last executing test programs: 12.428047482s ago: executing program 0 (id=6614): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x40000092}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) shutdown(r0, 0x1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x40, 0x1, 0x2, 0x9}, {0x6, 0x0, 0x3, 0x365}]}) write$ppp(r3, &(0x7f0000000400)='k\'', 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r5) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYBLOB="050000000001ff0000004400000008000300", @ANYRES32=r6, @ANYBLOB="0c00238005001f"], 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000840) 11.184834961s ago: executing program 0 (id=6618): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104}}}, &(0x7f0000000300)=0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) syz_open_dev$usbfs(&(0x7f0000000440), 0x76, 0x160243) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000000)=0x15) syz_ublk_setup_queues(r8, r7, &(0x7f0000000540)={0x0, 0xc808, 0x0, 0xfffffffe, 0x28e}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8c3, 0x20, 0x3, 0x197, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3c35, 0x100, 0x0, 0xc8, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7669, 0x4, 0x1, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x2, 0x2b7}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r8, 0xc0107523, 0x0, 0x0, 0x0, 0x1, {0x10}, 0x0, r6, '\x00', {0x1, 0xb55, 0x100104, 0x0}}, &(0x7f0000000180)) 8.108713259s ago: executing program 1 (id=6622): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_udp_int(r1, 0x11, 0x67, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) pipe2$9p(&(0x7f00000000c0), 0x84800) r6 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x300fff2) 7.807657422s ago: executing program 0 (id=6623): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = fanotify_init(0xf00, 0x1) fanotify_mark(r2, 0x505, 0x8009967, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r6, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x800) semctl$GETALL(0x0, 0x0, 0xd, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/263}, 0x10f, 0x2, 0x3800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x8, 0xb}, 0x50) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x106, 0x2, 0xff, 0x1}}) 7.700446061s ago: executing program 1 (id=6624): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfae8}, 0xf) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0), 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{0x6, 0x4, 0x4, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x42054) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r3 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x80000003, 0x5, 0x27, 0x2006, 0xf4, 0x475328a8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x9, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x5, 0x3, 0x4, 0x8, 0x4005, 0x746f, 0x9f, 0x6, 0x4, 0xee, 0x400004, 0x2, 0x1]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000012000000050800000010"], 0x48) epoll_create1(0x0) socket(0x1, 0x80802, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000780)={0x1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, @dev}]}) 6.701836038s ago: executing program 0 (id=6625): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x43dd, &(0x7f00000002c0)={0x0, 0x57b0, 0x8000, 0xfffffffd, 0x40055}, 0x0, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r5, r6, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4) openat(0xffffffffffffff9c, 0x0, 0x2042, 0x19d) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="6400000003010104000000000000000002000000500001802c000180140003002001000000000000000000000000000214000400fe8000000000000000000000000000bb0c00028005000100110000001400018008000100ac1e000108000200000800"], 0x64}}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000003a40)={0x0, 0x2000000}) 6.499580507s ago: executing program 1 (id=6627): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000cc0)={0x34, &(0x7f0000000b00)=ANY=[@ANYBLOB='60\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000540)=""/102) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = creat(0x0, 0x4b) close(r1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r2, &(0x7f0000000180)=""/35, 0x23) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000063, 0x0) r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r4, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000000)="46a1a0995a02", 0x0, 0x0, 0x14, 0x0, 0x0}) add_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r3) prctl$PR_SCHED_CORE(0x41, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 6.054263418s ago: executing program 3 (id=6628): socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)) openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xb0a7, 0x80, 0x0, 0x10f}, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/clear_refs\x00', 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x1d7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 5.917969067s ago: executing program 3 (id=6630): socket$kcm(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') r4 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x60000526) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa) getdents64(r6, &(0x7f0000004440)=""/4096, 0x1000) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffe) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f00000002c0)={0x1, 0x0, [{0xd, 0x5, 0x5, 0x5, 0xcd73, 0x3, 0x5}]}) read$FUSE(r3, &(0x7f0000002400)={0x2020}, 0x2020) 5.871673966s ago: executing program 4 (id=6631): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001e40)={0xe4, r4, 0x1, 0x70bd2e, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x98, 0x8, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x64, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}]}]}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f00000001c0)) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f9"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b40)="86545d2157646172b815818bfd0e14575562668985793802", 0x18}, {0x0}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) 5.660821229s ago: executing program 0 (id=6632): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000340)={0x7}) r4 = gettid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r4, 0x0, 0x4004) kcmp(r4, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'macvtap0\x00', &(0x7f0000000000)=@ethtool_cmd={0x4a, 0x20000000, 0x0, 0x7, 0xff, 0x0, 0x5, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, [0x0, 0xab]}}) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000180)={0x8d, 0x1, 0x3, 0x7, 0x3, 0x3, "b8067bdca1a66e65920f2fda16f4192a", 0x7, 0x7, 0xff, 0x9, 0x7, 0x5, 0x4}) socket$nl_netfilter(0x10, 0x3, 0xc) shmdt(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) 4.869138442s ago: executing program 1 (id=6633): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650cab, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x6, 0x4, 0x4, 0x0, {}, {0x0, 0xb846941ed94b4582, 0x96, 0x0, 0x0, 0xa, "ee0f09a2"}, 0xffff, 0x2, {}, 0x80000}) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000380)={0x5, 0x0}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) accept4(r2, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000180)=0x80, 0x80800) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket(0x1e, 0x1, 0x0) getsockopt$inet6_tcp_buf(r7, 0x6, 0x3c, 0x0, &(0x7f00000000c0)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f400002000000000000080000000000000000010005000000000044000500ac141426"], 0xfc}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000001c0)={0x40000014}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000040)={0x2}) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$rtl8150(r8, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f0000000a00)=ANY=[@ANYBLOB="100e0400000053016a31"], 0x0, 0x0}) 4.867845561s ago: executing program 3 (id=6634): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_udp_int(r1, 0x11, 0x67, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) pipe2$9p(&(0x7f00000000c0), 0x84800) r6 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x300fff2) 4.440289595s ago: executing program 2 (id=6635): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc00000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x4800) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) 3.355050274s ago: executing program 2 (id=6636): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r1, 0x16, 0x0, @void}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd27, 0x8, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x29}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040840}, 0x4008000) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r5, 0x0) 3.339027083s ago: executing program 4 (id=6637): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/220, 0xdc, 0x4009) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpgid(r1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000280)={0x1f, 0xfffe, @any, 0x0, 0x1}, 0xe) clock_gettime(0x3, &(0x7f0000000080)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001540)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/182, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000400)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40110) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @host}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) 3.31291753s ago: executing program 3 (id=6638): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r1, 0x16, 0x0, @void}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd27, 0x8, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x29}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040840}, 0x4008000) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r5, 0x0) 2.051239992s ago: executing program 2 (id=6639): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}}, 0x40848c0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12c1a, 0x1a111}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x20004000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) umount2(&(0x7f0000000380)='./file1/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x4000040) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0x9c, 0x7f, 0x7}, 0x9c) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd28, 0x0, {{@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000, 0xffffffffffffffff}, 0xfffd}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 1.972292883s ago: executing program 1 (id=6640): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x17) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141442, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r1 = fanotify_init(0x200, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_io_uring_setup(0xf00, 0x0, 0x0, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0, 0x17, &(0x7f0000000180), &(0x7f0000000180)=""/23, 0x1, 0x0, 0x0, 0x9e, &(0x7f00000005c0), &(0x7f0000000600)="46c752cd465151bc38d55a843a4644297220be4ea6d5d92fc97b1a2000f8db7e540fa1a5e5753ff53f2f93d16d72fbc6b5380e2c0a7ca93cc927b965ff094a3245462349e2271de9d9610620c8580b2d080baf4b644bb38a1c76ed5add5b93270f66273d185e2e45e36e6162aff1ccb8653343a80d38ccc3ec53b5d85b904b5a0ae4c4b6e7e5bf9172307fa1cade3d6b887cf8255f1d956bd1d426ff2f54", 0x4, 0x0, 0x6}, 0x50) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ff1000/0xf000)=nil) lstat(&(0x7f0000000100)='./cgroup\x00', &(0x7f0000000240)) stat(0x0, 0x0) r4 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='gid', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x100000000000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0x1000000, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@local, 0xfff, 0x2, 0x1, 0x1}, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) fanotify_mark(r1, 0x1, 0x8001033, r5, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20301, 0x0) 1.878992665s ago: executing program 4 (id=6641): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfae8}, 0xf) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b257c322f54ca01000000bb318d29a96c5035fd713f02f959dc5e55bd518d2ce967008eb6db0a89b4129c5b692bff14aeaa783a3cb22eb1004d87c97e8c8c587adeff394c43b74f5ba5ce66df35b3f4e7d9d7cbc36a20ec75e5dc96701ef447ee3160e70ad13117e96c171be8f0ba442afef0d073a33d", 0xc2}], 0x1}}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002b00)="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", 0x142}], 0x1}}], 0x2, 0x42054) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000040)="17", 0xfffffe75, 0x10008085, 0x0, 0x0) r3 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x5, 0x27, 0x2006, 0xf1, 0x20008, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x4, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x9f, 0x6, 0x4, 0xee, 0x4, 0x8000]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000012000000050800000010"], 0x48) epoll_create1(0x0) socket(0x1, 0x80802, 0x0) epoll_create1(0x0) 1.70725505s ago: executing program 3 (id=6642): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) socket$unix(0x1, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000070c0)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16, @ANYBLOB="a1ab23bd0300", @ANYBLOB="0c0099000400000076"], 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x2400c880) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x4) lseek(r4, 0x851, 0x1) 731.047812ms ago: executing program 3 (id=6643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r1, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r3, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000672000/0x1000)=nil) syz_clone3(&(0x7f0000000140)={0x120006200, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) close(r0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) close(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) write(r0, &(0x7f00000001c0)="f279cab401a8aa60d569a864269b2f11ff4b5e622fe28fccad246c8cd6476567f6d4c0186c9a0dbd6fed08b7a29c31adf6bcff4fba1a283c0eb61d7990a1dd7c", 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 710.108285ms ago: executing program 4 (id=6644): socket$inet6(0xa, 0x80002, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="740000000206010200000000000000000200000314000780080008400000003708000640000008000e0003006269746d61703a6970000000050005000a00000005000400040000000900020073797a3100000000"], 0x74}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x14e203, 0x0) ioctl$SNDCTL_SEQ_PANIC(r4, 0x5111) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x2, 0x0, 0x0, 0xfe, "0062baad630400"}) r5 = syz_open_pts(r1, 0x80) r6 = dup3(r5, r1, 0x80000) read(r6, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) 644.68462ms ago: executing program 2 (id=6645): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x2000) readv(r0, &(0x7f0000001400)=[{0x0}, {0x0}], 0x2) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f0000000040)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sched_getscheduler(0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000a00)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="f78d9ca3", 0x4}, {0x0}, {0x0}, {&(0x7f0000000240)="ddc3ab337e2f9116f2410f430d4d0323f9ea3a565c4b919e11acc3c7ac98c6e6c0f13da649270103c65ce15d4ecd3170652fe76ed58c6d50faeee87aee87c865633ebc39274dd8d5eaefef524947e1926242409a59531c43bff21dbd88d9a5b2156abb085dfbe4459acd4e24facc247c34669ee876e8f2", 0x77}, {0x0}], 0x5}], 0x1, 0x40) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x0) r4 = syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, &(0x7f0000000140)) syz_ublk_setup_queues(r4, 0x0, 0x0, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x4, 0x401, 0x31c, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2, 0x1, 0x2000008, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x400, 0x0, 0x400216, 0x0, r4}}], 0x4, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x38, 0x24044854, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000180)=0x7ff, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xfffffffffffffff7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x468, 0x3fe, 0x50565559, 0x4, 0x8, 0x46, 0x7, 0x3, 0x0, 0x6, 0x0, 0x7}}) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) 450.103545ms ago: executing program 2 (id=6646): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100000078000000000005000000180001801400020073797a5f74756e0000"], 0x7c}, 0x1, 0x0, 0x0, 0x44851}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_udp_int(r2, 0x11, 0x67, 0x0, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) pipe2$9p(&(0x7f00000000c0), 0x84800) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r7, 0x545c, 0x300fff2) 346.524137ms ago: executing program 4 (id=6647): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100000078000000000005000000180001801400020073797a5f74756e0000"], 0x7c}, 0x1, 0x0, 0x0, 0x44851}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_udp_int(r2, 0x11, 0x67, 0x0, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) pipe2$9p(&(0x7f00000000c0), 0x84800) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r7, 0x545c, 0x300fff2) 291.910307ms ago: executing program 1 (id=6648): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc00000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x4800) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) 277.2637ms ago: executing program 2 (id=6649): r0 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000a80)={0x1ff, 0x200, 0x1, {0x6, @sliced={0x0, [0x9, 0x100, 0x4, 0x3, 0x6, 0x4, 0x1, 0x4, 0x4, 0x7, 0x200, 0x2, 0xad, 0x0, 0x6e, 0xfff7, 0x6, 0x2, 0x2, 0x0, 0x2, 0x1800, 0x5, 0x0, 0x8000, 0xa000, 0x401, 0x2480, 0x7, 0x101, 0x4, 0x1, 0x1, 0x0, 0x6, 0x1, 0x8, 0x0, 0x800, 0x5, 0x3, 0xffff, 0xfff, 0x3, 0x5c69, 0x2, 0xd17, 0x7], 0x9}}, 0x9}) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x169140, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0xc02) ioctl$EVIOCGREP(r3, 0x80084503, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) landlock_restrict_self(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x4, 0x1, 0x8}]}) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x22401, 0x0) fallocate(r7, 0x11, 0x460e, 0x40003) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000000)={0x4, 0x6, 0x7fffffff, 0xb, 0x18, "0283248f2a8c124894ece99e2aab0949c444b9"}) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x6, 0x0, 0x7000000, 0x101}, 0x1c) 184.05418ms ago: executing program 0 (id=6650): mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10119, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYRES32=0x0], 0x9d) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)) mbind(&(0x7f0000c9c000/0x3000)=nil, 0x3000, 0x4003, 0x0, 0x9, 0x1) socket(0x25, 0x801, 0x7) openat$dir(0xffffff9c, &(0x7f0000000340)='./file0/file1\x00', 0x40, 0x80) lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) r3 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) readv(r3, &(0x7f0000000280)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1) 0s ago: executing program 4 (id=6651): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000010900010073797a300000000008000340000000011400000011000100"], 0x64}}, 0x4000000) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=ANY=[@ANYBLOB="20000000150a0102cfc6cb2c3ec3b0000000000000000000000000a554e5ced2"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00\x00\b', 0x44, 0x2f, 0x1, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0xfffffffd, {{0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x20}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x2, {0xfffdfff8, 0xfffe}}}}}}}}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0), 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): parse failed [ 1751.792744][T22596] kone 0003:1E7D:2CED.0011: probe with driver kone failed with error -22 [ 1751.908339][ T5738] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 1751.944785][ T5738] cdc_ncm 4-1:1.0: bind() failure [ 1751.966459][ T5738] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1751.979737][ T5738] cdc_ncm 4-1:1.1: bind() failure [ 1751.995440][ T5738] usb 4-1: USB disconnect, device number 3 [ 1752.012502][T22596] usb 1-1: USB disconnect, device number 117 [ 1752.281271][T25245] xt_hashlimit: size too large, truncated to 1048576 [ 1752.325539][ T29] audit: type=1400 audit(1784038462.798:3176): avc: denied { mount } for pid=25246 comm="syz.4.5173" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1752.509029][T25253] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1752.694858][ T29] audit: type=1400 audit(1784038463.139:3177): avc: denied { connect } for pid=25258 comm="syz.4.5178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1752.869046][T25263] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5180'. [ 1753.000198][ T5738] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1753.173135][ T5738] usb 4-1: Using ep0 maxpacket: 8 [ 1753.184833][ T5738] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1753.227139][ T5738] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1753.249026][ T5738] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1753.274208][ T5738] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1753.303615][ T5738] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1753.316258][ T5738] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1753.567508][T25261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1753.586339][T25261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1753.600418][ T5738] usb 4-1: GET_CAPABILITIES returned 0 [ 1753.617670][T16429] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1753.618884][ T5738] usbtmc 4-1:16.0: can't read capabilities [ 1753.720616][T25283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1753.785384][T16429] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1753.798435][T16429] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1753.809458][T16429] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1753.834367][T16429] usb 1-1: config 0 descriptor?? [ 1753.847412][T25275] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1753.879446][ T5738] usb 4-1: USB disconnect, device number 4 [ 1754.155699][T25293] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5192'. [ 1754.423391][T25295] overlayfs: failed to clone upperpath [ 1754.629395][T16429] hid_parser_main: 30 callbacks suppressed [ 1754.629442][T16429] logitech-djreceiver 0003:046D:C71F.0012: unknown main item tag 0x0 [ 1754.668106][T16429] logitech-djreceiver 0003:046D:C71F.0012: unknown main item tag 0x0 [ 1754.678931][ T29] audit: type=1400 audit(1784038464.967:3178): avc: denied { mount } for pid=25308 comm="syz.2.5199" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1754.685487][T25309] overlayfs: upper fs does not support tmpfile. [ 1754.702642][T16429] logitech-djreceiver 0003:046D:C71F.0012: unknown main item tag 0x0 [ 1754.717807][T16429] logitech-djreceiver 0003:046D:C71F.0012: unknown main item tag 0x0 [ 1754.725914][T16429] logitech-djreceiver 0003:046D:C71F.0012: unknown main item tag 0x0 [ 1754.734006][T16429] logitech-djreceiver 0003:046D:C71F.0012: unknown main item tag 0x0 [ 1754.742133][ T29] audit: type=1400 audit(1784038464.967:3179): avc: denied { mounton } for pid=25308 comm="syz.2.5199" path="/file0" dev="bpf" ino=80074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:bpf_t tclass=dir permissive=1 [ 1754.763915][T16429] logitech-djreceiver 0003:046D:C71F.0012: unknown main item tag 0x0 [ 1754.772036][T16429] logitech-djreceiver 0003:046D:C71F.0012: unknown main item tag 0x0 [ 1754.780121][T16429] logitech-djreceiver 0003:046D:C71F.0012: unknown main item tag 0x0 [ 1754.788195][T16429] logitech-djreceiver 0003:046D:C71F.0012: unknown main item tag 0x0 [ 1754.812569][T16429] logitech-djreceiver 0003:046D:C71F.0012: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.0-1/input0 [ 1754.915478][T25314] loop5: detected capacity change from 0 to 7 [ 1755.061124][T25314] Dev loop5: unable to read RDB block 7 [ 1755.075591][T25314] loop5: AHDI p1 p2 p3 [ 1755.089759][T25314] loop5: partition table partially beyond EOD, truncated [ 1755.108386][ T5738] usb 1-1: USB disconnect, device number 118 [ 1755.141098][T25314] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1755.161379][T25314] loop5: p3 start 335544320 is beyond EOD, truncated [ 1755.492094][T16429] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1755.664526][T16429] usb 4-1: Using ep0 maxpacket: 8 [ 1755.671253][T16429] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1755.683934][T16429] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1755.694759][T16429] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1755.709534][T16429] usb 4-1: config 0 descriptor?? [ 1755.807609][T25331] SELinux: failed to load policy [ 1756.258381][T16429] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1756.560372][ T5738] usb 4-1: USB disconnect, device number 5 [ 1756.665129][T25352] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5212'. [ 1757.026365][T25355] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5214'. [ 1757.452086][T25375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5224'. [ 1757.471208][T25375] wireguard: wireguard0: Could not create IPv4 socket [ 1757.484040][ T29] audit: type=1400 audit(1784038467.561:3180): avc: denied { bind } for pid=25378 comm="syz.0.5226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1757.608338][ T29] audit: type=1400 audit(1784038467.681:3181): avc: denied { read } for pid=25378 comm="syz.0.5226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1757.899147][T25388] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5227'. [ 1758.356103][T25414] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5235'. [ 1759.153883][T25422] overlayfs: failed to clone upperpath [ 1759.181367][T25428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5243'. [ 1759.322517][T25434] bond0: (slave syz_tun): Releasing backup interface [ 1759.340292][T25434] bond0: (slave team0): Releasing backup interface [ 1759.354363][T25434] team0: left promiscuous mode [ 1759.364518][T25434] team_slave_1: left promiscuous mode [ 1759.381718][T25434] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 1759.400496][T25434] bond0: (slave bond_slave_1): Releasing backup interface [ 1759.411555][T25434] bond_slave_1: left promiscuous mode [ 1759.418400][T25434] team_slave_1: left allmulticast mode [ 1759.428645][T25434] team0: Port device team_slave_1 removed [ 1759.435583][T25434] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 1759.444314][T25434] team0: Port device netdevsim1 removed [ 1759.619156][T25442] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5248'. [ 1760.299716][T25465] netlink: 'syz.3.5255': attribute type 11 has an invalid length. [ 1760.307805][T25465] netlink: 252 bytes leftover after parsing attributes in process `syz.3.5255'. [ 1760.404535][T25470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5258'. [ 1760.424742][T25470] netlink: 'syz.1.5258': attribute type 11 has an invalid length. [ 1760.463101][T16429] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1760.486113][T25470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5258'. [ 1760.502736][T25470] netlink: 'syz.1.5258': attribute type 11 has an invalid length. [ 1760.688577][T25475] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5260'. [ 1761.537776][T16429] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 1761.547039][T16429] usb 1-1: config 0 has no interface number 0 [ 1761.554235][T16429] usb 1-1: config 0 interface 255 has no altsetting 0 [ 1761.565104][T16429] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1761.575996][T16429] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.601135][T16429] usb 1-1: config 0 descriptor?? [ 1761.613722][T16429] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1761.734741][T25497] 9p: Bad value for 'rfdno' [ 1761.912324][T16429] gp8psk: usb in 128 operation failed. [ 1762.039891][T16429] gp8psk: usb in 137 operation failed. [ 1762.103528][T16429] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1762.126816][T16429] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1762.138146][T16429] usb 1-1: media controller created [ 1762.188508][T16429] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1762.303241][T16429] gp8psk_fe: Frontend attached [ 1762.355642][T16429] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1762.393515][ T5738] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 1762.397093][T16429] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1762.460293][T16429] gp8psk: usb in 138 operation failed. [ 1762.466063][T16429] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1762.476462][T16429] gp8psk: found Genpix USB device pID = 203 (hex) [ 1762.492487][T16429] usb 1-1: USB disconnect, device number 119 [ 1762.546182][ T5738] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1762.558183][ T5738] usb 4-1: not running at top speed; connect to a high speed hub [ 1762.578247][T16429] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1762.590079][ T5738] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1762.602788][ T5738] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1762.621150][ T5738] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 1762.630741][ T5738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.638758][ T5738] usb 4-1: Product: syz [ 1762.644396][ T5738] usb 4-1: Manufacturer: syz [ 1762.649074][ T5738] usb 4-1: SerialNumber: syz [ 1762.947189][ T5738] usb 4-1: 3:0: failed to get current value for ch 1 (-71) [ 1762.960437][ T5738] usb 4-1: 3:0: cannot get min/max values for control 5 (id 3) [ 1762.961129][T25510] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5275'. [ 1762.983090][ T5738] usb 4-1: 3:0: cannot get min/max values for control 5 (id 3) [ 1763.332437][ T5738] usb 4-1: USB disconnect, device number 6 [ 1763.372140][T24640] udevd[24640]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1763.568168][T25529] netlink: 'syz.4.5278': attribute type 4 has an invalid length. [ 1763.599908][T25531] binder: 25530:25531 ioctl c0306201 0 returned -14 [ 1763.701930][T16429] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1763.775802][T25533] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5283'. [ 1763.930145][T16429] usb 1-1: Using ep0 maxpacket: 32 [ 1763.941398][T16429] usb 1-1: config 0 has an invalid interface number: 61 but max is 1 [ 1763.950343][T16429] usb 1-1: config 0 has no interface number 1 [ 1763.964857][T16429] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 1763.983313][T16429] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1763.993536][T16429] usb 1-1: Product: syz [ 1763.998746][T16429] usb 1-1: Manufacturer: syz [ 1764.003904][T16429] usb 1-1: SerialNumber: syz [ 1764.031287][T16429] usb 1-1: config 0 descriptor?? [ 1764.145326][ T5721] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1764.225813][T25558] fuse: fd is not a fuse device [ 1764.375620][T16429] viperboard 1-1:0.61: version 0.00 found at bus 001 address 120 [ 1764.416665][ T5721] usb 4-1: Using ep0 maxpacket: 32 [ 1764.430642][ T5721] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1764.462177][ T5721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1764.482784][T16429] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1764.493977][ T5721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1764.506352][T16429] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1764.517214][ T5721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1764.534052][ T5721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1764.551046][T16429] viperboard 1-1:0.0: version 0.00 found at bus 001 address 120 [ 1764.584307][ T5721] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1764.602337][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.610923][T16429] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1764.621863][ T5721] usb 4-1: Product: syz [ 1764.629286][ T5721] usb 4-1: Manufacturer: syz [ 1764.634918][T16429] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 1764.646234][ T5721] usb 4-1: SerialNumber: syz [ 1764.666261][ T5721] usb 4-1: config 0 descriptor?? [ 1764.682918][T16429] usb 1-1: USB disconnect, device number 120 [ 1765.444541][T25570] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5296'. [ 1765.482898][ T5721] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1765.490718][ T5721] input input27: Device does not respond to id packet M [ 1765.502628][ T5721] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1765.511297][ T5721] input input27: Device does not respond to id packet P [ 1765.520925][ T5721] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1765.528681][ T5721] input input27: Device does not respond to id packet B [ 1765.756517][ T5721] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1765.810547][ T5721] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1765.828859][ T5721] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1765.851881][ T5721] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1765.866594][T25576] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5298'. [ 1765.897418][ T5721] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input27 [ 1765.968554][ T5721] usb 4-1: USB disconnect, device number 7 [ 1766.468525][T25604] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5308'. [ 1768.080154][T25624] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5313'. [ 1768.311724][ T5738] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1768.556509][ T5738] usb 1-1: Using ep0 maxpacket: 32 [ 1768.579361][ T5738] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1768.597504][ T5738] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 1768.619746][ T5738] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 1768.639144][ T5738] usb 1-1: config 14 has no interface number 0 [ 1768.655490][ T5738] usb 1-1: config 14 has no interface number 1 [ 1768.662083][ T5738] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1768.673690][ T5738] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 1768.686891][ T5738] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1768.699190][ T5738] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1768.712534][ T5738] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1768.730671][ T5738] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 1768.742324][ T5738] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1768.765301][ T5738] usb 1-1: config 14 interface 57 has no altsetting 0 [ 1768.786148][ T5738] usb 1-1: config 14 interface 228 has no altsetting 0 [ 1768.807835][ T5738] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1768.824791][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.932323][T25644] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5321'. [ 1768.943305][ T5738] usb 1-1: Product: syz [ 1768.957039][ T5738] usb 1-1: Manufacturer: syz [ 1768.971193][ T5738] usb 1-1: SerialNumber: syz [ 1769.870603][ T5738] legousbtower 1-1:14.57: interrupt endpoints not found [ 1770.024106][ T29] audit: type=1400 audit(1784038479.138:3182): avc: denied { cmd } for pid=25663 comm="iou-wrk-25664" path="socket:[80956]" dev="sockfs" ino=80956 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1770.276509][T25670] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5329'. [ 1770.359396][ T5738] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1770.371305][ T5738] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1770.564507][T25680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5331'. [ 1771.614822][ C0] usb 1-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 1771.635031][ T5721] usb 1-1: USB disconnect, device number 121 [ 1772.368901][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1772.498885][ T5721] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 1772.534644][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1772.678348][ T29] audit: type=1400 audit(1784038481.594:3183): avc: denied { mounton } for pid=25706 comm="syz.2.5340" path="/file0" dev="ramfs" ino=81021 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1772.705251][T25709] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1772.773883][T25709] overlayfs: failed to set xattr on upper [ 1772.806139][T25709] overlayfs: ...falling back to redirect_dir=nofollow. [ 1772.845543][T25709] overlayfs: ...falling back to index=off. [ 1772.879203][T25709] overlayfs: ...falling back to uuid=null. [ 1772.916569][T25709] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 1773.309238][T25725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5345'. [ 1773.885786][T25734] fuse: Bad value for 'fd' [ 1775.133785][T25741] loop6: detected capacity change from 0 to 2640 [ 1775.182302][T25741] Buffer I/O error on dev loop6, logical block 0, async page read [ 1775.194821][T25741] Buffer I/O error on dev loop6, logical block 0, async page read [ 1775.203449][T25741] Buffer I/O error on dev loop6, logical block 0, async page read [ 1775.213658][T25741] Buffer I/O error on dev loop6, logical block 0, async page read [ 1775.222603][T25741] Buffer I/O error on dev loop6, logical block 0, async page read [ 1775.237109][T25741] Buffer I/O error on dev loop6, logical block 0, async page read [ 1775.303194][T25741] Buffer I/O error on dev loop6, logical block 0, async page read [ 1775.417977][T25741] Buffer I/O error on dev loop6, logical block 0, async page read [ 1775.515119][T25741] ldm_validate_partition_table(): Disk read failed. [ 1775.641136][T25741] Buffer I/O error on dev loop6, logical block 0, async page read [ 1775.782233][T25741] Buffer I/O error on dev loop6, logical block 0, async page read [ 1775.846397][T25741] Dev loop6: unable to read RDB block 0 [ 1775.990632][T25741] loop6: unable to read partition table [ 1775.998731][ T5721] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1776.034748][T25741] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1776.982794][ T5721] usb 4-1: Using ep0 maxpacket: 32 [ 1777.022722][ T5721] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1777.035069][ T5721] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 1777.045640][ T5721] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 1777.057573][ T5721] usb 4-1: config 14 has no interface number 0 [ 1777.064751][ T5721] usb 4-1: config 14 has no interface number 1 [ 1777.072163][ T5721] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1777.096324][ T5721] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1777.265248][ T5721] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1777.920806][ T5721] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1777.934521][ T5721] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1777.946760][ T5721] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1777.961846][ T5721] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1777.970145][ T5721] usb 4-1: config 14 interface 228 has no altsetting 0 [ 1777.981691][ T5721] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1778.010545][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1778.144472][ T5721] usb 4-1: Product: syz [ 1778.149646][ T5721] usb 4-1: Manufacturer: syz [ 1778.156464][ T5721] usb 4-1: SerialNumber: syz [ 1778.571971][ T5721] legousbtower 4-1:14.57: interrupt endpoints not found [ 1778.586986][ T5721] legousbtower 4-1:14.228: get version request failed: -71 [ 1778.603129][ T5721] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -71 [ 1778.626827][T25788] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5368'. [ 1778.655070][ T5721] usb 4-1: USB disconnect, device number 8 [ 1778.725675][ T5738] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1778.923568][ T5738] usb 1-1: Using ep0 maxpacket: 16 [ 1778.940334][ T5738] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1778.973955][ T5738] usb 1-1: config 0 has no interface number 0 [ 1778.989411][ T5738] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1779.015043][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1779.036445][ T5738] usb 1-1: Product: syz [ 1779.811347][T25806] fuse: Bad value for 'fd' [ 1779.826212][ T5738] usb 1-1: Manufacturer: syz [ 1779.877799][ T5738] usb 1-1: SerialNumber: syz [ 1779.912114][ T5738] usb 1-1: config 0 descriptor?? [ 1779.953119][ T5738] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1779.994956][T25811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5374'. [ 1780.939406][ T5738] gspca_spca1528: reg_w err -110 [ 1781.045578][ T5738] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 1782.480516][ T5738] usb 1-1: USB disconnect, device number 122 [ 1782.663623][T25849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5385'. [ 1782.856452][T25856] ip6gretap0: entered allmulticast mode [ 1782.877986][T25856] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 1782.920613][T25857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1782.942528][T25857] bond_slave_0: left allmulticast mode [ 1782.963231][T25857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1782.984971][T25857] bond_slave_1: left allmulticast mode [ 1782.999948][T25857] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 1783.020632][T25857] ip6gretap0: left allmulticast mode [ 1783.038695][T25857] bond0 (unregistering): Released all slaves [ 1785.500169][T25888] xt_hashlimit: size too large, truncated to 1048576 [ 1785.994191][ T29] audit: type=1400 audit(1784038493.882:3184): avc: denied { ioctl } for pid=25879 comm="syz.4.5398" path="socket:[82061]" dev="sockfs" ino=82061 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1786.457996][T25901] overlayfs: failed to clone upperpath [ 1787.445237][ T5738] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1787.642625][ T5738] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1787.655669][ T5738] usb 1-1: config 0 has no interfaces? [ 1787.661195][ T5738] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1787.671494][ T5738] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.683645][ T5738] usb 1-1: config 0 descriptor?? [ 1787.732599][T25932] fuse: fd is not a fuse device [ 1787.757746][ T29] audit: type=1400 audit(1784038495.507:3185): avc: denied { mount } for pid=25934 comm="syz.3.5417" name="/" dev="autofs" ino=82127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1787.920471][ T5721] usb 1-1: USB disconnect, device number 123 [ 1787.982215][T25937] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5418'. [ 1789.546748][ T29] audit: type=1400 audit(1784038497.141:3186): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1789.774903][T25958] fuse: fd is not a fuse device [ 1790.334022][T25973] fuse: fd is not a fuse device [ 1790.477386][T25979] fuse: fd is not a fuse device [ 1790.839252][T25992] binder: BINDER_SET_CONTEXT_MGR already set [ 1790.860437][T25992] binder: 25990:25992 ioctl 4018620d 200000000100 returned -16 [ 1790.916614][ T29] audit: type=1400 audit(1784038498.433:3187): avc: denied { map } for pid=25990 comm="syz.3.5438" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1790.954613][T25992] binder: BINDER_SET_CONTEXT_MGR already set [ 1790.980491][T25992] binder: 25990:25992 ioctl 4018620d 200000004a80 returned -16 [ 1791.641304][T26005] fuse: fd is not a fuse device [ 1792.953198][T26020] netlink: 'syz.2.5447': attribute type 4 has an invalid length. [ 1792.986149][T26022] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5449'. [ 1793.479169][ T5738] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1793.665505][ T5738] usb 1-1: Using ep0 maxpacket: 32 [ 1793.682551][ T5738] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1793.711008][ T5738] usb 1-1: config 0 has no interface number 0 [ 1793.733621][ T5738] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1793.758626][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.780247][ T5738] usb 1-1: Product: syz [ 1793.794235][ T5738] usb 1-1: Manufacturer: syz [ 1793.807244][ T5738] usb 1-1: SerialNumber: syz [ 1793.830599][ T5738] usb 1-1: config 0 descriptor?? [ 1793.924193][T26046] fuse: fd is not a fuse device [ 1794.083677][T26048] fuse: fd is not a fuse device [ 1794.391134][ T5738] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1794.432651][ T5738] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1795.316823][ T29] audit: type=1400 audit(1784038502.486:3188): avc: denied { read append } for pid=26056 comm="syz.3.5463" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1795.362947][ T29] audit: type=1400 audit(1784038502.486:3189): avc: denied { open } for pid=26056 comm="syz.3.5463" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1795.387787][ T29] audit: type=1400 audit(1784038502.523:3190): avc: denied { ioctl } for pid=26056 comm="syz.3.5463" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1795.429301][T26055] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5462'. [ 1796.808656][ T5738] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1796.846455][ T5738] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 1796.876198][T26081] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1796.885554][ T5738] usb 1-1: USB disconnect, device number 124 [ 1796.902123][T26081] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5469'. [ 1796.920790][T26081] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5469'. [ 1798.395544][T26103] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5477'. [ 1799.216091][ T29] audit: type=1400 audit(1784038506.087:3191): avc: denied { call } for pid=26128 comm="syz.0.5487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1799.269095][T26127] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5486'. [ 1799.345258][ T29] audit: type=1400 audit(1784038506.207:3192): avc: denied { bind } for pid=26133 comm="syz.0.5488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1799.425127][T26136] fuse: fd is not a fuse device [ 1800.026686][ T5738] usb 1-1: new full-speed USB device number 125 using dummy_hcd [ 1800.201030][ T5738] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1800.215328][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.223766][ T5738] usb 1-1: Product: syz [ 1800.230148][ T5738] usb 1-1: Manufacturer: syz [ 1800.234837][ T5738] usb 1-1: SerialNumber: syz [ 1800.244093][ T5738] usb 1-1: config 0 descriptor?? [ 1800.319805][ T29] audit: type=1800 audit(1784038507.111:3193): pid=26153 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.5496" name="nullb0" dev="tmpfs" ino=3677 res=0 errno=0 [ 1800.585085][T26164] fuse: fd is not a fuse device [ 1800.737292][T26158] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5498'. [ 1801.031800][ T5738] peak_usb 1-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 1801.054319][ T5738] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 1801.091945][ T5738] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 1802.102963][ T5721] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1802.254333][ T5738] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -22 [ 1802.488221][ T5721] usb 4-1: Using ep0 maxpacket: 16 [ 1802.794936][ T5721] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1802.973181][ T5738] usb 1-1: USB disconnect, device number 125 [ 1802.978198][ T5721] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1803.030720][ T5721] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1803.053805][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1803.095818][ T5721] usb 4-1: Product: syz [ 1803.119786][ T5721] usb 4-1: Manufacturer: syz [ 1803.140664][ T5721] usb 4-1: SerialNumber: syz [ 1803.220539][T26216] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5515'. [ 1803.694952][ T5721] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 1803.709820][ T5721] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1803.722810][ T5721] usb 4-1: 2:1 : can't get High Capability descriptor [ 1804.058980][ T5721] usb 4-1: USB disconnect, device number 9 [ 1804.856353][ T29] audit: type=1400 audit(1784038511.303:3194): avc: denied { mount } for pid=26249 comm="syz.4.5525" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1805.328748][ T29] audit: type=1400 audit(1784038511.727:3195): avc: denied { read write } for pid=26257 comm="syz.3.5528" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1805.383389][ T29] audit: type=1400 audit(1784038511.727:3196): avc: denied { open } for pid=26257 comm="syz.3.5528" path="/908/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1805.466255][T26261] binder: BINDER_SET_CONTEXT_MGR already set [ 1805.476079][T26261] binder: 26260:26261 ioctl 4018620d 200000000100 returned -16 [ 1805.488284][T26261] binder: BINDER_SET_CONTEXT_MGR already set [ 1805.494886][T26261] binder: 26260:26261 ioctl 4018620d 200000004a80 returned -16 [ 1807.376498][T16429] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 1807.572664][T16429] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1807.605825][T16429] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1807.639831][T16429] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1807.657400][T26293] fuse: fd is not a fuse device [ 1807.716023][T16429] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1807.768211][T16429] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1807.849213][T16429] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1807.857238][T16429] usb 4-1: Product: syz [ 1807.861392][T16429] usb 4-1: Manufacturer: syz [ 1807.865971][T16429] usb 4-1: SerialNumber: syz [ 1808.115135][T26282] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1808.928722][T26282] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1809.173433][T26314] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5550'. [ 1809.228168][ T5738] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1809.401488][ T5738] usb 1-1: Using ep0 maxpacket: 8 [ 1809.417978][ T5738] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1809.440095][ T5738] usb 1-1: config 179 has no interface number 0 [ 1809.464188][ T5738] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1809.494701][ T5738] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1809.520927][ T5738] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1809.543143][ T5738] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1809.565711][ T5738] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1809.718204][ T5738] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1809.728245][ T5738] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1809.742726][T26307] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1810.695036][T26327] tipc: Enabling of bearer rejected, already enabled [ 1810.999327][ T5721] usb 1-1: USB disconnect, device number 126 [ 1810.999391][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1811.013926][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1811.083858][T26335] netlink: 'syz.4.5555': attribute type 4 has an invalid length. [ 1811.532845][T16429] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 1811.581480][T16429] cdc_ncm 4-1:1.0: bind() failure [ 1811.656341][T16429] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1811.692521][T26341] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5557'. [ 1811.701682][T16429] cdc_ncm 4-1:1.1: bind() failure [ 1811.707614][T16429] usb 4-1: USB disconnect, device number 10 [ 1814.850884][T16429] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1815.220641][T16429] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1815.242952][T16429] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1815.253885][T16429] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1815.266865][T16429] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1815.447875][T16429] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1815.458036][T16429] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.466826][T16429] usb 4-1: Product: syz [ 1815.472401][T16429] usb 4-1: Manufacturer: syz [ 1815.477516][T16429] usb 4-1: SerialNumber: syz [ 1816.199679][T26369] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1816.466727][T26369] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1816.774845][T26407] fuse: fd is not a fuse device [ 1817.079328][T26416] netlink: 'syz.4.5581': attribute type 4 has an invalid length. [ 1818.118252][T26425] netlink: 'syz.0.5584': attribute type 1 has an invalid length. [ 1818.132308][ T29] audit: type=1400 audit(1784038523.554:3197): avc: denied { setopt } for pid=26423 comm="syz.1.5585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1818.176977][T26429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5584'. [ 1818.216172][T16429] cdc_ncm 4-1:1.0: bind() failure [ 1818.275517][T16429] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1818.289034][T26433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5584'. [ 1818.335115][T16429] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1818.347386][T26435] binder: BINDER_SET_CONTEXT_MGR already set [ 1818.365170][T26435] binder: 26432:26435 ioctl 4018620d 200000000100 returned -16 [ 1818.369634][T16429] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 1818.387745][T26425] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1818.394619][T26435] binder: BINDER_SET_CONTEXT_MGR already set [ 1818.394656][T26435] binder: 26432:26435 ioctl 4018620d 200000000140 returned -16 [ 1818.438401][T16429] usb 4-1: USB disconnect, device number 11 [ 1818.576348][T26430] bond1: (slave ip6gretap1): making interface the new active one [ 1818.598773][T26430] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1818.652523][T26429] bond1: entered allmulticast mode [ 1818.657776][T26429] ip6gretap1: entered allmulticast mode [ 1818.711165][T26442] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5586'. [ 1819.787281][ T29] audit: type=1400 audit(1784038524.504:3198): avc: denied { write } for pid=26444 comm="syz.4.5591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1820.285195][T26460] SELinux: policydb magic number 0x8 does not match expected magic number 0xf97cff8c [ 1820.320716][T26460] SELinux: failed to load policy [ 1822.683111][T26490] netlink: 'syz.0.5601': attribute type 4 has an invalid length. [ 1824.584504][ T29] audit: type=1400 audit(1784038529.508:3199): avc: denied { append } for pid=26516 comm="syz.3.5610" name="001" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1824.638363][ T29] audit: type=1400 audit(1784038529.545:3200): avc: denied { read } for pid=26516 comm="syz.3.5610" name="usbmon7" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1825.224768][ T29] audit: type=1400 audit(1784038529.545:3201): avc: denied { open } for pid=26516 comm="syz.3.5610" path="/dev/usbmon7" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1825.249808][ T29] audit: type=1400 audit(1784038529.545:3202): avc: denied { ioctl } for pid=26516 comm="syz.3.5610" path="/dev/usbmon7" dev="devtmpfs" ino=738 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1825.647646][ T29] audit: type=1326 audit(1784038530.487:3203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26528 comm="syz.3.5613" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c699de59 code=0x7ffc0000 [ 1825.740475][ T29] audit: type=1326 audit(1784038530.524:3204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26528 comm="syz.3.5613" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c699de59 code=0x7ffc0000 [ 1825.753748][T26534] fuse: fd is not a fuse device [ 1825.843865][ T29] audit: type=1326 audit(1784038530.524:3205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26528 comm="syz.3.5613" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c699de59 code=0x7ffc0000 [ 1825.944717][ T29] audit: type=1326 audit(1784038530.524:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26528 comm="syz.3.5613" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f39c699de59 code=0x7ffc0000 [ 1826.025947][ T29] audit: type=1326 audit(1784038530.570:3207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26528 comm="syz.3.5613" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39c695e68e code=0x7ffc0000 [ 1826.114702][ T29] audit: type=1326 audit(1784038530.607:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26528 comm="syz.3.5613" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39c695e68e code=0x7ffc0000 [ 1826.626387][ T5738] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1826.756839][T26552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5618'. [ 1826.903320][ T5738] usb 4-1: Using ep0 maxpacket: 32 [ 1826.912679][ T5738] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1826.936558][ T5738] usb 4-1: config 0 has no interface number 0 [ 1826.967624][ T5738] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1827.007125][ T5738] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1827.035509][ T5738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.098724][ T5738] usb 4-1: Product: syz [ 1827.113062][ T5738] usb 4-1: Manufacturer: syz [ 1827.126435][ T5738] usb 4-1: SerialNumber: syz [ 1827.162740][ T5738] usb 4-1: config 0 descriptor?? [ 1827.858766][ T5738] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1827.878772][ T5738] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1828.364521][T26573] fuse: fd is not a fuse device [ 1828.583791][T26581] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig [ 1829.222872][T26592] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5627'. [ 1829.345182][ T5738] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1829.386274][ T5738] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1829.413208][ T5738] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1829.438384][ T5738] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 1829.477158][ T5738] usb 4-1: USB disconnect, device number 12 [ 1830.152204][T26597] netlink: 'syz.0.5629': attribute type 2 has an invalid length. [ 1830.168828][T26597] : entered promiscuous mode [ 1830.224622][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 1830.224637][ T29] audit: type=1400 audit(1784038534.724:3268): avc: denied { execute } for pid=26600 comm="syz.3.5630" path="/file1" dev="ramfs" ino=84271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1832.201891][ T29] audit: type=1400 audit(1784038536.543:3269): avc: denied { block_suspend } for pid=26654 comm="syz.0.5637" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1832.498419][T26675] syzkaller0: entered promiscuous mode [ 1832.546683][T26675] syzkaller0: entered allmulticast mode [ 1832.737795][ T29] audit: type=1400 audit(1784038537.041:3270): avc: denied { audit_write } for pid=26687 comm="syz.2.5640" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1832.804817][ T29] audit: type=1107 audit(1784038537.060:3271): pid=26687 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1833.194377][T26703] binder: BINDER_SET_CONTEXT_MGR already set [ 1833.207761][T26703] binder: 26702:26703 ioctl 4018620d 200000000100 returned -16 [ 1833.302944][T26706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5641'. [ 1833.988204][T26703] binder: BINDER_SET_CONTEXT_MGR already set [ 1834.001031][T26703] binder: 26702:26703 ioctl 4018620d 200000004a80 returned -16 [ 1835.349234][T26721] binder: BINDER_SET_CONTEXT_MGR already set [ 1835.377896][T26721] binder: 26718:26721 ioctl 4018620d 200000000100 returned -16 [ 1835.421056][T26721] binder: BINDER_SET_CONTEXT_MGR already set [ 1835.435939][T26721] binder: 26718:26721 ioctl 4018620d 200000004a80 returned -16 [ 1835.835670][T26728] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5649'. [ 1835.948365][T26729] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5650'. [ 1837.951035][T26749] fuse: fd is not a fuse device [ 1838.920250][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1838.928244][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1840.293583][T26768] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5660'. [ 1840.732077][T26771] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5661'. [ 1840.987979][T26779] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5654'. [ 1841.438203][T26793] syzkaller0: entered promiscuous mode [ 1841.448377][T26793] syzkaller0: entered allmulticast mode [ 1841.475364][T16429] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1841.888996][T16429] usb 4-1: config 0 has an invalid interface number: 91 but max is 0 [ 1841.903646][T16429] usb 4-1: config 0 has no interface number 0 [ 1841.914554][T16429] usb 4-1: config 0 interface 91 has no altsetting 0 [ 1841.925933][T16429] usb 4-1: New USB device found, idVendor=046d, idProduct=0920, bcdDevice=78.55 [ 1841.936166][T16429] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1841.944937][T16429] usb 4-1: Product: syz [ 1841.949648][T16429] usb 4-1: Manufacturer: syz [ 1841.955223][T16429] usb 4-1: SerialNumber: syz [ 1841.966081][T16429] usb 4-1: config 0 descriptor?? [ 1843.076979][T26811] overlayfs: failed to clone upperpath [ 1845.807238][T16429] gspca_main: tv8532-2.14.0 probing 046d:0920 [ 1845.832235][ T29] audit: type=1800 audit(1784038549.098:3272): pid=26815 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.5673" name="bus" dev="ramfs" ino=83387 res=0 errno=0 [ 1845.856665][T16429] usb 4-1: USB disconnect, device number 13 [ 1846.071921][ T29] audit: type=1400 audit(1784038549.348:3273): avc: denied { create } for pid=26825 comm="syz.2.5676" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1846.204012][T26826] fuse: fd is not a fuse device [ 1846.222883][T26826] 9p: Bad value for 'rfdno' [ 1846.260852][ T29] audit: type=1400 audit(1784038549.468:3274): avc: denied { mounton } for pid=26825 comm="syz.2.5676" path="/1295/file0" dev="tmpfs" ino=6866 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1846.326556][ T29] audit: type=1400 audit(1784038549.477:3275): avc: denied { read write } for pid=26825 comm="syz.2.5676" name="file0" dev="tmpfs" ino=6866 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1846.598727][ T29] audit: type=1400 audit(1784038549.477:3276): avc: denied { open } for pid=26825 comm="syz.2.5676" path="/1295/file0" dev="tmpfs" ino=6866 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1852.277280][T26890] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5694'. [ 1854.014619][T26922] syzkaller0: entered promiscuous mode [ 1854.020120][T26922] syzkaller0: entered allmulticast mode [ 1856.231681][T26960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5719'. [ 1856.518445][ T29] audit: type=1400 audit(1784038558.995:3277): avc: denied { write } for pid=26956 comm="syz.1.5719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1856.532736][T26960] macvlan2: entered promiscuous mode [ 1856.555104][T26960] macvlan2: entered allmulticast mode [ 1856.572238][T26960] bond1: entered promiscuous mode [ 1856.620240][T26960] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1856.682781][T26960] bond1: left promiscuous mode [ 1858.009159][T26993] tipc: Enabling of bearer rejected, failed to enable media [ 1858.213267][T26995] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 1858.238826][ T29] audit: type=1400 audit(1784038560.583:3278): avc: denied { relabelto } for pid=26994 comm="syz.3.5729" name="944" dev="tmpfs" ino=5012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1858.348353][ T29] audit: type=1400 audit(1784038560.583:3279): avc: denied { associate } for pid=26994 comm="syz.3.5729" name="944" dev="tmpfs" ino=5012 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 1858.544134][T27009] syz_tun: left promiscuous mode [ 1858.555671][T27009] bond0: left promiscuous mode [ 1858.582463][T27009] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1858.666275][T27009] ip6gre1: left allmulticast mode [ 1858.803889][ T29] audit: type=1400 audit(1784038561.100:3280): avc: denied { ioctl } for pid=27007 comm="syz.3.5733" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1858.834759][T27012] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5733'. [ 1861.177709][T27033] overlayfs: failed to clone lowerpath [ 1861.260847][T27040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5741'. [ 1861.270107][T27040] netlink: 348 bytes leftover after parsing attributes in process `syz.2.5741'. [ 1861.279261][T27040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5741'. [ 1861.288161][T27040] netlink: 348 bytes leftover after parsing attributes in process `syz.2.5741'. [ 1865.419804][ T29] audit: type=1400 audit(1784038567.212:3281): avc: denied { read } for pid=27044 comm="syz.2.5743" laddr=fe80::b lport=59644 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1867.628719][T27076] syzkaller0: entered promiscuous mode [ 1867.638762][T27076] syzkaller0: entered allmulticast mode [ 1868.428020][T27102] netlink: 'syz.0.5757': attribute type 4 has an invalid length. [ 1869.089906][T27112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5760'. [ 1869.204111][T27113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5760'. [ 1870.816018][T27119] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5762'. [ 1873.975680][T27143] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5770'. [ 1874.082833][T27150] fuse: Unknown parameter 'fd0x0000000000000005' [ 1878.899714][T27175] netlink: 'syz.2.5781': attribute type 9 has an invalid length. [ 1879.793378][T27192] netlink: 'syz.4.5782': attribute type 4 has an invalid length. [ 1880.386806][T27204] syzkaller0: entered promiscuous mode [ 1880.417720][T27204] syzkaller0: entered allmulticast mode [ 1882.263171][ T29] audit: type=1400 audit(1784038582.758:3282): avc: denied { getopt } for pid=27221 comm="syz.0.5791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1886.126514][T27254] tipc: Enabled bearer , priority 0 [ 1886.162468][T27254] syzkaller0: entered promiscuous mode [ 1886.193288][T27254] syzkaller0: entered allmulticast mode [ 1886.378067][T27254] tipc: Resetting bearer [ 1887.038429][T27253] tipc: Resetting bearer [ 1888.248806][T27253] tipc: Disabling bearer [ 1888.337708][ T29] audit: type=1400 audit(1784038588.362:3283): avc: denied { bind } for pid=27279 comm="syz.2.5801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1889.195674][T27290] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1889.519412][T27288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1889.526752][T27288] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 1889.534382][T27288] audit: backlog limit exceeded [ 1889.539310][T27288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1889.545797][T27288] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 1889.553470][T27288] audit: backlog limit exceeded [ 1889.558830][T27288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1889.565322][T27288] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 1889.572980][T27288] audit: backlog limit exceeded [ 1891.611302][T27302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12304 sclass=netlink_route_socket pid=27302 comm=syz.0.5815 [ 1891.679626][T27302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5815'. [ 1891.895726][T27302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5815'. [ 1892.238662][T27320] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5819'. [ 1894.192398][T27334] tipc: Enabling of bearer rejected, already enabled [ 1894.707337][T27340] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5827'. [ 1894.729812][T27347] netlink: 'syz.1.5831': attribute type 1 has an invalid length. [ 1894.768965][T27347] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1894.832204][T27347] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5831'. [ 1894.873505][T27347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5831'. [ 1895.015865][ T29] kauditd_printk_skb: 279 callbacks suppressed [ 1895.015880][ T29] audit: type=1400 audit(1784038594.529:3350): avc: denied { create } for pid=27355 comm="syz.1.5834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1895.108002][ T29] audit: type=1400 audit(1784038594.557:3351): avc: denied { connect } for pid=27355 comm="syz.1.5834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1895.167425][T27360] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5813'. [ 1895.274244][T27361] veth0_macvtap: Caught tx_queue_len zero misconfig [ 1895.523678][T27366] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5836'. [ 1895.548205][ T5721] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1895.809733][ T5721] usb 4-1: config 0 has an invalid interface number: 91 but max is 0 [ 1895.840547][ T5721] usb 4-1: config 0 has no interface number 0 [ 1895.846630][ T5721] usb 4-1: config 0 interface 91 has no altsetting 0 [ 1896.034267][ T5721] usb 4-1: New USB device found, idVendor=046d, idProduct=0920, bcdDevice=78.55 [ 1896.045698][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1896.062505][ T5721] usb 4-1: Product: syz [ 1896.078295][ T5721] usb 4-1: Manufacturer: syz [ 1896.103286][ T5721] usb 4-1: SerialNumber: syz [ 1896.147462][ T5721] usb 4-1: config 0 descriptor?? [ 1896.860096][T27384] fuse: Unknown parameter '0x0000000000000005' [ 1898.169054][ T29] audit: type=1400 audit(1784038597.419:3352): avc: denied { connect } for pid=27388 comm="syz.0.5839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1899.079637][ T5721] gspca_main: tv8532-2.14.0 probing 046d:0920 [ 1899.156345][ T5721] usb 4-1: USB disconnect, device number 14 [ 1899.973051][T27416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5847'. [ 1900.108562][T27422] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27422 comm=syz.2.5847 [ 1900.290187][T27425] netlink: 'syz.4.5849': attribute type 1 has an invalid length. [ 1900.313056][T27425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5849'. [ 1900.680885][T27434] fuse: Unknown parameter '0x0000000000000005' [ 1901.657522][T27447] tipc: Enabling of bearer rejected, failed to enable media [ 1901.819557][ T5738] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 1902.027234][ T5738] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1902.079065][ T5738] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1902.137717][ T5738] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1902.188150][ T5738] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1902.219315][T27463] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5855'. [ 1902.298457][ T5738] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1902.307932][ T5738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1902.316426][ T5738] usb 4-1: Product: syz [ 1902.326191][ T5738] usb 4-1: Manufacturer: syz [ 1902.341172][ T5738] usb 4-1: SerialNumber: syz [ 1902.357011][T27438] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1902.604352][T27438] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1903.046991][T27472] tipc: Enabling of bearer rejected, failed to enable media [ 1903.181294][T27472] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5861'. [ 1905.471127][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1905.479337][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1905.689270][ T5738] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 1905.715223][ T5738] cdc_ncm 4-1:1.0: bind() failure [ 1905.729396][ T28] rcu_tasks_wait_gp: rcu_tasks grace period number 53 (since boot) is 1006 jiffies old. [ 1905.749583][ T5738] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1905.764783][ T5738] cdc_ncm 4-1:1.1: bind() failure [ 1905.803891][ T5738] usb 4-1: USB disconnect, device number 15 [ 1905.978334][T27501] overlayfs: conflicting lowerdir path [ 1905.985246][ T29] audit: type=1400 audit(1784038604.647:3353): avc: denied { mounton } for pid=27496 comm="syz.3.5868" path="/964/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1906.893968][ T29] audit: type=1400 audit(1784038605.497:3354): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1910.053438][T27527] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5874'. [ 1910.969672][T27527] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5874'. [ 1911.151469][T27537] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5880'. [ 1911.387086][T27551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5884'. [ 1911.581201][ T29] audit: type=1400 audit(1784038609.827:3355): avc: denied { read } for pid=27542 comm="syz.1.5882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1911.878207][ T5738] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1911.891780][T27547] netlink: 'syz.2.5884': attribute type 8 has an invalid length. [ 1911.899603][ T29] audit: type=1400 audit(1784038610.113:3356): avc: denied { ioctl } for pid=27546 comm="syz.2.5884" path="socket:[86428]" dev="sockfs" ino=86428 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1911.926307][T27547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5884'. [ 1912.066084][ T5738] usb 1-1: device descriptor read/64, error -71 [ 1912.326151][ T5738] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1912.802632][ T5738] usb 1-1: device descriptor read/64, error -71 [ 1912.985301][ T29] audit: type=1400 audit(1784038611.119:3357): avc: denied { getopt } for pid=27569 comm="syz.3.5888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1913.361610][ T5738] usb usb1-port1: attempt power cycle [ 1913.417210][T27573] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5886'. [ 1913.514105][ T29] audit: type=1400 audit(1784038611.608:3358): avc: denied { getopt } for pid=27574 comm="syz.1.5889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1913.590626][ T29] audit: type=1400 audit(1784038611.636:3359): avc: denied { create } for pid=27574 comm="syz.1.5889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1913.660523][ T29] audit: type=1400 audit(1784038611.655:3360): avc: denied { write } for pid=27574 comm="syz.1.5889" path="socket:[87125]" dev="sockfs" ino=87125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1913.844292][ T5738] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1914.006068][ T5738] usb 1-1: device descriptor read/8, error -71 [ 1914.969291][ T5738] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1915.174058][ T5738] usb 1-1: device descriptor read/8, error -71 [ 1915.307054][ T5738] usb usb1-port1: unable to enumerate USB device [ 1916.064986][ T29] audit: type=1400 audit(1784038613.972:3361): avc: denied { watch watch_reads } for pid=27591 comm="syz.4.5894" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=2296 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1916.236181][ T29] audit: type=1400 audit(1784038614.119:3362): avc: denied { write } for pid=27590 comm="syz.3.5895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1916.518005][ T29] audit: type=1400 audit(1784038614.378:3363): avc: denied { write } for pid=27600 comm="syz.2.5897" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1917.443385][T27609] syzkaller0: entered promiscuous mode [ 1917.461303][T27609] syzkaller0: entered allmulticast mode [ 1917.523915][T27601] fuse: fd is not a fuse device [ 1920.404751][T27625] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5905'. [ 1920.428069][T27639] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5908'. [ 1920.449373][ T29] audit: type=1400 audit(1784038618.006:3364): avc: denied { read } for pid=27642 comm="syz.2.5911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1921.704583][T27660] fuse: fd is not a fuse device [ 1923.208144][ T29] audit: type=1400 audit(1784038620.351:3365): avc: denied { setopt } for pid=27663 comm="syz.2.5917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1923.233100][T27652] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1924.110457][T27678] syzkaller0: entered promiscuous mode [ 1924.116318][T27678] syzkaller0: entered allmulticast mode [ 1925.293653][ T29] audit: type=1400 audit(1784038622.493:3366): avc: denied { map } for pid=27687 comm="syz.0.5925" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1925.524573][ T29] audit: type=1400 audit(1784038622.493:3367): avc: denied { write execute } for pid=27687 comm="syz.0.5925" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1926.180504][ T5721] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1926.550300][ T5721] usb 4-1: device descriptor read/64, error -71 [ 1927.112003][ T5721] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1927.580105][ T5721] usb 4-1: device descriptor read/64, error -71 [ 1927.697746][ T5721] usb usb4-port1: attempt power cycle [ 1928.102241][ T5721] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1928.137654][T27719] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5932'. [ 1928.165775][ T5721] usb 4-1: device descriptor read/8, error -71 [ 1928.465777][ T5721] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1928.488312][ T5721] usb 4-1: device descriptor read/8, error -71 [ 1929.238585][ T5721] usb usb4-port1: unable to enumerate USB device [ 1929.778172][T27741] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5936'. [ 1930.621907][ T29] audit: type=1400 audit(1784038627.414:3368): avc: denied { read } for pid=27734 comm="syz.3.5939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1937.390884][T27819] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1938.554275][T27821] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5961'. [ 1938.644896][T27836] overlayfs: missing 'workdir' [ 1938.651173][ T5721] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 1939.871256][ T5721] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1939.901850][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1939.911351][ T5721] usb 1-1: Product: syz [ 1941.050748][ T5721] usb 1-1: Manufacturer: syz [ 1941.059871][ T5721] usb 1-1: SerialNumber: syz [ 1941.091401][ T5721] usb 1-1: config 0 descriptor?? [ 1941.557977][ T5721] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -71 [ 1941.592674][ T5721] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1941.675702][ T5721] usb 1-1: USB disconnect, device number 5 [ 1944.564147][T27886] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5973'. [ 1946.043270][T27897] syzkaller0: entered promiscuous mode [ 1946.049329][T27897] syzkaller0: entered allmulticast mode [ 1946.117402][T27897] tipc: Enabled bearer , priority 0 [ 1946.149469][T27896] tipc: Resetting bearer [ 1946.480801][T27896] tipc: Disabling bearer [ 1946.618314][T27914] netlink: 'syz.2.5986': attribute type 4 has an invalid length. [ 1946.791754][T22596] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1946.918668][T27923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5988'. [ 1947.738238][T22596] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1947.753002][T22596] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1947.776755][T22596] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 1947.792678][T22596] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1947.811305][T22596] usb 4-1: Product: syz [ 1947.821494][T22596] usb 4-1: Manufacturer: syz [ 1948.818855][ T29] audit: type=1400 audit(1784038643.514:3369): avc: denied { kexec_image_load } for pid=27926 comm="syz.1.5990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1948.873423][ T5738] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1948.881018][T22596] usb 4-1: SerialNumber: syz [ 1949.286279][ T5738] usb 1-1: config 0 has an invalid interface number: 91 but max is 0 [ 1949.347919][T22596] usb 4-1: 0:1 : does not exist [ 1949.367911][ T5738] usb 1-1: config 0 has no interface number 0 [ 1949.380295][T22596] usb 4-1: BAAD GENERIC IO: no channels? [ 1949.402742][ T5738] usb 1-1: config 0 interface 91 has no altsetting 0 [ 1949.430559][ T5738] usb 1-1: New USB device found, idVendor=046d, idProduct=0920, bcdDevice=78.55 [ 1949.463258][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1949.498662][ T5738] usb 1-1: Product: syz [ 1949.519190][ T5738] usb 1-1: Manufacturer: syz [ 1949.551923][ T5738] usb 1-1: SerialNumber: syz [ 1949.617296][ T5738] usb 1-1: config 0 descriptor?? [ 1949.702185][T22596] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1949.748059][T22596] usb 4-1: USB disconnect, device number 20 [ 1949.876396][T27909] udevd[27909]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1951.592169][ T5721] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1951.660534][ T5738] gspca_main: tv8532-2.14.0 probing 046d:0920 [ 1951.758772][ T5738] usb 1-1: USB disconnect, device number 6 [ 1951.800096][ T5721] usb 4-1: config 0 has an invalid interface number: 91 but max is 0 [ 1951.903100][T27968] syzkaller0: entered promiscuous mode [ 1951.927054][T27968] syzkaller0: entered allmulticast mode [ 1952.029095][ T5721] usb 4-1: config 0 has no interface number 0 [ 1952.036328][ T5721] usb 4-1: config 0 interface 91 has no altsetting 0 [ 1952.833642][ T5721] usb 4-1: New USB device found, idVendor=046d, idProduct=0920, bcdDevice=78.55 [ 1952.844460][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1952.854584][ T5721] usb 4-1: Product: syz [ 1952.859264][ T5721] usb 4-1: Manufacturer: syz [ 1952.864257][ T5721] usb 4-1: SerialNumber: syz [ 1952.881444][ T5721] usb 4-1: config 0 descriptor?? [ 1954.370254][T27981] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1954.633646][ T5721] gspca_main: tv8532-2.14.0 probing 046d:0920 [ 1954.734034][T27990] netlink: 'syz.3.6008': attribute type 1 has an invalid length. [ 1955.807587][ T5721] usb 4-1: USB disconnect, device number 21 [ 1956.370428][T27990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1956.425200][T28002] netlink: 'syz.1.6009': attribute type 4 has an invalid length. [ 1956.454476][T27994] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1956.521667][T27997] bond0: entered promiscuous mode [ 1956.538699][T27997] bond0: entered allmulticast mode [ 1957.518297][T28014] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6012'. [ 1959.347428][ T5721] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1960.335467][ T5721] usb 1-1: config 0 has an invalid interface number: 91 but max is 0 [ 1960.523982][ T5721] usb 1-1: config 0 has no interface number 0 [ 1960.554378][ T5721] usb 1-1: config 0 interface 91 has no altsetting 0 [ 1960.638232][ T5721] usb 1-1: string descriptor 0 read error: -71 [ 1960.645086][ T5721] usb 1-1: New USB device found, idVendor=046d, idProduct=0920, bcdDevice=78.55 [ 1960.667663][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1960.677986][ T29] audit: type=1400 audit(1784038655.137:3370): avc: denied { accept } for pid=28023 comm="syz.2.6016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1960.775288][ T5721] usb 1-1: config 0 descriptor?? [ 1960.776897][ T29] audit: type=1400 audit(1784038655.146:3371): avc: denied { write } for pid=28023 comm="syz.2.6016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1960.853100][ T5721] usb 1-1: can't set config #0, error -71 [ 1960.868320][ T29] audit: type=1400 audit(1784038655.193:3372): avc: denied { read } for pid=28023 comm="syz.2.6016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1960.970497][ T29] audit: type=1400 audit(1784038655.368:3373): avc: denied { mounton } for pid=28033 comm="syz.0.6019" path="/1039/file0" dev="tmpfs" ino=5553 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1961.092611][ T5721] usb 1-1: USB disconnect, device number 7 [ 1961.096362][ T29] audit: type=1400 audit(1784038655.387:3374): avc: denied { append } for pid=28033 comm="syz.0.6019" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1961.209362][ T29] audit: type=1400 audit(1784038655.387:3375): avc: denied { open } for pid=28033 comm="syz.0.6019" path="/1039/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1962.898064][T28062] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.6023'. [ 1962.907507][T28062] ksmbd: Unknown IPC event: 4, ignore. [ 1965.725955][T28077] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6028'. [ 1966.193073][ T5721] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1967.159593][ T5721] usb 1-1: config 0 has an invalid interface number: 91 but max is 0 [ 1967.171939][ T5721] usb 1-1: config 0 has no interface number 0 [ 1967.178511][ T5721] usb 1-1: config 0 interface 91 has no altsetting 0 [ 1967.189339][ T5721] usb 1-1: New USB device found, idVendor=046d, idProduct=0920, bcdDevice=78.55 [ 1967.200209][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1967.218581][ T5721] usb 1-1: Product: syz [ 1967.223581][ T5721] usb 1-1: Manufacturer: syz [ 1967.228678][ T5721] usb 1-1: SerialNumber: syz [ 1967.247217][T28088] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6031'. [ 1967.260373][ T5721] usb 1-1: config 0 descriptor?? [ 1968.285206][T28095] netlink: 'syz.4.6032': attribute type 4 has an invalid length. [ 1968.619779][ T5721] gspca_main: tv8532-2.14.0 probing 046d:0920 [ 1968.869821][ T5721] usb 1-1: USB disconnect, device number 8 [ 1971.454790][ T5738] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1971.621902][ T5738] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1971.653875][ T5738] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1971.663489][T28141] netlink: 'syz.2.6046': attribute type 96 has an invalid length. [ 1971.698135][ T5738] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1971.698837][T28141] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6046'. [ 1971.739028][ T5738] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1971.757468][ T5738] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1971.772039][ T5738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1971.784345][ T5738] usb 4-1: Product: syz [ 1971.794941][ T5738] usb 4-1: Manufacturer: syz [ 1971.800336][ T5738] usb 4-1: SerialNumber: syz [ 1971.816022][T28132] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1972.025880][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1972.035183][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1972.056286][T28132] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1974.497556][T28165] overlayfs: failed to clone upperpath [ 1975.071165][T28173] tipc: Enabling of bearer rejected, failed to enable media [ 1975.208723][T28177] netlink: 'syz.4.6055': attribute type 1 has an invalid length. [ 1975.703240][ T5738] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 1975.815718][ T5738] cdc_ncm 4-1:1.0: bind() failure [ 1975.979553][ T5738] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1977.039561][ T5738] cdc_ncm 4-1:1.1: bind() failure [ 1977.049813][ T5738] usb 4-1: USB disconnect, device number 22 [ 1977.143161][T28177] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1977.244009][ T29] audit: type=1400 audit(1784038670.435:3376): avc: denied { create } for pid=28186 comm="syz.3.6058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1977.425323][T28179] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6055'. [ 1977.442709][T28196] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1977.466001][T28196] overlayfs: missing 'lowerdir' [ 1977.598991][ T5738] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1977.836146][T28179] bond2 (unregistering): Released all slaves [ 1978.324833][ T29] audit: type=1400 audit(1784038670.518:3377): avc: denied { create } for pid=28191 comm="syz.2.6059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1978.545586][ T29] audit: type=1400 audit(1784038670.518:3378): avc: denied { write } for pid=28191 comm="syz.2.6059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1979.110320][ T29] audit: type=1400 audit(1784038670.767:3379): avc: denied { shutdown } for pid=28190 comm="syz.0.6060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1979.130943][ T29] audit: type=1400 audit(1784038670.998:3380): avc: denied { accept } for pid=28190 comm="syz.0.6060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1979.295421][ T5738] usb 4-1: device descriptor read/all, error -71 [ 1979.582417][T28219] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6067'. [ 1979.852716][T28219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6067'. [ 1981.462158][ T29] audit: type=1400 audit(1784038674.312:3381): avc: denied { link } for pid=28230 comm="syz.3.6069" name="#68" dev="tmpfs" ino=5328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1981.589062][ T29] audit: type=1400 audit(1784038674.312:3382): avc: denied { rename } for pid=28230 comm="syz.3.6069" name="#69" dev="tmpfs" ino=5328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1984.410596][T28269] netlink: 'syz.2.6079': attribute type 4 has an invalid length. [ 1984.497127][T28270] overlayfs: failed to clone upperpath [ 1985.384687][T28277] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 1991.502672][ T29] audit: type=1400 audit(1784038683.313:3383): avc: denied { getattr } for pid=28316 comm="syz.3.6094" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=88498 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1991.907357][T28332] netlink: 'syz.2.6095': attribute type 4 has an invalid length. [ 1992.401916][ T29] audit: type=1400 audit(1784038684.440:3384): avc: denied { read } for pid=28342 comm="syz.1.6097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1992.875553][T28345] 9p: Bad value for 'wfdno' [ 1992.887939][ T29] audit: type=1326 audit(1784038684.892:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28344 comm="syz.0.6098" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641cb9de59 code=0x7ffc0000 [ 1992.915774][ T29] audit: type=1326 audit(1784038684.892:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28344 comm="syz.0.6098" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641cb9de59 code=0x7ffc0000 [ 1992.947913][ T29] audit: type=1326 audit(1784038684.892:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28344 comm="syz.0.6098" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f641cb9de59 code=0x7ffc0000 [ 1992.979252][ T29] audit: type=1326 audit(1784038684.892:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28344 comm="syz.0.6098" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641cb9de59 code=0x7ffc0000 [ 1993.011096][T28350] netlink: 'syz.3.6099': attribute type 4 has an invalid length. [ 1993.040602][ T29] audit: type=1326 audit(1784038684.892:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28344 comm="syz.0.6098" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641cb9de59 code=0x7ffc0000 [ 1993.078459][ T29] audit: type=1326 audit(1784038684.892:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28344 comm="syz.0.6098" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f641cb9de59 code=0x7ffc0000 [ 1993.106750][ T29] audit: type=1326 audit(1784038684.892:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28344 comm="syz.0.6098" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641cb9de59 code=0x7ffc0000 [ 1993.148863][ T29] audit: type=1326 audit(1784038684.892:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28344 comm="syz.0.6098" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641cb9de59 code=0x7ffc0000 [ 1994.833034][T28378] fuse: fd is not a fuse device [ 1997.409750][T28390] netlink: 'syz.3.6111': attribute type 4 has an invalid length. [ 1998.507462][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1998.507477][ T29] audit: type=1400 audit(1784038690.080:3395): avc: denied { getopt } for pid=28392 comm="syz.0.6113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1998.718037][T28402] trusted_key: encrypted_key: master key parameter 'c0:H*Nʅfe<5w^n0&8J' is invalid [ 1999.116700][T28412] 9pnet_virtio: no channels available for device  [ 1999.126524][ T29] audit: type=1400 audit(1784038690.634:3396): avc: denied { write } for pid=28403 comm="syz.1.6109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2000.130605][T28419] cgroup: Invalid name [ 2001.419266][T28421] ceph: No mds server is up or the cluster is laggy [ 2002.081997][T28444] FAT-fs (nbd0): unable to read boot sector [ 2002.097224][ T29] audit: type=1400 audit(1784038693.376:3397): avc: denied { mounton } for pid=28441 comm="syz.0.6126" path="/syzcgroup/unified/syz0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 2003.569398][T28449] netlink: zone id is out of range [ 2003.601584][T28449] netlink: zone id is out of range [ 2003.751436][ T5738] libceph: connect (1)[c::]:6789 error -101 [ 2003.764264][ T5738] libceph: mon0 (1)[c::]:6789 connect error [ 2003.888576][ T5721] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 2003.988160][T28466] fuse: fd is not a fuse device [ 2004.053920][ T5721] usb 4-1: config 0 has an invalid interface number: 91 but max is 0 [ 2004.064241][ T5738] libceph: connect (1)[c::]:6789 error -101 [ 2004.064429][ T5738] libceph: mon0 (1)[c::]:6789 connect error [ 2004.084131][ T5721] usb 4-1: config 0 has no interface number 0 [ 2004.091412][ T5721] usb 4-1: config 0 interface 91 has no altsetting 0 [ 2004.093034][T28466] netlink: 'syz.4.6131': attribute type 1 has an invalid length. [ 2004.281499][T28449] ceph: No mds server is up or the cluster is laggy [ 2005.027448][ T5721] usb 4-1: New USB device found, idVendor=046d, idProduct=0920, bcdDevice=78.55 [ 2005.032489][T28466] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2005.037599][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2005.047897][ T5738] libceph: connect (1)[c::]:6789 error -101 [ 2005.054625][ T5721] usb 4-1: Product: syz [ 2005.065131][ T5721] usb 4-1: Manufacturer: syz [ 2005.072268][ T5721] usb 4-1: SerialNumber: syz [ 2005.084988][ T5721] usb 4-1: config 0 descriptor?? [ 2005.091030][ T5738] libceph: mon0 (1)[c::]:6789 connect error [ 2005.094552][T28469] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6131'. [ 2005.891421][T28486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6135'. [ 2006.460513][T28486] team_slave_0 (unregistering): left allmulticast mode [ 2006.469603][T28486] team0: Port device team_slave_0 removed [ 2006.773121][ T5721] gspca_main: tv8532-2.14.0 probing 046d:0920 [ 2007.684093][ T5721] usb 4-1: USB disconnect, device number 25 [ 2008.587988][T28512] overlayfs: failed to clone upperpath [ 2008.632334][ T5738] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 2008.940994][ T5738] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2008.952351][ T5738] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2008.964259][ T5738] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2008.978109][ T5738] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 2008.978285][T28523] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6146'. [ 2008.992968][ T5738] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2009.012860][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2009.021009][ T5738] usb 1-1: Product: syz [ 2009.025323][ T5738] usb 1-1: Manufacturer: syz [ 2009.032689][ T5738] usb 1-1: SerialNumber: syz [ 2009.045057][T28502] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2009.062049][T28528] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6146'. [ 2009.449988][T28502] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2010.556104][T28548] wireguard: wg0: Could not create IPv4 socket [ 2011.613043][T28559] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2012.171371][T28565] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6160'. [ 2012.209578][T28568] netlink: 'syz.4.6161': attribute type 10 has an invalid length. [ 2012.217465][T28568] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6161'. [ 2012.235851][T28568] team0: Port device geneve1 added [ 2012.446633][T28574] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2012.463422][T28574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6164'. [ 2013.262863][ T5738] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 2013.291960][ T5738] cdc_ncm 1-1:1.0: bind() failure [ 2013.304942][ T5738] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 2013.315017][ T5738] cdc_ncm 1-1:1.1: bind() failure [ 2013.343820][ T5738] usb 1-1: USB disconnect, device number 9 [ 2013.703404][T28594] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6167'. [ 2014.994577][T28599] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6171'. [ 2015.608119][ T5738] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 2015.657585][ T29] audit: type=1400 audit(1784038705.913:3398): avc: denied { setattr } for pid=28585 comm="syz.0.6168" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 2016.197254][ T5738] usb 4-1: config 0 has an invalid interface number: 91 but max is 0 [ 2016.815544][ T29] audit: type=1400 audit(1784038706.550:3399): avc: denied { connect } for pid=28607 comm="syz.4.6173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2016.837601][ T5738] usb 4-1: config 0 has no interface number 0 [ 2016.844268][ T5738] usb 4-1: config 0 interface 91 has no altsetting 0 [ 2016.898401][ T5738] usb 4-1: New USB device found, idVendor=046d, idProduct=0920, bcdDevice=78.55 [ 2016.924020][ T5738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2016.935778][ T5738] usb 4-1: Product: syz [ 2016.943072][ T5738] usb 4-1: Manufacturer: syz [ 2016.948309][ T5738] usb 4-1: SerialNumber: syz [ 2016.956904][ T5738] usb 4-1: config 0 descriptor?? [ 2017.725386][ T29] audit: type=1400 audit(1784038707.824:3400): avc: denied { map } for pid=28630 comm="syz.1.6180" path="socket:[90444]" dev="sockfs" ino=90444 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2018.012785][ T29] audit: type=1400 audit(1784038707.824:3401): avc: denied { read } for pid=28630 comm="syz.1.6180" path="socket:[90444]" dev="sockfs" ino=90444 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2018.560773][ T5738] gspca_main: tv8532-2.14.0 probing 046d:0920 [ 2018.601630][ T5738] usb 4-1: USB disconnect, device number 26 [ 2018.779245][T28638] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 2018.850694][T28640] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6183'. [ 2019.035153][T28638] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 2019.063524][T28638] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 2019.084784][T28638] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -2 [ 2022.743525][ T29] audit: type=1400 audit(1784038712.449:3402): avc: denied { mount } for pid=28682 comm="syz.0.6197" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 2024.026718][T28686] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6198'. [ 2024.106106][T28693] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6199'. [ 2024.115239][T28693] openvswitch: netlink: Flow key attr not present in new flow. [ 2025.555658][T28714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6203'. [ 2025.941872][ T5738] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 2027.837444][ T5738] usb 4-1: Using ep0 maxpacket: 32 [ 2027.865217][ T5738] usb 4-1: device descriptor read/all, error -71 [ 2030.259091][T28744] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6212'. [ 2034.689446][T28789] netlink: zone id is out of range [ 2034.695812][T28789] netlink: zone id is out of range [ 2034.953467][ T29] audit: type=1326 audit(1784038723.454:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28786 comm="syz.2.6224" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596d59de59 code=0x7ffc0000 [ 2035.358318][ T29] audit: type=1326 audit(1784038723.454:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28786 comm="syz.2.6224" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596d59de59 code=0x7ffc0000 [ 2035.445498][T28794] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6225'. [ 2035.467844][ T29] audit: type=1326 audit(1784038723.454:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28786 comm="syz.2.6224" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f596d59de59 code=0x7ffc0000 [ 2035.495824][ T29] audit: type=1326 audit(1784038723.454:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28786 comm="syz.2.6224" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596d59de59 code=0x7ffc0000 [ 2036.005811][ T29] audit: type=1326 audit(1784038723.463:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28786 comm="syz.2.6224" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596d59de59 code=0x7ffc0000 [ 2036.194123][T28802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6229'. [ 2036.206101][ T29] audit: type=1326 audit(1784038723.463:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28786 comm="syz.2.6224" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f596d59de59 code=0x7ffc0000 [ 2036.304253][ T29] audit: type=1326 audit(1784038723.463:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28786 comm="syz.2.6224" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596d59de59 code=0x7ffc0000 [ 2036.342852][ T29] audit: type=1326 audit(1784038723.463:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28786 comm="syz.2.6224" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596d59de59 code=0x7ffc0000 [ 2036.373203][ T29] audit: type=1326 audit(1784038723.463:3411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28786 comm="syz.2.6224" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f596d59de59 code=0x7ffc0000 [ 2036.418362][ T29] audit: type=1326 audit(1784038723.463:3412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28786 comm="syz.2.6224" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596d59de59 code=0x7ffc0000 [ 2036.925669][ T5738] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 2037.728473][ T5738] usb 1-1: Using ep0 maxpacket: 16 [ 2037.747089][ T5738] usb 1-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 2037.769234][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2037.802073][ T5738] usb 1-1: Product: syz [ 2037.814668][ T5738] usb 1-1: Manufacturer: syz [ 2037.826699][ T5738] usb 1-1: SerialNumber: syz [ 2037.868402][ T5738] usb 1-1: config 0 descriptor?? [ 2037.957711][ T5738] usb 1-1: selecting invalid altsetting 1 [ 2038.006942][ T5738] technisat-usb2: could not set alternate setting to 0 [ 2038.447008][ T5738] technisat-usb2: firmware version: 0.0 [ 2038.954419][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 2038.963396][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.977873][ T5738] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 2039.295249][ T5738] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2039.342536][ T5738] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 2039.490968][ T5738] usb 1-1: media controller created [ 2039.519195][ T5738] technisat-usb2: i2c-error: out failed 53 = -22 [ 2039.547056][ T5738] dvb-usb: MAC address reading failed. [ 2039.592319][ T5738] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2039.863900][ T5738] DVB: Unable to find symbol stv090x_attach() [ 2039.883920][T28840] technisat-usb2: i2c-error: out failed 00 = -22 [ 2039.967860][ T5738] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 2040.143561][ T5738] rc_core: IR keymap rc-technisat-usb2 not found [ 2040.159574][ T5738] Registered IR keymap rc-empty [ 2040.175678][ T5738] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 2040.228138][ T5738] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input28 [ 2040.270457][ T5738] dvb-usb: schedule remote query interval to 100 msecs. [ 2040.294835][ T5738] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 2040.328368][ T5738] usb 1-1: USB disconnect, device number 10 [ 2040.368035][T28866] fuse: fd is not a fuse device [ 2041.625066][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 2041.625081][ T29] audit: type=1400 audit(1784038729.880:3434): avc: denied { create } for pid=28873 comm="syz.4.6247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2041.794383][ T5738] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 2044.604494][ T29] audit: type=1400 audit(1784038732.594:3435): avc: denied { watch } for pid=28906 comm="syz.3.6258" path="/1031/file0" dev="tmpfs" ino=5483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2044.648724][ T29] audit: type=1400 audit(1784038732.594:3436): avc: denied { watch_sb } for pid=28906 comm="syz.3.6258" path="/1031/file0" dev="tmpfs" ino=5483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2044.700084][T28913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6248'. [ 2044.845337][T28916] netlink: 'syz.1.6260': attribute type 12 has an invalid length. [ 2044.856674][ T29] audit: type=1400 audit(1784038732.871:3437): avc: denied { create } for pid=28915 comm="syz.1.6260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2045.036790][T28921] macsec0: entered promiscuous mode [ 2045.053224][T28915] macsec0: left promiscuous mode [ 2046.611436][T28923] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6261'. [ 2047.181743][T28937] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6264'. [ 2048.973978][T28932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6265'. [ 2049.112157][T28945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2051.274416][T28955] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 2051.330276][T28951] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6269'. [ 2051.357013][T28955] UDF-fs: Scanning with blocksize 512 failed [ 2051.698779][T28955] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 2051.775928][T28955] UDF-fs: Scanning with blocksize 1024 failed [ 2051.790860][ T29] audit: type=1400 audit(1784038739.259:3438): avc: denied { listen } for pid=28964 comm="syz.3.6272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2051.934289][ T29] audit: type=1400 audit(1784038739.259:3439): avc: denied { accept } for pid=28964 comm="syz.3.6272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2051.971145][T28955] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 2051.991060][T28955] UDF-fs: Scanning with blocksize 2048 failed [ 2052.003053][T28955] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 2052.015474][T28955] UDF-fs: Scanning with blocksize 4096 failed [ 2052.250812][ T29] audit: type=1400 audit(1784038739.684:3440): avc: denied { getopt } for pid=28966 comm="syz.4.6274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2052.381707][ T29] audit: type=1400 audit(1784038739.813:3441): avc: denied { write } for pid=28972 comm="syz.1.6275" path="socket:[91667]" dev="sockfs" ino=91667 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2052.446778][T28978] __vm_enough_memory: pid: 28978, comm: syz.1.6275, bytes: 4503599627366400 not enough memory for the allocation [ 2056.159137][T29011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6284'. [ 2057.910202][ T29] audit: type=1400 audit(1784038744.900:3442): avc: denied { mount } for pid=29022 comm="syz.3.6288" name="/" dev="configfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 2058.317943][ T29] audit: type=1400 audit(1784038744.909:3443): avc: denied { search } for pid=29022 comm="syz.3.6288" name="/" dev="configfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2059.643789][ T29] audit: type=1400 audit(1784038744.909:3444): avc: denied { search } for pid=29022 comm="syz.3.6288" name="/" dev="configfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2059.666438][ T29] audit: type=1400 audit(1784038744.909:3445): avc: denied { read } for pid=29022 comm="syz.3.6288" name="/" dev="configfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2059.689154][ T29] audit: type=1400 audit(1784038744.909:3446): avc: denied { read open } for pid=29022 comm="syz.3.6288" path="/" dev="configfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2060.451821][ T29] audit: type=1400 audit(1784038744.909:3447): avc: denied { search } for pid=29022 comm="syz.3.6288" name="/" dev="configfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2060.920466][ T29] audit: type=1400 audit(1784038744.909:3448): avc: denied { search } for pid=29022 comm="syz.3.6288" name="/" dev="configfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2061.339919][T29049] netlink: 'syz.1.6292': attribute type 32 has an invalid length. [ 2061.349075][T29049] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6292'. [ 2063.589163][T29067] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6300'. [ 2066.413922][ T29] audit: type=1326 audit(1784038752.775:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29063 comm="syz.0.6299" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641cb9de59 code=0x7ffc0000 [ 2066.449765][ T29] audit: type=1326 audit(1784038752.775:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29063 comm="syz.0.6299" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641cb9de59 code=0x7ffc0000 [ 2066.480499][ T29] audit: type=1326 audit(1784038752.775:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29063 comm="syz.0.6299" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641cb9de59 code=0x7ffc0000 [ 2066.509628][ T29] audit: type=1326 audit(1784038752.803:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29063 comm="syz.0.6299" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f641cb9de59 code=0x7ffc0000 [ 2066.798869][ T29] audit: type=1326 audit(1784038752.830:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29063 comm="syz.0.6299" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641cb9de59 code=0x7ffc0000 [ 2066.912770][ T29] audit: type=1326 audit(1784038752.830:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29063 comm="syz.0.6299" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f641cb9de59 code=0x7ffc0000 [ 2066.941759][ T29] audit: type=1326 audit(1784038752.830:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29063 comm="syz.0.6299" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641cb9de59 code=0x7ffc0000 [ 2066.952573][T29092] netlink: 'syz.4.6306': attribute type 4 has an invalid length. [ 2066.970025][ T29] audit: type=1326 audit(1784038752.830:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29063 comm="syz.0.6299" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641cb9de59 code=0x7ffc0000 [ 2067.005426][ T29] audit: type=1326 audit(1784038752.830:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29063 comm="syz.0.6299" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641cb9de59 code=0x7ffc0000 [ 2067.035976][ T29] audit: type=1326 audit(1784038752.830:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29063 comm="syz.0.6299" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641cb9de59 code=0x7ffc0000 [ 2072.211780][T29123] overlayfs: failed to clone upperpath [ 2072.295767][T29127] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2072.395179][T29131] netlink: 'syz.4.6318': attribute type 4 has an invalid length. [ 2074.117951][T29144] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6322'. [ 2074.127036][T29144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6322'. [ 2074.155393][T29144] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6322'. [ 2074.164364][T29144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6322'. [ 2076.261832][T29170] fuse: fd is not a fuse device [ 2078.004410][T29183] fuse: fd is not a fuse device [ 2078.218238][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 2078.218250][ T29] audit: type=1400 audit(1784038763.669:3516): avc: denied { watch watch_reads } for pid=29185 comm="syz.2.6335" path="pipe:[4595]" dev="pipefs" ino=4595 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 2078.866350][ T5738] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 2079.064536][ T5738] usb 1-1: config 0 has an invalid interface number: 91 but max is 0 [ 2079.073324][T29202] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 2079.157056][ T5738] usb 1-1: config 0 has no interface number 0 [ 2079.249833][ T5738] usb 1-1: config 0 interface 91 has no altsetting 0 [ 2079.274206][T29194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6338'. [ 2079.302878][ T5738] usb 1-1: New USB device found, idVendor=046d, idProduct=0920, bcdDevice=78.55 [ 2079.328234][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2079.347365][ T5738] usb 1-1: Product: syz [ 2079.352633][ T5738] usb 1-1: Manufacturer: syz [ 2079.366531][ T5738] usb 1-1: SerialNumber: syz [ 2079.366622][ T29] audit: type=1804 audit(1784038764.721:3517): pid=29186 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.6335" name="file0" dev="tmpfs" ino=7591 res=1 errno=0 [ 2079.373223][ T5738] usb 1-1: config 0 descriptor?? [ 2080.700340][T29216] overlayfs: failed to clone upperpath [ 2081.671799][ T5738] gspca_main: tv8532-2.14.0 probing 046d:0920 [ 2081.751686][ T5738] usb 1-1: USB disconnect, device number 11 [ 2081.775539][T29232] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6348'. [ 2082.480216][T29242] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6351'. [ 2086.291760][T29269] overlayfs: failed to clone lowerpath [ 2087.460233][T29279] netlink: 'syz.1.6362': attribute type 4 has an invalid length. [ 2088.077763][T29287] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6365'. [ 2094.392311][T29329] tipc: Enabling of bearer rejected, failed to enable media [ 2096.127204][T29338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6377'. [ 2096.316546][ T29] audit: type=1400 audit(1784038779.612:3518): avc: denied { getopt } for pid=29331 comm="syz.2.6378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2096.339311][ T29] audit: type=1400 audit(1784038779.612:3519): avc: denied { setopt } for pid=29331 comm="syz.2.6378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2097.974596][ T29] audit: type=1804 audit(1784038781.911:3520): pid=29356 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.6383" name="/newroot/1048/file0" dev="tmpfs" ino=5575 res=1 errno=0 [ 2097.987463][T29356] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 2098.011790][T29356] ref_ctr increment failed for inode: 0x15c7 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88806ab7bfc0 [ 2098.048958][T29356] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 2098.058947][T29356] ref_ctr decrement failed for inode: 0x15c7 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88806ab7bfc0 [ 2098.070267][T29356] uprobe: syz.3.6383:29356 failed to unregister, leaking uprobe [ 2098.251350][ T29] audit: type=1400 audit(1784038782.160:3521): avc: denied { write } for pid=29359 comm="syz.3.6385" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2099.274534][T29370] netlink: 'syz.4.6386': attribute type 4 has an invalid length. [ 2101.353670][T22596] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 2101.739359][T29390] tipc: Enabling of bearer rejected, failed to enable media [ 2101.749598][T29390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6394'. [ 2101.941787][T22596] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 2102.227404][T22596] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 2102.251746][T29403] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6396'. [ 2102.269889][T22596] usb 4-1: config 150 has no interface number 0 [ 2102.288334][T22596] usb 4-1: too many endpoints for config 150 interface 1 altsetting 105: 110, using maximum allowed: 30 [ 2102.321322][T22596] usb 4-1: config 150 interface 1 altsetting 105 has 0 endpoint descriptors, different from the interface descriptor's value: 110 [ 2102.369298][T22596] usb 4-1: config 150 interface 204 has no altsetting 0 [ 2102.396489][T22596] usb 4-1: config 150 interface 1 has no altsetting 0 [ 2102.429733][T22596] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 2102.457475][T22596] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2102.482983][T22596] usb 4-1: Product: syz [ 2102.499884][T22596] usb 4-1: Manufacturer: syz [ 2102.637048][T22596] usb 4-1: SerialNumber: syz [ 2104.255589][T22596] xr_serial 4-1:150.204: skipping garbage [ 2104.491257][T22596] xr_serial 4-1:150.204: xr_serial converter detected [ 2104.647972][T22596] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 2104.687931][T22596] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 2104.779469][T22596] usb 4-1: USB disconnect, device number 29 [ 2104.822551][T22596] xr_serial 4-1:150.204: device disconnected [ 2105.066059][T29427] tipc: Enabling of bearer rejected, failed to enable media [ 2105.177204][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 2105.196303][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 2106.333430][T29433] tipc: Enabling of bearer rejected, failed to enable media [ 2106.632802][T29438] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 2106.990894][T29445] ubi: mtd0 is already attached to ubi0 [ 2107.418706][T29449] netlink: 'syz.2.6409': attribute type 4 has an invalid length. [ 2116.215924][T29481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6419'. [ 2121.100812][T29514] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6428'. [ 2122.163319][T29533] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6433'. [ 2122.281216][ T9] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 2122.704179][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2122.716446][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2122.795649][ T9] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2122.819330][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 2122.837042][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2122.847327][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2122.869817][ T9] usb 4-1: Product: syz [ 2122.873983][ T9] usb 4-1: Manufacturer: syz [ 2122.878569][ T9] usb 4-1: SerialNumber: syz [ 2122.978423][T29520] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2123.220154][T29520] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2125.530484][T29564] netlink: 'syz.0.6439': attribute type 4 has an invalid length. [ 2125.621711][ T29] audit: type=1400 audit(1784038807.428:3522): avc: denied { listen } for pid=29565 comm="syz.2.6442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2125.980703][ T9] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 2126.748936][ T9] cdc_ncm 4-1:1.0: bind() failure [ 2126.761314][ T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 2126.768768][ T9] cdc_ncm 4-1:1.1: bind() failure [ 2126.843460][ T9] usb 4-1: USB disconnect, device number 30 [ 2127.642638][T29582] futex_wake_op: syz.2.6447 tries to shift op by 36; fix this program [ 2127.929602][T29582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6447'. [ 2128.093881][T29587] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6449'. [ 2129.429916][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 2129.624820][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 2129.633732][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 215, changing to 7 [ 2129.652289][ T9] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 2129.944473][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2129.952972][ T9] usb 4-1: Product: syz [ 2129.957284][ T9] usb 4-1: Manufacturer: syz [ 2129.962363][ T9] usb 4-1: SerialNumber: syz [ 2130.727987][ T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2130.736764][ T9] usb 4-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 2130.757571][ T9] usb 4-1: found format II with max.bitrate = 4, frame size=515 [ 2130.771971][ T9] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 2130.885029][ T9] usb 4-1: USB disconnect, device number 31 [ 2131.832475][T29574] udevd[29574]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2132.655496][T29619] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2133.707106][T29628] overlayfs: failed to clone upperpath [ 2135.546635][T29647] xt_addrtype: ipv6 does not support BROADCAST matching [ 2135.609550][ T29] audit: type=1400 audit(1784038816.651:3523): avc: denied { getopt } for pid=29642 comm="syz.2.6462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2138.475901][T29676] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6475'. [ 2138.485244][T29676] ip6tnl0: Caught tx_queue_len zero misconfig [ 2140.895164][T29711] kvm: emulating exchange as write [ 2143.446239][T29731] overlayfs: failed to clone upperpath [ 2144.338714][T29719] batman_adv: batadv0: Interface deactivated: geneve2 [ 2144.350587][T26696] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2144.366034][T26696] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2144.399781][T26696] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2144.431123][T26696] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2144.764484][T29758] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6496'. [ 2144.805974][T22596] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 2144.914490][ T29] audit: type=1400 audit(1784038825.237:3524): avc: denied { mount } for pid=29755 comm="syz.4.6496" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 2144.977763][T22596] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2144.984099][ T9] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 2145.006220][T22596] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2145.024206][T22596] usb 4-1: Product: syz [ 2145.037670][T22596] usb 4-1: Manufacturer: syz [ 2145.050517][T22596] usb 4-1: SerialNumber: syz [ 2145.079347][T22596] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2145.107513][T12271] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2145.322080][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2145.351222][T29746] Failed to initialize the IGMP autojoin socket (err -2) [ 2145.362642][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2145.373514][ T9] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2145.394427][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 2145.441894][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2145.453449][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2145.473649][ T9] usb 1-1: Product: syz [ 2145.485938][ T9] usb 1-1: Manufacturer: syz [ 2145.500763][ T9] usb 1-1: SerialNumber: syz [ 2145.523847][T29754] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2145.816713][T29754] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2146.370192][T22596] usb 4-1: USB disconnect, device number 32 [ 2146.630640][T12271] usb 4-1: Service connection timeout for: 256 [ 2146.637859][T12271] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2146.654587][T12271] ath9k_htc: Failed to initialize the device [ 2146.670635][T22596] usb 4-1: ath9k_htc: USB layer deinitialized [ 2148.121866][T29804] netlink: 'syz.3.6510': attribute type 2 has an invalid length. [ 2148.130778][T29804] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6510'. [ 2150.795061][ T9] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 2150.932571][ T9] cdc_ncm 1-1:1.0: bind() failure [ 2151.019639][T29831] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6514'. [ 2151.938995][ T9] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 2151.960300][ T9] cdc_ncm 1-1:1.1: bind() failure [ 2151.980670][ T9] usb 1-1: USB disconnect, device number 12 [ 2156.114253][T29861] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6525'. [ 2156.928515][T29869] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6527'. [ 2158.432083][ T29] audit: type=1400 audit(1784038837.719:3525): avc: denied { getopt } for pid=29870 comm="syz.2.6528" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 2159.502818][T29883] futex_wake_op: syz.3.6530 tries to shift op by 36; fix this program [ 2159.629136][T29883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6530'. [ 2160.120565][T29879] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6531'. [ 2163.311405][T29902] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6538'. [ 2163.326588][T29902] ip6gre1: entered promiscuous mode [ 2163.331880][T29902] ip6gre1: entered allmulticast mode [ 2163.721307][T29910] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6539'. [ 2164.021600][T29909] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6540'. [ 2165.778586][ T29] audit: type=1804 audit(1784038844.504:3526): pid=29928 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.6543" name="bus" dev="ramfs" ino=95367 res=1 errno=0 [ 2166.283506][T29941] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2167.101009][ T9] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 2168.966804][T29945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6547'. [ 2168.975748][T29945] erspan0: left allmulticast mode [ 2168.981250][T29945] erspan0: left promiscuous mode [ 2168.986332][T29945] bridge0: port 1(erspan0) entered disabled state [ 2169.162421][ T9] usb 1-1: device descriptor read/all, error -71 [ 2169.293217][T29956] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6548'. [ 2169.626758][T29835] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 2169.907171][T29835] usb 4-1: config 0 has an invalid interface number: 91 but max is 0 [ 2170.101260][T29965] netlink: 'syz.4.6552': attribute type 4 has an invalid length. [ 2170.110769][T29835] usb 4-1: config 0 has no interface number 0 [ 2170.121843][T29835] usb 4-1: config 0 interface 91 has no altsetting 0 [ 2170.136643][T29835] usb 4-1: New USB device found, idVendor=046d, idProduct=0920, bcdDevice=78.55 [ 2170.152122][T29835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2170.163972][T29835] usb 4-1: Product: syz [ 2170.178671][T29835] usb 4-1: Manufacturer: syz [ 2170.190945][T29835] usb 4-1: SerialNumber: syz [ 2170.214240][T29835] usb 4-1: config 0 descriptor?? [ 2171.675518][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 2171.692210][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 2172.994462][T29835] gspca_main: tv8532-2.14.0 probing 046d:0920 [ 2173.063213][T29835] usb 4-1: USB disconnect, device number 33 [ 2173.109459][T30006] fuse: fd is not a fuse device [ 2173.504586][T29835] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 2173.751093][T29835] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2173.770342][T29835] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2173.792710][T29835] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2173.815006][T30019] netlink: 'syz.2.6568': attribute type 4 has an invalid length. [ 2173.824795][T29835] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 2173.864231][T29835] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2173.892222][T29835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2173.914448][T29835] usb 4-1: Product: syz [ 2173.922654][T29835] usb 4-1: Manufacturer: syz [ 2173.935351][T29835] usb 4-1: SerialNumber: syz [ 2173.957757][T29998] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2174.198981][T29998] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2174.272162][T30026] /dev/nullb0: Can't lookup blockdev [ 2174.282926][ T29] audit: type=1400 audit(1784038852.351:3527): avc: denied { mount } for pid=30021 comm="syz.4.6569" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2176.265159][T30047] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6573'. [ 2176.969547][ T5738] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 2178.823231][ T5738] usb 1-1: device not accepting address 15, error -71 [ 2179.677036][T29835] cdc_ncm 4-1:1.0: bind() failure [ 2179.691772][T29835] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -32 [ 2179.701557][T29835] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -32 [ 2179.717635][T29835] usbtest 4-1:1.1: probe with driver usbtest failed with error -32 [ 2179.828310][T29835] usb 4-1: USB disconnect, device number 34 [ 2185.728997][T30077] netlink: 'syz.1.6582': attribute type 4 has an invalid length. [ 2199.430141][T30203] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6604'. [ 2201.430422][T30221] kAFS: unable to lookup cell '' [ 2202.090692][T30227] dlm: non-version read from control device 0 [ 2207.021648][T30271] netlink: 'syz.1.6633': attribute type 1 has an invalid length. [ 2207.222137][T30271] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2208.655715][T30291] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6636'. [ 2209.736394][T30295] overlayfs: failed to clone upperpath [ 2211.042418][ T29] audit: type=1400 audit(1784038886.288:3528): avc: denied { connect } for pid=30308 comm="syz.4.6644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2211.047826][T30309] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6644'. [ 2211.081941][ T29] audit: type=1400 audit(1784038886.334:3529): avc: denied { map } for pid=30306 comm="syz.3.6643" path="socket:[96114]" dev="sockfs" ino=96114 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2211.156168][ T29] audit: type=1400 audit(1784038886.334:3530): avc: denied { read } for pid=30306 comm="syz.3.6643" path="socket:[96114]" dev="sockfs" ino=96114 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2325.410725][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2325.417694][ C1] rcu: 0-...!: (1 GPs behind) idle=d894/1/0x4000000000000000 softirq=148152/148152 fqs=2 [ 2325.429215][ C1] rcu: (detected by 1, t=10502 jiffies, g=176361, q=225 ncpus=2) [ 2325.437014][ C1] Sending NMI from CPU 1 to CPUs 0: [ 2325.437041][ C0] NMI backtrace for cpu 0 [ 2325.437056][ C0] CPU: 0 UID: 0 PID: 5608 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 2325.437075][ C0] Tainted: [L]=SOFTLOCKUP [ 2325.437080][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 2325.437089][ C0] RIP: 0010:__kasan_check_read+0x8/0x20 [ 2325.437115][ C0] Code: fe 90 0f 0b 90 48 83 c4 60 5b 5d 41 5c c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <89> f6 31 d2 e9 0f f3 ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f [ 2325.437128][ C0] RSP: 0018:ffffc90000007e90 EFLAGS: 00000046 [ 2325.437140][ C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff81f592bf [ 2325.437149][ C0] RDX: ffff88807f4f8000 RSI: 0000000000000008 RDI: ffffffff91223c90 [ 2325.437158][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000007 [ 2325.437166][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888033e21300 [ 2325.437175][ C0] R13: ffffffff89c71960 R14: ffff8880b8428640 R15: ffff8880b8428690 [ 2325.437185][ C0] FS: 00005555786dd500(0000) GS:ffff888123de8000(0000) knlGS:0000000000000000 [ 2325.437199][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2325.437208][ C0] CR2: 0000001b33417ff8 CR3: 000000005cdf6000 CR4: 00000000003526f0 [ 2325.437217][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 2325.437225][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2325.437234][ C0] Call Trace: [ 2325.437239][ C0] [ 2325.437244][ C0] __hrtimer_run_queues+0x3bf/0x9c0 [ 2325.437267][ C0] hrtimer_interrupt+0x3e5/0x940 [ 2325.437291][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 2325.437311][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 2325.437331][ C0] [ 2325.437336][ C0] [ 2325.437341][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2325.437357][ C0] RIP: 0010:lock_acquire+0x5e/0x370 [ 2325.437372][ C0] Code: 05 fb 0d 7e 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 46 ca 3c 0f 0f 82 ac 02 00 00 8b 35 0e fe 3c 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 9d 0d 7e 12 0f 85 ec 02 00 00 48 83 c4 [ 2325.437384][ C0] RSP: 0018:ffffc90003c073d8 EFLAGS: 00000206 [ 2325.437395][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 2325.437404][ C0] RDX: 0000000000000000 RSI: ffffffff8e17df68 RDI: ffffffff8c400f80 [ 2325.437412][ C0] RBP: ffffffff8ebe60c0 R08: 00000000fdb18542 R09: 000000000000001e [ 2325.437421][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 2325.437429][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2325.437442][ C0] ? page_table_check_set+0x48f/0x930 [ 2325.437457][ C0] ? page_table_check_set+0x48f/0x930 [ 2325.437473][ C0] page_table_check_set+0x6b/0x930 [ 2325.437487][ C0] ? page_table_check_set+0x4f/0x930 [ 2325.437503][ C0] __page_table_check_ptes_set+0x27a/0x4e0 [ 2325.437519][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 2325.437536][ C0] ? copy_page_range+0x1da6/0x5b20 [ 2325.437556][ C0] copy_page_range+0x2197/0x5b20 [ 2325.437584][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 2325.437608][ C0] ? irqentry_exit+0x24d/0xa00 [ 2325.437626][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 2325.437645][ C0] ? irqentry_exit+0x24d/0xa00 [ 2325.437666][ C0] ? dup_mmap+0xcfe/0x21b0 [ 2325.437684][ C0] ? up_write+0x2e5/0x5c0 [ 2325.437700][ C0] dup_mmap+0xd44/0x21b0 [ 2325.437720][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 2325.437736][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 2325.437755][ C0] ? irqentry_exit+0x24d/0xa00 [ 2325.437778][ C0] ? lock_acquire+0x5e/0x370 [ 2325.437795][ C0] copy_process+0x4588/0x8030 [ 2325.437817][ C0] ? __pfx_copy_process+0x10/0x10 [ 2325.437833][ C0] ? do_raw_spin_lock+0x128/0x260 [ 2325.437852][ C0] ? mark_held_locks+0x40/0x70 [ 2325.437867][ C0] kernel_clone+0x176/0x9d0 [ 2325.437884][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 2325.437903][ C0] ? find_held_lock+0x2b/0x80 [ 2325.437921][ C0] ? __might_fault+0xc5/0x140 [ 2325.437942][ C0] __do_sys_clone+0xd9/0x120 [ 2325.437958][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 2325.437982][ C0] do_syscall_64+0x115/0x870 [ 2325.438000][ C0] ? clear_bhb_loop+0x40/0x90 [ 2325.438015][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2325.438030][ C0] RIP: 0033:0x7f641cbc68d2 [ 2325.438042][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 2325.438055][ C0] RSP: 002b:00007ffec6e31330 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2325.438067][ C0] RAX: ffffffffffffffda RBX: 00007ffec6e31330 RCX: 00007f641cbc68d2 [ 2325.438077][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2325.438085][ C0] RBP: 00007ffec6e314bc R08: 0000000000000000 R09: 0000000000000001 [ 2325.438094][ C0] R10: 00005555786dd7d0 R11: 0000000000000246 R12: 0000000000000001 [ 2325.438103][ C0] R13: 00005555786f0a10 R14: 0000000000207a71 R15: 00007ffec6e31510 [ 2325.438117][ C0] [ 2325.439036][ C1] rcu: rcu_preempt kthread starved for 10498 jiffies! g176361 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 2325.938112][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2325.948066][ C1] rcu: RCU grace-period kthread stack dump: [ 2325.953940][ C1] task:rcu_preempt state:R running task stack:27592 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 2325.967421][ C1] Call Trace: [ 2325.970685][ C1] [ 2325.973608][ C1] __schedule+0x125c/0x6730 [ 2325.978122][ C1] ? __pfx___schedule+0x10/0x10 [ 2325.982967][ C1] ? find_held_lock+0x2b/0x80 [ 2325.987639][ C1] ? schedule+0x225/0x2c0 [ 2325.991967][ C1] schedule+0xdd/0x2c0 [ 2325.996030][ C1] schedule_timeout+0x127/0x280 [ 2326.000870][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 2326.006234][ C1] ? __pfx_process_timeout+0x10/0x10 [ 2326.011518][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2326.017316][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 2326.022769][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 2326.027526][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2326.032805][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 2326.037734][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 2326.042918][ C1] ? rcu_is_watching+0x12/0xc0 [ 2326.047676][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2326.053477][ C1] rcu_gp_kthread+0x179/0x230 [ 2326.058143][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2326.063331][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2326.069132][ C1] ? __kthread_parkme+0x18c/0x230 [ 2326.074150][ C1] ? kthread+0x13a/0x450 [ 2326.078390][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2326.083576][ C1] kthread+0x370/0x450 [ 2326.087640][ C1] ? __pfx_kthread+0x10/0x10 [ 2326.092228][ C1] ret_from_fork+0x72b/0xd50 [ 2326.096812][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2326.101917][ C1] ? __switch_to+0x800/0x10f0 [ 2326.106591][ C1] ? __pfx_kthread+0x10/0x10 [ 2326.111177][ C1] ret_from_fork_asm+0x1a/0x30 [ 2326.115949][ C1] [ 2326.118954][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 2326.125263][ C1] CPU: 1 UID: 0 PID: 5612 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 2326.136271][ C1] Tainted: [L]=SOFTLOCKUP [ 2326.140577][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 2326.150616][ C1] RIP: 0010:smp_call_function_many_cond+0x589/0x16c0 [ 2326.157281][ C1] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 c9 95 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 2c 0f 00 00 8b 45 08 31 [ 2326.176874][ C1] RSP: 0018:ffffc9000327f618 EFLAGS: 00000293 [ 2326.182931][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fd46fd [ 2326.190887][ C1] RDX: ffff88807e050000 RSI: ffffffff81fd46d7 RDI: ffff88807e050000 [ 2326.198846][ C1] RBP: ffff8880b8443680 R08: 0000000000000005 R09: 0000000000000000 [ 2326.206804][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 2326.214760][ C1] R13: ffffed10170886d1 R14: 0000000000000001 R15: ffff8880b853c880 [ 2326.222718][ C1] FS: 0000555574cfe500(0000) GS:ffff888123ee8000(0000) knlGS:0000000000000000 [ 2326.231635][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2326.238217][ C1] CR2: 00007fcc7cb556b8 CR3: 000000005cf4c000 CR4: 00000000003526f0 [ 2326.246192][ C1] Call Trace: [ 2326.249468][ C1] [ 2326.252394][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 2326.257601][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 2326.263920][ C1] ? ldt_dup_context+0x45/0x300 [ 2326.268771][ C1] ? find_held_lock+0x2b/0x80 [ 2326.273452][ C1] ? ldt_dup_context+0x1a4/0x300 [ 2326.278393][ C1] ? ldt_dup_context+0x1a4/0x300 [ 2326.283335][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 2326.288537][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 2326.293654][ C1] flush_tlb_mm_range+0x45f/0x16f0 [ 2326.298794][ C1] ? dup_mmap+0x12ec/0x21b0 [ 2326.303295][ C1] ? dup_mmap+0x12ec/0x21b0 [ 2326.307799][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 2326.313342][ C1] ? up_write+0x2e5/0x5c0 [ 2326.317671][ C1] dup_mmap+0x1307/0x21b0 [ 2326.322011][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 2326.326684][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2326.332492][ C1] ? __lock_acquire+0x49f/0x1a40 [ 2326.337423][ C1] ? find_held_lock+0x2b/0x80 [ 2326.342098][ C1] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 2326.347998][ C1] copy_process+0x4588/0x8030 [ 2326.352681][ C1] ? __pfx_copy_process+0x10/0x10 [ 2326.357703][ C1] ? do_raw_spin_lock+0x128/0x260 [ 2326.362737][ C1] kernel_clone+0x176/0x9d0 [ 2326.367244][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 2326.372273][ C1] ? find_held_lock+0x2b/0x80 [ 2326.376946][ C1] ? __might_fault+0xc5/0x140 [ 2326.381623][ C1] __do_sys_clone+0xd9/0x120 [ 2326.386209][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 2326.391437][ C1] do_syscall_64+0x115/0x870 [ 2326.396024][ C1] ? clear_bhb_loop+0x40/0x90 [ 2326.400701][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2326.406594][ C1] RIP: 0033:0x7fcc7bdc68d2 [ 2326.411003][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 2326.430605][ C1] RSP: 002b:00007fffb3c242e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2326.439010][ C1] RAX: ffffffffffffffda RBX: 00007fffb3c242e0 RCX: 00007fcc7bdc68d2 [ 2326.446971][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2326.454929][ C1] RBP: 00007fffb3c2446c R08: 0000000000000000 R09: 0000000000000001 [ 2326.462890][ C1] R10: 0000555574cfe7d0 R11: 0000000000000246 R12: 0000000000000001 [ 2326.470849][ C1] R13: 00000000000927c0 R14: 000000000020803a R15: 00007fffb3c244c0 [ 2326.478823][ C1]