last executing test programs: 28.592612773s ago: executing program 3 (id=231): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x2c) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e21, 0x0, @empty, 0x4}}, 0x0, 0x4}, 0x90) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000080)={r4, 0x2b, "37ce6ae92cdaedceae246205a5df3f10c649e12d492e604eb273bbb0eaa98272ea891c86c612aed2f81d05"}, &(0x7f0000000140)=0x33) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x800, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1705, 0x200feff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20000881) 28.356269996s ago: executing program 3 (id=234): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280), 0x2) syz_usb_connect(0x6, 0xf3b, &(0x7f0000001280)={{0x12, 0x1, 0x250, 0x83, 0x9c, 0xbe, 0x20, 0x984, 0x301, 0x128, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf29, 0x4, 0x7, 0x4, 0x40, 0x2, "", [{{0x9, 0x4, 0xb2, 0x3, 0x9, 0x76, 0x78, 0x61, 0x40, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "f2b706118eff"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1, 0x7, 0x4}, {0x6, 0x24, 0x1a, 0x9, 0x16}}, @uac_control={{0xa, 0x24, 0x1, 0x40, 0x2e}, [@extension_unit={0xc, 0x24, 0x8, 0x2, 0x9, 0x80, "476c0ce805"}, @processing_unit={0xc, 0x24, 0x7, 0x5, 0x0, 0x38, "36b270f667"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x100, 0x4, 0x4d, 0x1, 0x0, 0x8}]}], [{{0x9, 0x5, 0x0, 0x3, 0x8, 0x6, 0x7f, 0x10, [@generic={0x25, 0x23, "4498ac48f080a07126841ec97b61ee1b47c0fe44b5c07344c8fa2131a04d3b92d41333"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xd5, 0x7}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x1, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x1}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x8, 0x8, 0x4, [@generic={0xda, 0x24, "a50e58e581983b0106db54e630afee4d5c53bb3d3c62fb85604221649f2699722bc517de85ecfc6b0218e7f03a8692de274bb6d22fb6b0752de4ce3b875f1138a829431651ab0314cbf8a8de272692e1f9a84df1d9c996fdfeb80dc8d71122aa68f69ebdbd62a418f3230e4a736c88824ca950f2f7e8a4b7c8efec8b70e1fddb1bc0331dc8a37c4622f56ed2403cf7b62f032f73798e5b5c42a822a790fc77933d1566836d084c6d7e648a138150155e102da43c55dfc7e5d6accf25b2b0464251657b486138f0a2107886a33105f2f13865f78f2a493a0b"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x400}]}}, {{0x9, 0x5, 0x0, 0xc, 0x400, 0x6, 0xe7, 0x2, [@generic={0x70, 0x10, "9957dde9b1f0513b687bf2f8bd225252164eed0801bd91dd9f83b9c466be16a18a4572ecec5c718c0d240fc73baa14b7cb04cbdc4c4696e2e6d61576ff6bfb8adc72cf61a236a88d1e2a4bc50c7d312bc1cf9b38049666c5ef79e69a5a042a6f8d1de91547d04a85d11c648b8661"}, @generic={0x52, 0x1, "9a9971a39081836ddddba6cd17e3a2b19f3dbe245ad6ba3a8d5633bdd7c8963e6dda849ab856fb61eadea826ab3c96764ffed8f2a5c9e500425f6be8ae104b3ab06f32b9bbb8643c8258f26ec636d011"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x40, 0x4, 0x8, [@generic={0xdc, 0xf, "57b816ec4e5830597f1915f7f8db0d3e97085cd1bd2a54def4eb8eab2b9b2a04c35d814dcc46b6954231929c149f6325f02cec5bdd1a4a8b6df72926397c36886f70eef872589287fcdda4273fb4ae02b640ff20289ccf6d7787f42efaf897a6fc90b8c7b5925225f5ea72e688026f79b68b03f1ffd72a2fd9f0b491c52046019671a504d94fcd6229ad1cd336ba3c12c8b13d31f116f07fe6335dd1a208459c856e882a6194046d87c6c030938a69d3bb2313e383129e78dd26ce6753fccf7f9c8ddc6445d456662a73548c896d37a290ba94b57071245c4603"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x9, 0xbe, 0xb}}, {{0x9, 0x5, 0xe, 0x8, 0x20, 0x1, 0x1, 0x4}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x2, 0x7e, 0x7, [@generic={0x19, 0x5, "a1a8f41316f18af1100964ff326135a866a32fbe1d5447"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x20, 0x0, 0x9, 0x2}}]}}, {{0x9, 0x4, 0xac, 0x0, 0xc, 0xc5, 0xdd, 0x8c, 0x5, [], [{{0x9, 0x5, 0x5, 0x0, 0x40, 0x9, 0x5, 0xa, [@generic={0xd4, 0xb, "cff4ddcd7c1a7d37add265bc49d4d00d03cf79f83deacd983c918bb111863d11bc94948bbe4be719796468570c69c158263e0cba77f1ab151fdc3847d7e013eac0bafbf3702447de20b090d48f25de0274f77cfa601e0511228c678c407a048149f336dde68ee191a4d72f08015a2ed0d26a10fa40b621601eee67407051e0112803cccd136528716cf125ac1cb941b08dceb8990cbd65cee29f0c06fd62c6bc00ce104167fff194c3b3a80367f4defcc0b802b6d2f3aa08db70148f04b94fb4666dd7dfa8eae3ddb1c5208cd1fef77e9f19"}, @generic={0xe7, 0x3, "1443552fb3a2af8fa3c1a23ae82f3b26be200cf10a07d045ef7c6156273d48d5fef883e4f52e0ca65879d456ea83bdbd371575fc98bde48535dceda4b64da5255a5aeb44cc68b4006031bff37c1fbd327cfe989a89ad8a7220987cbd22114952551de9d2890859bcb0b1bf514079784889541a0d9a50fc886b3924613b375d07e3eda5322d239ff9660525c1b3097faa5328bdd4056e5405174ac069a1800a82fdfe6f5556fe4f6ef8ed5e868a77c74961bccdf9bf17b3b8be618383d74dcdb2f493f086bc959b05aa69c14239251e8c3ed66c42ed959808fa6494a3710bec031fc3c45d42"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x20, 0x5, 0x5, 0x7, [@generic={0xa9, 0xc, "7c80c1bb76c66826c3ecb766c991859807bf62c29555526ed1e41ad237fe7bfc18daa9eeafc28bcfa4ec04bd15d72c0c4dd562f40381ae308b34973d30e75e1aef1b03f0a815e24c765acf5e7162ef98aef455ced438985fac4ba359693c45de6f1a7898a56f7a8b1918afff97e155c0efe4989343b08701d3e895463729ef6a44da55e754a199e809c2c42dc2764031f318f2a4eff25af09a0a5b64aefae5c102e990d595a883"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x0, 0x0, 0xf9, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xf9, 0x2}]}}, {{0x9, 0x5, 0x8, 0x1a, 0x200, 0x4, 0x68, 0x46, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x3, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xf2, 0x8aca}, @generic={0x43, 0x21, "f709bd67d4856b6cb04a734416235f97d9efccadc361181032e48d106166485e6cea2e3444bf0afd0b42d0e6d3ef7ab6438c0bef3e0d641caf718edff432534ab1"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x400, 0x2, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x81, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0xe}]}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x7, 0xf, 0x14, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x80}]}}, {{0x9, 0x5, 0xd, 0x2, 0x40, 0x4, 0x1, 0xff}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0xf, 0xb0, 0x5}}, {{0x9, 0x5, 0x0, 0x4, 0x40, 0x5, 0x9, 0x8d, [@generic={0x6d, 0xa, "f167b513bc0c5e8a144b4d5c2b38b8a03ea3aec66f5df0cd4d469c7a9b52af66d5260a10995e36c93c62ed985fbf7956482ef2a0ead6eff36b5e586f576598dcc28e1260268ee888221ee930ccbe63c67072304515178aacbb277d0d43d3e41d3827a531b029ebd2815198"}, @generic={0xb7, 0x22, "35a175bb5d253d712aa90c81c30e0da4f718e5411c980c17272b6ade62695cd13917e201cd75ae4fcdafdab272eb81ac23f22fd9ac8031c76044db7d60fb85ce9680e98c97538f88937138559256c6b9c3458275ec8f27a2650fb338f183f6d0bbedaeb474416e0ba34a77f124615b9f0d1dddb5fef0828c87d12dbc6743ec9c49b12a0f37c20367ef24b02da63ea33e3c7c0d1799c25f01af1e8b25df44baf7029a22235f55d7d237724db1a02205b9aa02237880"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x8, 0x3, 0x86, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x2}]}}, {{0x9, 0x5, 0xf, 0x1, 0x20, 0x4, 0x84, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x3}]}}]}}, {{0x9, 0x4, 0xe4, 0x2, 0x6, 0x6, 0x85, 0xfc, 0x2, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "9b83eb4b"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x0, 0x8, 0x1}, [@mdlm={0x15, 0x24, 0x12, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x10, 0xff00}, @obex={0x5, 0x24, 0x15, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7}, @country_functional={0xa, 0x24, 0x7, 0x0, 0x7, [0x7ff, 0x2]}]}], [{{0x9, 0x5, 0x4, 0x0, 0x20, 0x1, 0x4, 0xff}}, {{0x9, 0x5, 0x3, 0x1, 0x200, 0x2, 0x7, 0x25, [@generic={0x56, 0x5, "faa2d5ebfe1a7a6df72965b5c791cb51fea127e56498e71c01a3e1b51a391a883b1d13e7c362a8c23f5abde29db7646f235dd8f4e9cd880789bdf26873258055d24c06c4682125907d800ac11b5a2d4e14c9e0ae"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x3, 0x40, 0x8, [@generic={0xf, 0xa, "a314f15987afaa9033f8c1ac58"}, @generic={0x62, 0x8, "fa221016ff9f392c8a71a371bfdc5ee1775d7432e64cb3d90ffa96d33328ae6404c6912e8c0f9e2a848edb1779224399106492d5f7c47b6b59b1dc9456448d4cfbc3c1644d6f39841460ef8202eb2a238c6f9db234a1a87d88eeda3ec2d9014b"}]}}, {{0x9, 0x5, 0x1, 0x1c, 0x8, 0x9, 0x6, 0x9}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x0, 0x3, 0x3, [@generic={0xd2, 0x10, "653a019d94b9ff9247bd2dccbc05fa553b5d156e2dcf83784acd4ff40989086c89ab7a0da7f0d06198b5b3caf579fc35f842f62e7edfa5649296cc30cee48fcfb8379583df9cdf10f17254888608659613738aac3ffd0be407547e6ba083e74ec87389691f928d3982603e0bbafa1851046b5242ba9c81ef65a487fefb3a78b10671a6a84ae7f012caba5a3f1754c3dc5dffd08cd812b9af9859d2cde274f2cef0d78c0cfe3325f1de4ce1b189d08996a8540e2de62204f7c5279b85f907da5ff3df82e6aef7296d2da1687e40887138"}, @generic={0x9c, 0xb, "1969b95010024838360b4ec81b7d99ce49b75d7a8a9fa7ed8c59e59e9017011ac927cede676d703a4f69db98108e100127092ca859c873bdde30793d0db0a12816e6b2f0d7231385e42aa9167dabc9254e36cb6a6e778131d13f720bd9f8ee71887e194cb1117aa016ae5d2f49071ac27779592ed89024ea8d9ad44ce84ec03de8e65c21108e9122897be7af2c94cf57eaccbda091310168588a"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x40, 0x1, 0x3, 0x2, [@generic={0x6, 0x23, "2b880cf9"}, @generic={0xe3, 0x22, "67f04e58573b83a3eda859052ae48b5171083c41680721433cf17d850e3cfb73fa5584b2efa4449636dd11da7494f39dad931b8ee6eb748957fa3d3f9302ce6488b193c649fc72529f7edee525a9c1dfdd8e7a989bc3df3efe1bb9f1e18fea8f2aef7883092bffb5b44f6ad04b675647aefd286a27d50e45205749e743e17c800ea5f3f189356b7b3dc6dbf4b3572d001335d5749425aa0779c714a4570db91335c27ae1d6e65674fd4b7268e5d4bddea9ea3606b7a6e19c6d794dc11e3f9fde89248f386806e8e108fb16b218270be4cc7f9eea157faf0d1a253ac0c629999d8a"}]}}]}}, {{0x9, 0x4, 0xb0, 0x6, 0x6, 0xff, 0x3, 0x2, 0x3, [], [{{0x9, 0x5, 0x7, 0x10, 0x3ff, 0xca, 0x5, 0xd, [@generic={0x1e, 0xa, "a6aeccd91ae491a660fa945ac69c2f893f08544d7866a8c66d8b2533"}]}}, {{0x9, 0x5, 0x1c, 0x3, 0x20, 0x3, 0x9, 0x0, [@generic={0x20, 0xf, "fea56a2b2ff77adbeaf0c95241b53b8d7f0e191efe7c72c1c0c728cb52b4"}, @generic={0x64, 0x11, "95a7802b04b6a066361f849d9012bf785131248e2ef7b4a79f8fa81872eee8713e241951cf5244f82d12c6ce1745b7e2c476a5f61ae7b25cbdb99ecd4519a810f7eeae078a3b3b90c8f728b567c049d55b51f1a52e3eaacb6fca86df702fc2d957bd"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x10, 0x7, 0xd6, [@generic={0x66, 0xa, "277ccbc12a272c249e5277ffc656d7af3432a473753dcea1ec73f8a89a99d99173d526fb810e6eb9a0a7bc51e53073b086eaddbe654ce5c8a06d7a78671bb2242d9a10e0d95b22ffa4ca44ff7b9152eb0d980cf6848eb81225c19acf0ba6762512d7bb31"}, @generic={0xb9, 0x6, "9fdb739c9f72748ca5d5c5967df5b1b81f617050bd940a22061d1986de961813b14372a39cc0a9f565b8259af2f5557deda4268ad73a0d5ee8d79668c102b0ab2702b194e6d7d2e2625eb83c4ec69d6cbddb12c8c29c70f548b2e851e08ee9ab5cc6c7a4c024c9250bed6bf108971b35765407b73f2a2bfa89ad68b313bf888cee2f8eae90a21c84ac83ca5f79a61bb6d6a9d7393ec38c37c6eff0753a48053caa49a59de0f941f4a97fa5a811d554040e3afcd479b0e7"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x8d, 0x7, 0x8c, [@generic={0x9d, 0x2, "f22ab3577f2213d9c1f1230f14fbc39d787f819e7a70e3be413a9c8d0e9161940e821af435d614fb68cc2c583b91a1f262e8a3f6fb92958798c321533f71566532103850ed4b416d0891759db8369abe5d95bd7ddc73691e78aa99beb7fadad57f7564960ca2a2fd98fbd586b42a4b5952588fac7101a42a8d57fee618fe1e736e4a3bfccf9b8b19f3c1ff24406790f16f36011e4bae38e3e43e1b"}, @generic={0xde, 0x23, "4dbb0bea7bb6cf22157160c470cd5d55d207d79fa57f50230fe8be5b2871ced11d97f3ad958fb43266049abce404cfe4acda0c7ef49d1f5aa2bcde518e4094032a280cacb2b31b557669d579d8bfbdee4009b55b09856c03e8e02f472240ca4032a5523fdb21e5b7607dd9935fab659ff125200f86d16a8bbde9a56e99c47301900c33108a7a9220cc01bf184c72cde766d9fe768176e034480b60bf3c0343c1ff18fa3660cb973eb3a62b7fef712995c60800700208d79c1c13dd4871798e83072d9fd93eaa2f0a1e7ba8e9232b9bdc5e24b4f819ad994f9f7de505"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x0, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x1}]}}, {{0x9, 0x5, 0xae43028c759607ff, 0x0, 0x40, 0xf, 0x6, 0x3}}]}}]}}]}}, &(0x7f00000022c0)={0xa, &(0x7f00000021c0)={0xa, 0x6, 0x310, 0x8c, 0x5, 0xfc, 0x8, 0x9}, 0x97, &(0x7f0000002200)={0x5, 0xf, 0x97, 0x4, [@generic={0x7d, 0x10, 0xb, "b23fa9ee3df7a0ea0adf91036859aca751f214dc65e710e996c20108c8c6140b6292b644eec8823b8de1acc17127276bace02a50130c09141bdcb24f299f44b669b0d5c7520ebcf0a0a1a51c51d43d6811d3327119258014e91bd932f42ce7b017d67ac1f1fb2dfd78105d1a7847bc18b0dd3df8a5458f123439"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0xf9, 0x3, 0xf8, 0xfff7}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0x4, 0xfff9}]}}) r2 = memfd_create(&(0x7f0000001100)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03', 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a80)=@deltfilter={0x38, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xf}, {0xfff1, 0xb}, {0x2, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8480}, 0x24000000) syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x8042) r3 = syz_open_dev$evdev(&(0x7f0000000280), 0x2, 0x822f01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x12d8) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000041000701fefeffff00000000017c0000040042801400018006000600800a000008001800", @ANYRES32=0x0, @ANYBLOB="040046f5"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 27.601535048s ago: executing program 3 (id=240): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e047f2920"], 0x6a) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f00000000c0)={0x2, 0x100, 0x0, 0x400, 0x2, 0x200}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0305000000000001800012800c0001006d6163766c616e000c0002800600020001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 24.350489984s ago: executing program 3 (id=264): syz_emit_ethernet(0x4a, &(0x7f0000000d80)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c200000008004a00003c0001000000069078a814141fac1e0001440f08e0000002e00000027f0000014404ef400000000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200009078ffff"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) open$dir(&(0x7f0000000040)='./file0/file1\x00', 0x20482, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x29, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r5, {0xb}, {}, {0x8, 0xfff4}}}, 0x24}}, 0x40004) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r7, 0x108000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r7, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x80b00, 0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054) 23.375984962s ago: executing program 3 (id=270): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x131) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) flock(r1, 0x5) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x15, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200fe80ffff00000e1208000f0100810401a80016ea1f000b400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 22.156130514s ago: executing program 3 (id=273): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) (async, rerun: 32) r1 = socket(0xa, 0x5, 0x0) (rerun: 32) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x4e24, 0x2, @loopback}], 0x1c) (async) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x6, 0x9, 0x2}, 0x8) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x0, 0x34}, 0x28) (rerun: 32) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x10}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x2004a6}, 0x94) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) (async) dup(r1) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}, [@jmp={0x5, 0x1, 0x8, 0x0, 0x4, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0x86, &(0x7f0000000280)=""/134, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x6, 0xe7534fba, 0x56}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x569de0c1}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0xa5ed, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 32) waitid(0x2, 0x0, &(0x7f00000000c0), 0x20000000, 0x0) (async, rerun: 32) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) (async) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) (async) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r7, 0x40786e88, &(0x7f0000000b00)={{&(0x7f0000000780)=[{0x4, 0x2d, 0x2, {0xf4, 0x6}, 0x4, 0x101}, {0x5, 0x7f, 0xffffffff, {0x6, 0x5}, 0x0, 0x200000000, 0x7}, {0xb77, 0x0, 0x6, {0x7, 0x200}, 0x7, 0x10001, 0x4}, {0x400, 0x1, 0x8, {0x40, 0x9}, 0x0, 0x5, 0x3ff}, {0xe9, 0xffffffffffff73c2, 0x9, {0x8, 0x100000001}, 0x653, 0x3ed8dba0, 0x200}, {0x2, 0xe, 0x5, {0xbc, 0x1}, 0x5c05, 0x4, 0x4}], 0x6, 0x40, 0xfffd, 0x5}, {&(0x7f0000000940)=[{0x5e2, 0x80}, {0x3, 0x1}, {0x1, 0xe8}, {0x5, 0x9}, {0x401, 0x2}, {0x5, 0xdd3}, {0x4995a60e}, {0x9}, {0x10, 0x7}], 0x9, 0x10, 0x100, 0xe}, {&(0x7f0000000a00)=[0x53a0, 0x400, 0x4, 0x5], 0x4, 0x8, 0x0, 0xbda}, {&(0x7f0000000a40)=[{0x68e, 0x7, 0x4, 0x1dc, 0x200}, {0x6, 0x7fffffff, 0x4, 0x5, 0x3ff}, {0x4, 0x7fffffff, 0xabe, 0x3, 0x5}], 0x3, 0x28, 0x5, 0xd1}, {&(0x7f0000000ac0)=[0x6a, 0x0, 0x4, 0x6, 0x7, 0x3, 0x10, 0x8dd], 0x8, 0x8, 0x5, 0x98ff}}) write$P9_RLERRORu(r6, &(0x7f0000000280)=ANY=[@ANYRESHEX=r5], 0x10) (async, rerun: 32) socket$igmp(0x2, 0x3, 0x2) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async, rerun: 32) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) 21.776686255s ago: executing program 32 (id=273): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) (async, rerun: 32) r1 = socket(0xa, 0x5, 0x0) (rerun: 32) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x4e24, 0x2, @loopback}], 0x1c) (async) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x6, 0x9, 0x2}, 0x8) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x0, 0x34}, 0x28) (rerun: 32) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x10}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x2004a6}, 0x94) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) (async) dup(r1) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}, [@jmp={0x5, 0x1, 0x8, 0x0, 0x4, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0x86, &(0x7f0000000280)=""/134, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x6, 0xe7534fba, 0x56}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x569de0c1}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0xa5ed, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 32) waitid(0x2, 0x0, &(0x7f00000000c0), 0x20000000, 0x0) (async, rerun: 32) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) (async) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) (async) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r7, 0x40786e88, &(0x7f0000000b00)={{&(0x7f0000000780)=[{0x4, 0x2d, 0x2, {0xf4, 0x6}, 0x4, 0x101}, {0x5, 0x7f, 0xffffffff, {0x6, 0x5}, 0x0, 0x200000000, 0x7}, {0xb77, 0x0, 0x6, {0x7, 0x200}, 0x7, 0x10001, 0x4}, {0x400, 0x1, 0x8, {0x40, 0x9}, 0x0, 0x5, 0x3ff}, {0xe9, 0xffffffffffff73c2, 0x9, {0x8, 0x100000001}, 0x653, 0x3ed8dba0, 0x200}, {0x2, 0xe, 0x5, {0xbc, 0x1}, 0x5c05, 0x4, 0x4}], 0x6, 0x40, 0xfffd, 0x5}, {&(0x7f0000000940)=[{0x5e2, 0x80}, {0x3, 0x1}, {0x1, 0xe8}, {0x5, 0x9}, {0x401, 0x2}, {0x5, 0xdd3}, {0x4995a60e}, {0x9}, {0x10, 0x7}], 0x9, 0x10, 0x100, 0xe}, {&(0x7f0000000a00)=[0x53a0, 0x400, 0x4, 0x5], 0x4, 0x8, 0x0, 0xbda}, {&(0x7f0000000a40)=[{0x68e, 0x7, 0x4, 0x1dc, 0x200}, {0x6, 0x7fffffff, 0x4, 0x5, 0x3ff}, {0x4, 0x7fffffff, 0xabe, 0x3, 0x5}], 0x3, 0x28, 0x5, 0xd1}, {&(0x7f0000000ac0)=[0x6a, 0x0, 0x4, 0x6, 0x7, 0x3, 0x10, 0x8dd], 0x8, 0x8, 0x5, 0x98ff}}) write$P9_RLERRORu(r6, &(0x7f0000000280)=ANY=[@ANYRESHEX=r5], 0x10) (async, rerun: 32) socket$igmp(0x2, 0x3, 0x2) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async, rerun: 32) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) 5.152721589s ago: executing program 1 (id=381): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x56, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x4b, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x82000000}], 0x1) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000340)={[0x1, 0x5, 0x9, 0x3, 0x833, 0xfb7, 0x0, 0x10000, 0xfffffffffffffff5, 0x3, 0x8, 0x6, 0x9, 0xfffffffffffff001, 0x8001, 0x1], 0x29000, 0x104a00}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002180), 0xa0002, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/hibernate_compression_threads', 0x48a82, 0x0) read$FUSE(r8, &(0x7f0000001340)={0x2020}, 0x2020) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x1, 0xa, 0x0, 0x80009, 0x9, 0xffffff7f, 0x8000002}]}) pipe(&(0x7f00000000c0)) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x486, 0x0, 0x80000021}]}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000001c0)={0x2, 0x1, 0x1, 0xe, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r11, {0x5}}, './file0\x00'}) ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r11, 0x3ba0, &(0x7f0000000480)={0x48, 0x2, r14, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r11, 0x3ba0, &(0x7f0000000000)={0x48, 0xa, r15, 0x0, r13}) 3.965418377s ago: executing program 1 (id=386): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4eb26, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000007c0)={0x9, 0x2, 0x1, 0x0, 0x8}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0xc048aec8, &(0x7f0000000240)={0x4, 0x0, @ioapic={0xf000, 0x1, 0x7, 0x8001, 0x0, [{0x0, 0x7f, 0xa, '\x00', 0x4}, {0x5, 0x1, 0xf6, '\x00', 0x2}, {0x75, 0x4, 0x3, '\x00', 0x76}, {0xc, 0x1, 0x4, '\x00', 0x96}, {0x1, 0x4, 0x4, '\x00', 0x77}, {0x4, 0x3, 0x6, '\x00', 0xf}, {0x2, 0x9, 0xe1, '\x00', 0x4}, {0x3, 0x3, 0xff, '\x00', 0x38}, {0x9, 0x6, 0x40, '\x00', 0x2}, {0xf, 0xf, 0xb, '\x00', 0xfb}, {0xff, 0x3, 0xa1, '\x00', 0x52}, {0x4, 0x1, 0x4, '\x00', 0x1}, {0x1, 0x0, 0x0, '\x00', 0x2}, {0x4, 0x2, 0x7f, '\x00', 0x8}, {0x9f, 0x8, 0x7}, {0x40, 0xb, 0xa, '\x00', 0xb2}, {0x5, 0x80, 0x70, '\x00', 0x9}, {0x6, 0xff, 0x7, '\x00', 0x9}, {0x8, 0x8, 0xa, '\x00', 0x5}, {0x1, 0x9, 0x80, '\x00', 0x4a}, {0x6, 0x4, 0xff, '\x00', 0x6a}, {0x1, 0x7f, 0x8, '\x00', 0x80}, {0x42, 0x56, 0x4, '\x00', 0x6}, {0x7d, 0x5, 0x4, '\x00', 0x58}]}}) r4 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000026c0)={'tunl0\x00', &(0x7f0000002640)={'erspan0\x00', 0x0, 0x20, 0x80, 0xaa, 0x1, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x68, 0x0, 0x7, 0x4, 0x0, @loopback, @empty}}}}) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x20502, 0x0) ppoll(&(0x7f0000000040)=[{r5, 0x7141}], 0x1, 0x0, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={r5, &(0x7f0000000080)='*}:^*\\\x00', 0x8080, &(0x7f00000000c0)={@_ha_fsid={[0x4, 0x3]}, {0x0, 0x7a8a, 0x67ed, 0x4}}, 0x10001, &(0x7f0000000100), &(0x7f0000000140)=0xff}) readv(r6, &(0x7f0000001900)=[{&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000004c0)=""/232, 0xe8}, {&(0x7f00000005c0)=""/104, 0x68}, {&(0x7f0000000640)=""/157, 0x9d}, {&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/245, 0xf5}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/131, 0x83}], 0x8) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000000f1401007cba27bd7000fcdbdf2509004500756d61640000000008000100e68d"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 2.842064312s ago: executing program 1 (id=390): write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x19, 0x1, {0x3e8, {0x2, 0x11, 0x100}, 0x14, 0x0, 0x0, 0xfb, 0x8001, 0x6, 0xbf42, 0x20000008000007, 0x45, 0x8, 0x0, 0x2, 0xfffffffffffffffe, 0x100000004, 0xb, 0x8000000000404, 0xffffffffffffffff, 0xfffffffffffffff7}}, 0xa0) mkdir(&(0x7f0000000000)='config\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000400)='config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='44100,48000,96000\x00', 0x11) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='config/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x1, 0x6, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r4, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000900)='44100,48000,96000\x00', 0x11) symlink(&(0x7f0000000a00)='config/usb_gadget/g1/functions/uac2.usb0\x00', &(0x7f0000000b00)='config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000d00)='dummy_udc.0\x00', 0xb) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr(camellia))\x00'}, 0x58) close(r6) r7 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r7, 0x5393, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 2.317879489s ago: executing program 2 (id=393): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)={0x14, 0x16, 0xf15, 0x0, 0x0, "", [@typed={0xc20}]}, 0x14}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) prctl$PR_GET_DUMPABLE(0x3) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x4e0c3, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x3, 0x7, 0x3, 0x1, 0xfd}, 0x8) 2.299034284s ago: executing program 1 (id=394): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x4007, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e05411, &(0x7f0000000300)) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x9902) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000001c0)='yeah', 0x4) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="28000000000000000000000000c7000000000000", @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b0000000000"], 0x28}}, 0x800) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x4004743a, 0x0) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x2000000, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x2000c004) setresuid(0xee01, r7, 0x0) openat$cgroup_ro(r5, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) 2.154161847s ago: executing program 2 (id=395): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000842000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) read(r0, &(0x7f0000000300)=""/172, 0xdc) 1.861301855s ago: executing program 2 (id=396): r0 = socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) setns(0xc9, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000001480)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000002100010326bd7078fadbdf2505"], 0x14}}, 0x0) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000000)={0x13, &(0x7f0000000040)=[{0x23, '\x00', @st={0x4, [{0x1, @svalue=0x7}, {0x3, @uvalue=0x3}, {0x0, @svalue=0x5}, {0x2, @uvalue=0x1}]}, 0x1}]}) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r6, &(0x7f0000000340)=""/214, 0xd6, 0x7fffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2a, 0x2000, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x401, 0x7, 0x1, 0x2190632a}, 0x9, 0x0, 0xea, 0x0, 0xfffffff9, 0x1d, 0xa, 0x13, 0x2, 0x9, {0x4, 0x80000001, 0xb03, 0x0, 0x4, 0x2}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x3000001c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x58, &(0x7f00000002c0)}, 0x10) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r8, 0xc02c5625, &(0x7f00000000c0)={0xffe00000, 0x400, @value=0x2}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x80) 1.860988575s ago: executing program 0 (id=397): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0xb}, 0x18}, 0x1, 0x0, 0x0, 0x28040000}, 0x4000000) r3 = syz_open_dev$media(&(0x7f0000000140), 0x10, 0x8000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000240), 0x3) ioctl$VHOST_SET_VRING_ENDIAN(r7, 0x4008af13, &(0x7f0000000080)={0x1, 0x1}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x62}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000040)={[0x9, 0x0, 0x1, 0xfd, 0x5, 0x6, 0x456, 0xb, 0x0, 0xffffffff, 0x7fffffff, 0x9, 0x1, 0x13, 0x80000003, 0x99], 0x6000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(r4, 0x7c81, 0x0) 1.716786497s ago: executing program 0 (id=399): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000440)={0x0, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000500)=0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000240)={0x10000000000000e0, 0x0, [{0x22c, 0x0, 0x8001}, {0xaa8, 0x0, 0x5}, {0x8e2, 0x0, 0x1200}, {0x97c, 0x0, 0x3}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "f6a6946c9832508c"}) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000100)="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", 0x223}], 0x1) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r5, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/137, 0x89}], 0x1}, 0x585}], 0x1, 0x100, 0x0) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r7, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2, 0x0, 0x4000000}, 0x40000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x40000, 0x50) r9 = syz_open_dev$ttys(0xc, 0x2, 0x0) r10 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCVHANGUP(r10, 0x5437, 0x0) close_range(r9, r10, 0x0) write$tcp_congestion(r8, &(0x7f0000000040)='scalable\x00', 0x9) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x811}, 0x4000804) 1.392257857s ago: executing program 4 (id=400): r0 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x3b, 0x0, &(0x7f0000000380)=0x10) mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0xe) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) 1.166067501s ago: executing program 0 (id=401): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x129240, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f00000001c0)={0x28, 0x2, r4, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000180)}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000600)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, &(0x7f0000000640)={0x48, 0xa, r6, 0x0, r7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYRESOCT=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r9}, 0x94) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r10, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r10, 0x402) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r12 = accept4(r11, 0x0, 0x0, 0x800) sendmmsg$alg(r12, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a60000b80000010066b87a000f00d80f300f300fc79d53bfa300c4b9e16dc3010122", 0x64}], 0x0, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.165692144s ago: executing program 4 (id=402): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x10, 0xd, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0x90, &(0x7f00000001c0)=""/144, 0x0, 0x29}, 0x94) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="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"/300, 0x12c}, {&(0x7f0000000040)="83d2ff5f0000007dd2898a0cc6d6703b878dab1053cded3659ebb4f77b09bc7e64f918fa3bc7664d327d9042050000002800"/60, 0x3c}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r2 = memfd_create(&(0x7f0000000100)='\x00', 0x3) r3 = syz_io_uring_complete(0x0, 0x0) r4 = memfd_create(&(0x7f0000000140)=',:,}$\xc8.%/\x00', 0x4) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) sendto$inet(r5, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') pread64$ublk_ch(r6, &(0x7f0000000340)=@buf_max_buf, 0x1000, 0x6) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f00000004c0)={0x0, 0x7, [{r2, 0x0, 0x0, 0x4000}, {r3, 0x0, 0x1000000, 0x3af2261e8087dd38}, {r4, 0x0, 0x1000, 0xfffffffffffff000}, {r5, 0x0, 0x100000000}, {0xffffffffffffffff, 0x0, 0x8000, 0x100000100a000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000}, {r6, 0x0, 0xfffff000, 0xfffffffff0000000}]}) 1.056381479s ago: executing program 4 (id=403): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4c22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000950301508e0a46bff9dbdf2500000006", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b000000000008000d0003000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10, &(0x7f00000003c0)=ANY=[]) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x40880) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x7, 0xfffffffffffffffc, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x20004844) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000500)={0x6, {{0xa, 0x4e21, 0xffffffda, @mcast1, 0x400072}}, 0x1, 0x4, [{{0xa, 0x4e23, 0xff, @remote, 0xffb}}, {{0xa, 0x4e20, 0x8000, @private1, 0x5}}, {{0xa, 0x4e20, 0x1ff, @private0}}, {{0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd6}}]}, 0x290) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r0, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4c241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x400}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$igmp6(0xa, 0x3, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x4, 0xfe5, &(0x7f0000001840)=""/4069, 0x0, 0x0, '\x00', 0x0, 0x0, r7}, 0x94) 1.053913007s ago: executing program 2 (id=404): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80300, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x100000001) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) close(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) 657.956073ms ago: executing program 2 (id=405): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)="8532426086a0a5595b588dd78663afe4d8c3d053d137d07b25a5bc939b0678732fcee38bee3691cd7ad18eed4f0efc96d4efc5193ad3f5d3600f98ca6806f58304d6c2b9fd414cdc5e90418557bc7f49d89b4e8c26d9678a0fd3d9a4ee03caae2c", 0x61}, {&(0x7f00000001c0)="604cc7b517325a1dd239306bb2fa868ba8d8d4b8ce7e57e5438281b3b27cea6f2addde819cfaeecc5ddf2f3c4164413dab01358aabc51c03d759bd6388e2eb91f86c4bc4a597db34c8655e417a8246b4bf55bb56a487423d00c37cedf6672872c05d8bc7b406149415c8ef7a7cc6bd3418775016161d0f890b3154fb85399ba8754896ee69221515281dfb5bd35fa440ebd4cc700666ba3b3ff3233f377f864608ff32116266fbbb0c615a3158e88e8e4294eb6b2377ddbddf4d37776e4e8cbe68c08373a49cde1d3214c9eebf71", 0xce}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x168) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000300), 0x20800) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) sendfile(r1, r1, 0x0, 0x3ffff) 657.408519ms ago: executing program 1 (id=406): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x103080, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x9) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_CAP_STEAL_TIME(r1, 0x4068aea3, &(0x7f00000001c0)) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r4, 0x0, 0x4000018) (async, rerun: 64) mprotect(&(0x7f0000149000/0x2000)=nil, 0x2000, 0x2000000) (async, rerun: 64) sendmsg$NFT_BATCH(r4, 0x0, 0x24000000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) (async) r5 = syz_clone(0x24100000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) pidfd_send_signal(r6, 0x4, 0x0, 0x2) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) (async) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000004e40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/135, 0x87}], 0x1}, 0x6}], 0x1, 0x10000, 0x0) (async, rerun: 64) sendmmsg$alg(r8, &(0x7f0000005fc0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="93ed35648029f468a54c40a9900b4e0fe8acdf9347cbff4070e67c9e81c9f3c5dcf27f1d9c06e829d43978fe4197e3f12b7ddab925eb55f42060055514a1d7ba5f8e03ef8171c762dd713771ff2529df687315d8d91fb201819183d62d208c95789112c9869d80bcffee1a7d2eba3026275fb26bdb946ae8f6eab9a57ffcc4206c64a3ded7de2a", 0x87}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x8810) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000f9, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000140)={0x1, @vbi={0x3c0, 0x26, 0x2, 0x42303159, [0x680, 0xe4], [0x7ff, 0xfeedcafe], 0x13a}}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xfffffffffffffffe, 0xb, 0x3) 638.082298ms ago: executing program 4 (id=407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) syz_emit_ethernet(0x4d, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaa00173afffe80007f0000000000000000000000bbff02000000f7ff00000000000001860090780000000000000100000000000000a78ce540060000000000000000000009"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500002ba07bcfb6005da600000008000300", @ANYRES32=r3, @ANYBLOB="080005"], 0x24}}, 0x0) 481.841931ms ago: executing program 2 (id=408): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x101000) syz_usb_disconnect(r0) syz_usb_connect$uac2(0x1, 0xfffffffffffffdc8, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x18d1, 0x2d04, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x1, 0x70, 0xb, {0x8, 0xb, 0x0, 0x1, 0x1, 0xa, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x400, 0x1, 0x9, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xd, 0x4, 0x5, {0x8, 0x25, 0x1, 0x2, 0xf, 0x2, 0xb042}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0xa, 0x81, {0x8, 0x25, 0x1, 0x0, 0x30, 0x9, 0xe}}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x3, [{0xffffffffffffff47, 0x0}, {0x0, 0x0}, {0xffffffffffffffc6, 0x0}]}) (async) syz_usb_connect$uac2(0x1, 0xfffffffffffffdc8, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x18d1, 0x2d04, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x1, 0x70, 0xb, {0x8, 0xb, 0x0, 0x1, 0x1, 0xa, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x400, 0x1, 0x9, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xd, 0x4, 0x5, {0x8, 0x25, 0x1, 0x2, 0xf, 0x2, 0xb042}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0xa, 0x81, {0x8, 0x25, 0x1, 0x0, 0x30, 0x9, 0xe}}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x3, [{0xffffffffffffff47, 0x0}, {0x0, 0x0}, {0xffffffffffffffc6, 0x0}]}) 357.985772ms ago: executing program 4 (id=409): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r2 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x398}) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="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", 0x126}, {&(0x7f0000000000)="b19b746c9d7fdbdee74b7d50727f1258d85094f1ff92c66443", 0x19}], 0x2}, 0x4048004) 293.964051ms ago: executing program 0 (id=410): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000006440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="f8c0", 0x2}], 0x1}}], 0x1, 0x4004) (async) bind$inet(r0, &(0x7f00000010c0)={0x2, 0x4e21, @empty}, 0x10) (async) setsockopt$inet_buf(r0, 0x0, 0x9, &(0x7f00000000c0)="a4b77e8f1a3b17d0ffd475c11203b0486b9a896ad2c6525f549e11283ef3ad29c32741d9f479401669ea52b6b3802a715a670c36de0187fbb311ceaa8938426da6743cacb26a593067ad6a4478e602280105107dfc501e1349f7e1d51006a80839d6e8511f3060706dd9471e26d95b802c3c39", 0x73) (async) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000040), 0x9) 283.226791ms ago: executing program 4 (id=411): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYBLOB="d2815783e2aecbda3d06e174739a82753050fe88f8d76dce0ca27370e7bff1a1fb332b39e264afb4b3b58bb7919d5051e21d0e135f761345ae8672714e53a2ea8d8e9e950f4f18595fe905820b4bfb85e335a055d82216033af341d97d244368f966717a1491f7d6bb8026346dca76ae4dac6e53471dae2d99ae4b5c3be6c8bb294705a60f084c94c5040ff5525ed0091450988d0c67baf7e7f7b09f5b643d2f07a5077d8558dced6aad1507da", @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x8, 0x0, 0x0}}, 0x10) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x0) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r8, 0x4068aea3, &(0x7f00000023c0)={0x79}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x5) (async) ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000080)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @sint={0x0, 0x3}}]}) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r9], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) (async) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 64) r11 = socket$kcm(0x2, 0x3, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) mbind(&(0x7f000088b000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x20, 0x3, &(0x7f0000000800)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x60, '\x00', r2, @netfilter=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x4, 0x3, 0x1ff, 0xfffff800}, 0x10, r3, r1, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_CAP_X2APIC_API(r13, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r14, 0x4400ae8f, &(0x7f0000000140)=@x86={0xc, 0x8, 0x24, 0x0, 0x7fffff56, 0x4, 0x0, 0xa, 0x5, 0xff, 0x0, 0xb6, 0x0, 0x7, 0x80002, 0x3, 0x7, 0x0, 0x1, '\x00', 0x8, 0x5}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) 147.703022ms ago: executing program 0 (id=412): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x200882) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040)={0xb6, 0x1ff, 0x1, 0x80000001, 0x2291, 0x9, 0x6, 0x5}, &(0x7f0000000080)={0x2, 0x1, 0x423, 0x5, 0x6, 0xb, 0x5, 0x4}, &(0x7f00000000c0)={0x9, 0xfff, 0x71f4, 0x9, 0x1, 0x690c, 0x7e76, 0xfffffffffffffff8}, &(0x7f0000000140)={r1, r2+60000000}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x8]}, 0x8}) timer_create(0x1, &(0x7f00000002c0)={0x0, 0x41, 0x4, @thr={&(0x7f0000000200)="7284f4f2bd34a1f4906c267bf8c5a24413218f5b71a4099479ed027bc628c5b063d5c649e4e211b0139ce3932214c56a1a1fb7d68cefca627da5f04fc4b4d42c2f7c5751ddc178495917bd7631cb538daada95371dd80e580a271e5c284de337c0076a485bab81c4c7efffe70cf882b0ead01f54", &(0x7f0000000280)}}, &(0x7f0000000300)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000380)={{r4, r5+60000000}, {0x0, 0x3938700}}, &(0x7f00000003c0)) ppoll(&(0x7f0000000400)=[{r0, 0x40}, {r0, 0x1020}], 0x2, &(0x7f0000000440)={0x0, 0x3938700}, &(0x7f0000000480)={[0x8]}, 0x8) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000004c0), 0x80000, 0x0) ioctl$SNDCTL_TMR_SELECT(r6, 0x40045408) r7 = syz_open_dev$vivid(&(0x7f0000000500), 0x3, 0x2) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) link(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='.\x00') ioctl$VIDIOC_SUBDEV_S_CROP(r7, 0xc038563c, &(0x7f00000005c0)={0x0, 0x0, {0x0, 0x5, 0x3db3, 0x8}}) syz_open_dev$cec(&(0x7f0000000600), 0x0, 0x42080) ioctl$SIOCGSTAMP(r8, 0x8906, &(0x7f0000000640)) sendmmsg(r8, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000680)="ffd09f84de0a32c367f173eb6ef4e588026851a0bc551324c385f06bbb657098583191486f1508042db5e80657fdc46a9775d55893477e1705317a86a3e70dc2a2a72cf7c5f03a0427b0b6dca3d4eebe4e939dea077ab820046bcf4f8a", 0x5d}, {&(0x7f0000000700)="1591b07f1e2d53c5acd3c235510cf1f5f7298ff5040cc8367a", 0x19}, {&(0x7f0000000740)="52aeec269efa11d811f2f08e943b1797baa651134fccd1aa1a791328ff4fad598484b078d28153f0258674ba884bfa62bb32052e631197943990fa19bbbe20bc9d19f095bb3a44376adefa15ba6d40b9976fff50b80800e084fc53a9cfa330f4d873fc37cc9eed208230b79494b29b9909fc7a0e3d8886f4425a89be071c27cb365cdc965e7d4dbc27159c64e1dfa2a6c2c037e8657173d11efc26abf585d062e4707c12c66b339ea988933d8a9d566f5e97e1c4c73f", 0xb6}, {&(0x7f0000000800)="f30afac26156dd97c4243f625d181a6bb4d7d989a93b0e0090ea8988cb6cdd5a9ab683e80ac267ef40b782e16358070526328eadf43631cd309db7dec965ddaf9a85a4a36e4c0c8f69c96726c37c1d9fdfa20053521ff2c17acd494fecde4998195d39ea40bddb5ea9a5381f474e8294ea99676fc973e20607d2a71ea99015bfb8d692876e546b87ecbe24c607bb27919e76d494fbd361a8f75aedb170c2dce4b70b0e5885ddde2776d617e831a5802e74c779c5fd5bd879d89d10", 0xbb}, {&(0x7f00000008c0)="42d802e116b9a162471fb3bfac8610d1fa1fefba336fa6361f8785b696d67fddcd7f58a76136452c24d6637bbfda9868d902df5e426d9dafe9d553209adec4a6c7b38bfe87cbd1eaef0d7b862543edb0ce278c9274c73d36854f9c98106ac6e963341b9d7cd75ed9d9fa5deee95a274f4ae78c5e1d755cf6315bd4c9b9ea3303", 0x80}, {&(0x7f0000000940)="4bf5149d5ff1973ec8f6e87012d4f2b79fb2598b75a40a54", 0x18}, {&(0x7f0000000980)="fc1b0f651df6a732cdd9c3dace3d6ff07be3a339d21d84eaa01c61b04d68f3ccbd3256fc4c0b9ed23f19fd8f6e21e738ce28ae42127d836649a4a57778e2b54e55fdc0345ad4f0e52eb12610951ef9e8c248d4cfd5469f4a701d9784798926e3b9dcbff9419cc7c87257df5d29506f91022fa6c94dbd6961b3031e7924e123be1ea40b8b190876f29063d339771a71d01ab748ac796d62ce76fec494d5b333c8db79ecd656892ee59e92885dd28aed39cbe529f86b1f933a676af4eb878ac3aec9e1f229b14b9990ee086de22c33f78db8831179d0807e5c7a049c9a", 0xdc}, {&(0x7f0000000a80)="5bcdf96e460e3853a245bfdaa2d8e78f251ed2ac9ef056d6936a0dbe89790290366b77cdc8fcb26114b0690c692f9436bef51787c43cf780516ddcd954c557c53b5c593d3ef056068fac080ba167cf4a5724c537", 0x54}, {&(0x7f0000000b00)="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", 0x1000}], 0x9, &(0x7f0000001bc0)=[{0x100, 0x110, 0x3ff, "c66ca156145955d729edceb7ab75d344922556512846bf4503407ac16b93feb753fe3520d880a076ffa19225d731a6b3a9d0a8f24b9f10c4f51a5292379b2fa502dfddf90df32ee602a2e7001445a3ae59ba77c59dde4803e0d673ac9388c749fc16bcb86d47bc242811668c50d11dca6b8fb1cf695d1713e483e849deac1a60f07950760299fbb901f9e0c528a5f08f5e787e4a67dbab103a52be5a7025186b0bce25041e015d7f20d879218e38541181ebeb65707742411a2096eb6126e9d8df7acf0b5573f0f71cf749a9be1666fae876470878cb5b5f923fbcded0d6ae36e585da75a49ac48ae59a"}, {0x100, 0x108, 0x8, "ef35afda7c06d6a4a43ea628e669ddec32cdd8cbbd6b8209194407c7cd2238bf4e1819648df781a91a0b2e8f60320307d7813360963455a82387fc09d2161d375c09832cb8855dbbb0c6ac445dff53b7f087ce2066258614aec29bd730a3dc43b4f7057c0d135a292a0395cec07b2cac8155c0545734382af60d00ea7883952335363efbf97af4df7e8bcd569e9a46b187e23939caf4e48cc410a7280a00f9d95d1aeef97ab421af06ed0ce6d06f5437bae031cf155c98ce462bcc8e43914912dd8ed62d6ac61017b667b964451fc91f73fc20b9d4387c0edd9ee1684ddae354b595e61b030b1805afd6dec8"}], 0x200}}, {{&(0x7f0000001dc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x3, 0x1, 0x3, 0x0, {0xa, 0x4e20, 0x9, @mcast1, 0xffff7327}}}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000001e40)="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", 0xfd}, {&(0x7f0000001f40)="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", 0x1000}], 0x2, &(0x7f0000002f80)=[{0xf0, 0x114, 0x8000, "861d7f97a7c7ed4b3c247cf4b353bf08f11f64518f1f2968aa3234f3a023a8ca9f96163a1f3970c45366de845d014d366945bd0d6c8ff32110f31811e814b792141f2f235eb0307810b4638c1d90b49efc6736e7d2d22b8c5e71f41e93c272c1a0937e61ff6a83ad21a8d39001f902fb076c1df074fe49c251bc4b6ad841581679b8f5f8347a0670ab3c9f7ac27eef57f12b852339eb8160e5cded8aac713f7e269cf53599a01eb4e4fdab2b7140c947474d438961464f444080fc16c5e0ef7e586fb4c1359fb255cc8a0b2bf3f1b82ea164ab8a040c476222c6"}, {0x78, 0x104, 0x6, "5127de7756db751b2196049528fdef93cfad272fdd90f15068f645036040e178278c0ad884fc6586721cd278c544c526a136c953b19db2244a6e290f359b0f86dc26deb096c41fcd33b3c402ea82a9a3035da8f422d137b4806744c3c71b0b2be94f"}, {0x50, 0x10e, 0x81, "e66943d0f3fb1e1c94481daa7f87242c64b3e8d90404cb3d5cd7330041fbc5f12465458ff897af6a4f8b32713fec497f0b807aef442b4bf91cf8efb0"}, {0xd0, 0x1, 0x4, "6fcd62e0e1df01bfa8ecd126efe9fbf59bc0c1c93c3e78efea73ab2ca4d8c2c126c40b9bfd3d3943bdef91cec3271b9f3d71714a2c579d5c77ad98480cfe7f5d6366a6ee5443df8d1650222b2bc4724352b1d684df5ce7b1b97251f70780ce67837bb19d701b7c82d9876c6b50692b9100528bfe4843e91a0fab2e88aca28af92be5f06823b55b945075452a55f46b3818850820b83195856f15777c43aaf2ebdef4251d331b72c163767b9b2b24e5c2cacbef54f8eafadc23f2dafc9b"}, {0xc8, 0x107, 0xfffffbff, "7ff46fefd17054510fc9e4d9b44c8e1b930c38f76c6104a1d2975736e42a952999f5d71c0c6c9cc19bb6fcf9b60fffa18ae35d3c340ed38b03cf6b9e4d3dba695956a64a8d5e177ede4737a67abffdb34d5aef142e83348addd2f651eade2fd9c581955227bd0e9705aa573331eedb9115e3670a15b2ca61a50f9255ac279eb8b73b1fd826e59646466e64b0503ba48b11925fcdff23150205f8dde653136fabec7e7a92f5bb7ae5b868c00c3bcdbbb091e927a7"}, {0x90, 0x3a, 0xfffffc00, "2d95251fd6a897c41a061e55818d8d78bb042456136878c95f89441478c8a4222248c6541047b437b19abf520a4a495253c352bc1b574b3eee5a1c046b0289a5e6b74069bec2eaa3e357cfa6d2a50a7ed3a60da1f6bac37b1eff7fe83a28b5fa43a3fc163a94b766d582dae0882df3d28d18a953c1ed03065f"}, {0x50, 0x104, 0x8, "152bf247964cd4a884b7818a5d5474c3ded57cc1fe656c630b2ea7d6b752262d7006b635ccd997e8764f23bed25d30ffa2b2ef7fd6f1f4d73eb268cad5402f"}, {0x110, 0x10e, 0x727a, "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"}, {0xb8, 0x102, 0x9, "4a08bf4d5d9a08ca97a2bf384b5284a5bd7eac92107e2a79e7771b5ca3c3533d267146cd2fc1597dca0300cdfbac28bd62762f579d799aa7c7333b3c4be37104e2ad53d77213450e1a7eafb7e26253715adb028192e50cbfe45f890cda0fdef8bc3d616c1005b86cc7ed1b9b7ff3d839cbf1c7c6efe76eeb9d9c8b19485938064ed33442502c6b92d2aac43072d969a6924c56884fa25e9f557adb43407e3b774be244a28c"}], 0x5f8}}], 0x2, 0x80) r9 = semget$private(0x0, 0x1, 0x420) semtimedop(r9, &(0x7f0000003600)=[{0x2, 0x7fff, 0x800}], 0x1, &(0x7f0000003640)={0x77359400}) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000003680), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000036c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r10, &(0x7f0000005700)={0x20, 0x0, r11, {0xf5, 0x4, 0x3, 0x7}}, 0x20) r13 = syz_open_dev$evdev(&(0x7f0000005740), 0xffff, 0x82) ioctl$EVIOCSKEYCODE_V2(r13, 0x40284504, &(0x7f0000005780)={0xb, 0x1f, 0x299, 0x9, "f4ecc74d251a6c2cba2c38abf734f1a165d080cb3b1cc436a429a62c5204791d"}) ioctl$SNDCTL_TMR_SOURCE(r6, 0xc0045406) r14 = add_key$keyring(&(0x7f00000057c0), &(0x7f0000005800)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$restrict_keyring(0x1d, r14, &(0x7f0000005840)='ceph\x00', &(0x7f0000005880)='/dev/sequencer2\x00') r15 = semget$private(0x0, 0x2, 0x11) semctl$GETALL(r15, 0x0, 0xd, &(0x7f00000058c0)=""/246) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r8, &(0x7f00000059c0)={r13, r7, 0xfff}) 355.079µs ago: executing program 1 (id=413): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) (async) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/i801_smbus/unbind\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='0000:00:1f.3\x00', 0xd) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/ehci-pci/new_id\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='8086 2930\x00', 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000100)=0xbdda, 0x4) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, 0x0, &(0x7f0000000000)=0x1c) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async) syz_open_dev$usbfs(0x0, 0x76, 0x101301) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r4, 0x6, 0x28000000}, 0x0) (async) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) (async) io_uring_enter(r5, 0x8ae, 0x6931, 0x17, 0x0, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) write(r6, &(0x7f0000000240)='0000:00:1f.3\x00', 0xd) 0s ago: executing program 0 (id=414): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='ccgx-ucsi 0x08\x00', 0xf) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/i2c/devices/i2c-1/new_device\x00', 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) lsetxattr$security_evm(&(0x7f0000000080)='./sys/bus/i2c/devices/i2c-1/new_device\x00', &(0x7f00000001c0), &(0x7f0000000240)=@sha1={0x1, "a388f45579f1fe8aef3041bb60a00803ec60905f"}, 0x15, 0xd1d9be90390033de) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) write(r1, &(0x7f0000000700)='ccgx-ucsi 0x08', 0xe) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:50042' (ED25519) to the list of known hosts. [ 99.890366][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 99.890383][ T43] audit: type=1400 audit(1785036177.170:138): avc: denied { name_bind } for pid=5735 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 100.010631][ T43] audit: type=1400 audit(1785036177.280:139): avc: denied { execute } for pid=5736 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 100.020186][ T43] audit: type=1400 audit(1785036177.300:140): avc: denied { execute_no_trans } for pid=5736 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 105.273124][ T43] audit: type=1400 audit(1785036182.560:141): avc: denied { mounton } for pid=5736 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 105.299361][ T43] audit: type=1400 audit(1785036182.580:142): avc: denied { mount } for pid=5736 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 105.305444][ T5736] cgroup: Unknown subsys name 'net' [ 105.318084][ T43] audit: type=1400 audit(1785036182.600:143): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 105.467501][ T5736] cgroup: Unknown subsys name 'cpuset' [ 105.476596][ T5736] cgroup: Unknown subsys name 'rlimit' [ 105.777689][ T43] audit: type=1400 audit(1785036183.060:144): avc: denied { setattr } for pid=5736 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.802906][ T43] audit: type=1400 audit(1785036183.080:145): avc: denied { create } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.833775][ T43] audit: type=1400 audit(1785036183.080:146): avc: denied { write } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.850194][ T43] audit: type=1400 audit(1785036183.080:147): avc: denied { read } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.882871][ T43] audit: type=1400 audit(1785036183.090:148): avc: denied { mounton } for pid=5736 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 105.922364][ T43] audit: type=1400 audit(1785036183.090:149): avc: denied { mount } for pid=5736 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 105.940655][ T43] audit: type=1400 audit(1785036183.120:150): avc: denied { read } for pid=5451 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 106.041488][ T5738] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 107.942154][ T5736] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 109.390976][ T1016] cfg80211: failed to load regulatory.db [ 119.262141][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 119.262164][ T43] audit: type=1400 audit(1785036196.550:158): avc: denied { execmem } for pid=5754 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 119.698600][ T43] audit: type=1400 audit(1785036196.960:159): avc: denied { create } for pid=5758 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 119.708349][ T43] audit: type=1400 audit(1785036196.960:160): avc: denied { read write } for pid=5758 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 119.751344][ T43] audit: type=1400 audit(1785036196.960:161): avc: denied { open } for pid=5758 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 119.764190][ T43] audit: type=1400 audit(1785036196.970:162): avc: denied { ioctl } for pid=5758 comm="syz-executor" path="socket:[6605]" dev="sockfs" ino=6605 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 119.781230][ T5764] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.787968][ T5764] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 119.794869][ T5764] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.800140][ T5764] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 119.803197][ T5764] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.805741][ T5766] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.838000][ T5766] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 119.839422][ T5767] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 119.872420][ T5766] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.873191][ T5767] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 119.874255][ T5769] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 119.875930][ T5769] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 119.876885][ T5766] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 119.882488][ T5770] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 119.883493][ T5769] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 119.884889][ T5769] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 119.885355][ T5769] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 119.909588][ T43] audit: type=1400 audit(1785036197.170:163): avc: denied { read } for pid=5761 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 120.006169][ T5770] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 120.009431][ T43] audit: type=1400 audit(1785036197.170:164): avc: denied { open } for pid=5761 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 120.047617][ T43] audit: type=1400 audit(1785036197.190:165): avc: denied { mounton } for pid=5761 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 120.057159][ T43] audit: type=1400 audit(1785036197.270:166): avc: denied { module_request } for pid=5761 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 120.092522][ T5770] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 120.097984][ T5770] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 120.106610][ T43] audit: type=1400 audit(1785036197.360:167): avc: denied { sys_module } for pid=5763 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 121.569991][ T5761] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.577245][ T5761] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.583074][ T5761] bridge_slave_0: entered allmulticast mode [ 121.589034][ T5761] bridge_slave_0: entered promiscuous mode [ 121.720269][ T5761] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.723220][ T5761] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.726003][ T5761] bridge_slave_1: entered allmulticast mode [ 121.730102][ T5761] bridge_slave_1: entered promiscuous mode [ 121.755042][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.757853][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.763620][ T5763] bridge_slave_0: entered allmulticast mode [ 121.779243][ T5763] bridge_slave_0: entered promiscuous mode [ 121.794380][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.797331][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.809811][ T5763] bridge_slave_1: entered allmulticast mode [ 121.814627][ T5763] bridge_slave_1: entered promiscuous mode [ 121.937057][ T5761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.945647][ T5761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.952384][ T5770] Bluetooth: hci1: command tx timeout [ 121.959041][ T5764] Bluetooth: hci0: command tx timeout [ 121.975419][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.031244][ T5770] Bluetooth: hci2: command tx timeout [ 122.059391][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.176458][ T5761] team0: Port device team_slave_0 added [ 122.189627][ T5758] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.191424][ T5770] Bluetooth: hci3: command tx timeout [ 122.204686][ T5758] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.205028][ T5758] bridge_slave_0: entered allmulticast mode [ 122.206441][ T5758] bridge_slave_0: entered promiscuous mode [ 122.214427][ T5763] team0: Port device team_slave_0 added [ 122.266968][ T5763] team0: Port device team_slave_1 added [ 122.307577][ T5761] team0: Port device team_slave_1 added [ 122.335385][ T5758] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.339243][ T5758] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.342815][ T5758] bridge_slave_1: entered allmulticast mode [ 122.347469][ T5758] bridge_slave_1: entered promiscuous mode [ 122.485927][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.489149][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.512155][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.524828][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.531369][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.535888][ T5768] bridge_slave_0: entered allmulticast mode [ 122.542522][ T5768] bridge_slave_0: entered promiscuous mode [ 122.549350][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.552621][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.556577][ T5768] bridge_slave_1: entered allmulticast mode [ 122.563485][ T5768] bridge_slave_1: entered promiscuous mode [ 122.580011][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.582899][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.600359][ T5761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.616379][ T5758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.623133][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.626237][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.670015][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.695938][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.698852][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.728924][ T5761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.737190][ T5758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.843689][ T5758] team0: Port device team_slave_0 added [ 122.847739][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.857121][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.900000][ T5758] team0: Port device team_slave_1 added [ 122.973343][ T5763] hsr_slave_0: entered promiscuous mode [ 122.983661][ T5763] hsr_slave_1: entered promiscuous mode [ 123.010780][ T5761] hsr_slave_0: entered promiscuous mode [ 123.024829][ T5761] hsr_slave_1: entered promiscuous mode [ 123.028786][ T5761] debugfs: 'hsr0' already exists in 'hsr' [ 123.032792][ T5761] Cannot create hsr debugfs directory [ 123.081855][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.084444][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.108488][ T5758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.172420][ T5768] team0: Port device team_slave_0 added [ 123.177384][ T5768] team0: Port device team_slave_1 added [ 123.181447][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.191067][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.223717][ T5758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.437651][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.440762][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.472121][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.497573][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.515950][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.538409][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.564382][ T5758] hsr_slave_0: entered promiscuous mode [ 123.569288][ T5758] hsr_slave_1: entered promiscuous mode [ 123.572913][ T5758] debugfs: 'hsr0' already exists in 'hsr' [ 123.575400][ T5758] Cannot create hsr debugfs directory [ 123.682683][ T5768] hsr_slave_0: entered promiscuous mode [ 123.688125][ T5768] hsr_slave_1: entered promiscuous mode [ 123.691057][ T5768] debugfs: 'hsr0' already exists in 'hsr' [ 123.693782][ T5768] Cannot create hsr debugfs directory [ 124.040032][ T5770] Bluetooth: hci1: command tx timeout [ 124.040065][ T5764] Bluetooth: hci0: command tx timeout [ 124.119737][ T5764] Bluetooth: hci2: command tx timeout [ 124.262723][ T5763] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 124.280263][ T5764] Bluetooth: hci3: command tx timeout [ 124.287592][ T5763] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 124.295622][ T5763] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 124.304655][ T5763] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 124.347653][ T5763] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 124.374823][ T5763] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 124.378512][ T5763] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 124.398584][ T5763] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 124.625964][ T5758] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 124.639416][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 124.653428][ T5758] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 124.668253][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 124.686468][ T5758] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 124.698889][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 124.705819][ T5758] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 124.725431][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 124.864618][ T5761] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 124.885633][ T5761] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 124.891777][ T5761] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 124.897855][ T5761] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 124.918295][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.950112][ T5761] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 124.963080][ T5761] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 124.967759][ T5761] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 124.976970][ T5761] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 125.111295][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.197285][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.201914][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.237795][ T5768] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 125.246413][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 125.250637][ T5768] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 125.258810][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 125.268881][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.271921][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.311432][ T5768] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 125.322298][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 125.326503][ T5768] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 125.345629][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 125.445193][ T5761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.456234][ T5758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.511108][ T5763] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.572260][ T5761] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.580323][ T5758] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.617117][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.620868][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.659138][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.662267][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.690659][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.693954][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.748012][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.751582][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.811519][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.836667][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.908867][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.916170][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.934363][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.947797][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.110673][ T5764] Bluetooth: hci1: command tx timeout [ 126.121223][ T5764] Bluetooth: hci0: command tx timeout [ 126.134586][ T5761] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.191427][ T5764] Bluetooth: hci2: command tx timeout [ 126.324125][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.364746][ T5764] Bluetooth: hci3: command tx timeout [ 126.398897][ T5763] veth0_vlan: entered promiscuous mode [ 126.461012][ T5763] veth1_vlan: entered promiscuous mode [ 126.614004][ T5763] veth0_macvtap: entered promiscuous mode [ 126.671585][ T5758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.694050][ T5763] veth1_macvtap: entered promiscuous mode [ 126.876079][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.882717][ T5758] veth0_vlan: entered promiscuous mode [ 126.932433][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.017288][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.020915][ T5843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.027497][ T5843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.043592][ T5758] veth1_vlan: entered promiscuous mode [ 127.058913][ T5843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.063893][ T5843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.139028][ T5768] veth0_vlan: entered promiscuous mode [ 127.205842][ T5768] veth1_vlan: entered promiscuous mode [ 127.290375][ T5761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.434287][ T5758] veth0_macvtap: entered promiscuous mode [ 127.454957][ T5768] veth0_macvtap: entered promiscuous mode [ 127.502417][ T5758] veth1_macvtap: entered promiscuous mode [ 127.578238][ T5768] veth1_macvtap: entered promiscuous mode [ 127.616984][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.618882][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.624260][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.678180][ T5761] veth0_vlan: entered promiscuous mode [ 127.697260][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.707286][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.757490][ T5761] veth1_vlan: entered promiscuous mode [ 127.773593][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.774370][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.789411][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.808225][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.835305][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.858490][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.863368][ T43] audit: type=1400 audit(1785036205.150:168): avc: denied { mount } for pid=5763 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 127.875443][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.893940][ T43] audit: type=1400 audit(1785036205.170:169): avc: denied { mounton } for pid=5763 comm="syz-executor" path="/syzkaller.4TFJGl/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 127.938963][ T43] audit: type=1400 audit(1785036205.170:170): avc: denied { mount } for pid=5763 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 127.981876][ T43] audit: type=1400 audit(1785036205.200:171): avc: denied { mounton } for pid=5763 comm="syz-executor" path="/syzkaller.4TFJGl/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 128.008630][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.020551][ T43] audit: type=1400 audit(1785036205.200:172): avc: denied { mounton } for pid=5763 comm="syz-executor" path="/syzkaller.4TFJGl/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 128.033596][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.063218][ T43] audit: type=1400 audit(1785036205.210:173): avc: denied { unmount } for pid=5763 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 128.063258][ T43] audit: type=1400 audit(1785036205.250:174): avc: denied { mounton } for pid=5763 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 128.063291][ T43] audit: type=1400 audit(1785036205.250:175): avc: denied { mount } for pid=5763 comm="syz-executor" name="/" dev="gadgetfs" ino=8671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 128.063324][ T43] audit: type=1400 audit(1785036205.250:176): avc: denied { mount } for pid=5763 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 128.063355][ T43] audit: type=1400 audit(1785036205.250:177): avc: denied { mounton } for pid=5763 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 128.116060][ T5763] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 128.176319][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.180353][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.210937][ T5764] Bluetooth: hci0: command tx timeout [ 128.219739][ T5764] Bluetooth: hci1: command tx timeout [ 128.267550][ T114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.277200][ T114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.309709][ T5764] Bluetooth: hci2: command tx timeout [ 128.332175][ T5761] veth0_macvtap: entered promiscuous mode [ 128.433318][ T5761] veth1_macvtap: entered promiscuous mode [ 128.433573][ T5764] Bluetooth: hci3: command tx timeout [ 128.561639][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.617572][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.676977][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.691067][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.832931][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.855930][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.892773][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.897053][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.072049][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.076814][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.146492][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.152289][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.355543][ T5912] loop4: detected capacity change from 0 to 2640 [ 129.397922][ T5912] Buffer I/O error on dev loop4, logical block 0, async page read [ 129.419929][ T5912] Buffer I/O error on dev loop4, logical block 0, async page read [ 129.424529][ T5912] Buffer I/O error on dev loop4, logical block 0, async page read [ 129.428153][ T5912] Buffer I/O error on dev loop4, logical block 0, async page read [ 129.432163][ T5912] Buffer I/O error on dev loop4, logical block 0, async page read [ 129.435582][ T5912] Buffer I/O error on dev loop4, logical block 0, async page read [ 129.437085][ T5913] Buffer I/O error on dev loop4, logical block 1, async page read [ 129.451089][ T5912] Buffer I/O error on dev loop4, logical block 0, async page read [ 129.451128][ T5912] Buffer I/O error on dev loop4, logical block 0, async page read [ 129.451142][ T5912] ldm_validate_partition_table(): Disk read failed. [ 129.451164][ T5912] Buffer I/O error on dev loop4, logical block 0, async page read [ 129.451211][ T5912] Dev loop4: unable to read RDB block 0 [ 129.451291][ T5912] loop4: unable to read partition table [ 129.451454][ T5912] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 129.685901][ T5915] netlink: 'syz.0.5': attribute type 1 has an invalid length. [ 129.712922][ T114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.727686][ T114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.768740][ T5915] vlan2: entered allmulticast mode [ 129.791011][ T5915] macsec0: entered allmulticast mode [ 129.794915][ T5915] veth1_macvtap: entered allmulticast mode [ 129.898864][ T5918] afs: Unknown parameter 'Έ;Fc\$2[ x++Kë [ 129.898864][ T5918] ;vo4w\' [ 129.919143][ T5918] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 129.926763][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.945028][ T5918] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 130.000676][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.316322][ T5929] tmpfs: Unknown parameter 'mp' [ 130.330409][ T5930] netlink: 'syz.3.4': attribute type 9 has an invalid length. [ 130.450177][ T5933] program syz.0.10 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.690262][ T5941] overlayfs: failed lookup in lower (newroot/3, name='file0', err=-40): overlapping layers [ 130.696099][ T5941] overlayfs: failed lookup in lower (newroot/3, name='file0', err=-40): overlapping layers [ 130.731306][ T5941] overlayfs: failed lookup in lower (newroot/3, name='file0', err=-40): overlapping layers [ 131.046312][ T5944] kAFS: unparsable volume name [ 131.116127][ T5944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14'. [ 131.123291][ T5948] netlink: 'syz.3.15': attribute type 1 has an invalid length. [ 131.143765][ T5948] netlink: 244 bytes leftover after parsing attributes in process `syz.3.15'. [ 131.260574][ T5956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=5956 comm=syz.3.15 [ 131.453877][ T5964] 8021q: VLANs not supported on ip_vti0 [ 131.457428][ T5964] netlink: 'syz.1.18': attribute type 15 has an invalid length. [ 131.536593][ T5971] overlayfs: workdir and upperdir must reside under the same mount [ 132.020579][ T5982] pim6reg1: renamed from bridge_slave_1 (while UP) [ 132.057354][ T5982] bridge0: port 2(pim6reg1) entered disabled state [ 132.084484][ T5988] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23'. [ 132.093876][ T5988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23'. [ 132.244164][ T6000] netlink: 'syz.3.27': attribute type 1 has an invalid length. [ 132.301386][ T6000] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.27'. [ 132.327614][ T6001] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 132.337044][ T6001] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 132.369689][ T6001] cramfs: wrong magic [ 132.873785][ T6019] xt_ecn: cannot match TCP bits for non-tcp packets [ 133.015782][ T43] kauditd_printk_skb: 73 callbacks suppressed [ 133.015795][ T43] audit: type=1400 audit(1785036210.300:251): avc: denied { append } for pid=6020 comm="syz.3.34" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 133.265725][ T43] audit: type=1400 audit(1785036210.520:252): avc: denied { create } for pid=6025 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 133.295401][ T43] audit: type=1400 audit(1785036210.520:253): avc: denied { bind } for pid=6025 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 133.320790][ T43] audit: type=1400 audit(1785036210.560:254): avc: denied { write } for pid=6025 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 133.332975][ T43] audit: type=1400 audit(1785036210.560:255): avc: denied { read } for pid=6025 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 133.382013][ T43] audit: type=1400 audit(1785036210.610:256): avc: denied { create } for pid=6029 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 133.401518][ T43] audit: type=1400 audit(1785036210.640:257): avc: denied { watch watch_reads } for pid=6025 comm="syz.2.35" path="/proc/35/net/dev_snmp6" dev="proc" ino=4026533032 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 133.421570][ T43] audit: type=1400 audit(1785036210.640:258): avc: denied { write } for pid=6029 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 133.434494][ T6031] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 133.455001][ T43] audit: type=1400 audit(1785036210.740:259): avc: denied { getopt } for pid=6025 comm="syz.2.35" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.486649][ T43] audit: type=1400 audit(1785036210.770:260): avc: denied { read write } for pid=6032 comm="syz.0.37" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 133.666015][ T6034] netlink: 156 bytes leftover after parsing attributes in process `syz.0.37'. [ 133.692041][ T6037] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 133.899754][ T35] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 134.039591][ T35] usb 6-1: device descriptor read/64, error -71 [ 134.202728][ T6044] Bluetooth: MGMT ver 1.23 [ 134.210513][ T6036] 0: reclassify loop, rule prio 0, protocol 700 [ 134.329968][ T35] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 134.543384][ T35] usb 6-1: device descriptor read/64, error -71 [ 134.629054][ T6048] loop7: detected capacity change from 0 to 16384 [ 134.653527][ T35] usb usb6-port1: attempt power cycle [ 134.789331][ T6052] Zero length message leads to an empty skb [ 134.827070][ T6052] netlink: 'syz.2.42': attribute type 19 has an invalid length. [ 134.831217][ T6052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=6052 comm=syz.2.42 [ 134.871218][ T6050] process 'syz.0.41' launched './file1' with NULL argv: empty string added [ 135.002546][ T35] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 135.050201][ T35] usb 6-1: device descriptor read/8, error -71 [ 135.052698][ T6049] loop7: detected capacity change from 16384 to 0 [ 135.098109][ C1] I/O error, dev loop7, sector 7680 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 135.247965][ T6069] netlink: zone id is out of range [ 135.335878][ T6071] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 135.348904][ T35] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 135.370407][ T6070] netlink: 'syz.0.47': attribute type 3 has an invalid length. [ 135.375879][ T35] usb 6-1: device descriptor read/8, error -71 [ 135.540491][ T35] usb usb6-port1: unable to enumerate USB device [ 136.019872][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 136.197034][ T10] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 136.200669][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.205117][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 136.218136][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.227810][ T10] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 136.234824][ T10] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 136.240398][ T10] usb 8-1: Product: syz [ 136.243303][ T10] usb 8-1: Manufacturer: syz [ 136.306655][ T6089] bond0: Error: CAN devices cannot be enslaved [ 136.314551][ T10] cdc_wdm 8-1:1.0: skipping garbage [ 136.317317][ T10] cdc_wdm 8-1:1.0: skipping garbage [ 136.348204][ T10] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 136.366563][ T10] cdc_wdm 8-1:1.0: Unknown control protocol [ 136.719140][ T53] usb 8-1: USB disconnect, device number 2 [ 137.288268][ T6126] faux_driver vkms: [drm] Unknown color mode 257; guessing buffer size. [ 137.404865][ T6134] overlay: Bad value for 'workdir' [ 137.454365][ T6138] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 137.465831][ T6140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.67'. [ 137.494823][ T6140] SELinux: policydb string SE Lhn# does not match my string SE Linux [ 137.500490][ T6140] SELinux: failed to load policy [ 137.830329][ T6149] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 137.868046][ T6149] netlink: 128 bytes leftover after parsing attributes in process `syz.1.69'. [ 138.129066][ T6173] x_tables: ip_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 138.260486][ T43] kauditd_printk_skb: 61 callbacks suppressed [ 138.260501][ T43] audit: type=1400 audit(1785036215.550:322): avc: denied { create } for pid=6172 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 138.276701][ T43] audit: type=1400 audit(1785036215.550:323): avc: denied { read } for pid=6174 comm="syz.2.76" name="/" dev="configfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 138.298286][ T43] audit: type=1400 audit(1785036215.550:324): avc: denied { open } for pid=6174 comm="syz.2.76" path="/22/config" dev="configfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 138.582778][ T6185] syzkaller0: entered promiscuous mode [ 138.603063][ T6185] syzkaller0: entered allmulticast mode [ 138.941972][ T6187] netlink: 128 bytes leftover after parsing attributes in process `syz.2.79'. [ 138.945755][ T43] audit: type=1400 audit(1785036216.220:325): avc: denied { map } for pid=6180 comm="syz.0.77" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 138.965501][ T43] audit: type=1400 audit(1785036216.250:326): avc: denied { mount } for pid=6188 comm="syz.3.80" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 139.035311][ T53] IPVS: starting estimator thread 0... [ 139.095383][ T6187] netlink: 84 bytes leftover after parsing attributes in process `syz.2.79'. [ 139.131918][ T43] audit: type=1400 audit(1785036216.410:327): avc: denied { unmount } for pid=5768 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 139.174879][ T43] audit: type=1400 audit(1785036216.460:328): avc: denied { setopt } for pid=6199 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 139.190096][ T6196] IPVS: using max 26 ests per chain, 62400 per kthread [ 139.221469][ T43] audit: type=1400 audit(1785036216.500:329): avc: denied { create } for pid=6203 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 139.250900][ T43] audit: type=1400 audit(1785036216.500:330): avc: denied { create } for pid=6203 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 139.258177][ T43] audit: type=1400 audit(1785036216.500:331): avc: denied { setopt } for pid=6203 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 139.295847][ T6204] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 139.745568][ T6231] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 139.751504][ T6231] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 139.758070][ T6231] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 139.799026][ T6228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.90'. [ 139.857185][ T6228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.90'. [ 139.861666][ T5835] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.865697][ T5835] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.870545][ T5835] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.878105][ T5835] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.019765][ T42] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 140.114590][ T6239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.175660][ T6239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.251545][ T42] usb 7-1: Using ep0 maxpacket: 8 [ 140.271031][ T42] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 140.277253][ T42] usb 7-1: config 179 has no interface number 0 [ 140.288277][ T42] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 140.299708][ T42] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 140.305492][ T42] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 140.340993][ T6245] overlayfs: workdir and upperdir must be separate subtrees [ 140.346134][ T42] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 140.375922][ T42] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 140.392386][ T42] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 140.402507][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.426024][ T5880] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 140.475398][ T6233] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 140.630788][ T5880] usb 8-1: Using ep0 maxpacket: 8 [ 140.700465][ T5880] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 140.703772][ T5880] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.730365][ T5880] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.734474][ T6254] netlink: 164 bytes leftover after parsing attributes in process `syz.1.100'. [ 140.815835][ T836] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input5 [ 140.901983][ T5880] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.906951][ T5880] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.990609][ T6259] binder: 6258:6259 ioctl c0306201 2000000003c0 returned -14 [ 140.997274][ T6259] binder: BINDER_SET_CONTEXT_MGR already set [ 141.001262][ T6259] binder: 6258:6259 ioctl 4018620d 200000000100 returned -16 [ 141.068852][ T5880] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 141.101930][ T5880] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.192404][ T6262] binder: 6232:6262 ioctl c0189373 200000000080 returned -22 [ 141.214036][ T6262] ======================================================= [ 141.214036][ T6262] WARNING: The mand mount option has been deprecated and [ 141.214036][ T6262] and is ignored by this kernel. Remove the mand [ 141.214036][ T6262] option from the mount to silence this warning. [ 141.214036][ T6262] ======================================================= [ 141.364877][ T6239] iommufd_mock iommufd_mock1: Adding to iommu group 9 [ 141.372999][ T6240] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 141.385667][ T5880] usb 8-1: usb_control_msg returned -32 [ 141.390414][ T5880] usbtmc 8-1:16.0: can't read capabilities [ 141.481261][ T5764] Bluetooth: hci2: unexpected cc 0x2029 length: 100 > 1 [ 141.488145][ T63] usb 7-1: USB disconnect, device number 2 [ 141.488207][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 141.488442][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 142.094204][ T6280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.105394][ T6280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.131015][ T54] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 142.178059][ T9] usb 8-1: USB disconnect, device number 3 [ 142.224646][ T6283] 9pnet_fd: p9_fd_create_unix (6283): problem connecting socket: ./file0: -111 [ 142.535926][ T6294] deleting an unspecified loop device is not supported. [ 142.735578][ T6298] netlink: 20 bytes leftover after parsing attributes in process `syz.3.111'. [ 143.040897][ T6311] netlink: 'syz.1.114': attribute type 1 has an invalid length. [ 143.153007][ T6311] bridge1: entered promiscuous mode [ 143.595001][ T6325] netlink: 'syz.1.115': attribute type 1 has an invalid length. [ 143.656698][ T43] kauditd_printk_skb: 57 callbacks suppressed [ 143.656712][ T43] audit: type=1400 audit(1785036220.940:389): avc: denied { watch } for pid=6314 comm="syz.1.115" path="/33/control" dev="tmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 143.690250][ T43] audit: type=1400 audit(1785036220.980:390): avc: denied { create } for pid=6314 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.782545][ T43] audit: type=1400 audit(1785036221.040:391): avc: denied { setopt } for pid=6314 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.784788][ T6325] 8021q: adding VLAN 0 to HW filter on device bond3 [ 143.808714][ T43] audit: type=1400 audit(1785036221.090:392): avc: denied { write } for pid=6334 comm="syz.3.119" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 144.259120][ T6346] comedi comedi0: comedi_config --init_data is deprecated [ 144.262139][ T6347] comedi comedi0: comedi_config --init_data is deprecated [ 144.268022][ T6346] syz.3.122 uses obsolete (PF_INET,SOCK_PACKET) [ 144.316329][ T6344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6344 comm=syz.2.121 [ 144.356830][ T43] audit: type=1400 audit(1785036221.630:393): avc: denied { ioctl } for pid=6345 comm="syz.3.122" path="socket:[11951]" dev="sockfs" ino=11951 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 144.818464][ T6275] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 145.081684][ T43] audit: type=1400 audit(1785036222.360:394): avc: denied { name_connect } for pid=6358 comm="syz.3.125" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 145.156295][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 145.164683][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 145.186375][ T6359] Bluetooth: MGMT ver 1.23 [ 145.189570][ T43] audit: type=1400 audit(1785036222.470:395): avc: denied { watch_reads } for pid=6363 comm="syz.0.126" path="/26" dev="tmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 145.254038][ T6368] xt_hashlimit: invalid rate [ 145.258852][ T43] audit: type=1400 audit(1785036222.470:396): avc: denied { read } for pid=6358 comm="syz.3.125" lport=46092 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 145.316948][ T43] audit: type=1400 audit(1785036222.540:397): avc: denied { name_bind } for pid=6366 comm="syz.2.127" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 145.336738][ T43] audit: type=1400 audit(1785036222.540:398): avc: denied { node_bind } for pid=6366 comm="syz.2.127" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 145.575675][ T6377] team0: Port device vlan2 added [ 145.796313][ T6381] netlink: 20 bytes leftover after parsing attributes in process `syz.3.131'. [ 146.772511][ T6405] Trying to write to read-only block-device nullb0 [ 146.800653][ T6405] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 146.814551][ T6402] netlink: 'syz.3.137': attribute type 8 has an invalid length. [ 146.818131][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.137'. [ 146.929418][ T6408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'. [ 146.937819][ T6408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.138'. [ 146.972283][ T6408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'. [ 146.974621][ T5835] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.976479][ T6408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.138'. [ 146.980453][ T5835] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.991232][ T5835] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.012815][ T5835] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.267146][ T6413] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 147.381629][ T6420] vxfs: unable to read disk superblock at 1 [ 147.385607][ T6420] vxfs: unable to read disk superblock at 8 [ 147.388423][ T6420] vxfs: can't find superblock. [ 147.878802][ T6430] 9p: Could not find request transport: xen [ 148.192063][ T6442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29456 sclass=netlink_route_socket pid=6442 comm=syz.0.148 [ 148.329603][ T35] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 148.570763][ T6452] netlink: 40 bytes leftover after parsing attributes in process `syz.3.150'. [ 148.574344][ T35] usb 6-1: Using ep0 maxpacket: 8 [ 148.711995][ T35] usb 6-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 148.716364][ T35] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.730134][ T35] usb 6-1: config 1 has no interface number 0 [ 148.739824][ T35] usb 6-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 148.754839][ T35] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 148.771741][ T35] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 148.800768][ T35] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 148.809543][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.813865][ T35] usb 6-1: Product: syz [ 148.816904][ T35] usb 6-1: Manufacturer: syz [ 148.821071][ T35] usb 6-1: SerialNumber: syz [ 148.888832][ T5880] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 149.054385][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 149.054400][ T43] audit: type=1400 audit(1785036226.350:414): avc: denied { create } for pid=6464 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 149.094300][ T5880] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 149.141562][ T43] audit: type=1400 audit(1785036226.420:415): avc: denied { accept } for pid=6464 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 149.145161][ T5880] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 149.167040][ T5880] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 247, setting to 64 [ 149.172572][ T5880] usb 7-1: config 0 interface 0 has no altsetting 0 [ 149.177778][ T5880] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 149.181742][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.185023][ T5880] usb 7-1: Product: syz [ 149.187300][ T5880] usb 7-1: Manufacturer: syz [ 149.193598][ T5880] usb 7-1: SerialNumber: syz [ 149.210154][ T5880] usb 7-1: config 0 descriptor?? [ 149.215194][ T6455] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 149.242965][ T6468] vlan3: entered promiscuous mode [ 149.246151][ T6468] bridge0: entered promiscuous mode [ 149.249898][ T6468] vlan3: entered allmulticast mode [ 149.253224][ T6468] bridge0: entered allmulticast mode [ 149.308431][ T6463] netlink: 28 bytes leftover after parsing attributes in process `syz.3.153'. [ 149.311936][ T6463] netlink: 28 bytes leftover after parsing attributes in process `syz.3.153'. [ 149.447208][ T6456] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 149.474373][ T5880] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input7 [ 149.505736][ T6437] snd-usb-audio 6-1:1.1: Runtime PM usage count underflow! [ 149.586971][ T5546] usb 6-1: USB disconnect, device number 6 [ 149.819171][ T6486] tc_dump_action: action bad kind [ 150.409047][ T6499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6499 comm=syz.0.160 [ 150.664188][ T6509] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.164'. [ 150.668139][ T6509] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.164'. [ 151.048044][ T6518] vxfs: WRONG superblock magic 00000000 at 1 [ 151.086744][ T6518] vxfs: WRONG superblock magic 00000000 at 8 [ 151.115240][ T43] audit: type=1400 audit(1785036228.390:416): avc: denied { map } for pid=6519 comm="syz.0.167" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 151.126445][ T6518] vxfs: can't find superblock. [ 151.159921][ T43] audit: type=1400 audit(1785036228.410:417): avc: denied { execute } for pid=6519 comm="syz.0.167" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 151.580092][ T43] audit: type=1400 audit(1785036228.860:418): avc: denied { write } for pid=6523 comm="syz.1.169" name="sg1" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 151.616484][ T6524] overlayfs: failed to resolve './file0': -2 [ 151.647310][ T5546] usb 7-1: USB disconnect, device number 3 [ 151.863831][ T43] audit: type=1400 audit(1785036229.160:419): avc: denied { getopt } for pid=6528 comm="syz.0.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 151.885630][ T43] audit: type=1400 audit(1785036229.160:420): avc: denied { ioctl } for pid=6528 comm="syz.0.171" path="socket:[12805]" dev="sockfs" ino=12805 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 152.078137][ T6538] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pid=6538 comm=syz.0.171 [ 152.146978][ T6530] can: request_module (can-proto-0) failed. [ 152.194854][ T43] audit: type=1400 audit(1785036229.460:421): avc: denied { create } for pid=6540 comm="syz.2.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 152.233009][ T43] audit: type=1400 audit(1785036229.520:422): avc: denied { prog_load } for pid=6540 comm="syz.2.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 152.245233][ T43] audit: type=1400 audit(1785036229.520:423): avc: denied { bind } for pid=6542 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 152.421987][ T6553] virtio-fs: tag not found [ 153.206824][ T6582] netlink: 'syz.3.183': attribute type 1 has an invalid length. [ 153.451844][ T6586] ubi0: attaching mtd0 [ 153.460342][ T6586] ubi0: scanning is finished [ 153.490471][ T6586] ubi0: empty MTD device detected [ 153.493278][ T6586] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 153.539770][ T53] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 153.692165][ T53] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 153.697026][ T53] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 153.717350][ T53] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 247, setting to 64 [ 153.730965][ T53] usb 7-1: config 0 interface 0 has no altsetting 0 [ 153.745877][ T53] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 153.751930][ T53] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.757233][ T53] usb 7-1: Product: syz [ 153.773447][ T53] usb 7-1: Manufacturer: syz [ 153.776748][ T53] usb 7-1: SerialNumber: syz [ 153.782861][ T53] usb 7-1: config 0 descriptor?? [ 153.787534][ T6584] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 153.848507][ T6588] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.000979][ T6584] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 154.038750][ T53] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input8 [ 154.109232][ T53] usb 7-1: USB disconnect, device number 4 [ 154.111539][ C2] synaptics_usb 7-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 154.265437][ T5133] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 154.315006][ T6586] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 154.554379][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 154.554395][ T43] audit: type=1400 audit(1785036231.840:430): avc: denied { prog_run } for pid=6605 comm="syz.3.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 154.647364][ T43] audit: type=1400 audit(1785036231.940:431): avc: denied { create } for pid=6606 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 154.680137][ T43] audit: type=1400 audit(1785036231.940:432): avc: denied { write } for pid=6606 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 154.845958][ T43] audit: type=1400 audit(1785036232.130:433): avc: denied { create } for pid=6614 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 155.007810][ T43] audit: type=1400 audit(1785036232.280:434): avc: denied { write } for pid=6614 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 155.135804][ T5842] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 155.346492][ T5842] usb 5-1: Using ep0 maxpacket: 8 [ 155.350872][ T5842] usb 5-1: config 0 has no interfaces? [ 155.371251][ T6607] infiniband syz1: set active [ 155.374368][ T43] audit: type=1400 audit(1785036232.660:435): avc: denied { read } for pid=6623 comm="syz.3.197" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 155.388405][ T6607] infiniband syz1: added veth1_vlan [ 155.414578][ T6624] netlink: 132 bytes leftover after parsing attributes in process `syz.3.197'. [ 155.428911][ T6607] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 155.448263][ T6607] infiniband syz1: Couldn't open port 1 [ 155.448535][ T6607] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 155.448559][ T6607] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 155.448588][ T6607] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 155.461778][ T43] audit: type=1400 audit(1785036232.660:436): avc: denied { open } for pid=6623 comm="syz.3.197" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 155.462117][ T43] audit: type=1400 audit(1785036232.710:437): avc: denied { ioctl } for pid=6623 comm="syz.3.197" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 155.475654][ T5842] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 155.475681][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.475697][ T5842] usb 5-1: Product: syz [ 155.475709][ T5842] usb 5-1: Manufacturer: syz [ 155.475722][ T5842] usb 5-1: SerialNumber: syz [ 155.497864][ T5842] usb 5-1: config 0 descriptor?? [ 155.567110][ T6607] RDS/IB: syz1: added [ 155.677874][ T6607] smc: adding ib device syz1 with port count 1 [ 155.682136][ T6607] smc: ib device syz1 port 1 has no pnetid [ 156.022418][ T43] audit: type=1400 audit(1785036233.290:438): avc: denied { write } for pid=6612 comm="syz.0.194" name="/" dev="9p" ino=80216079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.033958][ T43] audit: type=1400 audit(1785036233.290:439): avc: denied { remove_name } for pid=6612 comm="syz.0.194" name="file0" dev="9p" ino=80216081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.063034][ T5842] usb 5-1: USB disconnect, device number 2 [ 156.239228][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'. [ 158.506781][ T6704] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 158.511216][ T6704] overlayfs: missing 'lowerdir' [ 158.572372][ T6704] netlink: 16 bytes leftover after parsing attributes in process `syz.0.220'. [ 158.791920][ T6711] netlink: 80 bytes leftover after parsing attributes in process `syz.3.222'. [ 158.797013][ T6708] netlink: 16 bytes leftover after parsing attributes in process `syz.0.220'. [ 159.559930][ T43] kauditd_printk_skb: 30 callbacks suppressed [ 159.559945][ T43] audit: type=1400 audit(1785036236.850:470): avc: denied { read } for pid=6715 comm="syz.3.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 159.604125][ T43] audit: type=1400 audit(1785036236.880:471): avc: denied { mount } for pid=6723 comm="syz.0.226" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 159.654926][ T6726] capability: warning: `syz.2.227' uses 32-bit capabilities (legacy support in use) [ 159.737301][ T43] audit: type=1400 audit(1785036237.010:472): avc: denied { unmount } for pid=5758 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 159.755703][ T6728] veth1_macvtap: Device is already in use. [ 159.837725][ T43] audit: type=1400 audit(1785036237.120:473): avc: denied { map } for pid=6702 comm="syz.1.219" path="socket:[14733]" dev="sockfs" ino=14733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 159.869611][ T43] audit: type=1400 audit(1785036237.120:474): avc: denied { read } for pid=6702 comm="syz.1.219" path="socket:[14733]" dev="sockfs" ino=14733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 159.892308][ T43] audit: type=1400 audit(1785036237.120:475): avc: denied { shutdown } for pid=6702 comm="syz.1.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 160.152493][ T6746] openvswitch: netlink: Flow actions attr not present in new flow. [ 160.154788][ T43] audit: type=1400 audit(1785036237.430:476): avc: denied { write } for pid=6744 comm="syz.3.234" name="mouse0" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 160.154838][ T43] audit: type=1400 audit(1785036237.430:477): avc: denied { append } for pid=6744 comm="syz.3.234" name="event2" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 160.170716][ T43] audit: type=1400 audit(1785036237.460:478): avc: denied { unlink } for pid=6743 comm="syz.0.232" name="#7" dev="tmpfs" ino=327 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 160.461281][ T43] audit: type=1400 audit(1785036237.740:479): avc: denied { bind } for pid=6749 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 160.590475][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'. [ 160.951298][ T6772] capability: warning: `syz.1.241' uses deprecated v2 capabilities in a way that may be insecure [ 161.030302][ T6775] tmpfs: Unknown parameter 'indo64' [ 161.274562][ T6782] input: syz1 as /devices/virtual/input/input10 [ 161.819144][ T6789] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 161.835230][ T6789] @0: renamed from bond_slave_1 (while UP) [ 162.068513][ T6793] openvswitch: netlink: IP tunnel TTL not specified. [ 162.193092][ T6795] 9p: Bad value for 'rfdno' [ 162.498004][ T35] IPVS: starting estimator thread 0... [ 162.600007][ T6806] nbd0: detected capacity change from 0 to 63 [ 162.626004][ T6809] block nbd0: NBD_DISCONNECT [ 162.630842][ T6811] IPVS: using max 26 ests per chain, 62400 per kthread [ 162.655548][ T6809] block nbd0: Disconnected due to user request. [ 162.664379][ T6809] block nbd0: shutting down sockets [ 162.695905][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 162.700538][ C0] buffer_io_error: 13 callbacks suppressed [ 162.700556][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 162.707338][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 162.711013][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 162.714486][ C0] Buffer I/O error on dev nbd0, logical block 3, async page read [ 162.720025][ T5139] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 162.771465][ T5139] Buffer I/O error on dev nbd0, logical block 0, async page read [ 162.774975][ T5139] Buffer I/O error on dev nbd0, logical block 1, async page read [ 162.777751][ T5139] Buffer I/O error on dev nbd0, logical block 2, async page read [ 162.804022][ T5139] Buffer I/O error on dev nbd0, logical block 3, async page read [ 162.810356][ T5139] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 162.826629][ T5139] Buffer I/O error on dev nbd0, logical block 0, async page read [ 162.835758][ T5139] Buffer I/O error on dev nbd0, logical block 1, async page read [ 162.867947][ T5139] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 162.878748][ T5139] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 162.893228][ T5139] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 162.912187][ T5139] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 162.917766][ T5139] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 162.944338][ T6076] ldm_validate_partition_table(): Disk read failed. [ 162.949672][ T5139] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 162.981098][ T5139] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 162.996236][ T6076] Dev nbd0: unable to read RDB block 0 [ 163.002287][ T6076] nbd0: unable to read partition table [ 163.040156][ T6076] ldm_validate_partition_table(): Disk read failed. [ 163.047473][ T6076] Dev nbd0: unable to read RDB block 0 [ 163.051595][ T6076] nbd0: unable to read partition table [ 163.240414][ T42] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 163.450796][ T42] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.474546][ T42] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 163.478532][ T42] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 163.497625][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.519575][ T42] usb 6-1: config 0 descriptor?? [ 163.544496][ T42] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 163.548959][ T42] dvb-usb: bulk message failed: -22 (3/0) [ 163.663006][ T42] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 163.683384][ T42] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 163.687940][ T42] usb 6-1: media controller created [ 163.719168][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.786164][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 163.811414][ T42] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 163.828733][ T42] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input11 [ 163.851204][ T42] dvb-usb: schedule remote query interval to 150 msecs. [ 163.855780][ T42] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 164.032151][ T42] dvb-usb: bulk message failed: -22 (1/0) [ 164.036687][ T42] dvb-usb: error while querying for an remote control event. [ 164.200183][ T5880] dvb-usb: bulk message failed: -22 (1/0) [ 164.204339][ T5880] dvb-usb: error while querying for an remote control event. [ 164.309581][ T9] Process accounting resumed [ 164.330407][ T6850] evm: overlay not supported [ 164.366972][ T5880] dvb-usb: bulk message failed: -22 (1/0) [ 164.374013][ T5880] dvb-usb: error while querying for an remote control event. [ 164.579642][ T5880] dvb-usb: bulk message failed: -22 (1/0) [ 164.581895][ T5880] dvb-usb: error while querying for an remote control event. [ 164.741471][ T5880] dvb-usb: bulk message failed: -22 (1/0) [ 164.751314][ T5880] dvb-usb: error while querying for an remote control event. [ 164.894433][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 164.894447][ T43] audit: type=1400 audit(1785036242.180:488): avc: denied { map } for pid=6849 comm="syz.3.264" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 164.919740][ T5880] dvb-usb: bulk message failed: -22 (1/0) [ 164.926699][ T5880] dvb-usb: error while querying for an remote control event. [ 164.929652][ T43] audit: type=1400 audit(1785036242.180:489): avc: denied { create } for pid=6867 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 164.929691][ T43] audit: type=1400 audit(1785036242.190:490): avc: denied { write } for pid=6867 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 165.091543][ T5768] overlayfs: failed lookup in lower (newroot/68, name='file0', err=-40): overlapping layers [ 165.096657][ T5768] overlayfs: failed lookup in lower (newroot/68, name='file0', err=-40): overlapping layers [ 165.111407][ T5880] dvb-usb: bulk message failed: -22 (1/0) [ 165.115021][ T5880] dvb-usb: error while querying for an remote control event. [ 165.279691][ T5880] dvb-usb: bulk message failed: -22 (1/0) [ 165.282366][ T5880] dvb-usb: error while querying for an remote control event. [ 165.450786][ T5880] dvb-usb: bulk message failed: -22 (1/0) [ 165.452964][ T5880] dvb-usb: error while querying for an remote control event. [ 165.469694][ T53] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 165.605496][ T5880] dvb-usb: bulk message failed: -22 (1/0) [ 165.608633][ T5880] dvb-usb: error while querying for an remote control event. [ 165.729612][ T53] usb 7-1: Using ep0 maxpacket: 8 [ 165.734713][ T53] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 165.739145][ T53] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 165.743045][ T53] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 165.747110][ T53] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 165.755930][ T53] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.768309][ T53] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 165.773716][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.788752][ T42] dvb-usb: bulk message failed: -22 (1/0) [ 165.791294][ T42] dvb-usb: error while querying for an remote control event. [ 165.869740][ T5764] Bluetooth: hci2: command tx timeout [ 165.952552][ T42] dvb-usb: bulk message failed: -22 (1/0) [ 165.957570][ T42] dvb-usb: error while querying for an remote control event. [ 166.022460][ T53] usb 7-1: usb_control_msg returned -32 [ 166.025074][ T53] usbtmc 7-1:16.0: can't read capabilities [ 166.130873][ T42] dvb-usb: bulk message failed: -22 (1/0) [ 166.163782][ T42] dvb-usb: error while querying for an remote control event. [ 166.335054][ T35] usb 6-1: USB disconnect, device number 7 [ 166.349686][ T42] dvb-usb: bulk message failed: -22 (1/0) [ 166.352573][ T42] dvb-usb: error while querying for an remote control event. [ 166.604320][ T35] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 166.733539][ T43] audit: type=1400 audit(1785036244.000:491): avc: denied { execute } for pid=6885 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 166.787987][ T6884] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 166.838296][ T43] audit: type=1400 audit(1785036244.000:492): avc: denied { execute_no_trans } for pid=6885 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 166.995305][ T53] usb 7-1: USB disconnect, device number 5 [ 167.241163][ T5770] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 167.281219][ T5770] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 167.307121][ T5770] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 167.336045][ T5770] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 167.343314][ T5770] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 167.449224][ T43] audit: type=1400 audit(1785036244.730:493): avc: denied { bind } for pid=6899 comm="syz.2.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 167.501430][ T43] audit: type=1400 audit(1785036244.780:494): avc: denied { setopt } for pid=6899 comm="syz.2.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 167.502735][ T6900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.276'. [ 167.895324][ T6909] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 167.961142][ T43] audit: type=1400 audit(1785036245.250:495): avc: denied { nlmsg_read } for pid=6907 comm="syz.0.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 168.067808][ T6917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.282'. [ 168.072114][ T6920] netlink: 28 bytes leftover after parsing attributes in process `syz.0.282'. [ 168.108689][ T6918] netlink: 'syz.1.283': attribute type 1 has an invalid length. [ 168.306233][ T6918] 8021q: adding VLAN 0 to HW filter on device bond4 [ 168.549592][ T43] audit: type=1400 audit(1785036245.830:496): avc: denied { append } for pid=6929 comm="syz.0.284" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 168.619038][ T43] audit: type=1400 audit(1785036245.830:497): avc: denied { map } for pid=6929 comm="syz.0.284" path="/dev/video0" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 168.738041][ T6930] veth0_vlan: entered allmulticast mode [ 169.214351][ T6893] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.217251][ T6893] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.246896][ T6953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.288'. [ 169.271797][ T6893] bridge_slave_0: entered allmulticast mode [ 169.283307][ T6893] bridge_slave_0: entered promiscuous mode [ 169.312398][ T6893] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.316273][ T6893] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.321256][ T6893] bridge_slave_1: entered allmulticast mode [ 169.330247][ T6893] bridge_slave_1: entered promiscuous mode [ 169.332643][ T6958] netlink: 'syz.0.289': attribute type 11 has an invalid length. [ 169.389818][ T6953] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.390756][ T5770] Bluetooth: hci3: command tx timeout [ 169.501124][ T6893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.521194][ T6893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.658463][ T6893] team0: Port device team_slave_0 added [ 169.667729][ T6893] team0: Port device team_slave_1 added [ 169.757523][ T6893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.793811][ T6893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.808810][ T6893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.826198][ T6971] syzkaller0: entered promiscuous mode [ 169.830054][ T6971] syzkaller0: entered allmulticast mode [ 169.834769][ T6893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.838439][ T6893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.850489][ T6893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.988949][ T6893] hsr_slave_0: entered promiscuous mode [ 170.005637][ T6893] hsr_slave_1: entered promiscuous mode [ 170.009082][ T6893] debugfs: 'hsr0' already exists in 'hsr' [ 170.012150][ T6893] Cannot create hsr debugfs directory [ 170.023361][ T6974] sctp: [Deprecated]: syz.2.294 (pid 6974) Use of int in maxseg socket option. [ 170.023361][ T6974] Use struct sctp_assoc_value instead [ 170.116453][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 170.116467][ T43] audit: type=1400 audit(1785036247.400:503): avc: denied { create } for pid=6973 comm="syz.2.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 170.131160][ T6974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.294'. [ 170.143668][ T43] audit: type=1400 audit(1785036247.420:504): avc: denied { write } for pid=6973 comm="syz.2.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 170.486764][ T43] audit: type=1400 audit(1785036247.760:505): avc: denied { mount } for pid=6981 comm="syz.1.296" name="/" dev="autofs" ino=16905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 170.679065][ T43] audit: type=1400 audit(1785036247.950:506): avc: denied { unmount } for pid=5763 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 170.837991][ T6893] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 170.901041][ T6893] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 170.910480][ T6893] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 170.966251][ T6893] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 170.972334][ T6893] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 170.998941][ T6893] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 171.026318][ T6893] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 171.031543][ T43] audit: type=1400 audit(1785036248.320:507): avc: denied { bind } for pid=6988 comm="syz.0.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 171.090498][ T6893] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 171.115638][ T43] audit: type=1400 audit(1785036248.400:508): avc: denied { setopt } for pid=6993 comm="syz.0.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 171.165546][ T53] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 171.311432][ T6893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.314976][ T7012] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 171.324908][ T43] audit: type=1400 audit(1785036248.610:509): avc: denied { create } for pid=7011 comm="syz.2.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 171.338451][ T7012] input: syz0 as /devices/virtual/input/input12 [ 171.354352][ T53] usb 6-1: config 1 has an invalid interface number: 163 but max is 3 [ 171.368885][ T53] usb 6-1: config 1 has an invalid interface number: 92 but max is 3 [ 171.372557][ T53] usb 6-1: config 1 has an invalid interface number: 108 but max is 3 [ 171.375833][ T53] usb 6-1: config 1 has an invalid interface number: 90 but max is 3 [ 171.381088][ T7012] netlink: 'syz.2.303': attribute type 13 has an invalid length. [ 171.381173][ T53] usb 6-1: config 1 has no interface number 0 [ 171.389635][ T6893] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.396040][ T53] usb 6-1: config 1 has no interface number 1 [ 171.403180][ T53] usb 6-1: config 1 has no interface number 2 [ 171.406239][ T53] usb 6-1: config 1 has no interface number 3 [ 171.409299][ T53] usb 6-1: config 1 interface 163 altsetting 7 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 171.416466][ T53] usb 6-1: config 1 interface 92 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 171.424660][ T53] usb 6-1: config 1 interface 92 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 171.430982][ T53] usb 6-1: config 1 interface 92 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 171.438183][ T53] usb 6-1: config 1 interface 92 altsetting 6 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 171.444307][ T53] usb 6-1: config 1 interface 108 altsetting 7 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 171.449959][ T53] usb 6-1: config 1 interface 108 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 171.463129][ T53] usb 6-1: config 1 interface 108 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 171.470300][ T53] usb 6-1: config 1 interface 108 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 171.477367][ T53] usb 6-1: config 1 interface 108 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 171.480165][ T5770] Bluetooth: hci3: command tx timeout [ 171.485515][ T53] usb 6-1: config 1 interface 108 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 171.485540][ T53] usb 6-1: config 1 interface 108 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 171.485561][ T53] usb 6-1: config 1 interface 108 altsetting 7 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 171.485579][ T53] usb 6-1: config 1 interface 108 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 171.485610][ T53] usb 6-1: config 1 interface 90 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 171.485627][ T53] usb 6-1: config 1 interface 90 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 171.485645][ T53] usb 6-1: config 1 interface 90 altsetting 8 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 171.485664][ T53] usb 6-1: config 1 interface 90 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 171.485681][ T53] usb 6-1: config 1 interface 90 altsetting 8 has a duplicate endpoint with address 0x8E, skipping [ 171.485697][ T53] usb 6-1: config 1 interface 90 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 171.485715][ T53] usb 6-1: config 1 interface 163 has no altsetting 0 [ 171.485729][ T53] usb 6-1: config 1 interface 92 has no altsetting 0 [ 171.485743][ T53] usb 6-1: config 1 interface 108 has no altsetting 0 [ 171.485757][ T53] usb 6-1: config 1 interface 90 has no altsetting 0 [ 171.488170][ T53] usb 6-1: New USB device found, idVendor=13d3, idProduct=3346, bcdDevice=87.b7 [ 171.488196][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.488211][ T53] usb 6-1: Product: syz [ 171.488223][ T53] usb 6-1: Manufacturer: syz [ 171.488236][ T53] usb 6-1: SerialNumber: syz [ 171.880812][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.884523][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.105438][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.108904][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.159036][ T6893] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.168443][ T6893] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.594459][ T43] audit: type=1400 audit(1785036249.860:510): avc: denied { ioctl } for pid=7031 comm="syz.0.306" path="/dev/btrfs-control" dev="devtmpfs" ino=1341 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 173.114423][ T43] audit: type=1400 audit(1785036250.400:511): avc: denied { getopt } for pid=7046 comm="syz.1.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 173.374262][ T6893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.407774][ T7056] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 173.712195][ T5770] Bluetooth: hci3: command tx timeout [ 173.720166][ T53] usb 6-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 173.779723][ T7037] comedi comedi0: reset error (fatal) [ 173.830831][ T53] usb 6-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 173.841696][ T53] usb 6-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 173.862294][ T43] audit: type=1400 audit(1785036251.150:512): avc: denied { bind } for pid=7064 comm="syz.0.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 173.898639][ T53] usb 6-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 173.979068][ T53] usb 6-1: USB disconnect, device number 8 [ 174.025779][ T7070] xt_TPROXY: Can be used only with -p tcp or -p udp [ 174.516059][ T6893] veth0_vlan: entered promiscuous mode [ 174.543347][ T6893] veth1_vlan: entered promiscuous mode [ 174.623786][ T5919] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 174.648639][ T6893] veth0_macvtap: entered promiscuous mode [ 174.724903][ T6893] veth1_macvtap: entered promiscuous mode [ 174.873270][ T5919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.891075][ T5919] usb 5-1: config 0 has no interfaces? [ 174.893513][ T6893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.896262][ T5919] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 174.905268][ T6893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.919239][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.930664][ T5919] usb 5-1: config 0 descriptor?? [ 174.936869][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.958847][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.051617][ T7072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.312'. [ 175.061879][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.101184][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.115233][ T7073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.122196][ T7072] SELinux: security_context_str_to_sid (4msevS:"-XF@) failed with errno=-22 [ 175.299820][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.315421][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.329789][ T7067] warning: `syz.0.311' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 175.400156][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 175.400172][ T43] audit: type=1400 audit(1785036252.680:515): avc: denied { connect } for pid=7075 comm="syz.2.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 175.423270][ T191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.426359][ T43] audit: type=1400 audit(1785036252.680:516): avc: denied { read } for pid=7075 comm="syz.2.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 175.441371][ T191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.533792][ T43] audit: type=1400 audit(1785036252.820:517): avc: denied { mounton } for pid=6893 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 175.630632][ T5919] usb 5-1: string descriptor 0 read error: -71 [ 175.683204][ T5919] usb 5-1: USB disconnect, device number 3 [ 175.790901][ T5770] Bluetooth: hci3: command tx timeout [ 175.905046][ T43] audit: type=1400 audit(1785036253.190:518): avc: denied { create } for pid=7084 comm="syz.4.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 175.913344][ T43] audit: type=1400 audit(1785036253.190:519): avc: denied { setopt } for pid=7084 comm="syz.4.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 175.969388][ T43] audit: type=1400 audit(1785036253.250:520): avc: denied { getopt } for pid=7084 comm="syz.4.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 175.974115][ T7089] netlink: 680 bytes leftover after parsing attributes in process `syz.4.281'. [ 175.996765][ T7089] netlink: 680 bytes leftover after parsing attributes in process `syz.4.281'. [ 176.163271][ T43] audit: type=1400 audit(1785036253.430:521): avc: denied { write } for pid=7093 comm="syz.2.317" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 176.201468][ T43] audit: type=1400 audit(1785036253.430:522): avc: denied { setattr } for pid=7093 comm="syz.2.317" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 176.474794][ T7101] ip6tnl0: Caught tx_queue_len zero misconfig [ 176.562730][ T7103] devtmpfs: Unknown parameter 'usrquota_limi ' [ 176.566352][ T43] audit: type=1400 audit(1785036253.840:523): avc: denied { mount } for pid=7102 comm="syz.2.320" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 176.601284][ T43] audit: type=1400 audit(1785036253.840:524): avc: denied { remount } for pid=7102 comm="syz.2.320" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 176.659671][ T42] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 176.831395][ T42] usb 5-1: Invalid ep0 maxpacket: 64 [ 176.941084][ T7107] loop5: detected capacity change from 0 to 7 [ 176.948769][ T7107] Dev loop5: unable to read RDB block 7 [ 176.953822][ T7107] loop5: AHDI p2 [ 176.956204][ T7107] loop5: partition table partially beyond EOD, truncated [ 177.020163][ T42] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 177.243188][ T42] usb 5-1: Invalid ep0 maxpacket: 64 [ 177.248321][ T42] usb usb5-port1: attempt power cycle [ 177.587294][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.334'. [ 177.660174][ T42] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 177.661558][ T7143] openvswitch: netlink: Actions may not be safe on all matching packets [ 177.682586][ T42] usb 5-1: Invalid ep0 maxpacket: 64 [ 177.875885][ T42] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 177.900572][ T42] usb 5-1: Invalid ep0 maxpacket: 64 [ 177.904221][ T42] usb usb5-port1: unable to enumerate USB device [ 178.288212][ T25] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 178.491791][ T25] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 178.499286][ T25] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 178.505243][ T25] usb 7-1: config 0 interface 0 has no altsetting 0 [ 178.532176][ T25] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 178.538499][ T25] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 178.554563][ T25] usb 7-1: Product: syz [ 178.560718][ T25] usb 7-1: Manufacturer: syz [ 178.569957][ T25] usb 7-1: SerialNumber: syz [ 178.592508][ T25] usb 7-1: config 0 descriptor?? [ 178.599334][ T25] usb 7-1: selecting invalid altsetting 0 [ 178.865744][ T5842] usb 7-1: USB disconnect, device number 6 [ 179.672525][ T7173] IPVS: persistence engine module ip_vs_pe_s not found [ 179.780837][ T7175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.263676][ T7191] sctp: [Deprecated]: syz.0.351 (pid 7191) Use of int in max_burst socket option deprecated. [ 180.263676][ T7191] Use struct sctp_assoc_value instead [ 180.347387][ T7196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.349'. [ 180.675387][ T43] kauditd_printk_skb: 22 callbacks suppressed [ 180.675409][ T43] audit: type=1400 audit(1785036257.950:547): avc: denied { read } for pid=7204 comm="syz.0.355" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 180.717236][ T43] audit: type=1400 audit(1785036257.950:548): avc: denied { open } for pid=7204 comm="syz.0.355" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 180.764225][ T43] audit: type=1400 audit(1785036257.950:549): avc: denied { ioctl } for pid=7204 comm="syz.0.355" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 180.814890][ T43] audit: type=1400 audit(1785036257.970:550): avc: denied { read } for pid=7204 comm="syz.0.355" lport=38770 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 180.926286][ T43] audit: type=1400 audit(1785036258.210:551): avc: denied { map } for pid=7215 comm="syz.0.358" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.017388][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.361'. [ 181.180368][ T7227] netlink: 'syz.2.363': attribute type 30 has an invalid length. [ 181.215763][ T43] audit: type=1400 audit(1785036258.500:552): avc: denied { write } for pid=7228 comm="syz.1.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 181.262244][ T7230] netlink: 'syz.2.363': attribute type 30 has an invalid length. [ 181.550270][ T7235] netlink: 'syz.4.365': attribute type 10 has an invalid length. [ 181.882667][ T43] audit: type=1400 audit(1785036259.170:553): avc: denied { write } for pid=7245 comm="syz.0.369" name="/" dev="9p" ino=80216079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 182.131174][ T43] audit: type=1400 audit(1785036259.420:554): avc: denied { write } for pid=7245 comm="syz.0.369" name="cpuset.effective_cpus" dev="9p" ino=80216081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 182.224408][ T7256] batadv_slave_0: Caught tx_queue_len zero misconfig [ 182.557628][ T43] audit: type=1400 audit(1785036259.850:555): avc: denied { read } for pid=7264 comm="syz.4.374" name="usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 182.576348][ T43] audit: type=1400 audit(1785036259.850:556): avc: denied { open } for pid=7264 comm="syz.4.374" path="/dev/usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 182.604049][ T7265] ehci-pci 0000:00:1d.7: remove, state 1 [ 182.621927][ T7265] usb usb1: USB disconnect, device number 1 [ 182.626644][ T7267] ip6t_srh: unknown srh invflags 4000 [ 182.627952][ T7265] usb 1-1: USB disconnect, device number 2 [ 183.060268][ T7265] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 183.410145][ T5842] usb 2-1: new full-speed USB device number 2 using uhci_hcd [ 183.614743][ T5842] usb 2-1: not running at top speed; connect to a high speed hub [ 183.643885][ T7300] bond2: Removing last ns target with arp_interval on [ 183.649765][ T5842] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 183.709630][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 183.748526][ T5842] usb 2-1: Product: QEMU USB Tablet [ 183.763529][ T5842] usb 2-1: Manufacturer: QEMU [ 183.767935][ T5842] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 183.781966][ T7285] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 184.016528][ T5842] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.0002/input/input13 [ 184.062563][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.385'. [ 184.077822][ T7311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.385'. [ 184.109946][ T7311] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 184.127849][ T7311] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 184.134810][ T7311] vhci_hcd vhci_hcd.0: Device attached [ 184.220331][ T7312] vhci_hcd: connection closed [ 184.268901][ T5835] vhci_hcd vhci_hcd.2: stop threads [ 184.290491][ T5835] vhci_hcd vhci_hcd.2: release socket [ 184.313018][ T5835] vhci_hcd vhci_hcd.2: disconnect device [ 184.319218][ T5842] hid-generic 0003:0627:0001.0002: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 184.375955][ T7270] usb 2-1: USB disconnect, device number 2 [ 184.388268][ T9] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 184.716634][ T7317] use of bytesused == 0 is deprecated and will be removed in the future, [ 184.742440][ T7317] use the actual size instead. [ 184.781169][ T7314] fido_id[7314]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb2/2-1/report_descriptor': No such file or directory [ 184.816374][ T7317] netlink: 20 bytes leftover after parsing attributes in process `syz.1.386'. [ 185.048556][ T7320] Bluetooth: MGMT ver 1.23 [ 185.377191][ T7270] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 185.411930][ T7270] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 185.456848][ T7270] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 185.529678][ T7270] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 185.620073][ T7270] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 185.628705][ T7270] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 185.634465][ T7270] usb usb1: Product: EHCI Host Controller [ 185.636562][ T7270] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 185.658773][ T7270] usb usb1: SerialNumber: 0000:00:1d.7 [ 185.718423][ T43] kauditd_printk_skb: 11 callbacks suppressed [ 185.718451][ T43] audit: type=1400 audit(1785036263.000:568): avc: denied { write } for pid=7326 comm="syz.1.390" name="configs" dev="configfs" ino=19661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 185.757965][ T43] audit: type=1400 audit(1785036263.030:569): avc: denied { write } for pid=7326 comm="syz.1.390" name="functions" dev="configfs" ino=19660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 185.781516][ T43] audit: type=1400 audit(1785036263.030:570): avc: denied { write } for pid=7326 comm="syz.1.390" name="c_srate" dev="configfs" ino=20700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 185.794137][ T43] audit: type=1400 audit(1785036263.030:571): avc: denied { open } for pid=7326 comm="syz.1.390" path="/96/config/usb_gadget/g1/functions/uac2.usb0/c_srate" dev="configfs" ino=20700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 185.818483][ T43] audit: type=1400 audit(1785036263.060:572): avc: denied { write } for pid=7326 comm="syz.1.390" name="c.1" dev="configfs" ino=20697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 185.836136][ T43] audit: type=1400 audit(1785036263.060:573): avc: denied { create } for pid=7326 comm="syz.1.390" name="uac2.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 185.846143][ T7327] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 185.850595][ T43] audit: type=1400 audit(1785036263.060:574): avc: denied { write } for pid=7326 comm="syz.1.390" name="c.1" dev="configfs" ino=20697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 185.934380][ T7270] hub 1-0:1.0: USB hub found [ 185.964074][ T7327] udc dummy_udc.0: failed to start g1: -19 [ 185.975878][ T7327] UDC core: g1: couldn't find an available UDC or it's busy [ 185.989681][ T7270] hub 1-0:1.0: 6 ports detected [ 186.074994][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.392'. [ 186.075146][ T7333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7333 comm=syz.2.392 [ 186.082380][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.392'. [ 186.198263][ T7336] netlink: 156 bytes leftover after parsing attributes in process `syz.2.393'. [ 186.269147][ T7270] hub 2-0:1.0: USB hub found [ 186.349239][ T7270] hub 2-0:1.0: 2 ports detected [ 186.376810][ T7341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7341 comm=syz.1.394 [ 186.465987][ T7270] hub 3-0:1.0: USB hub found [ 186.473780][ T7270] hub 3-0:1.0: 2 ports detected [ 186.529854][ T35] usb 1-1: new high-speed USB device number 2 using ehci-pci [ 186.556476][ T7270] hub 4-0:1.0: USB hub found [ 186.574077][ T7270] hub 4-0:1.0: 2 ports detected [ 186.637045][ T43] audit: type=1400 audit(1785036263.930:575): avc: denied { unmount } for pid=6893 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 186.671297][ T43] audit: type=1400 audit(1785036263.940:576): avc: denied { create } for pid=7343 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 186.855997][ T35] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 186.862686][ T35] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 186.867685][ T35] usb 1-1: Product: QEMU USB Tablet [ 186.879745][ T35] usb 1-1: Manufacturer: QEMU [ 186.889893][ T35] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 187.025200][ T35] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0003/input/input14 [ 187.173096][ T35] hid-generic 0003:0627:0001.0003: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 187.365836][ T7363] netlink: 60 bytes leftover after parsing attributes in process `syz.4.402'. [ 187.487757][ T7361] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 187.518171][ T7366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=917 sclass=netlink_route_socket pid=7366 comm=syz.4.403 [ 187.620505][ T7364] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 187.883720][ T7375] overlayfs: missing 'lowerdir' [ 188.247678][ T25] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 188.585553][ T25] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 188.610930][ T25] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 188.616908][ T25] usb 7-1: config 0 interface 0 has no altsetting 0 [ 188.631400][ T7403] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000028: 0000 [#1] SMP KASAN NOPTI [ 188.649615][ T7403] KASAN: null-ptr-deref in range [0x0000000000000140-0x0000000000000147] [ 188.653632][ T7403] CPU: 3 UID: 0 PID: 7403 Comm: syz.0.414 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.670081][ T7403] Tainted: [L]=SOFTLOCKUP [ 188.671967][ T7403] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.686581][ T7403] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 188.687066][ T25] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 188.697112][ T7403] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 188.697139][ T7403] RSP: 0018:ffffc900057674b0 EFLAGS: 00010286 [ 188.697156][ T7403] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 188.697167][ T7403] RDX: 0000000000000000 RSI: ffffffff81e53a84 RDI: dffffc0000000028 [ 188.697178][ T7403] RBP: 0000000000000140 R08: 0000000000000001 R09: 0000000000000000 [ 188.697187][ T7403] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff81e53a84 [ 188.697197][ T7403] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 188.697208][ T7403] FS: 00007f1035b046c0(0000) GS:ffff8880d60de000(0000) knlGS:0000000000000000 [ 188.697239][ T7403] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.697251][ T7403] CR2: 00007f1035ae3d58 CR3: 0000000036b49000 CR4: 0000000000352ef0 [ 188.697262][ T7403] Call Trace: [ 188.697269][ T7403] [ 188.697275][ T7403] __kasan_check_byte+0x13/0x50 [ 188.697300][ T7403] lock_acquire+0x132/0x370 [ 188.697317][ T7403] ? __pfx___might_resched+0x10/0x10 [ 188.697336][ T7403] ? lockdep_unlock+0x5a/0xc0 [ 188.697350][ T7403] ? __lock_acquire+0xd5b/0x1a40 [ 188.697369][ T7403] down_write_nested+0x94/0x200 [ 188.697391][ T7403] ? start_dirop+0x4b/0xb0 [ 188.697404][ T7403] ? __pfx_down_write_nested+0x10/0x10 [ 188.697425][ T7403] ? full_name_hash+0xbc/0x100 [ 188.697443][ T7403] start_dirop+0x4b/0xb0 [ 188.697455][ T7403] simple_start_creating+0xf9/0x110 [ 188.697483][ T7403] ? __pfx_simple_start_creating+0x10/0x10 [ 188.697498][ T7403] ? mntput+0x70/0xa0 [ 188.697510][ T7403] ? simple_pin_fs+0xa3/0x190 [ 188.697524][ T7403] debugfs_start_creating.part.0+0x82/0x170 [ 188.697552][ T7403] debugfs_create_dir+0x72/0x440 [ 188.697577][ T7403] i2c_device_probe+0x5f5/0xd10 [ 188.697604][ T7403] ? kernfs_put+0x3f/0x60 [ 188.697618][ T7403] ? __pfx_i2c_device_probe+0x10/0x10 [ 188.697637][ T7403] ? sysfs_create_link+0x68/0xc0 [ 188.697652][ T7403] ? __pfx_i2c_device_probe+0x10/0x10 [ 188.697673][ T7403] really_probe+0x241/0xa60 [ 188.697693][ T7403] __driver_probe_device+0x20e/0x450 [ 188.697713][ T7403] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 188.697732][ T7403] driver_probe_device+0x4a/0x140 [ 188.697749][ T7403] __device_attach_driver+0x1df/0x320 [ 188.697766][ T7403] ? __pfx___device_attach_driver+0x10/0x10 [ 188.697783][ T7403] bus_for_each_drv+0x159/0x1e0 [ 188.697797][ T7403] ? __pfx_bus_for_each_drv+0x10/0x10 [ 188.697820][ T7403] ? lockdep_hardirqs_on+0x78/0x100 [ 188.697836][ T7403] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 188.697860][ T7403] __device_attach+0x1e4/0x4d0 [ 188.697877][ T7403] ? __pfx___device_attach+0x10/0x10 [ 188.697894][ T7403] ? do_raw_spin_unlock+0x145/0x1e0 [ 188.697921][ T7403] device_initial_probe+0xaf/0xd0 [ 188.697940][ T7403] bus_probe_device+0x64/0x160 [ 188.697956][ T7403] device_add+0x121d/0x1970 [ 188.697975][ T7403] ? __pfx_device_add+0x10/0x10 [ 188.697994][ T7403] ? lockdep_init_map_type+0x5c/0x250 [ 188.698038][ T7403] ? __init_waitqueue_head+0xca/0x150 [ 188.698065][ T7403] i2c_new_client_device+0x660/0xd30 [ 188.698090][ T7403] new_device_store+0x20f/0x420 [ 188.698113][ T7403] ? __lock_acquire+0x49f/0x1a40 [ 188.698131][ T7403] ? __pfx_new_device_store+0x10/0x10 [ 188.698156][ T7403] ? find_held_lock+0x2b/0x80 [ 188.698181][ T7403] ? sysfs_file_kobj+0xe4/0x290 [ 188.698201][ T7403] ? sysfs_file_kobj+0xe4/0x290 [ 188.698221][ T7403] ? __pfx_new_device_store+0x10/0x10 [ 188.698241][ T7403] dev_attr_store+0x58/0x80 [ 188.698259][ T7403] ? __pfx_dev_attr_store+0x10/0x10 [ 188.698278][ T7403] sysfs_kf_write+0xf2/0x150 [ 188.698298][ T7403] kernfs_fop_write_iter+0x3e0/0x5f0 [ 188.698316][ T7403] ? __pfx_sysfs_kf_write+0x10/0x10 [ 188.698340][ T7403] vfs_write+0x6ac/0x1050 [ 188.698361][ T7403] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 188.698381][ T7403] ? __pfx_vfs_write+0x10/0x10 [ 188.698408][ T7403] ksys_write+0x12a/0x250 [ 188.698429][ T7403] ? __pfx_ksys_write+0x10/0x10 [ 188.698453][ T7403] do_syscall_64+0x115/0x870 [ 188.698468][ T7403] ? clear_bhb_loop+0x40/0x90 [ 188.698485][ T7403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.698499][ T7403] RIP: 0033:0x7f1034b9de99 [ 188.698513][ T7403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.698530][ T7403] RSP: 002b:00007f1035b04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 188.698546][ T7403] RAX: ffffffffffffffda RBX: 00007f1034e25fa0 RCX: 00007f1034b9de99 [ 188.698556][ T7403] RDX: 000000000000000f RSI: 0000200000000500 RDI: 0000000000000003 [ 188.698565][ T7403] RBP: 00007f1034c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 188.698574][ T7403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.698582][ T7403] R13: 00007f1034e26038 R14: 00007f1034e25fa0 R15: 00007ffdf14298f8 [ 188.698596][ T7403] [ 188.698601][ T7403] Modules linked in: [ 188.700025][ T7403] ---[ end trace 0000000000000000 ]--- [ 188.739148][ T43] audit: type=1400 audit(1785036266.020:577): avc: denied { read } for pid=5130 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 188.750135][ T7403] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 188.750181][ T7403] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 188.750200][ T7403] RSP: 0018:ffffc900057674b0 EFLAGS: 00010286 [ 188.750219][ T7403] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 188.750233][ T7403] RDX: 0000000000000000 RSI: ffffffff81e53a84 RDI: dffffc0000000028 [ 188.750244][ T7403] RBP: 0000000000000140 R08: 0000000000000001 R09: 0000000000000000 [ 188.750253][ T7403] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff81e53a84 [ 188.750263][ T7403] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 188.750274][ T7403] FS: 00007f1035b046c0(0000) GS:ffff8880d5fde000(0000) knlGS:0000000000000000 [ 188.750307][ T7403] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.750322][ T7403] CR2: 0000000000000000 CR3: 0000000036b49000 CR4: 0000000000352ef0 [ 188.750336][ T7403] Kernel panic - not syncing: Fatal exception [ 188.782353][ T7403] Kernel Offset: disabled