last executing test programs: 10m39.162047677s ago: executing program 32 (id=761): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x7b}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xfffff000, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m18.202376112s ago: executing program 33 (id=977): recvmmsg(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x3d}], 0x1}, 0x10009}], 0x1, 0x10000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0xffffffffffffff78, 0x7, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1cbd0000) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x6}, 0x1}, 0x18) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000040)=0x1, 0x4) connect$can_j1939(r4, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x3}, 0xff}, 0x18) 8m29.386477759s ago: executing program 34 (id=1162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0x200, 0x0) syz_io_uring_setup(0xd2, 0x0, &(0x7f0000000080), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r4 = userfaultfd(0x80001) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x70) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="a6ff00000000000000", 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x68}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 3m44.945547754s ago: executing program 7 (id=2482): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000001000)={0xa, 0x4e22}, 0x1c) r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000080)={'sit0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001100)=ANY=[@ANYRES8=r1, @ANYRES8=r1], 0x7c}, 0x1, 0x0, 0x0, 0xc891}, 0x80) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000070900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004540000000e0a090000000000000000000a0000060900020073797a31000000000900010073797a310000000028000380180000800c00018006000100d1030000080003"], 0xec}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000001140)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x1, 0x10, 0xffffffffffffffff, 0x0) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x0, 0x0, 0x1, 0x5}) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x25, &(0x7f0000000000)=""/4077, &(0x7f0000001040)=0xfed) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() r7 = getpid() ptrace$ARCH_SHSTK_DISABLE(0x1e, r7, 0x1, 0x5002) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 3m41.38524131s ago: executing program 7 (id=2499): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="84010000", @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b80080009000000fffe08"], 0x184}}, 0x0) ftruncate(r0, 0x200c17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) timer_create(0x1, &(0x7f00000002c0)={0x0, 0x6, 0x4, @tid=r2}, &(0x7f0000000340)) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d000000020000000100080022bf000000000000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020020"], 0x50) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0xfec00000, 0x4, 0x0, 0x4, 0x7, 0x80, 0x9, 0x7, 0x0, 0x8, 0x9}, {0x50000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xff, 0x2}, {0xb000, 0xf066ce738b004ad5, 0xc, 0x0, 0x2, 0xc5, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x4000, 0x8080000, 0xb, 0x0, 0x6, 0x6, 0x0, 0xfc, 0x6, 0x3f, 0x6}, {0xb000, 0x0, 0x9, 0x9, 0x2, 0x1, 0x2, 0x80, 0x10, 0xff, 0x6}, {0xf000, 0xeeee0000, 0x3, 0x5, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x2, 0x50000, 0x8, 0x3, 0x0, 0x7, 0x9, 0x60, 0x96, 0x0, 0x1, 0x5}, {0x809fffb, 0x8cc}, {0xdddd1000}, 0xddf8ffd3, 0x0, 0xd000, 0x110, 0xe, 0xf801, 0x3000, [0x80000004, 0x0, 0x10000, 0xfffffffffffdffff]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m41.277998815s ago: executing program 4 (id=2501): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0x4ea0, 0x10, @mcast1, 0x9}, 0x1c, 0x0}}], 0x1, 0x931766f6319ee501) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x10000000000000) 3m40.944760943s ago: executing program 7 (id=2503): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000800000068000480"], 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000008, 0x8031, 0xffffffffffffffff, 0x890d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlinkat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount$overlay(0x0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x12102, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002b0009082dbd7000fedbdf250500000008000100dc"], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x40070) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) 3m40.159088584s ago: executing program 4 (id=2505): socket$packet(0x11, 0x3, 0x300) socket$kcm(0x2, 0xa, 0x2) timer_getoverrun(0x0) fsopen(&(0x7f0000000040)='minix\x00', 0x1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)=0x1, 0x1) io_uring_setup(0x2a90, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x277}) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x42300, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) r1 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x3, 0x2, 0x0, 0x177}, &(0x7f0000ffe000)=0x0, &(0x7f0000ffe000)=0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x2, 0x0, 0xfe) syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109"], 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x809d) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) write$binfmt_script(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e29, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xf}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000100)=0xc081, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[], 0x50) pipe(0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e1602010401"], 0x19) syz_io_uring_modify_offsets$flags(r2, r3, 0x68, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(0x0, r7) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYRES64=r2], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m39.895315327s ago: executing program 6 (id=2509): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r2, 0x0, 0x31, &(0x7f0000000000)=0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x5}) 3m39.787570823s ago: executing program 7 (id=2510): syz_emit_vhci(0x0, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04042820"], 0x7) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2404c880, &(0x7f0000000040)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x200}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x40a0ae49, 0x0) io_cancel(0x0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x5, 0x400, 0xffffffffffffffff, &(0x7f0000000bc0)="6e6d666f65b25e0176187ca03ad93120b82e0d09c7ce4fcb23d8f81c652f4f7f7e6ca18fce29bb69cd8ee7b99afe4eb8f55f520c608f0b42a5516e338763c7f557349d5a3a52d44e8331a3801fde8cf13e39b5558730adcf61010cb52f654cf3035a94ecb36a485a21d3c63ebb0cb3cdf89044fd1379592250262cff373ac6089596d4ea8c24124f70c55febb576a6e7b0fc8e5114c99374024c8c61719a707a508c33f9682b4406881d400804abf8", 0xaf, 0xfff, 0x0, 0x3}, &(0x7f0000000d00)) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) semop(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x100000000000000) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 3m39.784837663s ago: executing program 6 (id=2511): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000000)={r6, 0xfffb}, 0x8) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x80002, 0x4) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000041401000000000002000000080001003f00000008000300"], 0x20}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3}, 0x8, 0xa20, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xa1798b1747472e26, 0x0) 3m38.609448012s ago: executing program 6 (id=2513): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20000, 0x1c6) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000600)={0x100, 0x6}, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8948, &(0x7f0000000200)={'vlan1\x00', @random="0106002010ff"}) r6 = add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000240)='asymmetric\x00', 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}}}}]}, 0x4c}}, 0x8c0) r10 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0xfffffff7, 0xfffffffc, 0x34565348, 0x2, 0x8, [{0x4, 0x4}, {0x8, 0x4}, {0x7f, 0x3}, {0x9, 0x9}, {0x4, 0x30000000}, {0x7, 0x38}, {0xe, 0x2}, {0xa, 0x12}], 0x3b, 0x6, 0x1, 0x0, 0x6}}) 3m38.575006624s ago: executing program 5 (id=2514): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="84010000", @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b80080009000000fffe08"], 0x184}}, 0x0) ftruncate(r0, 0x200c17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) timer_create(0x1, &(0x7f00000002c0)={0x0, 0x6, 0x4, @tid=r2}, &(0x7f0000000340)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d000000020000000100080022bf000000000000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020020"], 0x50) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0xfec00000, 0x4, 0x0, 0x4, 0x7, 0x80, 0x9, 0x7, 0x0, 0x8, 0x9}, {0x50000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xff, 0x2}, {0xb000, 0xf066ce738b004ad5, 0xc, 0x0, 0x2, 0xc5, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x4000, 0x8080000, 0xb, 0x0, 0x6, 0x6, 0x0, 0xfc, 0x6, 0x3f, 0x6}, {0xb000, 0x0, 0x9, 0x9, 0x2, 0x1, 0x2, 0x80, 0x10, 0xff, 0x6}, {0xf000, 0xeeee0000, 0x3, 0x5, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x2, 0x50000, 0x8, 0x3, 0x0, 0x7, 0x9, 0x60, 0x96, 0x0, 0x1, 0x5}, {0x809fffb, 0x8cc}, {0xdddd1000}, 0xddf8ffd3, 0x0, 0xd000, 0x110, 0xe, 0xf801, 0x3000, [0x80000004, 0x0, 0x10000, 0xfffffffffffdffff]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m38.415407722s ago: executing program 5 (id=2515): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8008, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f00000001c0)='./file1\x00', 0x44) openat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x52) (fail_nth: 5) 3m37.761846768s ago: executing program 5 (id=2516): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000007000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) 3m37.610631142s ago: executing program 5 (id=2518): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000010000104000000000000000000070000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}}, 0x0) 3m37.602449325s ago: executing program 6 (id=2519): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f00000000000008ffffe8850000007b00000000001100000095060000000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x10001, 0xffffffff, 0xffff, 0xe49}, 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d000000000000000800090012000000", 0x24) unshare(0x28000600) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x70bd28, 0x25dfdbff, {}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x1, 0x3, 0x0, {@ip4=@remote, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, r4}, 0xc) r5 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="00220500000007efb9f247"], 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m37.572303902s ago: executing program 4 (id=2520): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) fcntl$getownex(r1, 0x10, &(0x7f0000000480)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000380)={0x0, 0x0, 0x5b91ccaf, 0x6, 0x9, 0x5, 0x9, 0x5, {0x0, @in6={{0xa, 0x4e24, 0xfffffff9, @private0, 0x1ff}}, 0xf, 0x4, 0x1, 0x6, 0x2}}, &(0x7f0000000440)=0xb0) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000480)=@assoc_id=r3, &(0x7f00000004c0)=0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x24, 0x4a, 0x3, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x44090}, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x1, 0x0) sendto$inet6(r5, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf2500000007", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000005580)=""/102392, 0x18ff8) rt_sigqueueinfo(0xffffffffffffffff, 0x20, &(0x7f0000000080)={0xf, 0xafe5}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 3m36.244813686s ago: executing program 5 (id=2522): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x236100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x40000096, 0x0, 0x3}]}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0xc000) socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000280)={0x1f, 0xfffc, 0x3}, 0x6) openat$adsp1(0xffffffffffffff9c, 0x0, 0x151040, 0x0) bind$inet6(r5, 0x0, 0xfffffffffffffe21) r7 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x6, 0x101}, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000040c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/1, 0x1}, {&(0x7f00000003c0)=""/197, 0xc5}, {&(0x7f00000004c0)=""/47, 0x2f}], 0x3, &(0x7f0000000540)=""/250, 0xfa}, 0xc9}, {{&(0x7f0000000640)=@isdn, 0x80, &(0x7f0000000240)=[{&(0x7f00000006c0)=""/225, 0xe1}, {&(0x7f00000007c0)=""/150, 0x96}], 0x2, &(0x7f00000008c0)=""/122, 0x7a}, 0x4}, {{&(0x7f0000000940)=@nfc, 0x80, &(0x7f0000002980), 0x0, &(0x7f00000009c0)=""/114, 0x72}, 0x8}, {{&(0x7f0000002a80)=@generic, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000002b00)=""/173, 0xad}], 0x1}, 0x4}, {{&(0x7f0000002c00)=@rc={0x1f, @none}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002c80)=""/99, 0x63}, {&(0x7f0000002d00)=""/133, 0x85}, {&(0x7f0000002dc0)=""/65, 0x41}], 0x3}, 0x6f}, {{&(0x7f0000002e80)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000880)=""/30, 0x1e}, {&(0x7f0000000a40)=""/82, 0x52}, {&(0x7f0000000ac0)=""/226, 0xe2}, {&(0x7f0000000bc0)=""/30, 0x1e}], 0x4, &(0x7f0000002f00)=""/4114, 0x1012}, 0x3}], 0x6, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0d1}, 0x40) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r11, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r6, &(0x7f0000000040)="0300ffff0000", 0x6}]) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xda4, @private2, 0x80000000}], 0x1c) socket$nl_route(0x10, 0x3, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x3}, 0x20) 3m36.099282065s ago: executing program 4 (id=2523): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000002d0007012bbd7000fedbdf25067c00000c000180080063007f0000010c000380080001"], 0x2c}}, 0x4008030) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) (async) timerfd_settime(r2, 0x3, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) open(0x0, 0x2a0001, 0xd2) (async) open(0x0, 0x2a0001, 0xd2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xffffffff, 0x8000000008000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r9 = openat$cgroup_ro(r7, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x8) (async) sendfile(r8, r9, 0x0, 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) socket$key(0xf, 0x3, 0x2) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="02030f090900000000000000ffdbdf2502000a000080000067a0f3ac14d6e8c5b1f380a155e89e8cb9000000000f00020001000000000000000002fffffffb0300050000000000020000000800"/87], 0x48}}, 0x0) socket$inet6(0xa, 0x4, 0x2009) 3m35.898885939s ago: executing program 7 (id=2525): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="84010000", @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b80080009000000fffe08"], 0x184}}, 0x0) ftruncate(r0, 0x200c17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) timer_create(0x1, &(0x7f00000002c0)={0x0, 0x6, 0x4, @tid=r2}, &(0x7f0000000340)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d000000020000000100080022bf000000000000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020020"], 0x50) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0xfec00000, 0x4, 0x0, 0x4, 0x7, 0x80, 0x9, 0x7, 0x0, 0x8, 0x9}, {0x50000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xff, 0x2}, {0xb000, 0xf066ce738b004ad5, 0xc, 0x0, 0x2, 0xc5, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x4000, 0x8080000, 0xb, 0x0, 0x6, 0x6, 0x0, 0xfc, 0x6, 0x3f, 0x6}, {0xb000, 0x0, 0x9, 0x9, 0x2, 0x1, 0x2, 0x80, 0x10, 0xff, 0x6}, {0xf000, 0xeeee0000, 0x3, 0x5, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x2, 0x50000, 0x8, 0x3, 0x0, 0x7, 0x9, 0x60, 0x96, 0x0, 0x1, 0x5}, {0x809fffb, 0x8cc}, {0xdddd1000}, 0xddf8ffd3, 0x0, 0xd000, 0x110, 0xe, 0xf801, 0x3000, [0x80000004, 0x0, 0x10000, 0xfffffffffffdffff]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m35.506600504s ago: executing program 4 (id=2526): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x318, 0x11, 0x148, 0x318, 0x0, 0x3e8, 0x2a8, 0x2a8, 0x3e8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x318, 0x0, {0x0, 0xe0ffffffffff3f}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x9, 0x3f, 0x400000, 0x20000000, 0x3, 0x7, 0x78}}}, @common=@unspec=@bpf1={{0x230}, @pinned}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="10a2370281c1", 0x2, 0x10, [0x3e, 0x22, 0x16, 0x1f, 0x3b, 0x3e, 0x17, 0x13, 0x2b, 0x20, 0x13, 0xf, 0x24, 0x16, 0x24, 0x17], 0x1, 0x0, 0x10000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) 3m35.480135053s ago: executing program 7 (id=2527): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f0000000380)={0x28, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x6, 0x1, {0x0, 0x0, 0xffffffffffffffff, 0xfff}}, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000180)=[@wrmsr={0x65, 0x20, {0x40000070, 0x6}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0xad, 0x7, 0x87b, 0x2}}, @nested_load_code={0x12e, 0x62, {0x2, "b9c90100000f3266430f38825f00c461f9283fc4c1fb2c213e64670f01c964470fa1f347aeb9800000c00f3235000100000f30c13e5166baf80cb838d2bc80ef66bafc0c66b8a00066ef"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x4f7, 0x0, 0xeef, 0x1492}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_inject_event={0x180, 0xffffffffffffff25, {0x2, 0x2f, 0x2, 0x9, 0x1}}, @wrmsr={0x65, 0x20, {0x347, 0x6}}, @uexit={0x0, 0x18, 0x6}, @cpuid={0x64, 0x18, {0x0, 0x1}}], 0x1a2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48840}}, {{&(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040800}}], 0x2, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x24000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000000c0)) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r6, 0xc0905664, &(0x7f0000000340)={0x0, 0x0, '\x00', @raw_data=[0x2, 0x7, 0x2, 0xf3, 0x10, 0xfffff68b, 0x3ff, 0x0, 0x0, 0x0, 0x5, 0x8001, 0xc8a, 0x3ff, 0x2, 0x1, 0x6, 0x1, 0x7, 0x80000000, 0x3, 0x2, 0x80000001, 0x9, 0x69, 0x5, 0x3, 0x1, 0x101, 0x3, 0xbd, 0x4]}) r7 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r7, 0x40045612, &(0x7f0000000080)=0x2) openat$panthor(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r8 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r8, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r7, 0xc0485660, &(0x7f0000000000)={0x1, 0x1, @stop_pts=0x5}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x4, 0x1, 0x31237648, 0x1, 0x0, 0x1}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m35.325837799s ago: executing program 3 (id=2529): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800000700"}) 3m35.278302274s ago: executing program 3 (id=2530): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20000, 0x1c6) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000600)={0x100, 0x6}, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8948, &(0x7f0000000200)={'vlan1\x00', @random="0106002010ff"}) r6 = add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000240)='asymmetric\x00', 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}}}}]}, 0x4c}}, 0x8c0) r10 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0xfffffff7, 0xfffffffc, 0x34565348, 0x2, 0x8, [{0x4, 0x4}, {0x8, 0x4}, {0x7f, 0x3}, {0x9, 0x9}, {0x4, 0x30000000}, {0x7, 0x38}, {0xe, 0x2}, {0xa, 0x12}], 0x3b, 0x6, 0x1, 0x0, 0x6}}) 3m35.276609502s ago: executing program 4 (id=2531): syz_init_net_socket$llc(0x1a, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="2ef36644f3e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f29b378cfcfba410066ef48b800100000000000000f23d00f21f835100000080f23f80f015cbfc0b88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7c}], 0x1, 0x52, &(0x7f0000000200), 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000019080), 0x2000) read$msr(r4, &(0x7f0000032680)=""/102373, 0xffffffe2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4040002}, 0x4000080) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) r5 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r5, 0x8800000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r7 = dup3(0xffffffffffffffff, r6, 0x0) sendfile(r7, r5, 0x0, 0x1000009) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m34.290249273s ago: executing program 3 (id=2532): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000007a0000409500000000400000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x20, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r3, &(0x7f0000000300)=ANY=[], 0x10) r4 = getpid() r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1, r4}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x0, 0x0}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000300)={'veth0_vlan\x00', {0x2, 0x4e20, @remote}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000000)=""/20, 0x14}, {&(0x7f0000000200)=""/107, 0x6b}, {&(0x7f0000000400)=""/139, 0x8b}, {&(0x7f00000004c0)=""/14, 0xe}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/221, 0xdd}, {&(0x7f0000000640)=""/166, 0xa6}], 0x7) 3m32.508714045s ago: executing program 6 (id=2533): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000040)={0x0, 0xae, 0x3ff, 0x30315559, 0x0, [], [0x0, 0x0, 0x33f1], [0x8, 0x0, 0x7d], [0xfffffffffffffff5, 0x0, 0x800000000001, 0x2000000]}) 3m31.41401433s ago: executing program 3 (id=2534): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) r0 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x20000000, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x2002}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000280)={0x2e, 0x5, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x22, &(0x7f0000000200)=@new_dev={0x1, 0xeec}, 0x7e00}}, 0x0) 3m30.145485433s ago: executing program 3 (id=2535): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) getsockname$packet(r1, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 3m28.549656161s ago: executing program 6 (id=2536): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x2000000000000000}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@local, 0x4d3, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) 3m28.301959669s ago: executing program 3 (id=2537): symlinkat(&(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') symlinkat(&(0x7f0000000280)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x3a00cd0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0xc, 0x0) getpeername(r2, &(0x7f00000004c0)=@generic, &(0x7f0000000540)=0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x1ef40000) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1a0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x37}, [], [0x0, 0xff000000], '\x00', 'wg1\x00', {}, {}, 0x6, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x9, 0x7f, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) r4 = dup3(r3, r3, 0x80000) write$selinux_load(r4, &(0x7f0000000400)={0xf97cff8c, 0x8, 'SE Linux', "a85d37ef9db5ed634e7facda26eda4c23b0f57dcb62246c320955e72ef77af7d061e7baa9f595e380317de81cf2999c4e90ca5bf6a3f1b931ec62d7cc11846f2dcf86427efd09c283c125b19c5e848d598fa13af8c3f06ec451a73db06c8dd0c3e6f77de8673109f99e231f791122d64c3848980bbba"}, 0x86) setsockopt$inet_buf(r4, 0x0, 0x20, &(0x7f0000000080)="a0b2ad10818a545ac867704f3aeec98a2ab50ca6bfd1271c6e110f2d008e41c71eab735da0b33ac1c455e9e021d6a94a96c86709b3e6577c194672ce715ed96baa9d2fb54249", 0x46) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904", @ANYBLOB="03b5fee2602b71bfc4820e14d82aa9d3161939c9087019ab86bf97634258858fe5779a4c0e245b06d339c8b71cb11c4d1d9a9c63d396895238310ab86eea443677e7af8b8dcb205170bd90ea1d59cb0b90871a19c0a1004376da90a41fa52290f1e93889e4c41dc248c0b279b51328c594fff2d7829a981ea98b7c8f8875a1807095", @ANYRESOCT=r3, @ANYRES8=r3, @ANYRES16=r3, @ANYRESOCT=r3, @ANYRES64=r3], 0x0) 3m28.257812202s ago: executing program 5 (id=2538): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x4000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x20000040) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, 0x0) prlimit64(r3, 0x0, &(0x7f0000000180)={0xe, 0xb9f}, &(0x7f0000000200)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="3000000041000701fefeffff00000000017c0000040042801400018006000600800a000008001600", @ANYRES32=0x0, @ANYBLOB="040052767624266dc305028acef7e9050280"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001380)={'batadv_slave_0\x00', 0x0}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000017c0)=@bpf_lsm={0x1d, 0x22, &(0x7f0000001440)=@ringbuf={{}, {}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit, @ringbuf_query, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x522}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000015c0)='syzkaller\x00', 0x3, 0x9a, &(0x7f0000001600)=""/154, 0x40f00, 0x21, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001700)={0x5, 0x7, 0x8000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000038c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000002640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x81, 0x8, 0x4, 0xa5, 0xdc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000002680)='GPL\x00', 0xaa5b, 0x1000, &(0x7f00000026c0)=""/4096, 0x41100, 0x2, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003740)={0x5, 0xf, 0x8, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000003840)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000003880)=[{0x1, 0x1, 0x10, 0x5}, {0x3, 0x5, 0xa, 0x7}, {0x0, 0x5, 0x7, 0x9}], 0x10, 0x5}, 0x94) splice(r6, &(0x7f0000002480)=0x7, r4, &(0x7f00000024c0)=0x9, 0x2, 0x6) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003980)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x400c001}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r0, 0xc4fc9e906872338b, 0x0, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x6, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[@ANYBLOB="01000000080b0000ffffffff00000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0x400c0091}, 0x8000) sendmsg$can_bcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002500)={0x1, 0x0, 0x5, {}, {}, {0x2}, 0x1, @canfd={{0x1, 0x1, 0x1, 0x1}, 0x0, 0x2, 0x0, 0x0, "fd50a4ef2ba99a6e8218e48634f3a26ab2f93721583c0fa9154cec74dd277e416ca89b3e7c064d916253fba3b771bf961cd8ef2f4f4dcd016688f5a6f54bc62f"}}, 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x80) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020}, 0x2020) 2m52.951069743s ago: executing program 35 (id=2527): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f0000000380)={0x28, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x6, 0x1, {0x0, 0x0, 0xffffffffffffffff, 0xfff}}, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000180)=[@wrmsr={0x65, 0x20, {0x40000070, 0x6}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0xad, 0x7, 0x87b, 0x2}}, @nested_load_code={0x12e, 0x62, {0x2, "b9c90100000f3266430f38825f00c461f9283fc4c1fb2c213e64670f01c964470fa1f347aeb9800000c00f3235000100000f30c13e5166baf80cb838d2bc80ef66bafc0c66b8a00066ef"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x4f7, 0x0, 0xeef, 0x1492}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_inject_event={0x180, 0xffffffffffffff25, {0x2, 0x2f, 0x2, 0x9, 0x1}}, @wrmsr={0x65, 0x20, {0x347, 0x6}}, @uexit={0x0, 0x18, 0x6}, @cpuid={0x64, 0x18, {0x0, 0x1}}], 0x1a2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48840}}, {{&(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040800}}], 0x2, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x24000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000000c0)) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r6, 0xc0905664, &(0x7f0000000340)={0x0, 0x0, '\x00', @raw_data=[0x2, 0x7, 0x2, 0xf3, 0x10, 0xfffff68b, 0x3ff, 0x0, 0x0, 0x0, 0x5, 0x8001, 0xc8a, 0x3ff, 0x2, 0x1, 0x6, 0x1, 0x7, 0x80000000, 0x3, 0x2, 0x80000001, 0x9, 0x69, 0x5, 0x3, 0x1, 0x101, 0x3, 0xbd, 0x4]}) r7 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r7, 0x40045612, &(0x7f0000000080)=0x2) openat$panthor(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r8 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r8, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r7, 0xc0485660, &(0x7f0000000000)={0x1, 0x1, @stop_pts=0x5}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x4, 0x1, 0x31237648, 0x1, 0x0, 0x1}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m52.844134951s ago: executing program 36 (id=2531): syz_init_net_socket$llc(0x1a, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="2ef36644f3e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f29b378cfcfba410066ef48b800100000000000000f23d00f21f835100000080f23f80f015cbfc0b88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7c}], 0x1, 0x52, &(0x7f0000000200), 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000019080), 0x2000) read$msr(r4, &(0x7f0000032680)=""/102373, 0xffffffe2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4040002}, 0x4000080) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) r5 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r5, 0x8800000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r7 = dup3(0xffffffffffffffff, r6, 0x0) sendfile(r7, r5, 0x0, 0x1000009) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m52.746493242s ago: executing program 37 (id=2538): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x4000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x20000040) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, 0x0) prlimit64(r3, 0x0, &(0x7f0000000180)={0xe, 0xb9f}, &(0x7f0000000200)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="3000000041000701fefeffff00000000017c0000040042801400018006000600800a000008001600", @ANYRES32=0x0, @ANYBLOB="040052767624266dc305028acef7e9050280"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001380)={'batadv_slave_0\x00', 0x0}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000017c0)=@bpf_lsm={0x1d, 0x22, &(0x7f0000001440)=@ringbuf={{}, {}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit, @ringbuf_query, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x522}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000015c0)='syzkaller\x00', 0x3, 0x9a, &(0x7f0000001600)=""/154, 0x40f00, 0x21, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001700)={0x5, 0x7, 0x8000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000038c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000002640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x81, 0x8, 0x4, 0xa5, 0xdc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000002680)='GPL\x00', 0xaa5b, 0x1000, &(0x7f00000026c0)=""/4096, 0x41100, 0x2, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003740)={0x5, 0xf, 0x8, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000003840)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000003880)=[{0x1, 0x1, 0x10, 0x5}, {0x3, 0x5, 0xa, 0x7}, {0x0, 0x5, 0x7, 0x9}], 0x10, 0x5}, 0x94) splice(r6, &(0x7f0000002480)=0x7, r4, &(0x7f00000024c0)=0x9, 0x2, 0x6) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003980)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x400c001}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r0, 0xc4fc9e906872338b, 0x0, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x6, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[@ANYBLOB="01000000080b0000ffffffff00000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0x400c0091}, 0x8000) sendmsg$can_bcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002500)={0x1, 0x0, 0x5, {}, {}, {0x2}, 0x1, @canfd={{0x1, 0x1, 0x1, 0x1}, 0x0, 0x2, 0x0, 0x0, "fd50a4ef2ba99a6e8218e48634f3a26ab2f93721583c0fa9154cec74dd277e416ca89b3e7c064d916253fba3b771bf961cd8ef2f4f4dcd016688f5a6f54bc62f"}}, 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x80) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020}, 0x2020) 2m52.674415686s ago: executing program 38 (id=2536): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x2000000000000000}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@local, 0x4d3, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) 2m52.592959842s ago: executing program 39 (id=2537): symlinkat(&(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') symlinkat(&(0x7f0000000280)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x3a00cd0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0xc, 0x0) getpeername(r2, &(0x7f00000004c0)=@generic, &(0x7f0000000540)=0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x1ef40000) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1a0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x37}, [], [0x0, 0xff000000], '\x00', 'wg1\x00', {}, {}, 0x6, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x9, 0x7f, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) r4 = dup3(r3, r3, 0x80000) write$selinux_load(r4, &(0x7f0000000400)={0xf97cff8c, 0x8, 'SE Linux', "a85d37ef9db5ed634e7facda26eda4c23b0f57dcb62246c320955e72ef77af7d061e7baa9f595e380317de81cf2999c4e90ca5bf6a3f1b931ec62d7cc11846f2dcf86427efd09c283c125b19c5e848d598fa13af8c3f06ec451a73db06c8dd0c3e6f77de8673109f99e231f791122d64c3848980bbba"}, 0x86) setsockopt$inet_buf(r4, 0x0, 0x20, &(0x7f0000000080)="a0b2ad10818a545ac867704f3aeec98a2ab50ca6bfd1271c6e110f2d008e41c71eab735da0b33ac1c455e9e021d6a94a96c86709b3e6577c194672ce715ed96baa9d2fb54249", 0x46) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904", @ANYBLOB="03b5fee2602b71bfc4820e14d82aa9d3161939c9087019ab86bf97634258858fe5779a4c0e245b06d339c8b71cb11c4d1d9a9c63d396895238310ab86eea443677e7af8b8dcb205170bd90ea1d59cb0b90871a19c0a1004376da90a41fa52290f1e93889e4c41dc248c0b279b51328c594fff2d7829a981ea98b7c8f8875a1807095", @ANYRESOCT=r3, @ANYRES8=r3, @ANYRES16=r3, @ANYRESOCT=r3, @ANYRES64=r3], 0x0) 4.919992256s ago: executing program 2 (id=3192): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$netlink(0x10, 0x3, 0x12) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) 4.590695919s ago: executing program 1 (id=3198): r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xd1, &(0x7f0000000040)=0x20f, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x4008010) 4.261689593s ago: executing program 1 (id=3203): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r0, &(0x7f0000000180)=0x58, 0x3fffff) 4.109861212s ago: executing program 2 (id=3206): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3ff}]}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 3.638213483s ago: executing program 2 (id=3209): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@nested={0x18, 0xd3, 0x0, 0x0, [@typed={0x35, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 3.638035522s ago: executing program 9 (id=3210): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x6044040}, 0x0) 3.505526709s ago: executing program 9 (id=3211): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x82, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000200)={0xf000002, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000240)={0xfffffffc, 0x8f3, @value=0x91}) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r6 = add_key$user(&(0x7f00000002c0), &(0x7f0000000600)={'syz', 0x3}, &(0x7f0000000640)="b5e0edd76f4ca0522690153956b04487939a741f44661d47c5c9763c4d05823ad3f169007b6bc0cda690dfe3f7548740a86e03d542c100b9dd0be828", 0x3c, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000780)={0x0, r6}, &(0x7f00000007c0)=""/165, 0xa5, &(0x7f0000000940)={&(0x7f0000000880)={'hmac(sha256-avx2)\x00'}, &(0x7f00000008c0)}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f6"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000040)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x8, 0x0, [{}, {}, {0x200}, {}, {}, {0x3}]}}) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0x9, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3966, 0x80000001, 0x8000, 0xfffffffc, r3, r4, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r7, 0xf505, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r10, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r10, r0) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000340)="47f53c5715862461af6619c5e0a6d4d3c66579bbe3db17794b351533ac793e20ef52677f773233685f0a3f5af4d7efd58621b11ecd781e849d288bb111db35b6d10b09c96832df4f2f98916676ba1c04f8ad66217034ab2f07ad529f3bef817bb74c335688bd41ef26caa73b187d0f0db3487cf1db8ac0ca09fc9ea61973568c21468912b1e2ded5fa014decc79299c927757a4be36fa6efb18e89be364596dd9e1d6557a284fa2bd6dd89b37103ba9e55125bac1cb1d1e6cacde6817cc0cac11735d310fc9b0aaa1cabbdbb305d07673ea0139dace437ec60145cc653b85d", 0xdf}, {&(0x7f0000000440)="1415faed93139a492414f076c190771eaedfe68ef26c3f1ab8f0c9bc32513deffddb758e7777781b838ac437893125e765f1fac32ec7e7ff20393abe8c67dd1c2cb95cd84a8f736a073c7fd7678c06b959994819bdc3baead6a7e900e212ee757c3e7c14f3067b4813be47c7aa83a1d083861179da3190aa97b864af4bfbaff30c1799554391481435690071ec2b47d420220844bdfaf94d4c3d9a7d71e96712941392e74e945bb443aa7ca0c99cba12e260415b43897f5b92aae865257155f510763a2198e90046f7ceb3c91b53d777a299d60691a0fb50a8d7e0f37ad1fe100229d14f81909ffa43c92c434e03", 0xee}], 0x2) 3.489940251s ago: executing program 2 (id=3212): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0x48940) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/91) 3.226338361s ago: executing program 1 (id=3214): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) recvmmsg(r0, &(0x7f0000003c80)=[{{&(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f0000001840)=[{0x0}, {0x0}, {&(0x7f0000001740)=""/234, 0xea}], 0x3}, 0x5}, {{&(0x7f00000019c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001f00)=[{0x0}, {&(0x7f0000001b80)=""/72, 0x48}, {0x0}], 0x3, &(0x7f0000001f80)=""/246, 0xf6}, 0x6}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000002080)=""/228, 0xe4}, {&(0x7f0000002180)=""/135, 0x87}, {&(0x7f0000002240)=""/83, 0x53}, {&(0x7f00000022c0)=""/33, 0x21}, {&(0x7f0000003440)=""/111, 0x6f}], 0x5, &(0x7f0000003540)=""/42, 0x2a}, 0x6}, {{&(0x7f0000003580)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003600)=""/117, 0x75}, {&(0x7f0000003680)}, {&(0x7f00000036c0)=""/183, 0xb7}, {&(0x7f0000003780)=""/128, 0x80}, {0x0}, {0x0}, {0x0}], 0x7, &(0x7f0000003bc0)=""/169, 0xa9}, 0x8}], 0x4, 0x0, 0x0) 2.481587823s ago: executing program 0 (id=3219): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x4, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.315546642s ago: executing program 1 (id=3220): r0 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x40000) ppoll(&(0x7f0000000300)=[{r0, 0x4088}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 2.294508312s ago: executing program 0 (id=3221): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x6044040}, 0x0) 2.120875081s ago: executing program 0 (id=3223): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000001080)=0x91b) read$dsp(r1, &(0x7f0000001300)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb628678", 0x1e) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000004c0)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0xb6, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x5, 0xb6b, 0x100, 0x4, 0x1, 0x3, 0x9, 0x100000ff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bda, 0xb, 0x40, 0x40bef4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x5, 0x8, 0x752, 0x0, 0xb, 0x0, 0x10000, 0x9, 0xffffffff, 0x6, 0x4, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x1, 0x252, 0x81, 0xb, 0x4, 0x20004, 0xc4c, 0x4, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x9040, 0x4, 0x2, 0x40, 0x8, 0x20004, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2.050088113s ago: executing program 1 (id=3224): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f00008dc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.615924251s ago: executing program 1 (id=3225): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000580)={0xa1, 0x9, 0x9, 0x0, "46406c0ff8e97324106d6409a02711829bbbea0b41b7ed1a500dadf2091fafdb"}) 1.30947134s ago: executing program 2 (id=3227): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={0xffffffffffffffff, 0x3, 0x8, 0x2}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xe, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x4, 0xfffffffc, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x8100, r2, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 1.140539704s ago: executing program 2 (id=3229): syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x46942, 0x0) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x1, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0xb, 0xfffb, 0xa}, 0x0, 0x0}}) 1.140418109s ago: executing program 0 (id=3230): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000001c0)="5a93f8b25eabafa3997fcf0068bfdf4b6db2997a52846a38dac5a545e912cd6b4ced1fedd92c1fa0afab1c4ee981049fde0806bb84989a69b540d6910ca212cb9b5e65f99979c194938a9b13f2f5adf765d69aca3eb5a439537d7333352252c8b35a6361182331ce07c70ec53d713563d033d0de532272a01e00"/139, 0xf111973a6f6ab58}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="0000585195c18b846c30882ada03476b025b0800000000000000fa6303d4808d2b4955ecd0cfe25cd6425819161e305a8f387300895f1a75f5b7116d1e3ad0345ed0fc", 0x2}], 0x1}}], 0x3, 0x60cd894) 927.560742ms ago: executing program 9 (id=3231): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040e040203", @ANYRES64=r0], 0x7) 733.640262ms ago: executing program 8 (id=3233): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x6044040}, 0x0) 732.570989ms ago: executing program 9 (id=3234): syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0}, 0x4040004) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f000001b5c0)='personality\x00') preadv(r1, 0x0, 0x0, 0x182, 0x20010000) 702.186694ms ago: executing program 8 (id=3235): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x40000000076, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) openat$kvm(0xffffffffffffff9c, 0x0, 0x101302, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, 0x0) 573.840443ms ago: executing program 8 (id=3236): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000280)={0x93, 0x1, 0x5}) 465.811749ms ago: executing program 8 (id=3237): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}]}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x80000000}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 276.389354ms ago: executing program 0 (id=3238): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, r2, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r5, 0x8b1a, &(0x7f0000000040)) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000640)="000a18000000004000eb55000000000100aa34745a1945da08e815b218b175e62e90d9c5596d3ef4ddaae57cdcf90884", 0x30, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r7, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 255.066048ms ago: executing program 8 (id=3239): mount(0x0, 0x0, &(0x7f0000000000)='debugfs\x00', 0x0, &(0x7f00000000c0)='gid=1\x00nk]e\xe5\xcd\xeb\x12\xcdx\xa6\xfb\xc7\f5\xaf\xea)\xfc\x80\x81X\xbb\xd33\xdf\bbx\x10\xa3\xc8n\xa4\'') 147.35239ms ago: executing program 8 (id=3240): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, r2, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000080)="000a18000000090000eb55000000000100aa34745a1945da08e815b218b1752ad5eddec559244805bd238863fd069f79b57f04fcc20ed86b00", 0x39, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r6, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) 49.819582ms ago: executing program 9 (id=3241): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, 0x0) 21.567468ms ago: executing program 0 (id=3242): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x29}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x60}}]}, 0x1a0}}, 0x0) 0s ago: executing program 9 (id=3243): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x242, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$BLKCRYPTOPREPAREKEY(r0, 0xc040128b, &(0x7f0000000300)={&(0x7f0000000280)="26bc18abb41933283d596f5fc1d6e9597ffdaac7e181efaa986b35109047253da1f0563a479e3b2b66308fe254fb8e375aa2328c30ff50ada1f28e18abafa7", 0x3f, &(0x7f00000002c0)=""/43, 0x2b}) sendmmsg(r5, &(0x7f0000000180), 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_open_procfs$pagemap(r6, &(0x7f0000000000)) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x5, @none}, 0xe) shutdown(r7, 0x0) connect$bt_rfcomm(r7, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11}, 0xa) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) kernel console output (not intermixed with test programs): wn, defaulting to 1000 [ 839.141525][T16643] wlan0 speed is unknown, defaulting to 1000 [ 839.155427][T16643] wlan0 speed is unknown, defaulting to 1000 [ 839.508075][T15507] usb 10-1: USB disconnect, device number 10 [ 839.673981][T15507] usblp0: removed [ 839.754827][T16649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=16649 comm=syz.8.2722 [ 840.187919][T16625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2720'. [ 840.231894][ T30] audit: type=1400 audit(1784031425.023:1621): avc: denied { getopt } for pid=16623 comm="syz.0.2720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 840.301654][ T30] audit: type=1400 audit(1784031425.053:1622): avc: denied { write } for pid=16652 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 840.577318][ T24] ortek 0003:05A4:8003.0011: unknown main item tag 0x2 [ 840.613070][ T24] ortek 0003:05A4:8003.0011: unknown main item tag 0x2 [ 840.627777][T16659] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2727'. [ 840.642773][ T24] ortek 0003:05A4:8003.0011: item fetching failed at offset 9/40 [ 840.675254][ T24] ortek 0003:05A4:8003.0011: probe with driver ortek failed with error -22 [ 841.020880][ T24] usb 1-1: USB disconnect, device number 26 [ 841.042930][T16667] macvlan2: entered promiscuous mode [ 841.087904][T16667] macvlan2: entered allmulticast mode [ 841.164716][T16667] bond1: entered promiscuous mode [ 841.178258][T16667] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 841.243433][T16667] bond1: left promiscuous mode [ 841.493175][T16687] xt_hashlimit: size too large, truncated to 1048576 [ 841.639876][ T30] audit: type=1400 audit(1784031426.433:1623): avc: denied { write } for pid=16661 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 842.176155][ T30] audit: type=1400 audit(1784031426.963:1624): avc: denied { write } for pid=16700 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 843.671845][T16730] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 843.685261][T16730] Error validating options; rc = [-22] [ 844.757488][ T30] audit: type=1400 audit(1784031429.543:1625): avc: denied { write } for pid=16719 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 845.043827][ T30] audit: type=1400 audit(1784031429.833:1626): avc: denied { write } for pid=16747 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 845.142153][T16752] ipt_REJECT: TCP_RESET invalid for non-tcp [ 846.031432][T16764] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 846.737831][ T5625] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 846.748341][ T5625] Bluetooth: hci6: Injecting HCI hardware error event [ 846.759227][ T4929] Bluetooth: hci6: hardware error 0x00 [ 846.876462][ T30] audit: type=1400 audit(1784031431.663:1627): avc: denied { write } for pid=16755 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 846.959398][ T30] audit: type=1400 audit(1784031431.753:1628): avc: denied { write } for pid=16779 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 847.126512][T16784] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2750'. [ 847.632090][T16803] 9p: Bad value for 'wfdno' [ 847.737124][T16808] xt_hashlimit: max too large, truncated to 1048576 [ 847.932305][T16795] wlan0 speed is unknown, defaulting to 1000 [ 848.045429][ T30] audit: type=1400 audit(1784031432.833:1629): avc: denied { write } for pid=16789 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 849.007970][ T4929] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 849.047016][ T30] audit: type=1400 audit(1784031433.823:1630): avc: denied { write } for pid=16826 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 849.391871][T16843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2763'. [ 849.698038][T11715] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 849.949333][T11715] usb 2-1: Using ep0 maxpacket: 32 [ 849.980971][T11715] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.119533][T11715] usb 2-1: config 0 has no interfaces? [ 850.147090][T11715] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 850.169975][T11715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.284156][T11715] usb 2-1: config 0 descriptor?? [ 850.354822][T16836] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 850.497646][T16836] fuse: Unknown parameter '00000000000000000010' [ 850.568086][T11715] usb 2-1: USB disconnect, device number 40 [ 850.695545][ T30] audit: type=1400 audit(1784031435.483:1631): avc: denied { write } for pid=16855 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.719971][ T24] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 850.892474][ T30] audit: type=1400 audit(1784031435.683:1632): avc: denied { write } for pid=16874 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.921304][ T24] usb 10-1: config 7 has an invalid interface number: 223 but max is 0 [ 850.944211][ T24] usb 10-1: config 7 has no interface number 0 [ 850.982461][ T24] usb 10-1: config 7 interface 223 altsetting 7 has an invalid endpoint descriptor of length 2, skipping [ 851.043499][ T24] usb 10-1: config 7 interface 223 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 851.077864][ T24] usb 10-1: config 7 interface 223 has no altsetting 0 [ 851.102341][ T24] usb 10-1: New USB device found, idVendor=1199, idProduct=0023, bcdDevice=58.16 [ 851.113450][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.186040][ T24] usb 10-1: Product: syz [ 851.206412][ T24] usb 10-1: Manufacturer: syz [ 851.249124][ T24] usb 10-1: SerialNumber: syz [ 851.280029][ T30] audit: type=1400 audit(1784031436.073:1633): avc: denied { block_suspend } for pid=16880 comm="syz.1.2771" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 852.065230][ T24] sierra 10-1:7.223: Sierra USB modem converter detected [ 852.165214][ T24] usb 10-1: Sierra USB modem converter now attached to ttyUSB0 [ 852.302685][ T24] usb 10-1: USB disconnect, device number 11 [ 852.380387][T16902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2774'. [ 852.447043][ T24] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 852.483066][ T24] sierra 10-1:7.223: device disconnected [ 852.536326][ T30] audit: type=1400 audit(1784031437.323:1634): avc: denied { write } for pid=16879 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 852.715685][T16914] : renamed from vlan0 (while UP) [ 852.776704][ T30] audit: type=1400 audit(1784031437.563:1635): avc: denied { write } for pid=16915 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 852.857898][ T24] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 853.029048][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 853.050190][ T24] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 853.071517][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.096310][ T24] usb 10-1: Product: syz [ 853.112789][ T24] usb 10-1: Manufacturer: syz [ 853.118537][ T24] usb 10-1: SerialNumber: syz [ 853.164904][ T24] r8152-cfgselector 10-1: Unknown version 0x0000 [ 853.186578][ T24] r8152-cfgselector 10-1: config 0 descriptor?? [ 853.629116][T16897] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2773'. [ 853.641283][T16897] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2773'. [ 853.660547][ T24] r8152-cfgselector 10-1: Unknown version 0x0000 [ 853.671750][ T24] r8152-cfgselector 10-1: No union descriptors [ 853.711341][ T24] r8152-cfgselector 10-1: USB disconnect, device number 12 [ 854.140524][ T30] audit: type=1400 audit(1784031438.923:1636): avc: denied { write } for pid=16920 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 854.430871][ T30] audit: type=1400 audit(1784031439.203:1637): avc: denied { write } for pid=16945 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 854.748367][ T24] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 854.875682][T16955] Option 'TXƮ' to dns_resolver key: bad/missing value [ 854.964689][T16955] netlink: 'syz.0.2787': attribute type 1 has an invalid length. [ 855.002918][T16955] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2787'. [ 855.070910][ T24] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 855.094618][ T24] usb 10-1: can't read configurations, error -61 [ 855.542852][ T24] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 855.919832][ T24] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 855.927892][ T24] usb 10-1: can't read configurations, error -61 [ 855.949779][ T24] usb usb10-port1: attempt power cycle [ 856.043109][ T30] audit: type=1400 audit(1784031440.833:1638): avc: denied { write } for pid=16956 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 856.262346][ T30] audit: type=1400 audit(1784031441.053:1639): avc: denied { write } for pid=16986 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 856.307115][ T24] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 856.339672][ T30] audit: type=1400 audit(1784031441.123:1640): avc: denied { append } for pid=16983 comm="syz.2.2793" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 856.384311][ T24] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 856.394385][ T24] usb 10-1: can't read configurations, error -61 [ 856.424192][ T30] audit: type=1400 audit(1784031441.123:1641): avc: denied { map } for pid=16983 comm="syz.2.2793" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 856.538862][ T24] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 856.574172][ T24] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 856.587183][ T24] usb 10-1: can't read configurations, error -61 [ 856.618624][ T24] usb usb10-port1: unable to enumerate USB device [ 856.754329][ T30] audit: type=1804 audit(1784031441.543:1642): pid=17001 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2795" name="/newroot/66/file0" dev="tmpfs" ino=500 res=1 errno=0 [ 856.873742][ T30] audit: type=1400 audit(1784031441.663:1643): avc: denied { write } for pid=16991 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 857.280586][T17032] fuse: Bad value for 'fd' [ 857.287476][T17031] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2803'. [ 857.342026][T17032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 857.378199][T17032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 858.604817][T17032] bond0 (unregistering): Released all slaves [ 858.775204][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 859.078028][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 859.264790][ T10] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 859.446594][ T10] usb 2-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=54.41 [ 859.458492][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.483914][ T10] usb 2-1: Product: syz [ 859.488160][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 859.488174][ T30] audit: type=1400 audit(1784031444.273:1646): avc: denied { write } for pid=17034 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 859.489345][ T10] usb 2-1: Manufacturer: syz [ 859.553625][ T10] usb 2-1: SerialNumber: syz [ 859.582672][T15721] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 859.606933][ T30] audit: type=1400 audit(1784031444.393:1647): avc: denied { write } for pid=17068 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 859.708034][T11716] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 859.750264][T15721] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0xB has invalid maxpacket 12408, setting to 64 [ 859.770011][T15721] usb 9-1: config 0 interface 0 has no altsetting 0 [ 859.794996][T15721] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 859.820738][T15721] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 859.869294][T11716] usb 10-1: config 0 has an invalid descriptor of length 227, skipping remainder of the config [ 859.883414][T15721] usb 9-1: Product: syz [ 859.888564][ T10] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 859.890917][T17075] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 859.913198][T15721] usb 9-1: Manufacturer: syz [ 859.934454][T11716] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 859.949070][T15721] usb 9-1: SerialNumber: syz [ 859.963379][T15721] usb 9-1: config 0 descriptor?? [ 859.995612][T11716] usb 10-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 860.018227][T15721] usb 9-1: selecting invalid altsetting 0 [ 860.024534][T11716] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.082707][T11716] usb 10-1: config 0 descriptor?? [ 860.118888][ T10] usb 2-1: USB disconnect, device number 41 [ 860.127958][T11716] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 860.246969][T15721] usb 9-1: USB disconnect, device number 18 [ 860.433008][ T30] audit: type=1400 audit(1784031445.223:1648): avc: denied { write } for pid=17077 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 860.549207][ T30] audit: type=1400 audit(1784031445.333:1649): avc: denied { write } for pid=17094 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 860.637674][ T5273] 8021q: adding VLAN 0 to HW filter on device eth26 [ 861.194431][ T4929] Bluetooth: hci8: link tx timeout [ 861.206948][ T4929] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 861.547861][T17132] NILFS (nullb0): couldn't find nilfs on the device [ 861.558246][ T30] audit: type=1400 audit(1784031446.353:1650): avc: denied { mount } for pid=17131 comm="syz.8.2818" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 861.596940][ T30] audit: type=1400 audit(1784031446.353:1651): avc: denied { mounton } for pid=17131 comm="syz.8.2818" path="/67/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 861.876004][T17145] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2821'. [ 862.388230][T15508] usb 10-1: USB disconnect, device number 17 [ 863.063239][T17173] kvm: pic: single mode not supported [ 863.063335][T17173] kvm: pic: level sensitive irq not supported [ 863.089869][T17173] kvm: pic: non byte read [ 863.133383][T17173] kvm: pic: non byte read [ 863.148493][T17173] kvm: pic: single mode not supported [ 863.148554][T17173] kvm: pic: non byte read [ 863.174154][T17173] kvm: pic: non byte read [ 863.197175][T17173] kvm: pic: non byte read [ 863.213894][T17173] kvm: pic: level sensitive irq not supported [ 863.213941][T17173] kvm: pic: non byte read [ 863.227986][T15507] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 863.268199][T17173] kvm: pic: non byte read [ 863.285439][T17173] kvm: pic: non byte read [ 863.299119][ T5625] Bluetooth: hci8: command 0x0405 tx timeout [ 863.304208][T17173] kvm: pic: single mode not supported [ 863.306309][T17173] kvm: pic: level sensitive irq not supported [ 863.343984][T17173] kvm: pic: non byte read [ 863.368059][ T30] audit: type=1400 audit(1784031448.153:1652): avc: denied { write } for pid=17158 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 863.408021][T15507] usb 9-1: Using ep0 maxpacket: 32 [ 863.427896][T15507] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 863.476941][T15507] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 863.495535][T15507] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.510597][T15507] usb 9-1: Product: syz [ 863.593468][T15507] usb 9-1: Manufacturer: syz [ 863.598547][T15507] usb 9-1: SerialNumber: syz [ 863.612269][T15507] usb 9-1: config 0 descriptor?? [ 863.620119][T15507] quatech2 9-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 863.775887][ T30] audit: type=1400 audit(1784031448.563:1653): avc: denied { write } for pid=17188 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 864.502033][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 865.113499][T12089] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 865.837726][ T4929] Bluetooth: hci8: unexpected event for opcode 0x1005 [ 866.235487][ T30] audit: type=1400 audit(1784031451.023:1654): avc: denied { write } for pid=17196 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 866.328829][T17229] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 866.364115][T15507] usb 9-1: qt2_attach - failed to power on unit: -71 [ 866.391220][ T30] audit: type=1400 audit(1784031451.183:1655): avc: denied { write } for pid=17228 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 866.452877][T15507] quatech2 9-1:0.0: probe with driver quatech2 failed with error -71 [ 866.482304][T15507] usb 9-1: USB disconnect, device number 19 [ 867.117098][T17254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2843'. [ 867.319525][T11716] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 867.521192][T11716] usb 10-1: Using ep0 maxpacket: 16 [ 867.547545][T11716] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 145, changing to 11 [ 867.567677][T11716] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 32793, setting to 1024 [ 867.579740][T11716] usb 10-1: config 0 interface 0 has no altsetting 0 [ 867.586565][T11716] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 867.634877][T11716] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.663580][ T30] audit: type=1400 audit(1784031452.453:1656): avc: denied { write } for pid=17238 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 867.717223][T11716] usb 10-1: config 0 descriptor?? [ 867.875464][ T30] audit: type=1400 audit(1784031452.663:1657): avc: denied { write } for pid=17275 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 867.953623][ T30] audit: type=1400 audit(1784031452.743:1658): avc: denied { execute } for pid=17276 comm="syz.8.2848" path="/dev/audio1" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 867.998441][T15507] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 868.148010][T15507] usb 1-1: Using ep0 maxpacket: 8 [ 868.169219][T15507] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 868.260600][T15507] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.305226][T15507] usb 1-1: Product: syz [ 868.322572][T15507] usb 1-1: Manufacturer: syz [ 868.335807][T15507] usb 1-1: SerialNumber: syz [ 868.351807][T11716] usbhid 10-1:0.0: can't add hid device: -71 [ 868.359979][T15507] usb 1-1: config 0 descriptor?? [ 868.382249][T11716] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 868.400722][T15507] gspca_main: se401-2.14.0 probing 047d:5003 [ 868.435837][T11716] usb 10-1: USB disconnect, device number 18 [ 868.866913][T17300] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 869.205821][ T30] audit: type=1400 audit(1784031453.643:1659): avc: denied { mount } for pid=17297 comm="syz.1.2851" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 869.280794][ T30] audit: type=1400 audit(1784031454.073:1660): avc: denied { write } for pid=17281 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 869.580010][ T30] audit: type=1400 audit(1784031454.343:1661): avc: denied { write } for pid=17308 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 870.694328][ T30] audit: type=1400 audit(1784031455.473:1662): avc: denied { unmount } for pid=15256 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 870.700650][ T5273] 8021q: adding VLAN 0 to HW filter on device eth27 [ 870.830239][T15507] gspca_se401: read req failed req 0x06 error -19 [ 870.878111][ T1565] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 870.886663][T15507] usb 1-1: USB disconnect, device number 27 [ 871.877969][ T1565] usb 10-1: Using ep0 maxpacket: 32 [ 871.886644][ T1565] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.897513][ T1565] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 871.909575][ T1565] usb 10-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 871.919411][ T1565] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.927590][ T1565] usb 10-1: Product: syz [ 871.932325][ T1565] usb 10-1: Manufacturer: syz [ 871.937090][ T1565] usb 10-1: SerialNumber: syz [ 871.981667][ T1565] usb 10-1: config 0 descriptor?? [ 872.033794][ T30] audit: type=1400 audit(1784031456.823:1663): avc: denied { mount } for pid=17327 comm="syz.2.2859" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 872.058185][T17328] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 872.208751][ T1565] usb 10-1: USB disconnect, device number 19 [ 872.284799][T17328] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 872.324503][T17328] overlayfs: failed to look up (tracing) for ino (-66) [ 872.446084][ T30] audit: type=1400 audit(1784031457.233:1664): avc: denied { write } for pid=17316 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 872.561429][T17343] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2861'. [ 872.950550][ T30] audit: type=1400 audit(1784031457.283:1665): avc: denied { unmount } for pid=15242 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 872.970841][ T30] audit: type=1326 audit(1784031457.333:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17336 comm="syz.0.2861" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6674d9de59 code=0x7ffc0000 [ 873.053308][ T30] audit: type=1326 audit(1784031457.343:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17336 comm="syz.0.2861" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6674d9de59 code=0x7ffc0000 [ 873.131235][ T30] audit: type=1326 audit(1784031457.343:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17336 comm="syz.0.2861" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6674d9de59 code=0x7ffc0000 [ 873.232639][T17347] 9p: Bad value for 'rfdno' [ 873.255390][ T5273] 8021q: adding VLAN 0 to HW filter on device eth28 [ 873.374967][ T30] audit: type=1326 audit(1784031457.343:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17336 comm="syz.0.2861" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6674d9de59 code=0x7ffc0000 [ 873.417816][ T30] audit: type=1326 audit(1784031457.343:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17336 comm="syz.0.2861" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6674d9de59 code=0x7ffc0000 [ 873.629209][T17359] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2865'. [ 873.872160][T17363] fuse: Bad value for 'group_id' [ 873.877202][T17363] fuse: Bad value for 'group_id' [ 874.520503][ T30] audit: type=1326 audit(1784031457.343:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17336 comm="syz.0.2861" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f6674d9de59 code=0x7ffc0000 [ 874.850264][ T30] audit: type=1326 audit(1784031457.343:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17336 comm="syz.0.2861" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6674d9de59 code=0x7ffc0000 [ 874.970734][T17379] No source specified [ 875.000560][T17379] overlayfs: overlapping lowerdir path [ 875.032895][T17375] 9p: Bad value for 'wfdno' [ 875.076867][T17375] sysfs: cannot create duplicate filename '/class/ieee80211/1^!`l1&b0xUϔr$Gu' [ 875.122451][T17375] CPU: 1 UID: 0 PID: 17375 Comm: syz.8.2867 Tainted: G L syzkaller #0 PREEMPT(full) [ 875.122484][T17375] Tainted: [L]=SOFTLOCKUP [ 875.122492][T17375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 875.122504][T17375] Call Trace: [ 875.122512][T17375] [ 875.122520][T17375] dump_stack_lvl+0x100/0x190 [ 875.122549][T17375] sysfs_warn_dup.cold+0x1c/0x28 [ 875.122579][T17375] sysfs_do_create_link_sd+0x113/0x140 [ 875.122611][T17375] sysfs_create_link+0x61/0xc0 [ 875.122640][T17375] device_add+0x675/0x1970 [ 875.122670][T17375] ? __pfx_device_add+0x10/0x10 [ 875.122694][T17375] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 875.122717][T17375] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 875.122752][T17375] wiphy_register+0x2151/0x3110 [ 875.122789][T17375] ? __pfx_wiphy_register+0x10/0x10 [ 875.122817][T17375] ? __asan_memset+0x23/0x50 [ 875.122848][T17375] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 875.122880][T17375] ieee80211_register_hw+0x3053/0x4580 [ 875.122925][T17375] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 875.122954][T17375] ? __pfx___debug_object_init+0x10/0x10 [ 875.122981][T17375] ? find_held_lock+0x2b/0x80 [ 875.123011][T17375] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 875.123034][T17375] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 875.123063][T17375] ? __hrtimer_setup+0x208/0x330 [ 875.123092][T17375] mac80211_hwsim_new_radio+0x2acc/0x64c0 [ 875.123130][T17375] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 875.123153][T17375] ? __asan_memcpy+0x3c/0x60 [ 875.123184][T17375] hwsim_new_radio_nl+0xc6b/0x13f0 [ 875.123207][T17375] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 875.123233][T17375] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 875.123265][T17375] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 875.123303][T17375] genl_family_rcv_msg_doit+0x214/0x300 [ 875.123336][T17375] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 875.123376][T17375] ? bpf_lsm_capable+0x9/0x10 [ 875.123393][T17375] ? security_capable+0x80/0x260 [ 875.123419][T17375] ? ns_capable+0xd2/0xf0 [ 875.123444][T17375] genl_rcv_msg+0x560/0x800 [ 875.123478][T17375] ? __pfx_genl_rcv_msg+0x10/0x10 [ 875.123509][T17375] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 875.123536][T17375] netlink_rcv_skb+0x159/0x420 [ 875.123564][T17375] ? __pfx_genl_rcv_msg+0x10/0x10 [ 875.123595][T17375] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 875.123633][T17375] ? netlink_deliver_tap+0x1ae/0xcc0 [ 875.123664][T17375] genl_rcv+0x28/0x40 [ 875.123689][T17375] netlink_unicast+0x585/0x850 [ 875.123721][T17375] ? __pfx_netlink_unicast+0x10/0x10 [ 875.123763][T17375] netlink_sendmsg+0x8b0/0xda0 [ 875.123796][T17375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 875.123825][T17375] ? selinux_socket_sendmsg+0x198/0x2f0 [ 875.123854][T17375] ____sys_sendmsg+0xa4d/0xbe0 [ 875.123877][T17375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 875.123904][T17375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 875.123940][T17375] ___sys_sendmsg+0x190/0x1e0 [ 875.123966][T17375] ? __pfx____sys_sendmsg+0x10/0x10 [ 875.123988][T17375] ? __lock_acquire+0x49f/0x1a40 [ 875.124042][T17375] __sys_sendmsg+0x160/0x210 [ 875.124063][T17375] ? __pfx___sys_sendmsg+0x10/0x10 [ 875.124098][T17375] do_syscall_64+0x115/0x870 [ 875.124124][T17375] ? clear_bhb_loop+0x40/0x90 [ 875.124148][T17375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.124168][T17375] RIP: 0033:0x7f63ea79de59 [ 875.124187][T17375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.124205][T17375] RSP: 002b:00007f63eb718028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 875.124224][T17375] RAX: ffffffffffffffda RBX: 00007f63eaa25fa0 RCX: 00007f63ea79de59 [ 875.124237][T17375] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000d [ 875.124249][T17375] RBP: 00007f63ea833e6f R08: 0000000000000000 R09: 0000000000000000 [ 875.124260][T17375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 875.124271][T17375] R13: 00007f63eaa26038 R14: 00007f63eaa25fa0 R15: 00007ffcb4850cf8 [ 875.124297][T17375] [ 875.798098][T17386] fuse: fd is not a fuse device [ 875.964686][ T5273] 8021q: adding VLAN 0 to HW filter on device eth29 [ 876.598146][ T5823] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 876.626786][T17435] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2877'. [ 876.648996][T17435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 876.661012][T17435] batadv_slave_1: entered promiscuous mode [ 876.802894][ T5823] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0xA has invalid maxpacket 12408, setting to 64 [ 876.842970][ T5823] usb 9-1: config 0 interface 0 has no altsetting 0 [ 876.900660][ T5823] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 876.921913][ T5823] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 876.966263][ T5823] usb 9-1: Product: syz [ 876.990047][ T5823] usb 9-1: Manufacturer: syz [ 877.023797][ T5823] usb 9-1: SerialNumber: syz [ 877.082738][ T5823] usb 9-1: config 0 descriptor?? [ 877.131209][ T5823] usb 9-1: selecting invalid altsetting 0 [ 877.361645][T15507] usb 9-1: USB disconnect, device number 20 [ 877.380832][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 877.380843][ T30] audit: type=1400 audit(1784031462.173:1696): avc: denied { write } for pid=17433 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 877.611090][ T30] audit: type=1400 audit(1784031462.383:1697): avc: denied { write } for pid=17450 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 877.995195][T17458] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 878.001816][T17458] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 878.009744][T17458] vhci_hcd vhci_hcd.0: Device attached [ 878.063681][T17459] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2881'. [ 878.197945][ T5823] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 878.259459][T15721] usb 3-1: new low-speed USB device number 46 using dummy_hcd [ 878.281466][ T5823] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 878.462999][T15721] usb 3-1: config index 0 descriptor too short (expected 561, got 49) [ 878.480075][ T30] audit: type=1400 audit(1784031463.273:1698): avc: denied { write } for pid=17455 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 878.507775][T15721] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 878.529122][T15721] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 878.557838][T15721] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 878.576821][T15721] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 878.600150][T15721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.608506][T11716] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 878.629204][T15721] usb 3-1: config 0 descriptor?? [ 878.677926][ T993] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 878.772713][ T30] audit: type=1400 audit(1784031463.563:1699): avc: denied { write } for pid=17488 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 878.847888][T11716] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 878.852555][T15507] usb 3-1: USB disconnect, device number 46 [ 878.858243][T17460] usb 37-1: recv xbuf, 0 [ 879.109920][ T993] usb 10-1: config 0 has an invalid interface number: 214 but max is 0 [ 879.118664][ T30] audit: type=1400 audit(1784031463.693:1700): avc: denied { watch } for pid=17482 comm="syz.0.2887" path="/58/file0" dev="tmpfs" ino=318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 879.142397][T11716] usb 9-1: config 0 has no interfaces? [ 879.148391][ T993] usb 10-1: config 0 has no interface number 0 [ 879.154642][T11716] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 879.161087][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 879.164003][ T993] usb 10-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 97, changing to 4 [ 879.182626][T11716] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.190182][ T8915] vhci_hcd vhci_hcd.2: stop threads [ 879.192312][ T30] audit: type=1400 audit(1784031463.693:1701): avc: denied { watch_sb } for pid=17482 comm="syz.0.2887" path="/58/file0" dev="tmpfs" ino=318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 879.226768][ T8915] vhci_hcd vhci_hcd.2: release socket [ 879.228121][ T993] usb 10-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 24929, setting to 1023 [ 879.245611][T11716] usb 9-1: config 0 descriptor?? [ 879.250617][ T5823] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 879.262308][ T993] usb 10-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 879.273294][ T993] usb 10-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 879.291337][ T993] usb 10-1: Manufacturer: syz [ 879.291550][ T8915] vhci_hcd vhci_hcd.2: disconnect device [ 879.299374][ T993] usb 10-1: SerialNumber: syz [ 879.320415][ T5823] usb 37-1: device descriptor read/64, error -71 [ 879.341360][ T993] usb 10-1: config 0 descriptor?? [ 879.483185][ T993] usb 9-1: USB disconnect, device number 21 [ 879.508788][ T5823] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 879.579161][T17498] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 880.425672][ T30] audit: type=1400 audit(1784031465.213:1702): avc: denied { write } for pid=17497 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 880.543099][T17527] FAULT_INJECTION: forcing a failure. [ 880.543099][T17527] name failslab, interval 1, probability 0, space 0, times 0 [ 880.556677][T17527] CPU: 1 UID: 0 PID: 17527 Comm: syz.2.2893 Tainted: G L syzkaller #0 PREEMPT(full) [ 880.556705][T17527] Tainted: [L]=SOFTLOCKUP [ 880.556712][T17527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 880.556722][T17527] Call Trace: [ 880.556729][T17527] [ 880.556736][T17527] dump_stack_lvl+0x100/0x190 [ 880.556768][T17527] should_fail_ex.cold+0x5/0xa [ 880.556791][T17527] should_failslab+0xc2/0x120 [ 880.556814][T17527] kmem_cache_alloc_noprof+0x91/0x6a0 [ 880.556834][T17527] ? do_getname+0x35/0x390 [ 880.556860][T17527] do_getname+0x35/0x390 [ 880.556882][T17527] path_removexattrat+0x39e/0x5f0 [ 880.556906][T17527] ? __pfx_path_removexattrat+0x10/0x10 [ 880.556945][T17527] ? ksys_write+0x1ac/0x250 [ 880.556970][T17527] ? __pfx_ksys_write+0x10/0x10 [ 880.557001][T17527] __x64_sys_lremovexattr+0x5e/0x80 [ 880.557023][T17527] do_syscall_64+0x115/0x870 [ 880.557049][T17527] ? clear_bhb_loop+0x40/0x90 [ 880.557071][T17527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.557089][T17527] RIP: 0033:0x7efe6839de59 [ 880.557104][T17527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.557121][T17527] RSP: 002b:00007efe665f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6 [ 880.557139][T17527] RAX: ffffffffffffffda RBX: 00007efe68625fa0 RCX: 00007efe6839de59 [ 880.557150][T17527] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000200000000040 [ 880.557162][T17527] RBP: 00007efe665f6090 R08: 0000000000000000 R09: 0000000000000000 [ 880.557173][T17527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.557184][T17527] R13: 00007efe68626038 R14: 00007efe68625fa0 R15: 00007ffe0ed9a6d8 [ 880.557209][T17527] [ 880.837672][T15507] usb 10-1: USB disconnect, device number 20 [ 880.969396][ T30] audit: type=1400 audit(1784031465.753:1703): avc: denied { write } for pid=17529 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 881.093558][T17542] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2898'. [ 881.134543][ T5273] veth1_vlan: left promiscuous mode [ 881.195318][T17544] netlink: 'syz.8.2899': attribute type 4 has an invalid length. [ 881.256579][T17544] netlink: 'syz.8.2899': attribute type 21 has an invalid length. [ 881.297845][T17544] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2899'. [ 881.315732][T17544] netlink: 3 bytes leftover after parsing attributes in process `syz.8.2899'. [ 881.363859][T17552] netlink: 'syz.8.2899': attribute type 4 has an invalid length. [ 881.582128][T17559] xt_hashlimit: size too large, truncated to 1048576 [ 881.589184][T17559] xt_hashlimit: max too large, truncated to 1048576 [ 881.597836][ T5823] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 881.626598][T17560] xt_connbytes: Forcing CT accounting to be enabled [ 881.660201][T17560] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 881.882824][ T5823] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 881.903152][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.069839][ T5823] usb 3-1: Product: syz [ 882.136662][ T5823] usb 3-1: Manufacturer: syz [ 882.187103][T11715] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 882.549586][ T5823] usb 3-1: SerialNumber: syz [ 882.689786][ T5823] usb 3-1: config 0 descriptor?? [ 882.842634][T11715] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 882.883728][T11715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.894158][ T30] audit: type=1400 audit(1784031467.683:1704): avc: denied { write } for pid=17553 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 882.920332][T11715] usb 1-1: config 0 descriptor?? [ 882.933470][T17582] syzkaller0: tun_chr_ioctl cmd 1074025675 [ 882.946482][T17582] syzkaller0: persist enabled [ 882.964235][ T5823] usb 3-1: USB disconnect, device number 47 [ 883.161422][ T30] audit: type=1400 audit(1784031467.953:1705): avc: denied { bind } for pid=17550 comm="syz.2.2900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 883.283759][ T30] audit: type=1400 audit(1784031467.993:1706): avc: denied { connect } for pid=17580 comm="syz.9.2908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 883.348139][T17591] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2908'. [ 883.389516][ T30] audit: type=1400 audit(1784031468.053:1707): avc: denied { write } for pid=17589 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 883.460190][T17602] syzkaller0: tun_chr_ioctl cmd 1074025675 [ 883.503754][T17602] syzkaller0: persist enabled [ 883.618303][T15507] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 883.747836][ T5823] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 883.779785][T15507] usb 9-1: Using ep0 maxpacket: 16 [ 883.797072][T15507] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 883.820524][ T30] audit: type=1400 audit(1784031468.603:1708): avc: denied { mount } for pid=17619 comm="syz.2.2914" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 883.862896][T15507] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 883.885988][T15507] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 883.899422][T15507] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 883.919661][T15507] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 883.939536][ T5823] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 883.948173][T15507] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 883.978141][T15507] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 883.984033][ T5823] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 883.991742][T15507] usb 9-1: Manufacturer: syz [ 884.004973][T15507] usb 9-1: config 0 descriptor?? [ 884.038146][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 884.070778][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 884.091261][ T5823] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 884.116145][ T5823] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 884.126134][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 884.134445][ T5823] usb 2-1: Product: syz [ 884.144876][ T5823] usb 2-1: Manufacturer: syz [ 884.151084][ T5823] usb 2-1: SerialNumber: syz [ 884.158916][ T5749] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 884.197278][ T5823] usb 2-1: config 0 descriptor?? [ 884.233689][T17592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.260904][T17592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.275935][ T30] audit: type=1400 audit(1784031469.063:1709): avc: denied { bind } for pid=17566 comm="syz.0.2906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 884.343712][ T5749] usb 10-1: config 1 has an invalid interface number: 7 but max is 0 [ 884.352395][ T5749] usb 10-1: config 1 has no interface number 0 [ 884.367341][ T5749] usb 10-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 884.395363][ T5749] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 884.418712][ T5749] usb 10-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.426104][ T5823] radio-si470x 2-1:0.0: DeviceID=0x6f70 ChipID=0x2300 [ 884.450409][ T5749] usb 10-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 884.462620][ T5749] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.483670][ T5749] usb 10-1: Product: syz [ 884.499084][ T5749] usb 10-1: Manufacturer: syz [ 884.503992][ T5749] usb 10-1: SerialNumber: syz [ 884.517700][T17622] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 884.626341][ T5823] radio-si470x 2-1:0.0: software version 111, hardware version 112 [ 884.696797][T11715] samsung 0003:0419:0001.0012: hidraw0: USB HID vf0.00 Device [HID 0419:0001] on usb-dummy_hcd.0-1/input0 [ 884.743282][T17622] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 884.843718][ T5823] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 884.871908][ T5823] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 884.893522][ T5823] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 884.914375][ T5823] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 884.915932][T12526] usb 1-1: USB disconnect, device number 28 [ 884.991844][ T5823] usb 2-1: USB disconnect, device number 42 [ 885.072056][ T5749] sierra_net 10-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.9-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 885.288724][T17643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2918'. [ 885.316916][T17643] macvlan2: entered promiscuous mode [ 885.322534][T17643] macvlan2: entered allmulticast mode [ 885.328925][T17643] bond1: entered promiscuous mode [ 885.338906][T17643] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 885.348206][T17643] bond1: left promiscuous mode [ 885.365031][T17622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.381261][T17622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.414952][ T5749] sierra_net 10-1:1.7 wwan0: Submit SYNC failed -71 [ 885.434454][ T5749] sierra_net 10-1:1.7 wwan0: Send SYNC failed, status -71 [ 885.444184][ T5749] sierra_net 10-1:1.7 wwan0: Submit SYNC failed -71 [ 885.451126][ T5749] sierra_net 10-1:1.7 wwan0: Send SYNC failed, status -71 [ 885.492356][ T5749] usb 10-1: USB disconnect, device number 21 [ 885.537161][ T5749] sierra_net 10-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.9-1, Sierra Wireless USB-to-WWAN Modem [ 885.622725][T17590] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 886.064264][T17651] sysfs: cannot create duplicate filename '/class/ieee80211/1^!`l1&b0xUϔr$Gu' [ 886.076409][T17651] CPU: 1 UID: 0 PID: 17651 Comm: syz.2.2920 Tainted: G L syzkaller #0 PREEMPT(full) [ 886.076439][T17651] Tainted: [L]=SOFTLOCKUP [ 886.076447][T17651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 886.076459][T17651] Call Trace: [ 886.076466][T17651] [ 886.076475][T17651] dump_stack_lvl+0x100/0x190 [ 886.076506][T17651] sysfs_warn_dup.cold+0x1c/0x28 [ 886.076534][T17651] sysfs_do_create_link_sd+0x113/0x140 [ 886.076563][T17651] sysfs_create_link+0x61/0xc0 [ 886.076592][T17651] device_add+0x675/0x1970 [ 886.076619][T17651] ? __pfx_device_add+0x10/0x10 [ 886.076642][T17651] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 886.076666][T17651] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 886.076701][T17651] wiphy_register+0x2151/0x3110 [ 886.076735][T17651] ? __pfx_wiphy_register+0x10/0x10 [ 886.076763][T17651] ? __asan_memset+0x23/0x50 [ 886.076793][T17651] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 886.076826][T17651] ieee80211_register_hw+0x3053/0x4580 [ 886.076871][T17651] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 886.076902][T17651] ? __pfx___debug_object_init+0x10/0x10 [ 886.076930][T17651] ? find_held_lock+0x2b/0x80 [ 886.076959][T17651] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 886.076981][T17651] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 886.077009][T17651] ? __hrtimer_setup+0x208/0x330 [ 886.077037][T17651] mac80211_hwsim_new_radio+0x2acc/0x64c0 [ 886.077074][T17651] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 886.077096][T17651] ? __asan_memcpy+0x3c/0x60 [ 886.077125][T17651] hwsim_new_radio_nl+0xc6b/0x13f0 [ 886.077148][T17651] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 886.077174][T17651] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 886.077207][T17651] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 886.077244][T17651] genl_family_rcv_msg_doit+0x214/0x300 [ 886.077276][T17651] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 886.077315][T17651] ? bpf_lsm_capable+0x9/0x10 [ 886.077333][T17651] ? security_capable+0x80/0x260 [ 886.077357][T17651] ? ns_capable+0xd2/0xf0 [ 886.077382][T17651] genl_rcv_msg+0x560/0x800 [ 886.077416][T17651] ? __pfx_genl_rcv_msg+0x10/0x10 [ 886.077448][T17651] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 886.077479][T17651] netlink_rcv_skb+0x159/0x420 [ 886.077508][T17651] ? __pfx_genl_rcv_msg+0x10/0x10 [ 886.077539][T17651] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 886.077578][T17651] ? netlink_deliver_tap+0x1ae/0xcc0 [ 886.077607][T17651] genl_rcv+0x28/0x40 [ 886.077631][T17651] netlink_unicast+0x585/0x850 [ 886.077662][T17651] ? __pfx_netlink_unicast+0x10/0x10 [ 886.077705][T17651] netlink_sendmsg+0x8b0/0xda0 [ 886.077738][T17651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 886.077766][T17651] ? selinux_socket_sendmsg+0x198/0x2f0 [ 886.077794][T17651] ____sys_sendmsg+0xa4d/0xbe0 [ 886.077818][T17651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 886.077846][T17651] ? __pfx_____sys_sendmsg+0x10/0x10 [ 886.077881][T17651] ___sys_sendmsg+0x190/0x1e0 [ 886.077908][T17651] ? __pfx____sys_sendmsg+0x10/0x10 [ 886.077931][T17651] ? __lock_acquire+0x49f/0x1a40 [ 886.077984][T17651] __sys_sendmsg+0x160/0x210 [ 886.078004][T17651] ? __pfx___sys_sendmsg+0x10/0x10 [ 886.078039][T17651] do_syscall_64+0x115/0x870 [ 886.078065][T17651] ? clear_bhb_loop+0x40/0x90 [ 886.078090][T17651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.078110][T17651] RIP: 0033:0x7efe6839de59 [ 886.078128][T17651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.078146][T17651] RSP: 002b:00007efe665f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 886.078165][T17651] RAX: ffffffffffffffda RBX: 00007efe68625fa0 RCX: 00007efe6839de59 [ 886.078176][T17651] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 886.078186][T17651] RBP: 00007efe68433e6f R08: 0000000000000000 R09: 0000000000000000 [ 886.078198][T17651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 886.078209][T17651] R13: 00007efe68626038 R14: 00007efe68625fa0 R15: 00007ffe0ed9a6d8 [ 886.078235][T17651] [ 886.478725][ T5749] sierra_net 10-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 886.756692][T17663] FAT-fs (nullb0): bogus number of reserved sectors [ 886.773806][T17663] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 886.904737][T15721] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 887.082966][T15721] usb 2-1: Using ep0 maxpacket: 8 [ 887.571022][T15721] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 887.586898][T17672] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 887.590405][T15721] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 887.878224][T15721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.899744][T15721] usb 2-1: Product: syz [ 887.909115][T15721] usb 2-1: Manufacturer: syz [ 887.920701][T15721] usb 2-1: SerialNumber: syz [ 887.967448][T15721] usb 2-1: config 0 descriptor?? [ 888.017949][T15721] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 888.064139][T15721] usb 2-1: setting power ON [ 888.085061][T15721] dvb-usb: bulk message failed: -22 (2/0) [ 888.089391][T15507] rc_core: IR keymap rc-hauppauge not found [ 888.120881][ T30] audit: type=1400 audit(1784031472.913:1710): avc: denied { execute } for pid=17682 comm="syz.8.2929" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 888.124065][T15507] Registered IR keymap rc-empty [ 888.164833][T15721] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 888.196695][T15721] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 888.224148][ T30] audit: type=1400 audit(1784031472.983:1711): avc: denied { lock } for pid=17684 comm="syz.0.2930" path="socket:[65104]" dev="sockfs" ino=65104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 888.249283][T15721] usb 2-1: media controller created [ 888.281118][T15721] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 888.311708][T15507] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 888.367977][T15507] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 888.681674][T15507] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 888.721600][T15507] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input54 [ 888.755585][T15507] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 888.788904][T15507] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 888.821845][T15721] usb 2-1: selecting invalid altsetting 6 [ 888.829147][T15507] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 888.855574][T15721] usb 2-1: digital interface selection failed (-22) [ 888.868357][T15507] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 888.875441][T15721] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 888.898880][T15507] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 888.910473][T15721] usb 2-1: setting power OFF [ 888.938864][T15507] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 888.942620][T15721] dvb-usb: bulk message failed: -22 (2/0) [ 888.956458][T15721] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 888.978698][T15507] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 888.980245][ T30] audit: type=1400 audit(1784031473.753:1712): avc: denied { write } for pid=17675 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 889.007864][T15507] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 889.027633][T15721] (NULL device *): no alternate interface [ 889.063581][T15507] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 889.091226][ T30] audit: type=1400 audit(1784031473.873:1713): avc: denied { write } for pid=17713 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 889.109107][T15507] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 889.151531][T15507] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 889.176631][T15507] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 889.206952][T15507] usb 9-1: USB disconnect, device number 22 [ 889.785679][ T1565] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 889.900983][T17744] ipt_REJECT: TCP_RESET invalid for non-tcp [ 890.465677][ T1565] usb 10-1: Using ep0 maxpacket: 16 [ 890.621317][ T1565] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 890.747238][ T1565] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.766662][ T1565] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.801361][ T1565] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 890.846551][ T1565] usb 10-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 890.871737][T15721] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 890.907204][ T1565] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.945930][ T30] audit: type=1400 audit(1784031475.733:1714): avc: denied { write } for pid=17723 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 890.978010][T15721] usb 2-1: USB disconnect, device number 43 [ 891.085791][ T1565] usb 10-1: config 0 descriptor?? [ 891.148745][T11715] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 891.324645][T11715] usb 1-1: unable to get BOS descriptor or descriptor too short [ 891.349594][T11715] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 891.366180][T11715] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 891.406515][T11715] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 891.433245][T11715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.454131][T11715] usb 1-1: Product: syz [ 891.477809][T11715] usb 1-1: Manufacturer: syz [ 891.502715][T11715] usb 1-1: SerialNumber: syz [ 891.547194][T11715] usb 1-1: selecting invalid altsetting 1 [ 891.582955][ T1565] input: HID 0458:5013 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5013.0013/input/input55 [ 891.584226][T11715] usb 1-1: unit 6 not found! [ 891.619073][ T30] audit: type=1400 audit(1784031476.393:1715): avc: denied { write } for pid=17759 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 891.707517][T17727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.716321][T17727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.726241][T17727] [U] v3f"S/4:XTzWtlW= [ 891.732417][T17727] [U] J"e:" [ 891.936398][T17751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.943262][ T1565] input: HID 0458:5013 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5013.0013/input/input56 [ 892.041240][T17763] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 892.457993][T17751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.645324][ T1565] kye 0003:0458:5013.0013: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.9-1/input0 [ 892.826784][ T1565] usb 10-1: USB disconnect, device number 22 [ 893.445540][T17774] fido_id[17774]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 893.952466][ T30] audit: type=1400 audit(1784031478.743:1716): avc: denied { write } for pid=17771 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 894.334410][ T30] audit: type=1400 audit(1784031479.123:1717): avc: denied { write } for pid=17798 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 894.380834][T17799] nvme_fabrics: missing parameter 'transport=%s' [ 894.387256][T17799] nvme_fabrics: missing parameter 'nqn=%s' [ 894.434369][T17807] xt_hashlimit: max too large, truncated to 1048576 [ 894.716696][T11715] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 894.741829][T11715] usb 1-1: USB disconnect, device number 29 [ 894.812135][ T6342] udevd[6342]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 895.083465][T17826] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 895.096467][ T30] audit: type=1400 audit(1784031479.883:1718): avc: denied { write } for pid=17809 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 895.737826][T11715] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 895.856544][ T30] audit: type=1400 audit(1784031480.603:1719): avc: denied { write } for pid=17839 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 895.947625][T11715] usb 1-1: Using ep0 maxpacket: 16 [ 896.060515][T11715] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 896.088593][T11715] usb 1-1: config 0 has no interface number 0 [ 896.097300][T11715] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 896.290680][T11715] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 896.324692][T11715] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 896.354081][T11715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.388248][T11715] usb 1-1: Product: syz [ 896.406128][T11715] usb 1-1: Manufacturer: syz [ 896.420397][T11715] usb 1-1: SerialNumber: syz [ 896.442179][T11715] usb 1-1: config 0 descriptor?? [ 896.460108][T17822] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 896.483996][T17822] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 896.543093][T12088] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 896.557805][ T1565] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 896.636704][ T24] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 896.659485][T17867] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2964'. [ 896.674388][ T24] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 896.729531][ T1565] usb 10-1: not running at top speed; connect to a high speed hub [ 896.733339][T17822] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 896.756183][T17822] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 896.757312][ T1565] usb 10-1: config 159 has an invalid interface number: 137 but max is 0 [ 896.806594][ T1565] usb 10-1: config 159 has no interface number 0 [ 896.830258][ T1565] usb 10-1: config 159 interface 137 has no altsetting 0 [ 896.846335][ T30] audit: type=1400 audit(1784031481.633:1720): avc: denied { write } for pid=17853 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 896.879749][ T1565] usb 10-1: string descriptor 0 read error: -22 [ 896.888025][ T1565] usb 10-1: New USB device found, idVendor=06be, idProduct=0800, bcdDevice=c3.a8 [ 896.917532][ T1565] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.953319][ T1565] gspca_main: spca500-2.14.0 probing 06be:0800 [ 896.993501][T11715] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 897.010838][ T30] audit: type=1400 audit(1784031481.793:1721): avc: denied { write } for pid=17875 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 897.215786][T12526] usb 10-1: USB disconnect, device number 23 [ 897.233426][T17871] kernel profiling enabled (shift: 9) [ 897.276039][ T30] audit: type=1400 audit(1784031482.063:1722): avc: denied { write } for pid=17864 comm="syz.2.2965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 897.560593][T17894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2968'. [ 897.641881][ T30] audit: type=1400 audit(1784031482.423:1723): avc: denied { ioctl } for pid=17891 comm="syz.1.2968" path="socket:[65590]" dev="sockfs" ino=65590 ioctlcmd=0x6f06 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 897.700929][T15244] Bluetooth: hci7: command 0x0406 tx timeout [ 897.706994][T15238] Bluetooth: hci1: command 0x0406 tx timeout [ 897.713153][ T30] audit: type=1400 audit(1784031482.463:1724): avc: denied { write } for pid=17883 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 897.763078][T17894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17894 comm=syz.1.2968 [ 897.814555][T17900] 9pnet_fd: Insufficient options for proto=fd [ 898.583453][ T30] audit: type=1400 audit(1784031483.373:1725): avc: denied { write } for pid=17904 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 898.985431][ T30] audit: type=1400 audit(1784031483.773:1726): avc: denied { ioctl } for pid=17916 comm="syz.9.2974" path="socket:[65661]" dev="sockfs" ino=65661 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 899.055130][T11715] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 899.089192][T11715] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 899.749910][T11715] asix 1-1:0.34: probe with driver asix failed with error -71 [ 899.838002][T11715] usb 1-1: USB disconnect, device number 30 [ 900.084487][ T30] audit: type=1400 audit(1784031484.873:1727): avc: denied { write } for pid=17914 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 900.269071][ T30] audit: type=1400 audit(1784031485.043:1728): avc: denied { write } for pid=17940 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 900.544987][T17948] IPv6: NLM_F_CREATE should be specified when creating new route [ 900.558436][T17948] netlink: 'syz.0.2980': attribute type 1 has an invalid length. [ 900.848687][T15508] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 901.027929][T15508] usb 2-1: Using ep0 maxpacket: 16 [ 901.055878][T15508] usb 2-1: unable to get BOS descriptor or descriptor too short [ 901.067244][T17963] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 901.084659][T15508] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 901.113222][T15508] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 901.161739][T15508] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 901.193521][T15508] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 901.204864][ T30] audit: type=1400 audit(1784031485.973:1729): avc: denied { transfer } for pid=17965 comm="syz.0.2985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 901.229253][T15508] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.240854][T15508] usb 2-1: Product: syz [ 901.245034][T15508] usb 2-1: Manufacturer: syz [ 901.281475][T15508] usb 2-1: SerialNumber: syz [ 901.296256][ T30] audit: type=1400 audit(1784031486.083:1730): avc: denied { write } for pid=17952 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 901.456295][T17978] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2987'. [ 901.486482][ T30] audit: type=1400 audit(1784031486.273:1731): avc: denied { write } for pid=17976 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 901.791482][T15508] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 901.823778][T15508] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 901.847805][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 901.986381][T15508] usb 2-1: USB disconnect, device number 44 [ 902.011654][ T10] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 902.046695][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.054674][ T6342] udevd[6342]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 902.105045][ T10] usb 3-1: Product: syz [ 902.113657][ T10] usb 3-1: Manufacturer: syz [ 902.123738][ T10] usb 3-1: SerialNumber: syz [ 902.129442][T17995] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2992'. [ 902.146028][ T10] usb 3-1: config 0 descriptor?? [ 902.166803][T17995] netlink: 75 bytes leftover after parsing attributes in process `syz.9.2992'. [ 902.287796][T11716] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 902.456083][T17975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.482681][ T30] audit: type=1400 audit(1784031487.243:1732): avc: denied { read write } for pid=18002 comm="syz.0.2993" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 902.516765][T17975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.552308][ T30] audit: type=1400 audit(1784031487.243:1733): avc: denied { open } for pid=18002 comm="syz.0.2993" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 902.586849][ T30] audit: type=1400 audit(1784031487.243:1734): avc: denied { ioctl } for pid=18002 comm="syz.0.2993" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 902.618771][ T30] audit: type=1400 audit(1784031487.303:1735): avc: denied { create } for pid=17986 comm="syz.1.2989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 902.619623][T11716] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 902.650663][T11716] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.660551][T11716] usb 9-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00 [ 902.682472][T11716] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.697968][ T29] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 902.703735][T11716] usb 9-1: config 0 descriptor?? [ 902.848183][ T29] usb 1-1: device descriptor read/64, error -71 [ 903.047835][T18018] trusted_key: encrypted_key: master key parameter 'c0:H*Nʅfe<5w^n0&8J' is invalid [ 903.337631][T11716] hid-generic 0003:0925:8066.0015: unbalanced collection at end of report description [ 903.348022][T11716] hid-generic 0003:0925:8066.0015: probe with driver hid-generic failed with error -22 [ 903.382913][T18004] usb 9-1: USB disconnect, device number 23 [ 903.444586][ T29] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 903.490601][T11716] usb 3-1: USB disconnect, device number 48 [ 903.657298][ T29] usb 1-1: device descriptor read/64, error -71 [ 903.779880][ T29] usb usb1-port1: attempt power cycle [ 903.968049][ T1565] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 903.982492][T18038] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 904.129333][ T1565] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 904.146153][ T29] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 904.161387][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 904.161401][ T30] audit: type=1400 audit(1784031488.943:1782): avc: denied { mount } for pid=18049 comm="syz.2.2998" name="/" dev="ramfs" ino=66009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 904.171465][ T1565] usb 2-1: config 2 interface 1 has no altsetting 0 [ 904.216518][ T29] usb 1-1: device descriptor read/8, error -71 [ 904.237522][ T1565] usb 2-1: New USB device found, idVendor=1410, idProduct=a012, bcdDevice=c4.5f [ 904.249761][T18052] 9p: Bad value for 'rfdno' [ 904.260684][ T1565] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.287242][ T30] audit: type=1400 audit(1784031488.993:1783): avc: denied { create } for pid=18049 comm="syz.2.2998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 904.300854][ T1565] usb 2-1: Product: syz [ 904.330656][ T1565] usb 2-1: Manufacturer: syz [ 904.345464][ T1565] usb 2-1: SerialNumber: syz [ 904.370688][ T30] audit: type=1400 audit(1784031488.993:1784): avc: denied { setopt } for pid=18049 comm="syz.2.2998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 904.398848][ T30] audit: type=1400 audit(1784031488.993:1785): avc: denied { write } for pid=18049 comm="syz.2.2998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 904.458181][ T29] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 904.675764][ T29] usb 1-1: device descriptor read/8, error -71 [ 904.812866][ T29] usb usb1-port1: unable to enumerate USB device [ 905.181797][ T30] audit: type=1400 audit(1784031489.023:1786): avc: denied { shutdown } for pid=18049 comm="syz.2.2998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 905.261857][ T30] audit: type=1400 audit(1784031489.023:1787): avc: denied { connect } for pid=18049 comm="syz.2.2998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 905.365293][ T30] audit: type=1400 audit(1784031489.023:1788): avc: denied { execute } for pid=18049 comm="syz.2.2998" path="/file1" dev="ramfs" ino=66013 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 905.446956][ T30] audit: type=1400 audit(1784031489.043:1789): avc: denied { mounton } for pid=18051 comm="syz.9.2999" path="/79/file0" dev="tmpfs" ino=430 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 905.554454][ T30] audit: type=1400 audit(1784031489.193:1790): avc: denied { read write } for pid=18058 comm="syz.9.3001" name="video1" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 905.637098][ T30] audit: type=1400 audit(1784031489.193:1791): avc: denied { open } for pid=18058 comm="syz.9.3001" path="/dev/video1" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 905.744833][T18079] netlink: 'syz.9.3004': attribute type 9 has an invalid length. [ 906.650950][ T1565] usb 2-1: unknown number of interfaces: 2 [ 906.728608][ T29] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 906.772340][ T1565] usb 2-1: USB disconnect, device number 45 [ 906.922369][ T29] usb 1-1: config 150 has an invalid interface number: 204 but max is 2 [ 906.967642][ T29] usb 1-1: config 150 has an invalid descriptor of length 121, skipping remainder of the config [ 907.008073][ T29] usb 1-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 907.053029][ T29] usb 1-1: config 150 has no interface number 0 [ 907.077102][ T29] usb 1-1: config 150 interface 204 has no altsetting 0 [ 907.123278][ T29] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 907.172356][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.457506][ T29] usb 1-1: Product: syz [ 907.465458][ T29] usb 1-1: Manufacturer: syz [ 907.475137][ T29] usb 1-1: SerialNumber: syz [ 907.583048][T18115] 9p: Bad value for 'rfdno' [ 908.453422][T18127] IPv6: NLM_F_CREATE should be specified when creating new route [ 908.462324][T18126] netlink: 'syz.9.3014': attribute type 10 has an invalid length. [ 908.495188][T18127] netlink: 'syz.2.3013': attribute type 1 has an invalid length. [ 908.677082][T18126] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 908.705491][T18126] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 908.988761][ T29] xr_serial 1-1:150.204: skipping garbage [ 909.038817][ T29] usb 1-1: USB disconnect, device number 35 [ 909.379460][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 909.379471][ T30] audit: type=1400 audit(1784031494.163:1833): avc: denied { allowed } for pid=18144 comm="syz.8.3017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 909.458456][ T30] audit: type=1400 audit(1784031494.203:1834): avc: denied { map } for pid=18144 comm="syz.8.3017" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=66236 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 909.521695][ T30] audit: type=1400 audit(1784031494.203:1835): avc: denied { read write } for pid=18144 comm="syz.8.3017" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=66236 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 909.648060][ T29] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 909.677038][ T30] audit: type=1400 audit(1784031494.343:1836): avc: denied { map } for pid=18144 comm="syz.8.3017" path="socket:[66237]" dev="sockfs" ino=66237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 909.843594][ T29] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 909.857569][ T30] audit: type=1400 audit(1784031494.593:1837): avc: denied { read write } for pid=18151 comm="syz.9.3018" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 909.894765][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.928837][ T29] usb 1-1: config 0 descriptor?? [ 909.957100][T18160] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3019'. [ 910.002251][ T30] audit: type=1400 audit(1784031494.593:1838): avc: denied { read write } for pid=18151 comm="syz.9.3018" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 910.034590][ T30] audit: type=1400 audit(1784031494.593:1840): avc: denied { open } for pid=18151 comm="syz.9.3018" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 910.149276][T18170] fuse: Bad value for 'group_id' [ 910.179816][T18170] fuse: Bad value for 'group_id' [ 910.743339][ T30] audit: type=1400 audit(1784031494.593:1839): avc: denied { open } for pid=18151 comm="syz.9.3018" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 911.004080][ T30] audit: type=1400 audit(1784031494.593:1841): avc: denied { read write } for pid=18151 comm="syz.9.3018" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 911.227832][T11716] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 911.406314][ T30] audit: type=1400 audit(1784031494.593:1842): avc: denied { open } for pid=18151 comm="syz.9.3018" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 911.567797][T11716] usb 10-1: Using ep0 maxpacket: 32 [ 911.669941][T11716] usb 10-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 911.796468][T11716] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.937500][T11716] usb 10-1: Product: syz [ 911.995950][T11716] usb 10-1: Manufacturer: syz [ 912.051410][T11716] usb 10-1: SerialNumber: syz [ 912.171455][T11716] usb 10-1: config 0 descriptor?? [ 912.309160][T11716] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 912.919349][T11716] gspca_topro: reg_w err -110 [ 913.118717][T11716] gspca_topro: Sensor soi763a [ 913.326852][ T29] usb 1-1: Cannot set autoneg [ 913.346686][ T29] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 913.395358][ T29] usb 1-1: USB disconnect, device number 36 [ 913.421003][T18188] 9p: Bad value for 'rfdno' [ 913.997823][T15721] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 914.045202][T15508] usb 10-1: USB disconnect, device number 24 [ 914.233363][T15721] usb 2-1: Using ep0 maxpacket: 8 [ 914.365406][T15721] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 914.373985][T15721] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 914.386521][T15721] usb 2-1: config 0 has an invalid descriptor of length 7, skipping remainder of the config [ 914.397808][T15721] usb 2-1: config 0 has no interface number 0 [ 914.406090][T15721] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 914.427052][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 914.427067][ T30] audit: type=1400 audit(1784031499.213:1869): avc: denied { sqpoll } for pid=18218 comm="syz.9.3031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 914.463830][T15721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.483376][ T30] audit: type=1400 audit(1784031499.243:1870): avc: denied { create } for pid=18218 comm="syz.9.3031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 914.550601][T15721] usb 2-1: Product: syz [ 914.565923][ T30] audit: type=1400 audit(1784031499.253:1871): avc: denied { write } for pid=18193 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 914.567764][T15721] usb 2-1: Manufacturer: syz [ 914.610761][ T29] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 914.635055][T15721] usb 2-1: SerialNumber: syz [ 914.650225][ T30] audit: type=1400 audit(1784031499.303:1872): avc: denied { name_bind } for pid=18218 comm="syz.9.3031" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 914.674727][T15721] usb 2-1: config 0 descriptor?? [ 914.689106][T15721] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 914.696466][ T30] audit: type=1400 audit(1784031499.483:1873): avc: denied { write } for pid=18225 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 914.720613][T15721] uvcvideo 2-1:0.31: No valid video chain found. [ 914.792516][ T29] usb 3-1: device descriptor read/64, error -71 [ 915.038033][ T29] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 915.237811][ T29] usb 3-1: device descriptor read/64, error -71 [ 915.292831][ T30] audit: type=1400 audit(1784031500.083:1874): avc: denied { mmap_zero } for pid=18231 comm="syz.0.3033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 915.348388][ T29] usb usb3-port1: attempt power cycle [ 915.447796][ T5823] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 915.553867][T18240] netlink: 'syz.0.3035': attribute type 1 has an invalid length. [ 915.608445][T18240] bond1: entered promiscuous mode [ 915.620682][ T5823] usb 10-1: Using ep0 maxpacket: 16 [ 915.632009][ T5823] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 915.641274][T18240] bond1: entered allmulticast mode [ 915.646738][ T5823] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.667784][ T5823] usb 10-1: config 0 has no interface number 0 [ 915.674169][T18240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 915.681097][ T5823] usb 10-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 915.708090][ T29] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 915.723919][ T5823] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 915.728581][ T29] usb 3-1: device descriptor read/8, error -71 [ 915.750395][ T5823] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 915.773559][ T5823] usb 10-1: Product: syz [ 915.784392][ T5823] usb 10-1: SerialNumber: syz [ 915.801097][ T5823] usb 10-1: config 0 descriptor?? [ 915.826742][ T5823] usbhid 10-1:0.8: couldn't find an input interrupt endpoint [ 915.978053][ T29] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 916.019298][ T29] usb 3-1: device descriptor read/8, error -71 [ 916.161335][ T30] audit: type=1400 audit(1784031500.943:1875): avc: denied { bind } for pid=18232 comm="syz.9.3032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 916.163590][ T29] usb usb3-port1: unable to enumerate USB device [ 916.198889][ T30] audit: type=1400 audit(1784031500.983:1876): avc: denied { write } for pid=18232 comm="syz.9.3032" path="socket:[66982]" dev="sockfs" ino=66982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 916.281478][ T29] usb 10-1: USB disconnect, device number 25 [ 916.761402][ T29] usb 2-1: USB disconnect, device number 46 [ 917.210967][ T30] audit: type=1400 audit(1784031501.993:1877): avc: denied { getattr } for pid=18253 comm="syz.1.3040" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=66503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 917.362569][ T29] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 917.531250][ T29] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 917.552189][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.572541][ T29] usb 10-1: Product: syz [ 917.585091][ T30] audit: type=1400 audit(1784031502.373:1878): avc: denied { write } for pid=18257 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 917.613261][ T29] usb 10-1: Manufacturer: syz [ 917.728372][ T29] usb 10-1: SerialNumber: syz [ 917.796482][ T29] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 917.911342][ T24] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 919.167676][ T24] usb 10-1: Service connection timeout for: 256 [ 919.187469][ T24] ath9k_htc 10-1:1.0: ath9k_htc: Unable to initialize HTC services [ 919.215922][ T24] ath9k_htc: Failed to initialize the device [ 919.304168][ T5625] Bluetooth: hci7: unexpected event for opcode 0x1005 [ 919.903098][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 919.903114][ T30] audit: type=1400 audit(1784031504.693:1884): avc: denied { read write } for pid=18319 comm="syz.2.3049" name="usbmon8" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 919.956257][ T24] usb 10-1: ath9k_htc: USB layer deinitialized [ 919.977376][T18321] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3049'. [ 920.025342][ T30] audit: type=1400 audit(1784031504.723:1885): avc: denied { open } for pid=18319 comm="syz.2.3049" path="/dev/usbmon8" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 920.099258][ T24] usb 10-1: USB disconnect, device number 26 [ 920.154703][ T30] audit: type=1400 audit(1784031504.723:1886): avc: denied { map } for pid=18319 comm="syz.2.3049" path="/dev/usbmon8" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 920.256361][ T30] audit: type=1400 audit(1784031504.723:1887): avc: denied { execute } for pid=18319 comm="syz.2.3049" path="/dev/usbmon8" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 920.289851][T18326] trusted_key: encrypted_key: insufficient parameters specified [ 920.414350][ T30] audit: type=1400 audit(1784031504.733:1888): avc: denied { create } for pid=18319 comm="syz.2.3049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 920.489740][T18326] netlink: 'syz.9.3050': attribute type 10 has an invalid length. [ 920.497638][T18326] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3050'. [ 920.535478][T18326] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 920.544074][ T30] audit: type=1400 audit(1784031504.733:1889): avc: denied { setopt } for pid=18319 comm="syz.2.3049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 920.775037][ T30] audit: type=1400 audit(1784031504.753:1890): avc: denied { ioctl } for pid=18319 comm="syz.2.3049" path="socket:[67059]" dev="sockfs" ino=67059 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 920.838468][ T30] audit: type=1400 audit(1784031504.753:1891): avc: denied { bind } for pid=18319 comm="syz.2.3049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 920.859506][ T30] audit: type=1400 audit(1784031504.843:1892): avc: denied { ioctl } for pid=18319 comm="syz.2.3049" path="/dev/usbmon8" dev="devtmpfs" ino=741 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 920.887673][ T30] audit: type=1400 audit(1784031505.203:1893): avc: denied { ioctl } for pid=18328 comm="syz.2.3051" path="socket:[67640]" dev="sockfs" ino=67640 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 921.432548][T18337] orangefs: client-core tried to read wrong size [ 921.678040][T11716] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 921.841831][T11716] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 921.875370][T11716] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 921.913721][T11716] usb 3-1: config 0 has no interface number 0 [ 921.938199][T11716] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 921.990188][T11716] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 922.035879][T11716] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 922.130826][T11716] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 922.140637][T11716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.152545][T11716] usb 3-1: Product: syz [ 922.156772][T11716] usb 3-1: Manufacturer: syz [ 922.164467][T11716] usb 3-1: SerialNumber: syz [ 922.173960][T11716] usb 3-1: config 0 descriptor?? [ 922.831807][T11716] usb 3-1: USB disconnect, device number 53 [ 923.151759][ T5749] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 923.318014][ T5749] usb 1-1: Using ep0 maxpacket: 32 [ 923.348518][ T5749] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 923.370801][ T5749] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 923.437320][ T5749] usb 1-1: config 0 interface 0 has no altsetting 0 [ 923.450323][ T5749] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 923.466950][ T5749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.477140][ T5749] usb 1-1: Product: syz [ 923.482447][ T5749] usb 1-1: Manufacturer: syz [ 923.487261][ T5749] usb 1-1: SerialNumber: syz [ 923.496343][ T5749] usb 1-1: config 0 descriptor?? [ 923.537754][T18414] loop2: detected capacity change from 0 to 70 [ 923.558219][T18414] Dev loop2: unable to read RDB block 8 [ 923.563974][T18414] loop2: AHDI p1 p2 p3 [ 923.576937][T18414] loop2: p1 start 1601398130 is beyond EOD, truncated [ 923.577823][ T10] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 923.586238][T18414] loop2: p2 start 1702059890 is beyond EOD, truncated [ 923.654518][ T4978] loop2: AHDI p1 p2 p3 [ 923.678242][ T4978] loop2: p1 start 1601398130 is beyond EOD, truncated [ 923.706449][ T4978] loop2: p2 start 1702059890 is beyond EOD, truncated [ 923.795381][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 923.856524][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 923.883537][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 923.907044][ T5749] gs_usb 1-1:0.0: Couldn't get device config: (err=-71) [ 923.914280][ T29] IPVS: starting estimator thread 0... [ 923.930067][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.946758][ T5749] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 923.974773][ T10] usb 2-1: Product: ꪻ [ 923.985031][ T10] usb 2-1: Manufacturer: 벸昁鼮邘跚蟀뜩㩩풑ﱚ虥녤⿐슱缺툊⋚摈﮻쎰陓툡꺻긇⒜ү㐼擾塷שּׁᰍ鋘搬誈ᘼ䞩룙ᧃ烜巇憨듊齥룅穥舦蘋蒹舩렙ﭓ蜛୑숪诜つੀ閰襤䈭䑽䜗좗Ύ䒻䪳펋긑ᠿ䙢쉀 [ 924.044471][ T5749] usb 1-1: USB disconnect, device number 37 [ 924.061077][T18428] IPVS: using max 78 ests per chain, 187200 per kthread [ 924.077774][ T10] usb 2-1: SerialNumber: ࡠ [ 924.325220][ T10] usbhid 2-1:1.0: can't add hid device: -71 [ 924.342771][ T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 924.395732][ T10] usb 2-1: USB disconnect, device number 47 [ 925.309152][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 925.309164][ T30] audit: type=1400 audit(1784031510.103:1918): avc: denied { write } for pid=18435 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 925.454924][ T30] audit: type=1400 audit(1784031510.243:1919): avc: denied { create } for pid=18453 comm="syz.8.3073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 925.536422][T18457] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3073'. [ 925.617118][ T30] audit: type=1400 audit(1784031510.403:1920): avc: denied { write } for pid=18453 comm="syz.8.3073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 925.808000][ T30] audit: type=1400 audit(1784031510.403:1921): avc: denied { name_connect } for pid=18453 comm="syz.8.3073" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 925.918394][ T30] audit: type=1400 audit(1784031510.443:1922): avc: denied { write } for pid=18456 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 925.957289][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 925.966162][ T30] audit: type=1400 audit(1784031510.553:1923): avc: denied { append } for pid=18453 comm="syz.8.3073" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 926.246603][ T30] audit: type=1400 audit(1784031510.753:1924): avc: denied { read } for pid=18468 comm="syz.0.3075" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 926.262037][T18472] vxfs: WRONG superblock magic 00000000 at 1 [ 926.285353][T18472] vxfs: WRONG superblock magic 00000000 at 8 [ 926.291513][T18472] vxfs: can't find superblock. [ 926.546245][T18475] netlink: 'syz.9.3077': attribute type 1 has an invalid length. [ 926.554131][ T30] audit: type=1400 audit(1784031510.753:1925): avc: denied { open } for pid=18468 comm="syz.0.3075" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 926.638671][T18476] trusted_key: encrypted_key: insufficient parameters specified [ 926.655002][T18475] 8021q: adding VLAN 0 to HW filter on device bond1 [ 926.678689][ T30] audit: type=1400 audit(1784031511.013:1926): avc: denied { read } for pid=18468 comm="syz.0.3075" name="vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 926.817980][T18482] netlink: 9 bytes leftover after parsing attributes in process `syz.8.3076'. [ 927.028466][T18482] netlink: 9 bytes leftover after parsing attributes in process `syz.8.3076'. [ 927.041184][ T30] audit: type=1400 audit(1784031511.023:1927): avc: denied { open } for pid=18468 comm="syz.0.3075" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 927.153781][T18480] bond1: (slave veth0_to_bond): making interface the new active one [ 927.196924][T18480] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 927.306228][T18479] orangefs: client-core tried to read wrong size [ 927.403375][T18490] syzkaller0: entered promiscuous mode [ 927.435515][T18490] syzkaller0: entered allmulticast mode [ 927.568529][ T8915] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 927.626431][T11716] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 927.744043][T18501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=18501 comm=syz.9.3085 [ 928.269580][T11716] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 928.286377][T11716] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 928.300998][T11716] usb 3-1: config 0 has no interface number 0 [ 928.307431][T11716] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 928.382400][T11716] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 928.402850][T11716] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 928.422784][T11716] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 928.434472][T11716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.443839][T11716] usb 3-1: Product: syz [ 928.449159][T18510] No source specified [ 928.450941][T11716] usb 3-1: Manufacturer: syz [ 928.461561][T11716] usb 3-1: SerialNumber: syz [ 928.475211][T11716] usb 3-1: config 0 descriptor?? [ 928.487608][T18510] overlayfs: overlapping lowerdir path [ 928.722535][T18515] fuse: fd is not a fuse device [ 929.025949][T18530] bridge0: port 3(syz_tun) entered blocking state [ 929.043319][T18530] bridge0: port 3(syz_tun) entered disabled state [ 929.061819][T18530] syz_tun: entered allmulticast mode [ 929.084649][T18530] syz_tun: entered promiscuous mode [ 929.096095][T15508] usb 3-1: USB disconnect, device number 54 [ 929.122951][T18530] bridge0: port 3(syz_tun) entered blocking state [ 929.130283][T18530] bridge0: port 3(syz_tun) entered forwarding state [ 929.680339][T18550] binder: 18549:18550 ioctl c0306201 0 returned -14 [ 929.732910][T18550] binder: 18549:18550 ioctl 4018620d 0 returned -22 [ 929.786591][T18552] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3104'. [ 930.233098][T18566] bridge0: port 3(syz_tun) entered disabled state [ 930.253720][T18566] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.260997][T18566] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.532793][T18566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 930.567045][T18566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 930.665594][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 930.665611][ T30] audit: type=1400 audit(1784031515.453:1940): avc: denied { create } for pid=18571 comm="syz.1.3110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 930.723303][ T30] audit: type=1400 audit(1784031515.493:1941): avc: denied { write } for pid=18571 comm="syz.1.3110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 930.911076][ T30] audit: type=1400 audit(1784031515.703:1942): avc: denied { map } for pid=18577 comm="syz.2.3112" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 930.993468][ T30] audit: type=1400 audit(1784031515.723:1943): avc: denied { execute } for pid=18577 comm="syz.2.3112" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 931.074464][ T8921] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.123303][ T8921] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.161584][ T8921] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.222280][ T8921] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.364403][ T30] audit: type=1400 audit(1784031516.153:1944): avc: denied { write } for pid=18596 comm="syz.0.3118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 931.442285][ T30] audit: type=1400 audit(1784031516.153:1945): avc: denied { nlmsg_write } for pid=18596 comm="syz.0.3118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 931.624991][T18603] bridge0: port 3(syz_tun) entered blocking state [ 931.634707][T18603] bridge0: port 3(syz_tun) entered disabled state [ 931.671479][T18603] syz_tun: entered allmulticast mode [ 931.684527][T18603] syz_tun: entered promiscuous mode [ 931.731448][ T30] audit: type=1400 audit(1784031516.473:1946): avc: denied { ioctl } for pid=18602 comm="syz.2.3119" path="socket:[68844]" dev="sockfs" ino=68844 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 931.771907][T18603] bridge0: port 3(syz_tun) entered blocking state [ 931.778461][T18603] bridge0: port 3(syz_tun) entered forwarding state [ 931.858249][ T30] audit: type=1400 audit(1784031516.603:1947): avc: denied { bind } for pid=18604 comm="syz.9.3120" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 931.901542][T18614] binder_alloc: 18613: pid 18613 spamming oneway? 1 buffers allocated for a total size of 4096 [ 931.915908][ T30] audit: type=1400 audit(1784031516.603:1948): avc: denied { name_bind } for pid=18604 comm="syz.9.3120" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 931.941915][T18614] binder_alloc: 18613: pid 18613 spamming oneway? 2 buffers allocated for a total size of 5120 [ 931.971031][ T30] audit: type=1400 audit(1784031516.603:1949): avc: denied { node_bind } for pid=18604 comm="syz.9.3120" saddr=172.20.20.64 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 932.243212][T18605] wlan0 speed is unknown, defaulting to 1000 [ 932.825654][T18644] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3127'. [ 932.853115][T18654] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3130'. [ 932.888985][T18636] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3127'. [ 933.068174][T18652] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 933.087569][T18652] bond2: (slave macvlan2): making interface the new active one [ 933.097186][T18661] program syz.8.3131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 933.107625][T18652] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 933.248691][T18647] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.256205][T18647] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.378100][ T5625] Bluetooth: hci8: command 0x0405 tx timeout [ 933.552043][T18647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 933.559630][T11716] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 933.729741][T11716] usb 3-1: Using ep0 maxpacket: 32 [ 933.743616][T11716] usb 3-1: config 0 has no interfaces? [ 933.753777][T11716] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 933.773232][T11716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.798939][T11716] usb 3-1: Product: syz [ 933.821500][T11716] usb 3-1: Manufacturer: syz [ 933.833102][T11716] usb 3-1: SerialNumber: syz [ 933.857063][T18654] bond2: (slave macvlan2): Releasing active interface [ 933.874398][T11716] usb 3-1: config 0 descriptor?? [ 933.924284][T18654] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 933.950663][T18654] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 933.969065][T18654] bond0 (unregistering): Released all slaves [ 933.997230][ T36] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.011530][ T36] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.052598][ T36] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.083313][ T36] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.135621][ T5625] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 934.179029][ T5749] usb 3-1: USB disconnect, device number 55 [ 934.195476][ T5625] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 934.552239][T18707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3140'. [ 934.578863][T18709] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3141'. [ 934.725551][T18713] pim6reg: entered allmulticast mode [ 935.098363][T18715] netlink: 'syz.8.3144': attribute type 4 has an invalid length. [ 935.652216][T18740] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3154'. [ 936.048344][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 936.048360][ T30] audit: type=1400 audit(1784031520.843:1965): avc: denied { bind } for pid=18753 comm="syz.0.3160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 936.282317][T18760] netlink: 'syz.0.3161': attribute type 10 has an invalid length. [ 936.574866][T18638] Set syz1 is full, maxelem 65536 reached [ 936.583845][ T30] audit: type=1326 audit(1784031521.373:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18763 comm="syz.0.3164" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6674d9de59 code=0x7fc00000 [ 936.698791][ T30] audit: type=1400 audit(1784031521.483:1967): avc: denied { read } for pid=18763 comm="syz.0.3164" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 936.751975][T15508] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 936.765069][ T30] audit: type=1400 audit(1784031521.483:1968): avc: denied { open } for pid=18763 comm="syz.0.3164" path="/128/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 936.811632][ T30] audit: type=1326 audit(1784031521.533:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18763 comm="syz.0.3164" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6674d9de59 code=0x7fc00000 [ 936.865699][T18770] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 936.876465][T18770] block device autoloading is deprecated and will be removed. [ 936.896775][ T30] audit: type=1326 audit(1784031521.683:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18763 comm="syz.0.3164" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6674d9de59 code=0x7fc00000 [ 936.950296][T15508] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 936.963250][T15508] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 936.973438][T15508] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 937.003085][ T30] audit: type=1400 audit(1784031521.783:1971): avc: denied { mount } for pid=18773 comm="syz.0.3167" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 937.047687][T15508] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 937.057847][T15508] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.069331][ T30] audit: type=1400 audit(1784031521.783:1972): avc: denied { mounton } for pid=18773 comm="syz.0.3167" path="/129/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 937.097761][T15508] usb 3-1: Product: syz [ 937.102188][T15508] usb 3-1: Manufacturer: syz [ 937.108941][T15508] usb 3-1: SerialNumber: syz [ 937.120952][T15508] usb 3-1: config 0 descriptor?? [ 937.131886][ T30] audit: type=1400 audit(1784031521.783:1973): avc: denied { mount } for pid=18773 comm="syz.0.3167" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 937.232230][ T30] audit: type=1400 audit(1784031522.023:1974): avc: denied { unmount } for pid=15240 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 937.364301][T15508] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 937.382032][T18776] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.383748][T18782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3169'. [ 937.389484][T18776] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.553532][T18776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 937.577443][T18776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 937.705160][T12088] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.726955][T12088] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.746486][T12088] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.774482][T12088] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.799269][T18790] bridge0: port 3(syz_tun) entered blocking state [ 937.810975][T18790] bridge0: port 3(syz_tun) entered disabled state [ 937.834288][T18790] syz_tun: entered allmulticast mode [ 937.842809][T18790] syz_tun: entered promiscuous mode [ 937.852102][T18790] bridge0: port 3(syz_tun) entered blocking state [ 937.858612][T18790] bridge0: port 3(syz_tun) entered forwarding state [ 938.017663][T18802] syzkaller0: entered promiscuous mode [ 938.038324][T18802] syzkaller0: entered allmulticast mode [ 938.109441][T18805] Bluetooth: MGMT ver 1.23 [ 938.258233][T18810] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 938.273069][T18810] IPv6: addrconf: prefix option has invalid lifetime [ 938.286830][ C0] IPv6: addrconf: prefix option has invalid lifetime [ 938.287948][T18813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 938.294629][ C0] IPv6: addrconf: prefix option has invalid lifetime [ 938.367790][T11716] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 938.527925][T11716] usb 2-1: Using ep0 maxpacket: 32 [ 938.536021][T11716] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 938.546204][T11716] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 938.555164][T11716] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 938.564801][T11716] usb 2-1: config 1 has no interface number 0 [ 938.570981][T11716] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 938.582255][T11716] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 938.595242][T11716] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 938.604577][T11716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.620575][T11716] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 938.687806][T15721] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 938.862686][T15721] usb 1-1: Using ep0 maxpacket: 32 [ 938.871089][T15721] usb 1-1: config 0 has no interfaces? [ 938.889430][T15721] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 938.900049][T11716] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 938.908827][T15721] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 938.922298][T15721] usb 1-1: Product: syz [ 938.932798][T15721] usb 1-1: Manufacturer: syz [ 938.937471][T15721] usb 1-1: SerialNumber: syz [ 938.946879][T15721] usb 1-1: config 0 descriptor?? [ 939.006062][T18826] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3185'. [ 939.101455][T11716] usb 2-1: USB disconnect, device number 48 [ 939.117954][T11716] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 939.176848][T15721] usb 1-1: USB disconnect, device number 38 [ 939.226351][T18833] netlink: 'syz.9.3187': attribute type 10 has an invalid length. [ 939.501821][ T5749] usb 3-1: USB disconnect, device number 56 [ 939.786257][T15508] IPVS: starting estimator thread 0... [ 939.898018][T18854] IPVS: using max 43 ests per chain, 103200 per kthread [ 940.451712][T18884] Set syz1 is full, maxelem 1023 reached [ 941.097264][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 941.097281][ T30] audit: type=1400 audit(1784031525.883:1985): avc: denied { create } for pid=18899 comm="syz.9.3211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 941.163617][T18905] bridge0: port 3(syz_tun) entered disabled state [ 941.206217][T18905] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.213756][T18905] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.251842][ T30] audit: type=1400 audit(1784031526.043:1986): avc: denied { read } for pid=18911 comm="syz.1.3214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 941.456028][T18905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 941.465352][T18900] could not allocate digest TFM handle hmac(sha256-avx2) [ 941.515979][T18905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 941.578499][ T29] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 941.740134][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 941.772634][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 941.807082][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 941.849209][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 941.878188][ T30] audit: type=1400 audit(1784031526.673:1987): avc: denied { write } for pid=18909 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 941.908265][ T29] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 941.924114][ T29] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 941.949033][T18907] vxcan1: entered allmulticast mode [ 941.983750][ T8915] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.004275][ T29] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 942.025401][ T8915] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.052416][ T29] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 942.072495][ T8915] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.091715][ T29] usb 3-1: Manufacturer: syz [ 942.106892][ T29] usb 3-1: config 0 descriptor?? [ 942.116151][ T8915] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.172113][ T30] audit: type=1400 audit(1784031526.963:1988): avc: denied { write } for pid=18943 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 942.363063][ T5273] veth0_vlan: left promiscuous mode [ 942.429606][T11715] veth0_vlan: entered promiscuous mode [ 942.468145][ T30] audit: type=1400 audit(1784031527.263:1989): avc: denied { mount } for pid=18950 comm="syz.8.3222" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 942.538994][ T29] rc_core: IR keymap rc-hauppauge not found [ 942.562673][ T29] Registered IR keymap rc-empty [ 942.588698][ T29] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 942.629019][ T29] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 942.669665][ T29] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 942.721217][ T29] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input59 [ 942.757580][ T30] audit: type=1400 audit(1784031527.543:1990): avc: denied { read } for pid=4963 comm="acpid" name="event4" dev="devtmpfs" ino=3972 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 942.759067][ T29] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 942.835967][ T30] audit: type=1400 audit(1784031527.543:1991): avc: denied { open } for pid=4963 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3972 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 942.838359][ T29] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 942.908236][ T30] audit: type=1400 audit(1784031527.553:1992): avc: denied { ioctl } for pid=4963 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3972 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 942.938646][ T29] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 942.978333][ T29] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 943.007484][ T30] audit: type=1400 audit(1784031527.793:1993): avc: denied { write } for pid=18963 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 943.018473][ T29] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 943.089122][ T29] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 943.116930][ T30] audit: type=1400 audit(1784031527.903:1994): avc: denied { unmount } for pid=15232 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 943.150197][ T29] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 943.157955][T11715] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 943.177874][ T29] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 943.218187][ T29] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 943.248693][ T29] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 943.298165][ T29] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 943.317822][T11715] usb 2-1: Using ep0 maxpacket: 32 [ 943.324438][T11715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.336251][T11715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 943.340145][ T29] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 943.358741][T11715] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 943.385062][T11715] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 943.398717][ T29] usb 3-1: USB disconnect, device number 57 [ 943.411505][T11715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.436819][T11715] usb 2-1: config 0 descriptor?? [ 943.622412][T18996] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3232'. [ 943.867018][T11715] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0016/input/input60 [ 943.967975][T11715] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0016/input/input61 [ 944.033068][T11715] kye 0003:0458:5011.0016: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 944.087779][ T993] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 944.128421][T11715] usb 2-1: USB disconnect, device number 49 [ 944.248142][ T993] usb 3-1: Using ep0 maxpacket: 8 [ 944.262505][ T993] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 944.273926][ T993] usb 3-1: config 179 has no interface number 0 [ 944.281270][ T993] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 944.302315][ T993] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 944.335934][ T993] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 944.363597][ T993] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 944.398986][ T993] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 944.437029][ T993] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 944.466374][ T993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.486729][T19015] ------------[ cut here ]------------ [ 944.493285][T19015] hwsim_get_chanwidth(bw) > hwsim_get_chanwidth(confbw) [ 944.493299][T19015] WARNING: drivers/net/wireless/virtual/mac80211_hwsim_main.c:2248 at mac80211_hwsim_tx+0x16fe/0x26d0, CPU#1: syz.8.3240/19015 [ 944.496956][T18989] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 944.501045][T19015] Modules linked in: [ 944.524559][T19015] CPU: 1 UID: 0 PID: 19015 Comm: syz.8.3240 Tainted: G L syzkaller #0 PREEMPT(full) [ 944.535559][T19015] Tainted: [L]=SOFTLOCKUP [ 944.539921][T19015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 944.550011][T19015] RIP: 0010:mac80211_hwsim_tx+0x16fe/0x26d0 [ 944.555897][T19015] Code: 03 80 3c 02 00 0f 85 cc 0d 00 00 49 8b 86 08 38 00 00 c7 44 24 18 00 00 00 00 48 89 44 24 38 e9 d6 eb ff ff e8 23 b7 b4 fa 90 <0f> 0b 90 e9 dd f0 ff ff e8 15 b7 b4 fa 90 0f 0b 90 48 8b 3c 24 4c [ 944.575564][T19015] RSP: 0018:ffffc900048cf2d0 EFLAGS: 00010283 [ 944.581660][T19015] RAX: 000000000000040e RBX: ffff8880812103f0 RCX: ffffc9000767b000 [ 944.589670][T19015] RDX: 0000000000080000 RSI: ffffffff8755257d RDI: ffff888026a2ca80 [ 944.597660][T19015] RBP: 0000000000000014 R08: 0000000000000004 R09: 0000000000000014 [ 944.605667][T19015] R10: 0000000000000028 R11: 0000000000000000 R12: 0000000000000000 [ 944.613670][T19015] R13: dffffc0000000000 R14: 0000000000000028 R15: 0000000000000000 [ 944.621682][T19015] FS: 00007f63eb7186c0(0000) GS:ffff888123ee8000(0000) knlGS:0000000000000000 [ 944.630646][T19015] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 944.637230][T19015] CR2: 0000001b34905ff8 CR3: 000000003231e000 CR4: 00000000003526f0 [ 944.645257][T19015] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 944.653248][T19015] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 944.661260][T19015] Call Trace: [ 944.664537][T19015] [ 944.667471][T19015] ? ieee80211_tx_h_rate_ctrl+0xb09/0x1a20 [ 944.673330][T19015] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 944.678821][T19015] ? do_raw_spin_lock+0x128/0x260 [ 944.683859][T19015] ? mark_held_locks+0x40/0x70 [ 944.688670][T19015] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 944.694505][T19015] ieee80211_tx_frags+0x5c9/0xa70 [ 944.699592][T19015] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 944.705154][T19015] __ieee80211_tx+0x145/0x5b0 [ 944.709890][T19015] ieee80211_tx+0x336/0x460 [ 944.714400][T19015] ? __pfx_ieee80211_tx+0x10/0x10 [ 944.719486][T19015] ? __pfx_ieee80211_parse_tx_radiotap+0x10/0x10 [ 944.725820][T19015] ? ieee80211_skb_resize+0x119/0x670 [ 944.731241][T19015] ? ieee80211_set_qos_hdr+0x2c1/0x3f0 [ 944.736711][T19015] ieee80211_xmit+0x30f/0x3e0 [ 944.741427][T19015] ieee80211_monitor_start_xmit+0xf09/0x12b0 [ 944.747430][T19015] ? __pfx_ieee80211_monitor_start_xmit+0x10/0x10 [ 944.753902][T19015] dev_hard_start_xmit+0x121/0x760 [ 944.759058][T19015] __dev_queue_xmit+0x1b9d/0x4940 [ 944.764095][T19015] ? find_held_lock+0x2b/0x80 [ 944.768805][T19015] ? __might_fault+0xc5/0x140 [ 944.773499][T19015] ? __pfx___dev_queue_xmit+0x10/0x10 [ 944.778921][T19015] ? _copy_from_iter+0x270/0x1690 [ 944.783965][T19015] ? __pfx__copy_from_iter+0x10/0x10 [ 944.789292][T19015] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 944.794780][T19015] ? packet_parse_headers+0x5ae/0x800 [ 944.800193][T19015] ? packet_parse_headers+0x5ba/0x800 [ 944.805570][T19015] ? packet_parse_headers+0x205/0x800 [ 944.811008][T19015] ? __pfx_packet_parse_headers+0x10/0x10 [ 944.816755][T19015] packet_xmit+0x243/0x310 [ 944.821228][T19015] packet_sendmsg+0x319a/0x5100 [ 944.826096][T19015] ? avc_has_perm_noaudit+0x350/0x3b0 [ 944.831525][T19015] ? sock_has_perm+0x25a/0x2f0 [ 944.836298][T19015] ? __pfx_sock_has_perm+0x10/0x10 [ 944.841462][T19015] ? __pfx_packet_sendmsg+0x10/0x10 [ 944.846688][T19015] ? __might_fault+0xc5/0x140 [ 944.851422][T19015] ? selinux_socket_sendmsg+0x198/0x2f0 [ 944.856980][T19015] __sys_sendto+0x48b/0x4e0 [ 944.861541][T19015] ? __pfx_packet_sendmsg+0x10/0x10 [ 944.867072][T19015] ? __pfx___sys_sendto+0x10/0x10 [ 944.872152][T19015] ? fd_install+0x223/0x580 [ 944.876692][T19015] ? xfd_validate_state+0x129/0x190 [ 944.882028][T19015] __x64_sys_sendto+0xe0/0x1c0 [ 944.886806][T19015] ? do_syscall_64+0x90/0x870 [ 944.891522][T19015] ? lockdep_hardirqs_on+0x78/0x100 [ 944.896742][T19015] do_syscall_64+0x115/0x870 [ 944.896780][T11715] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input62 [ 944.901365][T19015] ? clear_bhb_loop+0x40/0x90 [ 944.901397][T19015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.901417][T19015] RIP: 0033:0x7f63ea79de59 [ 944.926794][T19015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 944.946464][T19015] RSP: 002b:00007f63eb718028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 944.954904][T19015] RAX: ffffffffffffffda RBX: 00007f63eaa25fa0 RCX: 00007f63ea79de59 [ 944.963655][T19015] RDX: 0000000000000039 RSI: 0000200000000080 RDI: 0000000000000007 [ 944.971657][T19015] RBP: 00007f63ea833e6f R08: 0000200000000380 R09: 0000000000000014 [ 944.979677][T19015] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000000 [ 944.987647][T19015] R13: 00007f63eaa26038 R14: 00007f63eaa25fa0 R15: 00007ffcb4850cf8 [ 944.995691][T19015] [ 944.998739][T19015] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 945.006018][T19015] CPU: 1 UID: 0 PID: 19015 Comm: syz.8.3240 Tainted: G L syzkaller #0 PREEMPT(full) [ 945.016969][T19015] Tainted: [L]=SOFTLOCKUP [ 945.021287][T19015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 945.031345][T19015] Call Trace: [ 945.034605][T19015] [ 945.037532][T19015] dump_stack_lvl+0x100/0x190 [ 945.042204][T19015] vpanic+0x552/0x970 [ 945.046175][T19015] ? __pfx_vpanic+0x10/0x10 [ 945.050680][T19015] panic+0xd1/0xe0 [ 945.054386][T19015] ? __pfx_panic+0x10/0x10 [ 945.058807][T19015] check_panic_on_warn.cold+0x19/0x34 [ 945.064181][T19015] ? mac80211_hwsim_tx+0x16fe/0x26d0 [ 945.069467][T19015] __warn.cold+0x191/0x318 [ 945.073883][T19015] __report_bug+0x30f/0x440 [ 945.078397][T19015] ? mac80211_hwsim_tx+0x16fe/0x26d0 [ 945.083677][T19015] ? __pfx___report_bug+0x10/0x10 [ 945.088682][T19015] ? __skb_flow_dissect+0x3d6/0x6c30 [ 945.093967][T19015] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 945.099856][T19015] ? __skb_flow_dissect+0x1dec/0x6c30 [ 945.105216][T19015] ? find_held_lock+0x2b/0x80 [ 945.109905][T19015] ? is_bpf_text_address+0x8a/0x1a0 [ 945.115108][T19015] ? ieee80211_encrypt_tx_skb+0x2df/0x430 [ 945.120832][T19015] ? mac80211_hwsim_tx+0x16fe/0x26d0 [ 945.126114][T19015] report_bug+0xb2/0x220 [ 945.130359][T19015] ? mac80211_hwsim_tx+0x16fe/0x26d0 [ 945.135641][T19015] handle_bug+0x16a/0x2a0 [ 945.139965][T19015] exc_invalid_op+0x17/0x50 [ 945.144446][T19015] asm_exc_invalid_op+0x1a/0x20 [ 945.149294][T19015] RIP: 0010:mac80211_hwsim_tx+0x16fe/0x26d0 [ 945.155182][T19015] Code: 03 80 3c 02 00 0f 85 cc 0d 00 00 49 8b 86 08 38 00 00 c7 44 24 18 00 00 00 00 48 89 44 24 38 e9 d6 eb ff ff e8 23 b7 b4 fa 90 <0f> 0b 90 e9 dd f0 ff ff e8 15 b7 b4 fa 90 0f 0b 90 48 8b 3c 24 4c [ 945.174780][T19015] RSP: 0018:ffffc900048cf2d0 EFLAGS: 00010283 [ 945.180846][T19015] RAX: 000000000000040e RBX: ffff8880812103f0 RCX: ffffc9000767b000 [ 945.188809][T19015] RDX: 0000000000080000 RSI: ffffffff8755257d RDI: ffff888026a2ca80 [ 945.196775][T19015] RBP: 0000000000000014 R08: 0000000000000004 R09: 0000000000000014 [ 945.204741][T19015] R10: 0000000000000028 R11: 0000000000000000 R12: 0000000000000000 [ 945.212704][T19015] R13: dffffc0000000000 R14: 0000000000000028 R15: 0000000000000000 [ 945.220680][T19015] ? mac80211_hwsim_tx+0x16fd/0x26d0 [ 945.225968][T19015] ? ieee80211_tx_h_rate_ctrl+0xb09/0x1a20 [ 945.231760][T19015] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 945.237214][T19015] ? do_raw_spin_lock+0x128/0x260 [ 945.242238][T19015] ? mark_held_locks+0x40/0x70 [ 945.247002][T19015] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 945.252809][T19015] ieee80211_tx_frags+0x5c9/0xa70 [ 945.257841][T19015] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 945.263398][T19015] __ieee80211_tx+0x145/0x5b0 [ 945.268077][T19015] ieee80211_tx+0x336/0x460 [ 945.272571][T19015] ? __pfx_ieee80211_tx+0x10/0x10 [ 945.277611][T19015] ? __pfx_ieee80211_parse_tx_radiotap+0x10/0x10 [ 945.283936][T19015] ? ieee80211_skb_resize+0x119/0x670 [ 945.289312][T19015] ? ieee80211_set_qos_hdr+0x2c1/0x3f0 [ 945.294765][T19015] ieee80211_xmit+0x30f/0x3e0 [ 945.299422][T19015] ieee80211_monitor_start_xmit+0xf09/0x12b0 [ 945.305402][T19015] ? __pfx_ieee80211_monitor_start_xmit+0x10/0x10 [ 945.311818][T19015] dev_hard_start_xmit+0x121/0x760 [ 945.316932][T19015] __dev_queue_xmit+0x1b9d/0x4940 [ 945.321973][T19015] ? find_held_lock+0x2b/0x80 [ 945.326652][T19015] ? __might_fault+0xc5/0x140 [ 945.331335][T19015] ? __pfx___dev_queue_xmit+0x10/0x10 [ 945.336720][T19015] ? _copy_from_iter+0x270/0x1690 [ 945.341750][T19015] ? __pfx__copy_from_iter+0x10/0x10 [ 945.347040][T19015] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 945.352509][T19015] ? packet_parse_headers+0x5ae/0x800 [ 945.357890][T19015] ? packet_parse_headers+0x5ba/0x800 [ 945.363268][T19015] ? packet_parse_headers+0x205/0x800 [ 945.368648][T19015] ? __pfx_packet_parse_headers+0x10/0x10 [ 945.374381][T19015] packet_xmit+0x243/0x310 [ 945.378814][T19015] packet_sendmsg+0x319a/0x5100 [ 945.383672][T19015] ? avc_has_perm_noaudit+0x350/0x3b0 [ 945.389056][T19015] ? sock_has_perm+0x25a/0x2f0 [ 945.393824][T19015] ? __pfx_sock_has_perm+0x10/0x10 [ 945.398945][T19015] ? __pfx_packet_sendmsg+0x10/0x10 [ 945.404153][T19015] ? __might_fault+0xc5/0x140 [ 945.408849][T19015] ? selinux_socket_sendmsg+0x198/0x2f0 [ 945.414405][T19015] __sys_sendto+0x48b/0x4e0 [ 945.418923][T19015] ? __pfx_packet_sendmsg+0x10/0x10 [ 945.424129][T19015] ? __pfx___sys_sendto+0x10/0x10 [ 945.429165][T19015] ? fd_install+0x223/0x580 [ 945.433688][T19015] ? xfd_validate_state+0x129/0x190 [ 945.438901][T19015] __x64_sys_sendto+0xe0/0x1c0 [ 945.443672][T19015] ? do_syscall_64+0x90/0x870 [ 945.448357][T19015] ? lockdep_hardirqs_on+0x78/0x100 [ 945.453561][T19015] do_syscall_64+0x115/0x870 [ 945.458158][T19015] ? clear_bhb_loop+0x40/0x90 [ 945.462844][T19015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.468737][T19015] RIP: 0033:0x7f63ea79de59 [ 945.473149][T19015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 945.492757][T19015] RSP: 002b:00007f63eb718028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 945.501155][T19015] RAX: ffffffffffffffda RBX: 00007f63eaa25fa0 RCX: 00007f63ea79de59 [ 945.509110][T19015] RDX: 0000000000000039 RSI: 0000200000000080 RDI: 0000000000000007 [ 945.517061][T19015] RBP: 00007f63ea833e6f R08: 0000200000000380 R09: 0000000000000014 [ 945.525018][T19015] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000000 [ 945.532971][T19015] R13: 00007f63eaa26038 R14: 00007f63eaa25fa0 R15: 00007ffcb4850cf8 [ 945.540939][T19015] [ 945.544134][T19015] Kernel Offset: disabled [ 945.548440][T19015] Rebooting in 86400 seconds..