last executing test programs: 15m7.377139235s ago: executing program 4 (id=181): r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000980)={0x2, 0x0, 0x400, 0x2, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x40182) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x3, 0x5, 0x1, 0xc1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r4, 0x0, 0x0}, 0x20) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000feffffff00000000a0470000850000002000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000009b00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r2, 0x1) 15m6.468672578s ago: executing program 4 (id=183): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) mkdir(&(0x7f0000000100)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0xffff, 0x0, 0x25dfdbfc, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x40, &(0x7f0000000340)) r2 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, &(0x7f00000000c0)={0x14, 0x0, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000280)={0x78, 0xfffffffffffffff5, 0x0, {0x2, 0x3, 0x0, {0x0, 0x6, 0x400000000000000b, 0x0, 0x7ff, 0x2, 0x2, 0xd, 0x5, 0xa000, 0xa40, 0x0, 0x0, 0x3001, 0x2}}}, 0xffffff03) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c210000000000202020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r4, &(0x7f0000001300)='7', 0x1) syz_usb_disconnect(r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo\x00') 15m3.569691941s ago: executing program 4 (id=194): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000018c0)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYBLOB="000427bd7000ffdbdf25010000004c0002803c0001231aa66b0004000000080001000237d74b10dadbdcd501000700000008000100060000000800fb0007000000080001000100005a0c001034558f4a56e8f77ff558848b991eb0453113e9c70fac4df1693d3b008834ad7d580f20d6a7e160c8eafb72a6f363f4d85d5db9416b57d6dd1aeff53547f7b81693d895d576a62d4997d58d30e9b7c1d41c6ea45857f245afd10d57ea0800277099e3f43461bdd7925d4529acb265a3e4f3187cd565761115b01bc09f93b20d8aa1ef12a154e06123340b87ba41"], 0x60}, 0x1, 0x0, 0x0, 0x40005}, 0x44004854) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) socket$kcm(0xa, 0x1, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES64=r0, @ANYRESOCT=r2, @ANYBLOB="3841d8038f5e492574dc21123bf7a4c5b7936f8baf8a9da3a47d3c4f1ad0437d53ca3476d14606f4d0464770e7c53c936a984e9d644dbaf0c44184ae43a6461ee0cc1a3af4990b51c864242784872cfe625e7bff455439645c2b074b909446f73c45f74894487358b60f1e80a871cdb132f474fc67665b6d274759057c"], 0x48) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r8}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003e00)=ANY=[@ANYBLOB='4#\x00\x00', @ANYRES16=0x0, @ANYBLOB="00f566cd565a4000a300ff5840f7", @ANYRES32=r10, @ANYBLOB="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"], 0x2334}, 0x1, 0x0, 0x0, 0x40050}, 0x4000000) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x8936, &(0x7f0000000000)={r8}) mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYRESOCT=r5, @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYRESDEC=0x0], 0x10e0}}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000100)={@mcast2, 0x7e, r6}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket(0x2d, 0x2, 0x0) 14m58.562243369s ago: executing program 4 (id=203): syz_open_dev$vbi(&(0x7f0000000140), 0x1, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20048884) socket$unix(0x1, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x101082, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x40, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x8, 0x3, 0x2], 0x3332d000, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f00000002c0)={0x40002, 0x0, {[0x1, 0x2f70, 0x8, 0x8f1, 0x80, 0x8, 0x7, 0x2]}}) write(r3, &(0x7f0000000200)='for', 0x3) 14m57.765651907s ago: executing program 4 (id=206): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x38}}, 0x400c014) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/4111, 0x100f}], 0x1, 0x144, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() futex(0x0, 0x28a, 0x1, 0x0, 0x0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)="35fc3a12f45d48e3120ec76bfe8d5ba7449af3c59c81f374329851daf843e48e30428c737ad0d7b957d1ab7dba23ca87748421", 0x33) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffffffffffff9c, &(0x7f0000001cc0), 0x800, 0x0) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) 14m56.722923153s ago: executing program 4 (id=209): syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40005}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_dev$vim2m(0x0, 0x4, 0x2) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc000) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x1, 0x0, 0x2000}) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000080)) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 14m41.707473344s ago: executing program 32 (id=209): syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40005}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_dev$vim2m(0x0, 0x4, 0x2) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc000) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x1, 0x0, 0x2000}) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000080)) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 26.480599726s ago: executing program 0 (id=3005): r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r0, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000680)=""/188, 0xbc}], 0x1}, 0x0, 0x40000102, 0x1}) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x1d98f000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) 25.502466601s ago: executing program 0 (id=3008): r0 = syz_io_uring_setup(0x34b5, &(0x7f0000000540)={0x0, 0x2730, 0x0, 0x201, 0x7f}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) r4 = userfaultfd(0x80000) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f00000005c0)={{&(0x7f0000d1e000/0x4000)=nil, 0x4000}, 0x3}) recvmmsg(0xffffffffffffffff, &(0x7f0000001640), 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4844c1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002c80)=@delchain={0x5bc, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x590, 0x2, [@TCA_BPF_ACT={0x58c, 0x1, [@m_xt={0xdc, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0xb1, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbcad2b22629cd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa22015"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0x174, 0x12, 0x0, 0x0, {{0xb}, {0x90, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4004, 0xe27, 0x10000000, 0x4bc5, 0x1}, 0xf}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x2, 0x5, 0x5, 0x400}, 0xa}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf7e5}]}, {0xb9, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b36455377c7ddafad62bd905b87e203cd85441766254f1fb76d106fc2ab3b535bd37b963914a3937078f08fe2b215c53ac1637586d19d3179be2480bd4560f5f3df8af92646dcc1fbd383420085b4c07db2f0413025ad48ce3b346d0decc2020a76819621adf129187c02cc25e2c07331a44b29b6bee"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x100, 0xe, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x4, 0x9, 0x7}}}]}, {0xad, 0x6, "5fb30546b7f724bbd0a03a2ce67cc3f75455f6dad8f7910df14f457f0b939aa1f7843f8d23ac707b39fbf4f38ff98effeff9b08050eb3e0e7e3e0b71672db4998037b547ee365f59092089a7e3e54e904ebe868f339d0f6a5ad79a6287cdbb16e3238dc8077ad21fd0fe097a227ba67efad74f0a441dfcd88e59a523aa041d602fab87928dc5ebc4c007fb8856019ad4252708b18bb036e4b855a38630c6aec103073dae680d15fbf6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x194, 0x4, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x401, 0x5, 0x6, 0x5}, @rand_addr=0x64010102, @rand_addr=0x64010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0x5, 0x7, 0xd}, @loopback, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4ef0, 0x1, 0x2, 0x10001, 0xc0e}, @multicast1, @rand_addr=0x64010100, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000000, 0x1, 0x3, 0xfd30, 0x1}, @dev={0xac, 0x14, 0x14, 0xb}, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x11d, 0x5, 0x3, 0x1}, @multicast1, @empty, 0x1000000fe}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xffffff7f, 0x5, 0x1007b, 0x74e69dde}, @local, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff000, 0x2cf, 0xffffffffffffffff, 0x1, 0x3be6f802}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x8, 0x10000000, 0x1ff, 0x2}, @private=0xa010102, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x1, 0xffffffffffffffff, 0x6, 0xd}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0xa4, 0x9, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1df, 0x5, 0x7, 0x4000001, 0x1e1c}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd784, 0x468, 0x20000000, 0x9, 0x4}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x5, 0x8, 0x4}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x3, 0x6, 0x6a}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x5bc}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0x7, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x305) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000012000000050800000010"], 0x48) 20.317736997s ago: executing program 0 (id=3015): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x70bd29, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x9f4f}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0xceacc4c6687bc7d5}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r4, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x30, r2, 0x3, 0x70bd29, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 19.973958174s ago: executing program 0 (id=3016): r0 = fsopen(&(0x7f00000000c0)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000d00000000000000000000000d01000000000000000000000a02000000000000000000000b000000000000000000000005"], 0x0, 0x56}, 0x20) syz_usb_connect$uac2(0x3, 0x92, &(0x7f0000001200)=ANY=[@ANYBLOB="12011003000000108205b200400001020302010920020904000000010120070924010400002000020b240603060a00050005000c24030203041006031d008109040100000102200009040101010102200009050109209daf552dbed4cc372b000704080825010100020b00090402000001022000090402010101022000090582094000084002082501033c08060000000000"], &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0}) 7.043878145s ago: executing program 3 (id=3055): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5fa", 0x29}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8", 0x85}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.850444555s ago: executing program 3 (id=3057): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x100fffe, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={[&(0x7f0000000100)='\x00', &(0x7f00000001c0)='mqueue\x00']}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000011) r2 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000040)) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) setuid(0xee00) fchdir(0xffffffffffffffff) io_uring_setup(0x43db, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = epoll_create(0xea3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000380)={0xb0000001}) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e21, @empty}, 0x10) eventfd2(0x0, 0x80001) 6.06187836s ago: executing program 3 (id=3059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x1, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x9, 0x2, 0xd20, 0x3, 0xfffffffffffffffe, 0x0, 0x9, 0x2, 0x0, 0x802, 0x2000000009, 0x100, 0x3, 0x4, 0x4a, 0x5, 0x100, 0xd, 0xe1, 0x5, 0x6, 0x2aa, 0x7, 0xc39, 0x8000008, 0x8, 0x0, 0x2, 0xa51, 0x401, 0x80401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x933, 0x101, 0x3, 0x8001, 0x8000000000000400, 0x680, 0x0, 0x8, 0x8, 0x6aa, 0x100, 0x40, 0x83, 0x538a, 0x9, 0xdb, 0x5, 0x0, 0x14, 0x800000000000005, 0x7, 0x8000, 0x8000000000000000, 0x2, 0xfffffffffffffffd, 0x1000000000014, 0x0, 0x1, 0x7fffffff, 0x4, 0x2000008000, 0x9, 0xfffffffffffffffd, 0x6, 0x1, 0x82c, 0x7ff, 0xffff, 0x1fcc, 0x6, 0x5b, 0xa, 0x22, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x4, 0x8, 0x0, 0x6, 0x26, 0x9, 0x100000002, 0x0, 0x4, 0x3, 0xf, 0x4, 0x9, 0x1001, 0x16d, 0x6, 0x68d, 0xfffffffffff743ac, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x2400000003, 0x4, 0x8, 0x6, 0x3, 0x8, 0x2000000000000005, 0x0, 0x3, 0x40, 0x80000000, 0x7, 0xa, 0x3]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_enter(r3, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_setup(0x7d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = socket(0x2, 0x3, 0xff) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) fcntl$getownex(r4, 0x10, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmmsg$unix(r4, &(0x7f0000008200)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000340)="b7385c69e773af4873b7fbbc0bd974", 0xf}, {&(0x7f0000000400)="4d3856dd24b47c1d4d532a773ce22ef9f11e7d71dd869cf950ba4cf2fd86ce695a2ddf956f91308f26f62b8e3f89d43368ee4d69c816b6d21a7b6669944f050b006479ad7ca0d39646b0ded0de3881961c1fd4a2c430e3d304f44939bf8189cdce809e60ab8068707063698771b5577d69b6171e72f02036bbd46d8ab0e08e5517873ff8d72b5388270c9f341ec40379ba6ca85e7c03c724c78f2c", 0x9b}, {&(0x7f0000000540)="64aaca5d858611071a1b51b773a92110d3abf9a3c293478a80576c87f7daf2d6e3d0521dd78d18a891a603d9d891c732bab6d89434397b0de10b86a80daa9bd1d8321f5d02f5a80f530d447452651d1973e9e4c0243cb15912d79327e3550f532e58149ec2b88765fc314cf9689018527e06", 0x72}, {&(0x7f0000000e80)="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", 0x11b}, {&(0x7f0000000d40)="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", 0x10a}], 0x5, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x30, 0x1, 0x1, [r4, r1, r3, r1, r1, 0xffffffffffffffff, r4, r2]}}, @cred={{0x1c}}], 0xd0, 0x10}}], 0x1, 0x20008014) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000002600)=""/4113, 0x1011) 4.944320047s ago: executing program 3 (id=3063): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x1, 0x5800003a, r1, 0x0) pwrite64(r0, &(0x7f0000000c00)='W', 0x1, 0x4) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000002c0)) socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0xa, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0xc, 0xb9, 0x3, 0x8e, 0x4, 0xc50}, {0x804, 0x1, 0x4, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xfffdffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r6, 0x7b1, &(0x7f0000000240)={0x0, 0x6, 0x0, 0x7}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@deltfilter={0xa8, 0x2d, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0x7, 0xa}, {0x4, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x9}}, @filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x6}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x1}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xffffffff}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x2}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x3}]}}, @TCA_CHAIN={0x8, 0xb, 0x40}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}, @TCA_RATE={0x6, 0x5, {0xff, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 3.514023791s ago: executing program 5 (id=3068): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000005a000100000000e3ff756bbbef6a825f4d647ad0e4"], 0x1c}}, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r4 = dup2(r2, r3) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000280)=@ethtool_link_settings={0x4c, 0x645d, 0x3c, 0xff, 0x0, 0x85, 0x40, 0x2, 0x7f, 0x9, [0xa, 0xff, 0x884, 0x10000, 0x7ffffffb, 0x7, 0x7, 0x4]}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r5) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r7, &(0x7f0000000100)={0x0, 0x80000010, 0x1}) mq_notify(r7, &(0x7f0000000180)={0x0, 0x2e, 0x0, @thr={0x0, 0x0}}) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r6, @ANYBLOB="21042abd7000fedbdf251a00000007002100626200000500920001000000f80022"], 0x11c}, 0x1, 0x0, 0x0, 0x4088}, 0x44840) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x2) close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, 0x0, 0x0) listen(r8, 0x2b4b) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(0x0, 0x1, 0x2003) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000240), r5) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r9, {0xee00, 0xee01}}, './file0\x00'}) 3.226149011s ago: executing program 1 (id=3069): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x1, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x9, 0x2, 0xd20, 0x3, 0xfffffffffffffffe, 0x0, 0x9, 0x2, 0x0, 0x802, 0x2000000009, 0x100, 0x3, 0x4, 0x4a, 0x5, 0x100, 0xd, 0xe1, 0x5, 0x6, 0x2aa, 0x7, 0xc39, 0x8000008, 0x8, 0x0, 0x2, 0xa51, 0x401, 0x80401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x933, 0x101, 0x3, 0x8001, 0x8000000000000400, 0x680, 0x0, 0x8, 0x8, 0x6aa, 0x100, 0x40, 0x83, 0x538a, 0x9, 0xdb, 0x5, 0x0, 0x14, 0x800000000000005, 0x7, 0x8000, 0x8000000000000000, 0x2, 0xfffffffffffffffd, 0x1000000000014, 0x0, 0x1, 0x7fffffff, 0x4, 0x2000008000, 0x9, 0xfffffffffffffffd, 0x6, 0x1, 0x82c, 0x7ff, 0xffff, 0x1fcc, 0x6, 0x5b, 0xa, 0x22, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x4, 0x8, 0x0, 0x6, 0x26, 0x9, 0x100000002, 0x0, 0x4, 0x3, 0xf, 0x4, 0x9, 0x1001, 0x16d, 0x6, 0x68d, 0xfffffffffff743ac, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x2400000003, 0x4, 0x8, 0x6, 0x3, 0x8, 0x2000000000000005, 0x0, 0x3, 0x40, 0x80000000, 0x7, 0xa, 0x3]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_enter(r3, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_setup(0x7d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = socket(0x2, 0x3, 0xff) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) fcntl$getownex(r4, 0x10, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 3.100230333s ago: executing program 3 (id=3070): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x28e81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x1, 0x12c000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000140)={0x30000, 0x8000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) read(r3, 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x4) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000380)={0x0, 0x0}) 2.802052265s ago: executing program 2 (id=3071): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x5, 0xfffffffffffffffc, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.47551241s ago: executing program 5 (id=3072): r0 = syz_open_dev$media(&(0x7f0000000040), 0x60, 0x46000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = eventfd2(0x8, 0x80800) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000840)={'wlan0\x00', &(0x7f0000000700)=@ethtool_regs={0x4, 0x5}}) flock(r2, 0xc) ioctl$MEDIA_REQUEST_IOC_REINIT(r1, 0x7c81, 0x0) fcntl$dupfd(r0, 0x406, r2) 2.366321482s ago: executing program 5 (id=3073): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000101000028"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="00000090582a"], 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f000500000005002e001500000005002b"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) socket(0x2d, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect(0x2, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x74, 0x21, 0xe0, 0x40, 0x16c0, 0x5df, 0xa276, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x5, 0xd0, 0x7f, "", [{{0x9, 0x4, 0x20, 0xc, 0x0, 0x3, 0x0, 0x0, 0x9, [@uac_as]}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1744}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) mount(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) 2.246674118s ago: executing program 1 (id=3074): syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r5, @ANYBLOB="05001300840000000a000600080211000001000006001000800500000600120001000000100011"], 0x50}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0xfffffffffffffc77, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008001}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r11 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r11, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803fd, 0x1, 0x800}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000002c0)={0x2c, r7, 0x1, 0x70bd2d, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004008}, 0x4040000) fsetxattr(r1, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000240)='\x00\x00', 0x2, 0x0) 2.238137613s ago: executing program 2 (id=3075): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000600)={0x50, 0x0, r1, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0x1, 0x1}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff6, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x6000, 0xb, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r2, r3, 0xf0ee, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) r4 = syz_open_dev$vim2m(&(0x7f0000002f00), 0x2000f, 0x2) r5 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x80, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000002f40)={0x1, @pix_mp={0x2009, 0xfd, 0x32315559, 0x7, 0x0, [{0x33, 0x4}, {0x9c, 0x2}, {0x6, 0x5}, {0x7, 0xa88}, {0x8, 0x2}, {0x8001, 0x1}, {0x100, 0x9}, {0x2}], 0x6, 0x37, 0x1, 0x0, 0x6}}) r6 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x1) ioctl$NBD_SET_SIZE(r6, 0xab02, 0x10001) 2.065463255s ago: executing program 1 (id=3076): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5fa", 0x29}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8", 0x85}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.8926384s ago: executing program 1 (id=3077): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x70c0, &(0x7f0000000080)={0x0, 0xefab, 0x400, 0x1, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(r0, 0xe, &(0x7f0000000040)={0x4, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x80000) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_submit(0x0, 0x0, 0x0) 1.777839954s ago: executing program 2 (id=3078): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c0003dd6b1d2bc79447dc000c00028005"], 0xc0}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af3653400120038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000040)='squashfs\x00', 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r4, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000) 1.737390773s ago: executing program 5 (id=3079): socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc840) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) iopl(0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x8080) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x24004010) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ieee802154(0x0, r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, 0x0, 0x24040000) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="550000009cba4502000000ca6b46", @ANYRES16=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x4c040) mlockall(0x7) 1.641015588s ago: executing program 1 (id=3080): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5fa", 0x29}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7", 0x89}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.575326094s ago: executing program 5 (id=3081): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/45, &(0x7f0000000040)=0x2d) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0xd}, 'port1\x00', 0xf3, 0x1b1c06, 0xfffffffa, 0x4, 0x1000000, 0x0, 0x1, 0x0, 0x0, 0x8}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140)) modify_ldt$read(0x0, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x90503, 0x0) dup3(r3, r2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$sg(&(0x7f0000000280), 0xaed, 0x502541) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5319, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x2c, 0x80001) ioctl$MON_IOCT_RING_SIZE(r6, 0x9204, 0x374c4) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000080)={0x0, 0x1, 0x40, 0xa01}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x188, 0x0, &(0x7f0000000500)="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", 0x0, 0x2a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) close_range(r1, 0xffffffffffffffff, 0x0) 1.390052614s ago: executing program 5 (id=3082): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/45, &(0x7f0000000040)=0x2d) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0xd}, 'port1\x00', 0xf3, 0x1b1c06, 0xfffffffa, 0x4, 0x1000000, 0x0, 0x1, 0x0, 0x0, 0x8}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140)) modify_ldt$read(0x0, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x90503, 0x0) dup3(r3, r2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$sg(&(0x7f0000000280), 0xaed, 0x502541) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5319, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x2c, 0x80001) ioctl$MON_IOCT_RING_SIZE(r6, 0x9204, 0x374c4) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000080)={0x0, 0x1, 0x40, 0xa01}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x188, 0x0, &(0x7f0000000500)="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", 0x0, 0x2a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) close_range(r1, 0xffffffffffffffff, 0x0) 1.389662032s ago: executing program 1 (id=3083): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2(&(0x7f00000000c0)={0x0, 0x0}, 0x0) tee(r2, r1, 0xff, 0x0) close_range(r0, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = open(&(0x7f0000000040)='./file1\x00', 0x808400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, 0x0, &(0x7f00000000c0)) unlink(&(0x7f0000000140)='./file0\x00') mkdirat(r4, &(0x7f0000000340)='./file0\x00', 0xf3) mknod(&(0x7f0000000180)='./file0\x00', 0x8282, 0x4) r6 = socket(0x200000000000011, 0x2, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e5010000cfafc945c55240ce0000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r10, @ANYBLOB="01010100ffffffff00000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r13 = dup(r12) ioctl$FS_IOC_SETFLAGS(r13, 0x40081271, &(0x7f0000000040)=0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r13, 0x2c93a000) madvise(&(0x7f00000a6000/0x2000)=nil, 0x2000, 0x9) fcntl$setstatus(r11, 0x4, 0x42000) 1.354962359s ago: executing program 0 (id=3026): socket$kcm(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000080), 0x40002df, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x110, 0x0, 0x110, 0x110, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x110, 0x0, 0x0, 0x2, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x2, 0x1}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0xd, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0x28}, 0xffffff00, 0xffffffff, 0x6, 0x2d, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x4b, 0x5, 0x10, 0xe, 0x3ff, 0x3, 'bond_slave_1\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x2f6}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) getsockopt$inet_buf(r4, 0x0, 0x27, &(0x7f00000001c0)=""/198, &(0x7f00000002c0)=0xc6) socket(0x2b, 0x1, 0x1) syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000540)) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r6, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f00000000c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 899.973531ms ago: executing program 2 (id=3085): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000240)='\x00\x00', 0x2, 0x0) 727.522735ms ago: executing program 2 (id=3086): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5fa", 0x29}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8", 0x85}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 486.153301ms ago: executing program 3 (id=3087): io_setup(0x490, 0x0) r0 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064d1, &(0x7f0000000040)={0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000009003940422c021664da010203010902120001000000040904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) timer_create(0x4, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x2, 0x4, 0x8000, 0x3ff}) sendmsg$nl_xfrm(r0, 0x0, 0x20048004) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x11c) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="1cee9143b26427422d84782fcd0e423ebb568d1220a84161bb09bf1d3824185fe3dd0bcdde78723096131595ac4947e71c6c38e713a4f86aa046dc2ad1ac27c5d2a405c44d603c6696e7d3daa7e5888be820909eee4c30885fe701e4964e73c466bb177185446188631993", @ANYRESHEX=r0, @ANYBLOB=',\x00']) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) madvise(&(0x7f00002f4000/0x3000)=nil, 0x3000, 0x9) pipe2(0x0, 0x0) sendmmsg(r5, 0x0, 0x0, 0x20000081) 429.33885ms ago: executing program 2 (id=3088): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) mmap(&(0x7f000077e000/0x4000)=nil, 0x4000, 0x3000002, 0x28011, r3, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 0s ago: executing program 0 (id=3089): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000101000028"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="00000090582a"], 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f000500000005002e001500000005002b"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) socket(0x2d, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect(0x2, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x74, 0x21, 0xe0, 0x40, 0x16c0, 0x5df, 0xa276, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x5, 0xd0, 0x7f, "", [{{0x9, 0x4, 0x20, 0xc, 0x0, 0x3, 0x0, 0x0, 0x9, [@uac_as]}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1744}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) setreuid(0x0, 0xee01) kernel console output (not intermixed with test programs): audit: type=1400 audit(906.892:1737): avc: denied { write } for pid=15566 comm="syz.3.2623" name="c.1" dev="configfs" ino=31281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 907.084297][ T30] audit: type=1400 audit(906.892:1738): avc: denied { write } for pid=15566 comm="syz.3.2623" name="c.1" dev="configfs" ino=31281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 907.337367][ T5613] hub 3-1:0.0: 1 port detected [ 908.399796][ T5727] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 908.425940][ T5727] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 908.583334][ T5613] hub 3-1:0.0: hub_ext_port_status failed (err = 0) [ 908.604867][ T5727] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 908.648563][ T5727] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 908.798063][ T5727] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 908.837233][ T5727] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 908.854879][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 908.909342][ T5727] usb 1-1: Product: syz [ 908.913648][ T5727] usb 1-1: Manufacturer: syz [ 908.918462][ T5751] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 908.950387][ T5727] cdc_wdm 1-1:1.0: skipping garbage [ 908.967354][ T5727] cdc_wdm 1-1:1.0: skipping garbage [ 908.988268][ T5727] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 908.997359][ T30] audit: type=1400 audit(908.962:1739): avc: denied { setopt } for pid=15551 comm="syz.2.2621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 909.016473][ T5727] cdc_wdm 1-1:1.0: Unknown control protocol [ 909.076524][T15587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 909.111524][ T5751] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 909.120841][ T5751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.132381][ T5751] usb 4-1: Product: syz [ 909.136698][ T5751] usb 4-1: Manufacturer: syz [ 909.144512][ T5751] usb 4-1: SerialNumber: syz [ 909.160910][ T30] audit: type=1400 audit(909.132:1740): avc: denied { read write } for pid=15564 comm="syz.0.2626" name="cdc-wdm0" dev="devtmpfs" ino=3899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 909.186367][ T30] audit: type=1400 audit(909.132:1741): avc: denied { open } for pid=15564 comm="syz.0.2626" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 909.218776][ T5613] usb 3-1: USB disconnect, device number 67 [ 909.234972][T15601] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2626'. [ 909.268637][ T30] audit: type=1400 audit(909.242:1742): avc: denied { load_policy } for pid=15564 comm="syz.0.2626" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 909.343946][T15601] SELinux: ebitmap: truncated map [ 909.349429][T15601] SELinux: invalid class [ 909.396551][T15601] SELinux: failed to load policy [ 910.045059][ T5751] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 910.061680][ T5751] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 910.072382][ T5751] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 910.085295][T15609] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 910.113374][ T5751] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 910.134206][T15609] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2639'. [ 910.162567][ T5751] usb 4-1: USB disconnect, device number 57 [ 910.768869][ T5613] usb 1-1: USB disconnect, device number 76 [ 912.349612][ T5613] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 912.375645][T15640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 912.512760][T15654] gadgetfs: bound to dummy_udc driver [ 912.528373][ T5613] usb 4-1: Using ep0 maxpacket: 32 [ 912.536641][ T5613] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 912.547159][ T5613] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 912.550925][ T30] audit: type=1400 audit(912.522:1743): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 912.558955][ T5613] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 912.619261][ T5613] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 912.641981][ T5613] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 912.659585][ T5613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.673712][ T5613] usb 4-1: Product: syz [ 912.681435][ T30] audit: type=1400 audit(912.652:1744): avc: denied { map } for pid=15656 comm="syz.2.2654" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 912.681529][ T5613] usb 4-1: Manufacturer: syz [ 912.733565][ T5613] usb 4-1: SerialNumber: syz [ 912.742131][ T30] audit: type=1400 audit(912.652:1745): avc: denied { execute } for pid=15656 comm="syz.2.2654" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 912.780438][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 912.817213][ T5613] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input79 [ 913.018239][ T5613] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 913.034591][ T5613] (id 0x00) [ 913.098218][ T5613] rc_core: IR keymap rc-imon-pad not found [ 913.104113][ T5613] Registered IR keymap rc-empty [ 913.109594][ T5613] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 913.120200][ T5613] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 913.812718][ T5613] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 913.833305][ T5613] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input80 [ 913.859318][ T30] audit: type=1400 audit(913.822:1746): avc: denied { write } for pid=15656 comm="syz.2.2654" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 913.941335][ T5613] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:58> initialized [ 914.206256][T15630] imon:send_packet: packet tx failed (-71) [ 914.216526][ T5613] usb 4-1: USB disconnect, device number 58 [ 914.248562][T15630] imon:vfd_write: send packet #0 failed [ 914.548574][ T5707] usb 1-1: new low-speed USB device number 77 using dummy_hcd [ 914.947712][ T5707] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 914.981158][ T5707] usb 1-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 914.991434][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.009983][ T5707] usb 1-1: config 0 descriptor?? [ 915.021815][ T30] audit: type=1400 audit(914.992:1747): avc: denied { mounton } for pid=15677 comm="syz.2.2659" path="/513/file0" dev="tmpfs" ino=2730 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 915.262687][T15674] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 915.811733][T15674] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2658'. [ 915.826267][ T5707] usb 1-1: string descriptor 0 read error: -71 [ 915.836774][ T5707] cypress_m8 1-1:0.0: DeLorme Earthmate USB converter detected [ 915.845596][ T5707] earthmate ttyUSB0: required endpoint is missing [ 915.861816][ T5613] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 915.867116][ T5707] usb 1-1: USB disconnect, device number 77 [ 915.892766][ T5707] cypress_m8 1-1:0.0: device disconnected [ 916.071440][ T5613] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 916.096010][ T5613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.110885][ T5613] usb 3-1: Product: syz [ 916.115179][ T5613] usb 3-1: Manufacturer: syz [ 916.121032][ T5613] usb 3-1: SerialNumber: syz [ 916.390216][T15704] xt_TPROXY: Can be used only with -p tcp or -p udp [ 916.399816][T15704] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2666'. [ 916.408801][T15704] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2666'. [ 916.541649][T15705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2665'. [ 916.909474][ T5613] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 916.958231][ T5613] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 917.022695][ T5613] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 917.053939][ T5613] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 917.078834][ T5613] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 917.109519][ T5613] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 917.149459][ T5613] usb 3-1: USB disconnect, device number 68 [ 918.028299][ T5707] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 918.178220][ T5707] usb 4-1: Using ep0 maxpacket: 32 [ 918.194086][ T5707] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 918.223357][ T5707] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 918.253630][ T5707] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 918.285181][ T5707] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 918.328964][ T5707] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 918.346783][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.360222][ T5707] usb 4-1: Product: syz [ 918.364521][ T5707] usb 4-1: Manufacturer: syz [ 918.376181][ T5707] usb 4-1: SerialNumber: syz [ 918.404612][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 918.413179][ T5707] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input81 [ 918.569985][ T5751] usb 1-1: new low-speed USB device number 78 using dummy_hcd [ 918.618216][ T5707] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 918.626903][ T5707] (id 0x00) [ 918.634654][T15740] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 919.321875][ T5751] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 919.360960][ T5751] usb 1-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 919.376204][ T5751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.389795][ T5751] usb 1-1: config 0 descriptor?? [ 919.399235][ T5707] rc_core: IR keymap rc-imon-pad not found [ 919.420448][ T5707] Registered IR keymap rc-empty [ 919.436476][ T5707] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 919.472725][ T5707] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 919.524923][ T5707] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 919.544860][ T30] audit: type=1400 audit(919.512:1748): avc: denied { map } for pid=15747 comm="syz.1.2682" path="pipe:[5494]" dev="pipefs" ino=5494 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 919.580060][ T5707] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input82 [ 919.654989][ T5707] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:59> initialized [ 919.712502][ T5707] usb 4-1: USB disconnect, device number 59 [ 919.731867][T15754] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2677'. [ 919.857301][T15736] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 919.910783][ T5751] usb 1-1: string descriptor 0 read error: -71 [ 919.931109][ T5751] cypress_m8 1-1:0.0: DeLorme Earthmate USB converter detected [ 919.966628][ T5751] earthmate ttyUSB0: required endpoint is missing [ 920.086329][ T5751] usb 1-1: USB disconnect, device number 78 [ 920.097552][ T5751] cypress_m8 1-1:0.0: device disconnected [ 920.393279][ T30] audit: type=1400 audit(920.332:1749): avc: denied { write } for pid=15761 comm="syz.2.2686" name="c.1" dev="configfs" ino=31281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 920.913593][ T30] audit: type=1400 audit(920.332:1750): avc: denied { write } for pid=15761 comm="syz.2.2686" name="c.1" dev="configfs" ino=31281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 922.761051][ T30] audit: type=1400 audit(922.722:1751): avc: denied { setopt } for pid=15783 comm="syz.0.2691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 923.807742][T15793] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=15793 comm=syz.0.2693 [ 925.313332][ T30] audit: type=1400 audit(925.282:1752): avc: denied { bind } for pid=15825 comm="syz.0.2704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 925.467033][ T30] audit: type=1400 audit(925.312:1753): avc: denied { getopt } for pid=15825 comm="syz.0.2704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 925.685966][ T29] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 925.953846][ T29] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 925.995674][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.015596][ T29] usb 3-1: Product: syz [ 926.022261][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 926.028788][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 926.038724][ T29] usb 3-1: Manufacturer: syz [ 926.043600][ T29] usb 3-1: SerialNumber: syz [ 926.043642][ T5727] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 926.063309][ T29] usb 3-1: config 0 descriptor?? [ 926.221167][ T5727] usb 1-1: Using ep0 maxpacket: 32 [ 926.249302][ T5727] usb 1-1: unable to get BOS descriptor or descriptor too short [ 926.275190][ T5727] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 926.297054][ T5727] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 926.316941][ T5727] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 926.341314][ T5727] usb 1-1: New USB device found, idVendor=0e41, idProduct=4244, bcdDevice= 0.40 [ 926.379624][ T29] usb 3-1: USB disconnect, device number 69 [ 926.416435][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.508775][ T5727] usb 1-1: Product: syz [ 926.517244][ T5727] usb 1-1: Manufacturer: syz [ 926.519732][T15818] udevd[15818]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 926.523522][ T5727] usb 1-1: SerialNumber: syz [ 926.623136][T15851] overlayfs: failed to clone upperpath [ 927.529976][ T30] audit: type=1400 audit(927.492:1754): avc: denied { append } for pid=15854 comm="syz.3.2713" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 927.581885][T15860] netlink: 'syz.0.2704': attribute type 4 has an invalid length. [ 927.604623][T15860] netlink: 'syz.0.2704': attribute type 4 has an invalid length. [ 927.679661][ T30] audit: type=1400 audit(927.642:1755): avc: denied { getopt } for pid=15866 comm="syz.5.2717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 927.888645][ T5751] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 928.188251][ T5751] usb 4-1: Using ep0 maxpacket: 32 [ 928.202836][ T5751] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 928.215354][ T5751] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 928.229184][ T5751] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 928.572145][ T5751] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 928.589212][ T5751] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 928.599006][ T5751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.607918][ T5751] usb 4-1: Product: syz [ 928.612981][ T5751] usb 4-1: Manufacturer: syz [ 928.641021][ T5751] usb 4-1: SerialNumber: syz [ 928.692913][ T5727] usb 1-1: 0:2 : does not exist [ 928.699911][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 928.710592][ T5751] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input83 [ 928.726089][ T5727] usb 1-1: unknown interface protocol 0x1, assuming v1 [ 928.736957][ T5727] usb 1-1: cannot find UAC_HEADER [ 928.799821][ T5727] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 928.814964][ T5727] usb 1-1: USB disconnect, device number 79 [ 928.928974][ T5751] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 928.937396][ T5751] (id 0x00) [ 928.943372][T15842] udevd[15842]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 929.181187][ T5751] rc_core: IR keymap rc-imon-pad not found [ 929.187661][ T5751] Registered IR keymap rc-empty [ 929.192997][ T5751] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 929.203952][ T5751] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 929.234752][ T5751] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 929.248272][ T5751] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input84 [ 929.262912][ T5751] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:60> initialized [ 929.468329][ T5727] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 929.488758][ T5751] usb 4-1: USB disconnect, device number 60 [ 929.494756][T15865] imon:send_packet: packet tx failed (-71) [ 929.518268][T15865] imon:vfd_write: send packet #0 failed [ 929.652941][ T5727] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 929.664703][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.673325][ T5727] usb 1-1: Product: syz [ 929.684572][ T5727] usb 1-1: Manufacturer: syz [ 929.692025][ T5727] usb 1-1: SerialNumber: syz [ 930.369700][T15915] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2730'. [ 930.416658][T15912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2729'. [ 930.466484][ T5727] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 930.491736][ T5727] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 930.539016][ T5727] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 930.666358][ T5727] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 930.685318][ T5727] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 930.698852][ T5727] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 931.633989][ T5727] usb 1-1: USB disconnect, device number 80 [ 931.742535][T15927] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2736'. [ 932.003976][T15935] loop7: detected capacity change from 0 to 7 [ 932.237007][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 932.246737][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 932.361305][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 932.371003][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 932.402437][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 932.412175][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 933.131807][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 933.141496][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 933.152255][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 933.161873][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 933.172180][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 933.181829][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 933.205552][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 933.215221][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 933.223415][T15935] ldm_validate_partition_table(): Disk read failed. [ 933.289110][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 933.298785][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 933.307199][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 933.316869][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 933.339265][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 933.348937][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 933.387693][T15935] Dev loop7: unable to read RDB block 0 [ 933.416299][T15935] loop7: unable to read partition table [ 933.423069][T15935] loop7: partition table beyond EOD, truncated [ 933.429391][T15935] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 933.949617][ T30] audit: type=1400 audit(933.912:1756): avc: denied { write } for pid=15939 comm="syz.0.2739" name="c.1" dev="configfs" ino=31281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 934.193734][ T30] audit: type=1400 audit(933.912:1757): avc: denied { write } for pid=15939 comm="syz.0.2739" name="c.1" dev="configfs" ino=31281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 934.346155][ T30] audit: type=1400 audit(934.282:1758): avc: denied { map } for pid=15943 comm="syz.3.2740" path="socket:[52060]" dev="sockfs" ino=52060 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 934.394400][ T30] audit: type=1400 audit(934.292:1759): avc: denied { ioctl } for pid=15943 comm="syz.3.2740" path="/554/file2" dev="tmpfs" ino=2940 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 934.436309][T15944] openvswitch: netlink: Unknown key attributes 20 [ 934.718868][ T5727] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 934.899701][ T5727] usb 4-1: Using ep0 maxpacket: 16 [ 934.925997][ T30] audit: type=1400 audit(934.892:1760): avc: denied { ioctl } for pid=15943 comm="syz.3.2740" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 934.926749][ T5727] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 934.970008][T15957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15957 comm=syz.0.2742 [ 934.988247][ T5727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 935.001814][ T5727] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 935.018614][ T30] audit: type=1400 audit(934.922:1761): avc: denied { module_request } for pid=15952 comm="syz.2.2743" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 935.031474][ T5727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 12592, setting to 1024 [ 935.077619][ T5727] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 935.092164][ T5727] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 935.129511][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.193317][T15964] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2743'. [ 935.208055][ T30] audit: type=1400 audit(934.952:1762): avc: denied { create } for pid=15956 comm="syz.5.2738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 936.706351][ T30] audit: type=1400 audit(934.952:1763): avc: denied { bind } for pid=15956 comm="syz.5.2738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 936.725134][ T30] audit: type=1400 audit(934.952:1764): avc: denied { setopt } for pid=15956 comm="syz.5.2738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 936.744336][ T30] audit: type=1400 audit(934.952:1765): avc: denied { accept } for pid=15956 comm="syz.5.2738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 936.747803][ T5727] usb 4-1: Product: syz [ 936.792616][ T5727] usb 4-1: Manufacturer: syz [ 936.801188][ T5727] usb 4-1: SerialNumber: syz [ 936.816852][ T5727] usb 4-1: config 0 descriptor?? [ 936.832847][T15944] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 936.875969][ C0] port100 4-1:0.0: NFC: Urb failure (status -71) [ 936.913721][ T5727] port100 4-1:0.0: NFC: Could not get supported command types [ 937.389786][ T29] usb 4-1: USB disconnect, device number 61 [ 938.051445][T15988] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2750'. [ 939.477783][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 939.477806][ T30] audit: type=1400 audit(939.442:1801): avc: denied { read } for pid=16002 comm="syz.2.2754" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 939.730952][ T30] audit: type=1400 audit(939.482:1802): avc: denied { open } for pid=16002 comm="syz.2.2754" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 940.106464][ T30] audit: type=1400 audit(939.482:1803): avc: denied { ioctl } for pid=16002 comm="syz.2.2754" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 940.474394][T16009] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2756'. [ 940.531939][ T30] audit: type=1400 audit(940.442:1804): avc: denied { write } for pid=16008 comm="syz.5.2756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 940.648698][T16009] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2756'. [ 940.883734][T16009] netlink: 31 bytes leftover after parsing attributes in process `syz.5.2756'. [ 940.923128][T16009] netlink: 'syz.5.2756': attribute type 2 has an invalid length. [ 940.959481][T16009] netlink: 31 bytes leftover after parsing attributes in process `syz.5.2756'. [ 941.057230][T16014] loop8: detected capacity change from 0 to 7 [ 941.085716][T16014] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 941.112231][T16014] loop8: partition table partially beyond EOD, truncated [ 941.145770][T16014] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 941.166153][ T30] audit: type=1400 audit(941.122:1805): avc: denied { read write } for pid=16013 comm="syz.3.2758" name="vbi2" dev="devtmpfs" ino=968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 941.213391][T16014] loop8: p2 start 121280928 is beyond EOD, truncated [ 941.233386][ T30] audit: type=1400 audit(941.132:1806): avc: denied { open } for pid=16013 comm="syz.3.2758" path="/dev/vbi2" dev="devtmpfs" ino=968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 941.391930][ T30] audit: type=1400 audit(941.362:1807): avc: denied { ioctl } for pid=16013 comm="syz.3.2758" path="/dev/vbi2" dev="devtmpfs" ino=968 ioctlcmd=0x5657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 941.522532][ T30] audit: type=1400 audit(941.492:1808): avc: denied { create } for pid=16019 comm="syz.1.2759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 941.634503][ T30] audit: type=1400 audit(941.522:1809): avc: denied { ioctl } for pid=16019 comm="syz.1.2759" path="socket:[52903]" dev="sockfs" ino=52903 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 942.282140][ T30] audit: type=1400 audit(942.242:1810): avc: denied { bind } for pid=16027 comm="syz.0.2762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 943.964112][T16056] bridge0: port 1(erspan0) entered blocking state [ 943.998406][ T29] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 944.020088][T16056] bridge0: port 1(erspan0) entered disabled state [ 944.048496][T16056] erspan0: entered allmulticast mode [ 944.139721][T16056] erspan0: entered promiscuous mode [ 944.162941][T16056] bridge0: port 1(erspan0) entered blocking state [ 944.169471][T16056] bridge0: port 1(erspan0) entered forwarding state [ 944.225918][ T29] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 944.260392][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.289755][ T29] usb 1-1: Product: syz [ 944.324504][ T29] usb 1-1: Manufacturer: syz [ 944.350643][ T29] usb 1-1: SerialNumber: syz [ 944.379383][ T29] usb 1-1: config 0 descriptor?? [ 944.764357][ T29] usb 1-1: USB disconnect, device number 81 [ 945.188197][ T5751] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 945.351480][ T5751] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 945.380002][ T5751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.403412][ T5751] usb 4-1: Product: syz [ 945.416794][ T5751] usb 4-1: Manufacturer: syz [ 945.430810][ T5751] usb 4-1: SerialNumber: syz [ 945.454082][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 945.454098][ T30] audit: type=1400 audit(945.422:1820): avc: denied { create } for pid=16072 comm="syz.5.2776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 945.454624][ T5751] usb 4-1: config 0 descriptor?? [ 945.541716][ T30] audit: type=1400 audit(945.512:1821): avc: denied { setopt } for pid=16072 comm="syz.5.2776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 945.566977][ T30] audit: type=1400 audit(945.532:1822): avc: denied { create } for pid=16072 comm="syz.5.2776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 945.597052][ T30] audit: type=1400 audit(945.532:1823): avc: denied { write } for pid=16072 comm="syz.5.2776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 945.660146][ T30] audit: type=1400 audit(945.532:1824): avc: denied { write } for pid=16072 comm="syz.5.2776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 945.775310][ T5751] usb 4-1: USB disconnect, device number 62 [ 945.793430][ T30] audit: type=1400 audit(945.762:1825): avc: denied { map } for pid=16077 comm="syz.5.2778" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=52981 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 945.855333][ T30] audit: type=1400 audit(945.762:1826): avc: denied { read write } for pid=16077 comm="syz.5.2778" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=52981 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 946.081424][ T30] audit: type=1400 audit(945.952:1827): avc: denied { setopt } for pid=16076 comm="syz.0.2777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 946.967455][T16077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 947.451054][T16100] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2784'. [ 947.468215][ T30] audit: type=1400 audit(947.432:1828): avc: denied { mounton } for pid=16097 comm="syz.3.2783" path="/562/config" dev="tmpfs" ino=2984 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 947.530664][T16100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2784'. [ 947.553918][T16100] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2784'. [ 947.566322][ T30] audit: type=1400 audit(947.432:1829): avc: denied { mount } for pid=16097 comm="syz.3.2783" name="/" dev="configfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 947.566425][T16100] netlink: 'syz.2.2784': attribute type 2 has an invalid length. [ 947.685868][T16100] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2784'. [ 947.918689][T11311] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 948.079712][T11311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 948.098433][T11311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 948.122662][T11311] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 948.140574][T11311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.163433][T11311] usb 3-1: Product: syz [ 948.172597][T11311] usb 3-1: Manufacturer: syz [ 948.184659][T11311] usb 3-1: SerialNumber: syz [ 948.200948][T11311] usb 3-1: config 0 descriptor?? [ 948.221256][T11311] hub 3-1:0.0: bad descriptor, ignoring hub [ 948.249587][T11311] hub 3-1:0.0: probe with driver hub failed with error -5 [ 948.274996][T11311] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input85 [ 948.377878][T16129] bridge2: entered promiscuous mode [ 948.572665][T16135] virtio-fs: tag not found [ 948.638929][T11311] usb 3-1: USB disconnect, device number 70 [ 948.726107][T16135] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2794'. [ 949.395055][T16137] syz.3.2795 (16137): drop_caches: 2 [ 950.785403][T16147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 951.986465][T16181] tipc: Resetting bearer [ 952.016997][T16181] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 952.034373][T16183] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2808'. [ 952.133172][T16186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2809'. [ 952.202160][T16153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 952.207147][T16190] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2811'. [ 952.212391][T11311] usb 3-1: new low-speed USB device number 71 using dummy_hcd [ 952.230502][T16190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2811'. [ 952.241236][T16190] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2811'. [ 952.250733][T16190] netlink: 'syz.3.2811': attribute type 2 has an invalid length. [ 952.275830][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 952.275846][ T30] audit: type=1400 audit(952.242:1884): avc: denied { set_context_mgr } for pid=16189 comm="syz.3.2811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 952.310209][ T30] audit: type=1400 audit(952.272:1885): avc: denied { kexec_image_load } for pid=16191 comm="syz.1.2812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 952.395914][T11311] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 952.409954][T11311] usb 3-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 952.429649][T11311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.441512][T11311] usb 3-1: config 0 descriptor?? [ 952.518860][ T5751] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 953.493697][ T5751] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 953.516559][ T5751] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 953.554356][ T5751] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 953.562971][T16206] __nla_validate_parse: 1 callbacks suppressed [ 953.562990][T16206] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2806'. [ 953.598205][ T5751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.626403][ T5751] usb 4-1: Product: syz [ 953.636824][ T5751] usb 4-1: Manufacturer: syz [ 953.645205][T16208] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2817'. [ 953.665562][T16178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.674187][ T5751] usb 4-1: SerialNumber: syz [ 953.687357][ T30] audit: type=1400 audit(953.652:1886): avc: denied { bind } for pid=16207 comm="syz.5.2817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 953.706939][T16178] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.718310][T16178] tipc: Resetting bearer [ 953.733275][T16178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 953.739333][ T5751] usb 4-1: config 0 descriptor?? [ 953.753179][ T30] audit: type=1400 audit(953.722:1887): avc: denied { connect } for pid=16207 comm="syz.5.2817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 953.774150][ T30] audit: type=1400 audit(953.722:1888): avc: denied { write } for pid=16207 comm="syz.5.2817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 953.799830][ T5751] hub 4-1:0.0: bad descriptor, ignoring hub [ 953.820513][ T5751] hub 4-1:0.0: probe with driver hub failed with error -5 [ 953.840482][T16178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 953.857384][ T5751] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input86 [ 953.862092][T16178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 953.896742][T16178] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 953.908291][T16178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 953.924556][T16178] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 953.968252][ T5727] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 954.036551][T11311] usb 3-1: string descriptor 0 read error: -71 [ 954.084715][T11311] cypress_m8 3-1:0.0: DeLorme Earthmate USB converter detected [ 954.110392][ T30] audit: type=1400 audit(954.082:1889): avc: denied { search } for pid=16214 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 954.134588][T11311] earthmate ttyUSB0: required endpoint is missing [ 954.138203][ T5727] usb 1-1: Using ep0 maxpacket: 32 [ 954.152865][T11311] usb 3-1: USB disconnect, device number 71 [ 954.172422][T11311] cypress_m8 3-1:0.0: device disconnected [ 954.199229][ T5727] usb 1-1: config 32 has an invalid interface number: 85 but max is 0 [ 954.224743][ T5727] usb 1-1: config 32 has no interface number 0 [ 954.250664][ T5727] usb 1-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 954.301426][ T5727] usb 1-1: config 32 interface 85 has no altsetting 0 [ 954.317980][ T5727] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 954.343941][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.387320][ T5727] usb 1-1: Product: syz [ 954.408217][ T5727] usb 1-1: Manufacturer: syz [ 954.412869][ T5727] usb 1-1: SerialNumber: syz [ 954.888233][ T1227] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 955.042931][ T5727] appletouch 1-1:32.85: Geyser mode initialized. [ 955.058237][ T1227] usb 3-1: Using ep0 maxpacket: 32 [ 955.059113][ T5727] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:32.85/input/input87 [ 955.066200][ T1227] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 955.103975][ T1227] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 955.116132][ T1227] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 955.134988][ T1227] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 955.151665][ T1227] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 955.162681][ T1227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.172541][ T1227] usb 3-1: Product: syz [ 955.178407][ T1227] usb 3-1: Manufacturer: syz [ 955.189298][ T1227] usb 3-1: SerialNumber: syz [ 955.228716][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 955.310576][ T1227] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input88 [ 955.336060][ T30] audit: type=1400 audit(955.302:1890): avc: denied { create } for pid=16209 comm="syz.0.2818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 955.361462][T16210] fuse: Unknown parameter 'Fe0x0000000000000008' [ 955.451070][ T30] audit: type=1400 audit(955.322:1891): avc: denied { read write } for pid=16209 comm="syz.0.2818" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 955.451112][ T30] audit: type=1400 audit(955.322:1892): avc: denied { open } for pid=16209 comm="syz.0.2818" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 955.451188][ T30] audit: type=1400 audit(955.332:1893): avc: denied { mounton } for pid=16209 comm="syz.0.2818" path="/551/file0" dev="tmpfs" ino=2901 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 955.489846][ T1227] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 955.489866][ T1227] (id 0x00) [ 956.088465][ T1227] rc_core: IR keymap rc-imon-pad not found [ 956.088495][ T1227] Registered IR keymap rc-empty [ 956.088553][ T1227] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 956.088571][ T1227] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 956.108190][ T1227] imon:send_packet: packet tx failed (-71) [ 956.129804][ T1227] imon 3-1:155.0: remote input dev register failed [ 956.129929][ T1227] imon 3-1:155.0: imon_init_intf0: rc device setup failed [ 956.303354][ T1227] imon 3-1:155.0: unable to initialize intf0, err 0 [ 956.303377][ T1227] imon:imon_probe: failed to initialize context! [ 956.303391][ T1227] imon 3-1:155.0: unable to register, err -19 [ 956.313489][ T1227] usb 3-1: USB disconnect, device number 72 [ 956.316628][ T9885] usb 1-1: USB disconnect, device number 82 [ 956.488771][ T9885] appletouch 1-1:32.85: input: appletouch disconnected [ 956.922749][T16249] kAFS: unable to lookup cell '' [ 956.925835][T16249] netlink: 'syz.1.2824': attribute type 10 has an invalid length. [ 957.068463][T16249] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 958.094975][T16249] team0: Port device netdevsim1 added [ 958.525364][T16260] Invalid source name [ 958.564737][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 958.564750][ T30] audit: type=1400 audit(958.532:1899): avc: denied { bind } for pid=16261 comm="syz.2.2831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 958.596078][T16260] UBIFS error (pid: 16260): cannot open "/dev/sequencer", error -22 [ 958.851791][ T29] usb 4-1: USB disconnect, device number 63 [ 959.196115][ T30] audit: type=1400 audit(958.782:1900): avc: denied { read write } for pid=16261 comm="syz.2.2831" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 959.277540][ T30] audit: type=1400 audit(958.782:1901): avc: denied { open } for pid=16261 comm="syz.2.2831" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 959.371712][ T30] audit: type=1400 audit(958.812:1902): avc: denied { listen } for pid=16261 comm="syz.2.2831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 959.807420][ T30] audit: type=1400 audit(959.772:1903): avc: denied { mount } for pid=16271 comm="syz.1.2835" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 960.100408][ T29] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 960.328621][ T29] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 960.372050][ T30] audit: type=1400 audit(959.882:1904): avc: denied { write } for pid=16269 comm="syz.2.2833" name="c.1" dev="configfs" ino=31281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 960.377978][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.411312][ T29] usb 4-1: Product: syz [ 960.415673][ T29] usb 4-1: Manufacturer: syz [ 960.423795][ T29] usb 4-1: SerialNumber: syz [ 960.514652][ T29] usb 4-1: config 0 descriptor?? [ 960.527596][ T30] audit: type=1400 audit(959.882:1905): avc: denied { write } for pid=16269 comm="syz.2.2833" name="c.1" dev="configfs" ino=31281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 961.726342][T16293] overlayfs: failed to clone lowerpath [ 961.758400][ T30] audit: type=1800 audit(961.602:1906): pid=16279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.5.2836" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 961.786626][T16295] overlayfs: failed to clone lowerpath [ 962.198809][T16279] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 962.198940][ T30] audit: type=1400 audit(961.622:1907): avc: denied { firmware_load } for pid=16277 comm="syz.5.2836" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 962.233647][ T30] audit: type=1400 audit(961.682:1908): avc: denied { mount } for pid=16285 comm="syz.1.2837" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 962.287016][T16279] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 962.316592][ T1227] usb 4-1: USB disconnect, device number 64 [ 962.341167][T16279] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 963.637012][T16279] syz.5.2836 (16279) used greatest stack depth: 19296 bytes left [ 964.297512][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 964.297546][ T30] audit: type=1400 audit(964.262:1910): avc: denied { setopt } for pid=16309 comm="syz.0.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 964.578231][ T5751] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 964.809001][ T5751] usb 3-1: Using ep0 maxpacket: 32 [ 965.343120][ T5751] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 965.354564][ T5751] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 965.366367][ T5751] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 965.382469][ T5751] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 965.406949][T16327] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2848'. [ 965.417551][ T5751] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 965.433235][ T5751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.441418][T16327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2848'. [ 965.456087][ T5751] usb 3-1: Product: syz [ 965.461795][T16327] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2848'. [ 965.473534][ T5751] usb 3-1: Manufacturer: syz [ 965.484320][ T5751] usb 3-1: SerialNumber: syz [ 965.489767][T16327] netlink: 'syz.0.2848': attribute type 2 has an invalid length. [ 965.555229][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 965.566250][T16327] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2848'. [ 965.575889][ T5751] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input90 [ 965.614846][ T30] audit: type=1400 audit(965.582:1911): avc: denied { ioctl } for pid=4962 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=4031 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 965.758269][ T5751] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 965.785543][ T5751] (id 0x00) [ 965.858510][ T5727] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 965.860321][ T30] audit: type=1400 audit(965.832:1912): avc: denied { read write } for pid=16333 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 965.947818][T16335] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 965.960978][ T30] audit: type=1400 audit(965.862:1913): avc: denied { open } for pid=16333 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 965.968840][ T5751] rc_core: IR keymap rc-imon-pad not found [ 965.999870][T16335] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 966.018684][T16335] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 966.030768][T16335] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 966.050717][T16335] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 966.070011][ T5727] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 966.081073][ T30] audit: type=1400 audit(965.882:1914): avc: denied { ioctl } for pid=16333 comm="syz-executor" path="socket:[53897]" dev="sockfs" ino=53897 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 966.131614][ T4928] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 966.145996][ T5751] Registered IR keymap rc-empty [ 966.146273][ T4928] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 966.159204][ T4928] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 966.166880][ T4928] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 966.174677][ T5727] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 966.174719][ T4928] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 966.197092][ T5751] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 966.208856][ T30] audit: type=1400 audit(966.162:1915): avc: denied { mounton } for pid=16333 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 966.279034][ T5727] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 966.295566][ T5751] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 966.325390][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.361390][ T5751] imon:send_packet: packet tx failed (-71) [ 966.376429][ T5727] usb 1-1: Product: syz [ 966.388671][ T5727] usb 1-1: Manufacturer: syz [ 966.398376][ T5751] imon 3-1:155.0: remote input dev register failed [ 966.408246][ T5727] usb 1-1: SerialNumber: syz [ 966.415987][ T5751] imon 3-1:155.0: imon_init_intf0: rc device setup failed [ 966.430239][ T5727] usb 1-1: config 0 descriptor?? [ 966.445013][ T30] audit: type=1400 audit(966.412:1916): avc: denied { create } for pid=16342 comm="syz.5.2850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 966.473181][ T5727] hub 1-1:0.0: bad descriptor, ignoring hub [ 966.504095][ T5751] imon 3-1:155.0: unable to initialize intf0, err 0 [ 966.512512][ T5727] hub 1-1:0.0: probe with driver hub failed with error -5 [ 966.533336][ T5751] imon:imon_probe: failed to initialize context! [ 966.551187][ T5727] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input92 [ 966.565375][ T5751] imon 3-1:155.0: unable to register, err -19 [ 966.615261][ T5751] usb 3-1: USB disconnect, device number 73 [ 966.746374][ T30] audit: type=1400 audit(966.712:1917): avc: denied { read } for pid=16349 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 966.828627][ T30] audit: type=1400 audit(966.742:1918): avc: denied { read open } for pid=16349 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 967.030876][ T30] audit: type=1400 audit(966.742:1919): avc: denied { getattr } for pid=16349 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 967.940624][T16366] netlink: 568 bytes leftover after parsing attributes in process `syz.0.2854'. [ 968.273422][T16335] Bluetooth: hci2: command tx timeout [ 969.637604][T16392] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2856'. [ 970.475114][T16335] Bluetooth: hci2: command tx timeout [ 970.867397][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 970.867424][ T30] audit: type=1400 audit(970.832:1931): avc: denied { write } for pid=16399 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 970.918399][ T30] audit: type=1400 audit(970.832:1932): avc: denied { remove_name } for pid=16399 comm="rm" name="resolv.conf.bond_slave_0.ipv4ll" dev="tmpfs" ino=12253 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 970.950059][T16391] tipc: Resetting bearer [ 971.116191][ T30] audit: type=1400 audit(970.832:1933): avc: denied { unlink } for pid=16399 comm="rm" name="resolv.conf.bond_slave_0.ipv4ll" dev="tmpfs" ino=12253 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 971.926444][T16390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 972.161562][ T5727] usb 1-1: USB disconnect, device number 83 [ 972.501015][T16335] Bluetooth: hci2: command tx timeout [ 972.616898][T16333] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.628263][T16333] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.645464][T16333] bridge_slave_0: entered allmulticast mode [ 972.685043][T16333] bridge_slave_0: entered promiscuous mode [ 972.719493][T16333] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.748503][T16333] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.768295][T16333] bridge_slave_1: entered allmulticast mode [ 972.794544][T16333] bridge_slave_1: entered promiscuous mode [ 972.910712][T16333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 973.121704][ T3291] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 973.181712][ T3291] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.297339][T16333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 973.419719][T16333] team0: Port device team_slave_0 added [ 973.588716][ T3291] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 973.626984][ T3291] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.641552][ T30] audit: type=1400 audit(973.612:1934): avc: denied { create } for pid=16415 comm="syz.0.2863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 974.022571][ T30] audit: type=1400 audit(973.642:1935): avc: denied { getopt } for pid=16415 comm="syz.0.2863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 974.115959][ T30] audit: type=1400 audit(973.662:1936): avc: denied { write } for pid=16415 comm="syz.0.2863" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 974.186748][ T30] audit: type=1400 audit(973.662:1937): avc: denied { open } for pid=16415 comm="syz.0.2863" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 974.258604][ T30] audit: type=1400 audit(973.742:1938): avc: denied { write } for pid=16415 comm="syz.0.2863" name="usbmon4" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 974.307053][T16333] team0: Port device team_slave_1 added [ 974.365381][ T30] audit: type=1400 audit(973.742:1939): avc: denied { open } for pid=16415 comm="syz.0.2863" path="/dev/usbmon4" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 974.424361][ T30] audit: type=1400 audit(973.762:1940): avc: denied { ioctl } for pid=16415 comm="syz.0.2863" path="/dev/usbmon4" dev="devtmpfs" ino=729 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 974.578422][T16335] Bluetooth: hci2: command tx timeout [ 974.667152][ T3291] team0: Port device netdevsim1 removed [ 974.728257][ T3291] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 974.927916][ T3291] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.141685][T16333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 975.165135][T16333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 975.215691][T16333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 975.278605][T16333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 975.794459][T16333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 975.828600][T16333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 975.906756][ T3291] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 976.012967][ T3291] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.621908][T16333] hsr_slave_0: entered promiscuous mode [ 976.631314][T16333] hsr_slave_1: entered promiscuous mode [ 976.637773][T16333] debugfs: 'hsr0' already exists in 'hsr' [ 976.645532][T16333] Cannot create hsr debugfs directory [ 976.932623][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 976.932640][ T30] audit: type=1400 audit(976.902:1942): avc: denied { read } for pid=5272 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 977.014350][T16450] xfrm0: left allmulticast mode [ 977.060795][T16450] xfrm0: entered allmulticast mode [ 977.100570][T16450] team0: Port device xfrm0 added [ 977.258984][ T9885] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 977.377260][ T30] audit: type=1400 audit(977.342:1943): avc: denied { ioctl } for pid=16457 comm="syz.2.2872" path="/dev/input/event2" dev="devtmpfs" ino=923 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 977.418210][ T9885] usb 4-1: Using ep0 maxpacket: 32 [ 977.442080][ T9885] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 977.466045][ T3291] erspan0: left allmulticast mode [ 977.471041][ T9885] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 977.496761][ T3291] erspan0: left promiscuous mode [ 977.509036][ T9885] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 977.521182][ T30] audit: type=1400 audit(977.482:1944): avc: denied { create } for pid=16460 comm="syz.5.2873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 977.523684][ T3291] bridge0: port 1(erspan0) entered disabled state [ 977.602667][ T9885] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 977.645768][ T30] audit: type=1400 audit(977.522:1945): avc: denied { setopt } for pid=16460 comm="syz.5.2873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 977.692625][ T9885] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 977.713705][ T9885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.736036][ T30] audit: type=1400 audit(977.552:1946): avc: denied { read } for pid=16460 comm="syz.5.2873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 977.756466][ T9885] usb 4-1: Product: syz [ 977.772470][ T9885] usb 4-1: Manufacturer: syz [ 977.784546][ T9885] usb 4-1: SerialNumber: syz [ 977.817541][ T30] audit: type=1400 audit(977.602:1947): avc: denied { write } for pid=16460 comm="syz.5.2873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 977.852019][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 977.863002][ T9885] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input93 [ 978.028260][ T9885] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 978.063241][ T30] audit: type=1400 audit(978.032:1948): avc: denied { read } for pid=16477 comm="syz.0.2875" name="event0" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 978.092982][ T9885] (id 0x00) [ 978.186233][ T30] audit: type=1400 audit(978.152:1949): avc: denied { write } for pid=16459 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 978.268620][ T9885] rc_core: IR keymap rc-imon-pad not found [ 978.282331][ T9885] Registered IR keymap rc-empty [ 978.300606][ T9885] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 978.339133][ T9885] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 978.389386][ T9885] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 978.399891][ T30] audit: type=1400 audit(978.362:1950): avc: denied { write } for pid=16482 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 978.444763][ T9885] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input94 [ 978.469173][ T3291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 978.503831][ T9885] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:65> initialized [ 978.517933][ T3291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 978.533146][ T3291] bond0 (unregistering): Released all slaves [ 978.616640][ T3291] bond1 (unregistering): Released all slaves [ 978.633262][ T9885] usb 4-1: USB disconnect, device number 65 [ 978.640606][T16452] imon:send_packet: packet tx failed (-71) [ 978.669588][ T3291] bond2 (unregistering): Released all slaves [ 978.678197][T16452] imon:vfd_write: send packet #0 failed [ 978.687410][ T3291] bond3 (unregistering): Released all slaves [ 978.712725][ T3291] bond4 (unregistering): Released all slaves [ 978.731621][ T3291] bond5 (unregistering): Released all slaves [ 978.758893][ T3291] bond6 (unregistering): Released all slaves [ 978.783625][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 978.894706][T16491] erspan0: left promiscuous mode [ 978.919757][T16491] bridge0: port 1(erspan0) entered disabled state [ 979.031585][ T3291] tipc: Disabling bearer [ 979.087734][ T3291] tipc: Left network mode [ 979.336274][ T30] audit: type=1400 audit(979.292:1951): avc: denied { mmap_zero } for pid=16499 comm="syz.5.2881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 979.938473][T11311] usb 3-1: new low-speed USB device number 74 using dummy_hcd [ 980.242813][T11311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 980.451945][T11311] usb 3-1: config 8 has an invalid interface number: 254 but max is 0 [ 980.461919][T11311] usb 3-1: config 8 has no interface number 0 [ 980.468037][T11311] usb 3-1: config 8 interface 254 altsetting 17 has an endpoint descriptor with address 0xE5, changing to 0x85 [ 980.481425][T11311] usb 3-1: config 8 interface 254 altsetting 17 endpoint 0x85 is Bulk; changing to Interrupt [ 980.494003][T11311] usb 3-1: config 8 interface 254 altsetting 17 endpoint 0x4 is Bulk; changing to Interrupt [ 980.504312][T11311] usb 3-1: config 8 interface 254 has no altsetting 0 [ 980.513157][T11311] usb 3-1: New USB device found, idVendor=050d, idProduct=0109, bcdDevice=c8.b9 [ 980.522283][T11311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.530330][T11311] usb 3-1: Product: ဉ [ 980.534529][T11311] usb 3-1: Manufacturer: 㒏碜ЎϹ䮰㙻디嵈ꈏ웪먿એ窔栣揁䡈햙h立䐙煿铙Ⲓ䉃偅 [ 980.554903][T11311] usb 3-1: SerialNumber: 㞄១瓠っ⢛䔿泺軾쉻䌷隸დ⍖䎫୍薜봑儌㞷羛誴ǜ捞ᵕ⏵䕁㺁簥䚟掎㛉上 [ 980.651410][T16505] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 980.666778][ T3291] hsr_slave_0: left promiscuous mode [ 980.686703][T16505] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 980.697113][ T3291] hsr_slave_1: left promiscuous mode [ 980.709427][ T3291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 980.768662][ T3291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 980.777987][ T3291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 980.785880][ T3291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 980.816848][ T3291] veth1_macvtap: left promiscuous mode [ 980.822762][ T3291] veth0_macvtap: left promiscuous mode [ 980.831258][ T3291] veth1_vlan: left promiscuous mode [ 980.837209][ T3291] veth0_vlan: left promiscuous mode [ 980.971816][T16536] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 980.975111][T11311] mct_u232 3-1:8.254: MCT U232 converter detected [ 981.024222][T11311] mct_u232 ttyUSB0: expected endpoint missing [ 981.042976][T11311] usb 3-1: USB disconnect, device number 74 [ 981.066889][T11311] mct_u232 3-1:8.254: device disconnected [ 981.273170][ T3291] team0 (unregistering): Port device team_slave_1 removed [ 981.296775][ T3291] team0 (unregistering): Port device team_slave_0 removed [ 982.282089][T16509] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 982.325381][T16509] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.372384][T16554] bridge0: port 1(erspan0) entered blocking state [ 982.382842][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 982.382858][ T30] audit: type=1400 audit(982.352:1959): avc: denied { write } for pid=16546 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 982.423494][T16554] bridge0: port 1(erspan0) entered disabled state [ 982.444487][T16554] erspan0: entered promiscuous mode [ 982.502092][T16554] bridge0: port 1(erspan0) entered blocking state [ 982.508693][T16554] bridge0: port 1(erspan0) entered forwarding state [ 982.550154][ T30] audit: type=1400 audit(982.522:1960): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 982.603834][ T30] audit: type=1400 audit(982.572:1961): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 982.747051][ T30] audit: type=1400 audit(982.712:1962): avc: denied { write } for pid=16568 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 982.772634][T16509] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 982.789193][T16509] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.936919][ T3291] IPVS: stop unused estimator thread 0... [ 983.414793][T16509] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 983.430106][T16509] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.914519][T16509] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 983.930142][ T30] audit: type=1400 audit(983.902:1963): avc: denied { write } for pid=16590 comm="syz.5.2897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 984.087223][T16509] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.102563][ T30] audit: type=1400 audit(983.902:1964): avc: denied { write } for pid=16580 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 984.125400][ T30] audit: type=1400 audit(983.962:1965): avc: denied { read } for pid=16590 comm="syz.5.2897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 984.214865][ T30] audit: type=1400 audit(984.122:1966): avc: denied { write } for pid=16602 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 985.073032][ T30] audit: type=1400 audit(985.042:1967): avc: denied { ioctl } for pid=16641 comm="syz.5.2900" path="socket:[54664]" dev="sockfs" ino=54664 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 985.187039][ T30] audit: type=1400 audit(985.152:1968): avc: denied { write } for pid=16610 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 985.238352][ T6554] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 985.253637][ T6554] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.936655][T16653] CIFS: VFS: Unknown vers= option specified: -B]ąRB ,gWy 2"/>4Z ҄FYcIGQB*0⑒V&SmZ)`sAk!Owz"RLL|ZuWG4&޺[G [ 986.189623][T16662] erspan0: left allmulticast mode [ 986.194873][T16662] erspan0: left promiscuous mode [ 986.204544][T16662] bridge0: port 3(erspan0) entered disabled state [ 986.211171][T16661] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 986.302470][T16333] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 986.323844][T16333] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 986.335527][T16333] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 986.393308][T16333] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 986.419567][T16333] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 986.449589][T16333] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 986.461200][T16333] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 986.655311][T16333] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 986.913697][T16333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 986.935053][T16333] 8021q: adding VLAN 0 to HW filter on device team0 [ 986.947695][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.954846][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 987.021377][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.028483][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 987.502106][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 987.513408][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 988.042851][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 988.042868][ T30] audit: type=1400 audit(988.012:1970): avc: denied { name_bind } for pid=16695 comm="syz.0.2911" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 988.134977][ T30] audit: type=1400 audit(988.102:1971): avc: denied { setopt } for pid=16701 comm="syz.5.2912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 988.193598][ T30] audit: type=1400 audit(988.152:1972): avc: denied { create } for pid=16706 comm="syz.2.2913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 988.345378][ T30] audit: type=1400 audit(988.312:1973): avc: denied { setopt } for pid=16706 comm="syz.2.2913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 988.384135][T16712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 988.410339][ T30] audit: type=1400 audit(988.342:1974): avc: denied { bind } for pid=16706 comm="syz.2.2913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 988.454144][T16333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 988.471494][ T30] audit: type=1400 audit(988.382:1975): avc: denied { execute } for pid=16706 comm="syz.2.2913" path="/553/memory.events" dev="tmpfs" ino=2944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 988.556612][ T30] audit: type=1400 audit(988.382:1976): avc: denied { write } for pid=16706 comm="syz.2.2913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 988.610384][T16333] veth0_vlan: entered promiscuous mode [ 988.631244][T16333] veth1_vlan: entered promiscuous mode [ 988.676663][T16333] veth0_macvtap: entered promiscuous mode [ 988.702460][T16333] veth1_macvtap: entered promiscuous mode [ 988.743056][ T30] audit: type=1400 audit(988.712:1977): avc: denied { watch watch_reads } for pid=16715 comm="syz.5.2914" path="/555" dev="tmpfs" ino=2919 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 988.768010][T16333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 988.780519][T16333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 989.150797][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.191184][ T1099] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.318485][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.368302][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.386681][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 989.414697][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 989.483021][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 989.506538][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 989.611688][ T30] audit: type=1400 audit(989.582:1978): avc: denied { mounton } for pid=16333 comm="syz-executor" path="/root/syzkaller.LcCzvH/syz-tmp" dev="sda1" ino=2050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 989.707051][ T30] audit: type=1400 audit(989.612:1979): avc: denied { mount } for pid=16333 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 992.785300][T16780] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 993.057245][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 993.057264][ T30] audit: type=1400 audit(993.022:1991): avc: denied { read write } for pid=16785 comm="syz.0.2930" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 993.132849][ T30] audit: type=1400 audit(993.022:1992): avc: denied { open } for pid=16785 comm="syz.0.2930" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 993.257293][ T30] audit: type=1400 audit(993.212:1993): avc: denied { ioctl } for pid=16791 comm="syz.3.2931" path="socket:[55904]" dev="sockfs" ino=55904 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 993.719958][T16800] netlink: 'syz.3.2936': attribute type 1 has an invalid length. [ 993.853112][T16800] bond9: (slave geneve2): making interface the new active one [ 993.925112][T16808] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2936'. [ 993.971108][T16800] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 993.993779][ T6554] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 994.017216][ T6554] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 994.080891][T16800] tipc: Resetting bearer [ 994.228754][ T1099] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 994.253203][ T1099] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 994.279800][ T1099] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 995.215864][ T30] audit: type=1400 audit(995.182:1994): avc: denied { ioctl } for pid=16830 comm="syz.0.2944" path="socket:[56690]" dev="sockfs" ino=56690 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 995.363794][ T30] audit: type=1400 audit(995.332:1995): avc: denied { create } for pid=16832 comm="syz.0.2945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 995.483847][ T30] audit: type=1400 audit(995.452:1996): avc: denied { bind } for pid=16832 comm="syz.0.2945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 995.553800][ T30] audit: type=1400 audit(995.452:1997): avc: denied { connect } for pid=16832 comm="syz.0.2945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 995.624016][ T30] audit: type=1400 audit(995.452:1998): avc: denied { write } for pid=16832 comm="syz.0.2945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 996.914196][T16849] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 997.520569][ T30] audit: type=1400 audit(997.492:1999): avc: denied { bind } for pid=16855 comm="syz.5.2953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 997.880447][ T29] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 998.038175][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 998.057985][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 998.088850][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 998.119206][ T29] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 998.134768][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.163759][ T29] usb 3-1: config 0 descriptor?? [ 998.514452][ T29] hub 3-1:0.0: USB hub found [ 998.708026][ T29] hub 3-1:0.0: 1 port detected [ 999.078191][ T5727] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 999.239622][ T5727] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 999.256860][ T5727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.278875][ T5727] usb 4-1: config 0 descriptor?? [ 999.305945][ T5727] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 999.347409][ T29] hub 3-1:0.0: activate --> -90 [ 999.750129][ T5613] usb 3-1: USB disconnect, device number 75 [ 999.757709][ T29] usb 3-1-port1: config error [ 999.907119][T16879] bridge0: port 1(erspan0) entered blocking state [ 999.914770][ T5727] gp8psk: usb out operation failed. [ 999.927291][ T5727] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 999.952625][ T5727] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 999.972800][T16879] bridge0: port 1(erspan0) entered disabled state [ 999.992034][ T5727] usb 4-1: USB disconnect, device number 66 [ 999.999717][T16879] erspan0: entered allmulticast mode [ 1000.030719][T16879] erspan0: entered promiscuous mode [ 1000.082809][T16879] bridge0: port 1(erspan0) entered blocking state [ 1000.089358][T16879] bridge0: port 1(erspan0) entered forwarding state [ 1001.217929][T16894] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1001.692553][ T30] audit: type=1400 audit(1001.662:2000): avc: denied { associate } for pid=16874 comm="syz.1.2960" name="bus" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1002.048437][ T30] audit: type=1400 audit(1002.012:2001): avc: denied { write } for pid=16892 comm="syz.2.2967" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1002.165659][ T30] audit: type=1400 audit(1002.052:2002): avc: denied { open } for pid=16892 comm="syz.2.2967" path="/dev/ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1002.288327][ T30] audit: type=1400 audit(1002.062:2003): avc: denied { ioctl } for pid=16892 comm="syz.2.2967" path="/dev/ptp0" dev="devtmpfs" ino=1266 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1002.366706][ T30] audit: type=1400 audit(1002.222:2004): avc: denied { search } for pid=16901 comm="syz.3.2968" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1002.444571][ T30] audit: type=1400 audit(1002.222:2005): avc: denied { write } for pid=16901 comm="syz.3.2968" name="uprobe_events" dev="tracefs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1002.571947][ T30] audit: type=1400 audit(1002.222:2006): avc: denied { open } for pid=16901 comm="syz.3.2968" path="/599/tracing/uprobe_events" dev="tracefs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1002.605378][ T30] audit: type=1400 audit(1002.242:2007): avc: denied { mounton } for pid=16901 comm="syz.3.2968" path="/599/tracing/uprobe_events" dev="tracefs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1002.783003][T16898] netlink: 'syz.2.2967': attribute type 2 has an invalid length. [ 1002.812180][T16898] netlink: 'syz.2.2967': attribute type 1 has an invalid length. [ 1003.035124][ T30] audit: type=1400 audit(1003.002:2008): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1003.897871][ T4928] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1003.917551][ T4928] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1003.928293][ T4928] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1003.937517][ T4928] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1003.945211][ T4928] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1004.778758][ T1227] usb 2-1: new low-speed USB device number 53 using dummy_hcd [ 1004.995222][ T1227] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.035606][ T1227] usb 2-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 1005.097269][ T1227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.142566][ T1227] usb 2-1: config 0 descriptor?? [ 1005.255927][T16903] syz_tun (unregistering): left allmulticast mode [ 1005.673166][T16930] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2973'. [ 1006.041972][T16335] Bluetooth: hci3: command tx timeout [ 1007.327103][ T1227] usb 2-1: string descriptor 0 read error: -71 [ 1007.350790][ T1227] cypress_m8 2-1:0.0: DeLorme Earthmate USB converter detected [ 1007.379976][ T1227] earthmate ttyUSB0: required endpoint is missing [ 1007.414240][ T1227] usb 2-1: USB disconnect, device number 53 [ 1007.442306][ T1227] cypress_m8 2-1:0.0: device disconnected [ 1007.488333][T11311] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 1007.516227][T16951] overlayfs: failed to clone lowerpath [ 1007.569439][T16953] overlayfs: failed to clone lowerpath [ 1008.099671][T16335] Bluetooth: hci3: command tx timeout [ 1008.119175][T11311] usb 3-1: not running at top speed; connect to a high speed hub [ 1008.132632][T11311] usb 3-1: config 5 has an invalid interface number: 32 but max is 0 [ 1008.144596][T11311] usb 3-1: config 5 has no interface number 0 [ 1008.151885][T11311] usb 3-1: config 5 interface 32 has no altsetting 0 [ 1008.165007][T11311] usb 3-1: string descriptor 0 read error: -22 [ 1008.174088][T11311] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=a2.76 [ 1008.183871][T11311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.452233][T16945] Invalid source name [ 1008.471909][T16945] UBIFS error (pid: 16945): cannot open "/dev/sequencer", error -22 [ 1008.476915][T11311] usb 3-1: USB disconnect, device number 76 [ 1008.894604][T16920] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.917795][T16975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1008.933361][T16920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.956295][T16920] bridge_slave_0: entered allmulticast mode [ 1008.987027][T16920] bridge_slave_0: entered promiscuous mode [ 1009.054791][T16920] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.071038][T16920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.105656][T16920] bridge_slave_1: entered allmulticast mode [ 1009.135424][T16920] bridge_slave_1: entered promiscuous mode [ 1009.148932][ T30] audit: type=1400 audit(1009.122:2009): avc: denied { read write } for pid=16976 comm="syz.2.2982" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1009.206537][ T30] audit: type=1400 audit(1009.122:2010): avc: denied { open } for pid=16976 comm="syz.2.2982" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1009.288606][ T30] audit: type=1400 audit(1009.242:2011): avc: denied { ioctl } for pid=16976 comm="syz.2.2982" path="pid:[4026532785]" dev="nsfs" ino=4026532785 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1009.343595][ T30] audit: type=1400 audit(1009.242:2012): avc: denied { map } for pid=16976 comm="syz.2.2982" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1009.753829][T16920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1009.796893][T16920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1009.989049][ T30] audit: type=1400 audit(1009.892:2013): avc: denied { connect } for pid=16988 comm="syz.0.2986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1010.195795][T16335] Bluetooth: hci3: command tx timeout [ 1010.460578][T16920] team0: Port device team_slave_0 added [ 1011.412810][T16920] team0: Port device team_slave_1 added [ 1011.630836][T17004] overlayfs: failed to clone lowerpath [ 1012.000213][T16920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1012.015502][T16920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1012.090699][T16920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1012.146808][T16920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1012.167458][T16920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1012.235460][T16920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1012.259940][T16335] Bluetooth: hci3: command tx timeout [ 1012.413623][T16920] hsr_slave_0: entered promiscuous mode [ 1012.428966][T16920] hsr_slave_1: entered promiscuous mode [ 1012.441566][T16920] debugfs: 'hsr0' already exists in 'hsr' [ 1012.452546][T16920] Cannot create hsr debugfs directory [ 1012.790353][ T30] audit: type=1400 audit(1012.764:2014): avc: denied { write } for pid=17012 comm="syz.1.2990" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1012.855797][ T30] audit: type=1400 audit(1012.764:2015): avc: denied { remove_name } for pid=17012 comm="syz.1.2990" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1012.944655][ T30] audit: type=1400 audit(1012.764:2016): avc: denied { unlink } for pid=17012 comm="syz.1.2990" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1013.075751][ T30] audit: type=1400 audit(1013.044:2017): avc: denied { read } for pid=17016 comm="syz.1.2992" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1013.157767][T16920] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1013.203666][ T30] audit: type=1400 audit(1013.044:2018): avc: denied { open } for pid=17016 comm="syz.1.2992" path="/dev/mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1013.207972][T16920] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.496002][T16920] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1013.835269][T16920] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1013.846094][T16920] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.857351][T16920] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1013.904348][T17027] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2994'. [ 1014.833553][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1014.833569][ T30] audit: type=1400 audit(1014.804:2020): avc: denied { map } for pid=17031 comm="syz.5.2996" path="socket:[57450]" dev="sockfs" ino=57450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1014.906551][T16920] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1014.912387][ T30] audit: type=1400 audit(1014.804:2021): avc: denied { read } for pid=17031 comm="syz.5.2996" path="socket:[57450]" dev="sockfs" ino=57450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1014.964008][T16920] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.992661][T16920] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1015.496090][ T30] audit: type=1400 audit(1015.464:2022): avc: denied { write } for pid=17039 comm="syz.5.2999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1015.588049][T17034] bridge0: port 3(erspan0) entered blocking state [ 1015.615671][T17034] bridge0: port 3(erspan0) entered disabled state [ 1015.642621][T17034] erspan0: entered allmulticast mode [ 1015.661489][T17034] erspan0: entered promiscuous mode [ 1015.677537][T17034] bridge0: port 3(erspan0) entered blocking state [ 1015.684131][T17034] bridge0: port 3(erspan0) entered forwarding state [ 1016.016480][T16920] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1016.027892][T16920] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.039350][T16920] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1016.080044][T17058] IPv4: Oversized IP packet from 172.20.20.24 [ 1016.088785][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 1016.096442][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 1016.418242][ T9885] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1016.560866][T17070] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3004'. [ 1016.596775][T17070] netlink: 59 bytes leftover after parsing attributes in process `syz.1.3004'. [ 1016.626336][T17070] netlink: 59 bytes leftover after parsing attributes in process `syz.1.3004'. [ 1016.656771][ T9885] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 1016.740983][T17075] Cannot find set identified by id 0 to match [ 1016.768030][ T9885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.804424][ T9885] usb 3-1: config 0 has no interface number 0 [ 1016.856992][ T9885] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1016.889761][ T9885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.913509][ T9885] usb 3-1: Product: syz [ 1016.936851][ T9885] usb 3-1: Manufacturer: syz [ 1016.951195][ T9885] usb 3-1: SerialNumber: syz [ 1016.987953][ T9885] usb 3-1: config 0 descriptor?? [ 1017.050680][ T9885] uvcvideo 3-1:0.64: probe with driver uvcvideo failed with error -22 [ 1017.283107][T17059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3001'. [ 1017.308978][T16920] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1017.368960][T16920] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1017.397688][T16920] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1017.495890][T16920] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1017.529484][T16920] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1017.557301][T16920] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1017.574165][T17084] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3009'. [ 1017.584932][T16920] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1017.908886][T16920] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1017.993086][ T30] audit: type=1400 audit(1017.954:2023): avc: denied { create } for pid=17083 comm="syz.5.3009" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1018.092720][ T30] audit: type=1400 audit(1017.984:2024): avc: denied { write } for pid=17083 comm="syz.5.3009" name="file0" dev="tmpfs" ino=3049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1018.150798][T17094] SELinux: Context is not valid (left unmapped). [ 1018.226856][ T30] audit: type=1400 audit(1017.984:2025): avc: denied { open } for pid=17083 comm="syz.5.3009" path="/578/file0" dev="tmpfs" ino=3049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1018.378866][ T30] audit: type=1400 audit(1017.994:2026): avc: denied { ioctl } for pid=17083 comm="syz.5.3009" path="/578/file0" dev="tmpfs" ino=3049 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1018.603673][ T30] audit: type=1400 audit(1018.234:2027): avc: denied { relabelto } for pid=17083 comm="syz.5.3009" name="blkio.bfq.io_serviced" dev="tmpfs" ino=3048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 1018.794819][ T30] audit: type=1400 audit(1018.234:2028): avc: denied { associate } for pid=17083 comm="syz.5.3009" name="blkio.bfq.io_serviced" dev="tmpfs" ino=3048 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="" [ 1018.927476][ T30] audit: type=1400 audit(1018.694:2029): avc: denied { unlink } for pid=6809 comm="syz-executor" name="blkio.bfq.io_serviced" dev="tmpfs" ino=3048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 1019.220778][T16920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1019.331234][T17104] overlayfs: failed to clone lowerpath [ 1020.160978][T17096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1020.236404][T16920] 8021q: adding VLAN 0 to HW filter on device team0 [ 1020.305330][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.312499][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1020.353501][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.360592][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1020.676768][ T29] usb 3-1: USB disconnect, device number 77 [ 1022.712620][T16920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1022.790104][T17111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1023.176946][T16920] veth0_vlan: entered promiscuous mode [ 1023.240451][T16920] veth1_vlan: entered promiscuous mode [ 1023.278186][ T5613] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1023.357082][T16920] veth0_macvtap: entered promiscuous mode [ 1023.409013][T16920] veth1_macvtap: entered promiscuous mode [ 1023.438230][ T5613] usb 1-1: Using ep0 maxpacket: 16 [ 1023.453622][ T5613] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1023.468807][ T5613] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1023.531549][ T5613] usb 1-1: can't read configurations, error -61 [ 1023.577883][T16920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1023.631770][T16920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1023.688243][ T5613] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1023.772909][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.812652][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.863871][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.909281][ T5613] usb 1-1: Using ep0 maxpacket: 16 [ 1023.922818][ T5613] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1023.936762][ T5613] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1023.948212][ T5613] usb 1-1: can't read configurations, error -61 [ 1023.966219][ T5613] usb usb1-port1: attempt power cycle [ 1024.022645][ T8558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.040436][ T169] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.066962][ T8558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.301069][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.348415][ T5613] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1024.731552][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.800597][ T5613] usb 1-1: Using ep0 maxpacket: 16 [ 1024.825537][ T5613] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1024.850668][ T5613] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1024.879657][ T5613] usb 1-1: can't read configurations, error -61 [ 1025.030147][ T5613] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1025.074256][ T5613] usb 1-1: Using ep0 maxpacket: 16 [ 1025.096207][ T5613] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1025.128844][ T5613] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1025.159377][ T5613] usb 1-1: can't read configurations, error -61 [ 1025.179461][ T5613] usb usb1-port1: unable to enumerate USB device [ 1025.509130][ T5613] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1026.439680][ T5613] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1026.450646][ T5613] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1026.460602][ T5613] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1026.476203][ T5613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.512805][ T5613] usb 4-1: config 0 descriptor?? [ 1026.863636][T17179] fuse: Bad value for 'user_id' [ 1026.906306][T17179] fuse: Bad value for 'user_id' [ 1026.973108][ T5613] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 1027.083835][ T5613] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 1027.131190][ T5613] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 1027.156358][ T5613] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 1027.177029][ T5613] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 1027.212261][T17182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3027'. [ 1027.243049][ T5613] playstation 0003:054C:0DF2.0009: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 1027.266869][ T4928] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1027.284791][ T4928] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1027.296726][ T4928] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1027.328671][ T4928] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1027.337888][ T4928] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1027.531048][T17186] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3021'. [ 1027.640278][ T30] audit: type=1400 audit(1027.614:2030): avc: denied { ioctl } for pid=17157 comm="syz.3.3021" path="socket:[58446]" dev="sockfs" ino=58446 ioctlcmd=0x64a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1028.877576][ T5613] playstation 0003:054C:0DF2.0009: Failed to retrieve feature with reportID 32: -71 [ 1028.923188][ T5613] playstation 0003:054C:0DF2.0009: Failed to retrieve DualSense firmware info: -71 [ 1028.959900][ T5613] playstation 0003:054C:0DF2.0009: Failed to get firmware info from DualSense [ 1029.001186][ T5613] playstation 0003:054C:0DF2.0009: Failed to create dualsense. [ 1029.077315][ T5613] playstation 0003:054C:0DF2.0009: probe with driver playstation failed with error -71 [ 1029.323676][ T30] audit: type=1400 audit(1029.294:2031): avc: denied { nlmsg_write } for pid=17205 comm="syz.3.3033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1029.384479][T16335] Bluetooth: hci1: command tx timeout [ 1029.790406][T17215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3034'. [ 1029.896009][ T30] audit: type=1400 audit(1029.864:2032): avc: denied { bind } for pid=17214 comm="syz.5.3034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1029.979715][ T30] audit: type=1400 audit(1029.864:2033): avc: denied { listen } for pid=17214 comm="syz.5.3034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1030.328283][ T30] audit: type=1400 audit(1030.264:2034): avc: denied { map } for pid=17217 comm="syz.2.3035" path="/dev/comedi4" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1030.516886][ T5613] usb 4-1: USB disconnect, device number 67 [ 1030.858352][T17242] overlayfs: failed to clone lowerpath [ 1030.918985][T17244] overlayfs: failed to clone lowerpath [ 1031.292277][T17181] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.310249][T17181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.342386][T17181] bridge_slave_0: entered allmulticast mode [ 1031.354673][T17181] bridge_slave_0: entered promiscuous mode [ 1031.363755][T17181] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.373018][T17181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.411476][T17181] bridge_slave_1: entered allmulticast mode [ 1031.428048][T17181] bridge_slave_1: entered promiscuous mode [ 1031.458736][T16335] Bluetooth: hci1: command tx timeout [ 1031.657325][T17181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1031.684381][T17181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1031.810020][T17181] team0: Port device team_slave_0 added [ 1031.826000][T17181] team0: Port device team_slave_1 added [ 1031.966223][ T30] audit: type=1400 audit(1031.874:2035): avc: denied { audit_write } for pid=17226 comm="syz.3.3036" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1032.020490][T17258] FAULT_INJECTION: forcing a failure. [ 1032.020490][T17258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1032.041840][T17258] CPU: 1 UID: 0 PID: 17258 Comm: syz.1.3043 Tainted: G L syzkaller #0 PREEMPT(full) [ 1032.041859][T17258] Tainted: [L]=SOFTLOCKUP [ 1032.041863][T17258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1032.041870][T17258] Call Trace: [ 1032.041874][T17258] [ 1032.041879][T17258] dump_stack_lvl+0x100/0x190 [ 1032.041897][T17258] should_fail_ex.cold+0x5/0xa [ 1032.041911][T17258] _copy_to_user+0x32/0xd0 [ 1032.041929][T17258] snd_ctl_ioctl+0x77b/0x11b0 [ 1032.041943][T17258] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1032.041964][T17258] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1032.041989][T17258] ? __fget_files+0x215/0x3d0 [ 1032.042005][T17258] ? hook_file_ioctl_common+0x140/0x440 [ 1032.042031][T17258] ? selinux_file_ioctl+0x13b/0x290 [ 1032.042049][T17258] ? selinux_file_ioctl+0xb6/0x290 [ 1032.042066][T17258] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1032.042088][T17258] __x64_sys_ioctl+0x18e/0x210 [ 1032.042115][T17258] do_syscall_64+0x115/0x870 [ 1032.042136][T17258] ? clear_bhb_loop+0x40/0x90 [ 1032.042157][T17258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.042175][T17258] RIP: 0033:0x7f298bf9e019 [ 1032.042191][T17258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1032.042208][T17258] RSP: 002b:00007f298ceff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1032.042226][T17258] RAX: ffffffffffffffda RBX: 00007f298c225fa0 RCX: 00007f298bf9e019 [ 1032.042237][T17258] RDX: 0000200000000780 RSI: 00000000c4c85512 RDI: 0000000000000005 [ 1032.042247][T17258] RBP: 00007f298ceff090 R08: 0000000000000000 R09: 0000000000000000 [ 1032.042257][T17258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1032.042268][T17258] R13: 00007f298c226038 R14: 00007f298c225fa0 R15: 00007ffe38d79b98 [ 1032.042293][T17258] [ 1032.272711][T17181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1032.279718][T17181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1032.305854][ T30] audit: type=1400 audit(1032.254:2036): avc: denied { connect } for pid=17256 comm="syz.1.3043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1032.327388][T17181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1032.364842][ T30] audit: type=1400 audit(1032.334:2037): avc: denied { name_connect } for pid=17256 comm="syz.1.3043" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1032.390856][T17181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1032.456862][T17181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1032.491241][T17181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1032.849998][T17263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1032.980071][T17276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3047'. [ 1033.062640][T17265] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1033.155055][T17181] hsr_slave_0: entered promiscuous mode [ 1033.184436][ T30] audit: type=1400 audit(1033.154:2038): avc: denied { write } for pid=17267 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1033.216608][T17181] hsr_slave_1: entered promiscuous mode [ 1033.228369][T17181] debugfs: 'hsr0' already exists in 'hsr' [ 1033.250690][T17181] Cannot create hsr debugfs directory [ 1033.268997][ T29] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1033.399468][ T30] audit: type=1400 audit(1033.374:2039): avc: denied { write } for pid=17285 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1033.450214][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.490620][ T29] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1033.537883][ T29] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1033.539350][T16335] Bluetooth: hci1: command tx timeout [ 1033.585249][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.630474][ T29] usb 2-1: config 0 descriptor?? [ 1033.736268][T17295] overlayfs: failed to clone lowerpath [ 1033.795943][T17297] overlayfs: failed to clone lowerpath [ 1034.185204][ T29] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1034.195451][T17181] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1034.270147][T17181] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.300235][T17181] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1034.476460][ T30] audit: type=1400 audit(1034.444:2040): avc: denied { shutdown } for pid=17304 comm="syz.5.3050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1035.602809][ T30] audit: type=1400 audit(1035.574:2041): avc: denied { read write } for pid=17275 comm="syz.1.3047" name="sg0" dev="devtmpfs" ino=775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1035.626533][T16335] Bluetooth: hci1: command tx timeout [ 1035.630987][ T30] audit: type=1400 audit(1035.594:2042): avc: denied { open } for pid=17275 comm="syz.1.3047" path="/dev/sg0" dev="devtmpfs" ino=775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1035.805679][ T30] audit: type=1400 audit(1035.704:2043): avc: denied { write } for pid=17293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1035.936316][ T30] audit: type=1400 audit(1035.904:2044): avc: denied { write } for pid=17324 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1036.182552][ T30] audit: type=1400 audit(1036.154:2045): avc: denied { execute_no_trans } for pid=17330 comm="syz.3.3057" path="/7/file0" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1036.246355][ T30] audit: type=1400 audit(1036.184:2046): avc: denied { read } for pid=17330 comm="syz.3.3057" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1036.308255][T17181] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1036.321898][T17181] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1036.330712][ T30] audit: type=1400 audit(1036.184:2047): avc: denied { open } for pid=17330 comm="syz.3.3057" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1036.339289][T17181] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1036.802211][ T29] usb 2-1: USB disconnect, device number 54 [ 1036.830968][T17181] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1036.845625][T17181] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1036.885904][T17181] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1036.933595][T17181] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1036.995182][T17181] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1037.553431][T17347] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1038.146312][T17359] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3062'. [ 1038.228231][T17359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3062'. [ 1038.917786][T17359] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3062'. [ 1039.075760][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1039.075776][ T30] audit: type=1400 audit(1039.044:2052): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1039.095365][T17359] netlink: 'syz.1.3062': attribute type 2 has an invalid length. [ 1039.166794][T17359] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3062'. [ 1039.368074][T17181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1039.402902][T17181] 8021q: adding VLAN 0 to HW filter on device team0 [ 1039.431403][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.438587][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1039.477120][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.484295][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1039.505405][T17382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3068'. [ 1039.581984][T17363] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1039.944701][T17398] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1040.317775][ T30] audit: type=1400 audit(1040.274:2053): avc: denied { append } for pid=17400 comm="syz.3.3070" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1040.521108][T17181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1040.660072][T17181] veth0_vlan: entered promiscuous mode [ 1040.678591][T17410] Invalid source name [ 1040.685747][T17181] veth1_vlan: entered promiscuous mode [ 1040.691572][T17410] UBIFS error (pid: 17410): cannot open "/dev/sequencer", error -22 [ 1040.759953][T17181] veth0_macvtap: entered promiscuous mode [ 1040.833048][T17181] veth1_macvtap: entered promiscuous mode [ 1040.845849][T17414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3074'. [ 1040.855989][T17181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1040.864843][T17181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1040.950633][ T6554] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.980355][T17415] orangefs_devreq_open: device cannot be opened in blocking mode [ 1040.990736][ T30] audit: type=1400 audit(1040.954:2054): avc: denied { write } for pid=17411 comm="syz.2.3075" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1041.022376][T17413] 9p: Bad value for 'rfdno' [ 1041.029142][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.038265][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.043174][ T30] audit: type=1400 audit(1040.954:2055): avc: denied { open } for pid=17411 comm="syz.2.3075" path="/580/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1041.147351][ T30] audit: type=1400 audit(1041.114:2056): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1041.198222][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.332699][T17423] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3078'. [ 1041.354143][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1041.368668][T17423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3078'. [ 1041.383667][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1041.408841][T17423] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3078'. [ 1041.422706][T17423] netlink: 'syz.2.3078': attribute type 2 has an invalid length. [ 1041.448650][T17423] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3078'. [ 1041.480368][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1041.489474][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1041.725005][ T30] audit: type=1400 audit(1041.664:2057): avc: denied { unlink } for pid=17432 comm="syz.1.3083" name="#14" dev="tmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1041.786255][ T30] audit: type=1400 audit(1041.754:2058): avc: denied { ioctl } for pid=17432 comm="syz.1.3083" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1041.924916][T17439] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5cba6 [ 1041.949696][T17439] memcg:ffff8880327e3980 [ 1041.957409][T17439] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 1041.979516][T17439] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 1041.996508][T17439] raw: 0000000000000000 0000000000000000 00000001ffffffff ffff8880327e3980 [ 1042.016552][T17439] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 1042.047219][T17439] page_owner tracks the page as allocated [ 1042.084230][ T30] audit: type=1400 audit(1042.034:2059): avc: denied { read } for pid=4959 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1042.111863][T17439] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 17439, tgid 17432 (syz.1.3083), ts 1041924888776, free_ts 1041923683413 [ 1042.164739][ T30] audit: type=1400 audit(1042.034:2060): avc: denied { search } for pid=4959 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1042.191765][T17439] post_alloc_hook+0xfd/0x120 [ 1042.206901][ T4928] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1042.218558][T17439] get_page_from_freelist+0xf48/0x3530 [ 1042.225795][ T4928] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1042.235161][ T4928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1042.247849][T17439] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 1042.254010][ T4928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1042.264706][ T4928] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1042.286771][T17439] alloc_pages_mpol+0x1fb/0x540 [ 1042.321963][ T30] audit: type=1400 audit(1042.034:2061): avc: denied { write search } for pid=4959 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1042.359961][T17439] folio_alloc_noprof+0x22/0x250 [ 1042.388750][T17439] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 1042.433862][T17439] filemap_alloc_folio_noprof+0x5e/0x80 [ 1042.485454][T17439] page_cache_ra_order+0x539/0xed0 [ 1042.543880][T17439] filemap_fault+0x1943/0x3130 [ 1042.570168][T17439] __do_fault+0x10b/0x440 [ 1042.593305][T17439] do_fault+0xa99/0x1750 [ 1042.621096][T17439] __handle_mm_fault+0x187d/0x2a00 [ 1042.641063][T17439] handle_mm_fault+0x37b/0xa30 [ 1042.795185][T17439] __get_user_pages+0x1178/0x32a0 [ 1042.807355][T17439] populate_vma_page_range+0x267/0x3f0 [ 1042.819910][T17439] __mm_populate+0x107/0x3a0 [ 1042.831471][T17439] page last free pid 17438 tgid 17438 stack trace: [ 1042.929974][T17439] __free_frozen_pages+0x79f/0x1090 [ 1042.957812][T17439] __kasan_populate_vmalloc+0x1ea/0x210 [ 1042.995335][T17439] alloc_vmap_area+0x95d/0x2bb0 [ 1043.014391][T17439] __get_vm_area_node+0x1ca/0x330 [ 1043.045242][T17439] __vmalloc_node_range_noprof+0x228/0x1630 [ 1043.061223][T17439] __vmalloc_node_noprof+0xad/0xf0 [ 1043.078289][T17439] __vmalloc_node_range_noprof+0xca1/0x1630 [ 1043.091066][T17439] vmalloc_user_noprof+0x9e/0xe0 [ 1043.103766][T17439] kcov_ioctl+0x4d/0x750 [ 1043.108200][ T5751] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1043.128246][T17439] __x64_sys_ioctl+0x18e/0x210 [ 1043.136037][T17439] do_syscall_64+0x115/0x870 [ 1043.148240][T17439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.162368][T17439] ------------[ cut here ]------------ [ 1043.167910][T17439] kernel BUG at mm/filemap.c:858! [ 1043.183987][T17439] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 1043.190448][T17439] CPU: 1 UID: 0 PID: 17439 Comm: syz.1.3083 Tainted: G L syzkaller #0 PREEMPT(full) [ 1043.201386][T17439] Tainted: [L]=SOFTLOCKUP [ 1043.205704][T17439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1043.215769][T17439] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0 [ 1043.221769][T17439] Code: 45 c1 ff 48 c7 c6 e0 a3 dd 8b 4c 89 ef e8 e6 ee 12 00 90 0f 0b e8 fe 44 c1 ff 48 c7 c6 40 a4 dd 8b 4c 89 ef e8 cf ee 12 00 90 <0f> 0b e8 e7 44 c1 ff 48 c7 c6 c0 a4 dd 8b 4c 89 ef e8 b8 ee 12 00 [ 1043.241387][T17439] RSP: 0018:ffffc900034bf3f8 EFLAGS: 00010246 [ 1043.247464][T17439] RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc9001808e000 [ 1043.255442][T17439] RDX: 0000000000080000 RSI: ffffffff825c0c48 RDI: ffff88803092cf44 [ 1043.263421][T17439] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1043.270762][ T5751] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1043.271387][T17439] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000002 [ 1043.288223][ T5751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.288335][T17439] R13: ffffea000172e980 R14: 000000000002c928 R15: 0000000000000000 [ 1043.304254][T17439] FS: 00007f298cebd6c0(0000) GS:ffff888123ed8000(0000) knlGS:0000000000000000 [ 1043.313189][T17439] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1043.319760][T17439] CR2: 000000110c27c1e6 CR3: 0000000044329000 CR4: 00000000003526f0 [ 1043.327721][T17439] Call Trace: [ 1043.330982][T17439] [ 1043.333895][T17439] ? __pfx___filemap_add_folio+0x10/0x10 [ 1043.339526][T17439] filemap_add_folio+0x1d3/0x630 [ 1043.344454][T17439] ? __lock_acquire+0x49f/0x1a40 [ 1043.349373][T17439] ? __pfx_filemap_add_folio+0x10/0x10 [ 1043.354818][T17439] ? __pfx___css_rstat_updated+0x10/0x10 [ 1043.360436][T17439] page_cache_ra_order+0x602/0xed0 [ 1043.365575][T17439] filemap_fault+0x1943/0x3130 [ 1043.370330][T17439] ? __pfx_filemap_fault+0x10/0x10 [ 1043.375434][T17439] ? find_held_lock+0x2b/0x80 [ 1043.380100][T17439] __do_fault+0x10b/0x440 [ 1043.384418][T17439] do_fault+0xa99/0x1750 [ 1043.388651][T17439] __handle_mm_fault+0x187d/0x2a00 [ 1043.393759][T17439] ? mt_find+0x45e/0x8e0 [ 1043.397985][T17439] ? __pfx___handle_mm_fault+0x10/0x10 [ 1043.403427][T17439] ? __pfx_mt_find+0x10/0x10 [ 1043.408007][T17439] handle_mm_fault+0x37b/0xa30 [ 1043.412760][T17439] __get_user_pages+0x1178/0x32a0 [ 1043.417768][T17439] ? __pfx___get_user_pages+0x10/0x10 [ 1043.423125][T17439] populate_vma_page_range+0x267/0x3f0 [ 1043.428570][T17439] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1043.434545][T17439] ? __pfx_find_vma_intersection+0x10/0x10 [ 1043.440331][T17439] ? do_mmap+0x93f/0x12f0 [ 1043.444642][T17439] __mm_populate+0x107/0x3a0 [ 1043.449215][T17439] ? __pfx___mm_populate+0x10/0x10 [ 1043.454309][T17439] ? up_write+0x2e5/0x5c0 [ 1043.458620][T17439] vm_mmap_pgoff+0x37f/0x470 [ 1043.463194][T17439] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1043.468284][T17439] ? __fget_files+0x215/0x3d0 [ 1043.472939][T17439] ? __fget_files+0x21f/0x3d0 [ 1043.477593][T17439] ksys_mmap_pgoff+0x3cb/0x610 [ 1043.482355][T17439] ? kcov_ioctl+0x17a/0x750 [ 1043.486849][T17439] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1043.492117][T17439] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1043.497905][T17439] __x64_sys_mmap+0x125/0x190 [ 1043.502573][T17439] do_syscall_64+0x115/0x870 [ 1043.507163][T17439] ? clear_bhb_loop+0x40/0x90 [ 1043.511820][T17439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.517693][T17439] RIP: 0033:0x7f298bf9e019 [ 1043.522089][T17439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1043.541677][T17439] RSP: 002b:00007f298cebd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1043.550070][T17439] RAX: ffffffffffffffda RBX: 00007f298c226180 RCX: 00007f298bf9e019 [ 1043.558019][T17439] RDX: 0000000001000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 1043.565967][T17439] RBP: 00007f298c03500c R08: 000000000000000c R09: 000000002c93a000 [ 1043.573919][T17439] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 1043.581881][T17439] R13: 00007f298c226218 R14: 00007f298c226180 R15: 00007ffe38d79b98 [ 1043.589861][T17439] [ 1043.592891][T17439] Modules linked in: [ 1043.598415][T17439] ---[ end trace 0000000000000000 ]--- [ 1043.602988][ T5751] usb 4-1: Product: syz [ 1043.608036][ T5751] usb 4-1: Manufacturer: syz [ 1043.612696][ T5751] usb 4-1: SerialNumber: syz [ 1043.621319][ T5751] usb 4-1: config 0 descriptor?? [ 1043.638715][ T5751] hub 4-1:0.0: bad descriptor, ignoring hub SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1043.653290][ T5751] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1043.662369][T17439] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0 [ 1043.669637][ T5751] f81232 4-1:0.0: f81534a converter detected [ 1043.676756][T17439] Code: 45 c1 ff 48 c7 c6 e0 a3 dd 8b 4c 89 ef e8 e6 ee 12 00 90 0f 0b e8 fe 44 c1 ff 48 c7 c6 40 a4 dd 8b 4c 89 ef e8 cf ee 12 00 90 <0f> 0b e8 e7 44 c1 ff 48 c7 c6 c0 a4 dd 8b 4c 89 ef e8 b8 ee 12 00 [ 1043.729797][ T29] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 1043.731849][T17439] RSP: 0018:ffffc900034bf3f8 EFLAGS: 00010246 [ 1043.743941][T17439] RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc9001808e000 [ 1043.752372][T17439] RDX: 0000000000080000 RSI: ffffffff825c0c48 RDI: ffff88803092cf44 [ 1043.770030][T17439] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1043.846363][ T5751] usb 4-1: f81534a converter now attached to ttyUSB0 [ 1043.900037][ T29] usb 1-1: not running at top speed; connect to a high speed hub [ 1043.910105][ T29] usb 1-1: config 5 has an invalid interface number: 32 but max is 0 [ 1043.935925][ T29] usb 1-1: config 5 has no interface number 0 [ 1043.950201][ T29] usb 1-1: config 5 interface 32 has no altsetting 0 [ 1043.963288][T17439] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000002 [ 1043.994468][T17439] R13: ffffea000172e980 R14: 000000000002c928 R15: 0000000000000000 [ 1044.012621][T17439] FS: 00007f298cebd6c0(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 [ 1044.045545][T11470] smbdirect: ib_dev[syz1] removed [ 1044.056171][T17439] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1044.098341][T17439] CR2: 000055f2316c0a78 CR3: 0000000044329000 CR4: 00000000003526f0 [ 1044.109900][T17442] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.117010][T17442] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.127748][T17442] bridge_slave_0: entered allmulticast mode [ 1044.140164][T17439] Kernel panic - not syncing: Fatal exception [ 1044.146497][T17439] Kernel Offset: disabled [ 1044.150821][T17439] Rebooting in 86400 seconds..