last executing test programs: 9.402403745s ago: executing program 3 (id=7309): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$XFS_IOC_FSGEOMETRY_V1(0xffffffffffffffff, 0x806c5864, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$peekuser(0x3, r3, 0x4) syz_usb_control_io$uac1(r2, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAW(r6, 0x5407, &(0x7f00000000c0)={0x6, 0x9, 0x2, 0x1fe, 0x15}) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000000)=0x8001) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120150020a3a5d40f905ffff9f61010203010902120001bd00100209047fc700ff02c106"], &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x105200, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x2, 0x4, 0x6d}, 0x7a) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x64}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000406010100000000080000000700000d0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000a00)=ANY=[@ANYBLOB="200e0c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000880)={0x18, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0}) rt_sigqueueinfo(r3, 0x6, &(0x7f0000000140)={0x3d, 0x6, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0x2194362b35d5d3c3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2001}, 0x0) 6.572216868s ago: executing program 4 (id=7332): socketpair(0x1d, 0x2, 0x6, &(0x7f0000000180)) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040)=0x7, 0x4) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'wrr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0xfffffffe}, {@private=0xa010101, 0x4908, 0x10000, 0x1}}, 0x44) r2 = socket$inet(0x2, 0x1, 0x6) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000001240)={@loopback, 0x3, 0x0, 0x2, 0xa, 0x9, 0x1}, &(0x7f0000001280)=0x20) sendmsg$sock(r2, &(0x7f0000000940)={&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4, 0x1, {0xa, 0x4e20, 0x4, @loopback, 0x200}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000280)="7b8655c6b09a46fcd6e6ea7b2c8caff740cea82ce0fa692072d686062e92aa8e574a8f55cedfa4459be4ffb413db3a245909773b62014e366176542926d74ba5bd0ccdf41142f40dbda2573c5c5ac761d6ed04374e4128fb", 0x58}, {&(0x7f0000000300)="55d0c914ccbdc27b7be574c15b98a1c76709839250a7668f9ab44ecbb941a9b7f4eaa846c1a1b1940275d3e0531b79c42ed04a060236a641e179564cd2a1773aa5ed52d2f0e5e0b171d6fb2a919dc0c7ebe58828", 0x54}, {&(0x7f0000000680)="55e3de85279ae278ac93c3544ea7dd8a885e7dc8874060a322e1681f1f343cff6f7b327ba10a615d5b5c71682090642f7a89ace843020fbaa6f0d18466842c85527bfc0fc52b4d4a3c7034a7c06e1c4cc5fb6c605e99b8aa5305b769717b16add3af36518c89e4253d8ef6715d8c7ab3c687fcf5465d8799900b99253ca2e90b175b51b344151ceb7664fbac8db1f5e48f81cb31", 0x94}, {&(0x7f0000000500)="914155c4d68e9a0a38df0a645c664aeb0b29ae2c63829da9257f08d1e178", 0x1e}, {&(0x7f0000000540)='G0b', 0x3}], 0x5, &(0x7f0000000580)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x53c}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xa}}], 0x60}, 0x0) connect(r2, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) 6.435472903s ago: executing program 4 (id=7334): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mremap(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r3, r4, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup(r5, 0x0, 0x200002, 0x0) write$FUSE_NOTIFY_POLL(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) syz_usb_connect(0x3, 0x0, 0x0, 0x0) 6.209985695s ago: executing program 3 (id=7337): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000300)={0x7, &(0x7f00000002c0)=[{0x0, 0x9, 0x2, 0x9}, {0x2, 0x4, 0x2, 0x4}, {0x2, 0x6, 0x8, 0xffffffff}, {0x6, 0xb, 0xc, 0x7f6}, {0xff80, 0x7, 0xe5, 0x4}, {0x7, 0x7, 0x5, 0x5}, {0x8, 0x5, 0x0, 0x2}]}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c5", 0x29}], 0x1, 0x0, 0x0, 0x5865}, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/test/cgroup.procs\x00', 0x1202, 0x2) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000280)={0x3, 0x0, [{0x1, 0x0, 0x0, 0xe2a, 0x3, 0x0, 0xfffff000}, {0x80000001, 0x7a93, 0x4, 0x2, 0x81, 0xdde, 0x8}, {0x40000000, 0x4, 0x6, 0x0, 0x3, 0x6, 0x5}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x161142, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB="3801000010000105fefff7ff00010000e0000001000000000000000000000000fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) write$6lowpan_enable(r3, &(0x7f0000000300)='0', 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0x4, 0x112000}) 6.013338446s ago: executing program 3 (id=7340): openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$inet6(0xa, 0x80803, 0x84) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, r0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x88002, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x68, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "e3de3d7b4cd07ec3ee777de774fc7987cca41989ec53f953f615edc21c4335093450b134"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r4, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 5.874010652s ago: executing program 3 (id=7342): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902120001"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x402) pread64(r1, &(0x7f0000000500)=""/199, 0xc7, 0xff6) recvmsg$unix(0xffffffffffffffff, 0x0, 0x80) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x2800, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="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") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xfffb, 0xffff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r3 = syz_open_pts(r2, 0x200) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0xff) 5.240038659s ago: executing program 4 (id=7345): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) syz_usb_connect(0x2, 0x4b, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = userfaultfd(0x80001) mremap(&(0x7f00002f9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000162000/0x2000)=nil) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 4.582060827s ago: executing program 4 (id=7346): r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r0, 0x0) r1 = io_uring_setup(0x6f1e, &(0x7f0000000240)={0x0, 0x9071, 0x2000, 0x0, 0x100025}) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000002140)={0xa, 0x0, 0x0, '\x00', 0x4}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="b7000000000000009c000000000000009500000000000000a9171809f8dcf159569d5475991f7de1a0d0c119cfcf6b98741c23fb7f8d3002ec85db75af955427e91496087a51a0a78f269a9e216a0d0177c4fe3552396a180330807a5b6e8c79aa92038c78d1f16c1323f0e0c8d45c641a21757847cb22230e4321cc3581e40c62c4defee8cffe359cfeef7f58fffdb48647d28ae810f6d22d20271e9e88e94aa6982bf48356652b08e2fbd404e41e0058aae0478fbe542b648421d1b4486a542a7d478fbe6b5e000000293853f9c68e235184b7ad5b6c4fe70ec8320500db0db7fda3da6171a05509ffecef2cb9802d4f36c9a1ce46d3b355fec188ccfc2f0fc89e164561fb06ee9a0153981a47b5de9edd3536d5534f9a699f73b2c9341d2d05043748ce1f4577ed76cdf5b3c697089daa4abda69a8c0c992404610a6be9e103c972459065dec0488e85a6a0418fc87dd8019ef7bb4ef4fa6ee08d81797570578f2e8198e687012f25a69a90e7515e35f8abbddfa96c3f0485f01f0e9e144a2bd31c1b594c50de7c9efd826f1e19b7bd89ca4052b1985287bd13957a48467e0eeddf564d175bf4340885b63976df609806c3b2a3667539dfd66a7400000000003be6026e60205f761ce85cdf75cdb95ca5d32b5bf87eed4184d49f8f48181ef2419efe82ebb18ee55772d562b3b49551714e805a5211a3f4e8e703c03e23b2074bc573dbb66d59e269b722637c4a2efb5241cae2f14774609ad91d66724c438455dc4fcf0b4c8fc235f6c190b4c82bb2556d1fbcd4468369e98e900c743162ce2c7e60610acf0c8e4ba94a7e7127c7de0e6c35acecee1b8434fdca4579f9ebc6a515f7d910b466eb583fb0a7e65fbecb2b8ee0e9da33afb88aa5da8da3a5e0e58fcb48de6f165826b046a8951a47e040bd419d0efa0f54e8e3694085a7bde6f6494968d8200000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0xe74, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0x2}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r6, 0x2, &(0x7f0000000140)={0xa, 0x1, 0x0, 0x5000, 0xffffffffffffffff}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000040)={0x2, r7}) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f0000000100)=0x5) listen(r5, 0x20) shutdown(r5, 0x0) r10 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r10, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) 3.636100821s ago: executing program 4 (id=7347): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$XFS_IOC_FSGEOMETRY_V1(0xffffffffffffffff, 0x806c5864, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$peekuser(0x3, r3, 0x4) syz_usb_control_io$uac1(r2, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAW(r6, 0x5407, &(0x7f00000000c0)={0x6, 0x9, 0x2, 0x1fe, 0x15}) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000000)=0x8001) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120150020a3a5d40f905ffff9f61010203010902120001bd00100209047fc700ff02c106"], &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x105200, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x2, 0x4, 0x6d}, 0x7a) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x64}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000406010100000000080000000700000d0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000a00)=ANY=[@ANYBLOB="200e0c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000880)={0x18, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0}) rt_sigqueueinfo(r3, 0x6, &(0x7f0000000140)={0x3d, 0x6, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0x2194362b35d5d3c3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2001}, 0x0) 3.596776107s ago: executing program 1 (id=7349): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) listen(0xffffffffffffffff, 0x10040) syz_emit_ethernet(0x0, 0x0, 0x0) gettid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x24}}, 0x0) 3.505208936s ago: executing program 1 (id=7350): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000300)={0x7, &(0x7f00000002c0)=[{0x0, 0x9, 0x2, 0x9}, {0x2, 0x4, 0x2, 0x4}, {0x2, 0x6, 0x8, 0xffffffff}, {0x6, 0xb, 0xc, 0x7f6}, {0xff80, 0x7, 0xe5, 0x4}, {0x7, 0x7, 0x5, 0x5}, {0x8, 0x5, 0x0, 0x2}]}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c5", 0x29}], 0x1, 0x0, 0x0, 0x5865}, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/test/cgroup.procs\x00', 0x1202, 0x2) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000280)={0x3, 0x0, [{0x1, 0x0, 0x0, 0xe2a, 0x3, 0x0, 0xfffff000}, {0x80000001, 0x7a93, 0x4, 0x2, 0x81, 0xdde, 0x8}, {0x40000000, 0x4, 0x6, 0x0, 0x3, 0x6, 0x5}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x161142, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB="3801000010000105fefff7ff00010000e0000001000000000000000000000000fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) write$6lowpan_enable(r3, &(0x7f0000000300)='0', 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0x4, 0x112000}) 3.361681557s ago: executing program 1 (id=7351): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000002c659855c67eb6120d6700000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a0108000000000000000001ffffffffffffffff797a30000000000900030073797a320000000014000000060a0104000000000000000001"], 0x88}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000600000000060015000100000018001680140001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)=@updpolicy={0x114, 0x19, 0x1, 0x70bd28, 0x10, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00', 0x5e22, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x8000}, {0x2, 0x9, 0x80}, 0x4, 0x400, 0x0, 0x0, 0x1, 0x3}, [@algo_comp={0x5c, 0x3, {{'deflate\x00'}, 0xa0, "32d2c3aec5120bbbb9293a6dd82ea7d486e00882"}}]}, 0x114}}, 0x80c5) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001080)={0x1, &(0x7f00000010c0)=[{0x1, 0x8, 0x7, 0xa1}]}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x1}], 0x1) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000080)="01", 0x1) r3 = signalfd4(r0, &(0x7f0000001100)={[0x3]}, 0x8, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000001140)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r5, &(0x7f00000024c0)=[{&(0x7f0000000080)=""/4081, 0xff1}, {0x0}], 0x2, 0x3f, 0x5) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x42838, 0x23}}, 0x20}, 0x1, 0x0, 0x0, 0x8090}, 0x4048004) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000440)={0x5, 0x1, 0x7}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000080)) 3.261436305s ago: executing program 1 (id=7352): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0xffffffffffffff9c, 0x0) 3.070333544s ago: executing program 1 (id=7354): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4010, r0, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x70) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.728259517s ago: executing program 3 (id=7356): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) r1 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr(r1, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r0, &(0x7f0000000400)=[{0xb7, 0xfc, 0x6, 0x6, @time={0x8, 0x4ae7}, {0xfb, 0x6}, {0x2, 0x6}, @time=@tick=0x7}, {0x9, 0xa, 0x8a, 0x2e, @time={0x2, 0x7fffffff}, {0x8, 0xf2}, {0xa, 0x5}, @raw8={"45e360307e8cdff6c4dc4759"}}, {0x4f, 0xf7, 0x2, 0x6, @tick=0x4, {0xa, 0x87}, {0x8, 0xfa}, @connect={{0x74, 0xa}, {0x3, 0xfc}}}, {0x1, 0x70, 0x9, 0xdb, @tick=0x2, {}, {0xf, 0x6}, @quote={{0x80, 0x7}, 0xff, &(0x7f0000000140)={0x5, 0x2, 0x8, 0x0, @time={0x2, 0x9}, {0x6, 0xb}, {0x6, 0x7}, @raw8={"112e4978d3b366aaaae18e17"}}}}, {0x6, 0xb, 0xc2, 0x3, @tick=0xc, {0x2, 0x5}, {0x40, 0xf8}, @addr={0x1, 0x7}}, {0xb, 0x4, 0x7, 0x4, @tick=0x4, {0x5, 0xfc}, {0xa9, 0xf}, @raw8={"e0f9fc6711f8f4e5f5a540f9"}}], 0xa8) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(r0, r3, 0x0) 2.613673685s ago: executing program 3 (id=7357): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.487899905s ago: executing program 0 (id=7358): socketpair(0x1d, 0x2, 0x6, &(0x7f0000000180)) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040)=0x7, 0x4) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'wrr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0xfffffffe}, {@private=0xa010101, 0x4908, 0x10000, 0x1}}, 0x44) r2 = socket$inet(0x2, 0x1, 0x6) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000001240)={@loopback, 0x3, 0x0, 0x2, 0xa, 0x9, 0x1}, &(0x7f0000001280)=0x20) sendmsg$sock(r2, &(0x7f0000000940)={&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4, 0x1, {0xa, 0x4e20, 0x4, @loopback, 0x200}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000280)="7b8655c6b09a46fcd6e6ea7b2c8caff740cea82ce0fa692072d686062e92aa8e574a8f55cedfa4459be4ffb413db3a245909773b62014e366176542926d74ba5bd0ccdf41142f40dbda2573c5c5ac761d6ed04374e4128fb", 0x58}, {&(0x7f0000000300)="55d0c914ccbdc27b7be574c15b98a1c76709839250a7668f9ab44ecbb941a9b7f4eaa846c1a1b1940275d3e0531b79c42ed04a060236a641e179564cd2a1773aa5ed52d2f0e5e0b171d6fb2a919dc0c7ebe58828", 0x54}, {&(0x7f0000000680)="55e3de85279ae278ac93c3544ea7dd8a885e7dc8874060a322e1681f1f343cff6f7b327ba10a615d5b5c71682090642f7a89ace843020fbaa6f0d18466842c85527bfc0fc52b4d4a3c7034a7c06e1c4cc5fb6c605e99b8aa5305b769717b16add3af36518c89e4253d8ef6715d8c7ab3c687fcf5465d8799900b99253ca2e90b175b51b344151ceb7664fbac8db1f5e48f81cb318d", 0x95}, {&(0x7f0000000500)="914155c4d68e9a0a38df0a645c664aeb0b29ae2c63829da9257f08d1e178", 0x1e}, {&(0x7f0000000540)='G0b', 0x3}], 0x5, &(0x7f0000000580)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x53c}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xa}}], 0x60}, 0x0) connect(r2, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) 2.331990173s ago: executing program 0 (id=7359): r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r0, 0x0) r1 = io_uring_setup(0x6f1e, &(0x7f0000000240)={0x0, 0x9071, 0x2000, 0x0, 0x100025}) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000002140)={0xa, 0x0, 0x0, '\x00', 0x4}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0xe74, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0x2}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r6, 0x2, &(0x7f0000000140)={0xa, 0x1, 0x0, 0x5000, 0xffffffffffffffff}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000040)={0x2, r7}) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f0000000100)=0x5) listen(r5, 0x20) shutdown(r5, 0x0) r10 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r10, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) 1.546588113s ago: executing program 2 (id=7361): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000300)={0x7, &(0x7f00000002c0)=[{0x0, 0x9, 0x2, 0x9}, {0x2, 0x4, 0x2, 0x4}, {0x2, 0x6, 0x8, 0xffffffff}, {0x6, 0xb, 0xc, 0x7f6}, {0xff80, 0x7, 0xe5, 0x4}, {0x7, 0x7, 0x5, 0x5}, {0x8, 0x5, 0x0, 0x2}]}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c5", 0x29}], 0x1, 0x0, 0x0, 0x5865}, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/test/cgroup.procs\x00', 0x1202, 0x2) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000280)={0x3, 0x0, [{0x1, 0x0, 0x0, 0xe2a, 0x3, 0x0, 0xfffff000}, {0x80000001, 0x7a93, 0x4, 0x2, 0x81, 0xdde, 0x8}, {0x40000000, 0x4, 0x6, 0x0, 0x3, 0x6, 0x5}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x161142, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB="3801000010000105fefff7ff00010000e0000001000000000000000000000000fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) write$6lowpan_enable(r3, &(0x7f0000000300)='0', 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0x4, 0x112000}) 1.471948415s ago: executing program 2 (id=7362): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$radio(0x0, 0x2, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) syz_open_dev$loop(0x0, 0x2, 0x161281) writev(r0, &(0x7f0000000000)=[{0x0}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) close_range(r3, 0xffffffffffffffff, 0x0) 1.423624913s ago: executing program 0 (id=7363): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000002c659855c67eb6120d6700000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a0108000000000000000001ffffffffffffffff797a30000000000900030073797a320000000014000000060a0104000000000000000001"], 0x88}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000600000000060015000100000018001680140001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)=@updpolicy={0x114, 0x19, 0x1, 0x70bd28, 0x10, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00', 0x5e22, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x8000}, {0x2, 0x9, 0x80}, 0x4, 0x400, 0x0, 0x0, 0x1, 0x3}, [@algo_comp={0x5c, 0x3, {{'deflate\x00'}, 0xa0, "32d2c3aec5120bbbb9293a6dd82ea7d486e00882"}}]}, 0x114}}, 0x80c5) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001080)={0x1, &(0x7f00000010c0)=[{0x1, 0x8, 0x7, 0xa1}]}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x1}], 0x1) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000080)="01", 0x1) r3 = signalfd4(r0, &(0x7f0000001100)={[0x3]}, 0x8, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000001140)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r5, &(0x7f00000024c0)=[{&(0x7f0000000080)=""/4081, 0xff1}, {0x0}], 0x2, 0x3f, 0x5) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x42838, 0x23}}, 0x20}, 0x1, 0x0, 0x0, 0x8090}, 0x4048004) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000440)={0x5, 0x1, 0x7}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000080)) 1.371396591s ago: executing program 2 (id=7364): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0xffffffffffffff9c, 0x0) 1.320462611s ago: executing program 0 (id=7365): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x23, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) 1.307344337s ago: executing program 2 (id=7366): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x0, 0x701, 0x0, 0x2ddfdbfe, {0x41}}, 0x14}}, 0x24000040) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f406", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.247612705s ago: executing program 0 (id=7367): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x420c42, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0x4661b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, &(0x7f0000000280)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) r4 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff, 0x40, 0x444, &(0x7f0000000800)="5674f1284b66baa4dba90b6e5a09937b27946e50751f39be0a54c925c96e4e3599a3b8a834f8a2be743fd8f77a5ff6a3cb874484426f2fe2d331bf3cd01efcdae7e61eb6bb6e89f481c283aaee3567b6e41774e76ce0c2f054354dd81bc0cc13573671a0d1ec39a094d06676949a280af58fd6b634719cc08a2effc5d9fb77fdf433df904e36af5da605eea32626d409b9cf32d0e803d00fa5a3e51daf0cfa4756b0d6479181799057ad546c8fe2a5ada085376b7bbb0f821fbec345638c9b4240d27cbbd0f2d8d3483daba12bbec9b79c67b05248a348728c3e617cb07d9bcfeb43b5e00b1c726cc7b5ac2a6a9966516e59a1fcbbf36a758565c77482c7ad749eec18be2fa279bbb5dbc5e72d0e6522b77cb9523658faeab1af6861277febf46f3b5a8dfc8a2891a555897ac0ed200b4a91042ef8751c441b16d9ad0759bbc10719800372545bbabddf6c9c024fd8e513b24101b86ac45d19024b10609b2e7e024988b9d5dc2670cdbedd7a3953122b59735e029dd9fbd20ecbec6f1dff21ea3355c5be7f3a3122eaa029abf5371380971b941a55d5c98821dd467c2b74af669dc8b9a5cfd1160ca392ec02902d6200d21dbfe5b122207cc1c74e59c9cb8f73d018621a568f78f36e6e65cfc4d8a6d87dd5045f5744deb710b81bd88ead5e8db7790dfa57bda48401595cce05a58437b373bb031f599295f476229f1339b42183197bf7c3bee3b0b14b6fffadb907af7b698b911889da4b36d5c60dd81eac7214528a8826c099add55b43d0dafab1053b5f8b8d2b9377fd72de6f318907b0dc47ab12df8d0050008b570b6f0bec4843629b495129823aa7263345d70cc42d2f5904da8d67720fa0072570a61af3175512719afdd90f9a31c496e3a6e98889abce111c92fb3f977011e7c367ce13a2ec7277d9082dae1c0454aadcf9c9f211fa66b5d15089deca4b4ba48735b2932a937e12b0258591c16b42f06b08c25d40ba3643be90d2ebc2b54d273ee3f4f1d68502a7ce968cf34f02226e343eca3cd69a0b5c66539606a184bdfe5c41fe62b6185de94af5fd27cc4927e6760cdbffeddae789bb4d8499eaea4249e2b281b9e654a6ba85f6b2d341026e7590d38b49fc4881f8255c84f05c2389e176f1cca1d648d9c4a5d22b6e3225ec36d8f44d75c99d49f14096aa9d003eb21f08d9caf0591e36e8a7ced2f875d56652cc8d37b960e7307b5a79f4a23ef082ec1b72e671e6e5ab135711e5625dc0506f86982605e886906dfe968701a13f864d10a3940994d43cd24014081884b387eb94cac089d5aa06f37b4c5c8869dae4c046de49a2d824ada8b78abb4e3ce34d97b5e7d1e0112ddd07cb8602ac018f2a1f6aa55cd588992d94465c6acebdd1803a975ce215dc0adac8654dd0bd153aa34b1a2975ddbc6db5a077bb295f8ec261037a88b5aec954e1168f1ac714336fdc14e807393dffbff8a76f6d6fa515abb291a2ab7d112cb76d09d5dc862bc7b070d44455ab3121791d86577ca163a86cdca4ba059f2a2f8dc2e6befc", 0xfe, 0x27, 0x8, 0x6, 0x4c6f, 0x2, 0x5, 'syz0\x00'}) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r6, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r5, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) 1.196231759s ago: executing program 2 (id=7368): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) r1 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr(r1, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r0, &(0x7f0000000400)=[{0xb7, 0xfc, 0x6, 0x6, @time={0x8, 0x4ae7}, {0xfb, 0x6}, {0x2, 0x6}, @time=@tick=0x7}, {0x9, 0xa, 0x8a, 0x2e, @time={0x2, 0x7fffffff}, {0x8, 0xf2}, {0xa, 0x5}, @raw8={"45e360307e8cdff6c4dc4759"}}, {0x4f, 0xf7, 0x2, 0x6, @tick=0x4, {0xa, 0x87}, {0x8, 0xfa}, @connect={{0x74, 0xa}, {0x3, 0xfc}}}, {0x1, 0x70, 0x9, 0xdb, @tick=0x2, {}, {0xf, 0x6}, @quote={{0x80, 0x7}, 0xff, &(0x7f0000000140)={0x5, 0x2, 0x8, 0x0, @time={0x2, 0x9}, {0x6, 0xb}, {0x6, 0x7}, @raw8={"112e4978d3b366aaaae18e17"}}}}, {0x6, 0xb, 0xc2, 0x3, @tick=0xc, {0x2, 0x5}, {0x40, 0xf8}, @addr={0x1, 0x7}}, {0xb, 0x4, 0x7, 0x4, @tick=0x4, {0x5, 0xfc}, {0xa9, 0xf}, @raw8={"e0f9fc6711f8f4e5f5a540f9"}}], 0xa8) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(r0, r3, 0x0) 186.792573ms ago: executing program 2 (id=7369): socketpair(0x1d, 0x2, 0x6, &(0x7f0000000180)) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040)=0x7, 0x4) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'wrr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0xfffffffe}, {@private=0xa010101, 0x4908, 0x10000, 0x1}}, 0x44) r2 = socket$inet(0x2, 0x1, 0x6) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000001240)={@loopback, 0x3, 0x0, 0x2, 0xa, 0x9, 0x1}, &(0x7f0000001280)=0x20) sendmsg$sock(r2, &(0x7f0000000940)={&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4, 0x1, {0xa, 0x4e20, 0x4, @loopback, 0x200}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000280)="7b8655c6b09a46fcd6e6ea7b2c8caff740cea82ce0fa692072d686062e92aa8e574a8f55cedfa4459be4ffb413db3a245909773b62014e366176542926d74ba5bd0ccdf41142f40dbda2573c5c5ac761d6ed04374e4128fb", 0x58}, {&(0x7f0000000300)="55d0c914ccbdc27b7be574c15b98a1c76709839250a7668f9ab44ecbb941a9b7f4eaa846c1a1b1940275d3e0531b79c42ed04a060236a641e179564cd2a1773aa5ed52d2f0e5e0b171d6fb2a919dc0c7ebe58828", 0x54}, {&(0x7f0000000680)="55e3de85279ae278ac93c3544ea7dd8a885e7dc8874060a322e1681f1f343cff6f7b327ba10a615d5b5c71682090642f7a89ace843020fbaa6f0d18466842c85527bfc0fc52b4d4a3c7034a7c06e1c4cc5fb6c605e99b8aa5305b769717b16add3af36518c89e4253d8ef6715d8c7ab3c687fcf5465d8799900b99253ca2e90b175b51b344151ceb7664fbac8db1f5e48f81cb318d", 0x95}, {&(0x7f0000000500)="914155c4d68e9a0a38df0a645c664aeb0b29ae2c63829da9257f08d1e178", 0x1e}, {&(0x7f0000000540)='G0b', 0x3}], 0x5, &(0x7f0000000580)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x53c}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xa}}], 0x60}, 0x0) connect(r2, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) 172.136322ms ago: executing program 4 (id=7370): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mremap(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r3, r4, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup(r5, 0x0, 0x200002, 0x0) write$FUSE_NOTIFY_POLL(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) syz_usb_connect(0x3, 0x0, 0x0, 0x0) 53.783788ms ago: executing program 0 (id=7371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23004a) r2 = syz_usb_connect(0x0, 0x48, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a00100001000009058803"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000002740)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="40098e00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230007) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_hsr\x00'}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) add_key$user(&(0x7f0000000100), &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)="0f", 0x1, 0xfffffffffffffffd) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x40}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x8}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) 0s ago: executing program 1 (id=7372): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000300)={0x7, &(0x7f00000002c0)=[{0x0, 0x9, 0x2, 0x9}, {0x2, 0x4, 0x2, 0x4}, {0x2, 0x6, 0x8, 0xffffffff}, {0x6, 0xb, 0xc, 0x7f6}, {0xff80, 0x7, 0xe5, 0x4}, {0x7, 0x7, 0x5, 0x5}, {0x8, 0x5, 0x0, 0x2}]}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c5", 0x29}], 0x1, 0x0, 0x0, 0x5865}, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/test/cgroup.procs\x00', 0x1202, 0x2) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000280)={0x3, 0x0, [{0x1, 0x0, 0x0, 0xe2a, 0x3, 0x0, 0xfffff000}, {0x80000001, 0x7a93, 0x4, 0x2, 0x81, 0xdde, 0x8}, {0x40000000, 0x4, 0x6, 0x0, 0x3, 0x6, 0x5}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x161142, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB="3801000010000105fefff7ff00010000e0000001000000000000000000000000fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) write$6lowpan_enable(r3, &(0x7f0000000300)='0', 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0x4, 0x112000}) kernel console output (not intermixed with test programs): tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 785.175783][ T31] audit: type=1400 audit(1788365875.241:1663): avc: denied { open } for pid=24231 comm="syz.2.6570" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 785.301885][T24240] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 785.503705][ T31] audit: type=1400 audit(1788365875.571:1664): avc: denied { write } for pid=24248 comm="syz.1.6575" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 785.607523][T24255] netlink: 'syz.1.6575': attribute type 4 has an invalid length. [ 787.775905][T24274] syzkaller0: entered promiscuous mode [ 787.775927][T24274] syzkaller0: entered allmulticast mode [ 788.029739][T24287] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6587'. [ 788.253122][T11778] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 788.382570][T11778] usb 4-1: device descriptor read/64, error -71 [ 788.561723][T24298] tipc: Enabling of bearer rejected, already enabled [ 788.622890][T11778] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 788.694302][T24300] netlink: 'syz.2.6593': attribute type 4 has an invalid length. [ 788.753017][T11778] usb 4-1: device descriptor read/64, error -71 [ 788.761290][T24302] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6594'. [ 788.864266][T11778] usb usb4-port1: attempt power cycle [ 790.748364][T11778] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 790.774882][T11778] usb 4-1: device descriptor read/8, error -71 [ 790.810067][T24304] syzkaller0: entered promiscuous mode [ 790.810108][T24304] syzkaller0: entered allmulticast mode [ 790.850173][T24313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 791.013224][T11778] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 791.033589][T11778] usb 4-1: device descriptor read/8, error -71 [ 791.129579][T24328] fuse: Bad value for 'fd' [ 791.144474][T11778] usb usb4-port1: unable to enumerate USB device [ 791.374595][T11722] IPVS: starting estimator thread 0... [ 791.465222][T24339] IPVS: using max 77 ests per chain, 184800 per kthread [ 792.903092][T24326] syzkaller0: entered promiscuous mode [ 792.903114][T24326] syzkaller0: entered allmulticast mode [ 793.055986][T24343] netlink: 'syz.2.6605': attribute type 4 has an invalid length. [ 793.111198][T24345] tipc: Enabling of bearer rejected, already enabled [ 793.254206][T24347] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.6606'. [ 793.400057][ T31] audit: type=1400 audit(1788365883.461:1665): avc: denied { ioctl } for pid=24351 comm="syz.4.6608" path="/dev/usbmon9" dev="devtmpfs" ino=742 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 793.437289][ T31] audit: type=1400 audit(1788365883.501:1666): avc: denied { ioctl } for pid=24351 comm="syz.4.6608" path="socket:[88693]" dev="sockfs" ino=88693 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 794.628568][ T31] audit: type=1400 audit(1788365884.691:1667): avc: denied { mount } for pid=24351 comm="syz.4.6608" name="/" dev="rpc_pipefs" ino=88694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 795.508441][ T31] audit: type=1400 audit(1788365885.571:1668): avc: denied { unmount } for pid=15591 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 795.541956][T24369] fuse: Bad value for 'fd' [ 795.735484][ T31] audit: type=1400 audit(1788365885.801:1669): avc: denied { setattr } for pid=24376 comm="syz.4.6614" name="NETLINK" dev="sockfs" ino=88764 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 795.870846][T24388] coredump: 291(syz.3.6615): format_corename failed, aborting core [ 796.185906][T24397] syzkaller0: entered promiscuous mode [ 796.194600][T24397] syzkaller0: entered allmulticast mode [ 796.298848][ T31] audit: type=1400 audit(1788365886.361:1670): avc: denied { write } for pid=24360 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 796.538002][ T31] audit: type=1400 audit(1788365886.601:1671): avc: denied { write } for pid=24409 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 797.379687][ T31] audit: type=1400 audit(1788365887.441:1672): avc: denied { create } for pid=24430 comm="syz.3.6624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 797.435257][ T31] audit: type=1400 audit(1788365887.501:1673): avc: denied { bind } for pid=24430 comm="syz.3.6624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 797.483485][ T5850] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 797.633895][ T5850] usb 2-1: Using ep0 maxpacket: 16 [ 797.639387][ T5850] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 797.650777][ T5850] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 797.650809][ T5850] usb 2-1: config 0 has no interface number 0 [ 797.719751][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.719791][ T5850] usb 2-1: Product: syz [ 797.719805][ T5850] usb 2-1: Manufacturer: syz [ 797.719816][ T5850] usb 2-1: SerialNumber: syz [ 797.784994][ T31] audit: type=1400 audit(1788365887.851:1674): avc: denied { write } for pid=24416 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 797.839541][T24444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 798.075528][T24454] coredump: 1374(syz.2.6629): format_corename failed, aborting core [ 798.295136][T24459] syzkaller0: entered promiscuous mode [ 798.295176][T24459] syzkaller0: entered allmulticast mode [ 798.932849][T11778] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 798.959536][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 798.959577][ T31] audit: type=1400 audit(1788365889.021:1676): avc: denied { write } for pid=24465 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 799.123103][T11778] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 799.135749][T11778] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 799.135790][T11778] usb 3-1: config 0 has no interface number 0 [ 799.153198][T11778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.153235][T11778] usb 3-1: Product: syz [ 799.153250][T11778] usb 3-1: Manufacturer: syz [ 799.153260][T11778] usb 3-1: SerialNumber: syz [ 799.429136][ T31] audit: type=1400 audit(1788365889.491:1677): avc: denied { write } for pid=24493 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 799.977593][T24515] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 801.068829][ T31] audit: type=1804 audit(1788365891.131:1678): pid=24526 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.6642" name="/newroot/581/file0" dev="tmpfs" ino=3015 res=1 errno=0 [ 801.124039][T11778] usb 2-1: USB disconnect, device number 31 [ 801.356116][T24534] syzkaller0: entered promiscuous mode [ 801.362294][T24534] syzkaller0: entered allmulticast mode [ 801.715963][T11778] usb 3-1: USB disconnect, device number 47 [ 801.774242][T24547] jffs2: notice: (24547) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 801.795510][ T31] audit: type=1400 audit(1788365891.861:1679): avc: denied { mount } for pid=24546 comm="syz.1.6651" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 803.059454][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.059513][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 804.143058][T24565] loop4: detected capacity change from 0 to 7 [ 804.152730][T24565] Dev loop4: unable to read RDB block 7 [ 804.152778][T24565] loop4: unable to read partition table [ 804.152874][T24565] loop4: partition table beyond EOD, truncated [ 804.152906][T24565] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 804.210712][T24565] netlink: 304 bytes leftover after parsing attributes in process `syz.3.6657'. [ 804.269468][T24572] coredump: 1387(syz.2.6659): format_corename failed, aborting core [ 804.339037][ T31] audit: type=1400 audit(1788365894.401:1680): avc: denied { setopt } for pid=24574 comm="syz.0.6661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 804.473800][ T4972] Dev loop4: unable to read RDB block 7 [ 804.483181][ T4972] loop4: unable to read partition table [ 804.498801][ T4972] loop4: partition table beyond EOD, truncated [ 804.581969][T24584] jffs2: notice: (24584) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 804.623561][T11778] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 804.751044][T24589] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6666'. [ 804.762781][ T5850] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 804.773924][T11778] usb 3-1: Using ep0 maxpacket: 8 [ 804.780046][T11778] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 804.790252][T11778] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 804.790291][T11778] usb 3-1: config 0 has no interface number 0 [ 804.790317][T11778] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 804.790332][T11778] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 804.790346][T11778] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 804.790362][T11778] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 804.790384][T11778] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.934536][ T5850] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 804.950038][ T5850] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 804.950080][ T5850] usb 2-1: config 0 has no interface number 0 [ 804.967004][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.967027][ T5850] usb 2-1: Product: syz [ 804.967060][ T5850] usb 2-1: Manufacturer: syz [ 804.967071][ T5850] usb 2-1: SerialNumber: syz [ 805.008468][T24595] fuse: Unknown parameter '0x0000000000000004' [ 805.150898][ T31] audit: type=1400 audit(1788365895.211:1681): avc: denied { write } for pid=24602 comm="syz.4.6669" name="usb_gadget" dev="configfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 805.177709][ T31] audit: type=1400 audit(1788365895.241:1682): avc: denied { write } for pid=24602 comm="syz.4.6669" name="functions" dev="configfs" ino=89457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 805.208722][ T31] audit: type=1400 audit(1788365895.271:1683): avc: denied { write } for pid=24602 comm="syz.4.6669" name="configs" dev="configfs" ino=89458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 805.373478][ T31] audit: type=1400 audit(1788365895.431:1684): avc: denied { write } for pid=24602 comm="syz.4.6669" name="c.1" dev="configfs" ino=89464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 805.396557][ T31] audit: type=1400 audit(1788365895.431:1685): avc: denied { create } for pid=24602 comm="syz.4.6669" name="uac2.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 805.396583][ T31] audit: type=1400 audit(1788365895.461:1686): avc: denied { write } for pid=24602 comm="syz.4.6669" name="c.1" dev="configfs" ino=89464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 805.635466][T24614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 805.660411][T24614] tipc: Enabling of bearer rejected, already enabled [ 805.761276][ T31] audit: type=1400 audit(1788365895.821:1687): avc: denied { write } for pid=24619 comm="syz.4.6673" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 805.787754][ T31] audit: type=1400 audit(1788365895.851:1688): avc: denied { open } for pid=24619 comm="syz.4.6673" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 805.814008][T24620] random: crng reseeded on system resumption [ 805.864849][T24621] binder: 24619:24621 ioctl c00c6211 0 returned -14 [ 806.955386][T24629] fuse: Unknown parameter 'use00000000000000000000' [ 807.016466][T11778] usb 3-1: USB disconnect, device number 48 [ 807.101901][T24632] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.6676'. [ 807.226160][T24640] fuse: Unknown parameter '0x0000000000000004' [ 807.388223][T24645] €Â0: renamed from pim6reg1 [ 807.592335][T11778] usb 2-1: USB disconnect, device number 32 [ 807.714788][T24653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 807.855449][T24653] tipc: Enabling of bearer rejected, failed to enable media [ 807.866936][T24657] random: crng reseeded on system resumption [ 808.068267][T24659] binder: 24656:24659 ioctl c00c6211 0 returned -14 [ 809.129664][T24665] fuse: Unknown parameter 'use00000000000000000000' [ 809.165340][T24668] coredump: 149(syz.1.6688): format_corename failed, aborting core [ 809.177209][T24667] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.6689'. [ 809.341018][T24673] fuse: Unknown parameter 'fd0x0000000000000004' [ 809.369943][T24674] €Â0: renamed from pim6reg1 [ 809.522852][T11778] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 809.672864][T11778] usb 2-1: Using ep0 maxpacket: 8 [ 809.678268][T11778] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 809.688742][T11778] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 809.688757][T11778] usb 2-1: config 0 has no interface number 0 [ 809.688775][T11778] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 809.688787][T11778] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 809.688818][T11778] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 809.688832][T11778] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 809.688852][T11778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.786427][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 809.942999][ T10] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 809.956161][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 809.956182][ T10] usb 4-1: config 0 has no interface number 0 [ 809.973816][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.973837][ T10] usb 4-1: Product: syz [ 809.973852][ T10] usb 4-1: Manufacturer: syz [ 809.973862][ T10] usb 4-1: SerialNumber: syz [ 810.021595][ T31] audit: type=1400 audit(1788365900.081:1689): avc: denied { write } for pid=24687 comm="syz.2.6697" name="c.1" dev="configfs" ino=89464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 810.058004][ T31] audit: type=1400 audit(1788365900.121:1690): avc: denied { write } for pid=24687 comm="syz.2.6697" name="c.1" dev="configfs" ino=89464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 810.217930][T24697] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 810.258297][ T5618] Bluetooth: hci5: command 0x0406 tx timeout [ 810.337876][T24702] fuse: Unknown parameter 'use00000000000000000000' [ 810.468090][T24706] fuse: Unknown parameter 'fd0x0000000000000004' [ 810.552697][ T10] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 810.703705][ T10] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 810.718253][ T10] usb 3-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 810.730861][ T10] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 810.730883][ T10] usb 3-1: Manufacturer: syz [ 810.730897][ T10] usb 3-1: SerialNumber: syz [ 810.918809][T24713] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6706'. [ 811.475187][T24715] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6707'. [ 812.462340][ T31] audit: type=1804 audit(1788365902.521:1691): pid=24718 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.6708" name="/newroot/537/file0" dev="tmpfs" ino=2754 res=1 errno=0 [ 812.562483][ T5850] usb 4-1: USB disconnect, device number 17 [ 812.753944][T24724] tipc: Started in network mode [ 812.758964][T24724] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 812.769188][T24724] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 812.778017][T24724] tipc: Enabled bearer , priority 10 [ 812.796591][T24727] fuse: Unknown parameter 'user_i00000000000000000000' [ 812.949409][T24731] fuse: Unknown parameter 'fd0x0000000000000004' [ 813.291134][ T5850] usb 3-1: USB disconnect, device number 49 [ 813.512673][T11778] usb 2-1: USB disconnect, device number 33 [ 813.599626][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 813.612342][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 813.624197][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 813.638221][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 813.646988][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 813.907614][ T10] tipc: Node number set to 1 [ 814.088585][T24756] €Â0: renamed from pim6reg1 [ 814.172338][T24760] fuse: Unknown parameter 'user_i00000000000000000000' [ 814.662829][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.895170][T24778] random: crng reseeded on system resumption [ 814.932888][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.031012][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.112760][T11778] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 815.216614][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 815.242940][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 815.254899][ T59] bridge0: port 3(netdevsim0) entered disabled state [ 815.264156][T11778] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 815.274819][T11778] usb 3-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 815.288146][T11778] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 815.288167][T11778] usb 3-1: Manufacturer: syz [ 815.288199][T11778] usb 3-1: SerialNumber: syz [ 815.354280][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.694717][ T5618] Bluetooth: hci1: command tx timeout [ 815.838433][T24794] fuse: Unknown parameter 'user_i00000000000000000000' [ 816.099889][ T59] bridge0: left allmulticast mode [ 816.640361][ T59] bond0 (unregistering): Released all slaves [ 816.700277][T24803] €Â0: renamed from pim6reg1 [ 816.719587][ T59] tipc: Disabling bearer [ 816.719670][ T59] tipc: Disabling bearer [ 816.737561][ T59] tipc: Left network mode [ 816.814956][ T31] audit: type=1400 audit(1788365906.871:1692): avc: denied { write } for pid=24804 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 817.061277][ T31] audit: type=1400 audit(1788365907.121:1693): avc: denied { write } for pid=24825 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 818.024228][ T5618] Bluetooth: hci1: command tx timeout [ 818.053936][ T31] audit: type=1804 audit(1788365908.111:1694): pid=24832 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.6739" name="/newroot/65/file0" dev="tmpfs" ino=357 res=1 errno=0 [ 818.138319][T11778] usb 3-1: USB disconnect, device number 50 [ 818.232680][T24835] random: crng reseeded on system resumption [ 818.321293][T24742] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.321363][T24742] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.321457][T24742] bridge_slave_0: entered allmulticast mode [ 818.322292][T24742] bridge_slave_0: entered promiscuous mode [ 818.357164][T24742] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.367922][T24742] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.375915][T24742] bridge_slave_1: entered allmulticast mode [ 818.391976][T24742] bridge_slave_1: entered promiscuous mode [ 818.399793][ T5267] 8021q: adding VLAN 0 to HW filter on device eth1 [ 818.489627][T24835] binder: 24834:24835 ioctl c00c6211 0 returned -14 [ 819.486086][T24742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 819.507200][ T59] hsr_slave_0: left promiscuous mode [ 819.515916][ T59] hsr_slave_1: left promiscuous mode [ 819.535593][ T59] veth1_macvtap: left promiscuous mode [ 819.535632][ T59] veth0_macvtap: left promiscuous mode [ 819.535710][ T59] veth1_vlan: left promiscuous mode [ 819.535726][ T59] veth0_vlan: left promiscuous mode [ 819.575427][ T31] audit: type=1400 audit(1788365909.641:1695): avc: denied { write } for pid=24838 comm="syz.1.6743" name="c.1" dev="configfs" ino=89464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 819.575465][ T31] audit: type=1400 audit(1788365909.641:1696): avc: denied { write } for pid=24838 comm="syz.1.6743" name="c.1" dev="configfs" ino=89464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 819.654826][T24849] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6744'. [ 819.759943][T24852] fuse: Unknown parameter 'user_id00000000000000000000' [ 820.092742][ T5618] Bluetooth: hci1: command tx timeout [ 820.271793][T24742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 820.329596][T24861] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 820.381695][T24742] team0: Port device team_slave_0 added [ 820.395491][T24742] team0: Port device team_slave_1 added [ 820.492275][T24742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 820.492294][T24742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.492330][T24742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 820.577687][T24742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 820.577706][T24742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.577745][T24742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 820.774468][T24742] hsr_slave_0: entered promiscuous mode [ 820.783663][T24742] hsr_slave_1: entered promiscuous mode [ 820.791771][T24742] debugfs: 'hsr0' already exists in 'hsr' [ 820.798127][T24742] Cannot create hsr debugfs directory [ 820.809096][ T59] IPVS: stop unused estimator thread 0... [ 820.990497][T24881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.990735][T24881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.470305][ T31] audit: type=1400 audit(1788365911.531:1697): avc: denied { write } for pid=24871 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 821.718679][T24895] random: crng reseeded on system resumption [ 821.736349][ T31] audit: type=1400 audit(1788365911.801:1698): avc: denied { write } for pid=24893 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 821.819985][T24895] binder: 24894:24895 ioctl c00c6211 0 returned -14 [ 822.172767][ T5618] Bluetooth: hci1: command tx timeout [ 823.013689][T24901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 826.788224][ T5267] 8021q: adding VLAN 0 to HW filter on device eth2 [ 826.796031][T24901] tipc: New replicast peer: 255.255.255.255 [ 826.796386][T24901] tipc: Enabled bearer , priority 10 [ 826.838858][T24916] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 826.866149][T24920] socket: no more sockets [ 826.885101][T24920] Failed to initialize the IGMP6 autojoin socket (err -23) [ 827.157602][T24930] coredump: 1436(syz.2.6761): format_corename failed, aborting core [ 827.379586][T24941] €Â0: renamed from pim6reg1 [ 827.524782][ T5700] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 827.682622][ T5700] usb 3-1: Using ep0 maxpacket: 8 [ 827.689211][ T5700] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 827.699709][ T5700] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 827.699749][ T5700] usb 3-1: config 0 has no interface number 0 [ 827.699770][ T5700] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 827.699784][ T5700] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 827.699799][ T5700] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 827.699814][ T5700] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 827.699837][ T5700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.882867][ T5850] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 827.899681][ T31] audit: type=1400 audit(1788365917.961:1699): avc: denied { write } for pid=24931 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 828.034654][ T5850] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 828.046672][ T5850] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 828.046710][ T5850] usb 2-1: config 0 has no interface number 0 [ 828.062959][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.062979][ T5850] usb 2-1: Product: syz [ 828.062994][ T5850] usb 2-1: Manufacturer: syz [ 828.063004][ T5850] usb 2-1: SerialNumber: syz [ 828.183711][ T31] audit: type=1400 audit(1788365918.251:1700): avc: denied { write } for pid=24962 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 828.460969][T24742] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 828.478433][T24742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 828.487862][T24742] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 828.498605][T24742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 828.506567][T24742] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 828.522981][T24742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 828.530426][T24742] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 828.538941][T24742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 828.632715][T24742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 828.660349][T24742] 8021q: adding VLAN 0 to HW filter on device team0 [ 828.676912][ T238] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.676961][ T238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 828.707029][ T238] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.707085][ T238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 828.968876][ T31] audit: type=1400 audit(1788365919.031:1701): avc: denied { write } for pid=24972 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 829.212010][ T31] audit: type=1400 audit(1788365919.271:1702): avc: denied { write } for pid=24998 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 829.276343][T25002] fuse: Bad value for 'fd' [ 829.622324][T25013] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 829.670451][T24742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 830.009666][T11778] usb 3-1: USB disconnect, device number 51 [ 830.091956][ T31] audit: type=1400 audit(1788365920.151:1703): avc: denied { write } for pid=25011 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 830.300925][T24742] veth0_vlan: entered promiscuous mode [ 830.319642][T24742] veth1_vlan: entered promiscuous mode [ 830.378976][T24742] veth0_macvtap: entered promiscuous mode [ 830.385466][ T31] audit: type=1400 audit(1788365920.451:1704): avc: denied { write } for pid=25041 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 830.429169][T24742] veth1_macvtap: entered promiscuous mode [ 830.443088][T25043] €Â0: renamed from pim6reg1 [ 830.501638][T24742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 830.525671][T24742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 830.643070][ T238] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.643103][ T238] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.643129][ T238] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.643167][ T238] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.808420][ T1233] usb 2-1: USB disconnect, device number 34 [ 830.909484][ T1534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.917417][ T1534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.041586][ T1534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.041607][ T1534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.018878][T25057] lo speed is unknown, defaulting to 1000 [ 832.018921][T25057] lo speed is unknown, defaulting to 1000 [ 832.020709][T25057] lo speed is unknown, defaulting to 1000 [ 832.021198][T25057] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 832.021244][T25057] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 832.021269][T25057] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 832.023457][T25057] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 832.029580][T25057] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 832.042935][T25057] lo speed is unknown, defaulting to 1000 [ 832.043791][T25057] lo speed is unknown, defaulting to 1000 [ 832.044591][T25057] lo speed is unknown, defaulting to 1000 [ 832.045352][T25057] lo speed is unknown, defaulting to 1000 [ 832.046137][T25057] lo speed is unknown, defaulting to 1000 [ 832.177322][ T31] audit: type=1400 audit(1788365922.241:1705): avc: denied { mounton } for pid=24742 comm="syz-executor" path="/root/syzkaller.sxBBRV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 832.440347][T25072] fuse: Unknown parameter '0x0000000000000005' [ 832.547557][T11724] IPVS: starting estimator thread 0... [ 832.639766][T25086] coredump: 1416(syz.0.6782): format_corename failed, aborting core [ 832.650759][T25083] IPVS: using max 76 ests per chain, 182400 per kthread [ 832.757782][T25081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.758013][T25081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.781057][ T31] audit: type=1400 audit(1788365922.841:1706): avc: denied { write } for pid=25046 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 832.939606][T25095] socket: no more sockets [ 832.957336][T25095] Failed to initialize the IGMP autojoin socket (err -23) [ 833.005948][ T31] audit: type=1400 audit(1788365923.071:1707): avc: denied { write } for pid=25096 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 833.167734][T25102] syzkaller0: entered promiscuous mode [ 833.167754][T25102] syzkaller0: entered allmulticast mode [ 833.201824][T25102] tipc: Enabled bearer , priority 0 [ 833.225665][T25101] tipc: Resetting bearer [ 833.357364][T25101] tipc: Disabling bearer [ 833.567482][T25115] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6787'. [ 833.598603][T25113] €Â0: renamed from pim6reg1 [ 833.864939][T25122] tipc: Enabling of bearer rejected, already enabled [ 833.892764][ T5850] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 834.044371][ T5850] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 834.065231][ T31] audit: type=1400 audit(1788365924.131:1708): avc: denied { write } for pid=25105 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 834.096046][ T5850] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 834.096068][ T5850] usb 4-1: config 0 has no interface number 0 [ 834.114253][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.114275][ T5850] usb 4-1: Product: syz [ 834.114319][ T5850] usb 4-1: Manufacturer: syz [ 834.114329][ T5850] usb 4-1: SerialNumber: syz [ 834.369382][ T31] audit: type=1400 audit(1788365924.431:1709): avc: denied { write } for pid=25130 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 834.561321][ T31] audit: type=1400 audit(1788365924.621:1710): avc: denied { bind } for pid=25135 comm="syz.4.6792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 834.816460][T25140] fuse: Unknown parameter '0x0000000000000005' [ 835.024262][T25145] random: crng reseeded on system resumption [ 835.156860][T25145] binder: 25143:25145 ioctl c00c6211 0 returned -14 [ 836.318424][T25147] syzkaller0: entered promiscuous mode [ 836.318445][T25147] syzkaller0: entered allmulticast mode [ 836.368142][T25155] coredump: 212(syz.1.6797): format_corename failed, aborting core [ 836.690934][ T10] usb 4-1: USB disconnect, device number 18 [ 836.713983][T11778] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 836.731233][ T31] audit: type=1400 audit(1788365926.791:1711): avc: denied { read } for pid=25157 comm="syz.4.6798" name="mouse0" dev="devtmpfs" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 836.864699][T11778] usb 2-1: Using ep0 maxpacket: 8 [ 836.870073][T11778] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 836.880541][T11778] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 836.880561][T11778] usb 2-1: config 0 has no interface number 0 [ 836.880581][T11778] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 836.880595][T11778] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 836.880610][T11778] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 836.880625][T11778] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 836.880670][T11778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.154830][T25164] €Â0: renamed from pim6reg1 [ 839.309176][ T10] usb 2-1: USB disconnect, device number 35 [ 839.360099][T25196] fuse: Unknown parameter '0x0000000000000005' [ 839.450022][T25204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 839.471500][T25204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.612741][ T5700] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 839.637911][T25206] syzkaller0: entered promiscuous mode [ 839.637931][T25206] syzkaller0: entered allmulticast mode [ 839.664450][T25206] tipc: Enabled bearer , priority 0 [ 839.673896][T25205] tipc: Resetting bearer [ 839.748732][T25205] tipc: Disabling bearer [ 839.765313][ T5700] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 839.775394][ T5700] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 839.775424][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.521946][ T4922] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 840.538352][ T4922] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 840.547665][ T4922] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 840.556350][ T4922] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 840.571795][ T4922] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 840.975475][T25236] syzkaller0: entered promiscuous mode [ 840.975498][T25236] syzkaller0: entered allmulticast mode [ 842.253717][T25252] fuse: Unknown parameter '0x0000000000000005' [ 842.380580][ T5850] usb 5-1: USB disconnect, device number 30 [ 842.658314][ T4922] Bluetooth: hci4: command tx timeout [ 844.014165][ T5850] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 844.213568][ T5850] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 844.224324][ T5850] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 844.224358][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.198254][ T4922] Bluetooth: hci4: command tx timeout [ 846.097586][T25066] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.301718][T25066] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.335407][T25291] fuse: Unknown parameter '0x0000000000000005' [ 846.372103][T25287] bridge_slave_0: left allmulticast mode [ 846.381567][T25287] bridge_slave_0: left promiscuous mode [ 846.390620][T25287] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.404881][T25287] bridge_slave_1: left allmulticast mode [ 846.410622][T25287] bridge_slave_1: left promiscuous mode [ 846.410737][T25287] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.435049][T25287] bond0: (slave bond_slave_0): Releasing backup interface [ 846.450733][T25287] bond0: (slave bond_slave_1): Releasing backup interface [ 846.517720][T25287] team0: Port device team_slave_0 removed [ 846.535252][T25287] team0: Port device team_slave_1 removed [ 846.547143][T25287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 846.547175][T25287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 846.567136][T25287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 846.576392][T25287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 846.589620][T25287] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 846.638579][T25299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.648368][T25299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.716321][T25066] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.771103][T25231] lo speed is unknown, defaulting to 1000 [ 846.827788][T11778] usb 4-1: USB disconnect, device number 19 [ 846.906788][T25066] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.212711][ T4922] Bluetooth: hci4: command tx timeout [ 847.525699][T25320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.541206][T25320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.321072][T25066] bond0 (unregistering): Released all slaves [ 848.420997][ T31] audit: type=1400 audit(1788365938.481:1712): avc: denied { write } for pid=25326 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 848.458479][T25066] tipc: Disabling bearer [ 848.458558][T25066] tipc: Disabling bearer [ 848.458627][T25066] tipc: Left network mode [ 848.657299][T25231] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.657349][T25231] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.657448][T25231] bridge_slave_0: entered allmulticast mode [ 848.682261][T25231] bridge_slave_0: entered promiscuous mode [ 848.695825][T25231] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.713853][T25231] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.715275][T25231] bridge_slave_1: entered allmulticast mode [ 848.737912][T25231] bridge_slave_1: entered promiscuous mode [ 848.851453][ T31] audit: type=1400 audit(1788365938.911:1713): avc: denied { write } for pid=25352 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 848.986456][T25231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.019535][T25231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.167397][ T5267] 8021q: adding VLAN 0 to HW filter on device eth1 [ 849.194752][T25231] team0: Port device team_slave_0 added [ 849.207383][T25231] team0: Port device team_slave_1 added [ 849.293702][ T4922] Bluetooth: hci4: command tx timeout [ 849.302674][ T5700] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 849.360968][T25066] hsr_slave_0: left promiscuous mode [ 849.367034][T25066] hsr_slave_1: left promiscuous mode [ 849.382742][ T238] IPVS: starting estimator thread 0... [ 849.398988][T25066] veth1_macvtap: left promiscuous mode [ 849.407287][T25066] veth0_macvtap: left promiscuous mode [ 849.416891][T25066] veth1_vlan: left promiscuous mode [ 849.416939][T25066] veth0_vlan: left promiscuous mode [ 849.456189][ T5700] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 849.467949][ T5700] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 849.467989][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.480970][T25370] IPVS: using max 76 ests per chain, 182400 per kthread [ 850.236306][T25231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.236324][T25231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.236344][T25231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.291091][T25231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.291107][T25231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.291127][T25231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.403820][ T5850] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 850.451597][T25231] hsr_slave_0: entered promiscuous mode [ 850.460890][T25231] hsr_slave_1: entered promiscuous mode [ 850.511665][T25403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 850.511896][T25403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.574299][ T5850] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 850.587247][ T5850] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.587270][ T5850] usb 2-1: config 0 has no interfaces? [ 850.587291][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.687009][T25066] IPVS: stop unused estimator thread 0... [ 850.946935][ T31] audit: type=1400 audit(1788365941.011:1714): avc: denied { write } for pid=25401 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 851.108517][ T31] audit: type=1400 audit(1788365941.171:1715): avc: denied { write } for pid=25416 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 851.316862][T25421] fuse: Unknown parameter 'fd0x0000000000000005' [ 851.580263][T25231] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 851.594838][T25231] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 851.604654][T25231] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 851.615078][T25231] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 851.626097][T25231] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 851.637686][T25231] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 851.646957][T25231] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 851.656870][T25231] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 851.672827][T11778] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 851.767427][T25231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 851.790864][T25231] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.805141][T11724] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.805189][T11724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.823982][T11778] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 851.835500][T11778] usb 4-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 851.847435][T11778] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 851.847455][T11778] usb 4-1: Manufacturer: syz [ 851.847491][T11778] usb 4-1: SerialNumber: syz [ 851.874805][T11724] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.874855][T11724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.951870][ T31] audit: type=1400 audit(1788365942.011:1716): avc: denied { write } for pid=25428 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 852.027022][T11778] usb 5-1: USB disconnect, device number 31 [ 852.147273][ T31] audit: type=1400 audit(1788365942.211:1717): avc: denied { write } for pid=25447 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 852.230869][T25453] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 852.863936][T25231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 852.942062][ T31] audit: type=1400 audit(1788365943.001:1718): avc: denied { write } for pid=25457 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 853.007371][T25231] veth0_vlan: entered promiscuous mode [ 853.030306][T25231] veth1_vlan: entered promiscuous mode [ 853.087183][ T1233] usb 2-1: USB disconnect, device number 36 [ 853.134210][T25231] veth0_macvtap: entered promiscuous mode [ 853.159294][T25231] veth1_macvtap: entered promiscuous mode [ 853.230433][T25231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 853.257208][T25231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 853.268831][T25497] random: crng reseeded on system resumption [ 853.328028][ T31] audit: type=1400 audit(1788365943.391:1719): avc: denied { write } for pid=25493 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 853.381175][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.394993][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.395044][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.395065][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.456264][T25497] binder: 25495:25497 ioctl c00c6211 0 returned -14 [ 854.496817][ T1233] usb 4-1: USB disconnect, device number 20 [ 854.556834][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.556872][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.671550][ T238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.671570][ T238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.707552][T25510] fuse: Unknown parameter 'fd0x0000000000000005' [ 854.896790][T25516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6869'. [ 855.425483][T25539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 855.434189][T25539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 855.694990][T25543] loop4: detected capacity change from 0 to 7 [ 855.715926][T25543] Dev loop4: unable to read RDB block 7 [ 855.715952][T25543] loop4: unable to read partition table [ 855.716059][T25543] loop4: partition table beyond EOD, truncated [ 855.716078][T25543] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 855.753554][T25543] netlink: 304 bytes leftover after parsing attributes in process `syz.2.6877'. [ 856.077980][T25554] fuse: Unknown parameter 'fd0x0000000000000005' [ 856.254029][ T5850] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 856.398829][T25559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6882'. [ 856.409907][ T5850] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 856.422585][ T5850] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 856.422605][ T5850] usb 4-1: config 0 has no interfaces? [ 856.422625][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.903229][T25580] loop4: detected capacity change from 0 to 7 [ 857.916427][T25580] Dev loop4: unable to read RDB block 7 [ 857.916455][T25580] loop4: unable to read partition table [ 857.916560][T25580] loop4: partition table beyond EOD, truncated [ 857.916580][T25580] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 857.954091][T25580] netlink: 304 bytes leftover after parsing attributes in process `syz.4.6890'. [ 858.604197][ T5850] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 858.782094][ T5850] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 858.792211][ T5850] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 858.792250][ T5850] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 858.792266][ T5850] usb 5-1: config 0 has no interface number 0 [ 858.792287][ T5850] usb 5-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 858.836662][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.836682][ T5850] usb 5-1: Product: syz [ 858.836708][ T5850] usb 5-1: Manufacturer: syz [ 858.836719][ T5850] usb 5-1: SerialNumber: syz [ 858.917151][ T5850] usb 4-1: USB disconnect, device number 21 [ 859.412613][ T5850] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 859.439826][T25628] coredump: 37(syz.2.6902): format_corename failed, aborting core [ 859.566803][T25631] loop4: detected capacity change from 0 to 7 [ 859.580444][T25631] Dev loop4: unable to read RDB block 7 [ 859.580473][T25631] loop4: unable to read partition table [ 859.580579][T25631] loop4: partition table beyond EOD, truncated [ 859.580593][T25631] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 859.594055][ T5850] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 859.628277][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.628297][ T5850] usb 2-1: Product: syz [ 859.628312][ T5850] usb 2-1: Manufacturer: syz [ 859.628341][ T5850] usb 2-1: SerialNumber: syz [ 859.654926][T25631] netlink: 304 bytes leftover after parsing attributes in process `syz.2.6903'. [ 859.826690][T25637] netlink: 'syz.0.6904': attribute type 4 has an invalid length. [ 859.880435][ T5850] lo speed is unknown, defaulting to 1000 [ 859.890595][ T5850] syz2: Port: 1 Link DOWN [ 861.207241][T25656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.217342][T25656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.382576][ T1233] usb 5-1: USB disconnect, device number 32 [ 861.507097][T25673] coredump: 64(syz.4.6913): format_corename failed, aborting core [ 861.950848][ T1224] usb 2-1: USB disconnect, device number 37 [ 862.001267][T25690] netlink: 'syz.3.6918': attribute type 4 has an invalid length. [ 863.188467][ T31] audit: type=1400 audit(1788365953.251:1720): avc: denied { write } for pid=25698 comm="syz.4.6922" name="c.1" dev="configfs" ino=89464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 863.211493][ T31] audit: type=1400 audit(1788365953.271:1721): avc: denied { write } for pid=25698 comm="syz.4.6922" name="c.1" dev="configfs" ino=89464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 863.440639][T25709] coredump: 485(syz.3.6925): format_corename failed, aborting core [ 863.575357][T25714] random: crng reseeded on system resumption [ 863.610840][T25714] binder: 25713:25714 ioctl c00c6211 0 returned -14 [ 863.651096][ T1233] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 864.018940][ T1233] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 864.497555][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 864.518286][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 864.591234][ T1233] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 864.591258][ T1233] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 864.591275][ T1233] usb 2-1: config 0 has no interface number 0 [ 864.591316][ T1233] usb 2-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 864.644218][ T1233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.644240][ T1233] usb 2-1: Product: syz [ 864.644255][ T1233] usb 2-1: Manufacturer: syz [ 864.644283][ T1233] usb 2-1: SerialNumber: syz [ 866.643067][T25729] netlink: 'syz.0.6932': attribute type 4 has an invalid length. [ 866.660016][ T1224] usb 2-1: USB disconnect, device number 38 [ 870.379778][T25786] netlink: 'syz.4.6945': attribute type 4 has an invalid length. [ 870.581960][T25796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 870.626196][T25796] tipc: Enabling of bearer rejected, already enabled [ 871.593084][ T9554] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 871.753892][ T9554] usb 4-1: Using ep0 maxpacket: 16 [ 871.759367][ T9554] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 871.774758][ T9554] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 871.774779][ T9554] usb 4-1: config 0 has no interface number 0 [ 871.792973][ T9554] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.792994][ T9554] usb 4-1: Product: syz [ 871.793008][ T9554] usb 4-1: Manufacturer: syz [ 871.793018][ T9554] usb 4-1: SerialNumber: syz [ 871.873526][ T1233] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 872.024735][ T1233] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 872.036105][ T1233] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 872.036126][ T1233] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.036142][ T1233] usb 2-1: config 0 has no interface number 0 [ 872.036163][ T1233] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 872.036194][ T1233] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 872.104761][ T1233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.104801][ T1233] usb 2-1: Product: syz [ 872.104816][ T1233] usb 2-1: Manufacturer: syz [ 872.104826][ T1233] usb 2-1: SerialNumber: syz [ 872.290943][T25843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 872.308395][T25843] tipc: Enabling of bearer rejected, already enabled [ 872.435861][T25849] tipc: Enabled bearer , priority 0 [ 872.463351][T25847] tipc: Disabling bearer [ 873.511215][T25855] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: 1 [ 873.511237][T25855] ref_ctr increment failed for inode: 0xbfc offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802ef6b300 [ 873.521598][ T31] audit: type=1804 audit(1788365963.571:1722): pid=25855 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.6969" name="/newroot/596/file0" dev="tmpfs" ino=3068 res=1 errno=0 [ 873.618367][T25853] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: -1 [ 873.618386][T25853] ref_ctr decrement failed for inode: 0xbfc offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802ef6b300 [ 873.618412][T25853] uprobe: syz.0.6969:25853 failed to unregister, leaking uprobe [ 874.395824][ T5850] usb 4-1: USB disconnect, device number 22 [ 874.659303][ T9554] usb 2-1: USB disconnect, device number 39 [ 874.744489][T25893] loop4: detected capacity change from 0 to 7 [ 874.751793][T25893] Dev loop4: unable to read RDB block 7 [ 874.751811][T25893] loop4: unable to read partition table [ 874.751909][T25893] loop4: partition table beyond EOD, truncated [ 874.751918][T25893] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 874.853505][ T5850] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 875.013763][ T5850] usb 4-1: Using ep0 maxpacket: 8 [ 875.021341][ T5850] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 875.031887][ T5850] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.050779][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 875.050799][ T5850] usb 4-1: Product: syz [ 875.050832][ T5850] usb 4-1: Manufacturer: syz [ 875.050842][ T5850] usb 4-1: SerialNumber: syz [ 875.611335][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 875.627151][ T5618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 875.638350][ T5618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 875.650549][ T5618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 875.659237][ T5618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 875.667141][ T5850] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 875.832543][ T5850] usb 2-1: Using ep0 maxpacket: 16 [ 875.845112][ T5850] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 875.855403][ T5850] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 875.855423][ T5850] usb 2-1: config 0 has no interface number 0 [ 875.877186][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.877229][ T5850] usb 2-1: Product: syz [ 875.877243][ T5850] usb 2-1: Manufacturer: syz [ 875.877254][ T5850] usb 2-1: SerialNumber: syz [ 875.925725][T25928] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 876.040647][T25932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 876.136092][T25932] tipc: Started in network mode [ 876.136135][T25932] tipc: Node identity ac14140f, cluster identity 4711 [ 876.136287][T25932] tipc: New replicast peer: 255.255.255.255 [ 876.136563][T25932] tipc: Enabled bearer , priority 10 [ 876.298223][T25942] netlink: 'syz.4.7000': attribute type 4 has an invalid length. [ 876.390406][T25946] syzkaller0: entered promiscuous mode [ 876.390427][T25946] syzkaller0: entered allmulticast mode [ 876.407386][T25946] tipc: Started in network mode [ 876.412326][T25946] tipc: Node identity 5283eadfa3e, cluster identity 4711 [ 876.424245][T25946] tipc: Enabled bearer , priority 0 [ 876.434496][T25945] tipc: Resetting bearer [ 876.456372][T25945] tipc: Disabling bearer [ 876.464606][T25918] lo speed is unknown, defaulting to 1000 [ 876.757823][T25918] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.766103][T25918] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.766311][T25918] bridge_slave_0: entered allmulticast mode [ 876.780638][T25918] bridge_slave_0: entered promiscuous mode [ 876.789333][T25918] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.796570][T25918] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.804186][T25918] bridge_slave_1: entered allmulticast mode [ 876.804945][T25918] bridge_slave_1: entered promiscuous mode [ 876.837294][T25918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 876.848071][T25918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 876.870925][T25918] team0: Port device team_slave_0 added [ 876.878505][T25918] team0: Port device team_slave_1 added [ 876.902238][T25918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 876.909364][T25918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.909397][T25918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 876.949628][T25918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 876.949643][T25918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.949662][T25918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 877.019958][T25918] hsr_slave_0: entered promiscuous mode [ 877.026211][T25918] hsr_slave_1: entered promiscuous mode [ 877.032355][T25918] debugfs: 'hsr0' already exists in 'hsr' [ 877.038279][T25918] Cannot create hsr debugfs directory [ 877.233296][T25918] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.262935][ T5850] tipc: Node number set to 2886997007 [ 877.322965][T25918] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.408086][T25918] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.492239][T25971] coredump: 110(syz.2.7008): format_corename failed, aborting core [ 877.534968][ T9554] usb 4-1: USB disconnect, device number 23 [ 877.547488][T25918] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.630732][T25974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 877.680731][T25974] tipc: New replicast peer: 255.255.255.255 [ 877.681129][T25974] tipc: Enabled bearer , priority 10 [ 877.695027][ T4922] Bluetooth: hci3: command tx timeout [ 877.743066][T25976] netlink: 'syz.4.7010': attribute type 4 has an invalid length. [ 877.947860][ T9554] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 877.992545][T25980] syzkaller0: entered promiscuous mode [ 877.992591][T25980] syzkaller0: entered allmulticast mode [ 878.974990][T25980] tipc: Enabled bearer , priority 0 [ 878.998943][ T5850] usb 2-1: USB disconnect, device number 40 [ 879.699921][T25979] tipc: Resetting bearer [ 879.709102][ T9554] usb 3-1: Using ep0 maxpacket: 8 [ 879.714609][ T9554] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 879.724699][ T9554] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 879.724738][ T9554] usb 3-1: config 0 has no interface number 0 [ 879.724762][ T9554] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 879.724777][ T9554] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 879.724792][ T9554] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 879.724807][ T9554] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 879.724829][ T9554] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.785890][ T4922] Bluetooth: hci3: command tx timeout [ 879.851934][T25979] tipc: Disabling bearer [ 879.883346][T25918] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 879.893661][T25918] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 879.905290][T25918] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 879.935764][T25918] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 879.945713][T25918] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 879.966338][T25918] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 879.976977][T25918] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 880.007913][T25918] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 880.247043][T25918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 880.292249][T25918] 8021q: adding VLAN 0 to HW filter on device team0 [ 880.308381][ T1534] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.308431][ T1534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 880.360390][ T238] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.360466][ T238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 880.466673][ T1233] usb 3-1: USB disconnect, device number 52 [ 880.544649][T26008] netlink: 'syz.1.7021': attribute type 4 has an invalid length. [ 882.346049][ T4922] Bluetooth: hci3: command tx timeout [ 882.476381][ T31] audit: type=1400 audit(1788365972.541:1723): avc: denied { read } for pid=26019 comm="syz.1.7024" dev="sockfs" ino=96405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 882.509998][T26020] 9p: Bad value for 'rfdno' [ 882.515391][ T1233] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 882.529775][T26023] syzkaller0: entered promiscuous mode [ 882.536964][T26023] syzkaller0: entered allmulticast mode [ 882.550812][T26023] tipc: Enabled bearer , priority 0 [ 882.560553][T26022] tipc: Resetting bearer [ 882.601250][T26022] tipc: Disabling bearer [ 882.673483][ T1233] usb 3-1: Using ep0 maxpacket: 16 [ 882.679016][ T1233] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 882.691602][ T1233] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 882.691640][ T1233] usb 3-1: config 0 has no interface number 0 [ 882.709760][ T1233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.709780][ T1233] usb 3-1: Product: syz [ 882.709794][ T1233] usb 3-1: Manufacturer: syz [ 882.709834][ T1233] usb 3-1: SerialNumber: syz [ 882.970122][T26038] tipc: Enabling of bearer rejected, failed to enable media [ 883.103775][T26047] netlink: 'syz.3.7033': attribute type 4 has an invalid length. [ 883.152840][ T1233] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 883.168252][T25918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 883.279877][T25918] veth0_vlan: entered promiscuous mode [ 883.298816][T25918] veth1_vlan: entered promiscuous mode [ 883.333298][ T1233] usb 2-1: Using ep0 maxpacket: 8 [ 883.342910][ T1233] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 883.353238][ T1233] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 883.371177][ T1233] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 883.371202][ T1233] usb 2-1: Product: syz [ 883.371217][ T1233] usb 2-1: Manufacturer: syz [ 883.371228][ T1233] usb 2-1: SerialNumber: syz [ 883.435536][T25918] veth0_macvtap: entered promiscuous mode [ 883.450569][T25918] veth1_macvtap: entered promiscuous mode [ 883.479542][T25918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 883.589763][T25918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 884.423098][ T4922] Bluetooth: hci3: command tx timeout [ 884.436481][T11722] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.464601][ T1233] usb 3-1: USB disconnect, device number 53 [ 884.474503][T26057] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: 1 [ 884.474523][T26057] ref_ctr increment failed for inode: 0x439 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802175e600 [ 884.483801][ T31] audit: type=1804 audit(1788365974.541:1724): pid=26057 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.7037" name="/newroot/206/file0" dev="tmpfs" ino=1081 res=1 errno=0 [ 884.537980][ T238] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.552210][ T1534] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.552374][ T1534] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.637749][T26056] uprobe: syz.3.7037:26056 failed to unregister, leaking uprobe [ 884.785780][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.785800][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.780688][ T31] audit: type=1804 audit(1788365975.841:1725): pid=26069 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.7039" name="/newroot/40/file0" dev="tmpfs" ino=231 res=1 errno=0 [ 885.842006][T26066] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 885.956818][T11724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.956837][T11724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 886.046281][ T9553] usb 2-1: USB disconnect, device number 41 [ 887.149420][T26086] loop4: detected capacity change from 0 to 7 [ 887.160393][T26086] Dev loop4: unable to read RDB block 7 [ 887.160433][T26086] loop4: unable to read partition table [ 887.160539][T26086] loop4: partition table beyond EOD, truncated [ 887.160557][T26086] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 887.372028][ T4972] Dev loop4: unable to read RDB block 7 [ 887.372055][ T4972] loop4: unable to read partition table [ 887.372161][ T4972] loop4: partition table beyond EOD, truncated [ 887.433713][T26093] netlink: 'syz.0.7045': attribute type 4 has an invalid length. [ 887.863332][ T5850] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 887.971631][ T31] audit: type=1400 audit(1788365978.031:1726): avc: denied { write } for pid=26101 comm="syz.3.7049" name="c.1" dev="configfs" ino=89464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 887.995140][ T31] audit: type=1400 audit(1788365978.061:1727): avc: denied { write } for pid=26101 comm="syz.3.7049" name="c.1" dev="configfs" ino=89464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 888.035395][ T5850] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 888.055512][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.055534][ T5850] usb 3-1: Product: syz [ 888.055548][ T5850] usb 3-1: Manufacturer: syz [ 888.055559][ T5850] usb 3-1: SerialNumber: syz [ 888.229627][T26121] random: crng reseeded on system resumption [ 888.254199][T26121] binder: 26119:26121 ioctl c00c6211 0 returned -14 [ 888.319832][T26123] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 888.404650][ T9554] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 888.564903][ T9554] usb 2-1: Using ep0 maxpacket: 8 [ 888.571895][ T9554] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 888.583977][ T9554] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 888.596761][ T9554] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 888.596783][ T9554] usb 2-1: Product: syz [ 888.596797][ T9554] usb 2-1: Manufacturer: syz [ 888.596825][ T9554] usb 2-1: SerialNumber: syz [ 889.019425][T26149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7064'. [ 889.167743][ T1233] usb 3-1: USB disconnect, device number 54 [ 889.222592][T26156] random: crng reseeded on system resumption [ 889.288657][T26156] binder: 26155:26156 ioctl c00c6211 0 returned -14 [ 889.301422][ T31] audit: type=1400 audit(1788365979.361:1728): avc: denied { write } for pid=26144 comm="syz.3.7063" name="c.1" dev="configfs" ino=89464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 889.301456][ T31] audit: type=1400 audit(1788365979.361:1729): avc: denied { write } for pid=26144 comm="syz.3.7063" name="c.1" dev="configfs" ino=89464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 889.811269][ T5850] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 889.930977][T26187] siw: device registration error -23 [ 889.962948][ T5850] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 890.000090][ T5850] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 890.000106][ T5850] usb 4-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 890.046027][ T5850] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 890.046044][ T5850] usb 4-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 890.278156][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.278180][ T5850] usb 4-1: Product: syz [ 890.278195][ T5850] usb 4-1: Manufacturer: syz [ 890.278206][ T5850] usb 4-1: SerialNumber: syz [ 890.958398][T26185] siw: device registration error -23 [ 891.110917][T26195] random: crng reseeded on system resumption [ 891.164646][ T5850] usb 2-1: USB disconnect, device number 42 [ 891.202033][T26195] binder: 26194:26195 ioctl c00c6211 0 returned -14 [ 891.775469][T26221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.784088][ T5850] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 891.793720][T26221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.934725][ T5850] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 891.948558][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.948580][ T5850] usb 5-1: Product: syz [ 891.948595][ T5850] usb 5-1: Manufacturer: syz [ 891.948605][ T5850] usb 5-1: SerialNumber: syz [ 892.260403][T26226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 892.276224][T26226] tipc: Enabling of bearer rejected, already enabled [ 892.431804][T26230] random: crng reseeded on system resumption [ 892.454467][T26230] binder: 26229:26230 ioctl c00c6211 0 returned -14 [ 893.398885][ T5850] usb 4-1: USB disconnect, device number 24 [ 893.782640][ T5850] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 893.944505][ T5850] usb 4-1: Using ep0 maxpacket: 16 [ 893.950502][ T5850] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 893.960352][ T5850] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 893.960383][ T5850] usb 4-1: config 0 has no interface number 0 [ 893.977838][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.977859][ T5850] usb 4-1: Product: syz [ 893.977872][ T5850] usb 4-1: Manufacturer: syz [ 893.977883][ T5850] usb 4-1: SerialNumber: syz [ 894.032999][ T1233] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 894.058492][ T5850] usb 5-1: USB disconnect, device number 33 [ 894.180029][T26258] netlink: zone id is out of range [ 894.180045][T26258] netlink: zone id is out of range [ 894.180057][T26258] netlink: zone id is out of range [ 894.180063][T26258] netlink: zone id is out of range [ 894.180069][T26258] netlink: zone id is out of range [ 894.180075][T26258] netlink: zone id is out of range [ 894.180081][T26258] netlink: zone id is out of range [ 894.180087][T26258] netlink: zone id is out of range [ 894.180381][T26258] netlink: zone id is out of range [ 894.192834][ T1233] usb 2-1: Using ep0 maxpacket: 16 [ 894.214028][ T1233] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 894.247676][ T1233] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 894.247702][ T1233] usb 2-1: config 0 interface 0 has no altsetting 0 [ 894.266592][ T1233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.266612][ T1233] usb 2-1: Product: syz [ 894.266644][ T1233] usb 2-1: Manufacturer: syz [ 894.266655][ T1233] usb 2-1: SerialNumber: syz [ 894.648627][T26263] netlink: 'syz.4.7107': attribute type 2 has an invalid length. [ 894.656943][T26263] netlink: 'syz.4.7107': attribute type 2 has an invalid length. [ 894.836892][ T31] audit: type=1804 audit(1788365984.901:1730): pid=26272 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.7110" name="/newroot/18/file1" dev="fuse" ino=1 res=1 errno=0 [ 895.209825][T26275] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.7111'. [ 896.219823][T26277] siw: device registration error -23 [ 896.513668][ T1233] usb 4-1: USB disconnect, device number 25 [ 896.622676][ T1224] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 896.783709][ T1224] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 896.799881][ T1224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.799902][ T1224] usb 3-1: Product: syz [ 896.799916][ T1224] usb 3-1: Manufacturer: syz [ 896.799927][ T1224] usb 3-1: SerialNumber: syz [ 896.869645][ T1224] usb 2-1: USB disconnect, device number 43 [ 897.164861][T26300] tipc: Enabling of bearer rejected, already enabled [ 897.333487][ T1224] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 897.414527][T26305] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.7122'. [ 897.494988][ T1224] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 897.511694][ T1224] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 897.511715][ T1224] usb 2-1: config 0 has no interfaces? [ 897.511755][ T1224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.487050][T26310] siw: device registration error -23 [ 898.711969][T26323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.728490][T26323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.972768][ T5850] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 899.122985][ T5850] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 899.134625][ T5850] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 899.134656][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.397829][ T5850] usb 3-1: USB disconnect, device number 55 [ 899.630826][T26340] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.7134'. [ 899.684561][T26342] random: crng reseeded on system resumption [ 899.739708][T26344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.739947][T26344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.765845][T26342] binder: 26341:26342 ioctl c00c6211 0 returned -14 [ 900.682361][ T1224] usb 2-1: USB disconnect, device number 44 [ 900.814040][T26351] syzkaller0: entered promiscuous mode [ 900.820683][T26351] syzkaller0: entered allmulticast mode [ 900.942151][T26356] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7140'. [ 901.076128][T26362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.103601][ T9553] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 901.264156][ T1224] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 901.288581][ T9553] usb 5-1: Using ep0 maxpacket: 8 [ 901.289904][ T9553] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 901.350089][ T9553] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 901.421434][T26362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.515160][ T1224] usb 3-1: Using ep0 maxpacket: 16 [ 901.544494][ T1224] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 901.601596][ T1224] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 901.631809][ T1224] usb 3-1: config 0 has no interface number 0 [ 901.908397][ T9553] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 901.908446][ T9553] usb 5-1: Product: syz [ 901.933126][ T9553] usb 5-1: Manufacturer: syz [ 901.933138][ T9553] usb 5-1: SerialNumber: syz [ 902.289248][ T1224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.289302][ T1224] usb 3-1: Product: syz [ 902.289318][ T1224] usb 3-1: Manufacturer: syz [ 902.289329][ T1224] usb 3-1: SerialNumber: syz [ 902.345345][ T1224] usb 4-1: USB disconnect, device number 26 [ 902.408124][ T31] audit: type=1400 audit(1788365992.471:1731): avc: denied { create } for pid=26359 comm="syz.1.7142" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 902.432285][ T31] audit: type=1400 audit(1788365992.491:1732): avc: denied { write } for pid=26359 comm="syz.1.7142" name="file0" dev="tmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 902.432338][ T31] audit: type=1400 audit(1788365992.491:1733): avc: denied { open } for pid=26359 comm="syz.1.7142" path="/137/file0" dev="tmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 902.546162][ T31] audit: type=1400 audit(1788365992.611:1734): avc: denied { unlink } for pid=23499 comm="syz-executor" name="file0" dev="tmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 902.610543][ T31] audit: type=1400 audit(1788365992.671:1735): avc: denied { setattr } for pid=26365 comm="syz.3.7144" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 902.667144][T26366] xt_l2tp: missing protocol rule (udp|l2tpip) [ 902.930967][T26378] netlink: 'syz.1.7150': attribute type 4 has an invalid length. [ 902.961474][T26380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.961707][T26380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.017345][T26382] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7152'. [ 903.046196][ T9553] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 903.204878][ T9553] usb 4-1: unable to get BOS descriptor or descriptor too short [ 903.213266][ T9553] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 903.223476][ T9553] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 903.233781][ T9553] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 903.233802][ T9553] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 903.261052][ T9553] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 903.269417][ T9553] usb 4-1: Product: syz [ 903.269438][ T9553] usb 4-1: Manufacturer: syz [ 903.269449][ T9553] usb 4-1: SerialNumber: syz [ 903.520122][ T31] audit: type=1400 audit(1788365993.581:1736): avc: denied { read } for pid=26389 comm="syz.1.7155" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 903.849805][ T9553] usb 5-1: USB disconnect, device number 34 [ 903.962264][T26398] binder_alloc: 26397: pid 26397 spamming oneway? 1 buffers allocated for a total size of 4096 [ 904.025607][ T9553] usb 3-1: USB disconnect, device number 56 [ 904.595320][T26411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.605679][T26411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.179398][T26413] syzkaller0: entered promiscuous mode [ 905.187880][T26413] syzkaller0: entered allmulticast mode [ 905.511877][T26425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.524659][T26425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.849315][ T9553] usb 4-1: USB disconnect, device number 27 [ 906.003656][ T5850] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 906.155032][ T5850] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 906.164392][ T1224] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 906.178969][ T5850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 906.178992][ T5850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 906.207469][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.207491][ T5850] usb 3-1: Product: syz [ 906.207506][ T5850] usb 3-1: Manufacturer: syz [ 906.207534][ T5850] usb 3-1: SerialNumber: syz [ 906.264240][ T9553] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 906.364453][ T5731] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 906.373311][ T1224] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 906.386302][ T1224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.386321][ T1224] usb 2-1: Product: syz [ 906.386336][ T1224] usb 2-1: Manufacturer: syz [ 906.386347][ T1224] usb 2-1: SerialNumber: syz [ 906.427568][ T9553] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 906.437308][ T9553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 906.437337][ T9553] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.543029][ T5731] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 906.552924][ T5731] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.552954][ T5731] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.227665][T26440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.238724][T26440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.487816][T26451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.498562][T26451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.681343][ T9553] usb 3-1: USB disconnect, device number 57 [ 908.920612][ T9553] usb 2-1: USB disconnect, device number 45 [ 908.978478][ T5731] usb 4-1: USB disconnect, device number 28 [ 909.155369][ T1224] usb 5-1: USB disconnect, device number 35 [ 911.346566][T26493] net_ratelimit: 120 callbacks suppressed [ 911.346611][T26493] netlink: zone id is out of range [ 911.346619][T26493] netlink: zone id is out of range [ 911.346625][T26493] netlink: zone id is out of range [ 911.346631][T26493] netlink: zone id is out of range [ 911.346637][T26493] netlink: zone id is out of range [ 911.346642][T26493] netlink: zone id is out of range [ 911.346648][T26493] netlink: zone id is out of range [ 911.346654][T26493] netlink: zone id is out of range [ 911.346660][T26493] netlink: zone id is out of range [ 911.346665][T26493] netlink: zone id is out of range [ 911.550502][ T31] audit: type=1400 audit(1788366001.611:1737): avc: denied { write } for pid=26494 comm="syz.3.7191" name="c.1" dev="configfs" ino=89464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 911.550541][ T31] audit: type=1400 audit(1788366001.611:1738): avc: denied { write } for pid=26494 comm="syz.3.7191" name="c.1" dev="configfs" ino=89464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 912.102553][ T9553] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 912.183069][ T1224] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 912.257432][ T9553] usb 2-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=30.00 [ 912.268473][ T9553] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 912.281109][ T9553] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.281141][ T9553] usb 2-1: Product: syz [ 912.281156][ T9553] usb 2-1: Manufacturer: syz [ 912.281166][ T9553] usb 2-1: SerialNumber: syz [ 912.344558][ T1224] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 912.355159][ T1224] usb 4-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 912.370239][ T1224] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 912.370263][ T1224] usb 4-1: Manufacturer: syz [ 912.370277][ T1224] usb 4-1: SerialNumber: syz [ 913.878914][T26521] lo speed is unknown, defaulting to 1000 [ 913.962151][T26536] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 913.962167][T26536] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 913.962230][T26536] vhci_hcd vhci_hcd.0: Device attached [ 913.999727][T26536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.999950][T26536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 914.034760][T26538] vhci_hcd: unknown pdu 2 [ 914.041562][ T238] vhci_hcd vhci_hcd.0: stop threads [ 914.041583][ T238] vhci_hcd vhci_hcd.0: release socket [ 914.041595][ T238] vhci_hcd vhci_hcd.0: disconnect device [ 914.206324][T26542] coredump: 264(syz.4.7201): format_corename failed, aborting core [ 914.757443][ T1224] usb 4-1: USB disconnect, device number 29 [ 914.855661][ T9553] usb 2-1: USB disconnect, device number 46 [ 915.362977][ T9553] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 915.529582][ T9553] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 915.542188][ T9553] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.542210][ T9553] usb 5-1: Product: syz [ 915.542224][ T9553] usb 5-1: Manufacturer: syz [ 915.542235][ T9553] usb 5-1: SerialNumber: syz [ 916.046306][T26568] netlink: 'syz.0.7208': attribute type 2 has an invalid length. [ 916.054226][T26568] netlink: 'syz.0.7208': attribute type 2 has an invalid length. [ 916.066267][T26568] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7208'. [ 916.160708][T26571] netlink: 'syz.3.7209': attribute type 2 has an invalid length. [ 916.168528][T26571] netlink: 'syz.3.7209': attribute type 2 has an invalid length. [ 916.181309][T26571] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7209'. [ 916.212937][ T1224] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 916.232547][ T9553] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 916.362993][ T1224] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 916.372879][ T1224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 916.382640][ T1224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 916.394748][ T9553] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 916.406487][ T9553] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.417679][ T9553] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.433342][ T1224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.433363][ T1224] usb 2-1: Product: syz [ 916.433397][ T1224] usb 2-1: Manufacturer: syz [ 916.433407][ T1224] usb 2-1: SerialNumber: syz [ 916.637210][T26577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.646821][T26577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.993569][ T5731] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 917.153722][ T5731] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 917.165968][ T5731] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 917.166019][ T5731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.135368][ T5731] usb 5-1: USB disconnect, device number 36 [ 918.303488][T26589] netlink: 'syz.0.7217': attribute type 4 has an invalid length. [ 918.365638][T26592] coredump: 120(syz.0.7218): format_corename failed, aborting core [ 918.436973][T26591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.437202][T26591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.522509][ T5731] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 918.672891][ T5731] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 918.682893][ T5731] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 918.682913][ T5731] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 918.682940][ T5731] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.987267][ T5731] usb 2-1: USB disconnect, device number 47 [ 919.041417][ T9553] usb 3-1: USB disconnect, device number 58 [ 919.187251][T26597] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.7220'. [ 920.063704][ T5731] usb 4-1: USB disconnect, device number 30 [ 920.118990][T26604] random: crng reseeded on system resumption [ 921.982552][ T5731] usb 5-1: USB disconnect, device number 37 [ 922.066949][T26606] siw: device registration error -23 [ 922.192825][T26616] net_ratelimit: 75 callbacks suppressed [ 922.192852][T26616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 922.274233][T26616] tipc: New replicast peer: 255.255.255.255 [ 922.274628][T26616] tipc: Enabled bearer , priority 10 [ 922.348325][T26623] netlink: 'syz.3.7228': attribute type 4 has an invalid length. [ 922.734842][ T5850] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 922.742588][ T5731] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 922.870233][T26637] random: crng reseeded on system resumption [ 922.894607][ T5731] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 922.904718][ T5850] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 922.914590][ T5850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 922.914610][ T5850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 922.937596][ T5731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.937615][ T5731] usb 4-1: Product: syz [ 922.937644][ T5731] usb 4-1: Manufacturer: syz [ 922.937654][ T5731] usb 4-1: SerialNumber: syz [ 922.971249][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.971271][ T5850] usb 5-1: Product: syz [ 922.971286][ T5850] usb 5-1: Manufacturer: syz [ 922.971297][ T5850] usb 5-1: SerialNumber: syz [ 923.053952][T26639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 923.054905][T26639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 923.139711][T26642] netlink: zone id is out of range [ 923.139748][T26642] netlink: zone id is out of range [ 923.139760][T26642] netlink: zone id is out of range [ 923.139766][T26642] netlink: zone id is out of range [ 923.139771][T26642] netlink: zone id is out of range [ 923.139777][T26642] netlink: zone id is out of range [ 923.139782][T26642] netlink: zone id is out of range [ 923.139788][T26642] netlink: zone id is out of range [ 923.139793][T26642] netlink: zone id is out of range [ 923.392530][ T1233] tipc: Node number set to 4049857247 [ 925.671403][T26657] tipc: Started in network mode [ 925.671431][T26657] tipc: Node identity ac14140f, cluster identity 4711 [ 925.671592][T26657] tipc: New replicast peer: 255.255.255.255 [ 925.671890][T26657] tipc: Enabled bearer , priority 10 [ 925.710529][T26655] siw: device registration error -23 [ 925.745744][ T5850] usb 4-1: USB disconnect, device number 31 [ 925.758436][ T5731] usb 5-1: USB disconnect, device number 38 [ 925.920196][T26669] coredump: 281(syz.4.7242): format_corename failed, aborting core [ 925.937786][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 925.937832][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 925.964538][T26668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 925.977255][T26668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.028130][T26668] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7245'. [ 926.028150][T26668] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7245'. [ 926.218973][T26676] random: crng reseeded on system resumption [ 926.290361][ T5731] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 926.454410][ T5731] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 926.467925][ T5731] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 926.467946][ T5731] usb 4-1: config 0 has no interfaces? [ 926.467967][ T5731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.787087][ T9553] tipc: Node number set to 2886997007 [ 926.792846][ T5731] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 926.955216][ T5731] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 926.976509][ T5731] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 926.976533][ T5731] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 927.012343][ T5731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.012365][ T5731] usb 3-1: Product: syz [ 927.012379][ T5731] usb 3-1: Manufacturer: syz [ 927.012389][ T5731] usb 3-1: SerialNumber: syz [ 927.462386][T26693] net_ratelimit: 78 callbacks suppressed [ 927.468422][T26693] netlink: zone id is out of range [ 927.468435][T26693] netlink: zone id is out of range [ 927.481571][T26693] netlink: zone id is out of range [ 927.481588][T26693] netlink: zone id is out of range [ 927.481594][T26693] netlink: zone id is out of range [ 927.481600][T26693] netlink: zone id is out of range [ 927.481606][T26693] netlink: zone id is out of range [ 927.481612][T26693] netlink: zone id is out of range [ 927.481618][T26693] netlink: zone id is out of range [ 927.481642][T26693] netlink: zone id is out of range [ 927.649638][T26697] tipc: Enabling of bearer rejected, already enabled [ 928.933211][ T5850] usb 4-1: USB disconnect, device number 32 [ 929.456791][ T5731] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 929.567136][ T5850] usb 3-1: USB disconnect, device number 59 [ 929.614902][ T5731] usb 5-1: Using ep0 maxpacket: 32 [ 929.625794][ T5731] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 929.640510][ T5731] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 929.640537][ T5731] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 929.640552][ T5731] usb 5-1: config 0 interface 0 has no altsetting 0 [ 929.680076][ T5731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.680116][ T5731] usb 5-1: Product: syz [ 929.680131][ T5731] usb 5-1: Manufacturer: syz [ 929.680141][ T5731] usb 5-1: SerialNumber: syz [ 929.971486][T26721] tipc: Enabled bearer , priority 0 [ 929.988347][T26720] tipc: Disabling bearer [ 932.074647][T26734] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: 1 [ 932.074668][T26734] ref_ctr increment failed for inode: 0x129 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888033008cc0 [ 932.101060][ T31] audit: type=1804 audit(1788366022.141:1739): pid=26734 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.7267" name="/newroot/53/file0" dev="tmpfs" ino=297 res=1 errno=0 [ 932.199376][T26730] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: -1 [ 932.199398][T26730] ref_ctr decrement failed for inode: 0x129 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888033008cc0 [ 932.199423][T26730] uprobe: syz.0.7267:26730 failed to unregister, leaking uprobe [ 932.366006][ T1224] usb 5-1: USB disconnect, device number 39 [ 932.590979][T26743] net_ratelimit: 120 callbacks suppressed [ 932.591005][T26743] netlink: zone id is out of range [ 932.591012][T26743] netlink: zone id is out of range [ 932.591018][T26743] netlink: zone id is out of range [ 932.591024][T26743] netlink: zone id is out of range [ 932.591030][T26743] netlink: zone id is out of range [ 932.591036][T26743] netlink: zone id is out of range [ 932.591042][T26743] netlink: zone id is out of range [ 932.591048][T26743] netlink: zone id is out of range [ 932.591072][T26743] netlink: zone id is out of range [ 932.591079][T26743] netlink: zone id is out of range [ 932.880706][T26747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7273'. [ 934.102645][ T5850] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 934.113120][ T1224] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 934.264164][ T1224] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 934.273571][ T5850] usb 3-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=30.00 [ 934.285179][ T5850] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 934.285607][ T1224] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 934.285619][ T1224] usb 4-1: config 0 has no interfaces? [ 934.285632][ T1224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.324544][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.324564][ T5850] usb 3-1: Product: syz [ 934.324578][ T5850] usb 3-1: Manufacturer: syz [ 934.324588][ T5850] usb 3-1: SerialNumber: syz [ 935.351147][T26768] binder_alloc: 26767: binder_alloc_buf, no vma [ 935.896108][ T5850] usb 4-1: USB disconnect, device number 33 [ 936.026164][ T1233] usb 3-1: USB disconnect, device number 60 [ 936.218753][T26779] tipc: Enabling of bearer rejected, already enabled [ 936.283621][ T5850] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 936.433283][ T5850] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 936.443110][ T5850] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 936.443139][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.658635][ T31] audit: type=1804 audit(1788366026.721:1740): pid=26784 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.7287" name="/newroot/58/file1" dev="fuse" ino=1 res=1 errno=0 [ 936.743121][ T5850] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 936.817895][T26792] bridge_slave_0: left allmulticast mode [ 936.844554][T26792] bridge_slave_0: left promiscuous mode [ 936.844674][T26792] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.888877][T26792] bridge_slave_1: left allmulticast mode [ 936.888898][T26792] bridge_slave_1: left promiscuous mode [ 936.888999][T26792] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.909217][ T5850] usb 5-1: Using ep0 maxpacket: 32 [ 936.915667][ T5850] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 936.929990][ T5850] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 936.930011][ T5850] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 936.930031][ T5850] usb 5-1: config 0 interface 0 has no altsetting 0 [ 936.965402][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.965423][ T5850] usb 5-1: Product: syz [ 936.965437][ T5850] usb 5-1: Manufacturer: syz [ 936.965447][ T5850] usb 5-1: SerialNumber: syz [ 937.023725][T26792] bond0: (slave bond_slave_0): Releasing backup interface [ 937.061410][T26797] random: crng reseeded on system resumption [ 937.071167][T26792] bond0: (slave bond_slave_1): Releasing backup interface [ 937.217277][T26792] team0: Port device team_slave_0 removed [ 937.227527][T26792] team0: Port device team_slave_1 removed [ 937.236174][T26792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 937.244191][T26792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 938.044651][T26798] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: 1 [ 938.044694][T26798] ref_ctr increment failed for inode: 0x14a offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807ccfd940 [ 938.054140][ T31] audit: type=1804 audit(1788366028.111:1741): pid=26798 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.7290" name="/newroot/59/file0" dev="tmpfs" ino=330 res=1 errno=0 [ 938.097273][T26792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 938.109157][T26792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.125199][T26792] net_ratelimit: 120 callbacks suppressed [ 938.131030][T26792] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 938.153780][T26794] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: -1 [ 938.153797][T26794] ref_ctr decrement failed for inode: 0x14a offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807ccfd940 [ 938.153840][T26794] uprobe: syz.0.7290:26794 failed to unregister, leaking uprobe [ 938.272683][ T4922] Bluetooth: hci1: command 0x0406 tx timeout [ 939.369827][T11778] usb 4-1: USB disconnect, device number 34 [ 939.406576][T26812] FAULT_INJECTION: forcing a failure. [ 939.406576][T26812] name failslab, interval 1, probability 0, space 0, times 0 [ 939.406621][T26812] CPU: 0 UID: 0 PID: 26812 Comm: syz.2.7296 Not tainted syzkaller #0 PREEMPT(full) [ 939.406635][T26812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 939.406642][T26812] Call Trace: [ 939.406646][T26812] [ 939.406657][T26812] dump_stack_lvl+0x100/0x190 [ 939.406679][T26812] should_fail_ex.cold+0x5/0xa [ 939.406697][T26812] should_failslab+0xc2/0x120 [ 939.406712][T26812] __kmalloc_noprof+0xfc/0x840 [ 939.406723][T26812] ? rcu_is_watching+0x13/0xc0 [ 939.406740][T26812] ? tomoyo_realpath_from_path+0xb6/0x690 [ 939.406755][T26812] tomoyo_realpath_from_path+0xb6/0x690 [ 939.406770][T26812] tomoyo_path_number_perm+0x23c/0x580 [ 939.406786][T26812] ? tomoyo_path_number_perm+0x22e/0x580 [ 939.406802][T26812] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 939.406819][T26812] ? __pfx_futex_wait+0x10/0x10 [ 939.406838][T26812] ? __lock_acquire+0x4c5/0x1ec0 [ 939.406856][T26812] ? __fget_files+0x34/0x3d0 [ 939.406868][T26812] ? find_held_lock+0x2b/0x80 [ 939.406883][T26812] ? hook_file_ioctl_common+0x140/0x440 [ 939.406899][T26812] ? __fget_files+0x21f/0x3d0 [ 939.406913][T26812] security_file_ioctl+0xd3/0x230 [ 939.406931][T26812] __x64_sys_ioctl+0xb7/0x210 [ 939.406949][T26812] do_syscall_64+0x123/0x790 [ 939.406964][T26812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.406976][T26812] RIP: 0033:0x7f8a04f9e159 [ 939.406986][T26812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 939.406997][T26812] RSP: 002b:00007f8a05dd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 939.407009][T26812] RAX: ffffffffffffffda RBX: 00007f8a05225fa0 RCX: 00007f8a04f9e159 [ 939.407016][T26812] RDX: 0000000000000000 RSI: 00000000c0189376 RDI: 0000000000000003 [ 939.407023][T26812] RBP: 00007f8a05035024 R08: 0000000000000000 R09: 0000000000000000 [ 939.407029][T26812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 939.407036][T26812] R13: 00007f8a05226038 R14: 00007f8a05225fa0 R15: 00007ffec9d4d748 [ 939.407051][T26812] [ 939.431437][T26812] ERROR: Out of memory at tomoyo_realpath_from_path. [ 939.689715][T11778] usb 5-1: USB disconnect, device number 40 [ 939.975654][ T31] audit: type=1804 audit(1788366030.041:1742): pid=26820 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.7300" name="/newroot/91/file1" dev="fuse" ino=1 res=1 errno=0 [ 940.070719][T26827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.074529][T26827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.204440][T26834] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 940.340462][T26827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.352198][T26827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.382386][T26839] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: 1 [ 941.382408][T26839] ref_ctr increment failed for inode: 0x203 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807d6e3fc0 [ 941.404133][ T31] audit: type=1804 audit(1788366031.441:1743): pid=26839 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.7306" name="/newroot/94/file0" dev="tmpfs" ino=515 res=1 errno=0 [ 941.495175][T26837] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: -1 [ 941.495197][T26837] ref_ctr decrement failed for inode: 0x203 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807d6e3fc0 [ 941.495224][T26837] uprobe: syz.2.7306:26837 failed to unregister, leaking uprobe [ 941.684253][T26844] netlink: zone id is out of range [ 941.684273][T26844] netlink: zone id is out of range [ 941.684284][T26844] netlink: zone id is out of range [ 941.684290][T26844] netlink: zone id is out of range [ 941.684315][T26844] netlink: zone id is out of range [ 941.684321][T26844] netlink: zone id is out of range [ 941.684327][T26844] netlink: zone id is out of range [ 941.684333][T26844] netlink: zone id is out of range [ 941.939885][T26854] tipc: Enabling of bearer rejected, already enabled [ 941.993306][T11778] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 942.144087][T11778] usb 4-1: Using ep0 maxpacket: 32 [ 942.149751][T11778] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 942.162028][T11778] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 942.162049][T11778] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 942.162087][T11778] usb 4-1: config 0 interface 0 has no altsetting 0 [ 942.196641][T11778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.196674][T11778] usb 4-1: Product: syz [ 942.196690][T11778] usb 4-1: Manufacturer: syz [ 942.196700][T11778] usb 4-1: SerialNumber: syz [ 942.445377][ T31] audit: type=1804 audit(1788366032.511:1744): pid=26862 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.7314" name="/newroot/116/file1" dev="fuse" ino=1 res=1 errno=0 [ 942.865203][T26874] bridge_slave_0: left allmulticast mode [ 942.879441][T26874] bridge_slave_0: left promiscuous mode [ 942.879575][T26874] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.906399][T26874] bridge_slave_1: left allmulticast mode [ 942.914071][T26874] bridge_slave_1: left promiscuous mode [ 942.919747][T26874] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.963778][T26874] bond0: (slave bond_slave_0): Releasing backup interface [ 942.980065][T26874] bond0: (slave bond_slave_1): Releasing backup interface [ 943.013935][T26874] team0: Port device team_slave_0 removed [ 943.026769][T26874] team0: Port device team_slave_1 removed [ 943.036771][T26874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 943.044430][T26874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 943.053621][T26874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 943.063017][T26874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 943.211837][T26884] net_ratelimit: 123 callbacks suppressed [ 943.211863][T26884] netlink: zone id is out of range [ 943.211869][T26884] netlink: zone id is out of range [ 943.211875][T26884] netlink: zone id is out of range [ 943.211882][T26884] netlink: zone id is out of range [ 943.211888][T26884] netlink: zone id is out of range [ 943.211894][T26884] netlink: zone id is out of range [ 943.211900][T26884] netlink: zone id is out of range [ 943.211906][T26884] netlink: zone id is out of range [ 943.211911][T26884] netlink: zone id is out of range [ 943.211917][T26884] netlink: zone id is out of range [ 943.433021][T26887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.433265][T26887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.456247][T26887] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7323'. [ 943.456268][T26887] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7323'. [ 943.506184][T26889] FAULT_INJECTION: forcing a failure. [ 943.506184][T26889] name failslab, interval 1, probability 0, space 0, times 0 [ 943.519165][T26889] CPU: 0 UID: 0 PID: 26889 Comm: syz.4.7325 Not tainted syzkaller #0 PREEMPT(full) [ 943.519180][T26889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 943.519187][T26889] Call Trace: [ 943.519193][T26889] [ 943.519199][T26889] dump_stack_lvl+0x100/0x190 [ 943.519219][T26889] should_fail_ex.cold+0x5/0xa [ 943.519236][T26889] should_failslab+0xc2/0x120 [ 943.519251][T26889] __kmalloc_noprof+0xfc/0x840 [ 943.519262][T26889] ? rcu_is_watching+0x13/0xc0 [ 943.519279][T26889] ? tomoyo_realpath_from_path+0xb6/0x690 [ 943.519293][T26889] tomoyo_realpath_from_path+0xb6/0x690 [ 943.519308][T26889] tomoyo_path_number_perm+0x23c/0x580 [ 943.519323][T26889] ? tomoyo_path_number_perm+0x22e/0x580 [ 943.519340][T26889] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 943.519357][T26889] ? __pfx_futex_wait+0x10/0x10 [ 943.519379][T26889] ? __lock_acquire+0x4c5/0x1ec0 [ 943.519398][T26889] ? __fget_files+0x34/0x3d0 [ 943.519411][T26889] ? find_held_lock+0x2b/0x80 [ 943.519425][T26889] ? hook_file_ioctl_common+0x140/0x440 [ 943.519441][T26889] ? __fget_files+0x21f/0x3d0 [ 943.519456][T26889] security_file_ioctl+0xd3/0x230 [ 943.519474][T26889] __x64_sys_ioctl+0xb7/0x210 [ 943.519492][T26889] do_syscall_64+0x123/0x790 [ 943.519507][T26889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.519518][T26889] RIP: 0033:0x7f339ab9e159 [ 943.519528][T26889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 943.519538][T26889] RSP: 002b:00007f339b9d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 943.519549][T26889] RAX: ffffffffffffffda RBX: 00007f339ae25fa0 RCX: 00007f339ab9e159 [ 943.519556][T26889] RDX: 0000000000000000 RSI: 00000000c0189376 RDI: 0000000000000003 [ 943.519563][T26889] RBP: 00007f339ac35024 R08: 0000000000000000 R09: 0000000000000000 [ 943.519570][T26889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 943.519578][T26889] R13: 00007f339ae26038 R14: 00007f339ae25fa0 R15: 00007ffea71eaac8 [ 943.519600][T26889] [ 943.555074][T26889] ERROR: Out of memory at tomoyo_realpath_from_path. [ 943.926875][T26895] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7326'. [ 944.421074][T26908] tipc: Enabled bearer , priority 0 [ 944.465871][T26906] tipc: Disabling bearer [ 944.755040][ T1233] usb 4-1: USB disconnect, device number 35 [ 944.935090][T26922] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7337'. [ 945.117195][T26929] tipc: Enabling of bearer rejected, already enabled [ 945.241273][T26935] tipc: Enabled bearer , priority 0 [ 945.270674][T26935] syzkaller0: entered promiscuous mode [ 945.276408][T11778] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 945.284516][T26935] syzkaller0: entered allmulticast mode [ 945.284847][T26935] tipc: Resetting bearer [ 945.303413][T26932] tipc: Resetting bearer [ 945.437196][T11778] usb 3-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 945.447152][T11778] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 945.447192][T11778] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 945.447210][T11778] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 945.447230][T11778] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.468356][ T1233] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 945.509159][T26085] IPVS: starting estimator thread 0... [ 945.608043][T26939] IPVS: using max 77 ests per chain, 184800 per kthread [ 945.628117][ T1233] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 945.649491][ T1233] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 945.649513][ T1233] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 945.686290][ T1233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.686312][ T1233] usb 4-1: Product: syz [ 945.686345][ T1233] usb 4-1: Manufacturer: syz [ 945.686355][ T1233] usb 4-1: SerialNumber: syz [ 947.361247][T26932] tipc: Disabling bearer [ 947.600128][T26953] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7350'. [ 947.733796][ T1233] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 947.831582][ T5850] usb 3-1: USB disconnect, device number 61 [ 947.882567][ T1233] usb 5-1: Using ep0 maxpacket: 32 [ 947.888034][ T1233] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 947.899793][ T1233] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 947.899815][ T1233] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 947.899834][ T1233] usb 5-1: config 0 interface 0 has no altsetting 0 [ 947.928668][ T1233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.928688][ T1233] usb 5-1: Product: syz [ 947.928702][ T1233] usb 5-1: Manufacturer: syz [ 947.928712][ T1233] usb 5-1: SerialNumber: syz [ 948.015800][T26960] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 948.026855][T26960] tipc: Enabled bearer , priority 10 [ 948.083590][T26963] coredump: 518(syz.1.7354): format_corename failed, aborting core [ 948.248195][ T5731] usb 4-1: USB disconnect, device number 36 [ 948.433762][ T5850] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 948.583206][ T5850] usb 2-1: Using ep0 maxpacket: 8 [ 948.589923][ T5850] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 948.600936][ T5850] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 948.600969][ T5850] usb 2-1: config 0 has no interface number 0 [ 948.600987][ T5850] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 948.601000][ T5850] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 948.601014][ T5850] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 948.601028][ T5850] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 948.601047][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.723000][ T5731] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 948.872593][ T5731] usb 4-1: Using ep0 maxpacket: 32 [ 948.878038][ T5731] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 948.890872][ T5731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.890892][ T5731] usb 4-1: Product: syz [ 948.890907][ T5731] usb 4-1: Manufacturer: syz [ 948.890917][ T5731] usb 4-1: SerialNumber: syz [ 949.519082][T26986] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7361'. [ 949.586042][T26988] random: crng reseeded on system resumption [ 950.787133][T27003] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: 1 [ 950.787155][T27003] ref_ctr increment failed for inode: 0x1a5 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802435f2c0 [ 950.807917][ T31] audit: type=1804 audit(1788366040.851:1745): pid=27003 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.7367" name="/newroot/76/file0" dev="tmpfs" ino=421 res=1 errno=0 [ 950.850121][ T5731] usb 5-1: USB disconnect, device number 41 [ 950.906385][T26998] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: -1 [ 950.906403][T26998] ref_ctr decrement failed for inode: 0x1a5 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802435f2c0 [ 950.906446][T26998] uprobe: syz.0.7367:26998 failed to unregister, leaking uprobe [ 951.037570][ T1233] usb 2-1: USB disconnect, device number 48 [ 951.062104][T11722] IPVS: starting estimator thread 0... [ 951.100703][T27012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.109603][T27012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.153134][T27010] IPVS: using max 77 ests per chain, 184800 per kthread [ 951.182578][T27015] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7372'. [ 951.215422][T27014] ------------[ cut here ]------------ [ 951.215435][T27014] timer_delete_sync(&sdp->delay_work) && rcu_segcblist_n_cbs(&sdp->srcu_cblist) [ 951.215446][T27014] WARNING: kernel/rcu/srcutree.c:706 at cleanup_srcu_struct+0x6e4/0xb30, CPU#0: syz.1.7372/27014 [ 951.241520][T27014] Modules linked in: [ 951.245425][T27014] CPU: 0 UID: 0 PID: 27014 Comm: syz.1.7372 Not tainted syzkaller #0 PREEMPT(full) [ 951.254820][T27014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 951.264871][T27014] RIP: 0010:cleanup_srcu_struct+0x6e4/0xb30 [ 951.270773][T27014] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 f4 03 00 00 48 8b 83 e8 00 00 00 48 8d 93 80 01 00 00 48 85 c0 0f 84 a7 fc ff ff 90 <0f> 0b 90 48 8d 8b 00 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 [ 951.290795][T27014] RSP: 0018:ffffc90003207cc0 EFLAGS: 00010206 [ 951.296898][T27014] RAX: 0000000000000006 RBX: ffffe8ffffa61bc0 RCX: 0000000000000000 [ 951.304875][T27014] RDX: ffffe8ffffa61d40 RSI: ffffffff81f6b0ff RDI: ffff888024c2cb00 [ 951.312854][T27014] RBP: ffff888037ff9800 R08: 0000000000000005 R09: 00000000ffffffff [ 951.320812][T27014] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88804a5be2f8 [ 951.329459][T27014] R13: 0000000000000000 R14: ffffffff8e6b70b0 R15: ffff88804a5be338 [ 951.337931][T27014] FS: 0000555581fbf500(0000) GS:ffff888123b61000(0000) knlGS:0000000000000000 [ 951.346900][T27014] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 951.353497][T27014] CR2: 00002000002f4000 CR3: 000000008674a000 CR4: 00000000003526f0 [ 951.361461][T27014] Call Trace: [ 951.364744][T27014] [ 951.367668][T27014] kvm_put_kvm+0x95b/0xc10 [ 951.372077][T27014] ? __pfx_kvm_vm_release+0x10/0x10 [ 951.377518][T27014] kvm_vm_release+0x3c/0x50 [ 951.382066][T27014] __fput+0x3ff/0xb50 [ 951.386075][T27014] ? _raw_spin_unlock_irq+0x23/0x50 [ 951.391270][T27014] task_work_run+0x150/0x240 [ 951.395863][T27014] ? __pfx_task_work_run+0x10/0x10 [ 951.400969][T27014] exit_to_user_mode_loop+0x1d8/0x700 [ 951.406348][T27014] ? rcu_is_watching+0x13/0xc0 [ 951.411106][T27014] do_syscall_64+0x661/0x790 [ 951.415712][T27014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.421604][T27014] RIP: 0033:0x7f07be79e159 [ 951.426034][T27014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 951.446320][T27014] RSP: 002b:00007ffe3968af58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 951.455350][T27014] RAX: 0000000000000000 RBX: 00007ffe3968b040 RCX: 00007f07be79e159 [ 951.463392][T27014] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 951.471352][T27014] RBP: 00000000000e8339 R08: 0000000000000001 R09: 0000000000000000 [ 951.479332][T27014] R10: 0000001b30a20000 R11: 0000000000000246 R12: 00007ffe3968b080 [ 951.487299][T27014] R13: 00007f07bea25fac R14: 00000000000e83ac R15: 00007f07bea25fa0 [ 951.495283][T27014] [ 951.498303][T27014] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 951.505559][T27014] CPU: 0 UID: 0 PID: 27014 Comm: syz.1.7372 Not tainted syzkaller #0 PREEMPT(full) [ 951.514897][T27014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 951.524928][T27014] Call Trace: [ 951.528179][T27014] [ 951.531081][T27014] dump_stack_lvl+0x100/0x190 [ 951.535734][T27014] vpanic+0x553/0x970 [ 951.539686][T27014] ? __pfx_vpanic+0x10/0x10 [ 951.544163][T27014] panic+0xd1/0xe0 [ 951.547854][T27014] ? __pfx_panic+0x10/0x10 [ 951.552246][T27014] check_panic_on_warn.cold+0x19/0x34 [ 951.557588][T27014] ? cleanup_srcu_struct+0x6e4/0xb30 [ 951.562843][T27014] __warn.cold+0x191/0x318 [ 951.567232][T27014] __report_bug+0x30f/0x440 [ 951.571715][T27014] ? cleanup_srcu_struct+0x6e4/0xb30 [ 951.576977][T27014] ? __pfx___report_bug+0x10/0x10 [ 951.581981][T27014] ? __pfx_debug_object_deactivate+0x10/0x10 [ 951.587938][T27014] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 951.593303][T27014] ? _raw_spin_lock_irqsave+0x52/0x60 [ 951.598652][T27014] ? find_held_lock+0x2b/0x80 [ 951.603302][T27014] ? cleanup_srcu_struct+0x6e4/0xb30 [ 951.608557][T27014] report_bug+0xb3/0x220 [ 951.612775][T27014] ? cleanup_srcu_struct+0x6e4/0xb30 [ 951.618034][T27014] handle_bug+0x16a/0x2a0 [ 951.622341][T27014] exc_invalid_op+0x17/0x50 [ 951.626820][T27014] asm_exc_invalid_op+0x1a/0x20 [ 951.631653][T27014] RIP: 0010:cleanup_srcu_struct+0x6e4/0xb30 [ 951.637518][T27014] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 f4 03 00 00 48 8b 83 e8 00 00 00 48 8d 93 80 01 00 00 48 85 c0 0f 84 a7 fc ff ff 90 <0f> 0b 90 48 8d 8b 00 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 [ 951.657098][T27014] RSP: 0018:ffffc90003207cc0 EFLAGS: 00010206 [ 951.663139][T27014] RAX: 0000000000000006 RBX: ffffe8ffffa61bc0 RCX: 0000000000000000 [ 951.671088][T27014] RDX: ffffe8ffffa61d40 RSI: ffffffff81f6b0ff RDI: ffff888024c2cb00 [ 951.679030][T27014] RBP: ffff888037ff9800 R08: 0000000000000005 R09: 00000000ffffffff [ 951.686973][T27014] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88804a5be2f8 [ 951.694916][T27014] R13: 0000000000000000 R14: ffffffff8e6b70b0 R15: ffff88804a5be338 [ 951.702861][T27014] ? __timer_delete_sync+0x10f/0x1c0 [ 951.708124][T27014] kvm_put_kvm+0x95b/0xc10 [ 951.712515][T27014] ? __pfx_kvm_vm_release+0x10/0x10 [ 951.717683][T27014] kvm_vm_release+0x3c/0x50 [ 951.722158][T27014] __fput+0x3ff/0xb50 [ 951.726115][T27014] ? _raw_spin_unlock_irq+0x23/0x50 [ 951.731291][T27014] task_work_run+0x150/0x240 [ 951.735857][T27014] ? __pfx_task_work_run+0x10/0x10 [ 951.740956][T27014] exit_to_user_mode_loop+0x1d8/0x700 [ 951.746300][T27014] ? rcu_is_watching+0x13/0xc0 [ 951.751036][T27014] do_syscall_64+0x661/0x790 [ 951.755605][T27014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.761469][T27014] RIP: 0033:0x7f07be79e159 [ 951.765867][T27014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 951.785442][T27014] RSP: 002b:00007ffe3968af58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 951.793821][T27014] RAX: 0000000000000000 RBX: 00007ffe3968b040 RCX: 00007f07be79e159 [ 951.801761][T27014] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 951.809699][T27014] RBP: 00000000000e8339 R08: 0000000000000001 R09: 0000000000000000 [ 951.817644][T27014] R10: 0000001b30a20000 R11: 0000000000000246 R12: 00007ffe3968b080 [ 951.825584][T27014] R13: 00007f07bea25fac R14: 00000000000e83ac R15: 00007f07bea25fa0 [ 951.833531][T27014] [ 951.836557][T27014] Kernel Offset: disabled [ 951.840854][T27014] Rebooting in 86400 seconds..