last executing test programs: 1m52.023524664s ago: executing program 2 (id=712): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000300)={0x200000, 0x200000, 0xfffffffe}) mkdir(&(0x7f0000000000)='./file0\x00', 0xa) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r0, r0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) r2 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setresuid(0xee01, r5, r5) setresuid(0xffffffffffffffff, r5, 0xee01) statx(r2, &(0x7f0000000240)='./file0\x00', 0x2000, 0x4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x109440, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x4, r8}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) close(0xffffffffffffffff) ioctl$DMA_BUF_SET_NAME_A(r10, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x4000003], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x9, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x80000001, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x41ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfffffff8]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0006}]}) close_range(r11, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000880)=ANY=[@ANYBLOB="02000000010010000000000002000400", @ANYRES32=r0, @ANYBLOB="02000400", @ANYRESOCT=r6, @ANYBLOB="02000600", @ANYRES32=r1, @ANYRES32=r7, @ANYRES32=r3, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="040000000000000008000300", @ANYRES32=r6, @ANYRES64], 0x5c, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 1m51.322498104s ago: executing program 2 (id=715): syz_usb_connect(0x0, 0x43, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e7c2f708210435030e5f0000000109023100010000000009040000000202ff000524060000052402", @ANYRES16], 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004042, 0x0) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) syz_open_procfs$userns(r0, &(0x7f00000000c0)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x10, 0x4, 0x8, 0x5}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 1m49.206310716s ago: executing program 2 (id=729): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000010700c0af00000000000010902240001000000030122050009058103000000004d"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d0422c200000000000109e8240001000000000904000001030001000921001006012207000905810300000d0300"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300), 0xa02, 0x0) syz_io_uring_setup(0x235, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, &(0x7f0000000000), &(0x7f0000000100)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) epoll_create(0x5) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x7, 0x5, 0x77}, {@private=0xa010101, 0x4e23, 0x1, 0xcd, 0x12d5f, 0x3}}, 0x44) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000000)={0x4, 0x3, 0x608, 0x0, 0xffff, 0x1, 0x4, 0x6a}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x80000000}, &(0x7f0000000300)=0x8) socket$inet_smc(0x2b, 0x1, 0x0) 1m45.118854257s ago: executing program 2 (id=737): r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x48400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f00000016c0)) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) read$FUSE(r5, &(0x7f000000c400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, r7, {0x7, 0x1f, 0xffffffff, 0x240009, 0x1, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x20, 0x7}}, 0x50) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, 0x0) 1m43.618558059s ago: executing program 2 (id=740): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x1010400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000400)=ANY=[@ANYBLOB="0400000000000000850400"]) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x12b001) ioctl$CEC_TRANSMIT(r4, 0xc0386105, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r6, 0x10000000005, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x98000, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000280)=0x10) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4, 0x0, 0xfffffffffffffffe, 0x9, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}]}, 0x48}, 0x1, 0x7}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x2004c0a0) ioctl$SIOCGIFHWADDR(r7, 0x8927, &(0x7f0000000040)={'tunl0\x00'}) syz_emit_ethernet(0x26, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x36c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbb4f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd07}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x896}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xebd8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x76e}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK={0xfc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x89}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff800}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe8d}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2c0b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x31e}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa006}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_to_bridge\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x401}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}]}, 0x36c}, 0x1, 0x0, 0x0, 0x44004}, 0x480c4) 1m42.74698033s ago: executing program 2 (id=744): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) timer_create(0x0, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r5 = syz_io_uring_setup(0x38ff, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x700000000000000, 0x0, 0x7fffffff}, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000000280)={r1, r2, 0xfffe}) 1m27.16733761s ago: executing program 32 (id=744): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) timer_create(0x0, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r5 = syz_io_uring_setup(0x38ff, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x700000000000000, 0x0, 0x7fffffff}, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000000280)={r1, r2, 0xfffe}) 17.554996714s ago: executing program 0 (id=1090): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="01"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'wlan1\x00', @multicast}) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x34}, 0x10) socket$netlink(0x10, 0x3, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r8 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x2, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000300)=[r7], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x114, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0, 0x0, 0xf}) io_uring_enter(r8, 0x47f6, 0x0, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xdd) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) 16.508138133s ago: executing program 0 (id=1092): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, 0x0) close_range(r3, r3, 0x0) (fail_nth: 2) 14.56476881s ago: executing program 0 (id=1099): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) syz_io_uring_setup(0xca6, &(0x7f0000000480)={0x0, 0xb601, 0x200, 0x5, 0x9c3}, 0x0, &(0x7f0000000100)=0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x20, 0x1, 0x40000333}, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f00000001c0)={&(0x7f0000001000)={[{&(0x7f0000000300)}, {&(0x7f0000000500)="a586d62512bf60ae1618ae51b1dbe97489e29ec0ade9f4b336e3d95e8c0175be56ccdfd3697c627a50b2cd9698dbd0f58d594c780803f496d030128a5e6637695d7e84a0ebfe0ba573e5328f4a8650d73223200bf211d53f6f9d39487ea8d9efd51d653d0abf412faca1aa05babe9fe7ce6cc466027e79a1d20359d0540ed5166afdc960", 0x84}, {&(0x7f00000005c0)="a5cf96f92745fbe43aa0854f3da9c526ef194a004559320cd35f38aadbcf517e1222a2e2e0a5c358c018d63e47c14a6d831837e2f57f2ef414ba0cdbc9c5180884aeee2dfbfcfaca792135806258464d2a1cb141618fe4fc34ca072ca05dda1058a847e0aa24e767e486b46c0c78dc8414096f83792b688bca69236ff02e42e6a034027c9b8ce86ae6a4e980849ac21c3f92e49cc9362fdf7d07b1d379c5b2e1b936bd88e854c04f8bda972da99043cdd9a051e0c917982cba05e37401749bad98f66ca788ddbd58adbe1e04f39d4a2b45fc63a9f745d8474d5c8466aecf1fd1e334de015af1", 0xe6, 0x3}, {0x0, 0x0, 0x3}]}, 0x4, 0x2}, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x14, 0x12, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000005f000000000000000100000018000000018000000000000081000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffff", @ANYBLOB], &(0x7f00000006c0)='GPL\x00', 0x9, 0xee, &(0x7f0000000940)=""/238, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000a80)={0x0, 0xa, 0x3, 0x10000}, 0x10, 0x0, r2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, 0x0, 0x0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x6, 0x0, 0x2, "57d4915b52cdfd4e8ea56ed6c1ca719a"}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000100000d030000000000000000000000000000000000000b00"/63], 0x0, 0x46, 0x0, 0x1}, 0x28) openat$ppp(0xffffffffffffff9c, 0x0, 0xd8802, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, &(0x7f00000001c0), 0x0, 0x0, 0x1, 0xa, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="03000000040000000400"/28], 0x50) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000), 0x0, 0x1e}) 13.627882145s ago: executing program 0 (id=1105): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000280)="f7", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000100)={r2}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000007c0)=ANY=[], 0x310) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @remote}}, 0x80, 0x7ff, 0x9, 0x9, 0x1, 0x1, 0x4}, &(0x7f0000000080)=0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800fffeb703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000000)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0xb, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0x60a, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0xe, 0x15, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @tail_call, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}]}, &(0x7f0000000780)='GPL\x00', 0x8, 0x1000, &(0x7f0000000a00)=""/4096, 0x41000, 0x3a, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x0, 0xffffffff, 0x1ff}, 0x10, r8, 0xffffffffffffffff, 0x5, &(0x7f0000000880)=[r3, r3, 0xffffffffffffffff, r9], &(0x7f00000008c0)=[{0x4, 0x4, 0x1, 0x2}, {0x0, 0x5, 0x2, 0xc}, {0x0, 0x5, 0xa, 0xc}, {0x2, 0x5, 0x6, 0x2}, {0x4, 0x3, 0xc, 0x4}], 0x10, 0x2}, 0x94) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="34010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x10}, 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) 13.485961163s ago: executing program 0 (id=1106): socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xd27382, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x41, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x800, 0x10000000, 0x2fe}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r7, 0x3518, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) 12.420820432s ago: executing program 0 (id=1109): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000000009030000000000000000000700000009000100"], 0x38}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x4001, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000004) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETS2(r6, 0x402c542b, &(0x7f0000000280)={0x4c, 0x5f, 0x6, 0x3, 0x7, "00da900eaf7919c635d4a15ac41e3100", 0x80000000, 0x7fe}) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000000300)={0xd, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x9e5e, 0x89, &(0x7f0000000400)=""/137, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x7, 0xfffffffb, 0x200}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff, r5], 0x0, 0x10, 0x1}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r10 = dup(r9) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r10, &(0x7f0000000640)=ANY=[@ANYBLOB="a800000000000080e8dec85a44e0f01cf138ee1fe6e1a2ac1fd2be1c2d88"], 0xa8) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}}) ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000000)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pI4 \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000008c0)={r11, &(0x7f00000007c0)="b702a6ce68bd4c158fa70c24e5612adb71ca6075419b9581f62a5afb476a7868fb9facf296d2aa044d42fd37c35b5e58a2e81033a701ebb50c2df3af6e3da89e72b932efb9ffe04e1b6b430c91830087be7285c3f5ee8b6ee0", &(0x7f0000000840)=""/103}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWTABLE={0x13c, 0x0, 0xa, 0x703, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xf8, 0x6, "e9d91418e022eaac14eaed8271c70ac31ccb971678e999a6be5cb7ac165ba2df56bdf37f2b8ab44b50811dd2f91cfc7b75f4ae80b5772ff475667799782ee557bb82f2acf5529fe9e60a3eb30c552db07da807d271746235790cba18d8bdbc06fc3ddfbdf5e90fe576efa54a271645bccbfb36750c73f222af3ff6398e23de16e55d56102dcd2befdb5038d382c79f51afd09df684cb31a36bccae3f00df27be9f195507d17dc36ad39f17ca6eb11ac756843957435c76cfab73c466fab7654422be7578312feb99a3d5cc59db708827842d269016a433208814df1d5196a44a5e191311f73c7b55b800ded7fc9eda5305539887"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x194, 0xb, 0xa, 0x301, 0x0, 0x0, {0xaa51c692e68db646}, [@NFTA_SET_EXPRESSIONS={0x88, 0x12, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xd2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_SET_EXPRESSIONS={0xf8, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x58, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SET_ID={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x70, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}, @NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x90, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x64, 0x6, "077be19c3f69d98c69ac3ab55f4c6438bc6e5d4f277b0817f3a981ccf2630113e107fa0e542b859ec0d5fdd9f5ae4126e92abdfd122a635ab0e1339b3c393db3915cb3dd5ee3a63fc882e52d9030c4523599cce0ee1f405dbcc7ee5273b4aa97"}]}, @NFT_MSG_DELSET={0xdc, 0xb, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_EXPRESSIONS={0xac, 0x12, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, {0x40, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x289}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xe2}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x58c}}, 0x20000000) 10.211294721s ago: executing program 4 (id=1117): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x5}, 0x94) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100005ae4c41096050100f5050102030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 8.59857041s ago: executing program 4 (id=1125): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x14, 0x4, 0x4, 0x4}, 0x50) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000003c0)={r0, &(0x7f0000000680), 0x20000000}, 0x20) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x4, 0x1, 0x1fcafc89, 0x8d47, 0x324, 0x10}) r1 = socket(0x40000000015, 0x5, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) socket$nl_generic(0x10, 0x3, 0x10) pwrite64(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x4) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000001c0)={0x51, 0x3, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0x7, 0xfffb, 0xa}, 0x0, 0x0}}) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x17) sendto$inet6(r1, 0x0, 0x0, 0x4000040, &(0x7f0000000000)={0xa, 0x4e30, 0x8, @remote, 0x20000092}, 0x1c) 5.908038994s ago: executing program 4 (id=1133): r0 = socket$packet(0x11, 0xa, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$vim2m(&(0x7f00000005c0), 0x8eb0, 0x2) read(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000e11e00820000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100018f1b565c09cb278b3eabf4de550e8acd588fdb7a754a163bcea76b40249de432e9b28cb48e426657a12e2306e9e344a4e93b90"], 0x7c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_vlan\x00', 0x2000}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x7c, r3, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20008094}, 0x40000d0) socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r6 = socket$inet(0x2, 0x3, 0x6) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x24000080, &(0x7f0000000000)={0x2, 0x5e22, @rand_addr=0x64010101}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f0000000500)=r7, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000380)={'ip6tnl0\x00', r4, 0x0, 0xff, 0x0, 0x0, 0x0, @empty, @empty, 0x8, 0x0, 0x0, 0xc}}) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000540), &(0x7f0000000580)=0x4) r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r10 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r10, 0x84, 0xd, &(0x7f0000000900)=@assoc_value={0x0, 0x8}, 0x8) syz_emit_ethernet(0xd0, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r9], &(0x7f0000000240)={0x1, 0x4, [0xe7b, 0xb76, 0x72c, 0x78a]}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000ec0)='fdinfo\x00') 5.706999748s ago: executing program 4 (id=1135): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x94, 0x7200, 0x0, 0x0}], 0x1}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x5e}, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00'}, 0x10) 5.172861065s ago: executing program 1 (id=1139): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x508, 0x0, 0x25, 0x148, 0x340, 0x60, 0x470, 0x2a8, 0x2a8, 0x470, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x11e, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00', {0xfffffffffffffffe}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4, 0x1, 0x82295bc78b02ba47, 0x7, 0x2, 0x1], 0x6, 0x7}}}, @common=@unspec=@statistic={{0x38}, {0x4, 0xffff}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x578) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}]}) 4.955967415s ago: executing program 5 (id=1141): bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x44) syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x88fb, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x68, 0x0, 0x8, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x1}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x6, 0x2, 0x1, 0x1, 0x0, 0x4}, 0x1, {0x5009}}}, {0x8, 0x22eb, 0x4, {{0xe, 0x2, 0xf8, 0x3, 0x1, 0x2, 0x4, 0xf9}, 0x2, {0x4, 0x10, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x6}}}}}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), r5) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYRES32=r4, @ANYBLOB="ff725cba6cf4f7e9", @ANYRES32=r4, @ANYBLOB="0c0002000300000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000010}, 0x4) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r7, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'syz_tun\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000810}, 0x200040c0) 4.813438685s ago: executing program 1 (id=1142): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(&(0x7f0000004d00)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) syz_emit_vhci(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r2 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 4.679166062s ago: executing program 5 (id=1143): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) io_setup(0x1, &(0x7f00000004c0)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x700, 0x0, 0x0, 0x0, r3, 0x0}]) 4.118779514s ago: executing program 5 (id=1144): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2, @pix={0x200, 0x9, 0xb5315258, 0x0, 0x0, 0x9, 0x3, 0x7, 0x0, 0x3, 0x2, 0x1}}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x248000, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f00000001c0)={0x657, 0xaf, 0x8a0b}) write$sndseq(r3, &(0x7f0000000280)=[{0x1, 0x72, 0xfc, 0x8, @time={0x4, 0x5}, {0xa, 0x3}, {0xf8, 0xa}, @quote={{0x6, 0xc}, 0x3, &(0x7f0000000240)={0x2, 0x7, 0xfc, 0x10, @time={0x7a1d, 0x7}, {0x5, 0x6}, {0x0, 0xff}, @queue={0x7, {0x2cd1, 0x2000000}}}}}], 0x1c) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) poll(&(0x7f0000000300)=[{r3, 0x8}, {r4, 0x8080}, {r3, 0x8041}, {r0, 0x4000}, {r1, 0x4}, {r1, 0x1}, {r3, 0x2000}, {r1}, {r0, 0x40}, {r2, 0x104a}], 0xa, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x40800, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f00000003c0)={{0x3, 0x4}, {0x8, 0x9}, 0x6, 0x0, 0x9}) r5 = openat(r3, &(0x7f0000000440)='./file0\x00', 0x70000, 0x80) write$sndseq(r5, &(0x7f0000000480)=[{0x0, 0x1, 0x9, 0x6d, @time={0x4, 0x10000}, {0xa, 0x8}, {0xfd, 0x5}, @connect={{0x8, 0x1}, {0x6, 0xb}}}, {0xff, 0x3, 0xc, 0x2, @time={0x9, 0xc}, {0x5, 0x40}, {0x6, 0x5}, @result={0x400, 0x2}}, {0xbd, 0x1, 0x40, 0x2, @tick=0x7fffffff, {0xf, 0x6}, {0xf, 0xf}, @control={0x40, 0x5, 0x7}}, {0x30, 0xf7, 0x8, 0x0, @tick=0x7, {0x81, 0xe}, {0x0, 0x3}, @note={0x4, 0xe, 0x2a, 0x7, 0x1}}], 0x70) read$msr(r3, &(0x7f0000000500)=""/79, 0x4f) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000d40)=@broute={'broute\x00', 0x20, 0x5, 0x716, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000600], 0x0, &(0x7f00000005c0), &(0x7f0000000600)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x3, 0x30, 0x8914, 'team_slave_1\x00', 'ipvlan0\x00', 'ipvlan0\x00', 'vlan0\x00', @remote, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @multicast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x6e, 0xe6, 0x116, [], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x1, 0x1, {0x6000}}}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{0x1c, 0x4, 0x8884, 'bond_slave_0\x00', 'dvmrp1\x00', 'macvtap0\x00', 'dvmrp1\x00', @multicast, [0x0, 0xff, 0xff, 0xff], @remote, [0xb41daf750207ef8, 0xff, 0xff, 0xff, 0xff], 0xb6, 0xb6, 0xe6, [@limit={{'limit\x00', 0x0, 0x20}, {{0x2, 0x9, 0x4, 0xfffffff7, 0xffffff58, 0x76bb}}}], [], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x9, 0x5f, 0x88ca, 'veth1_to_bond\x00', 'batadv0\x00', 'veth1_macvtap\x00', 'dvmrp0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0xff], 0x156, 0x156, 0x1ce, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [0xff, 0xff000000, 0xffffff00, 0xffffff00], [0xff, 0xffffffff, 0xff000000, 0xff], 0x35, 0x33, 0x8, 0x0, 0x4e23, 0x4e24, 0x4e21, 0x4e23}}}, @stp={{'stp\x00', 0x0, 0x48}, {{0x0, {0x2, 0x3, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0x7ff, 0x3, 0x4, 0x1, @local, [0xff, 0xff, 0x0, 0x0, 0xff], 0x4e22, 0x4e23, 0x9, 0x1, 0x3, 0x9, 0x800, 0x7, 0x93d6, 0x1b}, 0x181, 0x252}}}], [], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x2, 0x4, 0x9, 0x1, 0x0, "e35d676f55162a70305b97b5f5c35c0c7e984c2a46b92394cc7591bc9a99833a403223eba47c786547620a1637b74a72737213f30fef1329cdcbe270c1b90051"}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{0x5, 0x15, 0x806, 'veth1\x00', 'veth0_vlan\x00', 'bond0\x00', 'pim6reg\x00', @broadcast, [0xff, 0xff, 0x0, 0xff, 0xcd71e4d9cd922df3], @remote, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0xae, 0x10e, 0x15e, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0xd65}, {0x8000000000000001}], 0x2}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x5}}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xf719}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x5, 'syz0\x00', {0x2}}}}}, {0x11, 0x40, 0x883e, 'veth1_to_bond\x00', 'ip6erspan0\x00', 'pim6reg0\x00', 'veth0_to_hsr\x00', @local, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], @local, [0xff, 0x0, 0xff, 0xff, 0xff], 0x116, 0x116, 0x15e, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_virt_wifi\x00', 'veth1_macvtap\x00', 0x12, 0x0, 0x9, 0x6, 0xffff800e, 0x9, {0x6f7}, {0x9}}}}, @realm={{'realm\x00', 0x0, 0x10}, {{0x3, 0x85}}}], [], @common=@ERROR={'ERROR\x00', 0x20, {"3e8b0ef46f4b54a0a883a8f8d3e4bd9ec11665a31f684ee34dc1466a02c4"}}}]}]}, 0x78e) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000dc0)) openat$cgroup_ro(r5, &(0x7f0000000e00)='cpuacct.stat\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r6, &(0x7f0000000e40), &(0x7f0000000e80)={'U-', 0x5}, 0x16, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'macvlan1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@bloom_filter={0x1e, 0x1, 0x0, 0x4, 0x20, r6, 0x0, '\x00', r7, 0xffffffffffffffff, 0x5, 0x3, 0x4, 0xb}, 0x50) listen(r2, 0x4) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000f80)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000001000)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000001080)={0x28, 0x0, r8, r9, 0x0, 0x0, 0x0, 0x18, &(0x7f0000001040)="772bf8443daa82b22cdfcd57f7a116b2f71fcb446abba0e1"}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r3, 0xf505, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000010c0)={0x30, 0x5, 0x0, {0x0, 0x5, 0x4, 0xb825}}, 0x30) setsockopt$inet6_tcp_int(r3, 0x6, 0x8, &(0x7f0000001100)=0x3, 0x4) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r10, 0x40047211, &(0x7f0000001140)=0x20) 4.039979898s ago: executing program 3 (id=1145): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b", 0x54}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff", 0xa5}, {0x0}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a5", 0xed}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a696", 0x3e}], 0x6}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba0000", 0x4c}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b4", 0x6a}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401", 0x20}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x983a) 3.954682695s ago: executing program 5 (id=1146): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x0, 0xffffffffffffffff, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x40, 0xb24) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = gettid() syz_open_procfs(r2, &(0x7f0000000040)='timerslack_ns\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() 3.834947328s ago: executing program 1 (id=1147): creat(0x0, 0x0) syz_io_uring_setup(0x72ae, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x1, 0x36}, &(0x7f0000000500), &(0x7f0000000000)) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) socket$packet(0x11, 0x3, 0x300) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x80804) syz_usbip_server_init(0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) r2 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x2, 0x40}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_usbip_server_init(0x4) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x22, 0x6000, @fd_index=0xa, 0x3, 0xf7e0, 0xfecc, 0xa, 0x0, {0x2}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x7330, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2287, 0x0, &(0x7f0000000080), &(0x7f0000001540)) 3.752092405s ago: executing program 5 (id=1148): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x94, 0x7200, 0x2, &(0x7f0000000180)="86ab"}], 0x1}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x5e}, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00005cc000/0x4000)=nil, 0x4000, &(0x7f0000000080)='GPL\x00') ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x380}) 3.108081367s ago: executing program 3 (id=1149): r0 = fanotify_init(0x4, 0x2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x71, 0x1038, r1, 0x0) lseek(r1, 0x1, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/88, 0x58}], 0x1) fanotify_init(0x4, 0x2) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) fanotify_mark(r0, 0x71, 0x1038, r1, 0x0) (async) lseek(r1, 0x1, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) (async) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/88, 0x58}], 0x1) (async) 2.894927709s ago: executing program 3 (id=1150): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xa, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0x16) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pipefs\x00', 0x2, &(0x7f00000000c0)='${^!%!^-\x06(\xdb&\x94}\\\x00') msgget$private(0x0, 0x181) utimensat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x0, 0x100) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000080f000/0x2000)=nil, 0x2000, 0x300000f, 0x6, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x3201}], 0x1, 0x10000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000000c0)={0x20000000}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000002d1867149b18b8900000001101695e4a00000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x13, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x77359400}}, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) clock_gettime(0x0, &(0x7f00000010c0)) mkdir(&(0x7f0000000140)='./control\x00', 0x5) 2.832603529s ago: executing program 1 (id=1151): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r3, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x40, r3, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x11}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) fchdir(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000740)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1, 0x4, 0x7}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) lsm_set_self_attr(0x0, &(0x7f0000000000)={0x65, 0x2, 0x20}, 0x20, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x13, &(0x7f0000002fc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) listen(r7, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r11, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000010c0)={&(0x7f0000001140)='mmap_lock_acquire_returned\x00', r1}, 0x18) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x219000, 0x1000}, 0x20) 2.720306886s ago: executing program 4 (id=1152): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) sendto$inet6(r0, &(0x7f0000000000)='X', 0x1, 0x20000000, &(0x7f0000000080)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}, 0x6}, 0x1c) setsockopt(r0, 0x84, 0x14, &(0x7f0000000040)="020000000d80ffff", 0x8) r1 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0x0, 0x10c, 0x10}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x7fff, 0x7, 0x8, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffffffffffffffe, 0x5, 0x2, 0x7ff, 0x2, 0x7}, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) move_mount(r5, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x154) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000001c0)={0x1, 0xf, 0x0, 0x0}) openat(r1, 0x0, 0x40001, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$unix(r2, &(0x7f0000000100), 0x0, 0xc800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) 1.991112952s ago: executing program 3 (id=1153): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}], 0x1, 0x7000000) 1.956775249s ago: executing program 3 (id=1154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x24ec1b81, 0x6, {0xffffffffffffffff}, {0xee01}, 0x6, 0xffffffffffffffff}) sched_setscheduler(r0, 0x2, &(0x7f0000000000)) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001114010027bd7000fcdbdf2508004a0002000000080003000000000008004b0013000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000180)=""/66, 0x42}, {&(0x7f0000000240)=""/225, 0xe1}], 0x2, 0x0, 0x3) 1.912713558s ago: executing program 1 (id=1155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0xd0fb1000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x7fffffff, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd2b, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x2400, 0x4e21, 0x5, 0x2, 0x0, 0x20, 0x84}, {0x0, 0x0, 0x100000000000, 0x0, 0x1, 0x0, 0x100000000003}, {0x7e3}, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x40002}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = msgget$private(0x0, 0x20) msgsnd(r4, &(0x7f00000000c0)=ANY=[], 0x8, 0x0) msgctl$MSG_STAT(r4, 0xb, &(0x7f0000000040)=""/87) tkill(r1, 0xc) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x42800, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f00000000c0)=0x198, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000000000)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty, 0x10}, 0x1c) shutdown(r6, 0x1) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "6022b77a8fd5dbf5", "47d3d3812b0c38856b2a83f2494267ac", "c1c54433", "7f6c59bd46635b01"}, 0x28) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/18, 0x12, 0x0, 0x0}, &(0x7f00000002c0)=0x40) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r8, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) 1.006616304s ago: executing program 1 (id=1156): r0 = syz_usb_connect$cdc_ncm(0x3, 0x71, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x2, 0x1, 0x59, 0x10, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, 'Lfd'}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0xfffffff9, 0x1, 0x1, 0x1}, {0x6, 0x24, 0x1a, 0x74b1, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0xbb, 0xf8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x2, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2, 0x40, 0xca}}}}}}}]}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_read(r0, 0x5, 0x11, &(0x7f0000000200)=""/17) (async) syz_usb_ep_read(r0, 0x5, 0x11, &(0x7f0000000200)=""/17) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6576, 0x9}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6576, 0x9}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)={0x5}) (async) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)={0x5}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x200007, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000080)={0x6, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x3}}, 0x0, 0x0}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) rseq(0x0, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) (async) fsmount(0xffffffffffffffff, 0x1, 0x84) clock_settime(0x2, 0x0) (async) clock_settime(0x2, 0x0) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) gettid() 1.006154932s ago: executing program 3 (id=1157): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket(0x1e, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) chdir(&(0x7f00000003c0)='./bus\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078) socket$nl_route(0x10, 0x3, 0x0) 44.256224ms ago: executing program 4 (id=1158): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ccb068276957b8ac493df70101ae10024aa48e8ff83aac4ad0f7c3bc5d6f8346dc050960ab88cf76fffe984b25f1d9bd001d984bc7b586ccce84542467a38e"}, 0x60) bind$nfc_llcp(r0, &(0x7f0000000ac0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "359e08cbaf98c031f4aff8dc2e86c23cfbe3299322b98246ee0a4354afaf10fc68bb87f35cb663664e06f843b12cf3b3df1478366d4fbec1d8fab4abc22d37"}, 0x60) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x6, 0x9, &(0x7f0000000080)={{0x0, @rand_addr=0x64010101, 0x0, 0x3, 'sh\x00'}, {@private=0xa010100, 0x4, 0x0, 0x0, 0x100000, 0xfffffffe}}, 0x44) syz_usb_control_io(r3, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r5, 0xd01c4813, &(0x7f0000000140)={0x2, 0xffffffff, 0xb0a96d0, 0x1, 0xfffffffd}) syz_usb_connect$cdc_ecm(0x2, 0x54, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x42, 0x1, 0x1, 0x5, 0xa0, 0x3, [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x7, 0x24, 0x6, 0x0, 0x0, "bd9a"}, {0x5, 0x24, 0x0, 0xa9}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7fff, 0x1f2, 0x7}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x30, 0x1, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x228, 0x8, 0x0, 0x5}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x8, 0x4, 0x8, 0x10, 0x40}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x2, [{0x39, &(0x7f0000000280)=@string={0x39, 0x3, "0a7847ea3b85cd1b6819883eb332974faf186e5d04eacd42038a4d24ec266b285ba8f061ac4cdddb44667fac22b51273c02c5e38990c37"}}, {0xe9, &(0x7f00000002c0)=@string={0xe9, 0x3, "eca48afefe660c36077976dd39204cd60d4d4d5e27d48e3ffb21b75d4ffcae7d977f31d5e5f4615eafca99be73a23f1e91fb0b25ae5e3134c003069e448036b3c8289688f49caea8f81d2bccca3a2189f9e58cd25b651c7715e4e544597d352cc87d434743ed2b4aea98e00025e45d29e23848f9b18cac5871d044223537bd8d3ddd1ad8ef0bd96d1f5b27c4fccc7d2eec345d568ecaed5f2da3c4f7920052aff8b2a564dce2f3cf4f90a1b76825b55288e2dbb9242c4027d6d0997733f5d25cd500373b0c616f8a2fbb50d894a40265d3bcc933862a1f70961d82a0f65bc31f04575c0445359d"}}]}) close_range(r2, r0, 0x2) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r6, 0x917, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}]}, 0x3c}, 0x1, 0x620b}, 0x0) 0s ago: executing program 5 (id=1159): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f00000001c0)=0x4, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) gettid() seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xf, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x2}}}}}]}}]}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) r6 = timerfd_create(0x0, 0x800) r7 = syz_io_uring_setup(0xd3, &(0x7f0000000480)={0x0, 0x6776, 0x8, 0x22, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) io_uring_enter(r7, 0x47ba, 0x0, 0x0, 0x0, 0x0) timerfd_settime(r6, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3], 0x50c}, 0x1, 0x0, 0x0, 0x51}, 0x40400c4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002207000000abfc59"], 0x0}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x50) prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x3, 0x3}, 0x18, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xae}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): ig [ 204.185171][ T30] audit: type=1400 audit(1751188755.405:938): avc: denied { setopt } for pid=7772 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 204.199746][ T5869] usb 2-1: config 2 has no interface number 0 [ 204.227927][ T5869] usb 2-1: too many endpoints for config 2 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 204.243073][ T5869] usb 2-1: config 2 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 204.259231][ T5869] usb 2-1: config 2 interface 255 has no altsetting 0 [ 204.269298][ T5869] usb 2-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 204.272445][ T5923] usb usb5-port1: attempt power cycle [ 204.283775][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.297738][ T5869] usb 2-1: Product: syz [ 204.302256][ T5869] usb 2-1: Manufacturer: syz [ 204.307149][ T5869] usb 2-1: SerialNumber: syz [ 204.540155][ T30] audit: type=1400 audit(1751188756.025:939): avc: denied { set_context_mgr } for pid=7757 comm="syz.1.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 204.652015][ T5923] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 204.702685][ T5923] usb 5-1: device descriptor read/8, error -71 [ 205.072839][ T5923] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 205.104123][ T5923] usb 5-1: device descriptor read/8, error -71 [ 205.712534][ T5923] usb usb5-port1: unable to enumerate USB device [ 205.779662][ T7796] netlink: 'syz.4.546': attribute type 1 has an invalid length. [ 205.810602][ T7796] netlink: 244 bytes leftover after parsing attributes in process `syz.4.546'. [ 205.886969][ T30] audit: type=1400 audit(1751188757.365:940): avc: denied { sqpoll } for pid=7798 comm="syz.2.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 205.964481][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 205.992493][ T30] audit: type=1400 audit(1751188757.475:941): avc: denied { block_suspend } for pid=7803 comm="syz.0.549" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 206.029385][ T5825] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=5825 comm=kworker/1:4 [ 206.726241][ T7826] overlayfs: failed to clone lowerpath [ 207.242386][ T4558] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 207.324857][ T7832] Sensor A: ================= START STATUS ================= [ 207.332498][ T7832] Sensor A: Test Pattern: 75% Colorbar [ 207.338423][ T7832] Sensor A: Show Information: All [ 207.343508][ T7832] Sensor A: Vertical Flip: false [ 207.348459][ T7832] Sensor A: Horizontal Flip: false [ 207.353627][ T7832] Sensor A: Brightness: 128 [ 207.358145][ T7832] Sensor A: Contrast: 128 [ 207.362509][ T7832] Sensor A: Hue: 0 [ 207.366242][ T7832] Sensor A: Saturation: 128 [ 207.370751][ T7832] Sensor A: ================== END STATUS ================== [ 207.646749][ T5869] usb 2-1: USB disconnect, device number 23 [ 207.847503][ T7833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.557'. [ 207.900383][ T7834] netlink: 40 bytes leftover after parsing attributes in process `syz.3.557'. [ 209.772304][ T30] audit: type=1400 audit(1751188761.265:942): avc: denied { ioctl } for pid=7837 comm="syz.4.559" path="socket:[14015]" dev="sockfs" ino=14015 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 211.328675][ T7877] openvswitch: netlink: EtherType 500 is less than min 600 [ 211.647940][ T7884] Sensor A: ================= START STATUS ================= [ 211.655594][ T7884] Sensor A: Test Pattern: 75% Colorbar [ 211.661160][ T7884] Sensor A: Show Information: All [ 211.666292][ T7884] Sensor A: Vertical Flip: false [ 211.671306][ T7884] Sensor A: Horizontal Flip: false [ 211.676524][ T7884] Sensor A: Brightness: 128 [ 211.681107][ T7884] Sensor A: Contrast: 128 [ 211.685527][ T7884] Sensor A: Hue: 0 [ 211.689329][ T7884] Sensor A: Saturation: 128 [ 211.693935][ T7884] Sensor A: ================== END STATUS ================== [ 211.971668][ T4558] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 212.843168][ T4558] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 212.907432][ T30] audit: type=1400 audit(1751189020.398:943): avc: denied { read } for pid=7888 comm="syz.1.573" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 213.097138][ T30] audit: type=1400 audit(1751189020.398:944): avc: denied { open } for pid=7888 comm="syz.1.573" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 213.268418][ T30] audit: type=1400 audit(1751189020.398:945): avc: denied { ioctl } for pid=7888 comm="syz.1.573" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 213.400460][ T30] audit: type=1400 audit(1751189020.588:946): avc: denied { mount } for pid=7893 comm="syz.2.576" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 213.601049][ T7906] netlink: 'syz.4.578': attribute type 1 has an invalid length. [ 213.621322][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.578'. [ 214.185608][ T7925] 9pnet_fd: Insufficient options for proto=fd [ 214.322026][ T30] audit: type=1400 audit(1751189021.738:947): avc: denied { setopt } for pid=7921 comm="syz.3.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 215.763577][ T30] audit: type=1400 audit(1751189023.258:948): avc: denied { write } for pid=7932 comm="syz.0.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 217.087116][ T30] audit: type=1400 audit(1751189024.578:949): avc: denied { execute_no_trans } for pid=7954 comm="syz.1.591" path="/109/file2" dev="tmpfs" ino=603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 217.120604][ T30] audit: type=1400 audit(1751189024.608:950): avc: denied { mounton } for pid=7954 comm="syz.1.591" path="/proc/330/task" dev="proc" ino=15149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 217.238637][ T5923] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 217.276014][ T30] audit: type=1400 audit(1751189024.738:951): avc: denied { associate } for pid=7954 comm="syz.1.591" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 217.501723][ T1142] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 217.531198][ T7964] 8021q: VLANs not supported on sit0 [ 217.573542][ T5923] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 217.669009][ T5923] usb 5-1: config 0 has no interface number 0 [ 217.791186][ T7971] Bluetooth: MGMT ver 1.23 [ 217.950127][ T5923] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 217.962941][ T5923] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 217.982117][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.005466][ T5923] usb 5-1: Product: syz [ 218.109431][ T5923] usb 5-1: Manufacturer: syz [ 218.439143][ T5923] usb 5-1: SerialNumber: syz [ 218.454023][ T5923] usb 5-1: config 0 descriptor?? [ 218.667618][ T5923] usbtouchscreen 5-1:0.214: Failed to read FW rev: 0 [ 218.688676][ T5923] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 218.763566][ T880] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 218.774092][ T65] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 218.872066][ T5825] usb 5-1: USB disconnect, device number 32 [ 218.992493][ T5869] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 219.005515][ T880] usb 2-1: not running at top speed; connect to a high speed hub [ 219.015323][ T880] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 219.024399][ T880] usb 2-1: config 1 has no interface number 1 [ 219.030487][ T880] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 219.142110][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 219.186125][ T5869] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 219.260790][ T5869] usb 3-1: config 0 has no interface number 0 [ 219.310996][ T5869] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 219.419487][ T5869] usb 3-1: config 0 interface 85 has no altsetting 0 [ 219.478433][ T880] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 219.484417][ T5869] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 219.487697][ T880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.506502][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.515220][ T5869] usb 3-1: Product: syz [ 219.519393][ T5869] usb 3-1: Manufacturer: syz [ 219.525090][ T880] usb 2-1: Product: syz [ 219.529278][ T880] usb 2-1: Manufacturer: syz [ 219.544129][ T880] usb 2-1: SerialNumber: syz [ 219.554628][ T5869] usb 3-1: SerialNumber: syz [ 219.577834][ T5869] usb 3-1: config 0 descriptor?? [ 219.767642][ T30] audit: type=1400 audit(1751189027.258:952): avc: denied { write } for pid=7974 comm="syz.1.598" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 220.598302][ T30] audit: type=1400 audit(1751189028.088:953): avc: denied { getopt } for pid=8008 comm="syz.4.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 220.654868][ T30] audit: type=1400 audit(1751189028.148:954): avc: denied { write } for pid=7974 comm="syz.1.598" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 220.682451][ T8012] random: crng reseeded on system resumption [ 220.811131][ T30] audit: type=1400 audit(1751189028.168:955): avc: denied { open } for pid=7974 comm="syz.1.598" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 221.014747][ T5869] appletouch 3-1:0.85: Geyser mode initialized. [ 221.081191][ T5869] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input30 [ 221.217841][ T880] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 221.224281][ T880] usb 2-1: 2:1 : invalid channels 0 [ 221.258717][ T880] usb 2-1: USB disconnect, device number 24 [ 221.374638][ T6281] udevd[6281]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.371446][ T880] usb 3-1: USB disconnect, device number 17 [ 222.423661][ T880] appletouch 3-1:0.85: input: appletouch disconnected [ 222.964350][ T1087] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 224.262815][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.621'. [ 224.271664][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.621'. [ 224.280535][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.621'. [ 224.289407][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.621'. [ 224.298244][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.621'. [ 224.307050][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.621'. [ 224.316693][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.621'. [ 224.325621][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.621'. [ 224.335674][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.621'. [ 224.344631][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.621'. [ 224.584781][ T880] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 224.601330][ T6190] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 224.683025][ T8071] Bluetooth: MGMT ver 1.23 [ 224.772038][ T880] usb 3-1: Using ep0 maxpacket: 16 [ 224.789538][ T880] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 224.819691][ T880] usb 3-1: config 0 has no interface number 0 [ 224.855739][ T880] usb 3-1: too many endpoints for config 0 interface 1 altsetting 102: 102, using maximum allowed: 30 [ 224.883893][ T880] usb 3-1: config 0 interface 1 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 224.922203][ T880] usb 3-1: config 0 interface 1 has no altsetting 0 [ 224.944643][ T880] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 224.966814][ T880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.985371][ T880] usb 3-1: Product: syz [ 224.996820][ T880] usb 3-1: Manufacturer: syz [ 225.006962][ T880] usb 3-1: SerialNumber: syz [ 225.034467][ T880] usb 3-1: config 0 descriptor?? [ 225.714711][ T880] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 226.029639][ T8093] netlink: 'syz.0.628': attribute type 10 has an invalid length. [ 226.133445][ T8048] netlink: 'syz.2.616': attribute type 1 has an invalid length. [ 226.208384][ T5923] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 226.382103][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 226.396348][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.410451][ T5923] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 226.419766][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.432090][ T880] gspca_spca1528: reg_w err -110 [ 226.437962][ T5923] usb 2-1: config 0 descriptor?? [ 226.454077][ T880] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 226.470716][ T5923] usb 2-1: bad CDC descriptors [ 226.484419][ T880] usb 3-1: USB disconnect, device number 18 [ 226.491343][ T5923] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 226.519779][ T5923] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 226.536964][ T5923] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 226.695282][ T8091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.719054][ T8091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.892026][ T5923] usb 2-1: USB disconnect, device number 25 [ 228.445194][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 228.553573][ T30] audit: type=1326 audit(1751189036.038:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8122 comm="syz.0.638" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb7218e929 code=0x0 [ 229.292223][ T5923] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 229.362046][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 229.441517][ T8140] 9pnet_fd: Insufficient options for proto=fd [ 229.464021][ T5923] usb 3-1: config 0 has no interfaces? [ 229.481050][ T5923] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 229.512040][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 229.527487][ T10] usb 5-1: device descriptor read/64, error -71 [ 229.547471][ T5923] usb 3-1: SerialNumber: syz [ 229.574151][ T5923] usb 3-1: config 0 descriptor?? [ 229.658360][ T8142] overlayfs: failed to clone upperpath [ 229.812250][ T5869] usb 3-1: USB disconnect, device number 19 [ 229.852680][ T8146] overlayfs: missing 'workdir' [ 229.997460][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 230.790688][ T1142] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 231.022051][ T10] usb 5-1: device descriptor read/64, error -71 [ 231.132578][ T10] usb usb5-port1: attempt power cycle [ 231.171639][ T8159] loop4: detected capacity change from 0 to 524255232 [ 231.233085][ T8159] loop4: detected capacity change from 524255232 to 524287936 [ 231.293199][ T2151] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 231.745097][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 232.059721][ T2151] usb 2-1: Using ep0 maxpacket: 8 [ 232.086643][ T2151] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.107796][ T2151] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 232.112187][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 232.125659][ T2151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.143014][ T2151] usb 2-1: config 0 descriptor?? [ 232.160965][ T2151] usb 2-1: bad CDC descriptors [ 232.164392][ T10] usb 5-1: device descriptor read/8, error -71 [ 232.186819][ T2151] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 232.247669][ T2151] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 232.265256][ T2151] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 232.367999][ T8157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.388127][ T8157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.432009][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 232.462625][ T10] usb 5-1: device descriptor read/8, error -71 [ 233.059565][ T10] usb usb5-port1: unable to enumerate USB device [ 233.090910][ T5869] usb 2-1: USB disconnect, device number 26 [ 233.425998][ T30] audit: type=1400 audit(1751189040.918:957): avc: denied { bind } for pid=8191 comm="syz.3.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 233.469598][ T30] audit: type=1400 audit(1751189040.918:958): avc: denied { name_bind } for pid=8191 comm="syz.3.654" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 233.491374][ T30] audit: type=1400 audit(1751189040.918:959): avc: denied { node_bind } for pid=8191 comm="syz.3.654" saddr=fe88::4 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 233.543448][ T8198] /dev/nullb0: Can't open blockdev [ 233.550950][ T30] audit: type=1400 audit(1751189041.018:960): avc: denied { read write } for pid=8197 comm="syz.2.658" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 233.572971][ T30] audit: type=1400 audit(1751189041.018:961): avc: denied { open } for pid=8197 comm="syz.2.658" path="/111/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 233.803994][ T8204] netfs: Couldn't get user pages (rc=-14) [ 233.813493][ T30] audit: type=1400 audit(1751189041.288:962): avc: denied { map } for pid=8197 comm="syz.2.658" path="/111/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 234.134987][ T6435] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 234.377578][ T30] audit: type=1400 audit(1751189041.868:963): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 234.537097][ T8212] netlink: 'syz.1.665': attribute type 27 has an invalid length. [ 234.704574][ T8224] 9pnet_fd: Insufficient options for proto=fd [ 236.404285][ T6190] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 236.634424][ T8249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8249 comm=syz.2.675 [ 236.659874][ T8249] netlink: 'syz.2.675': attribute type 1 has an invalid length. [ 236.709591][ T8249] bond2: (slave bridge1): making interface the new active one [ 236.719092][ T8249] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 238.204914][ T30] audit: type=1400 audit(1751189045.698:964): avc: denied { accept } for pid=8263 comm="syz.3.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 239.445696][ T30] audit: type=1326 audit(1751189046.938:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.1.682" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0fa2f8e929 code=0x0 [ 239.812351][ T8266] syz_tun: entered allmulticast mode [ 239.822007][ T8266] syz_tun: left allmulticast mode [ 239.913160][ T1142] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 240.278361][ T8287] lo speed is unknown, defaulting to 1000 [ 240.435283][ T8296] Sensor A: ================= START STATUS ================= [ 240.442981][ T8296] Sensor A: Test Pattern: 75% Colorbar [ 240.448539][ T8296] Sensor A: Show Information: All [ 240.453738][ T8296] Sensor A: Vertical Flip: false [ 240.458754][ T8296] Sensor A: Horizontal Flip: false [ 240.463964][ T8296] Sensor A: Brightness: 128 [ 240.468542][ T8296] Sensor A: Contrast: 128 [ 240.473032][ T8296] Sensor A: Hue: 0 [ 240.476849][ T8296] Sensor A: Saturation: 128 [ 240.481442][ T8296] Sensor A: ================== END STATUS ================== [ 241.803609][ T65] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.272125][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 243.431984][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 243.439483][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.450803][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.463984][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 243.477074][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 243.486771][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.503091][ T10] usb 3-1: config 0 descriptor?? [ 243.606107][ T5825] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 243.812641][ T5825] usb 5-1: config 0 has no interfaces? [ 243.876932][ T5825] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 243.969458][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 244.058300][ T5825] usb 5-1: SerialNumber: syz [ 244.208001][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.000B/input/input31 [ 244.227974][ T5825] usb 5-1: config 0 descriptor?? [ 244.297110][ T8334] syz_tun: entered allmulticast mode [ 244.336183][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.000B/input/input32 [ 244.364820][ T10] kye 0003:0458:5011.000B: input,hiddev0,hidraw0: USB HID v9.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 244.392757][ T8333] syz_tun: left allmulticast mode [ 244.477298][ T10] usb 5-1: USB disconnect, device number 37 [ 245.642702][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 246.420427][ T8349] can0: slcan on ttyS3. [ 246.683805][ T8349] can0 (unregistered): slcan off ttyS3. [ 246.932819][ T65] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 248.198738][ T5869] usb 3-1: USB disconnect, device number 20 [ 248.492184][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 248.712189][ T10] usb 2-1: device descriptor read/64, error -71 [ 249.338721][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 249.691948][ T5869] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 249.861989][ T10] usb 2-1: device descriptor read/64, error -71 [ 249.892833][ T5869] usb 3-1: Using ep0 maxpacket: 8 [ 249.907638][ T5869] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.917895][ T5869] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 249.930966][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.946011][ T5869] usb 3-1: config 0 descriptor?? [ 250.089476][ T5869] usb 3-1: bad CDC descriptors [ 250.169702][ T10] usb usb2-port1: attempt power cycle [ 250.186115][ T5869] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 250.211943][ T5869] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 250.218419][ T5869] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 250.510176][ T5869] usb 3-1: USB disconnect, device number 21 [ 250.562404][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 250.612756][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 250.620478][ T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 250.693391][ T10] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 250.730712][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.766786][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 250.786870][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.854528][ T10] usb 2-1: Product: syz [ 250.872418][ T8421] overlayfs: failed to clone upperpath [ 250.882847][ T10] usb 2-1: Manufacturer: syz [ 250.887950][ T10] usb 2-1: SerialNumber: syz [ 250.905501][ T30] audit: type=1400 audit(1751189058.398:966): avc: denied { execheap } for pid=8419 comm="syz.0.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 251.124344][ T30] audit: type=1400 audit(1751189058.618:967): avc: denied { read } for pid=8397 comm="syz.1.723" path="socket:[15940]" dev="sockfs" ino=15940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 251.212851][ T30] audit: type=1400 audit(1751189058.708:968): avc: denied { bind } for pid=8397 comm="syz.1.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 251.243045][ T30] audit: type=1400 audit(1751189058.738:969): avc: denied { write } for pid=8397 comm="syz.1.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 251.385474][ T5924] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 251.402840][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 251.465763][ T10] usb 2-1: 0:2 : does not exist [ 251.576766][ T10] usb 2-1: USB disconnect, device number 29 [ 251.592659][ T5924] usb 3-1: Using ep0 maxpacket: 16 [ 251.606954][ T5924] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 252.149546][ T5924] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 252.159462][ T5924] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 252.179517][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.212639][ T6282] udevd[6282]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.232585][ T5924] usb 3-1: config 0 descriptor?? [ 252.691769][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 252.889054][ T8446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.912969][ T8446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.088082][ T30] audit: type=1400 audit(1751189060.458:970): avc: denied { read write } for pid=8427 comm="syz.2.729" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 253.548658][ T30] audit: type=1400 audit(1751189060.458:971): avc: denied { open } for pid=8427 comm="syz.2.729" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 254.313534][ T30] audit: type=1400 audit(1751189061.788:972): avc: denied { ioctl } for pid=8447 comm="syz.1.734" path="/dev/sg0" dev="devtmpfs" ino=756 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 254.928706][ T5924] usb 3-1: USB disconnect, device number 22 [ 255.249503][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.277250][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.319408][ T8467] QAT: failed to copy from user cfg_data. [ 256.827863][ T5924] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 257.335552][ T65] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 257.348814][ T30] audit: type=1400 audit(1751189064.428:973): avc: denied { create } for pid=8474 comm="syz.3.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 257.497907][ T30] audit: type=1400 audit(1751189064.988:974): avc: denied { setattr } for pid=5813 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 257.621969][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 257.642841][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.661982][ T5923] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 257.671429][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.693080][ T5924] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 257.716223][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.826911][ T5924] usb 5-1: config 0 descriptor?? [ 258.359484][ T6435] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 258.363211][ T8489] 9pnet: Could not find request transport: fd0x0000000000000003 [ 258.381418][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 258.404175][ T5923] usb 2-1: config 162 has an invalid interface number: 95 but max is 1 [ 258.424933][ T5923] usb 2-1: config 162 has an invalid interface number: 172 but max is 1 [ 258.438102][ T5923] usb 2-1: config 162 has no interface number 0 [ 258.458826][ T5923] usb 2-1: config 162 has no interface number 1 [ 258.468343][ T5923] usb 2-1: config 162 interface 95 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 258.488078][ T5923] usb 2-1: config 162 interface 172 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 258.499925][ T5923] usb 2-1: config 162 interface 172 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 258.515108][ T5923] usb 2-1: config 162 interface 172 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 258.529071][ T5923] usb 2-1: config 162 interface 172 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 258.599005][ T5924] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 258.635157][ T5923] usb 2-1: config 162 interface 172 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 258.656324][ T5923] usb 2-1: config 162 interface 95 has no altsetting 0 [ 258.666494][ T5923] usb 2-1: config 162 interface 172 has no altsetting 0 [ 258.677119][ T5923] usb 2-1: New USB device found, idVendor=0856, idProduct=bc00, bcdDevice=d5.e1 [ 258.688694][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.697397][ T5923] usb 2-1: Product: syz [ 258.701736][ T5923] usb 2-1: Manufacturer: syz [ 258.709136][ T5923] usb 2-1: SerialNumber: syz [ 258.810719][ T5924] ft260 0003:0403:6030.000C: chip code: 6424 8183 [ 258.948501][ T8503] sctp: [Deprecated]: syz.3.751 (pid 8503) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.948501][ T8503] Use struct sctp_sack_info instead [ 259.359934][ T5924] ft260 0003:0403:6030.000C: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 259.607883][ T5924] ft260 0003:0403:6030.000C: failed to retrieve status: -71, no wakeup [ 259.722298][ T5924] ft260 0003:0403:6030.000C: failed to retrieve status: -71 [ 259.742005][ T5924] ft260 0003:0403:6030.000C: failed to reset I2C controller: -71 [ 259.787210][ T8515] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20004 [ 259.800704][ T5924] usb 5-1: USB disconnect, device number 38 [ 259.811532][ T8470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.837405][ T30] audit: type=1400 audit(1751189067.318:975): avc: denied { accept } for pid=8514 comm="syz.3.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 259.852209][ T8470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.052319][ T5923] mos7840 2-1:162.95: required endpoints missing [ 260.068149][ T5923] mos7840 2-1:162.172: missing endpoints [ 260.114015][ T5923] usb 2-1: USB disconnect, device number 30 [ 261.289701][ T30] audit: type=1400 audit(1751189068.778:976): avc: denied { write } for pid=8534 comm="syz.0.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 261.352334][ T5825] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 262.434496][ T5825] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 262.447608][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.459953][ T5825] usb 2-1: config 0 descriptor?? [ 262.820829][ T8533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.854993][ T8533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.922698][ T65] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 263.123058][ T5825] usb 2-1: Cannot read MAC address [ 263.169441][ T5825] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 263.610863][ T5825] usb 2-1: USB disconnect, device number 31 [ 264.202712][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 265.220445][ T8580] xt_CT: No such helper "pptp" [ 265.701636][ T30] audit: type=1400 audit(1751189073.188:977): avc: denied { getopt } for pid=8587 comm="syz.3.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 265.791672][ T8595] __nla_validate_parse: 38 callbacks suppressed [ 265.791688][ T8595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.778'. [ 265.890110][ T30] audit: type=1800 audit(1751189073.378:978): pid=8597 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.779" name="nullb0" dev="tmpfs" ino=662 res=0 errno=0 [ 265.907315][ T8599] loop2: detected capacity change from 0 to 7 [ 265.924482][ T8599] Dev loop2: unable to read RDB block 7 [ 265.930096][ T8599] loop2: unable to read partition table [ 265.932003][ T5825] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 265.938031][ T8599] loop2: partition table beyond EOD, truncated [ 265.951964][ T30] audit: type=1400 audit(1751189073.378:979): avc: denied { append } for pid=8598 comm="syz.1.780" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 265.962487][ T8599] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 266.132210][ T5825] usb 5-1: Using ep0 maxpacket: 32 [ 266.145471][ T5825] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 266.157426][ T5825] usb 5-1: config 0 has no interface number 0 [ 266.165906][ T5825] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 266.236659][ T5825] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 266.260636][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.286840][ T5825] usb 5-1: Product: syz [ 266.291591][ T5825] usb 5-1: Manufacturer: syz [ 266.311508][ T5825] usb 5-1: SerialNumber: syz [ 266.418729][ T5825] usb 5-1: config 0 descriptor?? [ 266.477320][ T5825] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 266.528537][ T5825] em28xx 5-1:0.132: Video interface 132 found: [ 266.967204][ T5825] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 267.260523][ T5825] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 267.280279][ T5825] em28xx 5-1:0.132: board has no eeprom [ 267.448249][ T5825] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 267.463827][ T5825] em28xx 5-1:0.132: analog set to bulk mode. [ 267.470235][ T5869] em28xx 5-1:0.132: Registering V4L2 extension [ 267.484204][ T5825] usb 5-1: USB disconnect, device number 39 [ 267.498390][ T5825] em28xx 5-1:0.132: Disconnecting em28xx [ 268.003925][ T8623] netlink: 146772 bytes leftover after parsing attributes in process `syz.3.787'. [ 268.087014][ T5869] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 268.094346][ T5869] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 268.101543][ T5869] em28xx 5-1:0.132: No AC97 audio processor [ 268.119415][ T5869] usb 5-1: Decoder not found [ 268.124112][ T5869] em28xx 5-1:0.132: failed to create media graph [ 268.130619][ T5869] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 268.140285][ T5869] em28xx 5-1:0.132: Remote control support is not available for this card. [ 268.151148][ T5825] em28xx 5-1:0.132: Closing input extension [ 268.182303][ T5825] em28xx 5-1:0.132: Freeing device [ 268.907681][ T65] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 269.020478][ T30] audit: type=1400 audit(1751189076.508:980): avc: denied { shutdown } for pid=8628 comm="syz.4.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 269.439415][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.792'. [ 269.498724][ T30] audit: type=1800 audit(1751189076.988:981): pid=8642 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.794" name="nullb0" dev="tmpfs" ino=662 res=0 errno=0 [ 269.966175][ T8648] syz0: rxe_newlink: already configured on lo [ 269.979231][ T65] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 270.446704][ T5923] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 270.600179][ T30] audit: type=1326 audit(1751189078.088:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.1.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa2f8e929 code=0x7fc00000 [ 270.684847][ T5923] usb 5-1: config 0 has no interfaces? [ 270.689208][ T30] audit: type=1326 audit(1751189078.088:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.1.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0fa2f8e929 code=0x7fc00000 [ 270.692767][ T5923] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 270.730469][ T30] audit: type=1326 audit(1751189078.088:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.1.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa2f8e929 code=0x7fc00000 [ 270.758373][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 270.760383][ T30] audit: type=1326 audit(1751189078.088:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.1.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa2f8e929 code=0x7fc00000 [ 270.777578][ T5923] usb 5-1: SerialNumber: syz [ 270.798028][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.800'. [ 270.806925][ T8660] netlink: 'syz.3.800': attribute type 5 has an invalid length. [ 270.842027][ T30] audit: type=1326 audit(1751189078.088:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.1.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa2f8e929 code=0x7fc00000 [ 270.874241][ T30] audit: type=1326 audit(1751189078.088:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.1.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa2f8e929 code=0x7fc00000 [ 270.910020][ T5923] usb 5-1: config 0 descriptor?? [ 270.954428][ T30] audit: type=1326 audit(1751189078.088:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.1.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa2f8e929 code=0x7fc00000 [ 270.980339][ T30] audit: type=1326 audit(1751189078.088:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.1.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa2f8e929 code=0x7fc00000 [ 271.027344][ T30] audit: type=1326 audit(1751189078.088:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.1.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa2f8e929 code=0x7fc00000 [ 271.056174][ T30] audit: type=1326 audit(1751189078.088:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.1.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa2f8e929 code=0x7fc00000 [ 271.238613][ T30] audit: type=1326 audit(1751189078.088:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.1.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa2f8e929 code=0x7fc00000 [ 271.269431][ T30] audit: type=1326 audit(1751189078.088:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.1.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa2f8e929 code=0x7fc00000 [ 271.273671][ T5869] usb 5-1: USB disconnect, device number 40 [ 273.868546][ T8690] netlink: 16 bytes leftover after parsing attributes in process `syz.3.810'. [ 274.226126][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.107415][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.246400][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 275.309326][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.318351][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.327113][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.336491][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.344179][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.143689][ T30] kauditd_printk_skb: 96 callbacks suppressed [ 276.143706][ T30] audit: type=1400 audit(1751189083.558:1090): avc: denied { read } for pid=8714 comm="syz.4.819" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 276.746267][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 276.751620][ T30] audit: type=1400 audit(1751189083.558:1091): avc: denied { open } for pid=8714 comm="syz.4.819" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 276.818898][ T10] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 276.828472][ T10] usb 2-1: config 0 has no interface number 0 [ 276.835627][ T10] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 276.907429][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.933173][ T10] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 276.944195][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.973891][ T10] usb 2-1: Product: syz [ 276.992463][ T10] usb 2-1: Manufacturer: syz [ 276.997141][ T10] usb 2-1: SerialNumber: syz [ 277.015858][ T10] usb 2-1: config 0 descriptor?? [ 277.037663][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.037720][ T10] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 277.061764][ T10] em28xx 2-1:0.132: Video interface 132 found: [ 277.207655][ T8707] lo speed is unknown, defaulting to 1000 [ 277.723380][ T50] Bluetooth: hci2: command tx timeout [ 277.791428][ T10] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 277.942104][ T48] bridge_slave_1: left allmulticast mode [ 277.991253][ T48] bridge_slave_1: left promiscuous mode [ 278.006058][ T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 278.023939][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.034440][ T10] em28xx 2-1:0.132: board has no eeprom [ 278.091456][ T48] bridge_slave_0: left allmulticast mode [ 278.112038][ T10] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 278.114624][ T48] bridge_slave_0: left promiscuous mode [ 278.146741][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.151280][ T10] em28xx 2-1:0.132: analog set to bulk mode. [ 278.160745][ T5929] em28xx 2-1:0.132: Registering V4L2 extension [ 278.177460][ T10] usb 2-1: USB disconnect, device number 32 [ 278.196374][ T10] em28xx 2-1:0.132: Disconnecting em28xx [ 278.336655][ T5929] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 278.356486][ T5929] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 278.373508][ T5929] em28xx 2-1:0.132: No AC97 audio processor [ 278.399621][ T5929] usb 2-1: Decoder not found [ 278.408527][ T5929] em28xx 2-1:0.132: failed to create media graph [ 278.422919][ T5929] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 278.435670][ T5929] em28xx 2-1:0.132: Remote control support is not available for this card. [ 278.454808][ T10] em28xx 2-1:0.132: Closing input extension [ 278.483377][ T10] em28xx 2-1:0.132: Freeing device [ 278.500811][ T8742] delete_channel: no stack [ 279.041996][ T30] audit: type=1400 audit(1751189086.508:1092): avc: denied { write } for pid=8753 comm="syz.4.828" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 279.099352][ T30] audit: type=1400 audit(1751189086.518:1093): avc: denied { map } for pid=8753 comm="syz.4.828" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 279.171958][ T30] audit: type=1400 audit(1751189086.518:1094): avc: denied { call } for pid=8753 comm="syz.4.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 279.519813][ T48] bond2 (unregistering): (slave bridge1): Releasing active interface [ 279.802052][ T50] Bluetooth: hci2: command tx timeout [ 279.812161][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.823601][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.918670][ T48] bond0 (unregistering): Released all slaves [ 279.934616][ T48] bond1 (unregistering): Released all slaves [ 280.277427][ T30] audit: type=1400 audit(1751189087.758:1095): avc: denied { ioctl } for pid=8764 comm="syz.1.830" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 280.440448][ T8773] input: syz1 as /devices/virtual/input/input33 [ 280.528682][ T48] bond2 (unregistering): Released all slaves [ 280.769837][ T8763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.788390][ T8763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.802977][ T8763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.805510][ T8783] PKCS7: Unknown OID: [5] (bad) [ 280.810494][ T8763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.827744][ T8783] PKCS7: Only support pkcs7_signedData type [ 280.847077][ T5923] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 281.082182][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 281.099769][ T5923] usb 5-1: unable to get BOS descriptor or descriptor too short [ 281.123579][ T5923] usb 5-1: config 7 has an invalid interface number: 67 but max is 0 [ 281.131701][ T5923] usb 5-1: config 7 has no interface number 0 [ 281.159099][ T8707] chnl_net:caif_netlink_parms(): no params data found [ 281.174473][ T5923] usb 5-1: string descriptor 0 read error: -22 [ 281.180779][ T5923] usb 5-1: New USB device found, idVendor=cde6, idProduct=20cf, bcdDevice=df.a4 [ 281.201962][ T5923] usb 5-1: New USB device strings: Mfr=211, Product=238, SerialNumber=3 [ 281.225017][ T5923] usbhid 5-1:7.67: couldn't find an input interrupt endpoint [ 281.295271][ T48] hsr_slave_0: left promiscuous mode [ 281.380207][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.837'. [ 281.391521][ T48] hsr_slave_1: left promiscuous mode [ 281.414337][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.452014][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.464387][ T30] audit: type=1400 audit(1751189088.948:1096): avc: denied { map } for pid=8798 comm="syz.1.838" path="socket:[18731]" dev="sockfs" ino=18731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 281.494146][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.510992][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.519194][ T8763] netlink: 'syz.4.829': attribute type 4 has an invalid length. [ 281.536764][ T48] veth1_macvtap: left promiscuous mode [ 281.543717][ T48] veth0_macvtap: left promiscuous mode [ 281.549520][ T48] veth1_vlan: left promiscuous mode [ 281.557166][ T48] veth0_vlan: left promiscuous mode [ 281.578975][ T8767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.610614][ T8767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.681255][ T30] audit: type=1400 audit(1751189088.948:1097): avc: denied { read } for pid=8798 comm="syz.1.838" path="socket:[18731]" dev="sockfs" ino=18731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 281.923896][ T50] Bluetooth: hci2: command tx timeout [ 282.585123][ T48] team0 (unregistering): Port device team_slave_1 removed [ 282.626243][ T48] team0 (unregistering): Port device team_slave_0 removed [ 282.881142][ T8820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.896917][ T8820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.912448][ T8820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.078108][ T5923] usb 5-1: USB disconnect, device number 41 [ 283.991429][ T50] Bluetooth: hci2: command tx timeout [ 284.001596][ T30] audit: type=1400 audit(1751189090.598:1098): avc: denied { kexec_image_load } for pid=8823 comm="syz.0.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 284.049766][ T8825] delete_channel: no stack [ 284.130373][ T8830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.844'. [ 284.606235][ T8707] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.634084][ T8707] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.641309][ T8707] bridge_slave_0: entered allmulticast mode [ 284.670012][ T8707] bridge_slave_0: entered promiscuous mode [ 284.720660][ T8707] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.734845][ T48] IPVS: stop unused estimator thread 0... [ 284.747187][ T8707] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.845535][ T8707] bridge_slave_1: entered allmulticast mode [ 284.853643][ T8707] bridge_slave_1: entered promiscuous mode [ 284.897804][ T8707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.898236][ T8849] set match dimension is over the limit! [ 284.909572][ T8707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.435611][ T8707] team0: Port device team_slave_0 added [ 285.460963][ T8707] team0: Port device team_slave_1 added [ 285.520390][ T8707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.542114][ T8707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.629825][ T8707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.682464][ T8707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.689446][ T8707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.820109][ T5869] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 285.837884][ T8707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.851680][ T8863] delete_channel: no stack [ 285.857130][ T8862] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 285.930721][ T8869] FAULT_INJECTION: forcing a failure. [ 285.930721][ T8869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.947032][ T8869] CPU: 1 UID: 0 PID: 8869 Comm: syz.4.858 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 285.947057][ T8869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 285.947068][ T8869] Call Trace: [ 285.947074][ T8869] [ 285.947080][ T8869] dump_stack_lvl+0x16c/0x1f0 [ 285.947111][ T8869] should_fail_ex+0x512/0x640 [ 285.947138][ T8869] _copy_to_user+0x32/0xd0 [ 285.947165][ T8869] bpf_test_finish.isra.0+0x4b4/0x6e0 [ 285.947197][ T8869] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 285.947228][ T8869] ? __asan_memset+0x23/0x50 [ 285.947250][ T8869] bpf_prog_test_run_skb+0x1368/0x2280 [ 285.947286][ T8869] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 285.947317][ T8869] ? fput+0x70/0xf0 [ 285.947344][ T8869] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 285.947378][ T8869] __sys_bpf+0x1488/0x4d80 [ 285.947406][ T8869] ? __pfx___sys_bpf+0x10/0x10 [ 285.947430][ T8869] ? ksys_write+0x190/0x250 [ 285.947455][ T8869] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 285.947496][ T8869] ? fput+0x70/0xf0 [ 285.947521][ T8869] ? ksys_write+0x1ac/0x250 [ 285.947541][ T8869] ? __pfx_ksys_write+0x10/0x10 [ 285.947568][ T8869] __x64_sys_bpf+0x78/0xc0 [ 285.947591][ T8869] ? lockdep_hardirqs_on+0x7c/0x110 [ 285.947615][ T8869] do_syscall_64+0xcd/0x4c0 [ 285.947641][ T8869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.947659][ T8869] RIP: 0033:0x7fc6d878e929 [ 285.947674][ T8869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.947691][ T8869] RSP: 002b:00007fc6d9614038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 285.947708][ T8869] RAX: ffffffffffffffda RBX: 00007fc6d89b5fa0 RCX: 00007fc6d878e929 [ 285.947720][ T8869] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 285.947730][ T8869] RBP: 00007fc6d9614090 R08: 0000000000000000 R09: 0000000000000000 [ 285.947740][ T8869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.947750][ T8869] R13: 0000000000000000 R14: 00007fc6d89b5fa0 R15: 00007ffd28b9dce8 [ 285.947774][ T8869] [ 285.961360][ T8707] hsr_slave_0: entered promiscuous mode [ 286.020916][ T5869] usb 2-1: config 0 has no interfaces? [ 286.194836][ T8707] hsr_slave_1: entered promiscuous mode [ 286.201299][ T8707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.213497][ T8707] Cannot create hsr debugfs directory [ 286.235167][ T5869] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 286.246451][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 286.255820][ T5869] usb 2-1: SerialNumber: syz [ 286.354867][ T5869] usb 2-1: config 0 descriptor?? [ 286.889807][ T5869] usb 2-1: USB disconnect, device number 33 [ 286.940937][ T8883] xt_TPROXY: Can be used only with -p tcp or -p udp [ 287.009473][ T30] audit: type=1400 audit(1751189094.498:1099): avc: denied { bind } for pid=8884 comm="syz.3.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 287.052997][ T8707] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 287.131792][ T8707] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 287.157575][ T8707] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 287.182625][ T8889] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 287.193060][ T8707] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 287.203045][ T8889] SELinux: failed to load policy [ 287.420867][ T8707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.447292][ T8707] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.470060][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.477256][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.527567][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.534752][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.043414][ T10] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 290.219519][ T8707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.226599][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 290.233581][ T10] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 290.247418][ T10] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 290.272054][ T10] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 290.317008][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 290.329435][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 290.339347][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.350889][ T10] usb 5-1: Product: syz [ 290.355606][ T10] usb 5-1: Manufacturer: syz [ 290.360306][ T10] usb 5-1: SerialNumber: syz [ 290.439168][ T5869] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 290.875991][ T10] usb 5-1: can't set config #1, error -71 [ 290.914742][ T10] usb 5-1: USB disconnect, device number 42 [ 290.973552][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.989727][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.133752][ T5869] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 291.561187][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.579774][ T5869] usb 2-1: config 0 descriptor?? [ 291.581589][ T5924] IPVS: starting estimator thread 0... [ 291.874581][ T50] Bluetooth: hci1: connection err: -111 [ 291.882872][ T8936] IPVS: using max 45 ests per chain, 108000 per kthread [ 291.928478][ T8707] veth0_vlan: entered promiscuous mode [ 291.939854][ T8707] veth1_vlan: entered promiscuous mode [ 291.963305][ T8707] veth0_macvtap: entered promiscuous mode [ 291.972812][ T8707] veth1_macvtap: entered promiscuous mode [ 291.989769][ T8707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.000712][ T8707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.011152][ T8707] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.020904][ T8707] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.029992][ T8707] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.039778][ T8707] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.041284][ T5869] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0 [ 292.056509][ T5869] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0 [ 292.066444][ T5869] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.000D/input/input34 [ 292.250369][ T5869] cm6533_jd 0003:0D8C:0022.000D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 292.658728][ T30] audit: type=1400 audit(1751189100.148:1100): avc: denied { listen } for pid=8916 comm="syz.1.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 293.028375][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.122524][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.413660][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.421584][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.444353][ T30] audit: type=1400 audit(1751189100.938:1101): avc: denied { mounton } for pid=8707 comm="syz-executor" path="/root/syzkaller.Ec6hR3/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 293.521037][ T30] audit: type=1400 audit(1751189100.938:1102): avc: denied { mounton } for pid=8707 comm="syz-executor" path="/root/syzkaller.Ec6hR3/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 293.568098][ T30] audit: type=1400 audit(1751189100.938:1103): avc: denied { mounton } for pid=8707 comm="syz-executor" path="/root/syzkaller.Ec6hR3/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=19366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 293.598755][ T8969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64013 sclass=netlink_route_socket pid=8969 comm=syz.4.885 [ 293.627985][ T30] audit: type=1400 audit(1751189100.978:1104): avc: denied { mounton } for pid=8707 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 293.690260][ T30] audit: type=1400 audit(1751189100.978:1105): avc: denied { mount } for pid=8707 comm="syz-executor" name="/" dev="gadgetfs" ino=6039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 293.736527][ T30] audit: type=1400 audit(1751189100.978:1106): avc: denied { mounton } for pid=8707 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 293.805213][ T30] audit: type=1400 audit(1751189101.228:1107): avc: denied { name_bind } for pid=8970 comm="syz.0.886" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 294.021612][ T8985] trusted_key: encrypted_key: insufficient parameters specified [ 294.500703][ T2151] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 294.503619][ T10] usb 2-1: USB disconnect, device number 34 [ 294.742469][ T2151] usb 6-1: device descriptor read/64, error -71 [ 295.004728][ T2151] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 295.203807][ T2151] usb 6-1: device descriptor read/64, error -71 [ 295.207569][ T30] audit: type=1400 audit(1751189102.698:1108): avc: denied { mounton } for pid=8989 comm="syz.4.889" path="/159/file0" dev="tmpfs" ino=857 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 295.281820][ T8999] futex_wake_op: syz.0.891 tries to shift op by -1; fix this program [ 295.294003][ T8999] futex_wake_op: syz.0.891 tries to shift op by -1; fix this program [ 295.303596][ T8999] futex_wake_op: syz.0.891 tries to shift op by -1; fix this program [ 295.313758][ T8999] futex_wake_op: syz.0.891 tries to shift op by -1; fix this program [ 295.322527][ T8999] futex_wake_op: syz.0.891 tries to shift op by -1; fix this program [ 295.342432][ T2151] usb usb6-port1: attempt power cycle [ 295.631818][ T9008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.894'. [ 296.190295][ T2151] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 296.197981][ T5869] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 296.242754][ T2151] usb 6-1: device descriptor read/8, error -71 [ 296.367216][ T30] audit: type=1400 audit(1751189103.858:1109): avc: denied { setopt } for pid=9017 comm="syz.0.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 296.435805][ T5869] usb 2-1: unable to get BOS descriptor or descriptor too short [ 296.445551][ T5869] usb 2-1: not running at top speed; connect to a high speed hub [ 296.456804][ T5869] usb 2-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 296.467570][ T5869] usb 2-1: config 219 interface 0 has no altsetting 0 [ 296.476135][ T5869] usb 2-1: config 219 interface 0 has no altsetting 1 [ 296.485340][ T5869] usb 2-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 296.496104][ T2151] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 296.516452][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.541203][ T5869] usb 2-1: Product: syz [ 296.548486][ T5869] usb 2-1: Manufacturer: syz [ 296.553940][ T2151] usb 6-1: device descriptor read/8, error -71 [ 296.560422][ T5869] usb 2-1: SerialNumber: syz [ 296.711442][ T2151] usb usb6-port1: unable to enumerate USB device [ 297.182733][ T5869] usb 2-1: selecting invalid altsetting 0 [ 297.203734][ T5869] usb 2-1: selecting invalid altsetting 0 [ 297.364300][ T5869] usb 2-1: USB disconnect, device number 35 [ 298.007967][ T6206] udevd[6206]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:219.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.051504][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.903'. [ 298.081999][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.903'. [ 298.100352][ T9041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.904'. [ 298.120068][ T30] audit: type=1400 audit(1751189105.608:1110): avc: denied { mount } for pid=9040 comm="syz.4.904" name="/" dev="rpc_pipefs" ino=19563 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 299.062037][ T30] audit: type=1400 audit(1751189105.858:1111): avc: denied { bind } for pid=9040 comm="syz.4.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 299.214027][ T9044] netlink: 60 bytes leftover after parsing attributes in process `syz.0.903'. [ 300.511412][ T9069] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.910'. [ 300.575103][ T9069] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 300.585739][ T9069] openvswitch: netlink: Duplicate key (type 0). [ 300.753078][ T5924] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 301.052012][ T5924] usb 6-1: Using ep0 maxpacket: 8 [ 301.077218][ T5924] usb 6-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 301.112489][ T5924] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 301.141154][ T5924] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 301.253677][ T30] audit: type=1400 audit(1751189108.648:1112): avc: denied { remount } for pid=9089 comm="syz.0.918" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 301.276504][ T9088] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 301.848249][ T9086] xt_nfacct: accounting object `syz1' does not exists [ 301.894087][ T30] audit: type=1400 audit(1751189109.388:1113): avc: denied { append } for pid=9085 comm="syz.1.917" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 301.971629][ T5924] usb 6-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 301.981004][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.068994][ T9093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9093 comm=syz.1.917 [ 302.182987][ T9104] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 302.189540][ T9104] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 302.221749][ T9104] vhci_hcd vhci_hcd.0: Device attached [ 302.233171][ T9105] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9105 comm=syz.3.922 [ 302.282844][ T9067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.293694][ T9067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.307149][ T9105] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=9105 comm=syz.3.922 [ 302.406866][ T5825] vhci_hcd: vhci_device speed not set [ 302.425141][ T5924] usb 6-1: USB disconnect, device number 6 [ 302.481939][ T5825] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 302.722050][ T30] audit: type=1400 audit(1751189110.208:1114): avc: denied { bind } for pid=9114 comm="syz.1.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 303.292446][ T9130] Sensor A: ================= START STATUS ================= [ 303.300145][ T9130] Sensor A: Test Pattern: 75% Colorbar [ 303.305766][ T9130] Sensor A: Show Information: All [ 303.310934][ T9130] Sensor A: Vertical Flip: false [ 303.315975][ T9130] Sensor A: Horizontal Flip: false [ 303.321218][ T9130] Sensor A: Brightness: 128 [ 303.325889][ T9130] Sensor A: Contrast: 128 [ 303.330357][ T9130] Sensor A: Hue: 0 [ 303.334230][ T9130] Sensor A: Saturation: 128 [ 303.338868][ T9130] Sensor A: ================== END STATUS ================== [ 304.476939][ T9138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.831881][ T30] audit: type=1400 audit(1751189112.318:1115): avc: denied { audit_write } for pid=9153 comm="syz.1.937" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 305.482396][ T9162] lo speed is unknown, defaulting to 1000 [ 305.491565][ T9106] vhci_hcd: connection reset by peer [ 305.530617][ T30] audit: type=1400 audit(1751189113.008:1116): avc: denied { associate } for pid=9158 comm="syz.0.939" name="file0" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 305.646496][ T48] vhci_hcd: stop threads [ 305.661601][ T48] vhci_hcd: release socket [ 305.719002][ T2151] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 305.719190][ T48] vhci_hcd: disconnect device [ 305.768092][ T9166] netlink: 'syz.5.940': attribute type 1 has an invalid length. [ 305.776187][ T9166] netlink: 4 bytes leftover after parsing attributes in process `syz.5.940'. [ 305.916054][ T2151] usb 2-1: Using ep0 maxpacket: 8 [ 305.924576][ T30] audit: type=1400 audit(1751189113.408:1117): avc: denied { append } for pid=9165 comm="syz.5.940" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 305.971645][ T2151] usb 2-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 306.012404][ T2151] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 306.027983][ T2151] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 306.037471][ T2151] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 306.073237][ T2151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.281980][ T24] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 306.326211][ T9157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.349176][ T9157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.592266][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.604862][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 306.608001][ T30] audit: type=1400 audit(1751189113.998:1118): avc: denied { map } for pid=9178 comm="syz.4.945" path="socket:[20691]" dev="sockfs" ino=20691 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 306.631900][ T24] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 306.642193][ T10] usb 2-1: USB disconnect, device number 36 [ 306.691566][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.806141][ T24] usb 6-1: config 0 descriptor?? [ 307.211863][ T9169] loop6: detected capacity change from 0 to 63 [ 307.241821][ T6282] Buffer I/O error on dev loop6, logical block 0, async page read [ 307.253402][ T6282] Buffer I/O error on dev loop6, logical block 0, async page read [ 307.262165][ T6282] Buffer I/O error on dev loop6, logical block 0, async page read [ 307.271397][ T6282] Buffer I/O error on dev loop6, logical block 0, async page read [ 307.280832][ T6282] Buffer I/O error on dev loop6, logical block 0, async page read [ 307.472336][ T24] IPVS: starting estimator thread 0... [ 307.482375][ T9190] IPVS: ip_vs_add_dest(): server weight less than zero [ 307.614586][ T9193] IPVS: using max 74 ests per chain, 177600 per kthread [ 307.654984][ T5825] vhci_hcd: vhci_device speed not set [ 307.813453][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 307.971909][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 307.980684][ T10] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 307.989597][ T10] usb 2-1: config 0 has no interface number 0 [ 308.045858][ T9209] 9pnet_fd: Insufficient options for proto=fd [ 308.056169][ T10] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 308.075733][ T10] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 308.088208][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.097683][ T10] usb 2-1: Product: syz [ 308.103320][ T10] usb 2-1: Manufacturer: syz [ 308.108132][ T10] usb 2-1: SerialNumber: syz [ 308.117565][ T10] usb 2-1: config 0 descriptor?? [ 308.137680][ T10] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 308.148448][ T10] em28xx 2-1:0.132: Video interface 132 found: [ 308.882415][ T10] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 308.923159][ T5924] usb 6-1: USB disconnect, device number 7 [ 309.862369][ T30] audit: type=1400 audit(1751189117.328:1119): avc: denied { read } for pid=9224 comm="syz.4.958" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 310.103855][ T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 310.119403][ T30] audit: type=1400 audit(1751189117.338:1120): avc: denied { open } for pid=9224 comm="syz.4.958" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 310.144457][ T10] em28xx 2-1:0.132: board has no eeprom [ 310.159724][ T9192] em28xx 2-1:0.132: failed to trigger read from i2c address 0x28 (error=-5) [ 310.160885][ T30] audit: type=1400 audit(1751189117.608:1121): avc: denied { ioctl } for pid=9224 comm="syz.4.958" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 310.195063][ T9233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=9233 comm=syz.0.960 [ 310.207605][ T10] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 310.207632][ T10] em28xx 2-1:0.132: analog set to bulk mode. [ 310.353259][ T5923] em28xx 2-1:0.132: Registering V4L2 extension [ 310.387581][ T10] usb 2-1: USB disconnect, device number 37 [ 310.393862][ T5929] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 310.428525][ T10] em28xx 2-1:0.132: Disconnecting em28xx [ 310.435762][ T9243] tmpfs: Unknown parameter 'qUota' [ 310.507206][ T9248] netlink: 'syz.3.964': attribute type 21 has an invalid length. [ 310.510755][ T9249] netlink: 'syz.3.964': attribute type 21 has an invalid length. [ 310.523255][ T9248] netlink: 176 bytes leftover after parsing attributes in process `syz.3.964'. [ 310.540459][ T9249] netlink: 176 bytes leftover after parsing attributes in process `syz.3.964'. [ 310.551977][ T5929] usb 6-1: Using ep0 maxpacket: 8 [ 310.564965][ T5929] usb 6-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 310.585526][ T5929] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 310.604739][ T5923] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 310.612984][ T5929] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 310.626648][ T5923] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 310.641473][ T5923] em28xx 2-1:0.132: No AC97 audio processor [ 310.649366][ T5929] usb 6-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 310.665845][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.674516][ T5923] usb 2-1: Decoder not found [ 310.679238][ T5923] em28xx 2-1:0.132: failed to create media graph [ 310.693816][ T5923] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 310.715505][ T5923] em28xx 2-1:0.132: Remote control support is not available for this card. [ 310.803213][ T10] em28xx 2-1:0.132: Closing input extension [ 310.819631][ T10] em28xx 2-1:0.132: Freeing device [ 311.137175][ T9234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.467428][ T9234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.154891][ T10] usb 6-1: USB disconnect, device number 8 [ 314.640073][ T30] audit: type=1400 audit(1751189122.128:1122): avc: denied { setopt } for pid=9288 comm="syz.4.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 315.141127][ T9313] netlink: 96 bytes leftover after parsing attributes in process `syz.1.981'. [ 316.716287][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.722851][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.742788][ T9335] xt_connbytes: Forcing CT accounting to be enabled [ 316.749712][ T9335] Cannot find add_set index 0 as target [ 316.763188][ T9336] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 2, id = 0 [ 317.178049][ T9345] sg_write: data in/out 11132/1 bytes for SCSI command 0x1c-- guessing data in; [ 317.178049][ T9345] program syz.1.989 not setting count and/or reply_len properly [ 317.271986][ T5923] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 317.673749][ T9326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.708329][ T9326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.901193][ T30] audit: type=1400 audit(1751189125.388:1123): avc: denied { mount } for pid=9324 comm="syz.4.984" name="/" dev="autofs" ino=20173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 317.980488][ T5923] usb 5-1: unable to get BOS descriptor or descriptor too short [ 318.005660][ T5923] usb 5-1: no configurations [ 318.010308][ T5923] usb 5-1: can't read configurations, error -22 [ 319.277157][ T30] audit: type=1400 audit(1751189126.768:1124): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 320.510149][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 320.684055][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.695779][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.705549][ T10] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 320.714575][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.040792][ T10] usb 6-1: config 0 descriptor?? [ 321.193200][ T30] audit: type=1800 audit(1751189128.688:1125): pid=9386 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1001" name="nullb0" dev="tmpfs" ino=662 res=0 errno=0 [ 322.912767][ T24] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 323.207223][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 323.225827][ T24] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 323.241008][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.255129][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 323.261149][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 323.270944][ T9439] tipc: Started in network mode [ 323.278211][ T24] usb 2-1: Product: syz [ 323.282556][ T9439] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 323.292970][ T30] audit: type=1800 audit(1751189130.788:1126): pid=9440 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1014" name="nullb0" dev="tmpfs" ino=662 res=0 errno=0 [ 323.303333][ T10] usb 6-1: USB disconnect, device number 9 [ 323.321874][ T24] usb 2-1: Manufacturer: syz [ 323.326484][ T24] usb 2-1: SerialNumber: syz [ 323.338021][ T9439] tipc: Enabled bearer , priority 0 [ 323.349896][ T24] usb 2-1: config 0 descriptor?? [ 323.373171][ T24] gspca_main: sq930x-2.14.0 probing 2770:930c [ 324.149700][ T30] audit: type=1400 audit(1751189131.198:1127): avc: denied { listen } for pid=9443 comm="syz.4.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 324.176276][ T30] audit: type=1400 audit(1751189131.198:1128): avc: denied { read } for pid=9443 comm="syz.4.1016" path="socket:[21114]" dev="sockfs" ino=21114 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 324.283997][ T9452] overlayfs: failed to clone upperpath [ 324.313618][ T30] audit: type=1326 audit(1751189131.808:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9450 comm="syz.5.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3175d8e929 code=0x7ffc0000 [ 324.340810][ T2151] tipc: Node number set to 11578026 [ 324.355986][ T30] audit: type=1326 audit(1751189131.808:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9450 comm="syz.5.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3175d8e929 code=0x7ffc0000 [ 324.391098][ T30] audit: type=1326 audit(1751189131.838:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9450 comm="syz.5.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f3175d8e929 code=0x7ffc0000 [ 324.522006][ T30] audit: type=1326 audit(1751189131.838:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9450 comm="syz.5.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3175d8e929 code=0x7ffc0000 [ 325.130597][ T30] audit: type=1326 audit(1751189131.838:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9450 comm="syz.5.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3175d8e929 code=0x7ffc0000 [ 325.154110][ T24] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 325.160072][ T24] sq930x 2-1:0.0: probe with driver sq930x failed with error -110 [ 325.176032][ T30] audit: type=1326 audit(1751189131.838:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9450 comm="syz.5.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3175d8e929 code=0x7ffc0000 [ 325.238629][ T30] audit: type=1326 audit(1751189131.838:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9450 comm="syz.5.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3175d8e929 code=0x7ffc0000 [ 325.352198][ T2151] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 325.459540][ T9468] dummy0 speed is unknown, defaulting to 1000 [ 325.466693][ T9468] dummy0 speed is unknown, defaulting to 1000 [ 325.475653][ T9468] dummy0 speed is unknown, defaulting to 1000 [ 325.492007][ T9468] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 325.509064][ T9468] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 325.513397][ T2151] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.526139][ T2151] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 325.560230][ T2151] usb 5-1: New USB device found, idVendor=05ac, idProduct=0216, bcdDevice= 0.00 [ 325.626705][ T2151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.673428][ T9468] dummy0 speed is unknown, defaulting to 1000 [ 325.738251][ T2151] usb 5-1: config 0 descriptor?? [ 325.738789][ T9468] dummy0 speed is unknown, defaulting to 1000 [ 325.789493][ T9468] dummy0 speed is unknown, defaulting to 1000 [ 325.798137][ T9468] dummy0 speed is unknown, defaulting to 1000 [ 325.807072][ T9468] dummy0 speed is unknown, defaulting to 1000 [ 326.003440][ T2151] usb 5-1: string descriptor 0 read error: -71 [ 326.023142][ T2151] appletouch 5-1:0.0: Failed to read mode from device. [ 326.040597][ T2151] appletouch 5-1:0.0: probe with driver appletouch failed with error -5 [ 326.086206][ T2151] usb 5-1: USB disconnect, device number 45 [ 326.204636][ T5811] usb 2-1: USB disconnect, device number 38 [ 326.404533][ T5923] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 326.561991][ T5923] usb 6-1: Using ep0 maxpacket: 16 [ 326.574085][ T5923] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 326.583236][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.591215][ T5923] usb 6-1: Product: syz [ 326.595390][ T5923] usb 6-1: Manufacturer: syz [ 326.599983][ T5923] usb 6-1: SerialNumber: syz [ 326.606079][ T5923] usb 6-1: config 0 descriptor?? [ 326.791997][ T5811] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 326.816183][ T5923] speedtch 6-1:0.0: speedtch_bind: data interface not found! [ 326.824429][ T5923] speedtch 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 326.834720][ T5923] usb 6-1: USB disconnect, device number 10 [ 326.981977][ T5811] usb 5-1: Using ep0 maxpacket: 32 [ 326.988801][ T5811] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.999528][ T5811] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 327.015255][ T5811] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 327.024791][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.035979][ T5811] usb 5-1: config 0 descriptor?? [ 327.056457][ T5811] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 327.186664][ T9498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1033'. [ 327.444070][ T9506] afs: Unknown parameter 'dyn/' [ 327.460659][ T9500] FAULT_INJECTION: forcing a failure. [ 327.460659][ T9500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.526118][ T9500] CPU: 1 UID: 0 PID: 9500 Comm: syz.1.1032 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 327.526146][ T9500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 327.526156][ T9500] Call Trace: [ 327.526163][ T9500] [ 327.526170][ T9500] dump_stack_lvl+0x16c/0x1f0 [ 327.526201][ T9500] should_fail_ex+0x512/0x640 [ 327.526229][ T9500] _copy_to_user+0x32/0xd0 [ 327.526255][ T9500] simple_read_from_buffer+0xcb/0x170 [ 327.526281][ T9500] proc_fail_nth_read+0x197/0x270 [ 327.526305][ T9500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 327.526328][ T9500] ? rw_verify_area+0xcf/0x680 [ 327.526348][ T9500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 327.526370][ T9500] vfs_read+0x1e1/0xc60 [ 327.526395][ T9500] ? __pfx___mutex_lock+0x10/0x10 [ 327.526421][ T9500] ? __pfx_vfs_read+0x10/0x10 [ 327.526450][ T9500] ? __fget_files+0x20e/0x3c0 [ 327.526481][ T9500] ksys_read+0x12a/0x250 [ 327.526502][ T9500] ? __pfx_ksys_read+0x10/0x10 [ 327.526530][ T9500] do_syscall_64+0xcd/0x4c0 [ 327.526557][ T9500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.526577][ T9500] RIP: 0033:0x7f0fa2f8d33c [ 327.526592][ T9500] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 327.526609][ T9500] RSP: 002b:00007f0fa3da9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 327.526628][ T9500] RAX: ffffffffffffffda RBX: 00007f0fa31b6160 RCX: 00007f0fa2f8d33c [ 327.526640][ T9500] RDX: 000000000000000f RSI: 00007f0fa3da90a0 RDI: 0000000000000007 [ 327.526650][ T9500] RBP: 00007f0fa3da9090 R08: 0000000000000000 R09: 0000000000000000 [ 327.526661][ T9500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.526671][ T9500] R13: 0000000000000000 R14: 00007f0fa31b6160 R15: 00007ffd0ea1a718 [ 327.526696][ T9500] [ 327.797876][ T9512] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1037'. [ 328.380297][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 328.380333][ T30] audit: type=1400 audit(1751189135.768:1153): avc: denied { map } for pid=9526 comm="syz.1.1041" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 328.931950][ T5811] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 329.077652][ T9542] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1045'. [ 329.115753][ T9542] lo speed is unknown, defaulting to 1000 [ 329.134541][ T5811] usb 6-1: Using ep0 maxpacket: 32 [ 329.185508][ T5811] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 329.198034][ T5811] usb 6-1: config 0 has no interface number 0 [ 329.221895][ T5811] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 329.233903][ T5811] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 329.247481][ T5811] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.281872][ T5811] usb 6-1: Product: syz [ 329.299757][ T5811] usb 6-1: Manufacturer: syz [ 329.327809][ T5811] usb 6-1: SerialNumber: syz [ 329.339061][ T5811] usb 6-1: config 0 descriptor?? [ 329.356682][ T5811] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 329.381096][ T5811] em28xx 6-1:0.132: Video interface 132 found: [ 329.603873][ T9542] dummy0 speed is unknown, defaulting to 1000 [ 329.620430][ T30] audit: type=1400 audit(1751189137.108:1154): avc: denied { setattr } for pid=9548 comm="syz.1.1048" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 329.760748][ T5811] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 330.075413][ T9558] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1050'. [ 330.160303][ T10] usb 5-1: USB disconnect, device number 46 [ 330.948277][ T5811] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 331.782530][ T5811] em28xx 6-1:0.132: board has no eeprom [ 331.792187][ T9537] em28xx 6-1:0.132: failed to trigger write to i2c address 0x28 (error=-5) [ 332.003865][ T5811] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 332.028180][ T5811] em28xx 6-1:0.132: analog set to bulk mode. [ 332.034541][ T2151] em28xx 6-1:0.132: Registering V4L2 extension [ 334.022984][ T2151] em28xx 6-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 334.128643][ T30] audit: type=1400 audit(1751189141.608:1155): avc: denied { nlmsg_read } for pid=9597 comm="syz.0.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 334.154184][ T2151] em28xx 6-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 334.168621][ T5811] usb 6-1: USB disconnect, device number 11 [ 334.202536][ T5811] em28xx 6-1:0.132: Disconnecting em28xx [ 334.529095][ T2151] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 334.540707][ T2151] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 334.549757][ T30] audit: type=1400 audit(1751189142.038:1156): avc: denied { listen } for pid=9577 comm="syz.1.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 334.608941][ T2151] em28xx 6-1:0.132: No AC97 audio processor [ 334.626587][ T2151] usb 6-1: Decoder not found [ 334.631217][ T2151] em28xx 6-1:0.132: failed to create media graph [ 334.638086][ T30] audit: type=1400 audit(1751189142.038:1157): avc: denied { accept } for pid=9577 comm="syz.1.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 334.658425][ T2151] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 334.692992][ T2151] em28xx 6-1:0.132: Remote control support is not available for this card. [ 334.701676][ T5811] em28xx 6-1:0.132: Closing input extension [ 334.712048][ T30] audit: type=1400 audit(1751189142.098:1158): avc: denied { setattr } for pid=9609 comm="syz.0.1063" name="RDS" dev="sockfs" ino=21339 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 334.735026][ T5869] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 334.764531][ T5811] em28xx 6-1:0.132: Freeing device [ 334.833150][ T30] audit: type=1400 audit(1751189142.098:1159): avc: denied { ioctl } for pid=9609 comm="syz.0.1063" path="socket:[21339]" dev="sockfs" ino=21339 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 334.897264][ T30] audit: type=1400 audit(1751189142.108:1160): avc: denied { create } for pid=9609 comm="syz.0.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 335.005800][ T9616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.042405][ T9616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.073504][ T9616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.094148][ T9616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.127409][ T5869] usb 5-1: unable to get BOS descriptor or descriptor too short [ 335.151136][ T5869] usb 5-1: no configurations [ 335.158634][ T5869] usb 5-1: can't read configurations, error -22 [ 335.254042][ T30] audit: type=1400 audit(1751189142.748:1161): avc: denied { setopt } for pid=9617 comm="syz.1.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 336.031988][ T2151] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 336.531992][ T2151] usb 6-1: Using ep0 maxpacket: 32 [ 337.475027][ T2151] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 337.483637][ T2151] usb 6-1: config 0 has no interface number 0 [ 337.490770][ T2151] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 337.503341][ T2151] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 337.503964][ T30] audit: type=1400 audit(1751189143.478:1162): avc: denied { ioctl } for pid=9629 comm="syz.1.1069" path="socket:[21616]" dev="sockfs" ino=21616 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 337.513081][ T2151] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.546586][ T2151] usb 6-1: Product: syz [ 337.550822][ T2151] usb 6-1: Manufacturer: syz [ 337.555811][ T2151] usb 6-1: SerialNumber: syz [ 337.564088][ T2151] usb 6-1: config 0 descriptor?? [ 337.575657][ T2151] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 337.585582][ T2151] em28xx 6-1:0.132: Video interface 132 found: [ 338.070357][ T2151] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 338.218826][ T30] audit: type=1400 audit(1751189144.658:1163): avc: denied { setopt } for pid=9629 comm="syz.1.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 339.322081][ T2151] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 339.332244][ T2151] em28xx 6-1:0.132: board has no eeprom [ 339.332519][ T9626] em28xx 6-1:0.132: failed to trigger write to i2c address 0x28 (error=-5) [ 339.385992][ T9673] netlink: 'syz.3.1078': attribute type 13 has an invalid length. [ 339.403536][ T2151] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 339.415588][ T30] audit: type=1326 audit(1751189146.908:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9666 comm="syz.4.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d878e929 code=0x7fc00000 [ 339.439261][ T2151] em28xx 6-1:0.132: analog set to bulk mode. [ 339.440109][ T5869] em28xx 6-1:0.132: Registering V4L2 extension [ 339.498553][ T2151] usb 6-1: USB disconnect, device number 12 [ 339.555449][ T2151] em28xx 6-1:0.132: Disconnecting em28xx [ 339.622323][ T10] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 339.721331][ T5869] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 339.786195][ T5869] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 339.833648][ T10] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 339.835096][ T5869] em28xx 6-1:0.132: No AC97 audio processor [ 339.842979][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 339.862197][ T5869] usb 6-1: Decoder not found [ 339.866976][ T5869] em28xx 6-1:0.132: failed to create media graph [ 339.881788][ T5869] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 339.896665][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 339.929292][ T5869] em28xx 6-1:0.132: Remote control support is not available for this card. [ 339.941109][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 339.963436][ T2151] em28xx 6-1:0.132: Closing input extension [ 339.967129][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 340.112239][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 340.123852][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 340.131403][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 340.135302][ T30] audit: type=1326 audit(1751189147.618:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9666 comm="syz.4.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc6d878d290 code=0x7fc00000 [ 340.144963][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 340.634833][ T2151] em28xx 6-1:0.132: Freeing device [ 340.719869][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 340.753843][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 340.778462][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 340.940558][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 340.956730][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 340.977608][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 341.043421][ T9696] netfs: Couldn't get user pages (rc=-14) [ 341.428184][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 341.435852][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 341.445379][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 341.456505][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 341.464065][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 341.477596][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 341.488922][ T880] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 341.497779][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 341.505406][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 341.515260][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 341.526412][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 341.535669][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 341.544852][ T10] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 341.554198][ T10] usb 2-1: Product: syz [ 341.558431][ T10] usb 2-1: Manufacturer: syz [ 341.563083][ T10] usb 2-1: SerialNumber: syz [ 341.614569][ T10] usb 2-1: config 0 descriptor?? [ 341.670608][ T10] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 341.683800][ T880] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 341.703744][ T880] usb 5-1: config 0 has no interface number 0 [ 341.719563][ T880] usb 5-1: config 0 interface 214 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 341.755036][ T880] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 341.775585][ T880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.947953][ T2151] usb 2-1: USB disconnect, device number 39 [ 341.950407][ T880] usb 5-1: Product: syz [ 341.966896][ T2151] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 341.973179][ T880] usb 5-1: Manufacturer: syz [ 341.977868][ T880] usb 5-1: SerialNumber: syz [ 341.994322][ T880] usb 5-1: config 0 descriptor?? [ 342.865470][ T30] audit: type=1400 audit(1751189150.358:1166): avc: denied { ioctl } for pid=9713 comm="syz.0.1090" path="socket:[22606]" dev="sockfs" ino=22606 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 343.762443][ T9712] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 343.795471][ T9719] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 343.827520][ T24] usb 5-1: USB disconnect, device number 49 [ 344.938047][ T9736] Cannot find add_set index 4 as target [ 345.302528][ T9739] FAULT_INJECTION: forcing a failure. [ 345.302528][ T9739] name failslab, interval 1, probability 0, space 0, times 0 [ 345.333561][ T9739] CPU: 1 UID: 0 PID: 9739 Comm: syz.5.1095 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 345.333589][ T9739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 345.333599][ T9739] Call Trace: [ 345.333605][ T9739] [ 345.333612][ T9739] dump_stack_lvl+0x16c/0x1f0 [ 345.333643][ T9739] should_fail_ex+0x512/0x640 [ 345.333665][ T9739] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 345.333692][ T9739] should_failslab+0xc2/0x120 [ 345.333717][ T9739] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 345.333739][ T9739] ? trace_kmalloc+0x2b/0xd0 [ 345.333763][ T9739] ? getname_kernel+0x52/0x370 [ 345.333794][ T9739] getname_kernel+0x52/0x370 [ 345.333822][ T9739] kern_path+0x1d/0x50 [ 345.333844][ T9739] ovl_mount_dir+0x13e/0x1f0 [ 345.333866][ T9739] ovl_parse_param+0x10ae/0x1570 [ 345.333885][ T9739] ? selinux_fs_context_parse_param+0xd8/0x130 [ 345.333911][ T9739] ? __pfx_ovl_parse_param+0x10/0x10 [ 345.333929][ T9739] ? trace_kmalloc+0x2b/0xd0 [ 345.333953][ T9739] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 345.333979][ T9739] ? static_key_count+0x5a/0x70 [ 345.333997][ T9739] ? __pfx_ovl_parse_param+0x10/0x10 [ 345.334016][ T9739] vfs_parse_fs_param+0x20b/0x3c0 [ 345.334043][ T9739] vfs_parse_fs_string+0xe9/0x150 [ 345.334067][ T9739] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 345.334102][ T9739] ? ovl_next_opt+0x143/0x1c0 [ 345.334119][ T9739] ? __pfx_ovl_next_opt+0x10/0x10 [ 345.334135][ T9739] vfs_parse_monolithic_sep+0x16f/0x1f0 [ 345.334161][ T9739] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 345.334187][ T9739] ? alloc_fs_context+0x59b/0x9c0 [ 345.334214][ T9739] path_mount+0x13cd/0x2020 [ 345.334242][ T9739] ? kmem_cache_free+0x2d1/0x4d0 [ 345.334268][ T9739] ? __pfx_path_mount+0x10/0x10 [ 345.334297][ T9739] ? putname+0x154/0x1a0 [ 345.334326][ T9739] __x64_sys_mount+0x28d/0x310 [ 345.334353][ T9739] ? __pfx___x64_sys_mount+0x10/0x10 [ 345.334386][ T9739] do_syscall_64+0xcd/0x4c0 [ 345.334414][ T9739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.334432][ T9739] RIP: 0033:0x7f3175d8e929 [ 345.334447][ T9739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.334464][ T9739] RSP: 002b:00007f3176c4f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 345.334480][ T9739] RAX: ffffffffffffffda RBX: 00007f3175fb5fa0 RCX: 00007f3175d8e929 [ 345.334492][ T9739] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 345.334502][ T9739] RBP: 00007f3176c4f090 R08: 0000200000000340 R09: 0000000000000000 [ 345.334512][ T9739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 345.334522][ T9739] R13: 0000000000000000 R14: 00007f3175fb5fa0 R15: 00007ffc481ee598 [ 345.334554][ T9739] [ 345.334562][ T9739] overlayfs: failed to resolve './bus': -12 [ 345.603573][ T30] audit: type=1326 audit(1751189153.078:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9726 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7218e929 code=0x7fc00000 [ 345.739983][ T9751] No control pipe specified [ 346.091164][ T9759] lo speed is unknown, defaulting to 1000 [ 346.173285][ T9761] input: syz1 as /devices/virtual/input/input36 [ 346.771461][ T9759] dummy0 speed is unknown, defaulting to 1000 [ 346.896690][ T9763] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49936 sclass=netlink_route_socket pid=9763 comm=syz.4.1102 [ 347.291907][ T30] audit: type=1400 audit(1751189154.658:1168): avc: denied { write } for pid=9773 comm="syz.0.1106" path="socket:[21807]" dev="sockfs" ino=21807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 348.192070][ T24] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 348.421962][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 348.661490][ T30] audit: type=1400 audit(1751189155.998:1169): avc: denied { read } for pid=9789 comm="syz.5.1111" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 348.760019][ T24] usb 2-1: config 162 has an invalid interface number: 95 but max is 1 [ 348.792737][ T24] usb 2-1: config 162 has an invalid interface number: 172 but max is 1 [ 348.808253][ T30] audit: type=1400 audit(1751189155.998:1170): avc: denied { open } for pid=9789 comm="syz.5.1111" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 348.839462][ T24] usb 2-1: config 162 has no interface number 0 [ 348.910592][ T24] usb 2-1: config 162 has no interface number 1 [ 348.943694][ T24] usb 2-1: config 162 interface 95 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 349.240868][ T24] usb 2-1: config 162 interface 172 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 349.369049][ T24] usb 2-1: config 162 interface 172 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 349.401676][ T30] audit: type=1400 audit(1751189156.858:1171): avc: denied { read } for pid=9796 comm="syz.4.1113" path="socket:[22717]" dev="sockfs" ino=22717 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 349.443688][ T9802] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=118 sclass=netlink_xfrm_socket pid=9802 comm=syz.3.1114 [ 349.463138][ T24] usb 2-1: config 162 interface 172 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 349.521534][ T24] usb 2-1: config 162 interface 172 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 349.698809][ T24] usb 2-1: config 162 interface 172 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 349.859226][ T9810] trusted_key: encrypted_key: insufficient parameters specified [ 350.017563][ T24] usb 2-1: config 162 interface 95 has no altsetting 0 [ 350.131912][ T24] usb 2-1: config 162 interface 172 has no altsetting 0 [ 350.171611][ T24] usb 2-1: string descriptor 0 read error: -71 [ 350.180387][ T30] audit: type=1400 audit(1751189157.668:1172): avc: denied { map } for pid=9805 comm="syz.1.1115" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 350.222419][ T24] usb 2-1: New USB device found, idVendor=0856, idProduct=bc00, bcdDevice=d5.e1 [ 350.234881][ T9808] syzkaller1: entered promiscuous mode [ 350.240346][ T9808] syzkaller1: entered allmulticast mode [ 350.262994][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.306664][ T30] audit: type=1400 audit(1751189157.668:1173): avc: denied { execute } for pid=9805 comm="syz.1.1115" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 350.336411][ T24] usb 2-1: can't set config #162, error -71 [ 350.366909][ T24] usb 2-1: USB disconnect, device number 40 [ 350.501940][ T5923] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 350.674095][ T5923] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 350.685772][ T5923] usb 5-1: config 0 has no interface number 0 [ 350.703953][ T5923] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 350.729249][ T5923] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 350.744595][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.762046][ T5923] usb 5-1: Product: syz [ 350.770569][ T5923] usb 5-1: Manufacturer: syz [ 350.781723][ T5923] usb 5-1: SerialNumber: syz [ 350.825397][ T5923] usb 5-1: config 0 descriptor?? [ 351.072099][ T5923] usbtouchscreen 5-1:0.214: Failed to read FW rev: -32 [ 351.372902][ T5923] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -32 [ 351.402951][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 351.414409][ T5923] usb 5-1: USB disconnect, device number 50 [ 351.423338][ T6281] udevd[6281]: setting mode of /dev/bus/usb/005/050 to 020664 failed: No such file or directory [ 351.509747][ T6281] udevd[6281]: setting owner of /dev/bus/usb/005/050 to uid=0, gid=0 failed: No such file or directory [ 351.852718][ T30] audit: type=1400 audit(1751189159.338:1174): avc: denied { read write } for pid=9841 comm="syz.1.1126" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 351.886252][ T30] audit: type=1400 audit(1751189159.338:1175): avc: denied { open } for pid=9841 comm="syz.1.1126" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 351.910967][ T30] audit: type=1400 audit(1751189159.338:1176): avc: denied { ioctl } for pid=9841 comm="syz.1.1126" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 351.935974][ C1] vkms_vblank_simulate: vblank timer overrun [ 352.042205][ T5923] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 352.170709][ T9851] No source specified [ 352.241958][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 352.277089][ T5923] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 352.305046][ T5923] usb 5-1: config 179 has no interface number 0 [ 352.378525][ T5923] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 352.405712][ T5923] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 352.417640][ T5923] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 352.429354][ T5923] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 353.177393][ T5923] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 353.196737][ T5923] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 353.206059][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.252950][ T9840] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 353.524685][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input38 [ 353.729304][ T10] usb 5-1: USB disconnect, device number 51 [ 353.729335][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 353.743537][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 353.854650][ T10] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 354.236522][ T30] audit: type=1400 audit(1751189161.728:1177): avc: denied { write } for pid=9857 comm="syz.5.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 354.426660][ T30] audit: type=1400 audit(1751189161.918:1178): avc: denied { ioctl } for pid=9863 comm="syz.4.1133" path="socket:[22790]" dev="sockfs" ino=22790 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 354.452507][ C1] vkms_vblank_simulate: vblank timer overrun [ 354.511413][ T30] audit: type=1400 audit(1751189161.988:1179): avc: denied { getopt } for pid=9863 comm="syz.4.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 354.831966][ T5923] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 355.032042][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 355.057226][ T5923] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 355.070989][ T5923] usb 5-1: config 0 has no interface number 0 [ 355.092704][ T5923] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 355.119146][ T5923] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 355.131991][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.147639][ T5923] usb 5-1: Product: syz [ 355.156573][ T5923] usb 5-1: Manufacturer: syz [ 355.168302][ T5923] usb 5-1: SerialNumber: syz [ 355.196190][ T5923] usb 5-1: config 0 descriptor?? [ 355.223286][ T9886] set match dimension is over the limit! [ 355.232585][ T5923] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 355.260859][ T9886] overlay: filesystem on ./bus not supported [ 355.266978][ T5923] em28xx 5-1:0.132: Video interface 132 found: [ 355.271944][ T30] audit: type=1400 audit(1751189162.748:1180): avc: denied { mounton } for pid=9885 comm="syz.1.1139" path="/214/file1/bus" dev="autofs" ino=22816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 355.368083][ T9891] syz_tun: entered promiscuous mode [ 355.388555][ T9891] batadv_slave_0: entered promiscuous mode [ 355.404196][ T9891] hsr1: entered allmulticast mode [ 355.424418][ T9891] syz_tun: entered allmulticast mode [ 355.434224][ T9891] batadv_slave_0: entered allmulticast mode [ 355.671467][ T5923] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 356.511546][ T9909] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 356.518105][ T9909] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 356.530524][ T9909] vhci_hcd vhci_hcd.0: Device attached [ 356.571578][ T9909] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(7) [ 356.578146][ T9909] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 356.596767][ T9909] vhci_hcd vhci_hcd.0: Device attached [ 356.609868][ T9909] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(9) [ 356.616411][ T9909] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 356.626159][ T9909] vhci_hcd vhci_hcd.0: Device attached [ 356.637704][ T9909] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(13) [ 356.644325][ T9909] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 356.656290][ T9909] vhci_hcd vhci_hcd.0: Device attached [ 356.679619][ T9909] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(15) [ 356.686243][ T9909] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 356.712677][ T24] vhci_hcd: vhci_device speed not set [ 356.727269][ T9922] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 356.727968][ T9909] vhci_hcd vhci_hcd.0: Device attached [ 356.771125][ T9909] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 356.781894][ T24] usb 35-1: new high-speed USB device number 3 using vhci_hcd [ 356.790635][ T9909] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(21) [ 356.797245][ T9909] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 356.805521][ T9909] vhci_hcd vhci_hcd.0: Device attached [ 356.837240][ T9909] vhci_hcd vhci_hcd.0: port 0 already used [ 356.850066][ T9918] vhci_hcd: connection closed [ 356.850212][ T9920] vhci_hcd: connection closed [ 356.850594][ T9916] vhci_hcd: connection closed [ 356.855013][ T6190] vhci_hcd: stop threads [ 356.869190][ T9910] vhci_hcd: connection reset by peer [ 356.874578][ T9912] vhci_hcd: connection closed [ 356.879073][ T9923] vhci_hcd: connection closed [ 356.881984][ T6190] vhci_hcd: release socket [ 356.886562][ T2151] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 356.889040][ T6190] vhci_hcd: disconnect device [ 356.911048][ T6190] vhci_hcd: stop threads [ 356.920275][ T6190] vhci_hcd: release socket [ 356.924972][ T6190] vhci_hcd: disconnect device [ 356.929953][ T6190] vhci_hcd: stop threads [ 356.936440][ T6190] vhci_hcd: release socket [ 356.940937][ T6190] vhci_hcd: disconnect device [ 356.947023][ T6190] vhci_hcd: stop threads [ 356.951278][ T6190] vhci_hcd: release socket [ 356.958176][ T6190] vhci_hcd: disconnect device [ 356.963346][ T6190] vhci_hcd: stop threads [ 356.967745][ T6190] vhci_hcd: release socket [ 356.974119][ T6190] vhci_hcd: disconnect device [ 356.980170][ T6190] vhci_hcd: stop threads [ 356.985433][ T6190] vhci_hcd: release socket [ 356.990081][ T6190] vhci_hcd: disconnect device [ 357.002148][ T9870] em28xx 5-1:0.132: failed to trigger read from i2c address 0x28 (error=-5) [ 357.015001][ T5923] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 357.026346][ T5923] em28xx 5-1:0.132: board has no eeprom [ 357.072141][ T2151] usb 6-1: Using ep0 maxpacket: 32 [ 357.082857][ T2151] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 357.091074][ T2151] usb 6-1: config 0 has no interface number 0 [ 357.091901][ T5923] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 357.105575][ T5923] em28xx 5-1:0.132: analog set to bulk mode. [ 357.111620][ T10] em28xx 5-1:0.132: Registering V4L2 extension [ 357.116753][ T2151] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 357.123213][ T5923] usb 5-1: USB disconnect, device number 52 [ 357.172804][ T5923] em28xx 5-1:0.132: Disconnecting em28xx [ 357.190664][ T2151] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 357.211865][ T2151] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.219923][ T2151] usb 6-1: Product: syz [ 357.249908][ T2151] usb 6-1: Manufacturer: syz [ 357.256051][ T30] audit: type=1400 audit(1751189164.748:1181): avc: denied { watch_mount watch_reads } for pid=9929 comm="syz.3.1149" path="/275" dev="tmpfs" ino=1459 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 357.279840][ T2151] usb 6-1: SerialNumber: syz [ 357.302614][ T2151] usb 6-1: config 0 descriptor?? [ 357.318646][ T2151] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 357.331202][ T10] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 357.338915][ T10] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 357.339878][ T2151] em28xx 6-1:0.132: Video interface 132 found: [ 357.364944][ T10] em28xx 5-1:0.132: No AC97 audio processor [ 357.381783][ T10] usb 5-1: Decoder not found [ 357.387463][ T10] em28xx 5-1:0.132: failed to create media graph [ 357.396080][ T10] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 357.405074][ T30] audit: type=1400 audit(1751189164.898:1182): avc: denied { mount } for pid=9935 comm="syz.3.1150" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 357.405995][ T10] em28xx 5-1:0.132: Remote control support is not available for this card. [ 357.443045][ T9936] pipefs: Unknown parameter '${^!%!^-(Û&”}\' [ 357.448278][ T5923] em28xx 5-1:0.132: Closing input extension [ 357.498325][ T5923] em28xx 5-1:0.132: Freeing device [ 357.713721][ T2151] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 358.592910][ T9959] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1155'. [ 358.922586][ T2151] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 359.163141][ T2151] em28xx 6-1:0.132: board has no eeprom [ 359.163393][ T9915] em28xx 6-1:0.132: failed to trigger write to i2c address 0x28 (error=-5) [ 359.409496][ T2151] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 359.421896][ T2151] em28xx 6-1:0.132: analog set to bulk mode. [ 359.432032][ T5811] em28xx 6-1:0.132: Registering V4L2 extension [ 359.458730][ T2151] usb 6-1: USB disconnect, device number 13 [ 359.494649][ T2151] em28xx 6-1:0.132: Disconnecting em28xx [ 359.539830][ T9966] overlayfs: failed to clone lowerpath [ 359.622145][ T9967] overlayfs: failed to clone upperpath [ 360.058324][ T5811] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 360.071867][ T5811] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 360.086223][ T5811] em28xx 6-1:0.132: No AC97 audio processor [ 360.105617][ T5811] usb 6-1: Decoder not found [ 360.122149][ T5811] em28xx 6-1:0.132: failed to create media graph [ 360.226247][ T5811] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 360.263754][ T5811] em28xx 6-1:0.132: Remote control support is not available for this card. [ 360.311881][ T2151] em28xx 6-1:0.132: Closing input extension [ 360.351359][ T2151] em28xx 6-1:0.132: Freeing device [ 360.601943][ T880] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 360.741969][ T2151] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 360.761939][ T5811] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 360.773095][ T880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.801848][ T880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.811620][ T880] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 360.842166][ T880] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 360.851244][ T880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.883885][ T880] usb 5-1: config 0 descriptor?? [ 360.924426][ T5811] usb 2-1: Using ep0 maxpacket: 32 [ 360.933849][ T2151] usb 6-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.949078][ T2151] usb 6-1: config 0 interface 0 has no altsetting 0 [ 360.961428][ T2151] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 360.975945][ T2151] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.987993][ T2151] usb 6-1: config 0 descriptor?? [ 361.951981][ T24] vhci_hcd: vhci_device speed not set [ 466.911751][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 466.918721][ C1] rcu: 0-...!: (2 ticks this GP) idle=c6fc/1/0x4000000000000000 softirq=46120/46122 fqs=106 [ 466.929698][ C1] rcu: (detected by 1, t=10502 jiffies, g=32041, q=70 ncpus=2) [ 466.937328][ C1] Sending NMI from CPU 1 to CPUs 0: [ 466.937355][ C0] NMI backtrace for cpu 0 [ 466.937367][ C0] CPU: 0 UID: 0 PID: 9785 Comm: syz.0.1109 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 466.937385][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 466.937393][ C0] RIP: 0010:do_raw_spin_unlock+0x40/0x230 [ 466.937413][ C0] Code: 83 c7 04 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 bd 01 00 00 81 7b 04 ad 4e ad de <0f> 85 75 01 00 00 be 04 00 00 00 48 89 df e8 1d 3a 8a 00 48 89 da [ 466.937426][ C0] RSP: 0018:ffffc90000007d18 EFLAGS: 00000046 [ 466.937438][ C0] RAX: 0000000000000007 RBX: ffffffff9afdfe78 RCX: ffffc90000007cfc [ 466.937447][ C0] RDX: 0000000000000000 RSI: ffffffff8ddf4c03 RDI: ffffffff9afdfe7c [ 466.937456][ C0] RBP: 0000000000000006 R08: 0000000000000001 R09: fffff52000000f98 [ 466.937464][ C0] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000001 [ 466.937472][ C0] R13: dffffc0000000000 R14: ffff88802e81d340 R15: 1ffff92000000fac [ 466.937482][ C0] FS: 00007feb730016c0(0000) GS:ffff888124752000(0000) knlGS:0000000000000000 [ 466.937496][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 466.937506][ C0] CR2: 000020000000b000 CR3: 000000003390d000 CR4: 00000000003526f0 [ 466.937514][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 466.937523][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 466.937531][ C0] Call Trace: [ 466.937538][ C0] [ 466.937545][ C0] _raw_spin_unlock_irqrestore+0x22/0x80 [ 466.937564][ C0] debug_object_deactivate+0x1ec/0x3a0 [ 466.937585][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 466.937606][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 466.937628][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 466.937645][ C0] __hrtimer_run_queues+0x46f/0xad0 [ 466.937664][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 466.937678][ C0] ? read_tsc+0x9/0x20 [ 466.937695][ C0] ? rcu_is_watching+0x12/0xc0 [ 466.937712][ C0] hrtimer_interrupt+0x397/0x8e0 [ 466.937732][ C0] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 466.937754][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 466.937772][ C0] [ 466.937777][ C0] [ 466.937782][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 466.937797][ C0] RIP: 0010:finish_task_switch.isra.0+0x22a/0xc10 [ 466.937815][ C0] Code: fb 09 00 00 44 8b 05 a9 60 1e 0f 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 a4 f6 ff ff e8 6f 13 3a 00 fb 65 48 8b 1d 5e 02 43 12 <48> 8d bb 18 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 466.937827][ C0] RSP: 0018:ffffc9001c56f880 EFLAGS: 00000202 [ 466.937838][ C0] RAX: 00000000000326ad RBX: ffff888037b0c880 RCX: 0000000000000006 [ 466.937846][ C0] RDX: 0000000000000000 RSI: ffffffff8de1a0c6 RDI: ffffffff8c157ca0 [ 466.937855][ C0] RBP: ffffc9001c56f8c8 R08: 0000000000000001 R09: 0000000000000001 [ 466.937863][ C0] R10: ffffffff90a80c57 R11: 0000000000000001 R12: ffff8880b843a2c0 [ 466.937871][ C0] R13: ffffffff8e297780 R14: 0000000000000001 R15: ffff8880b843b130 [ 466.937886][ C0] ? __switch_to+0x783/0x1170 [ 466.937901][ C0] __schedule+0x1172/0x5de0 [ 466.937920][ C0] ? lock_acquire+0x161/0x350 [ 466.937943][ C0] ? __pfx___schedule+0x10/0x10 [ 466.937958][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 466.937980][ C0] ? mark_held_locks+0x49/0x80 [ 466.937999][ C0] preempt_schedule_irq+0x51/0x90 [ 466.938016][ C0] irqentry_exit+0x36/0x90 [ 466.938033][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 466.938046][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x0/0x20 [ 466.938062][ C0] Code: 0c 24 89 f2 89 fe bf 05 00 00 00 e9 2a fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 0c 24 48 89 f2 48 89 fe bf 07 00 00 00 e9 f8 fd [ 466.938073][ C0] RSP: 0018:ffffc9001c56fb60 EFLAGS: 00000282 [ 466.938083][ C0] RAX: 0000000000080000 RBX: 2617397d06a171ee RCX: ffffc90004da3000 [ 466.938091][ C0] RDX: 0000000000080000 RSI: 2617397d06a171ee RDI: 000000003b9ac9ff [ 466.938100][ C0] RBP: fd596d419970d7e3 R08: 0000000000000007 R09: 000000003b9ac9ff [ 466.938108][ C0] R10: 2617397d423c3bee R11: 0000000000000001 R12: ffffc9001c56fbb0 [ 466.938116][ C0] R13: 1ffff920038adf72 R14: ffffc9001c56fbb8 R15: dffffc0000000000 [ 466.938131][ C0] set_normalized_timespec64+0x35/0xc0 [ 466.938150][ C0] inode_set_ctime_to_ts+0xca/0x1f0 [ 466.938170][ C0] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 466.938188][ C0] ? mark_held_locks+0x49/0x80 [ 466.938215][ C0] v9fs_stat2inode_dotl+0x6e1/0xd30 [ 466.938232][ C0] ? v9fs_init_inode+0x164/0x680 [ 466.938248][ C0] v9fs_inode_from_fid_dotl+0x249/0x2f0 [ 466.938267][ C0] v9fs_mount+0x4fd/0xa30 [ 466.938281][ C0] ? __pfx_v9fs_mount+0x10/0x10 [ 466.938296][ C0] ? cap_capable+0xb3/0x250 [ 466.938311][ C0] ? __pfx_v9fs_mount+0x10/0x10 [ 466.938325][ C0] legacy_get_tree+0x109/0x220 [ 466.938344][ C0] vfs_get_tree+0x8b/0x340 [ 466.938358][ C0] path_mount+0x1414/0x2020 [ 466.938379][ C0] ? kmem_cache_free+0x2d1/0x4d0 [ 466.938396][ C0] ? __pfx_path_mount+0x10/0x10 [ 466.938416][ C0] ? putname+0x154/0x1a0 [ 466.938436][ C0] __x64_sys_mount+0x28d/0x310 [ 466.938456][ C0] ? __pfx___x64_sys_mount+0x10/0x10 [ 466.938476][ C0] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 466.938494][ C0] do_syscall_64+0xcd/0x4c0 [ 466.938514][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.938528][ C0] RIP: 0033:0x7feb7218e929 [ 466.938539][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.938551][ C0] RSP: 002b:00007feb73001038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 466.938564][ C0] RAX: ffffffffffffffda RBX: 00007feb723b5fa0 RCX: 00007feb7218e929 [ 466.938572][ C0] RDX: 0000200000000b80 RSI: 0000200000000280 RDI: 0000000000000000 [ 466.938580][ C0] RBP: 00007feb72210b39 R08: 00002000000001c0 R09: 0000000000000000 [ 466.938589][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.938597][ C0] R13: 0000000000000000 R14: 00007feb723b5fa0 R15: 00007ffc2469a018 [ 466.938610][ C0] [ 466.939348][ C1] rcu: rcu_preempt kthread starved for 10290 jiffies! g32041 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 467.545992][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 467.555956][ C1] rcu: RCU grace-period kthread stack dump: [ 467.561829][ C1] task:rcu_preempt state:R running task stack:27784 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 467.575316][ C1] Call Trace: [ 467.578588][ C1] [ 467.581523][ C1] __schedule+0x116a/0x5de0 [ 467.586042][ C1] ? __lock_acquire+0x622/0x1c90 [ 467.590989][ C1] ? __pfx___schedule+0x10/0x10 [ 467.595845][ C1] ? find_held_lock+0x2b/0x80 [ 467.600526][ C1] ? schedule+0x2d7/0x3a0 [ 467.604856][ C1] schedule+0xe7/0x3a0 [ 467.608929][ C1] schedule_timeout+0x123/0x290 [ 467.613776][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 467.619145][ C1] ? __pfx_process_timeout+0x10/0x10 [ 467.624432][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 467.630237][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 467.635701][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 467.640469][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 467.645766][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 467.650712][ C1] ? rcu_is_watching+0x12/0xc0 [ 467.655474][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 467.661288][ C1] rcu_gp_kthread+0x270/0x380 [ 467.665971][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 467.671172][ C1] ? rcu_is_watching+0x12/0xc0 [ 467.675933][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 467.681135][ C1] ? __kthread_parkme+0x19e/0x250 [ 467.686163][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 467.691362][ C1] kthread+0x3c2/0x780 [ 467.695425][ C1] ? __pfx_kthread+0x10/0x10 [ 467.700009][ C1] ? rcu_is_watching+0x12/0xc0 [ 467.704769][ C1] ? __pfx_kthread+0x10/0x10 [ 467.709355][ C1] ret_from_fork+0x5d4/0x6f0 [ 467.713948][ C1] ? __pfx_kthread+0x10/0x10 [ 467.718533][ C1] ret_from_fork_asm+0x1a/0x30 [ 467.723307][ C1] [ 467.726320][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 467.732632][ C1] CPU: 1 UID: 0 PID: 5810 Comm: udevd Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 467.744164][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 467.754212][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0x20 [ 467.760970][ C1] Code: bf 03 00 00 00 e9 58 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <89> f2 89 fe bf 05 00 00 00 e9 2a fe ff ff 66 2e 0f 1f 84 00 00 00 [ 467.780572][ C1] RSP: 0000:ffffc90003bcf8c0 EFLAGS: 00000202 [ 467.786636][ C1] RAX: 0000000000000001 RBX: ffff8880b84421e0 RCX: ffffffff81b001cd [ 467.794601][ C1] RDX: ffff88802f504880 RSI: 0000000000000001 RDI: 0000000000000000 [ 467.802565][ C1] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 467.810535][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 467.818497][ C1] R13: 0000000000000003 R14: ffffed101708843d R15: ffff8880b853b580 [ 467.826464][ C1] FS: 00007f03e6b95880(0000) GS:ffff888124852000(0000) knlGS:0000000000000000 [ 467.835392][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 467.841971][ C1] CR2: 000056381d867fe8 CR3: 000000005bfcd000 CR4: 00000000003526f0 [ 467.849940][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 467.857905][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 467.865868][ C1] Call Trace: [ 467.869140][ C1] [ 467.872066][ C1] smp_call_function_many_cond+0xd9d/0x1510 [ 467.877958][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 467.883164][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 467.889495][ C1] ? lock_acquire+0x179/0x350 [ 467.894183][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 467.899376][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 467.904744][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 467.909858][ C1] flush_tlb_mm_range+0x4a0/0x1790 [ 467.914967][ C1] ? page_table_check_clear+0x362/0x740 [ 467.920529][ C1] ? __page_table_check_pte_clear+0xa9/0x100 [ 467.926515][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 467.932060][ C1] ? __pfx_pte_mkwrite+0x10/0x10 [ 467.936998][ C1] ptep_clear_flush+0x136/0x180 [ 467.941856][ C1] do_wp_page+0x1683/0x4f20 [ 467.946377][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 467.951234][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 467.956610][ C1] __handle_mm_fault+0x2223/0x5490 [ 467.961724][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 467.967178][ C1] ? lock_vma_under_rcu+0x47d/0x970 [ 467.972372][ C1] ? lock_vma_under_rcu+0x47d/0x970 [ 467.977601][ C1] handle_mm_fault+0x589/0xd10 [ 467.982363][ C1] ? __pkru_allows_pkey+0x41/0xb0 [ 467.987390][ C1] do_user_addr_fault+0x60c/0x1370 [ 467.992503][ C1] ? rcu_is_watching+0x12/0xc0 [ 467.997272][ C1] exc_page_fault+0x5c/0xb0 [ 468.001779][ C1] asm_exc_page_fault+0x26/0x30 [ 468.006622][ C1] RIP: 0033:0x7f03e64b5db7 [ 468.011033][ C1] Code: 00 00 00 41 55 48 89 d0 49 89 fd 41 54 49 89 f4 53 4c 89 c3 48 83 ec 10 48 39 4f 60 0f 84 c1 00 00 00 42 f6 44 01 08 01 74 59 <48> 83 61 08 fe 48 3d ff 03 00 00 76 69 49 8b 55 70 49 8d 75 60 48 [ 468.030632][ C1] RSP: 002b:00007ffff988e820 EFLAGS: 00010202 [ 468.036692][ C1] RAX: 0000000000006010 RBX: 00000000000001f0 RCX: 000056381d867fe0 [ 468.044655][ C1] RDX: 0000000000006010 RSI: 000056381d861fd0 RDI: 00007f03e65f1ac0 [ 468.052621][ C1] RBP: 00007f03e65f1ac0 R08: 00000000000001f0 R09: 0000000000000000 [ 468.060584][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000056381d861fd0 [ 468.068549][ C1] R13: 00007f03e65f1ac0 R14: 00000000000001f0 R15: 00007f03e65f1ac0 [ 468.076528][ C1]