [ 760.810341][T19772] ? __pfx_qrtr_tun_write_iter+0x10/0x10 [ 760.810356][T19772] ? __pfx_vfs_write+0x10/0x10 [ 760.810369][T19772] ? lock_release+0x24d/0x310 [ 760.810384][T19772] ksys_write+0x12a/0x250 [ 760.810397][T19772] ? __pfx_ksys_write+0x10/0x10 [ 760.810411][T19772] ? rcu_is_watching+0x12/0xc0 [ 760.810425][T19772] do_syscall_64+0x115/0x870 [ 760.810436][T19772] ? clear_bhb_loop+0x40/0x90 [ 760.810448][T19772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.810460][T19772] RIP: 0033:0x7f5be459ce59 [ 760.810469][T19772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.810480][T19772] RSP: 002b:00007f5be27ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 760.810492][T19772] RAX: ffffffffffffffda RBX: 00007f5be4815fa0 RCX: 00007f5be459ce59 [ 760.810499][T19772] RDX: 00000000000000c8 RSI: 0000200000000200 RDI: 0000000000000004 [ 760.810506][T19772] RBP: 00007f5be27ee090 R08: 0000000000000000 R09: 0000000000000000 [ 760.810524][T19772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.810535][T19772] R13: 00007f5be4816038 R14: 00007f5be4815fa0 R15: 00007ffc8ffccb98 [ 760.810553][T19772] [ 761.013057][ T5732] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 761.020847][ T9] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 761.042947][ T5704] usb 5-1: USB disconnect, device number 124 [ 761.064530][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 761.174113][ T5732] usb 3-1: device descriptor read/64, error -71 [ 761.182037][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 761.192729][ T9] usb 1-1: config index 0 descriptor too short (expected 40744, got 96) [ 761.209832][ T9] usb 1-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config [ 761.235577][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 761.246440][ T9] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 761.259841][ T9] usb 1-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 761.272731][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 211, changing to 7 [ 761.474621][ T5732] usb usb3-port1: attempt power cycle [ 761.480974][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid maxpacket 18430, setting to 1024 [ 761.492735][ T9] usb 1-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226 [ 761.508314][ T9] usb 1-1: string descriptor 0 read error: -22 [ 761.523950][ T9] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 761.533032][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.549062][ T9] usb 1-1: 1:1 : invalid sync pipe. bmAttributes e5, bLength 9, bSynchAddress d8 [ 761.605121][ T5696] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 761.823735][ T5696] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.827583][T19768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.851598][ T5732] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 761.861990][ T5696] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 761.864000][T19768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.878921][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.905158][ T5732] usb 3-1: device descriptor read/8, error -71 [ 761.913449][ T5696] usb 4-1: config 0 descriptor?? [ 761.926065][ T5696] pwc: Askey VC010 type 2 USB webcam detected. [ 761.938202][T19768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.963880][T19768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.983474][ T9] usb 1-1: 1:1: cannot set freq 48000 to ep 0x1 [ 762.009546][T19797] __nla_validate_parse: 1 callbacks suppressed [ 762.009565][T19797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4144'. [ 762.026878][T19797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4144'. [ 762.043491][T19797] geneve3: entered promiscuous mode [ 762.052082][T19797] geneve3: entered allmulticast mode [ 762.088433][ T9] usb 1-1: USB disconnect, device number 74 [ 762.127679][T19785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4139'. [ 762.154218][T19785] macsec0: entered allmulticast mode [ 762.159631][ T5732] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 762.168119][T19785] veth1_macvtap: entered allmulticast mode [ 762.194048][ T5732] usb 3-1: device descriptor read/8, error -71 [ 762.216908][T19804] FAULT_INJECTION: forcing a failure. [ 762.216908][T19804] name failslab, interval 1, probability 0, space 0, times 0 [ 762.233763][T19804] CPU: 0 UID: 0 PID: 19804 Comm: syz.1.4147 Tainted: G L syzkaller #0 PREEMPT(full) [ 762.233796][T19804] Tainted: [L]=SOFTLOCKUP [ 762.233804][T19804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 762.233819][T19804] Call Trace: [ 762.233826][T19804] [ 762.233834][T19804] dump_stack_lvl+0x100/0x190 [ 762.233861][T19804] should_fail_ex.cold+0x5/0xa [ 762.233885][T19804] ? kmem_cache_alloc_node_noprof+0x5b/0x6f0 [ 762.233918][T19804] should_failslab+0xc2/0x120 [ 762.233940][T19804] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 762.233969][T19804] ? __alloc_skb+0x140/0x710 [ 762.233992][T19804] ? __alloc_skb+0x5b7/0x710 [ 762.234015][T19804] __alloc_skb+0x140/0x710 [ 762.234036][T19804] ? __alloc_skb+0x5b7/0x710 [ 762.234057][T19804] ? __pfx___alloc_skb+0x10/0x10 [ 762.234078][T19804] ? netlink_autobind.isra.0+0x160/0x370 [ 762.234110][T19804] netlink_alloc_large_skb+0x69/0x150 [ 762.234130][T19804] netlink_sendmsg+0x680/0xda0 [ 762.234150][T19804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 762.234172][T19804] ____sys_sendmsg+0xa4d/0xbe0 [ 762.234196][T19804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 762.234216][T19804] ? __pfx_____sys_sendmsg+0x10/0x10 [ 762.234246][T19804] ? kstrtouint_from_user+0x13c/0x1d0 [ 762.234267][T19804] ___sys_sendmsg+0x190/0x1e0 [ 762.234286][T19804] ? __pfx____sys_sendmsg+0x10/0x10 [ 762.234305][T19804] ? get_pid_task+0x106/0x250 [ 762.234333][T19804] ? rcu_is_watching+0x12/0xc0 [ 762.234368][T19804] __sys_sendmsg+0x160/0x210 [ 762.234393][T19804] ? __pfx___sys_sendmsg+0x10/0x10 [ 762.234421][T19804] ? rcu_is_watching+0x12/0xc0 [ 762.234445][T19804] do_syscall_64+0x115/0x870 [ 762.234465][T19804] ? clear_bhb_loop+0x40/0x90 [ 762.234496][T19804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.234514][T19804] RIP: 0033:0x7fd47919ce59 [ 762.234531][T19804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.234551][T19804] RSP: 002b:00007fd4773f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 762.234572][T19804] RAX: ffffffffffffffda RBX: 00007fd479415fa0 RCX: 00007fd47919ce59 [ 762.234585][T19804] RDX: 0000000000000040 RSI: 0000200000000340 RDI: 0000000000000003 [ 762.234595][T19804] RBP: 00007fd4773f6090 R08: 0000000000000000 R09: 0000000000000000 [ 762.234608][T19804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.234620][T19804] R13: 00007fd479416038 R14: 00007fd479415fa0 R15: 00007ffc7a2cb088 [ 762.234642][T19804] [ 762.494157][ T5732] usb usb3-port1: unable to enumerate USB device [ 762.502298][ T30] audit: type=1400 audit(1781992043.101:1072): avc: denied { accept } for pid=19784 comm="syz.3.4139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 762.529226][ T5696] pwc: recv_control_msg error -32 req 02 val 2b00 [ 763.121479][ T5696] pwc: recv_control_msg error -71 req 02 val 2c00 [ 763.128266][ T5696] pwc: recv_control_msg error -71 req 04 val 1000 [ 763.138566][ T5696] pwc: recv_control_msg error -71 req 04 val 1300 [ 763.150746][ T5696] pwc: recv_control_msg error -71 req 04 val 1400 [ 763.163279][ T5696] pwc: recv_control_msg error -71 req 02 val 2000 [ 763.297195][ T5696] pwc: recv_control_msg error -71 req 02 val 2100 [ 763.380564][ T5696] pwc: recv_control_msg error -71 req 04 val 1500 [ 763.442266][ T5696] pwc: recv_control_msg error -71 req 02 val 2500 [ 763.488010][ T5696] pwc: recv_control_msg error -71 req 02 val 2400 [ 763.508516][T19821] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.4154'. [ 763.512359][T19823] qrtr: Invalid version 0 [ 763.523002][T19821] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.4154'. [ 763.524597][ T5696] pwc: recv_control_msg error -71 req 02 val 2600 [ 763.537237][T19821] netlink: 640 bytes leftover after parsing attributes in process `syz.4.4154'. [ 763.561090][T19826] loop3: detected capacity change from 0 to 7 [ 763.567682][ T5696] pwc: recv_control_msg error -71 req 02 val 2900 [ 763.584644][T19826] Dev loop3: unable to read RDB block 7 [ 763.592201][ T5696] pwc: recv_control_msg error -71 req 02 val 2800 [ 763.598927][T19826] loop3: unable to read partition table [ 763.605382][ T5696] pwc: recv_control_msg error -71 req 04 val 1100 [ 763.612174][T19826] loop3: partition table beyond EOD, truncated [ 763.622940][ T5696] pwc: recv_control_msg error -71 req 04 val 1200 [ 763.630961][T19826] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 763.643339][ T5696] pwc: Registered as video103. [ 763.662922][ T5696] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input41 [ 763.698042][ T5696] usb 4-1: USB disconnect, device number 109 [ 763.761980][T19837] qrtr: Invalid version 0 [ 763.904937][ T29] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 763.950121][T19845] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4164'. [ 764.502385][ T29] usb 3-1: device descriptor read/64, error -71 [ 764.813417][ T29] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 764.962215][ T29] usb 3-1: device descriptor read/64, error -71 [ 765.331659][T19866] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 765.953528][ T29] usb usb3-port1: attempt power cycle [ 766.301522][ T29] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 766.321934][ T29] usb 3-1: device descriptor read/8, error -71 [ 767.218090][T19889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 767.221091][ T30] audit: type=1400 audit(1781992047.814:1073): avc: denied { lock } for pid=19878 comm="syz.0.4174" path="socket:[80521]" dev="sockfs" ino=80521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 767.902306][T19889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 767.910270][T19889] batadv_slave_1: entered promiscuous mode [ 767.916487][T19889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 767.925673][T19889] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 767.936200][T19889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 767.948184][T19889] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 767.997668][T10447] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.004757][T10447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.112006][T19900] qrtr: Invalid version 0 [ 768.156309][T19909] geneve2: entered promiscuous mode [ 768.161792][T19909] geneve2: entered allmulticast mode [ 768.169539][T19902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4180'. [ 768.192434][T19902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4180'. [ 768.210585][T19911] netlink: 'syz.1.4186': attribute type 10 has an invalid length. [ 768.224182][ T30] audit: type=1400 audit(1781992048.834:1074): avc: denied { mounton } for pid=19899 comm="syz.4.4180" path="/256/file0" dev="tmpfs" ino=1368 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 768.248319][T19902] 9pnet_fd: Insufficient options for proto=fd [ 768.263621][T19911] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 768.302933][T19911] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 768.390591][ T5704] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 768.763756][ T5704] usb 4-1: unable to get BOS descriptor or descriptor too short [ 768.774540][ T5704] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 768.790100][ T5704] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 768.791093][T19929] syzkaller0: entered promiscuous mode [ 768.799461][ T5704] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 768.820922][ T5704] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 768.821487][T19929] syzkaller0: entered allmulticast mode [ 768.831312][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.842956][T19929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.845346][ T5704] usb 4-1: Product: syz [ 768.852085][T19929] tipc: Enabled bearer , priority 0 [ 768.856227][ T5704] usb 4-1: Manufacturer: syz [ 768.868401][ T5704] usb 4-1: SerialNumber: syz [ 768.869891][T19928] tipc: Resetting bearer [ 768.908846][T19928] tipc: Disabling bearer [ 769.334364][ T5704] usb 4-1: USB disconnect, device number 110 [ 769.465584][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 769.512019][T19948] netlink: 'syz.2.4198': attribute type 5 has an invalid length. [ 770.059616][ T5732] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 770.271860][ T5732] usb 1-1: Using ep0 maxpacket: 32 [ 770.410646][ T5732] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 770.439441][ T5732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.495887][ T5732] usb 1-1: config 0 descriptor?? [ 770.517258][ T5732] gspca_main: sq930x-2.14.0 probing 041e:403c [ 770.908649][ T29] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 771.049177][ T29] usb 5-1: device descriptor read/64, error -71 [ 771.111879][T19978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4206'. [ 771.122190][ T30] audit: type=1400 audit(1781992051.735:1075): avc: denied { append } for pid=19977 comm="syz.1.4206" name="event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 771.179121][ T5696] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 771.303912][ T29] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 771.324317][T19960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.338178][T19960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.350734][ T5696] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 771.368096][ T5696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.384476][ T5696] usb 3-1: config 0 descriptor?? [ 771.394817][T19985] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 771.403921][T19985] overlayfs: missing 'lowerdir' [ 771.449490][ T29] usb 5-1: device descriptor read/64, error -71 [ 771.559023][ T29] usb usb5-port1: attempt power cycle [ 771.594309][ T5696] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 771.601747][ T5732] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 771.619931][ T5696] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 771.635243][ T5696] [drm] Initialized udl on minor 2 [ 771.668847][ T5732] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 771.688932][ T5732] usb 1-1: USB disconnect, device number 75 [ 771.908881][ T29] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 771.929251][ T29] usb 5-1: device descriptor read/8, error -71 [ 772.064404][ T5696] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 772.074800][ T5696] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 772.083135][ T5732] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 772.097678][ T5696] usb 3-1: USB disconnect, device number 92 [ 772.103917][ T5732] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 772.127621][ T5732] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 772.168565][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 772.274758][ T29] usb 5-1: device descriptor read/8, error -71 [ 772.440270][ T29] usb usb5-port1: unable to enumerate USB device [ 772.832807][ T30] audit: type=1400 audit(1781992053.446:1076): avc: denied { getopt } for pid=20009 comm="syz.3.4214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 773.042082][T20016] loop3: detected capacity change from 0 to 7 [ 773.057951][T20016] Dev loop3: unable to read RDB block 7 [ 773.067750][T20016] loop3: unable to read partition table [ 773.076155][T20016] loop3: partition table beyond EOD, truncated [ 773.087353][T20016] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 773.201851][ T30] audit: type=1400 audit(1781992053.817:1077): avc: denied { block_suspend } for pid=20007 comm="syz.4.4213" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 773.954803][T20033] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4221'. [ 774.059185][T20043] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4222'. [ 774.104348][ T30] audit: type=1800 audit(1781992054.717:1078): pid=20041 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.4224" name="file0" dev="tmpfs" ino=1652 res=0 errno=0 [ 774.633012][T20061] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 775.185341][T20066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4231'. [ 775.213037][T20068] netlink: 5128 bytes leftover after parsing attributes in process `syz.3.4232'. [ 775.216022][T20066] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4231'. [ 775.222326][T20068] netlink: 5128 bytes leftover after parsing attributes in process `syz.3.4232'. [ 775.240613][T20068] netlink: 640 bytes leftover after parsing attributes in process `syz.3.4232'. [ 775.274411][T20070] syzkaller0: entered promiscuous mode [ 775.299595][T20070] syzkaller0: entered allmulticast mode [ 775.544963][T20088] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4241'. [ 775.719194][T20090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4240'. [ 775.744479][T20090] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4240'. [ 775.753900][T14465] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 775.768597][T20090] geneve2: entered promiscuous mode [ 775.776618][T20090] geneve2: entered allmulticast mode [ 775.937847][T14465] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 776.710194][T14465] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 776.718475][ T30] audit: type=1400 audit(1781992057.318:1079): avc: denied { lock } for pid=20103 comm="syz.4.4246" path="socket:[82178]" dev="sockfs" ino=82178 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 776.719246][T14465] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 776.748858][ T30] audit: type=1400 audit(1781992057.328:1080): avc: denied { lock } for pid=20103 comm="syz.4.4246" path="socket:[82173]" dev="sockfs" ino=82173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 776.781135][T14465] usb 2-1: config 220 has no interface number 2 [ 776.789478][T14465] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 776.802965][T14465] usb 2-1: config 220 interface 0 has no altsetting 0 [ 776.809874][T14465] usb 2-1: config 220 interface 76 has no altsetting 0 [ 776.816817][T14465] usb 2-1: config 220 interface 1 has no altsetting 0 [ 776.834710][T14465] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 776.848860][T14465] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.859413][T14465] usb 2-1: Product: syz [ 776.869650][T14465] usb 2-1: Manufacturer: syz [ 776.874290][T14465] usb 2-1: SerialNumber: syz [ 777.147792][T14465] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 777.167418][T14465] uvcvideo 2-1:220.0: No valid video chain found. [ 777.214561][T14465] usb 2-1: selecting invalid altsetting 0 [ 777.270360][T14465] usb 2-1: selecting invalid altsetting 0 [ 777.281950][T14465] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 777.304194][T14465] usb 2-1: USB disconnect, device number 114 [ 777.431721][T20124] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 777.455911][ T29] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 778.322111][ T30] audit: type=1400 audit(1781992058.939:1081): avc: denied { write } for pid=20114 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 778.346016][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 778.414550][ T29] usb 1-1: config 0 has no interfaces? [ 778.428807][ T29] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 778.440178][ T29] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 778.450813][ T29] usb 1-1: Product: syz [ 778.460183][ T29] usb 1-1: Manufacturer: syz [ 778.469982][ T29] usb 1-1: SerialNumber: syz [ 778.482958][ T29] usb 1-1: config 0 descriptor?? [ 778.543663][ T30] audit: type=1400 audit(1781992059.159:1082): avc: denied { write } for pid=20149 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 778.709125][ T30] audit: type=1400 audit(1781992059.329:1083): avc: denied { accept } for pid=20109 comm="syz.0.4248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 778.766942][ T29] usb 1-1: USB disconnect, device number 76 [ 779.121321][T20166] __nla_validate_parse: 4 callbacks suppressed [ 779.121344][T20166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4259'. [ 779.145277][ T30] audit: type=1400 audit(1781992059.760:1084): avc: denied { write } for pid=20155 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 779.189483][T20166] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4259'. [ 779.284786][ T30] audit: type=1400 audit(1781992059.900:1085): avc: denied { write } for pid=20168 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 779.634896][T14465] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 779.880375][T20181] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 779.918681][T14465] usb 3-1: unable to get BOS descriptor or descriptor too short [ 779.993509][T14465] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 780.036353][T14465] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 780.384674][T14465] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 780.595858][T14465] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 780.638990][T14465] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.658880][ T30] audit: type=1400 audit(1781992061.270:1086): avc: denied { recv } for pid=20198 comm="syz.3.4265" saddr=172.20.20.27 src=20001 daddr=172.20.20.27 dest=20001 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 780.709734][T14465] usb 3-1: Product: syz [ 780.729911][T14465] usb 3-1: Manufacturer: syz [ 780.948514][T14465] usb 3-1: SerialNumber: syz [ 780.953750][T20202] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 781.099380][ T30] audit: type=1400 audit(1781992061.710:1087): avc: denied { write } for pid=20184 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 781.216212][ T30] audit: type=1400 audit(1781992061.831:1088): avc: denied { write } for pid=20214 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 781.247367][T14465] usb 3-1: USB disconnect, device number 93 [ 781.330977][T17087] udevd[17087]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 781.560814][T20232] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4270'. [ 781.773484][T20236] geneve2: entered promiscuous mode [ 781.780691][T20236] geneve2: entered allmulticast mode [ 781.842484][T20241] loop3: detected capacity change from 0 to 7 [ 781.859764][T20241] Dev loop3: unable to read RDB block 7 [ 781.866513][T20241] loop3: unable to read partition table [ 781.873308][T20241] loop3: partition table beyond EOD, truncated [ 781.883330][T20241] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 781.914725][ T4975] Dev loop3: unable to read RDB block 7 [ 781.924689][ T4975] loop3: unable to read partition table [ 781.935061][ T30] audit: type=1400 audit(1781992062.551:1089): avc: denied { write } for pid=20220 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 781.947975][ T4975] loop3: partition table beyond EOD, truncated [ 782.315459][ T30] audit: type=1400 audit(1781992062.921:1090): avc: denied { write } for pid=20254 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 782.827581][T20281] xt_hashlimit: size too large, truncated to 1048576 [ 783.155944][T20298] geneve2: entered promiscuous mode [ 783.230721][T20298] geneve2: entered allmulticast mode [ 783.328652][T20303] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 783.346799][T20303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4286'. [ 783.355827][T20303] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4286'. [ 783.364983][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 783.365008][ T30] audit: type=1400 audit(1781992063.942:1092): avc: denied { mounton } for pid=20295 comm="syz.3.4286" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 783.599758][ T30] audit: type=1400 audit(1781992064.202:1093): avc: denied { write } for pid=20280 comm="syz.4.4283" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 783.680066][ T30] audit: type=1400 audit(1781992064.252:1094): avc: denied { write } for pid=20308 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 783.752132][T20316] loop3: detected capacity change from 0 to 7 [ 783.795908][T20316] Dev loop3: unable to read RDB block 7 [ 783.829753][T20316] loop3: unable to read partition table [ 783.863828][T20316] loop3: partition table beyond EOD, truncated [ 784.004847][T20316] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 784.090962][T20321] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.4293'. [ 784.123991][T20321] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.4293'. [ 784.147679][T20321] netlink: 640 bytes leftover after parsing attributes in process `syz.0.4293'. [ 784.622669][T20339] syz.0.4299 (20339): drop_caches: 2 [ 784.678779][T20339] syz.0.4299 (20339): drop_caches: 2 [ 784.785503][T20347] tun0: tun_chr_ioctl cmd 1074025675 [ 784.799066][T20347] tun0: persist enabled [ 784.817406][T20347] tun0: tun_chr_ioctl cmd 1074025675 [ 784.834655][T20347] tun0: persist enabled [ 784.929040][T20343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4299'. [ 785.208023][T20360] lo speed is unknown, defaulting to 1000 [ 786.232879][T20359] overlayfs: missing 'lowerdir' [ 786.335602][ T30] audit: type=1326 audit(1781992066.673:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20354 comm="syz.1.4304" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47919ce59 code=0x7ffc0000 [ 786.410657][T20359] 9p: Bad value for 'rfdno' [ 786.445595][ T30] audit: type=1326 audit(1781992066.683:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20354 comm="syz.1.4304" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47919ce59 code=0x7ffc0000 [ 786.514496][ T30] audit: type=1326 audit(1781992066.843:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20354 comm="syz.1.4304" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fd47919ce59 code=0x7ffc0000 [ 786.544116][ T30] audit: type=1326 audit(1781992066.843:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20354 comm="syz.1.4304" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47919ce59 code=0x7ffc0000 [ 786.573291][ T30] audit: type=1326 audit(1781992066.843:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20354 comm="syz.1.4304" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47919ce59 code=0x7ffc0000 [ 787.308857][ T30] audit: type=1326 audit(1781992066.843:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20354 comm="syz.1.4304" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd47919ce59 code=0x7ffc0000 [ 787.336342][ T30] audit: type=1326 audit(1781992066.843:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20354 comm="syz.1.4304" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47919ce59 code=0x7ffc0000 [ 787.402787][T20377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4309'. [ 787.745302][ T9] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 787.880868][ T9] usb 2-1: device descriptor read/64, error -71 [ 787.985029][T20402] 9pnet_fd: Insufficient options for proto=fd [ 788.099672][T20408] loop3: detected capacity change from 0 to 7 [ 788.115562][T20408] Dev loop3: unable to read RDB block 7 [ 788.123159][T20408] loop3: unable to read partition table [ 788.132008][ T9] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 788.142538][T20412] syzkaller0: entered promiscuous mode [ 788.148078][T20412] syzkaller0: entered allmulticast mode [ 788.151147][T20408] loop3: partition table beyond EOD, truncated [ 788.155628][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.170605][T20412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.173243][T20408] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 788.182114][T20412] tipc: Enabled bearer , priority 0 [ 788.218832][T20410] tipc: Resetting bearer [ 788.256200][T20410] tipc: Disabling bearer [ 788.290519][ T9] usb 2-1: device descriptor read/64, error -71 [ 788.674217][ T9] usb usb2-port1: attempt power cycle [ 789.207301][T20430] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 789.249999][ T9] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 789.950587][ T9] usb 2-1: device descriptor read/8, error -71 [ 789.981508][T20437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4329'. [ 789.990862][T20437] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4329'. [ 790.004125][T20437] geneve2: entered promiscuous mode [ 790.009347][T20437] geneve2: entered allmulticast mode [ 790.156536][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 790.156643][ T30] audit: type=1400 audit(1781992070.715:1133): avc: denied { bind } for pid=20443 comm="syz.0.4331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 790.194906][ T9] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 790.203678][ T30] audit: type=1400 audit(1781992070.715:1134): avc: denied { listen } for pid=20443 comm="syz.0.4331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 790.359476][ T5696] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 790.549466][ T30] audit: type=1400 audit(1781992070.905:1135): avc: denied { write } for pid=20434 comm="syz.2.4328" name="file0" dev="tmpfs" ino=1752 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 790.573083][ T30] audit: type=1400 audit(1781992070.905:1136): avc: denied { open } for pid=20434 comm="syz.2.4328" path="/329/file0" dev="tmpfs" ino=1752 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 790.655853][T20452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4333'. [ 790.886754][ T30] audit: type=1400 audit(1781992070.905:1137): avc: denied { ioctl } for pid=20434 comm="syz.2.4328" path="/329/file0" dev="tmpfs" ino=1752 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 791.041217][ T5696] usb 1-1: unable to get BOS descriptor or descriptor too short [ 791.065712][ T5696] usb 1-1: not running at top speed; connect to a high speed hub [ 791.089060][ T9] usb 2-1: device not accepting address 118, error -71 [ 791.105911][ T9] usb usb2-port1: unable to enumerate USB device [ 791.123481][ T5696] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 234, changing to 4 [ 791.166577][ T5696] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 791.397659][ T5696] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 791.408438][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.415464][T20461] loop3: detected capacity change from 0 to 7 [ 791.416766][ T5696] usb 1-1: Product: syz [ 791.427895][T20459] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4335'. [ 791.437448][ T5696] usb 1-1: Manufacturer: syz [ 791.467991][ T5696] usb 1-1: SerialNumber: syz [ 791.477988][T20461] Dev loop3: unable to read RDB block 7 [ 791.502779][T20461] loop3: unable to read partition table [ 791.528979][T20461] loop3: partition table beyond EOD, truncated [ 791.542261][T20461] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 791.788879][ T29] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 791.943988][T20466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4338'. [ 791.960587][ T29] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 791.987137][ T29] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 792.029918][ T29] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 792.041635][T20466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4338'. [ 792.067145][ T29] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 792.498377][T20466] nbd: device at index 64 is going down [ 792.520959][ T29] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 792.533414][T20477] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 792.550344][ T29] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 792.580824][ T29] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 792.581453][ T5800] udevd[5800]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 792.610435][ T29] usb 2-1: Product: syz [ 792.624938][ T29] usb 2-1: Manufacturer: syz [ 792.635644][ T5696] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 792.636743][ T29] cdc_wdm 2-1:1.0: skipping garbage [ 792.652269][ T29] cdc_wdm 2-1:1.0: skipping garbage [ 792.652858][ T5696] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 792.658604][ T29] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 792.672193][ T5696] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 792.673107][ T29] cdc_wdm 2-1:1.0: Unknown control protocol [ 792.680431][ T5696] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 792.709314][ T5696] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 792.742544][ T5696] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 792.764460][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 792.780634][ T5696] usb 1-1: USB disconnect, device number 77 [ 792.788927][ T9] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 792.951269][T20497] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4345'. [ 793.003600][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 793.052539][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 793.145864][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 793.155090][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 793.175239][ T9] usb 3-1: SerialNumber: syz [ 793.183914][ T9] cdc_ether 3-1:1.0: missing cdc ether descriptor [ 793.290175][T20494] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4345'. [ 793.299191][T20494] nbd: nbd64 already in use [ 794.170609][T20509] lo speed is unknown, defaulting to 1000 [ 794.322683][T20515] fuse: Unknown parameter 'ÿ' [ 794.430223][ T29] usb 3-1: USB disconnect, device number 94 [ 794.443927][ C0] cdc_wdm 2-1:1.0: unknown notification 255 received: index 65522 len 65535 [ 794.447422][ T5704] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 794.787815][T14465] usb 2-1: USB disconnect, device number 119 [ 794.817246][ T5704] usb 4-1: device descriptor read/64, error -71 [ 795.058416][ T5704] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 795.217840][ T5704] usb 4-1: device descriptor read/64, error -71 [ 795.377756][ T5704] usb usb4-port1: attempt power cycle [ 795.749056][ T5704] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 795.920435][T20525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4351'. [ 795.921926][ T5704] usb 4-1: device descriptor read/8, error -71 [ 796.030494][ T30] audit: type=1326 audit(1781992076.658:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20532 comm="syz.3.4354" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5be459ce59 code=0x0 [ 796.088889][T20535] netlink: 'syz.1.4356': attribute type 1 has an invalid length. [ 796.190325][T20540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4356'. [ 796.207780][T20541] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4357'. [ 796.250125][ T5732] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 796.254593][T20535] 8021q: adding VLAN 0 to HW filter on device bond3 [ 796.383327][T20540] bond3: (slave geneve4): making interface the new active one [ 796.428830][ T5732] usb 1-1: config 0 has no interfaces? [ 796.436881][ T5732] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 796.449470][T20540] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 796.451674][ T5732] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 796.473045][ T5732] usb 1-1: Manufacturer: syz [ 796.482955][T20545] ntfs3(nullb0): Primary boot signature is not NTFS. [ 796.487837][ T5732] usb 1-1: config 0 descriptor?? [ 796.498829][T20545] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 796.535479][ T30] audit: type=1400 audit(1781992077.158:1139): avc: denied { ioctl } for pid=20546 comm="syz.1.4360" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 796.564117][ T30] audit: type=1400 audit(1781992077.158:1140): avc: denied { ioctl } for pid=20546 comm="syz.1.4360" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 796.610301][T20553] netlink: 'syz.1.4361': attribute type 10 has an invalid length. [ 796.656776][ T30] audit: type=1400 audit(1781992077.288:1141): avc: denied { module_load } for pid=20544 comm="syz.2.4359" path=2F6D656D66643A2D42D54E49C56A9A08202864656C6574656429 dev="tmpfs" ino=274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 796.656981][T20558] Invalid ELF header len 16 [ 796.739714][ T9] usb 1-1: USB disconnect, device number 78 [ 796.915956][ T30] audit: type=1400 audit(1781992077.538:1142): avc: denied { append } for pid=20565 comm="syz.3.4365" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 796.943800][T20566] loop6: detected capacity change from 0 to 2640 [ 797.006505][T20566] loop6: detected capacity change from 2640 to 524288000 [ 797.013621][ T29] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 797.166069][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 797.174205][ T29] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 797.183495][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.191596][ T29] usb 2-1: Product: syz [ 797.195877][ T29] usb 2-1: Manufacturer: syz [ 797.200564][ T29] usb 2-1: SerialNumber: syz [ 797.206278][ T29] usb 2-1: config 0 descriptor?? [ 797.349245][ T5704] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 797.543487][ T5704] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.604073][ T5704] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 797.626571][T20557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.632044][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.652050][T20557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.675312][ T5704] usb 4-1: config 0 descriptor?? [ 797.695274][ T5704] pwc: Askey VC010 type 2 USB webcam detected. [ 797.723415][T20557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.744300][T20557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.767498][ T29] usb_8dev 2-1:0.0 can0: sending command message failed [ 797.774716][ T29] usb_8dev 2-1:0.0 can0: can't get firmware version [ 797.827397][ T29] usb_8dev 2-1:0.0: probe with driver usb_8dev failed with error -22 [ 797.838138][ T29] usb 2-1: USB disconnect, device number 120 [ 797.917725][ T30] audit: type=1400 audit(1781992078.549:1143): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 797.941601][ T30] audit: type=1400 audit(1781992078.549:1144): avc: denied { sendto } for pid=23 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 797.945780][T14465] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 798.094566][ T5704] pwc: recv_control_msg error -32 req 02 val 2b00 [ 798.101572][ T5704] pwc: recv_control_msg error -32 req 02 val 2700 [ 798.108537][ T5704] pwc: recv_control_msg error -32 req 02 val 2c00 [ 798.115417][ T5704] pwc: recv_control_msg error -32 req 04 val 1000 [ 798.122006][T14465] usb 3-1: Using ep0 maxpacket: 8 [ 798.127728][ T5704] pwc: recv_control_msg error -32 req 04 val 1300 [ 798.134880][ T5704] pwc: recv_control_msg error -32 req 04 val 1400 [ 798.143410][T14465] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 798.151654][T14465] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 798.161722][T14465] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 798.171595][ T5704] pwc: recv_control_msg error -71 req 02 val 2000 [ 798.178071][T14465] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 798.189006][T14465] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 798.202101][ T5704] pwc: recv_control_msg error -71 req 02 val 2100 [ 798.208595][T14465] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 798.217977][T14465] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.226072][ T5704] pwc: recv_control_msg error -71 req 04 val 1500 [ 798.233586][ T5704] pwc: recv_control_msg error -71 req 02 val 2500 [ 798.240421][ T5704] pwc: recv_control_msg error -71 req 02 val 2400 [ 798.248016][ T5704] pwc: recv_control_msg error -71 req 02 val 2600 [ 798.254687][ T5704] pwc: recv_control_msg error -71 req 02 val 2900 [ 798.261533][ T5704] pwc: recv_control_msg error -71 req 02 val 2800 [ 798.268591][ T5704] pwc: recv_control_msg error -71 req 04 val 1100 [ 798.275263][ T5704] pwc: recv_control_msg error -71 req 04 val 1200 [ 798.282613][ T5704] pwc: Registered as video103. [ 798.288473][ T5704] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input42 [ 798.323456][ T5704] usb 4-1: USB disconnect, device number 115 [ 798.362843][T20599] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4374'. [ 798.383300][T20599] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4374'. [ 798.494057][T20605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4376'. [ 798.549767][T14465] usb 3-1: usb_control_msg returned -32 [ 798.556698][T14465] usbtmc 3-1:16.0: can't read capabilities [ 799.193634][T20608] usbtmc 3-1:16.0: stb usb_control_msg returned -32 [ 799.209604][T14465] usb 3-1: USB disconnect, device number 95 [ 799.460035][T20624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4380'. [ 799.939614][T20637] FAULT_INJECTION: forcing a failure. [ 799.939614][T20637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 799.952913][T20637] CPU: 0 UID: 0 PID: 20637 Comm: syz.0.4385 Tainted: G L syzkaller #0 PREEMPT(full) [ 799.952947][T20637] Tainted: [L]=SOFTLOCKUP [ 799.952955][T20637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 799.952967][T20637] Call Trace: [ 799.952975][T20637] [ 799.952983][T20637] dump_stack_lvl+0x100/0x190 [ 799.953011][T20637] should_fail_ex.cold+0x5/0xa [ 799.953037][T20637] _copy_from_user+0x2e/0xd0 [ 799.953063][T20637] __sys_bpf+0x2f5/0x4e80 [ 799.953103][T20637] ? kstrtouint_from_user+0x60/0x1d0 [ 799.953122][T20637] ? __pfx___sys_bpf+0x10/0x10 [ 799.953148][T20637] ? rcu_is_watching+0x12/0xc0 [ 799.953174][T20637] ? get_pid_task+0xfc/0x250 [ 799.953200][T20637] ? rcu_is_watching+0x12/0xc0 [ 799.953225][T20637] ? get_pid_task+0xfc/0x250 [ 799.953249][T20637] ? lock_release+0x24d/0x310 [ 799.953273][T20637] ? ksys_write+0x12a/0x250 [ 799.953297][T20637] ? rcu_is_watching+0x12/0xc0 [ 799.953325][T20637] ? preempt_count_add+0x76/0x150 [ 799.953347][T20637] ? ksys_write+0x190/0x250 [ 799.953371][T20637] ? rcu_is_watching+0x12/0xc0 [ 799.953397][T20637] ? ksys_write+0x190/0x250 [ 799.953420][T20637] ? lock_release+0x24d/0x310 [ 799.953450][T20637] ? fput+0x79/0x100 [ 799.953470][T20637] ? __x64_sys_bpf+0xce/0x140 [ 799.953498][T20637] __x64_sys_bpf+0xce/0x140 [ 799.953526][T20637] ? trace_irq_enable.constprop.0+0x122/0x160 [ 799.953552][T20637] do_syscall_64+0x115/0x870 [ 799.953573][T20637] ? clear_bhb_loop+0x40/0x90 [ 799.953596][T20637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.953617][T20637] RIP: 0033:0x7fe6d279ce59 [ 799.953634][T20637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.953655][T20637] RSP: 002b:00007fe6d363f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 799.953675][T20637] RAX: ffffffffffffffda RBX: 00007fe6d2a15fa0 RCX: 00007fe6d279ce59 [ 799.953690][T20637] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 799.953703][T20637] RBP: 00007fe6d363f090 R08: 0000000000000000 R09: 0000000000000000 [ 799.953716][T20637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 799.953728][T20637] R13: 00007fe6d2a16038 R14: 00007fe6d2a15fa0 R15: 00007fffbf076e38 [ 799.953749][T20637] [ 800.241943][T20642] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4387'. [ 800.294745][T20646] netlink: 'syz.3.4389': attribute type 10 has an invalid length. [ 800.336157][T20646] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4389'. [ 801.111211][T20663] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.4395'. [ 801.123178][T20663] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.4395'. [ 801.133014][T20663] netlink: 640 bytes leftover after parsing attributes in process `syz.2.4395'. [ 801.138534][T20662] loop3: detected capacity change from 0 to 7 [ 801.159624][T20662] Dev loop3: unable to read RDB block 7 [ 801.172188][T20662] loop3: unable to read partition table [ 801.180018][T20662] loop3: partition table beyond EOD, truncated [ 801.187005][T20662] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 801.306063][T20668] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 802.444770][T20688] program syz.1.4404 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 802.456154][T20688] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4404'. [ 802.467209][T20688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=20688 comm=syz.1.4404 [ 802.597311][ T5732] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 802.653332][ T9] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 802.701875][T20690] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4405'. [ 802.829603][ T5732] usb 3-1: Using ep0 maxpacket: 32 [ 802.868940][ T5732] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 802.879821][ T5732] usb 3-1: can't read configurations, error -61 [ 802.904902][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 802.914370][ T9] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 802.931073][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 802.941749][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 802.948571][T20698] netlink: 'syz.3.4408': attribute type 10 has an invalid length. [ 802.957153][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 802.961450][T20698] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4408'. [ 802.973800][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 803.023378][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 803.044025][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.051391][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.085582][ T5732] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 803.133275][ T5696] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 803.156563][ T9] usb 1-1: Product: syz [ 803.189249][ T9] usb 1-1: Manufacturer: syz [ 803.264691][ T5732] usb 3-1: Using ep0 maxpacket: 32 [ 803.279191][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 803.316424][ T5732] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 803.327587][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 803.336475][ T5732] usb 3-1: can't read configurations, error -61 [ 803.344288][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 803.352117][ T5732] usb usb3-port1: attempt power cycle [ 803.357776][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 803.368934][ T5696] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 803.379761][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.399977][ T5696] usb 2-1: Product: syz [ 803.407786][ T5696] usb 2-1: Manufacturer: syz [ 803.414881][ T5696] usb 2-1: SerialNumber: syz [ 803.422768][ T5696] usb 2-1: config 0 descriptor?? [ 803.690792][ T5696] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 803.713471][ T5732] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 803.742961][ T5696] usb 2-1: USB disconnect, device number 121 [ 803.759224][T14465] usb 1-1: USB disconnect, device number 79 [ 803.775170][ T5732] usb 3-1: Using ep0 maxpacket: 32 [ 803.785687][ T5732] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 803.796598][ T5732] usb 3-1: can't read configurations, error -61 [ 803.846708][T20716] qrtr: Invalid version 0 [ 803.867867][ T30] audit: type=1400 audit(1781992084.492:1145): avc: denied { shutdown } for pid=20711 comm="syz.3.4413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 803.962649][ T5732] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 804.002603][T20725] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 804.122680][ T5704] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 804.262791][ T5704] usb 4-1: device descriptor read/64, error -71 [ 804.522702][ T5704] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 804.694749][ T5704] usb 4-1: device descriptor read/64, error -71 [ 804.863406][ T30] audit: type=1400 audit(1781992085.482:1146): avc: denied { ioctl } for pid=20731 comm="syz.0.4418" path="socket:[85376]" dev="sockfs" ino=85376 ioctlcmd=0x9360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 804.892963][ T5704] usb usb4-port1: attempt power cycle [ 804.893101][ T5732] usb 3-1: Using ep0 maxpacket: 32 [ 804.932633][ T5732] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 804.942382][ T5732] usb 3-1: can't read configurations, error -61 [ 804.948984][ T5732] usb usb3-port1: unable to enumerate USB device [ 805.111298][ T30] audit: type=1400 audit(1781992085.732:1147): avc: denied { accept } for pid=20740 comm="syz.1.4421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 805.167453][ T30] audit: type=1400 audit(1781992085.763:1148): avc: denied { read } for pid=20740 comm="syz.1.4421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 805.252129][ T5704] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 805.262070][ T7099] usb 1-1: new low-speed USB device number 80 using dummy_hcd [ 805.334508][ T5704] usb 4-1: device descriptor read/8, error -71 [ 805.463745][ T7099] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 805.484580][T20758] loop3: detected capacity change from 0 to 7 [ 805.493631][ T7099] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 805.508881][T20758] Dev loop3: unable to read RDB block 7 [ 805.518064][T20758] loop3: unable to read partition table [ 805.524762][ T7099] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 805.534491][T20758] loop3: partition table beyond EOD, truncated [ 805.541066][ T7099] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.549607][T20758] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 805.592279][ T5704] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 805.607132][T20737] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 805.645032][ T5704] usb 4-1: device descriptor read/8, error -71 [ 805.772915][ T5732] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 805.794819][ T5704] usb usb4-port1: unable to enumerate USB device [ 805.899102][ T7099] usb 1-1: string descriptor 0 read error: -71 [ 805.916828][ T7099] hub 1-1:32.0: USB hub found [ 805.925182][ T7099] hub 1-1:32.0: config failed, can't read hub descriptor (err -22) [ 805.974598][ T5732] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 806.002538][ T7099] usb 1-1: USB disconnect, device number 80 [ 806.009308][ T5732] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 806.211372][ T5732] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 806.244437][ T5732] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 806.289563][ T5732] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 806.402746][ T5732] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 806.419683][ T5732] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 806.429910][ T5732] usb 5-1: Product: syz [ 806.434946][ T5732] usb 5-1: Manufacturer: syz [ 806.587834][T20784] overlayfs: upper fs does not support file handles, falling back to index=off. [ 806.753479][ T30] audit: type=1400 audit(1781992087.133:1149): avc: denied { create } for pid=20779 comm="syz.2.4435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 806.779625][ T5732] cdc_wdm 5-1:1.0: skipping garbage [ 806.816520][ T5732] cdc_wdm 5-1:1.0: skipping garbage [ 806.828872][ T5732] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 806.835550][ T5732] cdc_wdm 5-1:1.0: Unknown control protocol [ 806.847733][T20788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4437'. [ 806.864277][T20788] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4437'. [ 808.005011][ T5732] usb 5-1: USB disconnect, device number 3 [ 808.228528][T20814] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4442'. [ 808.334893][T20815] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4444'. [ 808.584703][T20812] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4442'. [ 809.245804][ T5704] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 809.461272][T20833] netlink: 'syz.4.4448': attribute type 1 has an invalid length. [ 809.520732][ T5704] usb 3-1: device descriptor read/64, error -71 [ 809.746560][T20836] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4448'. [ 809.783714][T20833] 8021q: adding VLAN 0 to HW filter on device bond2 [ 809.867195][T20845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4453'. [ 809.876225][ T5704] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 809.896572][T20833] bond2: (slave dummy0): making interface the new active one [ 809.914859][T20833] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 809.948569][T20851] qrtr: Invalid version 0 [ 810.020045][ T5704] usb 3-1: device descriptor read/64, error -71 [ 810.150294][ T5704] usb usb3-port1: attempt power cycle [ 810.205500][ T30] audit: type=1400 audit(1781992090.835:1150): avc: denied { getopt } for pid=20860 comm="syz.0.4458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 810.309629][ T9] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 810.383856][T20881] syzkaller0: entered promiscuous mode [ 810.390317][T20881] syzkaller0: entered allmulticast mode [ 810.402084][T17037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.412105][T20881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.420460][T20881] tipc: Enabled bearer , priority 0 [ 810.431106][T20880] tipc: Resetting bearer [ 810.443993][T20880] tipc: Disabling bearer [ 810.454492][T20883] kAFS: unable to lookup cell 'ÿ' [ 810.460883][T20883] kAFS: unable to lookup cell '(,c¾Ì' [ 810.479388][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 810.486249][ T9] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 810.496494][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.504777][ T5704] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 810.508123][ T9] usb 4-1: config 0 descriptor?? [ 810.527411][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 810.540960][ T5704] usb 3-1: device descriptor read/8, error -71 [ 810.562828][T20885] loop3: detected capacity change from 0 to 7 [ 810.578380][T20885] Dev loop3: unable to read RDB block 7 [ 810.590518][T20885] loop3: unable to read partition table [ 810.602465][T20885] loop3: partition table beyond EOD, truncated [ 810.615292][T20885] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 810.719782][ T5696] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 810.799240][ T5704] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 810.839771][ T5704] usb 3-1: device descriptor read/8, error -71 [ 810.901761][ T5696] usb 1-1: Using ep0 maxpacket: 16 [ 810.933995][ T5696] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 810.944585][ T5696] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 810.966250][ T5696] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 810.976354][ T5696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 810.976382][ T5704] usb usb3-port1: unable to enumerate USB device [ 810.992458][ T5696] usb 1-1: SerialNumber: syz [ 811.061519][ T5696] usb 1-1: 0:2 : does not exist [ 811.148272][T20892] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.155647][T20892] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.214094][T20897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4469'. [ 811.334583][T20892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 811.381247][T20892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 811.430370][T20901] xt_NFQUEUE: number of queues (1025) out of range (got 66559) [ 811.521570][T20903] loop3: detected capacity change from 0 to 7 [ 811.529362][T20903] Dev loop3: unable to read RDB block 7 [ 811.535115][T20903] loop3: unable to read partition table [ 811.542086][T20903] loop3: partition table beyond EOD, truncated [ 811.549794][T20903] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 811.552032][T20892] veth1_macvtap: left allmulticast mode [ 811.592167][T20892] macsec0: left allmulticast mode [ 811.652338][T20892] geneve2: left promiscuous mode [ 811.663474][T20892] geneve2: left allmulticast mode [ 811.677024][T17038] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.686787][T17038] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.707866][T17038] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.718017][T17038] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.889281][ T5732] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 811.987110][ T30] audit: type=1400 audit(1781992092.616:1151): avc: denied { nlmsg_tty_audit } for pid=20910 comm="syz.1.4475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 812.010946][ T30] audit: type=1400 audit(1781992092.616:1152): avc: denied { audit_write } for pid=20910 comm="syz.1.4475" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 812.038947][ T30] audit: type=1107 audit(1781992092.616:1153): pid=20910 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 812.143773][ T5732] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 812.307212][ T5732] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 812.323635][ T5732] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 812.345865][ T5732] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 812.358656][ T5732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.366780][ T5732] usb 5-1: Product: syz [ 812.371345][ T5732] usb 5-1: Manufacturer: syz [ 812.376040][ T5732] usb 5-1: SerialNumber: syz [ 812.387172][ T5732] cdc_mbim 5-1:1.0: skipping garbage [ 812.625354][T20905] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 812.641704][T20905] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 813.108133][ T9] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 813.255221][T20905] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 813.262765][T20905] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 813.270740][ T5732] cdc_mbim 5-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 813.278458][ T5804] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 813.286258][ T9] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 813.295459][ T5732] cdc_mbim 5-1:1.0: setting rx_max = 2048 [ 813.301281][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.311204][ T9] usb 3-1: config 0 descriptor?? [ 813.318405][ T9] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 813.359953][ T5696] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 813.371329][ T5696] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 813.387654][ T5696] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 813.401257][ T5696] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 813.416661][T20935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4482'. [ 813.429125][ T5696] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 813.459149][ T5804] usb 2-1: config index 0 descriptor too short (expected 1572, got 36) [ 813.466707][T20937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20937 comm=syz.0.4483 [ 813.477893][ T5804] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 813.491142][T20937] netlink: 'syz.0.4483': attribute type 1 has an invalid length. [ 813.507944][ T5696] usb 1-1: USB disconnect, device number 81 [ 813.514196][ T803] usb 4-1: USB disconnect, device number 120 [ 813.525506][T20937] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 813.526994][ T9] gspca_sunplus: reg_w_riv err -71 [ 813.542061][ T9] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 813.550523][ T5804] usb 2-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 813.561933][ T5804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.571526][ T5732] cdc_mbim 5-1:1.0: setting tx_max = 60 [ 813.590258][ T5804] usb 2-1: Product: syz [ 813.596120][ T5804] usb 2-1: Manufacturer: syz [ 813.605428][ T9] usb 3-1: USB disconnect, device number 104 [ 813.613730][ T5732] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 813.626962][ T5804] usb 2-1: SerialNumber: syz [ 813.671518][ T5732] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 813.859606][ T5804] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input43 [ 813.872077][ T5732] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 813.885964][T20949] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4484'. [ 813.897188][T20949] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4484'. [ 813.906237][T20949] nbd: nbd64 already in use [ 813.931744][ T4960] bcm5974 2-1:1.0: could not read from device [ 813.939783][ T5732] usb 5-1: USB disconnect, device number 4 [ 813.949680][ T4960] bcm5974 2-1:1.0: could not read from device [ 813.965392][ T5804] usb 2-1: USB disconnect, device number 122 [ 813.974669][ T4960] bcm5974 2-1:1.0: could not read from device [ 814.100803][ T7099] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 814.157692][T14465] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 814.287691][ T7099] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.329021][T14465] usb 4-1: device descriptor read/64, error -71 [ 814.354475][ T7099] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 814.381498][ T5804] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 814.387421][ T7099] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 814.402231][ T7099] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.415744][ T7099] usb 1-1: config 0 descriptor?? [ 814.568503][ T5804] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 814.578825][ T5804] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 814.588641][ T5804] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 814.598823][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.613537][ T5804] usb 2-1: config 0 descriptor?? [ 814.901270][T14465] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 814.913417][ T30] audit: type=1400 audit(1781992095.547:1154): avc: denied { create } for pid=20972 comm="syz.4.4492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 814.936797][ T30] audit: type=1400 audit(1781992095.567:1155): avc: denied { sys_admin } for pid=20972 comm="syz.4.4492" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 815.012910][T20978] lo speed is unknown, defaulting to 1000 [ 815.057076][T14465] usb 4-1: device descriptor read/64, error -71 [ 815.270868][T20982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=20982 comm=syz.4.4493 [ 815.296036][T20982] lo speed is unknown, defaulting to 1000 [ 815.337405][T14465] usb usb4-port1: attempt power cycle [ 815.565280][ T7099] hid-led 0003:27B8:01ED.000F: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0 [ 815.701210][ T7099] hid-led 0003:27B8:01ED.000F: ThingM blink(1) v1 initialized [ 815.756736][T14465] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 815.788591][T14465] usb 4-1: device descriptor read/8, error -71 [ 815.834458][ T5732] usb 1-1: USB disconnect, device number 82 [ 815.983088][T20993] syzkaller0: entered promiscuous mode [ 815.991338][T20993] syzkaller0: entered allmulticast mode [ 816.000540][T20993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.008910][T20993] tipc: Enabled bearer , priority 0 [ 816.015853][T17038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.027709][T20992] tipc: Resetting bearer [ 816.046143][T20992] tipc: Disabling bearer [ 816.052236][T14465] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 816.087449][T14465] usb 4-1: device descriptor read/8, error -71 [ 816.113376][T20996] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 816.209457][T14465] usb usb4-port1: unable to enumerate USB device [ 816.664202][ T30] audit: type=1400 audit(1781992097.298:1156): avc: denied { execstack } for pid=20997 comm="syz.2.4497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 817.544024][ T5804] Bluetooth: Can't get version to change to load ram patch err [ 817.551757][ T5804] Bluetooth: Loading sysconfig file failed [ 817.557701][ T5804] ath3k 2-1:0.0: probe with driver ath3k failed with error -71 [ 817.568531][ T5804] usb 2-1: USB disconnect, device number 123 [ 817.611039][T21003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4498'. [ 818.277889][T21019] lo speed is unknown, defaulting to 1000 [ 818.936649][ T30] audit: type=1326 audit(1781992098.799:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21005 comm="syz.1.4501" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47919ce59 code=0x7ffc0000 [ 818.978465][ T30] audit: type=1326 audit(1781992098.799:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21005 comm="syz.1.4501" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47919ce59 code=0x7ffc0000 [ 819.006644][ T30] audit: type=1326 audit(1781992098.799:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21005 comm="syz.1.4501" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd47919ce59 code=0x7ffc0000 [ 819.033632][ T30] audit: type=1326 audit(1781992098.799:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21005 comm="syz.1.4501" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47919ce59 code=0x7ffc0000 [ 819.062048][ T30] audit: type=1326 audit(1781992098.799:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21005 comm="syz.1.4501" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47919ce59 code=0x7ffc0000 [ 819.115179][ T30] audit: type=1326 audit(1781992098.799:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21005 comm="syz.1.4501" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd47919ce59 code=0x7ffc0000 [ 819.143288][ T30] audit: type=1326 audit(1781992098.799:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21005 comm="syz.1.4501" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47919ce59 code=0x7ffc0000 [ 819.185157][ T30] audit: type=1326 audit(1781992098.799:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21005 comm="syz.1.4501" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47919ce59 code=0x7ffc0000 [ 819.252635][ T30] audit: type=1326 audit(1781992098.809:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21005 comm="syz.1.4501" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd47919ce59 code=0x7ffc0000 [ 819.291643][T21032] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=21032 comm=syz.3.4508 [ 819.314636][T21032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4508'. [ 819.356304][T21033] netlink: 'syz.2.4504': attribute type 7 has an invalid length. [ 819.369911][T21033] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4504'. [ 819.604793][T14465] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 819.884754][ T5804] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 820.278020][ T5804] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 820.355878][ T5804] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 820.467199][ T5804] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 820.518690][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 820.561579][ T5804] usb 4-1: SerialNumber: syz [ 820.635338][ T5804] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 820.672509][ T5804] usb-storage 4-1:1.0: USB Mass Storage device detected [ 820.683456][ T5804] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 820.693722][ T5804] scsi host1: usb-storage 4-1:1.0 [ 820.695528][T14465] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 820.714345][T14465] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.723613][T14465] usb 2-1: config 0 descriptor?? [ 820.732566][T14465] cp210x 2-1:0.0: cp210x converter detected [ 821.276265][ T803] usb 4-1: USB disconnect, device number 125 [ 821.304001][ T5804] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 821.455692][ T5804] usb 5-1: Using ep0 maxpacket: 16 [ 821.463195][ T5804] usb 5-1: config 3 has an invalid interface number: 155 but max is 0 [ 821.471762][ T5804] usb 5-1: config 3 has an invalid interface association descriptor of length 3, skipping [ 821.482954][ T5804] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 821.499063][ T5804] usb 5-1: config 3 has no interface number 0 [ 821.506006][ T5804] usb 5-1: config 3 interface 155 has no altsetting 0 [ 821.518914][ T5804] usb 5-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=e5.4c [ 821.528226][ T5804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.536565][ T5804] usb 5-1: Product: syz [ 821.540946][ T5804] usb 5-1: Manufacturer: syz [ 821.546351][ T5804] usb 5-1: SerialNumber: syz [ 821.649168][T14465] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 822.994503][T14465] usb 2-1: cp210x converter now attached to ttyUSB0 [ 823.037416][T21057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.055811][T21057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.079624][T21057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4514'. [ 823.090024][T21057] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4514'. [ 823.113014][ T5804] uvcvideo 5-1:3.155: probe with driver uvcvideo failed with error -22 [ 823.125764][ T5804] usb 5-1: USB disconnect, device number 5 [ 824.224994][ T803] usb 2-1: USB disconnect, device number 124 [ 824.233023][ T803] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 824.273775][ T803] cp210x 2-1:0.0: device disconnected [ 824.282445][ T5804] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 824.387701][T21093] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 825.081528][ T5804] usb 3-1: unable to get BOS descriptor or descriptor too short [ 825.092674][ T5804] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 825.101469][ T5804] usb 3-1: can't read configurations, error -71 [ 825.530841][T21112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4529'. [ 826.049008][T21124] hfs: can't find a HFS filesystem on dev nullb0 [ 826.194698][T21132] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 826.381579][ T803] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 826.986279][ T803] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 826.995340][ T803] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 827.006882][ T803] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 827.018105][ T803] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 827.032945][ T803] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 827.042745][ T803] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 827.051168][ T803] usb 4-1: Product: syz [ 827.056346][ T803] usb 4-1: Manufacturer: syz [ 827.066419][ T803] cdc_wdm 4-1:1.0: skipping garbage [ 827.072295][ T803] cdc_wdm 4-1:1.0: skipping garbage [ 827.081452][ T803] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 827.087429][ T803] cdc_wdm 4-1:1.0: Unknown control protocol [ 827.311403][T21144] loop3: detected capacity change from 0 to 7 [ 827.330995][T21144] Dev loop3: unable to read RDB block 7 [ 827.349712][T21144] loop3: unable to read partition table [ 827.358305][T21144] loop3: partition table beyond EOD, truncated [ 827.370458][T21140] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4536'. [ 827.387363][T21144] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 828.640151][T21172] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.4547'. [ 828.672941][T21172] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.4547'. [ 828.702881][T21172] netlink: 640 bytes leftover after parsing attributes in process `syz.2.4547'. [ 829.456245][ T24] usb 4-1: USB disconnect, device number 126 [ 829.710414][T21188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4551'. [ 829.724923][T21188] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4551'. [ 829.813311][T21192] misc userio: No port type given on /dev/userio [ 829.851719][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 829.851734][ T30] audit: type=1400 audit(1781992110.495:1168): avc: denied { getopt } for pid=21190 comm="syz.3.4552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 830.840688][ T803] usb 4-1: new low-speed USB device number 127 using dummy_hcd [ 830.865705][T21222] geneve2: entered promiscuous mode [ 830.871479][T21222] geneve2: entered allmulticast mode [ 831.598973][ T24] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 831.641152][ T803] usb 4-1: string descriptor 0 read error: -22 [ 831.655024][ T803] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 831.672734][ T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.694125][ T803] usb 4-1: config 0 descriptor?? [ 831.701765][ T803] usbtest 4-1:0.0: FX2 device [ 831.717528][ T803] usbtest 4-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 831.813323][T21239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4568'. [ 831.831427][ T24] usb 5-1: New USB device found, idVendor=413c, idProduct=81d7, bcdDevice=ed.a6 [ 831.868215][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.911541][ T24] usb 5-1: Product: syz [ 831.923113][T21214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.951841][ T24] usb 5-1: Manufacturer: syz [ 831.966356][ T24] usb 5-1: SerialNumber: syz [ 831.971279][T21214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.991018][T21247] veth0_to_bond: entered allmulticast mode [ 832.018147][ T803] usb 4-1: USB disconnect, device number 127 [ 832.245940][ T24] usb 5-1: USB disconnect, device number 6 [ 832.450429][T21255] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.4574'. [ 832.474331][T21255] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.4574'. [ 832.494689][T21255] netlink: 640 bytes leftover after parsing attributes in process `syz.1.4574'. [ 833.355544][T21269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4579'. [ 833.757605][T21281] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4580'. [ 833.775313][T21281] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4580'. [ 833.784299][T21281] nbd: device at index 64 is going down [ 834.772385][ T30] audit: type=1400 audit(1781992115.407:1169): avc: denied { ioctl } for pid=21283 comm="syz.3.4582" path="socket:[89115]" dev="sockfs" ino=89115 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 834.867170][ T29] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 834.889173][ T5800] udevd[5800]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 834.987253][ T5804] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 835.111889][ T29] usb 2-1: device descriptor read/64, error -71 [ 835.190459][T21304] xt_hashlimit: size too large, truncated to 1048576 [ 835.336016][ T5804] usb 5-1: Using ep0 maxpacket: 8 [ 835.450125][ T29] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 835.510584][T21310] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4588'. [ 835.527280][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 835.540053][ T5804] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 835.554763][ T5804] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 835.582987][ T5804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.595473][ T5804] usb 5-1: Product: syz [ 835.600544][ T5804] usb 5-1: Manufacturer: syz [ 835.605317][ T5804] usb 5-1: SerialNumber: syz [ 835.615188][T21314] overlay: Unknown parameter 'smackfstransmute' [ 835.619622][ T5804] usb 5-1: config 0 descriptor?? [ 835.669700][ T29] usb 2-1: device descriptor read/64, error -71 [ 835.814492][ T29] usb usb2-port1: attempt power cycle [ 835.929313][T21322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4592'. [ 835.946763][T21322] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4592'. [ 835.960576][T21322] geneve2: entered promiscuous mode [ 835.967465][T21322] geneve2: entered allmulticast mode [ 835.977801][T17038] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.987718][T17038] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.998279][T17038] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.020281][T17038] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.063845][ T9] usb 5-1: USB disconnect, device number 7 [ 836.156530][ T29] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 836.186877][ T29] usb 2-1: device descriptor read/8, error -71 [ 836.312142][T21177] Process accounting resumed [ 836.351105][ T5804] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 836.438565][ T29] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 836.498072][ T5804] usb 1-1: device descriptor read/64, error -71 [ 836.666415][ T29] usb 2-1: device not accepting address 2, error -71 [ 836.743856][ T29] usb usb2-port1: unable to enumerate USB device [ 836.776188][ T5804] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 836.976091][ T5804] usb 1-1: device descriptor read/64, error -71 [ 837.026318][T21351] __nla_validate_parse: 3 callbacks suppressed [ 837.026336][T21351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4603'. [ 837.061845][T21351] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4603'. [ 837.108481][ T5804] usb usb1-port1: attempt power cycle [ 837.455856][ T5804] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 837.490630][T21365] loop6: detected capacity change from 0 to 2640 [ 837.509506][ T5804] usb 1-1: device descriptor read/8, error -71 [ 837.545887][T21366] loop6: detected capacity change from 2640 to 524288000 [ 837.553112][T21365] buffer_io_error: 11 callbacks suppressed [ 837.553131][T21365] Buffer I/O error on dev loop6, logical block 0, async page read [ 837.595466][T21365] Buffer I/O error on dev loop6, logical block 0, async page read [ 837.616002][T21365] Buffer I/O error on dev loop6, logical block 0, async page read [ 837.629253][T21365] Buffer I/O error on dev loop6, logical block 0, async page read [ 837.646033][T21365] Buffer I/O error on dev loop6, logical block 0, async page read [ 837.665834][T21365] Buffer I/O error on dev loop6, logical block 0, async page read [ 837.679512][T21365] Buffer I/O error on dev loop6, logical block 0, async page read [ 837.695815][T21365] Buffer I/O error on dev loop6, logical block 0, async page read [ 837.718325][T21365] ldm_validate_partition_table(): Disk read failed. [ 837.738844][T21365] Buffer I/O error on dev loop6, logical block 0, async page read [ 837.757955][ T5804] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 837.773849][T21365] Buffer I/O error on dev loop6, logical block 0, async page read [ 837.810046][T21365] Dev loop6: unable to read RDB block 0 [ 837.828639][ T5804] usb 1-1: device descriptor read/8, error -71 [ 837.843089][T21365] loop6: unable to read partition table [ 837.871009][T21365] loop_reread_partitions: partition scan of loop6 (ir¡c‡’ úÒVUŸX¯ÃG¨½›˜ñZtM<IÆ i8NL í á·ùWû@©àQ6ÒÝ%ž…û¥¡Úè) failed (rc=-5) [ 837.946179][ T5804] usb usb1-port1: unable to enumerate USB device [ 838.377867][T21390] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4615'. [ 838.565570][T21389] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4615'. [ 838.574537][T21389] nbd: device at index 64 is going down [ 838.667951][ T7412] udevd[7412]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 838.684172][ T5800] udevd[5800]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 838.710298][T21397] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.4616'. [ 838.720353][T21397] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.4616'. [ 838.730080][T21397] netlink: 640 bytes leftover after parsing attributes in process `syz.4.4616'. [ 838.788587][ T30] audit: type=1400 audit(1781992119.439:1170): avc: denied { cmd } for pid=21398 comm="iou-wrk-21399" path="/dev/ublk-control" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 838.841621][T21402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4618'. [ 838.845212][ T7099] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 838.892873][ T30] audit: type=1400 audit(1781992119.439:1171): avc: denied { map } for pid=21398 comm="syz.4.4617" path="/dev/ublkc0" dev="devtmpfs" ino=4267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 839.015354][ T7099] usb 4-1: device descriptor read/64, error -71 [ 839.465086][ T7099] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 839.664755][ T7099] usb 4-1: device descriptor read/64, error -71 [ 839.796385][ T7099] usb usb4-port1: attempt power cycle [ 840.125930][T21435] syzkaller0: entered promiscuous mode [ 840.149380][T21435] syzkaller0: entered allmulticast mode [ 840.167467][T21445] tmpfs: Bad value for 'huge' [ 840.181338][T21435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.214739][ T7099] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 840.224500][T21435] tipc: Enabled bearer , priority 0 [ 840.314415][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.332243][ T7099] usb 4-1: device descriptor read/8, error -71 [ 840.454357][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.497320][T21451] 9pnet_virtio: no channels available for device syz [ 840.504340][T21432] tipc: Resetting bearer [ 840.539207][T21432] tipc: Disabling bearer [ 840.624272][ T7099] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 840.686255][ T7099] usb 4-1: device descriptor read/8, error -71 [ 840.825439][ T7099] usb usb4-port1: unable to enumerate USB device [ 840.984079][ T5704] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 841.064076][ T9] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 841.196017][ T5704] usb 3-1: Using ep0 maxpacket: 32 [ 841.227170][ T5704] usb 3-1: config 0 has an invalid descriptor of length 105, skipping remainder of the config [ 841.274504][ T5704] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 841.322659][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.322673][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 841.323475][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 841.398082][ T5704] usb 3-1: Product: syz [ 841.398242][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 841.466928][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 841.553215][ T5704] usb 3-1: Manufacturer: syz [ 841.554006][ T9] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 841.619289][ T5704] usb 3-1: SerialNumber: syz [ 841.626377][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.634669][ T9] usb 1-1: Product: syz [ 841.646096][ T5704] usb 3-1: config 0 descriptor?? [ 841.652624][ T9] usb 1-1: Manufacturer: syz [ 841.659175][ T9] usb 1-1: SerialNumber: syz [ 841.743734][ T30] audit: type=1400 audit(1781992122.361:1172): avc: denied { connect } for pid=21464 comm="syz.1.4637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 841.816413][ T5704] cdc_ether 3-1:0.0: Descriptor too short [ 841.841136][ T5704] usb 3-1: unsupported MDLM descriptors [ 841.954494][T21480] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4641'. [ 842.107863][T21489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4642'. [ 842.333186][T21496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4645'. [ 842.607217][ T7099] usb 3-1: USB disconnect, device number 107 [ 842.663604][T21501] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.4646'. [ 842.712227][T21501] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.4646'. [ 842.754960][T21501] netlink: 640 bytes leftover after parsing attributes in process `syz.1.4646'. [ 843.063644][ T7099] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 843.222989][ T7099] usb 3-1: device descriptor read/64, error -71 [ 843.339757][T21449] syz.0.4630 (21449): drop_caches: 2 [ 843.619787][ T9] usb 1-1: USB disconnect, device number 87 [ 843.652539][T21523] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4655'. [ 843.676996][ T30] audit: type=1400 audit(1781992124.312:1173): avc: denied { execute } for pid=21519 comm="syz.4.4654" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=89727 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 843.720621][ T7099] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 843.756971][ T5931] udevd[5931]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 843.831116][T21526] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4655'. [ 843.840100][T21526] nbd: nbd64 already in use [ 843.882784][ T7099] usb 3-1: device descriptor read/64, error -71 [ 843.928348][ T5800] udevd[5800]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 843.973040][T14465] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 843.992814][ T7099] usb usb3-port1: attempt power cycle [ 844.053813][ T5704] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 844.144225][T14465] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 844.155213][T14465] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 844.166493][T14465] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 844.178387][T14465] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 844.178426][T14465] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 844.179897][T14465] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 844.179928][T14465] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 844.179953][T14465] usb 2-1: Product: syz [ 844.179971][T14465] usb 2-1: Manufacturer: syz [ 844.195392][T14465] cdc_wdm 2-1:1.0: skipping garbage [ 844.195416][T14465] cdc_wdm 2-1:1.0: skipping garbage [ 844.197616][T14465] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 844.197640][T14465] cdc_wdm 2-1:1.0: Unknown control protocol [ 844.212537][ T5704] usb 4-1: device descriptor read/64, error -71 [ 844.362399][ T7099] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 844.406924][ T7099] usb 3-1: device descriptor read/8, error -71 [ 844.417746][ C0] cdc_wdm 2-1:1.0: unknown notification 255 received: index 65522 len 65535 [ 844.656449][ T9] usb 2-1: USB disconnect, device number 3 [ 844.852209][ T5704] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 844.922165][ T7099] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 844.942678][ T7099] usb 3-1: device descriptor read/8, error -71 [ 844.982156][ T5704] usb 4-1: device descriptor read/64, error -71 [ 845.052650][ T7099] usb usb3-port1: unable to enumerate USB device [ 845.092495][ T5704] usb usb4-port1: attempt power cycle [ 845.326395][T21556] futex_wake_op: syz.4.4662 tries to shift op by -1; fix this program [ 845.377299][T21558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4663'. [ 845.390896][T21558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4663'. [ 845.671739][ T5704] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 846.114275][ T5704] usb 4-1: device descriptor read/8, error -71 [ 846.307556][T21578] netlink: 'syz.4.4671': attribute type 4 has an invalid length. [ 846.318100][ T9] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 846.352989][ T5732] lo speed is unknown, defaulting to 1000 [ 846.359860][ T5732] syz0: Port: 1 Link DOWN [ 846.421440][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 846.486245][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 846.511685][ T9] usb 1-1: config 0 has no interface number 0 [ 846.531877][ T9] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 846.551126][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.569989][ T9] usb 1-1: Product: syz [ 846.575845][ T9] usb 1-1: Manufacturer: syz [ 846.581272][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 846.585597][ T9] usb 1-1: SerialNumber: syz [ 846.598672][ T9] usb 1-1: config 0 descriptor?? [ 846.608995][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 846.638119][ T5704] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 846.650300][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 846.675164][ T24] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 846.687966][ T24] usb 2-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 846.697702][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.706135][ T24] usb 2-1: Product: syz [ 846.710506][ T5704] usb 4-1: Using ep0 maxpacket: 32 [ 846.716554][ T24] usb 2-1: Manufacturer: syz [ 846.721965][ T24] usb 2-1: SerialNumber: syz [ 846.726988][ T5704] usb 4-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 846.737166][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.749484][ T5704] usb 4-1: config 0 descriptor?? [ 846.757637][ T5704] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 846.768435][ T5704] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 846.797553][ T5704] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 846.809015][ T5704] usb 4-1: media controller created [ 846.823636][ T5704] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 846.827523][ T9] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 846.900977][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 847.032128][T21565] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN NOPTI [ 847.044228][T21565] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 847.052651][T21565] CPU: 0 UID: 0 PID: 21565 Comm: syz.0.4666 Tainted: G L syzkaller #0 PREEMPT(full) [ 847.063595][T21565] Tainted: [L]=SOFTLOCKUP [ 847.067913][T21565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 847.077964][T21565] RIP: 0010:__mutex_lock+0x15d/0x1bd0 [ 847.083343][T21565] Code: 08 84 d2 0f 85 67 14 00 00 44 8b 3d 7d 5b 87 0f 45 85 ff 75 29 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 5e 14 00 00 48 3b 5b 58 0f 85 8b 07 00 00 bf 01 [ 847.102958][T21565] RSP: 0018:ffffc90005c074b0 EFLAGS: 00010206 [ 847.109033][T21565] RAX: dffffc0000000000 RBX: 0000000000000068 RCX: 0000000000000000 [ 847.116989][T21565] RDX: 0000000000000018 RSI: 000000000000026f RDI: 00000000000000c0 [ 847.124959][T21565] RBP: ffffc90005c07620 R08: ffffffff881064f5 R09: 0000000000000000 [ 847.132926][T21565] R10: ffffc90005c07638 R11: 0000000000000000 R12: 0000000000000000 [ 847.140896][T21565] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 847.148948][T21565] FS: 00007fe6d363f6c0(0000) GS:ffff88812431a000(0000) knlGS:0000000000000000 [ 847.157880][T21565] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 847.164453][T21565] CR2: 0000001b2e819ff8 CR3: 00000000343d2000 CR4: 00000000003526f0 [ 847.172428][T21565] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 847.180399][T21565] DR3: 000000000000000b DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 847.188364][T21565] Call Trace: [ 847.191631][T21565] [ 847.194545][T21565] ? dvb_usbv2_generic_write+0x25/0x50 [ 847.200003][T21565] ? __mutex_lock+0x26d/0x1bd0 [ 847.204754][T21565] ? mxl111sf_ctrl_msg+0xb8/0x2b0 [ 847.209775][T21565] ? __pfx___mutex_lock+0x10/0x10 [ 847.214787][T21565] ? __pfx___mutex_lock+0x10/0x10 [ 847.219802][T21565] ? irqentry_exit+0x24d/0xa00 [ 847.224550][T21565] ? dvb_usbv2_generic_write+0x25/0x50 [ 847.230002][T21565] dvb_usbv2_generic_write+0x25/0x50 [ 847.235286][T21565] mxl111sf_ctrl_msg+0x179/0x2b0 [ 847.240215][T21565] mxl111sf_write_reg+0x96/0x130 [ 847.245140][T21565] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 847.250674][T21565] mxl111sf_i2c_start+0x6e/0x220 [ 847.255607][T21565] mxl111sf_i2c_xfer+0x178e/0x3240 [ 847.260712][T21565] ? preempt_schedule_irq+0x7b/0x90 [ 847.265903][T21565] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 847.271351][T21565] ? rcu_is_watching+0x12/0xc0 [ 847.276102][T21565] ? trace_irq_enable.constprop.0+0x122/0x160 [ 847.282155][T21565] ? irqentry_exit+0x24d/0xa00 [ 847.286907][T21565] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 847.292358][T21565] __i2c_transfer+0x5d9/0x1740 [ 847.297105][T21565] ? __pfx___i2c_transfer+0x10/0x10 [ 847.302292][T21565] i2c_smbus_xfer_emulated+0x235/0x1110 [ 847.307823][T21565] ? preempt_schedule_irq+0x1/0x90 [ 847.312930][T21565] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 847.318896][T21565] ? rcu_is_watching+0x12/0xc0 [ 847.323739][T21565] ? irqentry_exit+0x24d/0xa00 [ 847.328494][T21565] __i2c_smbus_xfer+0x619/0x1100 [ 847.333419][T21565] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 847.338778][T21565] i2c_smbus_xfer+0x185/0x3c0 [ 847.343440][T21565] i2cdev_ioctl_smbus+0x233/0xac0 [ 847.348458][T21565] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 847.354001][T21565] i2cdev_ioctl+0x3cf/0x830 [ 847.358493][T21565] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 847.363507][T21565] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 847.368524][T21565] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 847.373537][T21565] __x64_sys_ioctl+0x18e/0x210 [ 847.378290][T21565] do_syscall_64+0x115/0x870 [ 847.382894][T21565] ? clear_bhb_loop+0x40/0x90 [ 847.387559][T21565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.393433][T21565] RIP: 0033:0x7fe6d279ce59 [ 847.397828][T21565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.417435][T21565] RSP: 002b:00007fe6d363f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 847.425831][T21565] RAX: ffffffffffffffda RBX: 00007fe6d2a15fa0 RCX: 00007fe6d279ce59 [ 847.433784][T21565] RDX: 0000200000000140 RSI: 0000000000000720 RDI: 0000000000000004 [ 847.441822][T21565] RBP: 00007fe6d2832e6f R08: 0000000000000000 R09: 0000000000000000 [ 847.449774][T21565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 847.457734][T21565] R13: 00007fe6d2a16038 R14: 00007fe6d2a15fa0 R15: 00007fffbf076e38 [ 847.465703][T21565] [ 847.468709][T21565] Modules linked in: [ 847.474353][T21565] ---[ end trace 0000000000000000 ]--- [ 847.480205][T21573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.491675][T21573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.493205][ T5704] usb 4-1: selecting invalid altsetting 1 [ 847.503101][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 847.505439][ T5704] set interface failed [ 847.521666][T21598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.534482][T21598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.556539][ T30] audit: type=1400 audit(1781992128.204:1174): avc: denied { read } for pid=4957 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 847.573240][T21565] RIP: 0010:__mutex_lock+0x15d/0x1bd0 [ 847.590915][ T9] usb 1-1: media controller created [ 847.703934][T21565] Code: 08 84 d2 0f 85 67 14 00 00 44 8b 3d 7d 5b 87 0f 45 85 ff 75 29 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 5e 14 00 00 48 3b 5b 58 0f 85 8b 07 00 00 bf 01 [ 847.709182][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 847.744590][ T30] audit: type=1400 audit(1781992128.204:1175): avc: denied { search } for pid=4957 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 847.768452][ T24] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 847.815484][ T24] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 847.826084][T21565] RSP: 0018:ffffc90005c074b0 EFLAGS: 00010206 [ 847.833644][T21565] RAX: dffffc0000000000 RBX: 0000000000000068 RCX: 0000000000000000 [ 847.846490][ T24] usb 2-1: USB disconnect, device number 4 [ 847.852712][ T30] audit: type=1400 audit(1781992128.204:1176): avc: denied { write search } for pid=4957 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 847.875078][T21565] RDX: 0000000000000018 RSI: 000000000000026f RDI: 00000000000000c0 [ 847.890318][T21565] RBP: ffffc90005c07620 R08: ffffffff881064f5 R09: 0000000000000000 [ 847.898866][T21565] R10: ffffc90005c07638 R11: 0000000000000000 R12: 0000000000000000 [ 847.907945][ T30] audit: type=1400 audit(1781992128.204:1177): avc: denied { add_name } for pid=4957 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 847.928989][T21565] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 847.937164][T21565] FS: 00007fe6d363f6c0(0000) GS:ffff88812441a000(0000) knlGS:0000000000000000 [ 847.946538][T21565] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 847.953401][ T30] audit: type=1400 audit(1781992128.204:1178): avc: denied { create } for pid=4957 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 847.974358][T21565] CR2: 000000110c453431 CR3: 00000000343d2000 CR4: 00000000003526f0 [ 847.982650][T21565] DR0: ffffffffffffffff DR1: 00000000000001f7 DR2: 00000000ffffffff [ 847.992489][ T30] audit: type=1400 audit(1781992128.204:1179): avc: denied { append open } for pid=4957 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 848.018423][T21565] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 848.027001][T21565] Kernel panic - not syncing: Fatal exception [ 848.033294][T21565] Kernel Offset: disabled [ 848.037609][T21565] Rebooting in 86400 seconds..