last executing test programs: 11m43.209898091s ago: executing program 0 (id=1255): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000ac0)="a1", 0x1}], 0x1}}], 0x1, 0x4000000) sendmsg$nl_route_sched_retired(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001200)=@deltclass={0xd4, 0x29, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x13, 0x6}, {0x7, 0xffec}, {0x6, 0x8}}, [@c_cbq={{0x8}, {0x54, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x11, 0x1, 0x1a, 0x5, 0xcc6, 0x10001, 0x8, 0x2}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x5, 0x2}, 0x845, 0x1}}, @TCA_CBQ_RATE={0x10, 0x5, {0x7, 0x2, 0x7, 0x1, 0x3, 0x871}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x3c, 0x3, 0xf, 0x7, 0x3, 0x4, 0xff, 0x4}}]}}, @c_cbq={{0x8}, {0x4c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x30, 0x0, 0x3, 0x6, 0x1ff, 0x5, 0x5}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x1d, 0x0, 0x1, 0x80, 0x1, 0x9}}, @TCA_CBQ_RATE={0x10, 0x5, {0x4, 0x1, 0x3bb7, 0x5, 0xef4, 0x30ab}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xf, 0x3, 0x6, 0xfc, 0x8, 0x80000001}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 11m43.028526992s ago: executing program 0 (id=1258): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x7, 0x1c, 0x8, 0x400, 0x400, 0x800, 0xd0}, 0x1c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(0x10000000000, 0x4, 0x2000008, 0x11, r2, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r4, @ANYRES8=r5, @ANYRES8=r4, @ANYRESHEX, @ANYRES64=r3, @ANYRESDEC=r2, @ANYRES64, @ANYRES8=r3, @ANYRES8=r4], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x24046880) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r8, 0x8) write$proc_mixer(r7, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES64=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x60000526) 11m41.51905951s ago: executing program 0 (id=1266): setns(0xc9, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xc0b01, 0x0) write$tun(r1, 0x0, 0x3e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 11m39.818800163s ago: executing program 0 (id=1273): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) setuid(0xee00) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0x9362, 0x0) 11m39.606520011s ago: executing program 0 (id=1275): syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) socket$nl_generic(0x10, 0x3, 0x10) ptrace(0x10, 0x0) ptrace(0x10, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) syz_io_uring_setup(0x227, 0x0, &(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000000)) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xf0f027, 0x2}) 11m39.128282455s ago: executing program 0 (id=1278): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f007, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x10) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="80", 0x1}], 0x1}, 0x44010) syz_usb_connect(0x2, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x10007, 0xbc03) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000480)=""/142) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000), &(0x7f0000000300)=0x8) 11m38.78628479s ago: executing program 32 (id=1278): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f007, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x10) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="80", 0x1}], 0x1}, 0x44010) syz_usb_connect(0x2, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x10007, 0xbc03) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000480)=""/142) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000), &(0x7f0000000300)=0x8) 10m26.809876141s ago: executing program 2 (id=1564): socket(0xa, 0x3, 0x3a) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xe4}}, 0x20050800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$mixer(0xffffffffffffff9c, &(0x7f0000000400), 0x20002, 0x0) io_uring_setup(0x340a, &(0x7f0000000000)={0x0, 0xb606, 0x10000, 0x2, 0x93}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0xcb, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xa6, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='lzo-rle', 0x7) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='dev_mnt/zram0\x00', 0x2, 0x0) write(r6, &(0x7f0000000480)="001122", 0x3) close(r6) 10m25.501493873s ago: executing program 2 (id=1566): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast2}, r2}}, 0x48) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) 10m23.779168107s ago: executing program 2 (id=1570): socket(0x23, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) unshare(0x28000600) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r2 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000140)={{0x200002, 0x2, 0x5, 0xfffffffe, 'syz0\x00', 0xf5}, 0x3, 0x40, 0x40, r2, 0x0, 0x2, 'syz1\x00', &(0x7f0000000640)}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc801}, 0x20000810) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) syz_open_dev$sg(&(0x7f00000000c0), 0x40, 0xa01) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x500, 0x0) r5 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x7) r6 = dup(r5) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$COMEDI_INSNLIST(r4, 0x8010640b, 0x0) 10m23.602414594s ago: executing program 2 (id=1572): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000440)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000b8010000000f01d90f300fc79d53bf0000c4e16dd3010f2202", 0x52}], 0x1, 0x4f, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mbind(&(0x7f0000283000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x7, 0x0) ioctl$KVM_NMI(r3, 0xae9a) close_range(r0, 0xffffffffffffffff, 0x0) 10m23.154841604s ago: executing program 2 (id=1576): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_io_uring_complete(0x0, r0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) close_range(r1, 0xffffffffffffffff, 0x200000000000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 10m22.611296706s ago: executing program 2 (id=1579): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x7, 0x1c, 0x8, 0x400, 0x400, 0x800, 0xd0}, 0x1c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(0x10000000000, 0x4, 0x2000008, 0x11, r2, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r4, @ANYRES8=r5, @ANYRES8=r4, @ANYRESHEX, @ANYRES64=r3, @ANYRESDEC=r2, @ANYRES8=r3, @ANYRES8=r4], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x24046880) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r8, 0x8) write$proc_mixer(r7, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES64=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x60000526) 10m7.299948503s ago: executing program 33 (id=1579): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x7, 0x1c, 0x8, 0x400, 0x400, 0x800, 0xd0}, 0x1c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(0x10000000000, 0x4, 0x2000008, 0x11, r2, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r4, @ANYRES8=r5, @ANYRES8=r4, @ANYRESHEX, @ANYRES64=r3, @ANYRESDEC=r2, @ANYRES8=r3, @ANYRES8=r4], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x24046880) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r8, 0x8) write$proc_mixer(r7, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES64=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x60000526) 31.147630645s ago: executing program 4 (id=3305): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) syz_open_dev$vcsa(0x0, 0x4000000000, 0x4e8800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r5, 0x40104d05, &(0x7f0000000900)="0000010000000000000001") 30.243191906s ago: executing program 4 (id=3306): rseq(&(0x7f0000000080), 0x3a, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x8}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffe0, 0xfff3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000f, 0x11, r0, 0xef8eb000) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000280)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r7}) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000180)={'pcl724\x00', [0x100, 0xf, 0xcd, 0x6, 0x4, 0x100, 0x0, 0x20000000, 0x8, 0xb, 0x0, 0xb51, 0x1, 0x401, 0x3, 0x1, 0x5, 0x3, 0x60000000, 0x401, 0x6, 0x2, 0xb, 0x1, 0x48, 0x9, 0x6, 0x6a77, 0x5, 0x7fffffff, 0xa]}) 18.059338622s ago: executing program 4 (id=3330): r0 = socket(0x21, 0x3, 0x20000000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x5, 0xfffffffb}, 0x10) write(r0, 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r2, &(0x7f0000000600)=[{&(0x7f0000000200)}, {&(0x7f0000000340)="10", 0x1}], 0x2, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls=0x37, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) unshare(0x40400) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x4000000000010046) 17.190832162s ago: executing program 4 (id=3331): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x28, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r5) sendmsg$IEEE802154_DISASSOCIATE_REQ(r5, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={0x0}, 0x1, 0x0, 0x0, 0x40898}, 0x8010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0xa, @pix={0x0, 0x6, 0x33565348}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@delchain={0x24, 0x65, 0x21, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x2, 0x10}, {0xe}, {0xb, 0x3}}}, 0x24}}, 0x8000) 17.151353866s ago: executing program 3 (id=3332): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) 10.359519941s ago: executing program 3 (id=3341): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000002f1c060008001b000000"], 0x44}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) readahead(r0, 0x3, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x8, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 9.348254373s ago: executing program 4 (id=3344): rseq(&(0x7f0000000080), 0x3a, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x8}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffe0, 0xfff3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000f, 0x11, r0, 0xef8eb000) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000280)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r5}) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000180)={'pcl724\x00', [0x100, 0xf, 0xcd, 0x6, 0x4, 0x100, 0x0, 0x20000000, 0x8, 0xb, 0x0, 0xb51, 0x1, 0x401, 0x3, 0x1, 0x5, 0x3, 0x60000000, 0x401, 0x6, 0x2, 0xb, 0x1, 0x48, 0x9, 0x6, 0x6a77, 0x5, 0x7fffffff, 0xa]}) 7.932145552s ago: executing program 6 (id=3345): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x4, 0x0, &(0x7f0000000300)="01010000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x2003}, 0xfffffffffffffd14) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r6, &(0x7f00000000c0)='.\x00', 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, &(0x7f0000000280)={r6, r1, 0x1}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x2010, 0x0, @empty}}, 0x0, 0x800, 0xfffffffd, 0x0, 0x8a, 0x200}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r7, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r8, 0x711, 0x70bd25, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 7.289118931s ago: executing program 1 (id=3347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce51", 0x27}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x8080) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x24004010}, 0x8000002) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f0000007880)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000230c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x222203, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x6, 0x9, 0x0, 0x0) 7.140215897s ago: executing program 1 (id=3348): shmat(0x0, &(0x7f000051b000/0x3000)=nil, 0x2000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) socket$netlink(0x10, 0x3, 0x8000000004) r0 = io_uring_setup(0x4053, &(0x7f0000000040)={0x0, 0x2063, 0x0, 0x2, 0x94}) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000140)={0x62, 0x1, 0x0, 0x0, &(0x7f00000001c0)}, 0x20) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102397, 0x18ffd, 0x1000000000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 6.917073347s ago: executing program 1 (id=3349): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = timerfd_create(0x1, 0x0) timerfd_settime(r3, 0x2, &(0x7f0000000280)={{0x0, 0x3938700}, {0x77359400}}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_getroute={0xa0, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_NEWDST={0x84}]}, 0xa0}}, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r6 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x9c, '\x00', @p_u8=&(0x7f0000000100)=0x6}}) 6.852690901s ago: executing program 6 (id=3350): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x4, 0x0, &(0x7f0000000300)="01010000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r6, &(0x7f00000000c0)='.\x00', 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, &(0x7f0000000280)={r6, r1, 0x1}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x2010, 0x0, @empty}}, 0x0, 0x800, 0xfffffffd, 0x0, 0x8a, 0x200}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r7, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r8, 0x711, 0x70bd25, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 6.728047348s ago: executing program 5 (id=3351): socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setrlimit(0x1, &(0x7f0000000080)={0x3, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x0, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2, 0x7}}, {{0xa, 0x0, 0x6df, @empty, 0x5}}}, 0x108) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x1) fstat(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c0001800600060088470000140002"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 5.735738058s ago: executing program 3 (id=3352): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) 5.587040513s ago: executing program 6 (id=3353): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x90000008b}, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pidfd_send_signal(r0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r1, 0x0, 0x4004) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0xe) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000540)={'filter\x00', 0x7, 0x4, 0x408, 0x210, 0x0, 0x0, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000040), {[{{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xa, 0xe1, {0x4}}}}, {{@arp={@broadcast, @remote, 0xff000000, 0xff0000ff, 0x3, 0xb, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x1ff, 0xfffe, 0x0, 0x5, 0xff, 0x7, 'vxcan1\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x40}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @multicast1, @loopback, 0xf, 0x1}}}, {{@arp={@loopback, @multicast2, 0xff000000, 0xff, 0xf, 0xb, {@mac=@multicast, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff]}}, 0x4, 0x9, 0x100, 0x8, 0xfff8, 0x7ff, 'team_slave_1\x00', 'bond0\x00', {}, {0xff}, 0x0, 0x306}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @rand_addr=0x64010102, @private=0xa010101, 0x669d8c2e300d14c0}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) socket$inet_tcp(0x2, 0x1, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0xd00, &(0x7f0000000000)='discard') 5.503342309s ago: executing program 1 (id=3354): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0xffffffffffffff4f, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r2], 0x24}, 0x1, 0x0, 0x0, 0x404c011}, 0xc440) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000000308010300000000000000000a0000080c00048008001100000000000003000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x24000851}, 0x800) write(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) write$sndseq(r4, &(0x7f0000000500)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4, 0x5}, {}, @addr={0xec, 0x5b}}, {0x0, 0x0, 0x0, 0x0, @tick=0x1, {0x8}, {0x5, 0x6}, @quote={{0x5, 0x5}}}, {0x0, 0x0, 0x0, 0x0, @time={0x8, 0xffff11fa}, {0x0, 0xa}, {0x2}, @addr={0x1, 0x6}}, {0x1, 0x3, 0x1, 0x0, @tick=0x48, {0x4, 0x1}, {0x7, 0x8}, @quote={{0x2, 0xd8}, 0x8}}, {0x9a, 0x9, 0x8, 0x4, @time={0x2029, 0xa}, {0x8, 0x9}, {0xe, 0x5}, @quote={{0xd7, 0x5}, 0x3, &(0x7f0000000040)={0x3, 0x6, 0x0, 0x8, @time={0x80000001, 0x1}, {0x2, 0x2}, {0x7, 0xd9}, @raw32={[0x5, 0x4e9907a7, 0x1000]}}}}], 0x8c) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x7ff, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.37799964s ago: executing program 5 (id=3355): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) socket$inet_smc(0x2b, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$hidraw(0x0, 0x3, 0x2000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = inotify_init() r3 = socket(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4.379451299s ago: executing program 6 (id=3356): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000ff000040720501cb6526010203010902120001000000000904"], 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000280)=[0x0]) io_pgetevents(0x0, 0x1, 0x0, &(0x7f0000000040), 0x0, 0x0) shutdown(r0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r5, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {}, {0xd, 0x19, {0x8, 0x1ff, 0xfffffff3, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40018}, 0x20004000) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x278, 0xffffff7a, 0xffffffff, 0x278, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@empty, @multicast1, 0xff000000, 0xffffff00, 'pimreg\x00', 'ip6gretap0\x00', {}, {}, 0x4, 0x1, 0x10}, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x6, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x88, 0x0, {0x4}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x2, 0x7, [0x2036, 0x3d, 0x1c, 0x22, 0x31, 0x1d, 0x37, 0x2c, 0x14, 0x7, 0x7, 0x34, 0x13, 0x1a, 0x15, 0xa], 0x0, 0x7fff, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x2, 0x1, 0x3, 0x3, 0xd}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'macsec0\x00', 0x200}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x3f6b4000) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, 0x0, &(0x7f0000000080)) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8001) 4.240042559s ago: executing program 4 (id=3357): rseq(&(0x7f0000000080), 0x3a, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x8}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffe0, 0xfff3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000f, 0x11, r0, 0xef8eb000) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000280)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r7}) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000180)={'pcl724\x00', [0x100, 0xf, 0xcd, 0x6, 0x4, 0x100, 0x0, 0x20000000, 0x8, 0xb, 0x0, 0xb51, 0x1, 0x401, 0x3, 0x1, 0x5, 0x3, 0x60000000, 0x401, 0x6, 0x2, 0xb, 0x1, 0x48, 0x9, 0x6, 0x6a77, 0x5, 0x7fffffff, 0xa]}) 4.223560133s ago: executing program 5 (id=3358): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce51", 0x27}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x8080) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x24004010}, 0x8000002) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f0000007880)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000230c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x222203, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x6, 0x9, 0x0, 0x0) 3.988895722s ago: executing program 5 (id=3359): socket$xdp(0x2c, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x14b041, 0x2) r0 = memfd_create(0x0, 0x1) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRESOCT], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b000000180100002020752500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000900000056000000060000002c93000000000000b5030000000000008500000076000000f1c00000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000092870000", @ANYRES32], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r6 = io_uring_setup(0x666, &(0x7f00000002c0)={0x0, 0x284f, 0x40, 0xfffffffe, 0x235}) setresuid(0xee00, 0xee00, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0) 3.770754321s ago: executing program 5 (id=3360): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x4, 0x0, &(0x7f0000000300)="01010000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x2003}, 0xfffffffffffffd14) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r6, &(0x7f00000000c0)='.\x00', 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, &(0x7f0000000280)={r6, r1, 0x1}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x2010, 0x0, @empty}}, 0x0, 0x800, 0xfffffffd, 0x0, 0x8a, 0x200}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r7, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r8, 0x711, 0x70bd25, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.706444513s ago: executing program 6 (id=3361): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, 0x0, 0x48850) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) socket(0x40000000015, 0x5, 0x0) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x271f, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000007880)=""/102400, 0x19000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0000016001d", 0x7, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2002, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) mount$binderfs(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r3, 0xaa3a6000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 2.661801771s ago: executing program 3 (id=3362): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) removexattr(&(0x7f00000007c0)='./file0/file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) write$proc_mixer(0xffffffffffffffff, 0x0, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0xfffffffe) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000003c0), 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4db, @local, 0x3}, 0x1c, &(0x7f0000000240)}}], 0x1, 0x4c040) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x40202) ioctl$BLKGETZONESZ(r3, 0x80041284, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) 2.654656235s ago: executing program 1 (id=3363): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x4, 0x0, &(0x7f0000000300)="01010000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r6, &(0x7f00000000c0)='.\x00', 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, &(0x7f0000000280)={r6, r1, 0x1}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x2010, 0x0, @empty}}, 0x0, 0x800, 0xfffffffd, 0x0, 0x8a, 0x200}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r7, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r8, 0x711, 0x70bd25, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.383889488s ago: executing program 5 (id=3364): prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x103080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000000)={0x1, 0xaa4, 0x0, &(0x7f0000000180)="d49a6f7bd9016ee4934948035699458b7328165aacfb9a69e7ce1588eb70154b903f0277b9cfe67e28", 0x0, 0x29}) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000080)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b805000000f3a5baf80c66b80e5ca48f66efbafc0cec0f01310f019c09000f01c2", 0x71}], 0x1, 0x7d, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102400, 0x19000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000001c0), 0x4, 0x90000) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000036000/0x3000)=nil) 1.253363976s ago: executing program 3 (id=3365): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r4, &(0x7f0000000300)="030000001b0000000800000001000000000b000000010004000000", 0x1b) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r5, &(0x7f0000000100)='e:my_read_msr1 msr/read_msr\n', 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x81, 0xb, 0xdd, 0x8}, {0x6, 0x13, 0x3, 0x80}]}, 0x10) 1.245521106s ago: executing program 1 (id=3366): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d400000000010104000000fffffff500020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000030000080008400000000a0400164008001540000000030400170058000d"], 0xd4}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./myconfig\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./myconfig/usb_gadget/g1/functions/acm.0\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/functions/acm.0\x00', 0x200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYRES16=0x0], 0x128}, 0x2080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRES16=r3, @ANYRES16=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40088f5}, 0x50) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) write(r5, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xa, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x2000300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) close_range(r1, 0xffffffffffffffff, 0x0) 1.201915036s ago: executing program 6 (id=3367): rseq(&(0x7f0000000080), 0x3a, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x8}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffe0, 0xfff3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000f, 0x11, r0, 0xef8eb000) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000280)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r6}) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000180)={'pcl724\x00', [0x100, 0xf, 0xcd, 0x6, 0x4, 0x100, 0x0, 0x20000000, 0x8, 0xb, 0x0, 0xb51, 0x1, 0x401, 0x3, 0x1, 0x5, 0x3, 0x60000000, 0x401, 0x6, 0x2, 0xb, 0x1, 0x48, 0x9, 0x6, 0x6a77, 0x5, 0x7fffffff, 0xa]}) 0s ago: executing program 3 (id=3368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce51", 0x27}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x8080) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x9880) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x24004010}, 0x8000002) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f0000007880)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x222203, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x6, 0x9, 0x0, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x9, 0x0, &(0x7f0000000040)) kernel console output (not intermixed with test programs): it(1786035693.883:902): avc: denied { write } for pid=13049 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 812.997131][ T29] audit: type=1400 audit(1786035695.953:903): avc: denied { getopt } for pid=13055 comm="syz.4.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 813.023909][T13057] netlink: 'syz.4.2210': attribute type 1 has an invalid length. [ 814.574900][T13076] netlink: zone id is out of range [ 814.580034][T13076] netlink: zone id is out of range [ 814.587183][T13076] syz.3.2213(13076): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 814.602828][ T29] audit: type=1326 audit(1786035697.113:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13066 comm="syz.3.2213" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121e79e0d9 code=0x7ffc0000 [ 815.874364][ T29] audit: type=1326 audit(1786035697.113:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13066 comm="syz.3.2213" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121e79e0d9 code=0x7ffc0000 [ 815.922391][T13079] zram: Can't change algorithm for initialized device [ 815.938284][T13079] zram: Cannot change disksize for initialized device [ 816.938986][T13089] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 817.132610][ T29] audit: type=1326 audit(1786035697.333:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13066 comm="syz.3.2213" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f121e79e0d9 code=0x7ffc0000 [ 819.427147][T13096] netlink: 'syz.5.2218': attribute type 3 has an invalid length. [ 819.583427][ T29] audit: type=1326 audit(1786035697.333:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13066 comm="syz.3.2213" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121e79e0d9 code=0x7ffc0000 [ 820.850001][ T29] audit: type=1326 audit(1786035697.333:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13066 comm="syz.3.2213" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121e79e0d9 code=0x7ffc0000 [ 821.101125][T13129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13129 comm=syz.1.2221 [ 821.369856][ T29] audit: type=1326 audit(1786035697.503:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13066 comm="syz.3.2213" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f121e79e0d9 code=0x7ffc0000 [ 821.571651][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 821.638329][ T29] audit: type=1326 audit(1786035697.503:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13066 comm="syz.3.2213" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121e79e0d9 code=0x7ffc0000 [ 821.831385][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 821.865118][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 821.920602][ T29] audit: type=1326 audit(1786035697.503:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13066 comm="syz.3.2213" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121e79e0d9 code=0x7ffc0000 [ 821.993401][ T10] usb 6-1: config 0 has no interfaces? [ 822.040940][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 822.129712][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.186636][T13150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2223'. [ 823.252250][ T29] audit: type=1326 audit(1786035697.513:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13066 comm="syz.3.2213" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f121e79e0d9 code=0x7ffc0000 [ 823.292423][ T5717] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 823.316960][ T10] usb 6-1: config 0 descriptor?? [ 823.518649][ T29] audit: type=1326 audit(1786035697.513:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13066 comm="syz.3.2213" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121e79e0d9 code=0x7ffc0000 [ 823.557455][ T5717] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 823.634778][ T5717] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 823.825789][ T5717] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 823.854736][ T29] audit: type=1326 audit(1786035697.513:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13066 comm="syz.3.2213" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121e79e0d9 code=0x7ffc0000 [ 824.764740][T13165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2229'. [ 824.809364][ T5717] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 824.867531][ T5717] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.009636][ T5717] usb 7-1: Product: syz [ 825.033948][ T29] audit: type=1400 audit(1786035699.793:915): avc: denied { read } for pid=13087 comm="syz.5.2217" name="usbmon6" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 825.069581][ T5717] usb 7-1: Manufacturer: syz [ 825.104124][ T5717] usb 7-1: SerialNumber: syz [ 825.159046][ T5717] usb 7-1: config 0 descriptor?? [ 825.203165][ T5717] usb 7-1: can't set config #0, error -71 [ 825.237826][ T29] audit: type=1400 audit(1786035699.793:916): avc: denied { open } for pid=13087 comm="syz.5.2217" path="/dev/usbmon6" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 826.234053][ T5717] usb 7-1: USB disconnect, device number 17 [ 826.354424][ T5796] usb 6-1: USB disconnect, device number 11 [ 826.457927][T13182] trusted_key: encrypted_key: insufficient parameters specified [ 826.498385][ T29] audit: type=1400 audit(1786035699.843:917): avc: denied { ioctl } for pid=13087 comm="syz.5.2217" path="/dev/usbmon6" dev="devtmpfs" ino=733 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 827.569970][T13189] nbd: must specify a device to reconfigure [ 828.862872][ T29] audit: type=1400 audit(1786035699.913:918): avc: denied { watch_mount } for pid=13087 comm="syz.5.2217" path="/164/file5" dev="tmpfs" ino=925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 830.019243][T13203] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2236'. [ 830.088478][ T29] audit: type=1400 audit(1786035704.433:919): avc: denied { write } for pid=13073 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 831.704053][ T29] audit: type=1400 audit(1786035704.923:920): avc: denied { write } for pid=13142 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 831.911470][ T5796] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 833.156901][ T29] audit: type=1400 audit(1786035710.613:921): avc: denied { remount } for pid=13184 comm="syz.5.2235" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 833.224614][ T5796] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 833.276300][ T5796] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 834.218195][T13211] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 834.226453][ T29] audit: type=1400 audit(1786035712.073:922): avc: denied { write } for pid=13161 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 834.312763][ T5796] usb 4-1: string descriptor 0 read error: -71 [ 834.366956][ T5796] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 834.445834][ T5796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.459532][ T29] audit: type=1400 audit(1786035716.003:923): avc: denied { write } for pid=13206 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 834.633591][ T5796] usb 4-1: config 0 descriptor?? [ 834.663282][T13230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2245'. [ 835.568940][T11275] Bluetooth: hci1: command 0x0406 tx timeout [ 835.579755][ T5796] usb 4-1: can't set config #0, error -71 [ 835.590030][T13235] netlink: 'syz.4.2248': attribute type 1 has an invalid length. [ 835.626057][ T5796] usb 4-1: USB disconnect, device number 53 [ 836.361319][ T5796] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 838.066536][T13239] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.073831][T13239] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.140970][T13239] batman_adv: batadv0: Interface deactivated: dummy0 [ 838.244260][T10290] Bluetooth: hci1: unexpected event for opcode 0x732f [ 838.279132][T13239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 838.313934][T13239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 838.525066][T13239] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 838.548462][T13239] sit1: left allmulticast mode [ 838.572983][T13239] bond1: left promiscuous mode [ 838.588042][T13239] bridge1: left promiscuous mode [ 838.598191][T13239] vlan2: left allmulticast mode [ 838.611414][T13239] bond1: left allmulticast mode [ 838.621246][ T29] audit: type=1400 audit(1786035721.583:924): avc: denied { connect } for pid=13251 comm="syz.1.2244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 838.652786][T13239] bridge1: left allmulticast mode [ 838.809701][ T29] audit: type=1400 audit(1786035721.613:925): avc: denied { write } for pid=13251 comm="syz.1.2244" path="socket:[42899]" dev="sockfs" ino=42899 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 839.630792][T13255] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 839.630792][T13255] Please contact the netfilter-devel mailing list or update your nftables rules. [ 839.739705][T13254] xt_NFQUEUE: number of total queues is 0 [ 839.753986][T10290] Bluetooth: hci5: command 0x0406 tx timeout [ 839.780888][ T7967] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.817851][T13235] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 839.907071][ T5717] syz1: Port: 1 Link DOWN [ 839.945363][T13246] dummy0: entered allmulticast mode [ 839.952483][T13246] dummy0: left allmulticast mode [ 839.960628][ T7972] netdevsim netdevsim10 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.015368][ T7972] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.077310][ T7972] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.450551][ T5796] usb 4-1: device descriptor read/64, error -71 [ 841.119673][T13236] wlan0 speed is unknown, defaulting to 1000 [ 841.138815][ T7973] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.168769][T13260] zram: Can't change algorithm for initialized device [ 841.180600][T13260] zram: Cannot change disksize for initialized device [ 841.421065][ T5796] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 841.728393][ T5796] usb 4-1: Using ep0 maxpacket: 32 [ 842.571127][ T5796] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 842.614628][ T5796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.673806][ T5796] usb 4-1: Product: syz [ 842.709458][ T5796] usb 4-1: Manufacturer: syz [ 842.739040][ T5796] usb 4-1: SerialNumber: syz [ 842.773735][ T5796] usb 4-1: config 0 descriptor?? [ 844.174604][ T5796] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: failure sending bit rate [ 844.266110][ T29] audit: type=1400 audit(1786035726.219:926): avc: denied { setcurrent } for pid=13272 comm="syz.1.2254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 844.290404][ T5796] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 844.376668][T13278] nbd: must specify a device to reconfigure [ 844.484526][ T5796] usb 4-1: USB disconnect, device number 55 [ 844.530092][ T29] audit: type=1401 audit(1786035726.219:927): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 847.519097][T13301] zram: Can't change algorithm for initialized device [ 847.527026][T13301] zram: Cannot change disksize for initialized device [ 849.492920][T13331] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=384 (768 ns) > initial count (6 ns). Using initial count to start timer. [ 850.828232][T13334] pim6reg: entered allmulticast mode [ 850.875442][T13350] tipc: Enabling of bearer rejected, already enabled [ 851.020679][ T189] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 851.049963][T13350] bond2: (slave bond_slave_1): Device is not our slave [ 851.096093][T13350] bond2: option active_slave: invalid value (bond_slave_1) [ 851.134416][T13352] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 851.154975][T13350] bond2 (unregistering): Released all slaves [ 851.272918][ T189] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 851.328345][ T189] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 851.463491][ T189] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 851.523244][ T189] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.597908][T13347] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 851.658597][ T189] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 852.798706][T13365] overlayfs: failed to clone upperpath [ 854.251767][ T189] usb 7-1: USB disconnect, device number 18 [ 854.470514][ T29] audit: type=1326 audit(1786035736.429:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13375 comm="syz.3.2287" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f121e79e0d9 code=0x0 [ 855.236800][T13386] comedi comedi1: pcl724: I/O base address or length out of range [ 855.359728][T13384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2284'. [ 856.159625][T13394] zram: Can't change algorithm for initialized device [ 856.170770][T13394] zram: Cannot change disksize for initialized device [ 857.716703][ T29] audit: type=1400 audit(1786035739.679:929): avc: denied { listen } for pid=13403 comm="syz.1.2294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 857.751768][T13405] netlink: 'syz.1.2294': attribute type 2 has an invalid length. [ 857.966073][ T29] audit: type=1400 audit(1786035739.789:930): avc: denied { connect } for pid=13403 comm="syz.1.2294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 858.147841][ T29] audit: type=1400 audit(1786035739.909:931): avc: denied { write } for pid=13403 comm="syz.1.2294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 859.241476][T13421] siw: device registration error -23 [ 859.447541][T13424] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2302'. [ 859.474722][ T29] audit: type=1400 audit(1786035739.979:932): avc: denied { accept } for pid=13403 comm="syz.1.2294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 862.138173][T13439] zram: Can't change algorithm for initialized device [ 862.147631][T13439] zram: Cannot change disksize for initialized device [ 862.276133][T13437] ALSA: mixer_oss: invalid OSS volume '' [ 863.571234][ T5717] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 864.063696][ T5717] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 864.833783][T13459] zram: Can't change algorithm for initialized device [ 864.841604][T13459] zram: Cannot change disksize for initialized device [ 864.851293][ T5717] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 864.898112][ T5717] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 864.938707][ T5717] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.970260][ T5717] usb 6-1: Product: syz [ 864.984451][ T5717] usb 6-1: Manufacturer: syz [ 864.998884][ T5717] usb 6-1: SerialNumber: syz [ 865.046549][ T5717] sisusb 6-1:1.0: Invalid USB2VGA device [ 865.067698][ T5717] sisusb 6-1:1.0: probe with driver sisusb failed with error -22 [ 865.121287][ T189] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 865.276877][ T5717] usb 6-1: USB disconnect, device number 12 [ 865.343266][ T189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.458601][ T189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.503533][ T189] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 865.556098][ T189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.571578][T13479] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2318'. [ 865.601979][ T189] usb 2-1: config 0 descriptor?? [ 865.619210][ T29] audit: type=1400 audit(1786035747.579:933): avc: denied { ioctl } for pid=13469 comm="syz.6.2318" path="socket:[44200]" dev="sockfs" ino=44200 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 866.718507][ T189] cm6533_jd 0003:0D8C:0022.0014: unbalanced delimiter at end of report description [ 866.969185][ T189] cm6533_jd 0003:0D8C:0022.0014: parse failed [ 866.989232][T13489] zram: Can't change algorithm for initialized device [ 866.997237][T13489] zram: Cannot change disksize for initialized device [ 867.028625][ T189] cm6533_jd 0003:0D8C:0022.0014: probe with driver cm6533_jd failed with error -22 [ 867.117473][ T189] usb 2-1: USB disconnect, device number 55 [ 868.407096][T13501] zram: Can't change algorithm for initialized device [ 868.416286][T13501] zram: Cannot change disksize for initialized device [ 868.439208][T13510] random: crng reseeded on system resumption [ 868.571534][ T189] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 869.585459][T13523] xt_NFQUEUE: number of total queues is 0 [ 869.592610][T11275] Bluetooth: hci0: command 0x0c1a tx timeout [ 869.622174][ T189] usb 7-1: Using ep0 maxpacket: 16 [ 869.648384][ T189] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 869.691314][ T189] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 869.742255][ T5717] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 869.795557][ T189] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 869.878219][ T189] usb 7-1: config 0 interface 0 has no altsetting 0 [ 869.921801][ T189] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 869.941842][ T5717] usb 2-1: Using ep0 maxpacket: 32 [ 869.962517][ T5717] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 869.977280][ T189] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.002289][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.010716][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.022909][ T5717] usb 2-1: config 0 has no interface number 0 [ 870.035227][ T189] usb 7-1: Product: syz [ 870.057340][ T5717] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 870.069085][ T189] usb 7-1: Manufacturer: syz [ 870.091618][ T189] usb 7-1: SerialNumber: syz [ 870.121758][ T5717] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 870.152815][ T189] usb 7-1: config 0 descriptor?? [ 870.178244][ T5717] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 870.244612][ T5717] usb 2-1: config 0 interface 196 has no altsetting 0 [ 870.283605][ T5717] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 870.313471][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.454766][ T189] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input35 [ 870.466553][ T5717] usb 2-1: Product: syz [ 871.307248][T13540] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 871.360210][ T5717] usb 2-1: Manufacturer: syz [ 871.389739][ T4949] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 871.403234][ T5717] usb 2-1: SerialNumber: syz [ 871.425154][ T5717] usb 2-1: config 0 descriptor?? [ 871.463478][T13522] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 871.555183][T13535] ALSA: mixer_oss: invalid OSS volume '' [ 871.575327][ T4949] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 871.655762][ T4949] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 871.673192][ T189] usb 7-1: USB disconnect, device number 19 [ 871.827164][ T5717] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 871.905002][ T5717] ipheth 2-1:0.196: probe with driver ipheth failed with error -71 [ 872.016167][ T5717] usb 2-1: USB disconnect, device number 56 [ 872.215120][T13562] netlink: 'syz.6.2353': attribute type 2 has an invalid length. [ 872.492983][ T189] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 872.686393][ T189] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 873.191372][ T189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.812156][ T189] usb 4-1: Product: syz [ 873.819597][T13580] zram: Can't change algorithm for initialized device [ 873.833289][T13580] zram: Cannot change disksize for initialized device [ 873.863667][ T189] usb 4-1: Manufacturer: syz [ 873.897007][ T189] usb 4-1: SerialNumber: syz [ 873.946417][ T189] usb 4-1: config 0 descriptor?? [ 874.298491][ T189] usb 4-1: ignoring: probably an ADSL modem [ 874.524322][ T189] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 874.559974][ T189] usb 4-1: USB disconnect, device number 56 [ 875.401187][T13597] netlink: zone id is out of range [ 875.406371][T13597] netlink: zone id is out of range [ 875.418329][ T29] audit: type=1326 audit(1786035756.959:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13594 comm="syz.5.2367" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d439e0d9 code=0x7ffc0000 [ 875.683182][ T29] audit: type=1326 audit(1786035756.959:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13594 comm="syz.5.2367" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d439e0d9 code=0x7ffc0000 [ 876.672450][T13611] comedi comedi1: pcl724: I/O base address or length out of range [ 876.705581][ T29] audit: type=1326 audit(1786035757.129:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13594 comm="syz.5.2367" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb8d439e0d9 code=0x7ffc0000 [ 876.908058][T13617] netlink: Conntrack attr has 12 unknown bytes [ 876.959590][T13617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 876.972363][ T29] audit: type=1326 audit(1786035757.129:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13594 comm="syz.5.2367" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d439e0d9 code=0x7ffc0000 [ 877.177511][ T29] audit: type=1326 audit(1786035757.129:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13594 comm="syz.5.2367" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d439e0d9 code=0x7ffc0000 [ 878.319602][ T29] audit: type=1326 audit(1786035757.259:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13594 comm="syz.5.2367" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb8d439e0d9 code=0x7ffc0000 [ 878.501078][T13647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2385'. [ 878.580519][ T5717] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 879.100119][T13647] siw: device registration error -23 [ 879.698166][T13628] netlink: 'syz.6.2378': attribute type 1 has an invalid length. [ 879.715994][ T29] audit: type=1326 audit(1786035757.259:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13594 comm="syz.5.2367" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d439e0d9 code=0x7ffc0000 [ 879.758146][T13648] zram: Can't change algorithm for initialized device [ 879.768113][T13648] zram: Cannot change disksize for initialized device [ 879.928370][T13651] comedi comedi1: pcl724: I/O base address or length out of range [ 879.992743][ T5717] usb 4-1: Using ep0 maxpacket: 32 [ 880.019967][ T5717] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 880.051213][ T29] audit: type=1326 audit(1786035757.259:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13594 comm="syz.5.2367" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d439e0d9 code=0x7ffc0000 [ 880.093474][ T5717] usb 4-1: config 0 has no interface number 0 [ 880.141619][ T5717] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 880.960663][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.210232][ T29] audit: type=1326 audit(1786035757.349:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13594 comm="syz.5.2367" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb8d439e0d9 code=0x7ffc0000 [ 881.251029][T13658] zram: Can't change algorithm for initialized device [ 881.258769][T13658] zram: Cannot change disksize for initialized device [ 881.269896][ T5717] usb 4-1: Product: syz [ 881.309955][ T5717] usb 4-1: Manufacturer: syz [ 881.346803][ T5717] usb 4-1: SerialNumber: syz [ 881.416906][ T5717] usb 4-1: config 0 descriptor?? [ 881.474635][ T5717] usb 4-1: can't set config #0, error -71 [ 881.503295][ T29] audit: type=1326 audit(1786035757.349:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13594 comm="syz.5.2367" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d439e0d9 code=0x7ffc0000 [ 881.560260][ T5717] usb 4-1: USB disconnect, device number 57 [ 881.769658][ T29] audit: type=1326 audit(1786035757.349:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13594 comm="syz.5.2367" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d439e0d9 code=0x7ffc0000 [ 881.974946][ T29] audit: type=1326 audit(1786035757.609:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13600 comm="syz.6.2369" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc55fb9e0d9 code=0x0 [ 882.068963][ T29] audit: type=1326 audit(1786035759.009:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13620 comm="syz.5.2377" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d439e0d9 code=0x7ffc0000 [ 882.150541][ T5717] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 882.183715][ T29] audit: type=1326 audit(1786035759.009:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13620 comm="syz.5.2377" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d439e0d9 code=0x7ffc0000 [ 882.318431][ T5717] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 882.379746][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.398936][ T29] audit: type=1326 audit(1786035759.029:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13620 comm="syz.5.2377" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d439e0d9 code=0x7ffc0000 [ 882.478468][ T5717] usb 2-1: config 0 descriptor?? [ 882.517312][ T5717] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 883.146518][ T5717] gp8psk: usb in 128 operation failed. [ 883.563625][ T29] audit: type=1326 audit(1786035759.029:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13620 comm="syz.5.2377" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d439e0d9 code=0x7ffc0000 [ 883.631688][T13706] zram: Can't change algorithm for initialized device [ 883.653727][T13706] zram: Cannot change disksize for initialized device [ 883.675194][ T5717] gp8psk: FW Version = 144.122.77 (0x907a4d) Build 2085/175/85 [ 883.824205][ T29] audit: type=1326 audit(1786035759.029:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13620 comm="syz.5.2377" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb8d439e0d9 code=0x7ffc0000 [ 883.917044][ T5717] gp8psk: usb in 149 operation failed. [ 883.952168][ T5717] gp8psk: failed to get FPGA version [ 884.006661][ T5717] gp8psk: usb in 138 operation failed. [ 884.044619][ T29] audit: type=1326 audit(1786035759.029:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13620 comm="syz.5.2377" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d439e0d9 code=0x7ffc0000 [ 884.073903][ T5717] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 884.112820][ T5717] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 885.216825][ T5717] usb 2-1: USB disconnect, device number 57 [ 885.332523][T13738] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2417'. [ 888.026387][T13773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 889.280333][T13778] zram: Can't change algorithm for initialized device [ 889.293433][T13778] zram: Cannot change disksize for initialized device [ 889.740568][ T5717] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 890.950662][ T5717] usb 2-1: Using ep0 maxpacket: 8 [ 890.997703][ T5717] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 891.528711][ T5717] usb 2-1: config 0 has no interface number 0 [ 892.087328][ T5717] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 892.137307][T13808] zram: Can't change algorithm for initialized device [ 892.146442][T13808] zram: Cannot change disksize for initialized device [ 892.189675][ T5717] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 892.299224][ T5717] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 892.390357][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.001724][ T5717] usb 2-1: config 0 descriptor?? [ 893.547483][ T5717] usb 2-1: can't set config #0, error -71 [ 893.586626][T13823] zram: Can't change algorithm for initialized device [ 893.599588][T13823] zram: Cannot change disksize for initialized device [ 893.635353][ T5717] usb 2-1: USB disconnect, device number 58 [ 895.710488][ T5717] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 896.409832][T13860] zram: Can't change algorithm for initialized device [ 896.422515][T13860] zram: Cannot change disksize for initialized device [ 896.523185][ T5717] usb 4-1: Using ep0 maxpacket: 32 [ 896.562185][ T5717] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 896.599213][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.640890][ T5717] usb 4-1: Product: syz [ 896.670033][ T5717] usb 4-1: Manufacturer: syz [ 896.703536][ T5717] usb 4-1: SerialNumber: syz [ 896.722766][T13879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2466'. [ 896.736265][ T5717] usb 4-1: config 0 descriptor?? [ 896.765010][ T5717] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 897.194091][ T5717] gspca_topro: reg_w err -71 [ 898.010814][ T5717] gspca_topro: Sensor soi763a [ 898.255345][ T5717] usb 4-1: USB disconnect, device number 58 [ 899.185937][T13934] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2487'. [ 900.417464][T13939] zram: Can't change algorithm for initialized device [ 900.427061][T13939] zram: Cannot change disksize for initialized device [ 901.081382][T13969] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2499'. [ 901.312697][T13977] syzkaller1: entered promiscuous mode [ 901.338890][T13977] syzkaller1: entered allmulticast mode [ 902.711276][T13985] zram: Can't change algorithm for initialized device [ 902.728934][T13985] zram: Cannot change disksize for initialized device [ 902.872132][T13997] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2507'. [ 903.998069][T13997] hsr_slave_0: left promiscuous mode [ 904.045849][T14007] zram: Can't change algorithm for initialized device [ 904.054689][T14007] zram: Cannot change disksize for initialized device [ 904.072237][T13997] hsr_slave_1: left promiscuous mode [ 904.181571][T14009] netlink: 'syz.4.2511': attribute type 29 has an invalid length. [ 904.374196][T14022] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 905.901450][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 905.901462][ T29] audit: type=1400 audit(1786035787.869:963): avc: denied { cmd } for pid=14041 comm="syz.5.2526" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 907.979499][T14088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=14088 comm=syz.5.2543 [ 909.279213][T14097] zram: Can't change algorithm for initialized device [ 909.288888][T14097] zram: Cannot change disksize for initialized device [ 909.364065][ T29] audit: type=1326 audit(1786035791.329:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14104 comm="syz.5.2547" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8d439e0d9 code=0x0 [ 910.409834][T14114] comedi comedi1: pcl724: I/O base address or length out of range [ 910.654048][ T189] logitech-hidpp-device 0005:046D:B012.0015: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 913.640652][ T6267] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 913.813424][ T6267] usb 4-1: config index 0 descriptor too short (expected 53, got 35) [ 913.852538][ T6267] usb 4-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 913.925231][ T6267] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 913.991141][ T6267] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 914.027255][ T6267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 914.074839][ T6267] usb 4-1: Product: syz [ 914.109475][ T6267] usb 4-1: Manufacturer: syz [ 914.469001][T14196] gretap0: entered promiscuous mode [ 914.634483][T14203] fuse: fd is not a fuse device [ 915.467844][ T6267] usb 4-1: USB disconnect, device number 59 [ 917.178331][ T29] audit: type=1326 audit(1786035799.139:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14224 comm="syz.1.2588" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7939f9e0d9 code=0x0 [ 917.490145][T14238] loop5: detected capacity change from 0 to 4095 [ 917.680632][ T6267] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 917.688696][T14233] buffer_io_error: 11 callbacks suppressed [ 917.688709][T14233] Buffer I/O error on dev loop5, logical block 511, async page read [ 917.738977][ T6475] Buffer I/O error on dev loop5, logical block 511, async page read [ 917.861945][ T6267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 917.906885][ T6267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 917.969461][ T6267] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 918.039421][ T6267] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 918.083350][ T6267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.147612][ T6267] usb 4-1: config 0 descriptor?? [ 918.421175][ T189] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 918.586570][ T189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 918.640150][ T189] usb 6-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 918.671890][ T6267] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 918.695065][ T189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.749159][ T189] usb 6-1: config 0 descriptor?? [ 918.783095][T14252] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 919.219468][ T189] kye 0003:0458:0138.0017: unknown main item tag 0x0 [ 919.229707][ T189] kye 0003:0458:0138.0017: unknown main item tag 0x0 [ 919.236978][ T189] kye 0003:0458:0138.0017: unknown main item tag 0x0 [ 919.244387][ T189] kye 0003:0458:0138.0017: unknown main item tag 0x0 [ 919.251361][ T189] kye 0003:0458:0138.0017: unknown main item tag 0x0 [ 919.262727][ T189] kye 0003:0458:0138.0017: unknown main item tag 0x0 [ 919.272388][ T189] kye 0003:0458:0138.0017: unexpected long global item [ 919.279870][ T189] kye 0003:0458:0138.0017: parse failed [ 919.286464][ T189] kye 0003:0458:0138.0017: probe with driver kye failed with error -22 [ 919.320773][ T5717] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 919.331706][ C0] plantronics 0003:047F:FFFF.0016: hid_field_extract() called with n (132) > 32! (klogd) [ 919.433019][ T189] usb 6-1: USB disconnect, device number 13 [ 919.473955][ T5717] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 919.483253][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.491765][ T5717] usb 2-1: Product: syz [ 919.496158][ T5717] usb 2-1: Manufacturer: syz [ 919.501116][ T5717] usb 2-1: SerialNumber: syz [ 919.507566][ T5717] usb 2-1: config 0 descriptor?? [ 919.544930][ T6267] usb 4-1: USB disconnect, device number 60 [ 919.723982][ T5717] usb 2-1: ignoring: probably an ADSL modem [ 919.933839][ T5717] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 919.954552][ T5717] usb 2-1: USB disconnect, device number 59 [ 920.026660][ T29] audit: type=1400 audit(1786035801.989:966): avc: denied { write } for pid=14286 comm="syz.5.2614" name="fs" dev="configfs" ino=22931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 920.078359][ T29] audit: type=1400 audit(1786035802.019:967): avc: denied { write } for pid=14286 comm="syz.5.2614" name="c.1" dev="configfs" ino=22417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 920.175093][ T29] audit: type=1400 audit(1786035802.019:968): avc: denied { write } for pid=14286 comm="syz.5.2614" name="c.1" dev="configfs" ino=22417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 920.560712][ T5717] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 921.604871][ T5717] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 921.640087][ T5717] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 921.705080][ T5717] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 921.767879][ T5717] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 921.820659][ T6267] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 921.843436][ T5717] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 922.161456][ T6267] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 922.908550][ T5717] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 922.936850][ T6267] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.979823][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 923.003163][ T6267] usb 7-1: Product: syz [ 923.019137][ T6267] usb 7-1: Manufacturer: syz [ 923.025487][ T5717] usb 4-1: Product: syz [ 923.045645][ T6267] usb 7-1: SerialNumber: syz [ 923.050342][ T5717] usb 4-1: Manufacturer: syz [ 923.072934][ T6267] usb 7-1: config 0 descriptor?? [ 923.088557][ T5717] cdc_wdm 4-1:1.0: skipping garbage [ 923.100745][ T5717] cdc_wdm 4-1:1.0: skipping garbage [ 923.123398][ T5717] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 923.136193][ T5717] cdc_wdm 4-1:1.0: Unknown control protocol [ 923.326354][ T6267] cx82310_eth 7-1:0.0: probe with driver cx82310_eth failed with error -22 [ 923.357949][ T6267] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 923.365363][ T29] audit: type=1400 audit(1786035805.319:969): avc: denied { read write } for pid=14293 comm="syz.3.2617" name="cdc-wdm0" dev="devtmpfs" ino=4840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 923.405723][ T6267] usb 7-1: USB disconnect, device number 20 [ 923.452168][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 923.459068][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 923.465485][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 923.472071][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 923.478583][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 923.485187][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 923.491472][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 923.498050][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 923.504374][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 923.510972][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 923.517202][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 923.523773][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 923.530290][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 923.536887][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 923.543170][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 923.549767][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 923.556003][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 923.562599][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 923.568862][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 923.575463][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 923.591815][ T10] usb 4-1: USB disconnect, device number 61 [ 923.597805][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 923.617226][ T29] audit: type=1400 audit(1786035805.319:970): avc: denied { open } for pid=14293 comm="syz.3.2617" path="/dev/cdc-wdm0" dev="devtmpfs" ino=4840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 924.112639][T14336] overlayfs: failed to clone upperpath [ 924.541274][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 924.665205][ T29] audit: type=1400 audit(1786035806.629:971): avc: denied { setopt } for pid=14351 comm="syz.3.2639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 924.710503][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 924.717243][ T10] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 924.726761][ T10] usb 6-1: config 0 has no interface number 0 [ 924.737825][ T10] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 924.748504][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.756843][ T10] usb 6-1: Product: syz [ 924.761385][ T10] usb 6-1: Manufacturer: syz [ 924.766038][ T10] usb 6-1: SerialNumber: syz [ 924.774178][ T10] usb 6-1: config 0 descriptor?? [ 924.783955][ T10] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 925.008995][ T10] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 925.053288][ T10] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 925.314148][ T6267] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 925.341182][T14367] fuse: fd is not a fuse device [ 925.355252][T14364] evm: overlay not supported [ 925.444087][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 925.455076][ T10] usb 6-1: USB disconnect, device number 14 [ 925.494055][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 925.521107][ T6267] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 925.566909][ T6267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.589823][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 925.638454][ T6267] usb 2-1: Product: syz [ 925.672063][ T6267] usb 2-1: Manufacturer: syz [ 925.679031][ T10] quatech2 6-1:0.51: device disconnected [ 925.855948][ T6267] usb 2-1: SerialNumber: syz [ 925.894755][ T6267] usb 2-1: config 0 descriptor?? [ 926.144866][ T6267] usb 2-1: ignoring: probably an ADSL modem [ 926.361570][ T6267] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 926.399668][T14385] CIFS: Attempting to mount //127.0.0.1/share [ 926.417233][ T6267] usb 2-1: USB disconnect, device number 60 [ 927.645834][T14385] CIFS: VFS: Error connecting to socket. Aborting operation. [ 927.691292][T14385] CIFS: VFS: cifs_mount failed w/return code = -4 [ 930.079171][T14438] syz_tun: entered allmulticast mode [ 930.113075][T14437] syz_tun: left allmulticast mode [ 930.153713][T14440] syz.1.2670: vmalloc error: size 12288, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 930.234184][ T6267] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 930.243562][ T29] audit: type=1400 audit(1786035812.169:972): avc: denied { getopt } for pid=14442 comm="syz.4.2671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 930.320127][T14440] CPU: 0 UID: 0 PID: 14440 Comm: syz.1.2670 Tainted: G L syzkaller #0 PREEMPT(full) [ 930.320152][T14440] Tainted: [L]=SOFTLOCKUP [ 930.320157][T14440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 930.320168][T14440] Call Trace: [ 930.320175][T14440] [ 930.320182][T14440] dump_stack_lvl+0x100/0x190 [ 930.320206][T14440] warn_alloc.cold+0x94/0xa8 [ 930.320221][T14440] ? __pfx_warn_alloc+0x10/0x10 [ 930.320234][T14440] ? policy_nodemask+0xed/0x4f0 [ 930.320255][T14440] ? alloc_pages_mpol+0x25a/0x540 [ 930.320272][T14440] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 930.320288][T14440] ? find_held_lock+0x2b/0x80 [ 930.320307][T14440] ? rcu_read_unlock+0x17/0x60 [ 930.320327][T14440] __vmalloc_node_range_noprof+0x13f6/0x1630 [ 930.320357][T14440] ? kvm_dev_ioctl+0x154/0x1b50 [ 930.320382][T14440] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 930.320403][T14440] ? __pfx_vsnprintf+0x10/0x10 [ 930.320418][T14440] ? rcu_is_watching+0x12/0xc0 [ 930.320439][T14440] __kvmalloc_node_noprof+0x3d3/0x970 [ 930.320457][T14440] ? kvm_dev_ioctl+0x154/0x1b50 [ 930.320475][T14440] ? alloc_fd+0x471/0x7a0 [ 930.320488][T14440] ? kvm_dev_ioctl+0x154/0x1b50 [ 930.320508][T14440] kvm_dev_ioctl+0x154/0x1b50 [ 930.320529][T14440] ? hook_file_ioctl_common+0x140/0x440 [ 930.320549][T14440] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 930.320569][T14440] ? selinux_file_ioctl+0x13b/0x290 [ 930.320586][T14440] ? selinux_file_ioctl+0xb6/0x290 [ 930.320604][T14440] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 930.320625][T14440] __x64_sys_ioctl+0x18e/0x210 [ 930.320643][T14440] do_syscall_64+0x115/0x870 [ 930.320656][T14440] ? clear_bhb_loop+0x40/0x90 [ 930.320671][T14440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.320683][T14440] RIP: 0033:0x7f7939f9e0d9 [ 930.320696][T14440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 930.320709][T14440] RSP: 002b:00007f793ae13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 930.320726][T14440] RAX: ffffffffffffffda RBX: 00007f793a225fa0 RCX: 00007f7939f9e0d9 [ 930.320735][T14440] RDX: 0000000000000001 RSI: 000000000000ae01 RDI: 0000000000000005 [ 930.320743][T14440] RBP: 00007f793a035024 R08: 0000000000000000 R09: 0000000000000000 [ 930.320751][T14440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 930.320759][T14440] R13: 00007f793a226038 R14: 00007f793a225fa0 R15: 00007ffeb14a3ce8 [ 930.320874][T14440] [ 930.954076][ T6267] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 930.991254][ T6267] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.538341][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.744161][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.054989][ T6267] usb 7-1: Product: syz [ 932.427875][ T6267] usb 7-1: Manufacturer: syz [ 932.518591][ T6267] usb 7-1: SerialNumber: syz [ 933.056879][ T6267] usb 7-1: config 0 descriptor?? [ 933.084486][ T6267] usb 7-1: can't set config #0, error -71 [ 933.124217][ T6267] usb 7-1: USB disconnect, device number 21 [ 933.243765][T14472] fuse: Invalid rootmode [ 933.284713][T14440] Mem-Info: [ 933.298961][T14440] active_anon:8238 inactive_anon:23775 isolated_anon:0 [ 933.298961][T14440] active_file:21270 inactive_file:39081 isolated_file:0 [ 933.298961][T14440] unevictable:0 dirty:137 writeback:0 [ 933.298961][T14440] slab_reclaimable:7897 slab_unreclaimable:103546 [ 933.298961][T14440] mapped:33131 shmem:19776 pagetables:3784 [ 933.298961][T14440] sec_pagetables:0 bounce:0 [ 933.298961][T14440] kernel_misc_reclaimable:0 [ 933.298961][T14440] free:1258972 free_pcp:10207 free_cma:0 [ 933.627001][T14440] Node 0 active_anon:32952kB inactive_anon:99032kB active_file:85068kB inactive_file:156132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:138452kB dirty:600kB writeback:0kB shmem:83088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12704kB pagetables:15000kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 933.766817][T14485] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2683'. [ 933.786318][T14485] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2683'. [ 933.795479][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 933.804570][T14440] Node 1 active_anon:0kB inactive_anon:2048kB active_file:12kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 933.917469][T14440] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 933.990513][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 935.000919][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 935.042379][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 935.074968][T14440] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 935.096672][ T10] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 935.116718][T14440] Node 0 DMA32 free:1084960kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43120kB inactive_anon:88008kB active_file:85076kB inactive_file:156132kB unevictable:0kB writepending:784kB zspages:204kB present:3129332kB managed:2532344kB mlocked:0kB bounce:0kB free_pcp:29260kB local_pcp:29260kB free_cma:0kB [ 935.184828][ T10] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 935.977599][ T10] usb 6-1: New USB device strings: Mfr=2, Product=2, SerialNumber=3 [ 936.016371][ T10] usb 6-1: Product: syz [ 936.036915][ T10] usb 6-1: Manufacturer: syz [ 936.057564][T14440] lowmem_reserve[]: 0 0 0 0 0 [ 936.064687][ T10] usb 6-1: SerialNumber: syz [ 936.279038][T14440] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 936.352482][T14503] netlink: 'syz.3.2688': attribute type 1 has an invalid length. [ 936.400052][T14440] lowmem_reserve[]: 0 0 0 0 0 [ 936.457540][T14503] bond2: entered promiscuous mode [ 936.467695][T14440] Node 1 Normal free:3926944kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:2048kB active_file:12kB inactive_file:192kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12696kB local_pcp:12696kB free_cma:0kB [ 936.509800][ T10] usb 6-1: 3:0: cannot get min/max values for control 2 (id 3) [ 936.525618][T14503] 8021q: adding VLAN 0 to HW filter on device bond2 [ 936.555918][ T10] usb 6-1: applying playback min mute quirk [ 936.602139][ T10] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 937.591907][ T10] usb 6-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 937.602025][T14508] 8021q: adding VLAN 0 to HW filter on device bond2 [ 937.625749][T14519] fuse: fd is not a fuse device [ 937.634170][T14440] lowmem_reserve[]: 0 0 0 0 0 [ 937.639410][T14508] bond2: (slave ipip1): The slave device specified does not support setting the MAC address [ 937.650311][ T10] usb 6-1: 3:0: cannot get min/max values for control 8 (id 3) [ 937.666788][T14440] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 937.701264][T14508] bond2: (slave ipip1): Setting fail_over_mac to active for active-backup mode [ 937.710394][ T10] usb 6-1: 3:0: failed to get current value for ch 1 (-71) [ 937.753300][T14440] Node 0 DMA32: 80*4kB (U) 604*8kB (UM) 1188*16kB (UME) 801*32kB (UME) 910*64kB (UME) 684*128kB (UME) 505*256kB (UME) 288*512kB (UME) 159*1024kB (UM) 10*2048kB (M) 105*4096kB (UM) = 1085696kB [ 937.785824][ T10] usb 6-1: 3:0: failed to get current value for ch 1 (-71) [ 937.803839][T14508] bond2: (slave ipip1): making interface the new active one [ 937.956663][T14508] ipip1: entered promiscuous mode [ 938.127371][T14508] bond2: (slave ipip1): Enslaving as an active interface with an up link [ 938.144051][T14440] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 938.276218][ T10] usb 6-1: USB disconnect, device number 15 [ 938.320177][T14440] Node 1 Normal: 1*4kB (M) 7*8kB (UM) 8*16kB (UM) 15*32kB (UM) 12*64kB (UM) 8*128kB (UM) 5*256kB (UM) 7*512kB (UM) 2*1024kB (U) 5*2048kB (UM) 954*4096kB (M) = 3927196kB [ 938.425824][T14440] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 938.476918][ T6475] udevd[6475]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 938.495927][T14440] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=4 hugepages_size=2048kB [ 938.528679][T14440] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 938.653573][T14440] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 938.707653][T14440] 81762 total pagecache pages [ 938.742760][T14440] 12 pages in swap cache [ 938.764929][T14440] Free swap = 124884kB [ 938.793735][T14440] Total swap = 124996kB [ 938.817124][T14440] 2097051 pages RAM [ 938.832717][T14440] 0 pages HighMem/MovableOnly [ 938.848455][T14440] 432254 pages reserved [ 938.858090][T14539] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 938.867393][T14539] overlayfs: missing 'lowerdir' [ 938.874447][T14440] 0 pages cma reserved [ 939.050542][ T10] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 940.211609][T14552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2705'. [ 940.240574][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 940.254570][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 940.277470][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 940.301229][ T10] usb 4-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 940.320676][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.330556][ T6267] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 940.343686][ T10] usb 4-1: Product: syz [ 940.348039][ T10] usb 4-1: Manufacturer: syz [ 940.360556][ T10] usb 4-1: SerialNumber: syz [ 940.500715][ T6267] usb 6-1: Using ep0 maxpacket: 32 [ 941.561684][ T6267] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.576585][ T10] usb 4-1: unit 6 not found! [ 941.638614][T14555] zram: Can't change algorithm for initialized device [ 941.650532][T14555] zram: Cannot change disksize for initialized device [ 941.664068][ T6267] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.735376][ T6267] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 941.764501][ T10] usb 4-1: USB disconnect, device number 62 [ 942.226667][ T6267] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.869766][ T6475] udevd[6475]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 942.912452][T14560] zram: Can't change algorithm for initialized device [ 942.920860][ T6267] usb 6-1: config 0 descriptor?? [ 942.941177][T14560] zram: Cannot change disksize for initialized device [ 943.005403][ T6267] usb 6-1: can't set config #0, error -71 [ 943.121426][ T6267] usb 6-1: USB disconnect, device number 16 [ 943.959655][T14574] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2711'. [ 944.228893][T14571] zram: Can't change algorithm for initialized device [ 944.237422][T14571] zram: Cannot change disksize for initialized device [ 944.270047][T14578] fuse: fd is not a fuse device [ 944.333467][T14581] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 944.416384][T14582] binder: 14580:14582 ioctl c0306201 2000000003c0 returned -14 [ 944.472241][T14581] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 944.535403][T14581] overlayfs: overlapping lowerdir path [ 944.831732][ T10] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 944.920670][ T5717] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 944.983546][ T10] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 944.993192][ T10] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 945.001549][ T10] usb 4-1: Product: syz [ 945.006069][ T10] usb 4-1: Manufacturer: syz [ 945.010890][ T10] usb 4-1: SerialNumber: syz [ 945.019172][ T10] usb 4-1: config 0 descriptor?? [ 945.024388][ T5796] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 945.079377][ T5717] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 945.101896][ T5717] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.121775][ T5717] usb 7-1: Product: syz [ 945.130909][ T5717] usb 7-1: Manufacturer: syz [ 945.139166][ T5717] usb 7-1: SerialNumber: syz [ 945.156245][ T5717] usb 7-1: config 0 descriptor?? [ 945.182113][ T5796] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 945.211545][ T5796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.380206][ T10] usb 4-1: USB disconnect, device number 63 [ 945.389848][ T5717] usb 7-1: ignoring: probably an ADSL modem [ 946.499434][ T5717] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 946.680560][ T5717] usb 7-1: USB disconnect, device number 22 [ 946.812056][ T29] audit: type=1800 audit(1786035828.749:973): pid=14610 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2724" name="file1" dev="overlay" ino=2978 res=0 errno=0 [ 946.972860][T14612] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 947.698145][ T5796] gud 2-1:1.0: probe with driver gud failed with error -71 [ 948.348133][T14620] zram: Can't change algorithm for initialized device [ 948.362864][T14620] zram: Cannot change disksize for initialized device [ 948.418191][T14626] syzkaller0: entered promiscuous mode [ 948.429594][ T5796] usb 2-1: USB disconnect, device number 61 [ 948.485776][T14626] syzkaller0: entered allmulticast mode [ 950.109718][T14644] zram: Can't change algorithm for initialized device [ 950.125222][T14644] zram: Cannot change disksize for initialized device [ 951.475382][T14657] zram: Can't change algorithm for initialized device [ 951.484450][T14657] zram: Cannot change disksize for initialized device [ 952.000171][T14677] netlink: 884 bytes leftover after parsing attributes in process `syz.4.2745'. [ 952.139283][ T29] audit: type=1326 audit(1786035834.099:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14682 comm="syz.1.2748" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7939f9e0d9 code=0x0 [ 952.383425][T14690] comedi comedi1: pcl724: I/O base address or length out of range [ 952.392143][ T10] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 952.450502][ T5796] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 952.556776][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 952.577629][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.597282][ T10] usb 6-1: Product: syz [ 952.607427][ T10] usb 6-1: Manufacturer: syz [ 952.617747][ T5796] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 952.628654][ T10] usb 6-1: SerialNumber: syz [ 952.638158][ T5796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.650076][ T10] usb 6-1: config 0 descriptor?? [ 952.672013][ T5796] usb 4-1: Product: syz [ 952.684767][ T5796] usb 4-1: Manufacturer: syz [ 952.695016][ T5796] usb 4-1: SerialNumber: syz [ 952.714115][ T5796] usb 4-1: config 0 descriptor?? [ 952.796630][T14699] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 952.900889][ T10] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 952.928351][ T5796] usb 4-1: ignoring: probably an ADSL modem [ 954.186841][ T5796] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 954.245246][T14704] zram: Can't change algorithm for initialized device [ 954.253657][T14704] zram: Cannot change disksize for initialized device [ 954.273708][ T5796] usb 4-1: USB disconnect, device number 64 [ 954.705173][ T29] audit: type=1400 audit(1786035836.659:975): avc: denied { read } for pid=14715 comm="syz.1.2759" path="socket:[49540]" dev="sockfs" ino=49540 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 954.757943][ T10] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 954.819259][ T10] usb 6-1: USB disconnect, device number 17 [ 955.720504][ T5796] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 956.692120][T14727] zram: Can't change algorithm for initialized device [ 956.699917][T14727] zram: Cannot change disksize for initialized device [ 956.785389][ T5796] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 956.816367][ T29] audit: type=1326 audit(1786035838.769:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14734 comm="syz.5.2766" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8d439e0d9 code=0x0 [ 956.860687][ T5796] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 956.894301][ T5796] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.055660][ T5796] usb 7-1: config 0 descriptor?? [ 957.066855][T14740] comedi comedi1: pcl724: I/O base address or length out of range [ 957.075619][ T10] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 957.097119][ T5796] pwc: Askey VC010 type 2 USB webcam detected. [ 957.242223][ T10] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 957.255874][ T10] usb 2-1: config 8 has no interface number 0 [ 957.269282][ T10] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 957.295098][ T10] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 957.320568][ T10] usb 2-1: config 8 interface 177 has no altsetting 0 [ 957.336039][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 957.358007][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.383665][T14733] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 957.403518][T14733] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 957.426786][ C0] ir_toy 2-1:8.177: out urb status: -71 [ 957.512417][ T5796] pwc: recv_control_msg error -32 req 02 val 2b00 [ 957.519739][ T5796] pwc: recv_control_msg error -32 req 02 val 2700 [ 957.529734][ T5796] pwc: recv_control_msg error -32 req 02 val 2c00 [ 957.544026][ T5796] pwc: recv_control_msg error -32 req 04 val 1000 [ 957.559514][ T5796] pwc: recv_control_msg error -32 req 04 val 1300 [ 957.580218][ T5796] pwc: recv_control_msg error -32 req 04 val 1400 [ 957.595070][ T5796] pwc: recv_control_msg error -32 req 02 val 2000 [ 957.606789][ T5796] pwc: recv_control_msg error -32 req 02 val 2100 [ 957.728819][T14736] ALSA: mixer_oss: invalid OSS volume '' [ 957.805735][ T29] audit: type=1400 audit(1786035839.769:977): avc: denied { connect } for pid=14752 comm="syz.3.2773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 957.834708][ T29] audit: type=1400 audit(1786035839.799:978): avc: denied { read } for pid=14752 comm="syz.3.2773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 957.880280][T14733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.894855][T14733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.903989][ T5796] pwc: recv_control_msg error -71 req 02 val 2500 [ 957.915474][ T5796] pwc: recv_control_msg error -71 req 02 val 2400 [ 957.927780][ T5796] pwc: recv_control_msg error -71 req 02 val 2600 [ 957.935325][ T10] ir_toy 2-1:8.177: could not write reset command: -110 [ 957.942715][ T5796] pwc: recv_control_msg error -71 req 02 val 2900 [ 957.949325][ T10] ir_toy 2-1:8.177: probe with driver ir_toy failed with error -110 [ 957.957445][ T6267] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 957.965774][ T5796] pwc: recv_control_msg error -71 req 02 val 2800 [ 957.977172][ T10] usb 2-1: USB disconnect, device number 62 [ 957.986968][ T5796] pwc: recv_control_msg error -71 req 04 val 1100 [ 958.003286][ T5796] pwc: recv_control_msg error -71 req 04 val 1200 [ 958.020119][ T5796] pwc: Registered as video103. [ 958.036119][ T5796] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input38 [ 958.079128][ T5796] usb 7-1: USB disconnect, device number 23 [ 958.132075][ T6267] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.159809][ T6267] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 958.173634][ T6267] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.190342][ T6267] usb 6-1: config 0 descriptor?? [ 958.409001][ T6267] usbhid 6-1:0.0: can't add hid device: -71 [ 958.416757][ T6267] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 958.447545][ T6267] usb 6-1: USB disconnect, device number 18 [ 958.750536][ T5796] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 958.903453][ T5796] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 958.914361][ T5796] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.923987][ T5796] usb 7-1: Product: syz [ 958.928466][ T5796] usb 7-1: Manufacturer: syz [ 958.933706][ T5796] usb 7-1: SerialNumber: syz [ 958.940874][ T6267] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 958.951109][ T5796] usb 7-1: config 0 descriptor?? [ 959.113450][ T6267] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 959.126385][ T6267] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 959.136529][ T6267] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.158565][ T6267] usb 6-1: config 0 descriptor?? [ 959.175083][ T5796] usb 7-1: ignoring: probably an ADSL modem [ 960.485028][ T5796] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 960.534124][T14772] zram: Can't change algorithm for initialized device [ 960.544205][T14772] zram: Cannot change disksize for initialized device [ 960.562770][ T5796] usb 7-1: USB disconnect, device number 24 [ 960.664289][ T29] audit: type=1326 audit(1786035842.629:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14777 comm="syz.3.2781" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f121e79e0d9 code=0x0 [ 960.862992][ T6267] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 960.888802][T14782] fuse: fd is not a fuse device [ 960.902218][ T6267] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input39 [ 961.683950][T14784] comedi comedi1: pcl724: I/O base address or length out of range [ 961.935678][ T6267] usb 6-1: USB disconnect, device number 19 [ 961.935713][ C0] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 964.291027][ T5736] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 964.485538][ T5736] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 964.532271][ T5736] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 964.608604][ T5736] usb 4-1: config 220 has no interface number 2 [ 964.658359][ T5736] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 965.754456][ T5736] usb 4-1: config 220 interface 0 has no altsetting 0 [ 965.786798][ T5736] usb 4-1: config 220 interface 76 has no altsetting 0 [ 965.814871][ T5736] usb 4-1: config 220 interface 1 has no altsetting 0 [ 965.838921][ T5736] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 965.851558][ T6267] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 966.057676][ T5736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.101187][ T5736] usb 4-1: Product: syz [ 966.113862][T14832] fuse: fd is not a fuse device [ 966.127709][ T5736] usb 4-1: Manufacturer: syz [ 966.149699][ T5736] usb 4-1: SerialNumber: syz [ 966.197748][T14833] syzkaller0: entered promiscuous mode [ 966.214000][T14833] syzkaller0: entered allmulticast mode [ 966.230290][ T6267] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 966.299693][ T6267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.355452][ T6267] usb 2-1: Product: syz [ 966.378569][ T6267] usb 2-1: Manufacturer: syz [ 966.397668][ T6267] usb 2-1: SerialNumber: syz [ 966.403654][ T5736] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 966.540512][ T5736] uvcvideo 4-1:220.0: No valid video chain found. [ 966.557053][ T6267] usb 2-1: config 0 descriptor?? [ 966.562305][ T5736] usb 4-1: selecting invalid altsetting 0 [ 966.755498][ T5736] usb 4-1: selecting invalid altsetting 0 [ 966.782646][ T5736] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 966.809216][ T6267] usb 2-1: ignoring: probably an ADSL modem [ 966.849676][ T5736] usb 4-1: USB disconnect, device number 65 [ 966.893351][T14845] binder: BINDER_SET_CONTEXT_MGR already set [ 966.922757][T14845] binder: 14844:14845 ioctl 4018620d 200000004a80 returned -16 [ 967.005573][ T6267] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 967.027009][ T6267] usb 2-1: USB disconnect, device number 63 [ 967.377851][ T29] audit: type=1326 audit(1786035849.339:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14853 comm="syz.6.2807" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc55fb9e0d9 code=0x0 [ 967.646119][T14858] comedi comedi1: pcl724: I/O base address or length out of range [ 969.177528][T14877] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 969.242317][ T29] audit: type=1400 audit(1786035851.209:981): avc: denied { read } for pid=14876 comm="syz.4.2814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 970.240516][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 971.321199][ T5796] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 971.527990][ T5796] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 971.561919][ T5796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.579444][ T5796] usb 4-1: Product: syz [ 971.588857][ T5796] usb 4-1: Manufacturer: syz [ 971.599666][ T5796] usb 4-1: SerialNumber: syz [ 971.619536][ T5796] usb 4-1: config 0 descriptor?? [ 971.848591][ T5796] usb 4-1: ignoring: probably an ADSL modem [ 972.058797][ T5796] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 972.096032][ T5796] usb 4-1: USB disconnect, device number 66 [ 974.312390][ T5796] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 975.075712][ T5796] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 975.487829][ T5796] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.487849][ T5796] usb 7-1: Product: syz [ 975.487859][ T5796] usb 7-1: Manufacturer: syz [ 975.487869][ T5796] usb 7-1: SerialNumber: syz [ 975.552056][ T5796] usb 7-1: config 0 descriptor?? [ 975.835636][ T5796] usb 7-1: ignoring: probably an ADSL modem [ 975.893801][ T5736] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 976.041721][ T5736] usb 6-1: Using ep0 maxpacket: 32 [ 976.055071][ T5796] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 976.094317][ T5736] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 976.127037][ T5796] usb 7-1: USB disconnect, device number 25 [ 976.150157][ T5736] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 976.223678][ T5736] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 977.133478][ T5736] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 977.233873][ T29] audit: type=1400 audit(1786035859.149:982): avc: denied { write } for pid=14979 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 977.290726][ T5736] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 977.328627][ T5736] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.382390][ T5736] usb 6-1: Product: syz [ 977.419752][ T5736] usb 6-1: Manufacturer: syz [ 977.448699][ T5736] usb 6-1: SerialNumber: syz [ 977.505557][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 977.792469][ T29] audit: type=1400 audit(1786035859.759:983): avc: denied { write } for pid=15015 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 977.815326][ T5736] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input40 [ 978.220320][ T5736] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 978.938609][ T5736] (id 0x00) [ 979.182955][ T5736] rc_core: IR keymap rc-imon-pad not found [ 979.234145][ T5736] Registered IR keymap rc-empty [ 979.273751][ T5736] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 979.333328][ T5736] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 979.515332][ T5736] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 979.532414][ T6267] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 979.686688][ T5736] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input41 [ 979.731701][ T6267] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 979.815672][ T6267] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.866600][ T5736] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:20> initialized [ 979.882824][ T6267] usb 7-1: Product: syz [ 979.906330][ T6267] usb 7-1: Manufacturer: syz [ 979.927954][ T6267] usb 7-1: SerialNumber: syz [ 980.362883][ T29] audit: type=1400 audit(1786035862.329:984): avc: denied { write } for pid=15047 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 980.509877][ T6267] usblp 7-1:1.0: usblp1: USB Unidirectional printer dev 26 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 980.586239][ T6267] usb 6-1: USB disconnect, device number 20 [ 980.652618][ T29] audit: type=1400 audit(1786035862.619:985): avc: denied { write } for pid=15074 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 980.873768][T15076] imon:display_open: could not find interface for minor 0 [ 981.051494][ T5736] usb 7-1: USB disconnect, device number 26 [ 981.195832][ T5736] usblp1: removed [ 983.894051][T15123] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 983.932819][T15111] zram: Can't change algorithm for initialized device [ 983.977466][T15111] zram: Cannot change disksize for initialized device [ 983.993629][T15123] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 984.102232][ T29] audit: type=1400 audit(1786035866.069:986): avc: denied { write } for pid=15086 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 985.020086][ T29] audit: type=1800 audit(1786035866.979:987): pid=15138 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2888" name="file0" dev="fuse" ino=18446744073709551613 res=0 errno=0 [ 985.535457][T15143] zram: Can't change algorithm for initialized device [ 985.543244][T15143] zram: Cannot change disksize for initialized device [ 985.615429][ T29] audit: type=1400 audit(1786035867.419:989): avc: denied { write } for pid=15137 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 985.794559][ T29] audit: type=1400 audit(1786035867.019:988): avc: denied { mount } for pid=15133 comm="syz.6.2889" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 985.935672][ T29] audit: type=1326 audit(1786035867.799:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15157 comm="syz.1.2895" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7939f9e0d9 code=0x0 [ 985.966043][ T5736] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 986.921784][T15167] comedi comedi1: pcl724: I/O base address or length out of range [ 986.938353][ T29] audit: type=1400 audit(1786035868.059:991): avc: denied { relabelfrom } for pid=15160 comm="syz.6.2896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 987.001087][ T5736] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.146179][ T5736] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.158302][ T29] audit: type=1400 audit(1786035868.059:992): avc: denied { relabelto } for pid=15160 comm="syz.6.2896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 987.231315][ T5736] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 988.267374][ T5736] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 988.343168][ T5736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.824922][ T5736] usb 4-1: config 0 descriptor?? [ 989.496993][ T5736] usb 4-1: can't set config #0, error -71 [ 989.660429][T15182] zram: Can't change algorithm for initialized device [ 989.669001][T15182] zram: Cannot change disksize for initialized device [ 989.690025][ T5736] usb 4-1: USB disconnect, device number 67 [ 990.484111][ T29] audit: type=1400 audit(1786035872.449:993): avc: denied { write } for pid=15154 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 991.850236][T15199] zram: Can't change algorithm for initialized device [ 991.864687][T15199] zram: Cannot change disksize for initialized device [ 991.916637][ T29] audit: type=1400 audit(1786035873.879:994): avc: denied { read } for pid=15210 comm="syz.4.2906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 992.056776][ T29] audit: type=1400 audit(1786035873.919:995): avc: denied { write } for pid=15204 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 992.883859][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.970536][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.920490][T10290] Bluetooth: hci0: command 0x0c1a tx timeout [ 994.668888][T15229] zram: Can't change algorithm for initialized device [ 994.685826][T15229] zram: Cannot change disksize for initialized device [ 994.933143][T15237] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 995.470520][T15240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2917'. [ 995.782250][T15234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2915'. [ 995.791459][T15234] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2915'. [ 995.852034][T15246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2915'. [ 996.860626][T15246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2915'. [ 996.973248][T15244] zram: Can't change algorithm for initialized device [ 996.986621][T15244] zram: Cannot change disksize for initialized device [ 997.051598][T15252] syzkaller0: entered promiscuous mode [ 997.091550][T15252] syzkaller0: entered allmulticast mode [ 1000.466624][T15266] zram: Can't change algorithm for initialized device [ 1000.476178][T15266] zram: Cannot change disksize for initialized device [ 1000.506127][T15267] zram: Can't change algorithm for initialized device [ 1000.521112][T15267] zram: Cannot change disksize for initialized device [ 1001.795877][T15279] zram: Can't change algorithm for initialized device [ 1001.805386][T15279] zram: Cannot change disksize for initialized device [ 1006.615242][ T5736] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1006.760661][ T5736] usb 6-1: device descriptor read/64, error -71 [ 1007.036598][ T5736] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1007.186424][ T5736] usb 6-1: device descriptor read/64, error -71 [ 1007.301365][ T5736] usb usb6-port1: attempt power cycle [ 1007.671076][ T5736] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1007.712181][ T5736] usb 6-1: device descriptor read/8, error -71 [ 1007.964022][ T5736] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1008.012482][ T5736] usb 6-1: device descriptor read/8, error -71 [ 1008.137187][ T5736] usb usb6-port1: unable to enumerate USB device [ 1013.928935][T15333] netlink: 'syz.4.2946': attribute type 1 has an invalid length. [ 1014.017618][T15333] bond2: entered promiscuous mode [ 1014.028134][T15333] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1014.062221][T15343] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1014.086657][T15343] bond2: (slave ipip0): The slave device specified does not support setting the MAC address [ 1014.139599][T15343] bond2: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 1014.162487][T15343] bond2: (slave ipip0): making interface the new active one [ 1014.169929][T15343] ipip0: entered promiscuous mode [ 1014.194468][T15343] bond2: (slave ipip0): Enslaving as an active interface with an up link [ 1015.553411][ T29] audit: type=1400 audit(1786035897.509:996): avc: denied { write } for pid=15355 comm="syz.6.2951" name="/" dev="ocfs2_dlmfs" ino=52178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1015.603641][T15357] o2cb: This node has not been configured. [ 1015.659471][T15357] o2cb: Cluster check failed. Fix errors before retrying. [ 1015.708155][T15359] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 1015.717831][T15357] (syz.6.2951,15357,0):user_dlm_register:674 ERROR: status = -22 [ 1015.734173][ T29] audit: type=1400 audit(1786035897.569:997): avc: denied { add_name } for pid=15355 comm="syz.6.2951" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1015.775415][T15359] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 1015.804837][T15357] (syz.6.2951,15357,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file2" [ 1016.519801][ T29] audit: type=1400 audit(1786035897.569:998): avc: denied { create } for pid=15355 comm="syz.6.2951" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1016.918221][T15366] zram: Can't change algorithm for initialized device [ 1016.926367][T15366] zram: Cannot change disksize for initialized device [ 1017.025160][ T29] audit: type=1400 audit(1786035897.569:999): avc: denied { associate } for pid=15355 comm="syz.6.2951" name="file2" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1020.150633][ T6267] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1020.170617][ T5736] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1020.290829][ T6267] usb 4-1: device descriptor read/64, error -71 [ 1020.330910][ T5736] usb 2-1: Using ep0 maxpacket: 8 [ 1020.395833][ T29] audit: type=1400 audit(1786035902.359:1000): avc: denied { read } for pid=15418 comm="syz.6.2970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1020.422677][ T5736] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 1020.438348][ T5736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.462961][ T5736] usb 2-1: Product: syz [ 1020.477475][ T5736] usb 2-1: Manufacturer: syz [ 1020.503649][ T5736] usb 2-1: SerialNumber: syz [ 1020.561148][ T6267] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1020.702110][ T6267] usb 4-1: device descriptor read/64, error -71 [ 1020.786422][ T5736] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1020.822202][ T6267] usb usb4-port1: attempt power cycle [ 1020.849039][ T5736] usb 2-1: unit 3 not found! [ 1021.788276][ T5736] usb 2-1: USB disconnect, device number 64 [ 1021.870864][ T6267] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1021.933613][ T6267] usb 4-1: device descriptor read/8, error -71 [ 1022.030989][T15431] udevd[15431]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1022.231055][ T6267] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1022.283512][ T6267] usb 4-1: device descriptor read/8, error -71 [ 1022.771283][ T6267] usb usb4-port1: unable to enumerate USB device [ 1023.531821][T15448] zram: Can't change algorithm for initialized device [ 1023.541816][T15448] zram: Cannot change disksize for initialized device [ 1023.762434][ T29] audit: type=1326 audit(1786035905.719:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15456 comm="syz.6.2982" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc55fb9e0d9 code=0x0 [ 1023.824961][T15460] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 1024.497130][T15460] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 1025.045393][T15463] comedi comedi1: pcl724: I/O base address or length out of range [ 1026.047546][ T29] audit: type=1400 audit(1786035907.959:1002): avc: denied { write } for pid=15475 comm="syz.1.2987" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1026.358775][ T29] audit: type=1400 audit(1786035908.319:1003): avc: denied { bind } for pid=15482 comm="syz.6.2989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1027.451391][T15490] zram: Can't change algorithm for initialized device [ 1027.463413][T15490] zram: Cannot change disksize for initialized device [ 1027.890861][ T29] audit: type=1400 audit(1786035909.849:1004): avc: denied { map } for pid=15509 comm="syz.4.2996" path="socket:[52805]" dev="sockfs" ino=52805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1030.593672][ T29] audit: type=1326 audit(1786035912.559:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15527 comm="syz.3.3000" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f121e79e0d9 code=0x0 [ 1030.782640][ T6267] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1030.933555][T15531] comedi comedi1: pcl724: I/O base address or length out of range [ 1030.953589][ T6267] usb 6-1: Using ep0 maxpacket: 32 [ 1030.988615][ T6267] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1031.045103][ T6267] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1031.090205][ T6267] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1031.148698][ T6267] usb 6-1: Product: syz [ 1031.185003][ T6267] usb 6-1: Manufacturer: syz [ 1031.217516][ T6267] usb 6-1: SerialNumber: syz [ 1031.271451][ T6267] usb 6-1: config 0 descriptor?? [ 1031.304304][T15524] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1031.342517][ T6267] hub 6-1:0.0: bad descriptor, ignoring hub [ 1031.379135][ T6267] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1033.472419][T15543] zram: Can't change algorithm for initialized device [ 1033.480250][T15543] zram: Cannot change disksize for initialized device [ 1033.664691][T15549] jffs2: notice: (15549) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1033.970558][ T6267] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 1034.973226][ T6267] usb 7-1: device descriptor read/64, error -71 [ 1035.251183][ T6267] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 1035.393361][ T6267] usb 7-1: device descriptor read/64, error -71 [ 1035.511255][ T6267] usb usb7-port1: attempt power cycle [ 1035.850628][ T6267] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 1035.887726][ T6267] usb 7-1: device descriptor read/8, error -71 [ 1036.130993][ T6267] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 1036.151745][ T6267] usb 7-1: device descriptor read/8, error -71 [ 1036.280810][ T6267] usb usb7-port1: unable to enumerate USB device [ 1036.850702][ T6267] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1036.877067][T15580] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1036.886188][T15580] overlayfs: missing 'lowerdir' [ 1037.933219][ T6267] usb 2-1: device descriptor read/64, error -71 [ 1037.980460][ T189] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1038.021193][T15586] kvm: kvm [15585]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0xe940 [ 1038.091658][ T5736] usb 6-1: USB disconnect, device number 25 [ 1038.132039][ T189] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1038.184341][ T189] usb 7-1: config 0 has no interface number 0 [ 1038.190599][ T6267] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1038.231645][ T189] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1038.303640][ T189] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1038.370931][ T6267] usb 2-1: device descriptor read/64, error -71 [ 1038.402610][ T189] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1038.446882][ T189] usb 7-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1038.465557][ T189] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.518310][ T189] usb 7-1: config 0 descriptor?? [ 1038.530971][ T6267] usb usb2-port1: attempt power cycle [ 1039.300488][ T6267] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1039.691441][ T6267] usb 2-1: device descriptor read/8, error -71 [ 1040.113050][ T189] uclogic 0003:28BD:0042.0018: failed retrieving string descriptor #100: -71 [ 1040.176328][T15608] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 1040.183580][T15608] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1040.252244][ T189] uclogic 0003:28BD:0042.0018: failed retrieving pen parameters: -71 [ 1040.299181][ T189] uclogic 0003:28BD:0042.0018: pen probing failed: -71 [ 1040.321456][ T189] uclogic 0003:28BD:0042.0018: failed probing parameters: -71 [ 1040.357506][ T189] uclogic 0003:28BD:0042.0018: probe with driver uclogic failed with error -71 [ 1040.390763][ T10] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1040.411654][ T189] usb 7-1: USB disconnect, device number 31 [ 1040.571338][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1040.591193][ T10] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 1040.622850][ T10] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1040.663433][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.135168][ T10] usb 6-1: Product: syz [ 1041.803791][ T10] usb 6-1: Manufacturer: syz [ 1041.840286][ T10] usb 6-1: SerialNumber: syz [ 1041.888620][T15616] zram: Cannot change disksize for initialized device [ 1041.907928][ T10] usb 6-1: config 0 descriptor?? [ 1041.961536][T15628] netlink: 'syz.6.3033': attribute type 1 has an invalid length. [ 1041.984151][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1042.037238][ T10] usb 6-1: setting power ON [ 1042.074514][T15628] bond1: entered promiscuous mode [ 1042.080757][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 1042.117334][T15628] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1042.154258][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1042.221288][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1042.289029][ T10] usb 6-1: media controller created [ 1042.307355][T15635] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1042.345506][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1042.354992][T15635] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1042.397704][ T6267] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1042.420201][T15635] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1042.459276][ T10] usb 6-1: selecting invalid altsetting 6 [ 1042.496449][T15635] bond1: (slave ip6gre1): making interface the new active one [ 1042.530045][ T10] usb 6-1: digital interface selection failed (-22) [ 1042.549565][T15649] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1042.557861][T15635] ip6gre1: entered promiscuous mode [ 1042.563873][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1042.589151][T15650] 9p: Bad value for 'rfdno' [ 1042.594280][T15635] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 1042.603025][ T6267] usb 4-1: Using ep0 maxpacket: 32 [ 1042.616187][ T10] usb 6-1: setting power OFF [ 1042.656338][ T6267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.687075][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 1042.719511][ T6267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1042.785023][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1042.833827][ T6267] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1042.865121][ T10] (NULL device *): no alternate interface [ 1042.873070][ T29] audit: type=1326 audit(1786035924.829:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15654 comm="syz.1.3039" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7939f9e0d9 code=0x0 [ 1042.940115][ T6267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.974678][ T6267] usb 4-1: config 0 descriptor?? [ 1043.226314][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1043.256766][ T10] usb 6-1: USB disconnect, device number 26 [ 1043.335138][T15661] comedi comedi1: pcl724: I/O base address or length out of range [ 1043.617968][ T6267] ft260 0003:0403:6030.0019: unknown main item tag 0x0 [ 1043.807198][ T6267] ft260 0003:0403:6030.0019: unknown main item tag 0x0 [ 1043.913769][ T6267] ft260 0003:0403:6030.0019: chip code: 0000 0000 [ 1044.191450][ T6267] ft260 0003:0403:6030.0019: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 1044.244768][T15675] IPVS: Error connecting to the multicast addr [ 1044.392337][ T6267] ft260 0003:0403:6030.0019: failed to retrieve status: -32, no wakeup [ 1044.436876][ T6267] ft260 0003:0403:6030.0019: failed to retrieve status: -32 [ 1044.454277][ T29] audit: type=1326 audit(1786035926.419:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15676 comm="syz.6.3046" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc55fb9e0d9 code=0x0 [ 1044.657571][T15680] comedi comedi1: pcl724: I/O base address or length out of range [ 1044.719948][T15637] ft260 0003:0403:6030.0019: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 1044.790488][ T10] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1044.872737][T15683] syzkaller0: entered promiscuous mode [ 1044.878363][T15683] syzkaller0: entered allmulticast mode [ 1044.898767][T15683] tipc: Started in network mode [ 1044.903910][T15683] tipc: Node identity 2a0991b4ec1f, cluster identity 4711 [ 1044.911782][T15683] tipc: Enabled bearer , priority 0 [ 1044.984383][T15682] tipc: Resetting bearer [ 1044.990858][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1045.006893][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1045.166635][ T10] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1045.177200][T15682] tipc: Disabling bearer [ 1045.183546][ T10] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1045.194967][ T10] usb 2-1: Product: syz [ 1045.199253][ T10] usb 2-1: Manufacturer: syz [ 1045.213064][ T10] usb 2-1: SerialNumber: syz [ 1046.203297][ T10] usb 2-1: config 0 descriptor?? [ 1046.241779][T15679] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1046.272695][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 1046.309957][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1046.356192][T15691] tipc: Enabled bearer , priority 12 [ 1046.729858][ T5717] usb 4-1: USB disconnect, device number 72 [ 1046.937467][T15679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1046.949528][T15679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.316053][T15717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.350026][T15717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.497520][ T5717] tipc: Node number set to 1309611435 [ 1047.699285][ T29] audit: type=1326 audit(1786035929.659:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15726 comm="syz.6.3061" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc55fb9e0d9 code=0x0 [ 1047.749874][ T10] usb 2-1: USB disconnect, device number 69 [ 1047.906493][T15730] comedi comedi1: pcl724: I/O base address or length out of range [ 1047.934076][ T29] audit: type=1400 audit(1786035929.769:1009): avc: denied { write } for pid=15728 comm="syz.3.3062" name="/" dev="configfs" ino=1102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1047.971662][T15729] null_blk: nullb1: using native zone append [ 1048.012465][ T29] audit: type=1800 audit(1786035929.779:1010): pid=15729 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.3062" name="zoned" dev="configfs" ino=54216 res=0 errno=0 [ 1048.177334][ T29] audit: type=1800 audit(1786035929.889:1011): pid=15729 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.3062" name="zone_nr_conv" dev="configfs" ino=54220 res=0 errno=0 [ 1048.354153][ T29] audit: type=1800 audit(1786035929.889:1012): pid=15729 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.3062" name="power" dev="configfs" ino=54221 res=0 errno=0 [ 1048.711527][ T29] audit: type=1400 audit(1786035929.949:1013): avc: denied { write } for pid=15728 comm="syz.3.3062" name="nullb" dev="configfs" ino=3350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1050.194820][T15729] null_blk: disk nullb1 created [ 1050.443448][T15763] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 1050.626554][T15763] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 1051.841718][ T10] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1052.030766][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1052.057412][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1052.104060][ T10] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1052.149477][ T10] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1052.202778][T15789] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1052.254149][ T10] usb 7-1: Product: syz [ 1052.283709][ T10] usb 7-1: Manufacturer: syz [ 1052.312912][ T10] usb 7-1: SerialNumber: syz [ 1052.449095][ T10] usb 7-1: config 0 descriptor?? [ 1052.709001][T15773] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1052.748433][ T10] hub 7-1:0.0: bad descriptor, ignoring hub [ 1052.794764][ T10] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1054.323218][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.332257][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.609037][ T10] usb 7-1: USB disconnect, device number 32 [ 1055.124925][ T10] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 1055.393635][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 1055.454096][ T10] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1055.544904][ T10] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1055.589036][ T10] usb 7-1: Product: syz [ 1055.708575][ T10] usb 7-1: Manufacturer: syz [ 1055.736102][ T10] usb 7-1: SerialNumber: syz [ 1055.983417][ T10] usb 7-1: config 0 descriptor?? [ 1056.024811][ T10] usb 7-1: can't set config #0, error -71 [ 1056.978521][ T10] usb 7-1: USB disconnect, device number 33 [ 1058.393796][ T29] audit: type=1400 audit(1786035940.359:1014): avc: denied { bind } for pid=15873 comm="syz.4.3106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1061.924324][ T10] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1062.092101][ T10] usb 6-1: config 127 has an invalid interface number: 84 but max is 0 [ 1062.107325][ T29] audit: type=1326 audit(1786035944.069:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15910 comm="syz.4.3117" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f832cb9e0d9 code=0x0 [ 1062.133925][ T10] usb 6-1: config 127 has no interface number 0 [ 1062.149036][ T10] usb 6-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=9c.e5 [ 1062.170957][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.179099][ T10] usb 6-1: Product: syz [ 1062.184449][ T10] usb 6-1: Manufacturer: syz [ 1062.189091][ T10] usb 6-1: SerialNumber: syz [ 1063.346706][ T10] gspca_main: spca501-2.14.0 probing 040a:0002 [ 1063.385825][ T10] gspca_spca501: reg write: error -71 [ 1063.403298][ T10] spca501 6-1:127.84: Reg write failed for 0x00,0xaa,0x00 [ 1063.427324][ T10] spca501 6-1:127.84: probe with driver spca501 failed with error -22 [ 1063.474695][ T10] usb 6-1: USB disconnect, device number 27 [ 1065.194316][T15929] syzkaller0: entered promiscuous mode [ 1065.264681][T15929] syzkaller0: entered allmulticast mode [ 1067.940939][T15955] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3129'. [ 1067.994380][ T29] audit: type=1326 audit(1786035949.959:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15961 comm="syz.3.3131" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f121e79e0d9 code=0x0 [ 1068.369129][T15971] comedi comedi1: pcl724: I/O base address or length out of range [ 1068.379040][T15970] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3134'. [ 1068.480751][ T5717] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1068.652970][ T5717] usb 6-1: Using ep0 maxpacket: 32 [ 1068.692546][ T5717] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1068.750328][ T5717] usb 6-1: config 0 has no interface number 0 [ 1068.895749][ T5717] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1069.092425][ T5717] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.146603][ T5717] usb 6-1: Product: syz [ 1069.174639][ T5717] usb 6-1: Manufacturer: syz [ 1069.201677][ T5717] usb 6-1: SerialNumber: syz [ 1070.117938][ T5717] usb 6-1: config 0 descriptor?? [ 1070.159755][ T5717] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1070.256043][ T5717] usb 6-1: selecting invalid altsetting 1 [ 1070.303289][ T5717] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1070.405636][ T5717] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1070.492777][ T5717] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1070.564219][ T5717] usb 6-1: media controller created [ 1070.663404][ T5717] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1071.680617][T15988] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1072.293494][ T5717] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1072.367508][ T5717] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1073.084599][ T5717] usb 6-1: USB disconnect, device number 28 [ 1074.349670][T16024] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3139'. [ 1074.398575][ T29] audit: type=1326 audit(1786035956.359:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16028 comm="syz.3.3154" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f121e79e0d9 code=0x0 [ 1074.815452][T16043] comedi comedi1: pcl724: I/O base address or length out of range [ 1074.882267][T16032] kvm: kvm [16029]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0xe940 [ 1076.520537][T16057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3161'. [ 1077.313186][T16059] ip_tables: iptables: counters copy to user failed while replacing table [ 1079.255693][T16088] Bluetooth: hci0: unsupported parameter 255 [ 1079.291078][T16088] Bluetooth: hci0: unsupported parameter 255 [ 1079.317203][ T29] audit: type=1400 audit(1786035961.279:1018): avc: denied { read append } for pid=16086 comm="syz.1.3171" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1079.346434][T16082] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3169'. [ 1080.132751][T16096] vlan2: left promiscuous mode [ 1080.137577][T16096] bond1: left promiscuous mode [ 1080.142749][T16096] bridge1: left promiscuous mode [ 1080.147919][T16096] vlan2: left allmulticast mode [ 1080.153140][T16096] bond1: left allmulticast mode [ 1080.158005][T16096] bridge1: left allmulticast mode [ 1080.448237][T16091] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1080.581407][T16091] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1080.644327][T16091] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1081.174877][T16091] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1081.520708][T10290] Bluetooth: hci0: command 0x0c1a tx timeout [ 1081.789681][T16107] 9pnet_fd: Insufficient options for proto=fd [ 1082.640547][T10290] Bluetooth: hci3: command 0x0406 tx timeout [ 1082.720650][T10290] Bluetooth: hci1: command 0x0406 tx timeout [ 1083.143492][T16113] zram: Cannot change disksize for initialized device [ 1083.254542][T16091] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1083.327477][T16091] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1084.530978][ T29] audit: type=1326 audit(1786035966.499:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16128 comm="syz.3.3181" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f121e79e0d9 code=0x0 [ 1084.817145][T10290] Bluetooth: hci1: command 0x0406 tx timeout [ 1085.280461][T10290] Bluetooth: hci5: command 0x0406 tx timeout [ 1086.451057][T16137] comedi comedi1: pcl724: I/O base address or length out of range [ 1087.450797][T10290] Bluetooth: hci5: command 0x0406 tx timeout [ 1089.461338][ T29] audit: type=1400 audit(1786035971.429:1020): avc: denied { getopt } for pid=16142 comm="syz.6.3168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1089.852675][T16170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3192'. [ 1090.891893][T16167] ALSA: mixer_oss: invalid OSS volume 'P' [ 1092.318984][T16188] zram: Can't change algorithm for initialized device [ 1092.620655][ T29] audit: type=1400 audit(1786035974.579:1021): avc: denied { write } for pid=16191 comm="syz.1.3197" name="rd_mcp_0" dev="configfs" ino=34025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1093.008444][T16200] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1093.021020][T16200] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 1093.060233][ T29] audit: type=1326 audit(1786035974.609:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16193 comm="syz.6.3198" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc55fb9e0d9 code=0x0 [ 1093.248901][ T29] audit: type=1400 audit(1786035974.999:1023): avc: denied { write } for pid=16191 comm="syz.1.3197" name="usb_gadget" dev="configfs" ino=29815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1094.781231][T16206] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1097.673661][T16222] zram: Cannot change disksize for initialized device [ 1098.856450][T16235] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3208'. [ 1099.379438][T16239] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1101.112634][ T29] audit: type=1400 audit(1786035983.079:1024): avc: denied { accept } for pid=16253 comm="syz.1.3214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1102.650512][T16267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3217'. [ 1102.780475][T16267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3217'. [ 1102.789573][T16267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3217'. [ 1102.798695][T16267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3217'. [ 1102.807803][T16267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3217'. [ 1102.816850][T16267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3217'. [ 1102.825900][T16267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3217'. [ 1102.835019][T16267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3217'. [ 1102.844086][T16267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3217'. [ 1104.468531][T16263] zram: Cannot change disksize for initialized device [ 1105.635074][ T29] audit: type=1326 audit(1786035987.599:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16282 comm="syz.6.3222" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc55fb9e0d9 code=0x0 [ 1107.682841][T16299] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 1107.718526][T16299] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 1107.839810][T16299] tipc: Started in network mode [ 1107.868936][T16299] tipc: Node identity 080211000001, cluster identity 4711 [ 1107.915778][T16299] tipc: Enabled bearer , priority 1 [ 1109.030725][ T189] tipc: Node number set to 134418688 [ 1111.120683][T16362] x_tables: duplicate underflow at hook 1 [ 1114.491313][T16368] zram: Can't change algorithm for initialized device [ 1114.532057][T16365] zram: Cannot change disksize for initialized device [ 1114.767790][T16379] tipc: Enabling of bearer rejected, already enabled [ 1114.821832][T16369] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1114.847506][ T29] audit: type=1400 audit(1786035996.779:1026): avc: denied { append } for pid=16364 comm="syz.3.3237" name="sg0" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1114.895144][T16380] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 1114.940897][T16380] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 1115.077398][T16380] tipc: Resetting bearer [ 1115.092288][T16379] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 1115.111227][T16379] tipc: Resetting bearer [ 1116.070547][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.079238][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.319925][T16417] zram: Can't change algorithm for initialized device [ 1122.725982][T16419] zram: Cannot change disksize for initialized device [ 1123.049456][T16432] syz.1.3253 (16432): drop_caches: 2 [ 1127.116458][T16451] zram: Can't change algorithm for initialized device [ 1127.466945][T16465] NILFS (nullb0): couldn't find nilfs on the device [ 1128.517878][T16480] trusted_key: syz.6.3267 sent an empty control message without MSG_MORE. [ 1129.420516][T16487] fuse: fd is not a fuse device [ 1130.015888][T16478] zram: Can't change algorithm for initialized device [ 1130.118660][T16478] zram: Cannot change disksize for initialized device [ 1130.712780][T16488] zram: Can't change algorithm for initialized device [ 1130.873284][T16488] zram: Cannot change disksize for initialized device [ 1132.769913][ T29] audit: type=1400 audit(1786036014.729:1027): avc: denied { setopt } for pid=16517 comm="syz.1.3277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1132.962060][T16526] : entered promiscuous mode [ 1134.705020][T16545] 0x000000000007-0x000000020000 : "" [ 1135.962773][T16545] ftl_cs: FTL header corrupt! [ 1137.021333][T16571] overlayfs: failed to clone upperpath [ 1137.437281][T16563] kexec: Could not allocate control_code_buffer [ 1138.277350][ T189] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 1139.232102][ T189] usb 4-1: not running at top speed; connect to a high speed hub [ 1139.279484][ T189] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.214341][T16600] __nla_validate_parse: 33 callbacks suppressed [ 1140.214357][T16600] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3299'. [ 1140.254099][ T189] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1140.372091][ T189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.446632][ T189] usb 4-1: Product: syz [ 1140.467879][ T189] usb 4-1: Manufacturer: syz [ 1140.499041][ T189] usb 4-1: SerialNumber: syz [ 1140.563372][ T189] keyspan 4-1:1.0: Keyspan 4 port adapter converter detected [ 1140.610044][ T189] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 1140.633595][ T189] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 1140.657384][ T189] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 1140.786519][ T189] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1140.807952][T16585] tmpfs: Unknown parameter '_' [ 1140.846860][ T189] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 1140.881551][ T189] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1140.905013][ T189] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 4 [ 1140.945128][ T189] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1141.008130][ T189] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 1141.075666][ T189] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1141.165297][ T189] usb 4-1: USB disconnect, device number 73 [ 1141.317084][ T189] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1141.386845][T16614] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1141.413222][T16614] CIFS mount error: No usable UNC path provided in device string! [ 1141.413222][T16614] [ 1141.423426][T16614] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1141.454638][ T189] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1142.350107][ T189] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1143.341103][T16626] overlayfs: missing 'lowerdir' [ 1143.355740][ T189] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1144.552226][ T189] keyspan 4-1:1.0: device disconnected [ 1148.363194][T16658] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3315'. [ 1149.240876][T16664] overlayfs: failed to clone upperpath [ 1149.597233][T16668] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3319'. [ 1150.988832][ T29] audit: type=1326 audit(1786036032.949:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16678 comm="syz.4.3306" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f832cb9e0d9 code=0x0 [ 1151.353710][ T7967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.389205][ T7967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1154.040164][T16701] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.3316' sets config #24 [ 1154.327766][T16706] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1155.552289][T16718] pim6reg: left allmulticast mode [ 1157.730440][T16728] x_tables: duplicate underflow at hook 1 [ 1161.884398][ T29] audit: type=1326 audit(1786036043.849:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16748 comm="syz.1.3340" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7939f9e0d9 code=0x0 [ 1164.440893][ T29] audit: type=1326 audit(1786036046.409:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16760 comm="syz.4.3344" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f832cb9e0d9 code=0x0 [ 1166.989938][T16783] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1167.923126][T16795] x_tables: duplicate underflow at hook 1 [ 1167.943288][T16794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3354'. [ 1168.094056][T16796] dlm: no local IP address has been set [ 1168.146684][T16796] dlm: cannot start dlm midcomms -107 [ 1168.255493][ T29] audit: type=1326 audit(1786036050.219:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16802 comm="syz.4.3357" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f832cb9e0d9 code=0x0 [ 1168.548203][T16809] overlayfs: failed to resolve './file2': -2 [ 1171.120305][T16818] tmpfs: Unknown parameter 'grpquota/#/msr' [ 1171.284422][T16825] set match dimension is over the limit! [ 1171.458139][T16830] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3366'. [ 1171.484726][ T29] audit: type=1326 audit(1786036053.449:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16831 comm="syz.6.3367" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc55fb9e0d9 code=0x0 [ 1172.548971][ T29] audit: type=1400 audit(1786036054.309:1033): avc: denied { write } for pid=16828 comm="syz.1.3366" name="functions" dev="configfs" ino=10660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1172.613597][T16836] [ 1172.615968][T16836] ====================================================== [ 1172.622985][T16836] WARNING: possible circular locking dependency detected [ 1172.629981][T16836] syzkaller #0 Tainted: G L [ 1172.635952][T16836] ------------------------------------------------------ [ 1172.642946][T16836] syz.1.3366/16836 is trying to acquire lock: [ 1172.648983][T16836] ffffffff901c7fa8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: configfs_rmdir+0x5ae/0x950 [ 1172.658716][T16836] [ 1172.658716][T16836] but task is already holding lock: [ 1172.666053][T16836] ffff88805210f0c0 (&sb->s_type->i_mutex_key#32){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 1172.675776][T16836] [ 1172.675776][T16836] which lock already depends on the new lock. [ 1172.675776][T16836] [ 1172.686154][T16836] [ 1172.686154][T16836] the existing dependency chain (in reverse order) is: [ 1172.695140][T16836] [ 1172.695140][T16836] -> #2 (&sb->s_type->i_mutex_key#32){++++}-{4:4}: [ 1172.703816][T16836] lock_acquire+0x1b9/0x370 [ 1172.708841][T16836] down_write+0x8b/0x1f0 [ 1172.713595][T16836] configfs_depend_item_unlocked+0xf3/0x6a0 [ 1172.719993][T16836] usbg_make_tpg+0x261/0x620 [ 1172.725078][T16836] target_fabric_make_tpg+0xab/0x8c0 [ 1172.730859][T16836] configfs_mkdir+0x51e/0xb70 [ 1172.736036][T16836] vfs_mkdir+0x361/0x850 [ 1172.740775][T16836] filename_mkdirat+0x48b/0x5e0 [ 1172.746122][T16836] __x64_sys_mkdir+0x6b/0x90 [ 1172.751205][T16836] do_syscall_64+0x115/0x870 [ 1172.756295][T16836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.762688][T16836] [ 1172.762688][T16836] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 1172.770305][T16836] lock_acquire+0x1b9/0x370 [ 1172.775312][T16836] __mutex_lock+0x1a4/0x1bd0 [ 1172.780406][T16836] tcm_set_name+0x29/0xb0 [ 1172.785238][T16836] function_make+0x21c/0x3f0 [ 1172.790343][T16836] configfs_mkdir+0x51e/0xb70 [ 1172.795522][T16836] vfs_mkdir+0x361/0x850 [ 1172.800263][T16836] filename_mkdirat+0x48b/0x5e0 [ 1172.805621][T16836] __x64_sys_mkdir+0x6b/0x90 [ 1172.810705][T16836] do_syscall_64+0x115/0x870 [ 1172.815792][T16836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.822184][T16836] [ 1172.822184][T16836] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 1172.830412][T16836] check_prev_add+0xeb/0xe60 [ 1172.835525][T16836] __lock_acquire+0x136c/0x1a40 [ 1172.840887][T16836] lock_acquire+0x1b9/0x370 [ 1172.845892][T16836] __mutex_lock+0x1a4/0x1bd0 [ 1172.851011][T16836] configfs_rmdir+0x5ae/0x950 [ 1172.856208][T16836] vfs_rmdir+0x328/0x8a0 [ 1172.860957][T16836] filename_rmdir+0x31a/0x5c0 [ 1172.866137][T16836] __x64_sys_unlinkat+0xf5/0x130 [ 1172.871574][T16836] do_syscall_64+0x115/0x870 [ 1172.876669][T16836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.883063][T16836] [ 1172.883063][T16836] other info that might help us debug this: [ 1172.883063][T16836] [ 1172.893266][T16836] Chain exists of: [ 1172.893266][T16836] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#32 [ 1172.893266][T16836] [ 1172.907923][T16836] Possible unsafe locking scenario: [ 1172.907923][T16836] [ 1172.915351][T16836] CPU0 CPU1 [ 1172.920691][T16836] ---- ---- [ 1172.926047][T16836] lock(&sb->s_type->i_mutex_key#32); [ 1172.931506][T16836] lock(&opts->dep_lock); [ 1172.938441][T16836] lock(&sb->s_type->i_mutex_key#32); [ 1172.946405][T16836] lock(gadget_subsys.su_mutex); [ 1172.951407][T16836] [ 1172.951407][T16836] *** DEADLOCK *** [ 1172.951407][T16836] [ 1172.959559][T16836] 3 locks held by syz.1.3366/16836: [ 1172.964733][T16836] #0: ffff88801dfca450 (sb_writers#18){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x5c0 [ 1172.974108][T16836] #1: ffff888054bd0ac0 (&default_group_class[depth - 1]#2/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x5c0 [ 1172.985395][T16836] #2: ffff88805210f0c0 (&sb->s_type->i_mutex_key#32){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 1172.995469][T16836] [ 1172.995469][T16836] stack backtrace: [ 1173.001339][T16836] CPU: 0 UID: 0 PID: 16836 Comm: syz.1.3366 Tainted: G L syzkaller #0 PREEMPT(full) [ 1173.001358][T16836] Tainted: [L]=SOFTLOCKUP [ 1173.001362][T16836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1173.001370][T16836] Call Trace: [ 1173.001376][T16836] [ 1173.001383][T16836] dump_stack_lvl+0x100/0x190 [ 1173.001399][T16836] print_circular_bug.cold+0x178/0x1c7 [ 1173.001419][T16836] check_noncircular+0x146/0x160 [ 1173.001435][T16836] check_prev_add+0xeb/0xe60 [ 1173.001451][T16836] ? __bfs+0x150/0x2a0 [ 1173.001461][T16836] __lock_acquire+0x136c/0x1a40 [ 1173.001477][T16836] lock_acquire+0x1b9/0x370 [ 1173.001490][T16836] ? configfs_rmdir+0x5ae/0x950 [ 1173.001506][T16836] ? __pfx___might_resched+0x10/0x10 [ 1173.001522][T16836] __mutex_lock+0x1a4/0x1bd0 [ 1173.001535][T16836] ? configfs_rmdir+0x5ae/0x950 [ 1173.001549][T16836] ? configfs_rmdir+0x5ae/0x950 [ 1173.001565][T16836] ? __pfx___mutex_lock+0x10/0x10 [ 1173.001576][T16836] ? do_raw_spin_lock+0x128/0x260 [ 1173.001591][T16836] ? find_held_lock+0x2b/0x80 [ 1173.001608][T16836] ? fast_dput+0x2fe/0x6d0 [ 1173.001624][T16836] ? do_raw_spin_unlock+0x145/0x1e0 [ 1173.001639][T16836] ? _raw_spin_unlock+0x28/0x50 [ 1173.001655][T16836] ? fast_dput+0x168/0x6d0 [ 1173.001670][T16836] ? configfs_rmdir+0x5ae/0x950 [ 1173.001684][T16836] configfs_rmdir+0x5ae/0x950 [ 1173.001701][T16836] ? __pfx_configfs_rmdir+0x10/0x10 [ 1173.001716][T16836] ? __pfx_down_write+0x10/0x10 [ 1173.001730][T16836] vfs_rmdir+0x328/0x8a0 [ 1173.001745][T16836] filename_rmdir+0x31a/0x5c0 [ 1173.001758][T16836] ? __pfx_filename_rmdir+0x10/0x10 [ 1173.001774][T16836] ? do_getname+0x191/0x390 [ 1173.001788][T16836] __x64_sys_unlinkat+0xf5/0x130 [ 1173.001801][T16836] do_syscall_64+0x115/0x870 [ 1173.001813][T16836] ? clear_bhb_loop+0x40/0x90 [ 1173.001826][T16836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.001838][T16836] RIP: 0033:0x7f7939f9e0d9 [ 1173.001849][T16836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1173.001861][T16836] RSP: 002b:00007f793adf2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 1173.001873][T16836] RAX: ffffffffffffffda RBX: 00007f793a226090 RCX: 00007f7939f9e0d9 [ 1173.001881][T16836] RDX: 0000000000000200 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 1173.001889][T16836] RBP: 00007f793a035024 R08: 0000000000000000 R09: 0000000000000000 [ 1173.001896][T16836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1173.001903][T16836] R13: 00007f793a226128 R14: 00007f793a226090 R15: 00007ffeb14a3ce8 [ 1173.001915][T16836] [ 1173.383586][ T29] audit: type=1400 audit(1786036054.449:1034): avc: denied { write } for pid=16828 comm="syz.1.3366" name="functions" dev="configfs" ino=10660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1173.406576][ T29] audit: type=1400 audit(1786036054.449:1035): avc: denied { remove_name } for pid=16828 comm="syz.1.3366" name="acm.0" dev="configfs" ino=59752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1173.429728][ T29] audit: type=1400 audit(1786036054.579:1036): avc: denied { rmdir } for pid=16828 comm="syz.1.3366" name="acm.0" dev="configfs" ino=59752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1177.201218][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.207539][ T1304] ieee802154 phy1 wpan1: encryption failed: -22