last executing test programs: 3m33.427107771s ago: executing program 2 (id=842): r0 = socket(0x1d, 0xa, 0x6) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000f01000000000000", 0x20}], 0x1}, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) removexattr(0x0, &(0x7f0000000000)=@known='security.apparmor\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x448101, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000200)={0x8, 0xc6, 0xfffe0000, 0x40000009, 0x11, "7f04371e6367f3a18d000100000000000038f6"}) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000040)=0x1) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x200, 0x15, "00000000000700000000fffe00"}) r5 = syz_open_pts(r4, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000240)=0x1) fcntl$setlease(r3, 0x400, 0x1) fcntl$getflags(r3, 0x401) read$msr(r2, &(0x7f0000019300)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, 0x0, 0x2f) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r7, r6}) 3m32.147827123s ago: executing program 2 (id=847): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x7, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10, 0x800) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc140000001100010000000080000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r3}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x3, 0x4, 0x4, 0xa8, 0x0, r5, 0x0, '\x00', 0x0, r4, 0x0, 0x5}, 0x50) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) setxattr$security_selinux(&(0x7f0000000480)='./file0\x00', &(0x7f0000000380), &(0x7f0000000440)='system_u:object_r:apt_var_cache_t:s0\x00', 0x25, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m30.788419897s ago: executing program 2 (id=849): socket(0x1d, 0xa, 0x6) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000f01000000000000", 0x20}], 0x1}, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) removexattr(0x0, &(0x7f0000000000)=@known='security.apparmor\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x448101, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000200)={0x8, 0xc6, 0xfffe0000, 0x40000009, 0x11, "7f04371e6367f3a18d000100000000000038f6"}) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0x1) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x200, 0x15, "00000000000700000000fffe00"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x1) 3m30.57898312s ago: executing program 2 (id=851): socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004040)=@newtfilter={0x1354, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffff, 0xfff3}, {0x0, 0x5}, {0xb, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x1324, 0x2, [@TCA_BASIC_ACT={0x1320, 0x3, [@m_tunnel_key={0x108, 0x15, 0x0, 0x0, {{0xf}, {0x24, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x40}}]}, {0xb8, 0x6, "1dad4d4a7b5795b386b4653f40cf0f11f8876e8392939c03b04791a527ea6002cca8e98a68320c00dcf8f514b07749473cd544ccac3c1253775358a6f5f87a14c5455438f853445dd8a13e64c5157029ce5f67578375b3acca34309c123fc8b137460cc0aa85f8d948215a86f44d267a889cc1efd21c04c94d719f5f5b1d418373647b642bcd58e2ef5907a63569d1232c27c8745b6b47f6cbbfacc2b15ac68e5974f7deeeb56a81c08e07cd3a9842b11810d049"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0x1084, 0x18, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x26a1, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb6, 0x2, 0xffffffffffffffff, 0x3, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x192b, 0xa}}, @TCA_GACT_PARMS={0x18, 0x2, {0x40, 0x1, 0x4, 0x800, 0xb}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xf16, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_bpf={0x190, 0x19, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x401, 0xfc, 0x8, 0x4}, {0x1000, 0x8, 0x9, 0x2}, {0x1ff, 0x9, 0xf, 0xfffffffd}]}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0xe, 0x8, 0x7f, 0x5}, {0x1ff, 0x4, 0x8, 0x3}, {0xf692, 0xfa, 0xd5}]}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0xa, 0x9, 0x6, 0xa1b}, {0x6, 0x3c, 0x5, 0xff}, {0x3, 0x6, 0x4, 0x80}, {0x9, 0x1, 0xe, 0xe26c}]}]}, {0xfc, 0x6, "b2e9725847e22290a86c9f23353bc4f95e8f8f2217e0afe7ec55cefd8d5b862ce921930b5610a877fde65544ee37f43b6a1a9eeffebe19d3186930fb75f122111a1422681b62d3c6533324a8d3d01c0b9d37e2cd96203ba020fd39419df51825a2721836cbdef580e2965f7f85f066d1f754eefb744b637d615d98e01ecc3e221aa57a1dde7facc882493e2d1ef2ba53206d9b489cc9a1217c04ea6b8846be0929d9ec1c8154469d342b0252715c27063c28d4b56be96d7c1c163ab79db41359e7dc9512a1565549faa33dcf43875014fde5682766790080a293a87d8a84f113193e26a86707d990f1f67fd714699ff2f922d437c249e016"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x1354}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_IOC_READY(r4, 0x541b, 0x20000000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r5, 0xc008aec1, &(0x7f0000000380)={0x5, 0x0, [{0x80000007, 0x8, 0x7, 0x8, 0x4256, 0xc3, 0x1}, {0x4, 0x6, 0x6, 0x700000, 0x110, 0xffffffff, 0x1ff}, {0x6, 0x56454c21, 0x2, 0x800009, 0x81, 0x9, 0x8003}, {0x6, 0x0, 0x6, 0xe, 0x200040, 0x71f, 0x3cc3}, {0x40000001, 0x5, 0x0, 0xecb6, 0x3, 0x9, 0x3ff}]}) syz_io_uring_setup(0x11ca, &(0x7f0000000300)={0x0, 0xe1d6, 0xfc5e9f2fe3969a4d, 0x0, 0x142}, 0x0, 0x0, &(0x7f00000000c0)=0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x0, 0x190, 0x260, 0x420, 0x260, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0x0, 0xffffff00], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r8, 0x6, 0x1f, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000480)={0x0, @isdn={0x22, 0x10, 0x2, 0x2, 0x59}, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x10000000}, @nl=@kern={0x10, 0x0, 0x0, 0x100000}, 0xe2, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)='veth1\x00', 0x1, 0x4, 0x81}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad956", 0xa2}], 0x1, 0x0, 0x0, 0x7400}, 0x4) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') getpid() r9 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r9, 0x29, 0x39, &(0x7f0000000140)=ANY=[], 0x18) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYRES16=r6, @ANYRES64=r1], 0x0) 3m26.755975045s ago: executing program 2 (id=860): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7fffffffffd, 0x5, &(0x7f0000006680)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r0, &(0x7f00000003c0), 0x100000000000022d) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000002060102000000000000000000000000090002"], 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff01"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8080) r2 = open$dir(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x40000000, 0x5c}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000001c0)="5c00000012006bab9a3ff36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb00000000", 0x40}, {&(0x7f0000000380)="1ed68483068e7e7b115365cde0c05b774875", 0x12}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000"], 0x34c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r10 = syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0xaa6, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x2}}}, &(0x7f0000000300)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r12 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r12, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r13 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r10, 0x2) syz_ublk_setup_queues(r13, r11, &(0x7f0000000700), &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000}}, {}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20, 0x0, 0x0, 0x3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x3}}], 0x1, &(0x7f00000003c0)={0x2e, 0x0, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, 0x0) 3m25.80363486s ago: executing program 2 (id=865): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x12}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r4 = io_uring_setup(0x15c0, &(0x7f00000000c0)={0x0, 0x5e7, 0x10000, 0x2, 0x158}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000040)={0x100, 0xffffffffffffffff, 0x0, {0xc5, 0xfc}, 0x4}, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x31) 3m10.130967338s ago: executing program 32 (id=865): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x12}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r4 = io_uring_setup(0x15c0, &(0x7f00000000c0)={0x0, 0x5e7, 0x10000, 0x2, 0x158}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000040)={0x100, 0xffffffffffffffff, 0x0, {0xc5, 0xfc}, 0x4}, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x31) 16.235327067s ago: executing program 3 (id=2078): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 15.228416195s ago: executing program 3 (id=2085): r0 = getpid() prlimit64(r0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) poll(0x0, 0x0, 0x4) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$packet_int(r2, 0x107, 0x7, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x2, 0x0, 0x3, 0xf, 0x60, 0x6}, &(0x7f0000000040)=0x20) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 13.967889629s ago: executing program 0 (id=2091): r0 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x282800, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)) read$dsp(r3, &(0x7f0000000280)=""/79, 0x4f) 12.343777732s ago: executing program 0 (id=2094): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="000304"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.910877507s ago: executing program 3 (id=2098): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() syz_open_dev$ublk_chdev(0x0, 0x0, 0x200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a3000000000b4000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d24001280200001800e000100636f6e6e6c696d69740000000c00028008000140000000010c0009800800014000008f"], 0xfc}}, 0x0) 11.544103515s ago: executing program 1 (id=2099): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x2000c844) socket$nl_generic(0x10, 0x3, 0x10) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x20d}, 0x20) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000440)='.dead\x00', &(0x7f0000000480)=@chain) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x3d0, 0xffffffff, 0x250, 0x1b8, 0x250, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @multicast2, 0x0, 0x0, 'geneve0\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x190, 0x1b8, 0x0, {0x100000000000000}, [@common=@inet=@recent0={{0xf8}, {0xd06, 0x2, 0x2, 0x0, 'syz0\x00', 0x4}}, @common=@unspec=@cgroup0={{0x28}, {0x7, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0xff}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x6b7, 0x500, 0x1}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) close(0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r7, 0x400, 0x1) fcntl$getflags(r7, 0x401) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x8010, 0xffffffffffffffff, 0xd0684000) 10.577967705s ago: executing program 1 (id=2102): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x595d, 0x1000, 0x20002, 0x1000051, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x259a}, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r6, 0x2) accept4(r6, 0x0, 0x0, 0x80800) 8.644016375s ago: executing program 5 (id=2107): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x100, 0x7, 0x80, 0x0, r0, 0x6, '\x00', 0x0, r1, 0x3, 0x3, 0x5, 0x6}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') read$FUSE(r5, &(0x7f0000003480)={0x2020}, 0x2020) 8.643097881s ago: executing program 1 (id=2108): fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000000e00)=[{0xdab4, 0x0, 0x0}], 0x1) unshare(0x24020400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$evdev(&(0x7f0000000a40), 0x5, 0xc01) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001010000df7f0000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) 8.627824655s ago: executing program 3 (id=2109): creat(&(0x7f00000002c0)='./file0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40400d4) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) getsockopt$llc_int(r3, 0x10c, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) 8.387943465s ago: executing program 4 (id=2110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = fsopen(&(0x7f00000000c0)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='dax\x00', &(0x7f0000000140)='\x00\x00\x00\x00\x00', 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001840), 0x3b, 0x0) 7.898679467s ago: executing program 1 (id=2111): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000140)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r3, &(0x7f00000000c0)='2\x00', 0x2) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x4, 0x0, 0x0, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket(0x1e, 0x3, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) 7.66265381s ago: executing program 5 (id=2112): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40}) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000080)) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x81c0, 0x0) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0x60c140, 0x5b, 0x20}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)={0x24, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x40) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) getsockopt(r0, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETLED(r6, 0x4b31, 0xffffffffffffffff) 7.079945666s ago: executing program 0 (id=2113): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x40a8, 0x4) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 7.009576564s ago: executing program 4 (id=2114): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)='X', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x0, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0x100000b, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0x1, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x4007, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xf, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0x3, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x4, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1006, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8005, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x1003, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x1, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x0, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.265536319s ago: executing program 5 (id=2115): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) 5.233111102s ago: executing program 5 (id=2116): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='2', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='2', 0x1) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000940)='dummy_udc.0', 0xb) 5.191257235s ago: executing program 0 (id=2117): r0 = openat$comedi(0xffffff9c, &(0x7f00000000c0)='/dev/comedi4\x00', 0x2c83, 0x0) ioctl$COMEDI_LOCK(r0, 0x6405) socket$netlink(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) ioctl$COMEDI_UNLOCK(r0, 0x6406) 4.808393776s ago: executing program 4 (id=2118): socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) 4.36115671s ago: executing program 3 (id=2119): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x8, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a900)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x856}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008000}, 0x44040) sendmsg$nl_generic(r3, 0x0, 0xc000) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000009c0)={0x0, 0x2e, 0xfff9}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 3.996640769s ago: executing program 0 (id=2120): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000180)={0x400, 0x2, 0x2, 0x0, 0xfe}) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405668, &(0x7f0000000100)={0x0, 0x1, 0x2, 0x800}) close(r4) 3.606036097s ago: executing program 4 (id=2121): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) r2 = mmap$IORING_OFF_CQ_RING(0x0, 0x3000, 0x2000003, 0x12, r1, 0x8000000) r3 = syz_io_uring_setup(0xf00, &(0x7f00000005c0)={0x0, 0x595f, 0x10000, 0x0, 0x800004f, 0x0, r1}, 0x0, 0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r3, 0x0, 0x0, r4, 0x0, 0x0) clock_gettime(0xfffffffffffffffe, 0x0) syz_io_uring_complete(0x0, r2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r2, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0xc3c, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x18}}}, &(0x7f0000000300)=0x0) r7 = dup(r5) syz_ublk_setup_queues(r7, r6, &(0x7f0000000640)={0x0, 0xd, 0x0, 0xfffffffe, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x4, 0x1000000, 0x10000004, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x1000, 0x0, 0x6c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa0e7, 0x2, 0x1, 0x400001ec}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x8000001, 0xffffffff}}], 0x1, 0x0, 0x0) 3.074241637s ago: executing program 4 (id=2122): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000020000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 2.898499295s ago: executing program 1 (id=2123): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 2.856798286s ago: executing program 3 (id=2124): r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000240)) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2d, 0x25dfdbff, {{{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x8}, {@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x6c}, @in=@broadcast, {0x0, 0x0, 0x1, 0x0, 0x88c}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2}}, 0x0, 0x7fff}}, 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.856311808s ago: executing program 0 (id=2125): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x12}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r4 = io_uring_setup(0x15c0, &(0x7f00000000c0)={0x0, 0x5e7, 0x10000, 0x2, 0x158}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000040)={0x100, 0xffffffffffffffff, 0x0, {0xc5, 0xfc}, 0x4}, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x31) 2.788164768s ago: executing program 4 (id=2126): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "dbdd9ede7e2313a7a23925f03dbbcf5cde982cab6b38bf7b463ae5f42c35dd1d", "6a7710ebcf55344ae76b375fa62e3502b74659d7dbde072d61b6238412ad5f1a0a4f358515e45cea781c9e9b26806f68", "dd72b3bd460f4ebd662f8cd823dfd0d963970deffa6dd57d8176d2b5", {"4e3bc06c34c945e45e27e747494b407f", "256d9ddc3e6e1f7c5f7b4c5e69c1dd72"}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000940)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r5, &(0x7f0000000180)="cf", 0x1) sendfile(r4, r5, &(0x7f0000000000), 0xfffb) fcntl$addseals(r5, 0x409, 0x8) r6 = eventfd2(0xc, 0x800) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x6, r5, 0x0, 0x0, 0x6, 0x0, 0x1, r6}]) 2.770464067s ago: executing program 5 (id=2127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000ae8ff030900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001000000"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c0001800600010058"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) close(0x3) 685.698048ms ago: executing program 1 (id=2128): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x2000c844) socket$nl_generic(0x10, 0x3, 0x10) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x20d}, 0x20) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000440)='.dead\x00', 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x3d0, 0xffffffff, 0x250, 0x1b8, 0x250, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @multicast2, 0x0, 0x0, 'geneve0\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x190, 0x1b8, 0x0, {0x100000000000000}, [@common=@inet=@recent0={{0xf8}, {0xd06, 0x2, 0x2, 0x0, 'syz0\x00', 0x4}}, @common=@unspec=@cgroup0={{0x28}, {0x7, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0xff}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x6b7, 0x500, 0x1}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) close(0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r7, 0x400, 0x1) fcntl$getflags(r7, 0x401) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x8010, 0xffffffffffffffff, 0xd0684000) 0s ago: executing program 5 (id=2129): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4c850) sendmsg$nl_route_sched(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bf27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xc}, {0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x8000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000680001ed020000000000008000000000000000000c000200010000000600000008"], 0x2c}}, 0x4000) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) kernel console output (not intermixed with test programs): sive=1 [ 458.622716][ T9382] random: crng reseeded on system resumption [ 458.759607][ T29] audit: type=1400 audit(1785159592.397:696): avc: denied { ioctl } for pid=9380 comm="syz.0.797" path="socket:[22635]" dev="sockfs" ino=22635 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 459.455984][ T29] audit: type=1400 audit(1785159593.095:697): avc: denied { write } for pid=9344 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.651625][ T29] audit: type=1400 audit(1785159593.295:698): avc: denied { write } for pid=9400 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 461.241173][ T9416] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 462.105846][ T9430] hpfs: Bad magic ... probably not HPFS [ 462.121838][ T9430] hpfs: Bad magic ... probably not HPFS [ 463.415430][ T9437] block device autoloading is deprecated and will be removed. [ 464.129636][ T9443] SET target dimension over the limit! [ 464.137741][ T9443] netlink: 52 bytes leftover after parsing attributes in process `syz.4.798'. [ 464.146673][ T9443] netlink: 52 bytes leftover after parsing attributes in process `syz.4.798'. [ 464.155564][ T9443] netlink: 52 bytes leftover after parsing attributes in process `syz.4.798'. [ 464.683234][ T29] audit: type=1400 audit(1785159598.316:699): avc: denied { mount } for pid=9450 comm="syz.4.801" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 464.745613][ T9451] overlayfs: failed to clone lowerpath [ 465.129026][ T9461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.802'. [ 467.752558][ T29] audit: type=1400 audit(1785159601.371:700): avc: denied { set_context_mgr } for pid=9481 comm="syz.2.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 467.818633][ T9488] NILFS (nullb0): couldn't find nilfs on the device [ 468.178939][ T29] audit: type=1400 audit(1785159601.391:701): avc: denied { map } for pid=9481 comm="syz.2.809" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 468.235738][ T29] audit: type=1400 audit(1785159601.870:702): avc: denied { call } for pid=9481 comm="syz.2.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 468.365048][ T9479] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 468.383163][ T9486] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 468.445143][ T5729] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 468.840192][ T9499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.261062][ T5729] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 469.285336][ T5729] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 469.315104][ T5729] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 469.333147][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.353571][ T5729] usb 4-1: Product: syz [ 469.366280][ T5729] usb 4-1: Manufacturer: syz [ 469.376335][ T5729] usb 4-1: SerialNumber: syz [ 469.398317][ T5729] usb 4-1: config 0 descriptor?? [ 469.593962][ T9504] bridge_slave_1: left allmulticast mode [ 469.599994][ T9504] bridge_slave_1: left promiscuous mode [ 469.606263][ T9504] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.713069][ T9504] bridge_slave_0: left allmulticast mode [ 469.719485][ T9504] bridge_slave_0: left promiscuous mode [ 469.730232][ T9504] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.978268][ T5729] mos7840 4-1:0.0: required endpoints missing [ 471.021801][ T5729] usb 4-1: USB disconnect, device number 7 [ 471.160948][ T9508] netlink: 28 bytes leftover after parsing attributes in process `syz.0.815'. [ 471.170526][ T9519] netlink: 'syz.3.818': attribute type 9 has an invalid length. [ 471.176903][ T9508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.815'. [ 471.188455][ T9508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.815'. [ 472.301635][ T9535] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 472.599414][ T9542] bridge0: entered promiscuous mode [ 472.614920][ T9542] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 473.389063][ T9543] lo speed is unknown, defaulting to 1000 [ 473.394867][ T9543] lo speed is unknown, defaulting to 1000 [ 473.401229][ T9543] lo speed is unknown, defaulting to 1000 [ 473.407778][ T9543] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 473.421993][ T9543] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 473.439415][ T9543] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 473.490515][ T9543] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 473.610257][ T9543] lo speed is unknown, defaulting to 1000 [ 473.617508][ T9543] lo speed is unknown, defaulting to 1000 [ 473.628453][ T9543] lo speed is unknown, defaulting to 1000 [ 473.634975][ T9543] lo speed is unknown, defaulting to 1000 [ 473.641909][ T9543] lo speed is unknown, defaulting to 1000 [ 473.877928][ T9551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.645059][ T9551] bridge5: entered promiscuous mode [ 474.653045][ T9551] bridge5: entered allmulticast mode [ 475.107007][ T9560] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 475.129047][ T9562] bridge_slave_1: left allmulticast mode [ 475.146444][ T9562] bridge_slave_1: left promiscuous mode [ 475.162948][ T9562] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.180375][ T5842] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 475.202010][ T9562] bridge_slave_0: left allmulticast mode [ 475.214614][ T9562] bridge_slave_0: left promiscuous mode [ 475.325021][ T9562] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.512556][ T29] audit: type=1400 audit(1785159609.069:703): avc: denied { nlmsg_read } for pid=9564 comm="syz.1.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 475.768764][ T5842] usb 4-1: Using ep0 maxpacket: 8 [ 475.780785][ T5609] Bluetooth: hci5: command 0x1003 tx timeout [ 475.789920][ T5619] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 475.887025][ T5842] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 475.910924][ T5842] usb 4-1: config 179 has no interface number 0 [ 475.917260][ T5842] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 475.928866][ T5842] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 475.940555][ T5842] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 475.953714][ T5842] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 475.977460][ T5842] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 475.992186][ T5842] usb 4-1: config 179 interface 65 has no altsetting 0 [ 475.999742][ T5842] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 476.009027][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.228766][ T5842] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input13 [ 476.378122][ T29] audit: type=1400 audit(1785159609.977:704): avc: denied { read } for pid=4962 comm="acpid" name="js0" dev="devtmpfs" ino=2854 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 476.459292][ T29] audit: type=1400 audit(1785159609.997:705): avc: denied { open } for pid=4962 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2854 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 476.483589][ T4962] input input13: unable to receive magic message: -110 [ 476.514679][ T4962] input input13: unable to receive magic message: -32 [ 476.646215][ T29] audit: type=1400 audit(1785159610.127:706): avc: denied { ioctl } for pid=4962 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2854 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 476.707480][ T4962] input input13: unable to receive magic message: -32 [ 477.390749][ T4962] input input13: unable to receive magic message: -32 [ 477.600218][ T4962] input input13: unable to receive magic message: -32 [ 477.631790][ T9586] netlink: 4664 bytes leftover after parsing attributes in process `syz.1.835'. [ 477.655479][ T29] audit: type=1400 audit(1785159611.276:707): avc: denied { listen } for pid=9585 comm="syz.1.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 477.714189][ T29] audit: type=1326 audit(1785159611.306:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9585 comm="syz.1.835" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4a7019de99 code=0x0 [ 477.998385][ T4962] input input13: unable to receive magic message: -32 [ 478.007971][ T4962] input input13: unable to receive magic message: -32 [ 478.020697][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 478.038747][ T5707] usb 4-1: USB disconnect, device number 8 [ 478.143378][ T9600] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9600 comm=syz.2.836 [ 479.292346][ T9604] IPVS: Scheduler module ip_vs_ not found [ 479.786901][ T5729] libceph: connect (1)[c::]:6789 error -101 [ 479.797861][ T5729] libceph: mon0 (1)[c::]:6789 connect error [ 479.903348][ T9622] ceph: No mds server is up or the cluster is laggy [ 480.479420][ T29] audit: type=1400 audit(1785159614.092:709): avc: denied { write } for pid=9633 comm="syz.4.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 480.544046][ T5619] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 481.280765][ T9642] bridge0: entered promiscuous mode [ 481.296655][ T9642] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 481.336300][ T62] Bluetooth: hci5: Frame reassembly failed (-84) [ 482.052093][ T9649] netlink: 'syz.3.848': attribute type 1 has an invalid length. [ 482.059896][ T9649] netlink: 224 bytes leftover after parsing attributes in process `syz.3.848'. [ 482.207428][ T29] audit: type=1400 audit(1785159615.749:710): avc: denied { mount } for pid=9644 comm="syz.3.848" name="/" dev="rpc_pipefs" ino=22327 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 482.581250][ T9664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.852'. [ 483.487571][ T5609] Bluetooth: hci5: command 0x1003 tx timeout [ 483.496325][ T5619] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 483.529026][ T9665] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 484.522664][ T9681] xt_hashlimit: size too large, truncated to 1048576 [ 485.283503][ T29] audit: type=1400 audit(1785159618.816:711): avc: denied { connect } for pid=9676 comm="syz.0.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 485.660642][ T29] audit: type=1400 audit(1785159619.265:712): avc: denied { read } for pid=9695 comm="syz.1.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 485.796029][ T29] audit: type=1400 audit(1785159619.405:713): avc: denied { read } for pid=9699 comm="syz.4.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 485.879492][ T29] audit: type=1400 audit(1785159619.485:714): avc: denied { setcurrent } for pid=9704 comm="syz.2.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 485.903106][ T9706] netlink: 'syz.2.860': attribute type 2 has an invalid length. [ 485.924541][ T9706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.860'. [ 485.992603][ T29] audit: type=1400 audit(1785159619.595:715): avc: denied { name_bind } for pid=9701 comm="syz.1.859" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 486.015835][ T9709] netlink: 'syz.2.860': attribute type 29 has an invalid length. [ 486.026645][ T9709] netlink: 772 bytes leftover after parsing attributes in process `syz.2.860'. [ 486.038362][ T29] audit: type=1400 audit(1785159619.644:716): avc: denied { cmd } for pid=9704 comm="syz.2.860" path="/dev/ublk-control" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 486.064868][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 486.225881][ T24] usb 1-1: config 0 has no interfaces? [ 486.234671][ T29] audit: type=1400 audit(1785159619.834:717): avc: denied { map } for pid=9704 comm="syz.2.860" path="/dev/ublkc0" dev="devtmpfs" ino=2863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 486.259249][ T24] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 486.278287][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.323924][ T24] usb 1-1: config 0 descriptor?? [ 486.553735][ T29] audit: type=1400 audit(1785159620.154:718): avc: denied { setopt } for pid=9714 comm="syz.3.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 486.732144][ T5722] usb 1-1: USB disconnect, device number 7 [ 487.651024][ T29] audit: type=1400 audit(1785159621.253:719): avc: denied { shutdown } for pid=9714 comm="syz.3.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 487.698721][ T29] audit: type=1400 audit(1785159621.282:720): avc: denied { listen } for pid=9714 comm="syz.3.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 488.021197][ T9735] blktrace: Concurrent blktraces are not allowed on loop8 [ 488.044874][ T29] audit: type=1400 audit(1785159621.602:721): avc: denied { create } for pid=9727 comm="syz.4.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 488.460353][ T9730] bridge3: entered promiscuous mode [ 488.791079][ T29] audit: type=1400 audit(1785159622.391:722): avc: denied { write } for pid=9739 comm="syz.3.869" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 488.829944][ T9730] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 488.853889][ T9740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.869'. [ 489.691035][ T29] audit: type=1400 audit(1785159622.781:723): avc: denied { accept } for pid=9743 comm="syz.1.871" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 489.929989][ T136] Bluetooth: hci5: Frame reassembly failed (-84) [ 490.277637][ T9731] Process accounting resumed [ 490.970215][ T5609] Bluetooth: hci5: command 0x1003 tx timeout [ 490.997490][ T5619] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 495.004900][ T9786] netlink: 'syz.3.876': attribute type 1 has an invalid length. [ 495.012672][ T9786] netlink: 224 bytes leftover after parsing attributes in process `syz.3.876'. [ 495.171517][ T29] audit: type=1326 audit(1785159628.734:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.4.877" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6719de99 code=0x7ffc0000 [ 495.615230][ T29] audit: type=1326 audit(1785159628.734:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.4.877" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6719de99 code=0x7ffc0000 [ 495.661773][ T29] audit: type=1326 audit(1785159628.734:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.4.877" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f0d6719de99 code=0x7ffc0000 [ 495.688683][ T29] audit: type=1326 audit(1785159628.734:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.4.877" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6719de99 code=0x7ffc0000 [ 495.777505][ T29] audit: type=1326 audit(1785159628.734:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.4.877" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6719de99 code=0x7ffc0000 [ 495.872993][ T29] audit: type=1326 audit(1785159628.734:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.4.877" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0d6719de99 code=0x7ffc0000 [ 496.011821][ T29] audit: type=1326 audit(1785159628.734:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.4.877" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6719de99 code=0x7ffc0000 [ 496.065535][ T29] audit: type=1326 audit(1785159628.734:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.4.877" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6719de99 code=0x7ffc0000 [ 496.128903][ T29] audit: type=1326 audit(1785159628.734:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.4.877" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0d6719de99 code=0x7ffc0000 [ 496.191547][ T29] audit: type=1326 audit(1785159628.734:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.4.877" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6719de99 code=0x7ffc0000 [ 498.627455][ T9812] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 498.639247][ T9812] overlayfs: failed to clone lowerpath [ 498.939047][ T9817] xt_CT: You must specify a L4 protocol and not use inversions on it [ 498.971182][ T9817] overlayfs: failed to clone upperpath [ 499.929763][ T24] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 500.112144][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 501.167235][ T24] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 501.178844][ T24] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.189705][ T24] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 501.556446][ T9833] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 501.661672][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 501.669299][ T24] usb 4-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 501.680518][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.691521][ T24] usb 4-1: config 0 descriptor?? [ 501.822810][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.916668][ T24] usb 4-1: can't set config #0, error -71 [ 501.930324][ T24] usb 4-1: USB disconnect, device number 9 [ 502.044520][ T9848] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 502.811274][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 502.811311][ T29] audit: type=1400 audit(1785159636.396:748): avc: denied { setopt } for pid=9852 comm="syz.3.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 503.287425][ T9859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36162 sclass=netlink_route_socket pid=9859 comm=syz.0.892 [ 503.426077][ T9862] netlink: 'syz.0.892': attribute type 10 has an invalid length. [ 503.434076][ T9862] netlink: 40 bytes leftover after parsing attributes in process `syz.0.892'. [ 503.448204][ T9862] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 504.540215][ T29] audit: type=1400 audit(1785159638.125:749): avc: denied { ioctl } for pid=9866 comm="syz.1.895" path="socket:[23849]" dev="sockfs" ino=23849 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 504.674624][ T5609] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 504.694507][ T5609] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 504.708610][ T5609] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 504.725041][ T5609] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 504.739310][ T5609] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 504.906177][ T9877] xt_hashlimit: size too large, truncated to 1048576 [ 505.579561][ T9882] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 505.600186][ T9882] overlayfs: failed to set xattr on upper [ 505.612677][ T9882] overlayfs: ...falling back to redirect_dir=nofollow. [ 505.641882][ T29] audit: type=1400 audit(1785159639.224:750): avc: denied { shutdown } for pid=9879 comm="syz.3.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 505.675021][ T9885] nfs: Bad value for 'source' [ 505.684104][ T9882] overlayfs: ...falling back to index=off. [ 505.709242][ T9882] overlayfs: ...falling back to uuid=null. [ 505.777903][ T29] audit: type=1326 audit(1785159639.334:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9879 comm="syz.3.899" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faab059de99 code=0x0 [ 506.033257][ T9863] lo speed is unknown, defaulting to 1000 [ 507.163047][ T5609] Bluetooth: hci6: command tx timeout [ 507.642621][ T9909] hpfs: Bad magic ... probably not HPFS [ 507.658605][ T9909] hpfs: Bad magic ... probably not HPFS [ 509.229990][ T5609] Bluetooth: hci6: command tx timeout [ 509.345120][ T9863] lo speed is unknown, defaulting to 1000 [ 509.369100][ T9924] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 509.491921][ T9929] pim6reg: entered allmulticast mode [ 509.717568][ T9933] pim6reg: left allmulticast mode [ 510.219575][ T9929] ./file0: Can't open blockdev [ 511.272223][ T5609] Bluetooth: hci6: command tx timeout [ 511.918563][ T9863] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.926924][ T9863] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.935879][ T9863] bridge_slave_0: entered allmulticast mode [ 511.944285][ T9863] bridge_slave_0: entered promiscuous mode [ 511.958253][ T9863] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.965793][ T9863] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.973809][ T9863] bridge_slave_1: entered allmulticast mode [ 512.030082][ T9863] bridge_slave_1: entered promiscuous mode [ 512.865533][ T29] audit: type=1400 audit(1785159646.447:752): avc: denied { name_bind } for pid=9956 comm="syz.0.911" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 512.973518][ T9863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.989784][ T9968] sch_tbf: burst 127 is lower than device batadv_slave_0 mtu (1514) ! [ 512.994507][ T9863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.234822][ T9863] team0: Port device team_slave_0 added [ 513.239441][ T9863] team0: Port device team_slave_1 added [ 513.681185][ T5609] Bluetooth: hci6: command tx timeout [ 513.721486][ T9863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.721502][ T9863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.721524][ T9863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.734688][ T9863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.734706][ T9863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.734729][ T9863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.836805][ T9863] hsr_slave_0: entered promiscuous mode [ 514.443880][ T9863] hsr_slave_1: entered promiscuous mode [ 514.463348][ T9863] debugfs: 'hsr0' already exists in 'hsr' [ 514.486051][ T9863] Cannot create hsr debugfs directory [ 514.987033][ T5842] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 515.189163][ T5842] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.219924][ T5842] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 515.240097][ T5842] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 515.276736][ T5842] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 515.289773][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.307346][ T5842] usb 4-1: Product: syz [ 515.316097][ T9863] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 515.322849][ T5842] usb 4-1: Manufacturer: syz [ 515.328654][ T5842] usb 4-1: SerialNumber: syz [ 515.338135][ T9863] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 515.353736][ T5842] usb-storage 4-1:1.0: USB Mass Storage device detected [ 515.361528][ T9863] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 515.385236][ T5842] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 515.395906][ T9863] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 515.403870][ T5842] scsi host1: usb-storage 4-1:1.0 [ 515.413788][ T9863] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 515.448351][ T9863] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 515.461092][ T9863] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 515.474788][ T9863] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 515.647374][ T9] usb 4-1: USB disconnect, device number 10 [ 516.177323][T10007] bridge0: port 1(erspan0) entered disabled state [ 516.378223][T10007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.630521][T10007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.817515][T10007] bridge0: left promiscuous mode [ 516.825712][T10007] bridge1: left promiscuous mode [ 516.833281][T10007] bridge2: left promiscuous mode [ 516.840829][T10007] bridge3: left promiscuous mode [ 516.850171][T10007] bridge4: left promiscuous mode [ 516.968280][ T547] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.053783][ T547] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.077528][ T29] audit: type=1400 audit(1785159650.644:753): avc: denied { map } for pid=10016 comm="syz.3.925" path="socket:[24432]" dev="sockfs" ino=24432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 517.107269][ T547] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.116655][ T547] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.206198][ T9863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.354115][ T9863] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.362364][T10030] netlink: zone id is out of range [ 517.377663][T10030] netlink: zone id is out of range [ 517.389933][T10030] netlink: zone id is out of range [ 517.401355][T10030] netlink: zone id is out of range [ 517.413079][T10030] netlink: zone id is out of range [ 517.425476][T10030] netlink: zone id is out of range [ 517.438331][T10030] netlink: zone id is out of range [ 517.449724][T10030] netlink: zone id is out of range [ 517.450925][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.461992][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.489059][T10030] netlink: zone id is out of range [ 517.524702][T10030] netlink: zone id is out of range [ 517.529052][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.537983][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.365794][ T5842] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 518.576012][ T5842] usb 1-1: Using ep0 maxpacket: 16 [ 518.599513][ T5842] usb 1-1: unable to get BOS descriptor or descriptor too short [ 518.632814][ T5842] usb 1-1: config 4 has an invalid interface number: 55 but max is 0 [ 518.658549][ T5842] usb 1-1: config 4 has no interface number 0 [ 518.671432][ T5842] usb 1-1: config 4 interface 55 has no altsetting 0 [ 518.694732][ T5842] usb 1-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=2f.cb [ 518.710565][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.734015][ T5842] usb 1-1: Product: syz [ 518.744243][ T5842] usb 1-1: Manufacturer: syz [ 518.755953][ T5842] usb 1-1: SerialNumber: syz [ 518.813968][T10055] pim6reg: entered allmulticast mode [ 519.012774][ T9863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.047394][ T5842] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 519.074540][ T5842] gspca_mr97310a: reg write [21] error -22 [ 519.085901][ T5842] mr97310a 1-1:4.55: probe with driver mr97310a failed with error -22 [ 519.108428][ T5842] usb 1-1: USB disconnect, device number 8 [ 519.185394][T10067] netlink: 12 bytes leftover after parsing attributes in process `syz.4.939'. [ 519.350949][ T29] audit: type=1400 audit(1785159652.922:754): avc: denied { ioctl } for pid=10073 comm="syz.4.941" path="socket:[24571]" dev="sockfs" ino=24571 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 519.433128][ T9863] veth0_vlan: entered promiscuous mode [ 519.455346][ T9863] veth1_vlan: entered promiscuous mode [ 519.484193][ T9863] veth0_macvtap: entered promiscuous mode [ 519.494881][ T9863] veth1_macvtap: entered promiscuous mode [ 519.515359][ T9863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.527781][ T9863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.590569][ T1174] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.288147][ T1174] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.311019][T10085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.945'. [ 520.371718][T10078] infiniband syz2: set active [ 520.376436][T10078] infiniband syz2: added team_slave_1 [ 520.383318][T10078] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 520.386327][T10078] infiniband syz2: Couldn't open port 1 [ 520.400750][T10078] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 520.415832][T10078] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 520.432976][T10078] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 520.453176][T10078] RDS/IB: syz2: added [ 520.457858][T10078] smc: adding ib device syz2 with port count 1 [ 520.464021][T10078] smc: ib device syz2 port 1 has no pnetid [ 520.491942][ T1174] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.504461][ T1174] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.186437][ T1051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.237870][ T1051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.319264][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.350877][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.381623][ T29] audit: type=1400 audit(1785159654.951:755): avc: denied { mounton } for pid=9863 comm="syz-executor" path="/root/syzkaller.MYGJ48/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 521.425829][ T29] audit: type=1400 audit(1785159654.981:756): avc: denied { mounton } for pid=9863 comm="syz-executor" path="/root/syzkaller.MYGJ48/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 521.457641][ T29] audit: type=1400 audit(1785159654.991:757): avc: denied { mounton } for pid=9863 comm="syz-executor" path="/root/syzkaller.MYGJ48/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=25744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 521.578596][ T29] audit: type=1400 audit(1785159655.061:758): avc: denied { mounton } for pid=9863 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 523.540738][T10136] net_ratelimit: 611 callbacks suppressed [ 523.540759][T10136] netlink: get zone limit has 4 unknown bytes [ 523.814642][ T29] audit: type=1400 audit(1785159657.389:759): avc: denied { ioctl } for pid=10157 comm="syz.4.970" path="socket:[25835]" dev="sockfs" ino=25835 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 523.853127][ T5714] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 524.059577][ T5714] usb 4-1: Using ep0 maxpacket: 8 [ 524.071940][ T5714] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 524.080571][ T5714] usb 4-1: config 0 has no interface number 0 [ 524.090472][ T5714] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 524.099733][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.108363][ T5714] usb 4-1: Product: syz [ 524.112907][ T5714] usb 4-1: Manufacturer: syz [ 524.144204][ T5714] usb 4-1: SerialNumber: syz [ 524.368183][ T5714] usb 4-1: config 0 descriptor?? [ 524.638385][ T5714] uvcvideo 4-1:0.31: probe with driver uvcvideo failed with error -22 [ 524.723058][ T5714] usb 4-1: USB disconnect, device number 11 [ 524.841559][T10181] hpfs: Bad magic ... probably not HPFS [ 524.865416][T10181] hpfs: Bad magic ... probably not HPFS [ 525.647641][ T5619] Bluetooth: hci4: unexpected event for opcode 0x0c14 [ 525.693440][ T29] audit: type=1400 audit(1785159659.268:760): avc: denied { write } for pid=10198 comm="syz.1.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 525.771743][ T5707] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 525.980317][ T5707] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 526.003249][ T5707] usb 1-1: config 0 has no interface number 0 [ 526.137097][ T5707] usb 1-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 526.154879][ T5707] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 526.166412][ T5707] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 526.176591][ T5707] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 526.210088][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.346782][ T5707] usb 1-1: config 0 descriptor?? [ 526.532121][ T5707] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input14 [ 526.857373][T10238] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1001'. [ 527.730323][ T5707] usb 1-1: USB disconnect, device number 9 [ 528.302132][T10240] netlink: 'syz.4.1002': attribute type 2 has an invalid length. [ 528.547637][ T29] audit: type=1400 audit(1785159662.116:761): avc: denied { write } for pid=10247 comm="syz.0.1006" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 528.888500][ T29] audit: type=1400 audit(1785159662.456:762): avc: denied { ioctl } for pid=10260 comm="syz.5.1011" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 529.027826][ T5697] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 529.070805][T10266] comedi comedi0: comedi_bond: 4:2 attached, 32 channels from 1 devices [ 529.383906][T10269] usb usb8: usbfs: process 10269 (syz.0.1014) did not claim interface 0 before use [ 529.394848][ T5697] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 529.408382][ T5697] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 529.430331][ T5697] usb 4-1: config 150 has no interface number 0 [ 529.450524][ T5697] usb 4-1: config 150 interface 204 has no altsetting 0 [ 529.476077][ T5697] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 529.485407][ T5697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.499977][ T5697] usb 4-1: Product: syz [ 529.509277][ T5697] usb 4-1: Manufacturer: syz [ 529.517176][ T5697] usb 4-1: SerialNumber: syz [ 529.527938][T10271] tmpfs: Bad value for 'mpol' [ 529.943135][ T5697] xr_serial 4-1:150.204: skipping garbage [ 529.943192][ T5697] xr_serial 4-1:150.204: xr_serial converter detected [ 529.963988][ T5697] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 529.964041][ T5697] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 529.967294][ T5697] usb 4-1: USB disconnect, device number 12 [ 529.973179][ T5697] xr_serial 4-1:150.204: device disconnected [ 530.352194][T10294] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1025'. [ 530.381294][ T29] audit: type=1400 audit(1785159663.945:763): avc: denied { create } for pid=10296 comm="syz.5.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 530.452961][ T29] audit: type=1400 audit(1785159663.945:764): avc: denied { connect } for pid=10296 comm="syz.5.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 530.656715][T10304] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 531.534382][ T5842] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 531.852396][T10327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1035'. [ 532.308528][ T5619] Bluetooth: hci4: unexpected event for opcode 0x204e [ 532.410737][ T5842] usb 4-1: Using ep0 maxpacket: 8 [ 532.431617][ T5842] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.450034][ T5842] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 532.478463][ T5842] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 532.504012][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.536597][ T5842] usb 4-1: Product: syz [ 532.551115][ T5842] usb 4-1: Manufacturer: syz [ 532.571267][ T5842] usb 4-1: SerialNumber: syz [ 532.601166][ T29] audit: type=1400 audit(1785159666.164:765): avc: denied { map } for pid=10342 comm="syz.5.1041" path="/dev/sg0" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 532.638081][ T5842] usb 4-1: config 0 descriptor?? [ 532.664094][ T29] audit: type=1400 audit(1785159666.164:766): avc: denied { execute } for pid=10342 comm="syz.5.1041" path="/dev/sg0" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 532.760659][T10348] netlink: 'syz.4.1045': attribute type 12 has an invalid length. [ 533.029852][ T5619] Bluetooth: unknown link type 174 [ 533.035148][ T5619] Bluetooth: hci1: connection err: -111 [ 533.082365][ T5842] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 533.116766][ T5736] usb 4-1: USB disconnect, device number 13 [ 533.240645][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1050'. [ 533.287601][ T5842] usb 1-1: Using ep0 maxpacket: 8 [ 533.376005][ T5842] usb 1-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 533.437686][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.484806][ T5842] usb 1-1: Product: syz [ 533.509112][ T5842] usb 1-1: Manufacturer: syz [ 533.539023][ T5842] usb 1-1: SerialNumber: syz [ 533.760359][T10385] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 533.871318][T10389] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1059'. [ 533.913262][ T5842] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 534.011923][ T5842] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 534.054931][ T5842] usb 1-1: unable to issue vendor read request (ret = -71) [ 534.090314][ T5842] usb 1-1: unable to issue vendor read request (ret = -71) [ 534.114974][ T5842] usb 1-1: unable to issue vendor read request (ret = -71) [ 534.836325][ T5842] usb 1-1: unable to issue vendor read request (ret = -71) [ 535.096274][ T5842] usb 1-1: USB disconnect, device number 10 [ 535.285674][T10177] udevd[10177]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 537.112612][ T29] audit: type=1400 audit(1785159670.671:767): avc: denied { getopt } for pid=10461 comm="syz.5.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 537.280074][T10465] netlink: 'syz.5.1091': attribute type 11 has an invalid length. [ 537.295026][T10465] netlink: 'syz.5.1091': attribute type 4 has an invalid length. [ 537.625383][T10474] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 9 out of range (51000000..2150000000) [ 537.842723][T10486] tmpfs: Bad value for 'mpol' [ 537.954017][ T29] audit: type=1400 audit(1785159671.511:768): avc: denied { ioctl } for pid=10492 comm="syz.5.1104" path="/dev/ptyqe" dev="devtmpfs" ino=133 ioctlcmd=0x5436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 538.149722][ T29] audit: type=1400 audit(1785159671.661:769): avc: denied { read } for pid=10501 comm="syz.0.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 538.711740][T10527] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 539.669656][ T5842] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 539.939732][ T5842] usb 1-1: Using ep0 maxpacket: 8 [ 539.967540][ T5842] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.993679][ T5842] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 540.045165][ T5842] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 540.216636][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.246445][ T5842] usb 1-1: Product: syz [ 540.264990][ T5842] usb 1-1: Manufacturer: syz [ 540.280181][ T5842] usb 1-1: SerialNumber: syz [ 540.423243][ T5842] usb 1-1: config 0 descriptor?? [ 540.584016][T10571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.901507][T10582] hpfs: Bad magic ... probably not HPFS [ 540.918203][T10582] hpfs: Bad magic ... probably not HPFS [ 541.234728][ T24] usb 1-1: USB disconnect, device number 11 [ 541.254072][T10585] netlink: 'syz.3.1141': attribute type 2 has an invalid length. [ 541.266154][T10585] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1141'. [ 542.388075][T10641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.465990][T10646] batadv0: entered promiscuous mode [ 542.690552][ T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 542.851001][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 542.881299][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 542.919890][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 542.954973][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 542.997077][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 543.028386][ T24] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 543.055579][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.063863][ T5619] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 543.085515][ T24] usb 4-1: Product: syz [ 543.097985][ T24] usb 4-1: Manufacturer: syz [ 543.111948][ T24] usb 4-1: SerialNumber: syz [ 543.133918][ T24] usb 4-1: config 0 descriptor?? [ 543.206265][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15 [ 543.534970][ T24] usb 4-1: USB disconnect, device number 14 [ 544.015264][T10693] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 544.431134][T10696] bridge_slave_1: left allmulticast mode [ 544.450232][T10696] bridge_slave_1: left promiscuous mode [ 544.462298][T10696] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.486876][T10696] bridge_slave_0: left allmulticast mode [ 544.546167][T10696] bridge_slave_0: left promiscuous mode [ 544.553275][T10696] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.247754][T10724] netlink: 512 bytes leftover after parsing attributes in process `syz.3.1205'. [ 545.290795][T10724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1205'. [ 545.319616][T10724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1205'. [ 545.342269][T10724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1205'. [ 545.351236][T10724] netlink: 2328 bytes leftover after parsing attributes in process `syz.3.1205'. [ 547.388825][T10765] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1222'. [ 547.908950][T10781] netlink: 556 bytes leftover after parsing attributes in process `syz.4.1230'. [ 547.941304][T10781] unsupported nla_type 44038 [ 548.211949][T10793] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1234'. [ 548.790925][ T29] audit: type=1400 audit(1785159682.345:770): avc: denied { append } for pid=10814 comm="syz.5.1245" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 548.970321][ T5619] Bluetooth: hci3: unexpected event for opcode 0x2024 [ 549.081223][T10827] openvswitch: netlink: nsh attr 203 is out of range max 3 [ 549.234992][ T29] audit: type=1400 audit(1785159682.795:771): avc: denied { write } for pid=10832 comm="syz.0.1253" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 551.326787][ T24] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 551.486481][ T24] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 551.508921][ T24] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 551.544696][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 551.552941][ T24] usb 6-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 551.573946][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.596486][ T24] usb 6-1: config 0 descriptor?? [ 551.621883][T10875] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 551.895677][T10901] usb usb9: usbfs: process 10901 (syz.3.1283) did not claim interface 8 before use [ 552.059881][ T24] hid (null): invalid report_count 24886 [ 552.079000][ T24] hid_parser_main: 111 callbacks suppressed [ 552.079019][ T24] itetech 0003:048D:8595.0002: unknown main item tag 0x2 [ 552.095375][ T24] itetech 0003:048D:8595.0002: unknown main item tag 0x1 [ 552.102834][ T24] itetech 0003:048D:8595.0002: unknown main item tag 0x1 [ 552.110194][ T24] itetech 0003:048D:8595.0002: invalid report_count 24886 [ 552.117557][ T24] itetech 0003:048D:8595.0002: item 0 4 1 9 parsing failed [ 552.130389][ T24] itetech 0003:048D:8595.0002: probe with driver itetech failed with error -22 [ 552.210595][T10909] bridge0: entered promiscuous mode [ 552.275094][T10909] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 552.486913][ T13] Bluetooth: hci2: Frame reassembly failed (-84) [ 552.618391][ T24] usb 6-1: USB disconnect, device number 2 [ 552.633589][ T13] Bluetooth: hci2: Frame reassembly failed (-84) [ 554.260466][T10924] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1292'. [ 554.443795][ T5609] Bluetooth: hci2: command 0x1003 tx timeout [ 554.450392][ T5619] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 555.138691][T10946] xt_hashlimit: size too large, truncated to 1048576 [ 555.459011][ T29] audit: type=1400 audit(1785159689.012:772): avc: denied { ioctl } for pid=10957 comm="syz.0.1306" path="socket:[28097]" dev="sockfs" ino=28097 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 555.581668][ T29] audit: type=1400 audit(1785159689.132:773): avc: denied { append } for pid=10960 comm="syz.0.1308" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 555.581746][T10962] random: crng reseeded on system resumption [ 556.176993][ T24] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 556.236767][ T5714] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 556.338220][ T24] usb 1-1: config 127 has an invalid interface number: 57 but max is 0 [ 556.361915][ T24] usb 1-1: config 127 has no interface number 0 [ 556.380600][ T24] usb 1-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 556.400985][ T5714] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 556.419461][ T24] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 556.423490][ T5714] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 556.447280][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.459546][ T5714] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 556.470798][ T24] usb 1-1: Product: syz [ 556.483230][ T24] usb 1-1: Manufacturer: syz [ 556.483820][ T5714] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 556.497323][ T24] usb 1-1: SerialNumber: syz [ 556.508973][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.519642][T10971] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 556.529792][ T5714] usb 4-1: Product: syz [ 556.534517][ T5714] usb 4-1: Manufacturer: syz [ 556.541244][ T5714] usb 4-1: SerialNumber: syz [ 556.549285][ T5714] usb 4-1: config 0 descriptor?? [ 556.559465][T10978] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 556.585647][T10978] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 556.612504][ T5714] usb 4-1: ucan: probing device on interface #0 [ 556.961725][T10971] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 557.045712][ T5714] usb 4-1: ucan: device reported invalid tx-fifo size [ 557.066703][ T5714] usb 4-1: ucan: probe failed; try to update the device firmware [ 557.191512][ T24] asix 1-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 557.223632][ T24] asix 1-1:127.57: probe with driver asix failed with error -71 [ 557.253261][ T24] usb 1-1: USB disconnect, device number 12 [ 557.378393][ T5714] usb 4-1: USB disconnect, device number 15 [ 557.566399][T11016] xt_hashlimit: size too large, truncated to 1048576 [ 557.707350][ T5697] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 557.867546][ T5697] usb 6-1: Using ep0 maxpacket: 8 [ 557.893543][ T5697] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.606192][ T5697] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 15 [ 558.699085][ T5697] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 558.714624][ T5697] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.725758][ T5697] usb 6-1: Product: syz [ 558.730361][ T5697] usb 6-1: Manufacturer: syz [ 558.736177][ T5697] usb 6-1: SerialNumber: syz [ 558.761052][ T5697] usb 6-1: config 0 descriptor?? [ 558.889294][ T5619] Bluetooth: hci4: Malformed LE Event: 0x0d [ 558.980076][ T5697] usb 6-1: USB disconnect, device number 3 [ 559.085581][T11063] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1350'. [ 559.100260][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 559.236006][T11076] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1356'. [ 559.259641][ T24] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 559.267895][ T24] usb 1-1: config 0 has no interface number 0 [ 559.274123][ T24] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 559.287704][ T24] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 559.297227][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.321105][ T24] usb 1-1: Product: syz [ 559.325805][ T24] usb 1-1: Manufacturer: syz [ 559.330542][ T24] usb 1-1: SerialNumber: syz [ 559.342037][ T24] usb 1-1: config 0 descriptor?? [ 559.362247][ T24] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 559.879550][ T24] usb 1-1: USB disconnect, device number 13 [ 559.904930][ T24] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 560.073959][T11101] syz_tun: entered allmulticast mode [ 560.319543][ T29] audit: type=1400 audit(1785159693.870:774): avc: denied { mount } for pid=11116 comm="syz.3.1373" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 560.355245][ T29] audit: type=1400 audit(1785159693.900:775): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 560.398416][ T5697] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 560.551609][ T5697] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 560.561826][ T5697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.583521][ T5697] usb 6-1: config 0 descriptor?? [ 560.618617][ T5736] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 561.265450][ T5697] usb 6-1: Cannot set MAC address [ 561.273490][ T5697] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 561.294456][ T5736] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 561.306653][ T5697] usb 6-1: USB disconnect, device number 4 [ 561.313150][ T5736] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 561.328074][ T5736] usb 4-1: config 0 has no interface number 0 [ 561.337490][ T5736] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 12336, setting to 64 [ 561.357436][ T5736] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 561.372255][ T5736] usb 4-1: config 0 interface 52 has no altsetting 0 [ 561.383012][ T5736] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 561.392830][ T5736] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 561.402401][ T5736] usb 4-1: Manufacturer: syz [ 561.580386][ T5736] usb 4-1: config 0 descriptor?? [ 561.591633][ T5736] hub 4-1:0.52: bad descriptor, ignoring hub [ 561.597691][ T5736] hub 4-1:0.52: probe with driver hub failed with error -5 [ 562.449853][ T5736] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input16 [ 562.488749][ T5736] usb 4-1: Failed to suspend device, error -71 [ 562.496523][ T5736] usb 4-1: USB disconnect, device number 16 [ 562.532323][ T29] audit: type=1400 audit(1785159696.090:776): avc: denied { append } for pid=11157 comm="syz.5.1390" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 562.559053][ T5697] kernel read not supported for file /usbmon9 (pid: 5697 comm: kworker/0:3) [ 562.766907][T11163] bridge0: entered promiscuous mode [ 563.390917][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.444892][T11165] bridge0: port 1(syz_tun) entered blocking state [ 563.492915][T11165] bridge0: port 1(syz_tun) entered disabled state [ 563.533244][T11165] syz_tun: entered allmulticast mode [ 563.566014][T11165] syz_tun: entered promiscuous mode [ 563.840936][T11165] bridge0: port 1(syz_tun) entered blocking state [ 563.847566][T11165] bridge0: port 1(syz_tun) entered forwarding state [ 565.363373][T11207] bridge5: entered promiscuous mode [ 566.234525][ T29] audit: type=1400 audit(1785159699.778:777): avc: denied { mount } for pid=11212 comm="syz.3.1409" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 566.297145][T11214] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 566.450400][ T29] audit: type=1400 audit(1785159699.998:778): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 566.540179][T11222] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1414'. [ 566.577090][T11225] netlink: 'syz.0.1416': attribute type 8 has an invalid length. [ 566.596981][T11225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1416'. [ 567.466421][T11247] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1423'. [ 568.041310][ T5715] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 568.264132][T11259] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 568.402281][ T5715] usb 1-1: Using ep0 maxpacket: 32 [ 568.409388][ T5715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 568.492779][ T5715] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 568.506657][ T5619] Bluetooth: hci1: Malformed Event: 0x02 [ 568.532927][ T5715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 568.557996][ T5715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 568.576926][ T5715] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 568.587495][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.595750][ T5715] usb 1-1: Product: syz [ 568.601207][ T5715] usb 1-1: Manufacturer: syz [ 568.605942][ T5715] usb 1-1: SerialNumber: syz [ 568.616072][ T5715] usb 1-1: config 0 descriptor?? [ 568.621803][T11257] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 568.641701][ T5715] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input17 [ 568.757137][ C1] xpad 1-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 568.791765][ C1] xpad 1-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 568.811456][ T5707] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 568.890353][ T5715] usb 1-1: USB disconnect, device number 14 [ 568.896432][ C1] xpad 1-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 568.958029][T11284] €Â: renamed from vlan0 (while UP) [ 568.968977][ T5707] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 568.981675][ T5707] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 568.991675][ T5707] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 569.010569][ T5707] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 569.026930][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 569.036476][ T5707] usb 4-1: Product: syz [ 569.040693][ T5707] usb 4-1: Manufacturer: syz [ 569.045925][ T5707] usb 4-1: SerialNumber: syz [ 569.201676][ T5697] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 569.265509][ T5707] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 569.353336][ T5697] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 569.365685][ T5697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 569.377180][ T5697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 569.389545][ T5697] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 569.402763][ T5697] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 569.412206][ T5697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.438642][ T5697] usb 6-1: config 0 descriptor?? [ 569.458536][T11285] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 569.511355][ T5736] usb 4-1: USB disconnect, device number 17 [ 569.533106][ T29] audit: type=1400 audit(1785159703.057:779): avc: denied { read write } for pid=11270 comm="syz.3.1432" name="lp0" dev="devtmpfs" ino=2937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 569.562870][ T5736] usblp0: removed [ 569.585559][ T29] audit: type=1400 audit(1785159703.057:780): avc: denied { open } for pid=11270 comm="syz.3.1432" path="/dev/usb/lp0" dev="devtmpfs" ino=2937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 570.981520][ T5697] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 571.022482][ T5697] usb 6-1: USB disconnect, device number 5 [ 571.209659][T11303] fido_id[11303]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 571.350683][ T5619] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 571.362338][ T5736] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 571.514846][T11328] Invalid argument reading file caps for ./file0 [ 571.522414][ T5736] usb 1-1: Using ep0 maxpacket: 8 [ 571.524917][ T5736] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 571.560372][ T5736] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 571.594893][ T5736] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 571.608570][ T5736] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 571.620393][ T5736] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 571.634399][ T5736] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 571.648384][ T5736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.342999][ T5722] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 572.483872][T11349] usbtmc 1-1:16.0: simple usb_control_msg failed -32 [ 572.493065][ T5722] usb 6-1: Using ep0 maxpacket: 8 [ 572.500342][T11175] usb 1-1: USB disconnect, device number 15 [ 572.502440][ T5722] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 572.521689][ T5722] usb 6-1: config 179 has no interface number 0 [ 572.529201][ T5722] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 572.541990][ T5722] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 572.557348][ T5722] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 572.595922][ T5722] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 572.617684][ T5722] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 572.642037][ T5722] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 572.656460][ T5722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.671942][T11337] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 572.946865][ T5722] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input18 [ 573.156762][ T5736] usb 6-1: USB disconnect, device number 6 [ 573.162672][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 573.162723][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 573.233396][T11373] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 574.109389][ T29] audit: type=1800 audit(1785159707.656:781): pid=11392 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1481" name="file1" dev="tmpfs" ino=1590 res=0 errno=0 [ 574.254676][T11395] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1483'. [ 575.310118][ T29] audit: type=1400 audit(1785159708.855:782): avc: denied { getopt } for pid=11413 comm="syz.0.1488" lport=48192 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 575.580353][ T29] audit: type=1400 audit(1785159709.115:783): avc: denied { associate } for pid=11416 comm="syz.3.1490" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 575.795074][T11175] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 576.087596][T11175] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 576.099739][T11175] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.179476][T11175] usb 1-1: Product: syz [ 576.242671][T11175] usb 1-1: Manufacturer: syz [ 576.277438][T11175] usb 1-1: SerialNumber: syz [ 577.318731][T11175] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 577.331725][T11175] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 577.336546][ T5736] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 577.428760][ T29] audit: type=1400 audit(1785159710.975:784): avc: denied { sys_module } for pid=11464 comm="syz.1.1509" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 577.546191][ T5736] usb 4-1: Using ep0 maxpacket: 32 [ 577.553609][T11175] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 577.558144][ T5736] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 577.597261][T11175] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 577.626120][T11175] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 577.639486][ T5736] usb 4-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 577.658332][ T5736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.659142][T11175] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 577.680556][ T29] audit: type=1800 audit(1785159711.215:785): pid=11480 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1514" name="nullb0" dev="tmpfs" ino=1828 res=0 errno=0 [ 577.680917][ T5736] usb 4-1: Product: syz [ 577.746734][ T5736] usb 4-1: Manufacturer: syz [ 577.756978][T11175] usb 1-1: USB disconnect, device number 16 [ 577.759297][ T5736] usb 4-1: SerialNumber: syz [ 577.831854][ T5736] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 578.081766][ T5736] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 578.114838][T11500] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 578.139040][ T5736] usb 4-1: USB disconnect, device number 18 [ 578.208963][T10177] udevd[10177]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 580.314323][T11543] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 580.888136][T11554] bridge0: entered promiscuous mode [ 581.132930][ T32] Bluetooth: hci2: Frame reassembly failed (-84) [ 581.631899][ T5609] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 581.705317][ T5697] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 581.867059][ T5697] usb 1-1: Using ep0 maxpacket: 32 [ 581.881609][ T5697] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 581.897291][ T5697] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 581.937283][ T5697] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 581.967347][ T5697] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 581.991744][ T5697] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 582.019029][ T5697] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 582.051465][ T5697] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 582.061378][ T5697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.078883][ T5697] usb 1-1: config 0 descriptor?? [ 582.189457][T11585] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1553'. [ 582.330629][ T5697] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 582.355633][T11593] syzkaller0: entered promiscuous mode [ 582.374736][T11593] syzkaller0: entered allmulticast mode [ 582.378460][ T5697] usb 1-1: USB disconnect, device number 17 [ 582.402490][ T5697] usblp0: removed [ 583.145238][ T29] audit: type=1400 audit(1785159716.683:786): avc: denied { read } for pid=11602 comm="syz.3.1558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 583.168135][ T5619] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 583.173685][T11597] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check. [ 583.265785][ T5697] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 583.457216][ T5697] usb 1-1: Using ep0 maxpacket: 32 [ 583.483730][ T5697] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 583.512208][ T5697] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 583.556970][ T5697] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 583.579493][ T5697] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 583.613624][ T5697] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 583.638205][ T5697] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 583.668451][ T5697] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 583.677986][ T5697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.715552][ T5697] usb 1-1: config 0 descriptor?? [ 583.941899][ T5697] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 584.140786][ T5697] usb 1-1: USB disconnect, device number 18 [ 584.253453][T11630] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 584.266181][ T5697] usblp0: removed [ 584.733554][T11634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1569'. [ 585.087059][T11644] syz_tun: entered allmulticast mode [ 585.131951][T11643] syz_tun: left allmulticast mode [ 585.977977][T11679] syz_tun: entered allmulticast mode [ 586.007426][T11678] syz_tun: left allmulticast mode [ 586.376585][ T5707] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 586.417036][ T5697] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 586.546663][ T5707] usb 6-1: Using ep0 maxpacket: 8 [ 586.557815][ T5707] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 586.574457][ T5707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.591347][ T5707] usb 6-1: Product: syz [ 586.591630][ T5697] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 586.601064][ T5707] usb 6-1: Manufacturer: syz [ 586.617543][ T5707] usb 6-1: SerialNumber: syz [ 586.622187][ T5697] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 586.622211][ T5697] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 586.647026][ T5697] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 586.660259][ T5697] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 586.688621][ T5707] usb 6-1: config 0 descriptor?? [ 586.697916][ T5707] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 586.714343][ T5697] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 586.724047][ T5697] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 586.733214][ T5697] usb 4-1: Product: syz [ 586.733231][T11697] fuse: fd is not a fuse device [ 586.738390][ T5697] usb 4-1: Manufacturer: syz [ 586.780435][ T5697] cdc_wdm 4-1:1.0: skipping garbage [ 586.785698][ T5697] cdc_wdm 4-1:1.0: skipping garbage [ 586.793041][ T5697] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 586.799834][ T5697] cdc_wdm 4-1:1.0: Unknown control protocol [ 586.862127][T11701] raw_sendmsg: syz.4.1596 forgot to set AF_INET. Fix it! [ 587.037319][ T29] audit: type=1400 audit(1785159720.572:787): avc: denied { read write } for pid=11684 comm="syz.3.1591" name="cdc-wdm0" dev="devtmpfs" ino=2984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 587.118294][ T29] audit: type=1400 audit(1785159720.572:788): avc: denied { open } for pid=11684 comm="syz.3.1591" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 587.432392][ C0] cdc_wdm 4-1:1.0: Unexpected error -71 [ 587.432807][ T5715] usb 4-1: USB disconnect, device number 19 [ 587.439269][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 587.451244][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 587.457337][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 587.695846][ T29] audit: type=1400 audit(1785159721.232:789): avc: denied { create } for pid=11711 comm="syz.4.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 587.970260][T11721] bridge_slave_0: invalid flags given to default FDB implementation [ 588.257010][ T5714] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 588.367774][ T5707] gspca_sonixj: i2c_w8 err -71 [ 588.407482][ T5714] usb 1-1: Using ep0 maxpacket: 32 [ 588.415242][ T5714] usb 1-1: unable to get BOS descriptor or descriptor too short [ 588.425105][ T5714] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 588.427430][ T5707] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 588.434101][ T5714] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 588.459916][ T5714] usb 1-1: config 14 has no interface number 0 [ 588.468183][ T5707] usb 6-1: USB disconnect, device number 7 [ 588.472069][ T5714] usb 1-1: config 14 has no interface number 1 [ 588.482844][ T5714] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 588.502588][ T5714] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 588.516274][ T5714] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 588.529835][ T5714] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 588.566064][ T5714] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 588.587792][ T5697] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 588.599748][ T5714] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 588.628191][ T5714] usb 1-1: config 14 interface 57 has no altsetting 0 [ 588.642943][ T5714] usb 1-1: config 14 interface 228 has no altsetting 0 [ 588.661490][ T5714] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 588.680409][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.696500][ T5714] usb 1-1: Product: syz [ 588.705663][ T5714] usb 1-1: Manufacturer: syz [ 588.719120][ T5714] usb 1-1: SerialNumber: syz [ 588.767559][ T5697] usb 4-1: Using ep0 maxpacket: 16 [ 588.780248][ T5697] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 588.803135][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 588.863500][ T5697] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 588.880532][ T5697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.923590][ T5697] usb 4-1: Product: syz [ 588.947381][ T5697] usb 4-1: Manufacturer: syz [ 588.979966][ T5697] usb 4-1: SerialNumber: syz [ 589.014085][ T5697] usb 4-1: config 0 descriptor?? [ 589.531239][ T5714] legousbtower 1-1:14.57: interrupt endpoints not found [ 589.544378][ T5697] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 589.557208][ T5697] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 589.729941][ T5714] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 589.760791][ T5714] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 589.848079][ T5707] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 590.160972][ T5697] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 590.231720][ T5697] em28xx 4-1:0.0: Config register raw data: 0xfc [ 590.277216][ T5697] em28xx 4-1:0.0: I2S Audio (3 sample rate(s)) [ 590.307163][ T5697] em28xx 4-1:0.0: No AC97 audio processor [ 590.379014][ T5707] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.464008][ T5707] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.473950][ T5707] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 590.487054][ T5707] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 590.496339][ T5707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.512548][ T5707] usb 6-1: config 0 descriptor?? [ 590.604181][ T5722] usb 1-1: USB disconnect, device number 19 [ 590.782272][T11772] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 591.092249][ T5722] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 591.204147][ T5707] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 591.311066][ T5707] usb 4-1: USB disconnect, device number 20 [ 591.506329][ T5722] usb 6-1: USB disconnect, device number 8 [ 591.566540][T11781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1624'. [ 591.860088][ T1051] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.880289][ T1051] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.893294][ T1051] bond0 (unregistering): Released all slaves [ 591.904098][ T5707] kernel read not supported for file /1020/net/if_inet6 (pid: 5707 comm: kworker/1:4) [ 591.968894][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1624'. [ 592.001963][ T1051] : left promiscuous mode [ 592.075325][ T29] audit: type=1400 audit(1785159725.611:790): avc: denied { create } for pid=11792 comm="syz.3.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 592.234251][ T29] audit: type=1400 audit(1785159725.771:791): avc: denied { create } for pid=11801 comm="syz.4.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 592.324123][ T1051] tipc: Disabling bearer [ 592.345192][ T1051] tipc: Left network mode [ 593.179828][ T29] audit: type=1400 audit(1785159726.721:792): avc: denied { wake_alarm } for pid=11824 comm="syz.1.1634" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 593.804791][ T29] audit: type=1400 audit(1785159727.340:793): avc: denied { write } for pid=11804 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 593.841054][ T1051] IPVS: stopping master sync thread 7390 ... [ 594.089642][ T29] audit: type=1400 audit(1785159727.630:794): avc: denied { write } for pid=11840 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 594.352723][T11854] fuse: fd is not a fuse device [ 594.404724][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 595.001012][T11793] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 595.688899][ T5715] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 595.924317][ T5715] usb 1-1: config 0 has no interfaces? [ 595.955841][ T5715] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 596.007934][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.630389][T11896] fuse: fd is not a fuse device [ 596.642676][ T5715] usb 1-1: config 0 descriptor?? [ 596.984336][ T5715] usb 1-1: USB disconnect, device number 20 [ 597.009488][ T1051] hsr_slave_0: left promiscuous mode [ 597.054881][ T1051] hsr_slave_1: left promiscuous mode [ 597.083372][ T5609] Bluetooth: hci4: Unable to find connection with handle 0x00c8 [ 597.091772][ T1051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.123398][ T1051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.195240][ T29] audit: type=1400 audit(1785159730.740:795): avc: denied { write } for pid=11877 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 597.540894][ T29] audit: type=1400 audit(1785159731.090:796): avc: denied { write } for pid=11919 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 598.105518][T11932] usb usb8: check_ctrlrecip: process 11932 (syz.0.1664) requesting ep 01 but needs 81 [ 598.137845][T11932] usb usb8: usbfs: process 11932 (syz.0.1664) did not claim interface 0 before use [ 598.292993][ T48] smc: removing ib device s [ 598.359075][ T29] audit: type=1400 audit(1785159731.849:797): avc: denied { bind } for pid=11928 comm="syz.4.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 598.385108][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 599.141589][ T48] smbdirect: ib_dev[s] removed [ 599.313103][ T29] audit: type=1400 audit(1785159732.839:798): avc: denied { bpf } for pid=11945 comm="syz.3.1670" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 600.176241][ T29] audit: type=1400 audit(1785159733.719:799): avc: denied { write } for pid=11941 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 600.496347][ T29] audit: type=1400 audit(1785159734.039:800): avc: denied { write } for pid=11986 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 600.683898][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 600.967957][ T29] audit: type=1400 audit(1785159734.509:801): avc: denied { perfmon } for pid=11993 comm="syz.3.1680" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 601.556687][T12001] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 601.754843][ T29] audit: type=1400 audit(1785159735.269:802): avc: denied { mount } for pid=12009 comm="syz.3.1683" name="/" dev="autofs" ino=31903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 602.199813][ T29] audit: type=1400 audit(1785159735.739:803): avc: denied { write } for pid=11991 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 602.412921][T12027] lo speed is unknown, defaulting to 1000 [ 602.560331][ T5722] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 602.604989][ T29] audit: type=1400 audit(1785159736.149:804): avc: denied { write } for pid=12034 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 602.732645][ T5722] usb 4-1: config 0 has no interfaces? [ 602.744772][ T5722] usb 4-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 602.755404][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.788793][ T5722] usb 4-1: Product: syz [ 602.814652][ T5722] usb 4-1: Manufacturer: syz [ 602.828376][ T5722] usb 4-1: SerialNumber: syz [ 603.165993][ T5722] usb 4-1: config 0 descriptor?? [ 603.345387][T12055] fuse: fd is not a fuse device [ 603.595841][ T29] audit: type=1400 audit(1785159737.138:805): avc: denied { write } for pid=12049 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 603.835800][ T1051] IPVS: stop unused estimator thread 0... [ 603.878065][ T29] audit: type=1400 audit(1785159737.418:806): avc: denied { write } for pid=12073 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 603.930666][ T5697] usb 4-1: USB disconnect, device number 21 [ 604.001767][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 604.321689][T12079] kvm: pic: non byte write [ 604.651346][T12097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1706'. [ 605.630153][ T29] audit: type=1400 audit(1785159739.168:807): avc: denied { write } for pid=12117 comm="syz.3.1712" name="usb_gadget" dev="configfs" ino=3248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 605.732501][ T29] audit: type=1400 audit(1785159739.208:808): avc: denied { add_name } for pid=12117 comm="syz.3.1712" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 605.800474][ T29] audit: type=1400 audit(1785159739.208:809): avc: denied { create } for pid=12117 comm="syz.3.1712" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 605.881810][ T29] audit: type=1400 audit(1785159739.328:810): avc: denied { write } for pid=12117 comm="syz.3.1712" name="idVendor" dev="configfs" ino=32171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 606.162124][ T29] audit: type=1400 audit(1785159739.338:811): avc: denied { open } for pid=12117 comm="syz.3.1712" path="/317/config/usb_gadget/g1/idVendor" dev="configfs" ino=32171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 607.171411][ T5697] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 607.331304][ T5697] usb 4-1: Using ep0 maxpacket: 8 [ 607.338410][ T5697] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 607.354170][ T5697] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 607.574436][ T5697] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 607.610574][ T5697] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 607.644491][ T5697] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 607.663671][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.388569][ T5697] usb 4-1: GET_CAPABILITIES returned 0 [ 608.398952][ T5697] usbtmc 4-1:16.0: can't read capabilities [ 608.602762][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 608.754269][ T5715] usb 4-1: USB disconnect, device number 22 [ 608.797346][T12177] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 609.851835][ T5715] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 610.001636][ T5715] usb 6-1: Using ep0 maxpacket: 32 [ 610.008802][ T5715] usb 6-1: config 8 has an invalid interface number: 202 but max is 0 [ 610.018388][ T5715] usb 6-1: config 8 has no interface number 0 [ 610.024916][ T5715] usb 6-1: config 8 interface 202 has no altsetting 0 [ 610.035213][ T5715] usb 6-1: New USB device found, idVendor=046d, idProduct=0890, bcdDevice=ee.6e [ 610.038928][ T5714] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 610.046267][ T5715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.123361][ T5715] usb 6-1: Product: syz [ 610.133093][ T5715] usb 6-1: Manufacturer: syz [ 610.153095][ T5715] usb 6-1: SerialNumber: syz [ 610.202283][ T5714] usb 1-1: Using ep0 maxpacket: 32 [ 610.217097][ T5714] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 610.249038][ T5714] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 610.283939][ T5714] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 610.302032][ T5714] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 610.647107][ T5714] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 610.671715][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.693156][ T5714] usb 1-1: Product: syz [ 610.697682][ T5715] usb 6-1: No union descriptors [ 610.702443][ T5714] usb 1-1: Manufacturer: syz [ 610.716864][ T5714] usb 1-1: SerialNumber: syz [ 610.728907][ T5715] gspca_main: spca500-2.14.0 probing 046d:0890 [ 610.745797][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 610.796559][ T5715] usb 6-1: USB disconnect, device number 9 [ 611.287335][ T5714] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input19 [ 611.473575][ T5714] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 611.504327][ T5714] (id 0x00) [ 611.622791][ T5714] rc_core: IR keymap rc-imon-pad not found [ 611.644798][ T5714] Registered IR keymap rc-empty [ 611.656725][ T5714] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 611.669325][ T5714] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 611.737011][ T5714] imon:send_packet: packet tx failed (-71) [ 611.766705][ T5714] imon 1-1:155.0: remote input dev register failed [ 611.773875][ T5714] imon 1-1:155.0: imon_init_intf0: rc device setup failed [ 612.120852][ T29] audit: type=1400 audit(1785159745.657:812): avc: denied { read } for pid=12235 comm="syz.5.1752" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 612.294726][ T5714] imon 1-1:155.0: unable to initialize intf0, err 0 [ 612.301382][ T5714] imon:imon_probe: failed to initialize context! [ 612.308151][ T5714] imon 1-1:155.0: unable to register, err -19 [ 612.318674][ T5714] usb 1-1: USB disconnect, device number 21 [ 612.336502][ T29] audit: type=1400 audit(1785159745.687:813): avc: denied { open } for pid=12235 comm="syz.5.1752" path="/134/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 612.450775][ T29] audit: type=1400 audit(1785159745.987:814): avc: denied { set_context_mgr } for pid=12242 comm="syz.5.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 612.530375][ T29] audit: type=1400 audit(1785159746.027:815): avc: denied { append } for pid=12242 comm="syz.5.1754" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 612.698204][ T29] audit: type=1400 audit(1785159746.027:816): avc: denied { call } for pid=12242 comm="syz.5.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 613.342909][ T5714] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 613.676127][ T5714] usb 6-1: Using ep0 maxpacket: 8 [ 613.691595][ T5714] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 613.729768][ T5714] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 613.756806][ T29] audit: type=1400 audit(1785159747.297:817): avc: denied { create } for pid=12266 comm="syz.0.1760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 613.772365][ T5714] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 613.815181][ T5714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.844764][T12272] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 613.846113][ T5714] usb 6-1: Product: syz [ 613.873323][ T5714] usb 6-1: Manufacturer: syz [ 613.880926][ T5714] usb 6-1: SerialNumber: syz [ 613.895273][ T5714] usb 6-1: config 0 descriptor?? [ 613.995437][ T29] audit: type=1400 audit(1785159747.536:818): avc: denied { block_suspend } for pid=12275 comm="syz.3.1767" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 614.183977][ T5707] usb 6-1: USB disconnect, device number 10 [ 614.727378][T12295] binder: 12292:12295 ioctl c0306201 0 returned -14 [ 614.728015][ T29] audit: type=1400 audit(1785159748.266:819): avc: denied { write } for pid=12292 comm="syz.0.1769" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 614.850804][ T29] audit: type=1400 audit(1785159748.336:820): avc: denied { write } for pid=12280 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 615.017645][ T29] audit: type=1400 audit(1785159748.426:821): avc: denied { accept } for pid=12299 comm="syz.4.1773" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 615.023597][ T5714] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 615.664822][ T5714] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 615.682607][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.837184][T12315] binder: 12312:12315 ioctl c0306201 200000000080 returned -14 [ 615.960480][T12315] binder: 12312:12315 ioctl c0306201 2000000003c0 returned -14 [ 615.994131][ T5714] usb 1-1: selecting invalid altsetting 3 [ 616.116809][ T5714] comedi comedi5: could not set alternate setting 3 in high speed [ 616.211707][ T5714] usbduxsigma 1-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 616.488455][ T5714] usbduxsigma 1-1:128.0: probe with driver usbduxsigma failed with error -22 [ 616.549874][ T5714] usb 1-1: USB disconnect, device number 22 [ 617.224602][T12355] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 617.523238][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 617.523294][ T29] audit: type=1804 audit(1785159750.996:824): pid=12345 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1782" name="/newroot/139/file0" dev="fuse" ino=1 res=1 errno=0 [ 617.608705][ T29] audit: type=1326 audit(1785159751.146:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12357 comm="syz.4.1786" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d6719de99 code=0x0 [ 617.702038][ T29] audit: type=1400 audit(1785159751.206:826): avc: denied { transfer } for pid=12359 comm="syz.3.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 617.773692][T12363] overlayfs: failed to clone lowerpath [ 617.805975][ T29] audit: type=1400 audit(1785159751.316:827): avc: denied { write } for pid=12361 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.988412][T12372] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 618.162870][ T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 618.548003][ T24] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 618.573301][ T24] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 618.610324][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 618.634315][T12393] overlayfs: failed to clone upperpath [ 618.658133][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 618.710869][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 618.746762][ T24] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 618.796439][ T24] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 618.836121][ T24] usb 1-1: Product: syz [ 618.850583][ T24] usb 1-1: Manufacturer: syz [ 618.926052][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 618.947434][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 618.982003][ T24] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 619.023374][ T24] cdc_wdm 1-1:1.0: Unknown control protocol [ 619.265309][ T29] audit: type=1400 audit(1785159752.796:828): avc: denied { write } for pid=12370 comm="syz.0.1789" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 619.348669][ T29] audit: type=1400 audit(1785159752.846:829): avc: denied { write } for pid=12379 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.469220][ T24] usb 1-1: USB disconnect, device number 23 [ 619.490876][ T29] audit: type=1400 audit(1785159752.956:830): avc: denied { audit_write } for pid=12412 comm="syz.4.1798" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 619.590574][ T29] audit: type=1400 audit(1785159753.016:831): avc: denied { watch watch_reads } for pid=12412 comm="syz.4.1798" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 619.702646][ T29] audit: type=1400 audit(1785159753.166:832): avc: denied { write } for pid=12415 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.981506][T12430] bridge1: entered promiscuous mode [ 619.996225][T12430] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 620.798112][ T29] audit: type=1804 audit(1785159753.346:833): pid=12423 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1801" name="file0" dev="ramfs" ino=32561 res=1 errno=0 [ 621.869818][T12440] input: syz1 as /devices/virtual/input/input21 [ 622.472820][T12473] fuse: fd is not a fuse device [ 622.728317][T12477] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 622.773001][T12484] bridge0: port 2(syz_tun) entered blocking state [ 622.781080][T12484] bridge0: port 2(syz_tun) entered disabled state [ 622.794293][T12484] syz_tun: entered allmulticast mode [ 622.801874][T12484] syz_tun: entered promiscuous mode [ 622.833866][ T5619] Bluetooth: hci2: command 0x1003 tx timeout [ 622.844511][ T5609] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 623.003967][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 623.003984][ T29] audit: type=1400 audit(1785159756.545:839): avc: denied { prog_load } for pid=12487 comm="syz.1.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 623.033269][ T29] audit: type=1400 audit(1785159756.575:840): avc: denied { mounton } for pid=12488 comm="syz.5.1813" path="/142/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 623.176705][ T29] audit: type=1400 audit(1785159756.575:841): avc: denied { prog_run } for pid=12487 comm="syz.1.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 623.246587][ T29] audit: type=1400 audit(1785159756.645:842): avc: denied { map_read map_write } for pid=12487 comm="syz.1.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 623.610120][ T29] audit: type=1400 audit(1785159757.145:843): avc: denied { mmap_zero } for pid=12502 comm="syz.0.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 623.646831][ T5722] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 623.818967][T12510] fuse: fd is not a fuse device [ 623.863735][ T5722] usb 4-1: Using ep0 maxpacket: 8 [ 623.889984][ T5722] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.014031][ T5722] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 624.050768][ T5722] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 624.506926][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.540510][ T5722] usb 4-1: Product: syz [ 624.557426][ T5722] usb 4-1: Manufacturer: syz [ 624.577606][ T5722] usb 4-1: SerialNumber: syz [ 624.582796][T12506] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 624.601529][ T5722] usb 4-1: config 0 descriptor?? [ 624.756109][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.920779][ T5722] usb 4-1: USB disconnect, device number 23 [ 625.470734][T12526] fuse: fd is not a fuse device [ 625.522762][ T29] audit: type=1400 audit(1785159759.055:844): avc: denied { write } for pid=12527 comm="syz.5.1825" name="functions" dev="configfs" ino=32166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 625.594947][ T29] audit: type=1400 audit(1785159759.115:845): avc: denied { write } for pid=12527 comm="syz.5.1825" name="configs" dev="configfs" ino=32167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 625.758798][ T29] audit: type=1400 audit(1785159759.285:846): avc: denied { unmount } for pid=9863 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 626.345918][ T29] audit: type=1400 audit(1785159759.885:847): avc: denied { map } for pid=12558 comm="syz.5.1834" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 628.723024][T12576] fuse: fd is not a fuse device [ 631.562354][T12612] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 631.595776][T12610] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 631.954788][ T5619] Bluetooth: hci6: command 0x0406 tx timeout [ 632.392152][T12634] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1858'. [ 632.417171][T12634] unsupported nlmsg_type 40 [ 632.602099][T12636] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1859'. [ 632.750050][T12641] syzkaller0: entered promiscuous mode [ 632.761861][T12641] syzkaller0: entered allmulticast mode [ 633.174350][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 633.210364][T12653] kvm: apic: phys broadcast and lowest prio [ 633.252020][T12653] kvm: apic: phys broadcast and lowest prio [ 633.340321][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.355937][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 633.365859][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 633.381470][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 633.391116][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.402615][ T24] usb 6-1: Product: syz [ 633.411839][ T24] usb 6-1: Manufacturer: syz [ 633.425003][ T24] usb 6-1: SerialNumber: syz [ 633.435197][ T24] usb 6-1: config 0 descriptor?? [ 633.959824][ T29] audit: type=1326 audit(1785159767.494:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12667 comm="syz.4.1872" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6719de99 code=0x7ffc0000 [ 633.992079][ T29] audit: type=1326 audit(1785159767.494:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12667 comm="syz.4.1872" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6719de99 code=0x7ffc0000 [ 634.021036][ T29] audit: type=1326 audit(1785159767.524:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12667 comm="syz.4.1872" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6719de99 code=0x7ffc0000 [ 634.048333][ T29] audit: type=1326 audit(1785159767.524:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12667 comm="syz.4.1872" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6719de99 code=0x7ffc0000 [ 634.089948][ T29] audit: type=1326 audit(1785159767.524:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12667 comm="syz.4.1872" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0d6715e6ce code=0x7ffc0000 [ 634.118215][ T29] audit: type=1326 audit(1785159767.524:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12667 comm="syz.4.1872" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6719de99 code=0x7ffc0000 [ 634.145421][ T29] audit: type=1326 audit(1785159767.524:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12667 comm="syz.4.1872" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6719de99 code=0x7ffc0000 [ 634.172239][ T29] audit: type=1326 audit(1785159767.524:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12667 comm="syz.4.1872" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6719de99 code=0x7ffc0000 [ 634.205798][ T29] audit: type=1326 audit(1785159767.524:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12667 comm="syz.4.1872" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6719de99 code=0x7ffc0000 [ 634.257476][ T29] audit: type=1326 audit(1785159767.524:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12667 comm="syz.4.1872" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0d6719de99 code=0x7ffc0000 [ 634.300440][ T5714] usb 6-1: USB disconnect, device number 11 [ 634.562872][T12685] fuse: fd is not a fuse device [ 634.768959][T12694] syzkaller0: entered promiscuous mode [ 634.780966][T12694] syzkaller0: entered allmulticast mode [ 635.276359][T12713] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 636.109345][T12718] syzkaller0: entered promiscuous mode [ 636.114984][T12718] syzkaller0: entered allmulticast mode [ 636.722258][T12730] fuse: fd is not a fuse device [ 636.990743][T12736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12736 comm=syz.4.1894 [ 637.220427][T12744] syzkaller0: entered promiscuous mode [ 637.232132][T12744] syzkaller0: entered allmulticast mode [ 638.525604][ T5707] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 638.687905][ T5707] usb 6-1: Using ep0 maxpacket: 16 [ 638.705294][ T5707] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.728718][ T5707] usb 6-1: config 0 interface 0 has no altsetting 0 [ 638.743764][ T5707] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 638.755953][ T5707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.768460][ T5707] usb 6-1: config 0 descriptor?? [ 640.060545][T12792] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1912'. [ 640.121532][ T5707] usbhid 6-1:0.0: can't add hid device: -71 [ 640.128616][ T5707] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 640.142194][ T5707] usb 6-1: USB disconnect, device number 12 [ 640.675921][ T5619] Bluetooth: hci2: command 0x1003 tx timeout [ 640.684965][ T5609] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 642.067205][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 642.067226][ T29] audit: type=1400 audit(1785159775.593:902): avc: denied { write } for pid=12817 comm="syz.5.1920" path="socket:[33491]" dev="sockfs" ino=33491 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 643.809899][T12845] binder: BINDER_SET_CONTEXT_MGR already set [ 643.818749][T12845] binder: 12844:12845 ioctl 4018620d 200000000100 returned -16 [ 643.834003][T12845] binder: BINDER_SET_CONTEXT_MGR already set [ 643.851153][T12845] binder: 12844:12845 ioctl 4018620d 200000004a80 returned -16 [ 645.700953][ T29] audit: type=1400 audit(1785159779.222:903): avc: denied { write } for pid=12881 comm="syz.5.1944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 647.006893][T12914] 0x000000000006-0x000000020000 : "" [ 647.061489][T12914] ftl_cs: FTL header corrupt! [ 647.292496][T12913] fuse: fd is not a fuse device [ 647.573352][T12919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1954'. [ 647.639995][T12919] bridge8: port 1(dummy0) entered blocking state [ 647.646702][T12919] bridge8: port 1(dummy0) entered disabled state [ 647.653207][T12919] dummy0: entered allmulticast mode [ 647.659867][T12919] dummy0: entered promiscuous mode [ 647.685887][T12919] netlink: 'syz.1.1954': attribute type 10 has an invalid length. [ 647.687463][T12923] fuse: fd is not a fuse device [ 647.693850][T12919] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1954'. [ 647.712688][T12919] bridge8: port 1(dummy0) entered blocking state [ 647.721446][T12919] bridge8: port 1(dummy0) entered forwarding state [ 647.731370][T12919] dummy0: left allmulticast mode [ 647.736704][T12919] bridge8: port 1(dummy0) entered disabled state [ 649.123645][ T1114] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 649.310557][T12945] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 650.301333][T12981] binder: 12980:12981 ioctl c0306201 0 returned -14 [ 650.435887][T12986] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 650.442755][T12986] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 650.463917][T12986] vhci_hcd vhci_hcd.0: Device attached [ 650.477236][T12988] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 650.516828][ T5714] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 650.778824][T11175] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 650.786349][ T5707] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 650.800084][ T5714] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 650.820669][ T5714] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 651.256694][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.280408][ T5714] usb 1-1: config 0 descriptor?? [ 651.297910][ T5714] pwc: Askey VC010 type 2 USB webcam detected. [ 651.317005][ T5707] usb 4-1: Using ep0 maxpacket: 16 [ 651.343752][ T5707] usb 4-1: unable to get BOS descriptor or descriptor too short [ 651.352338][T12987] vhci_hcd: connection closed [ 651.370604][ T5707] usb 4-1: no configurations [ 651.382056][ T32] vhci_hcd vhci_hcd.3: stop threads [ 651.393944][ T32] vhci_hcd vhci_hcd.3: release socket [ 651.401782][ T5707] usb 4-1: can't read configurations, error -22 [ 651.416042][ T32] vhci_hcd vhci_hcd.3: disconnect device [ 651.701451][ T5714] pwc: recv_control_msg error -32 req 02 val 2b00 [ 651.728363][ T5714] pwc: recv_control_msg error -32 req 02 val 2700 [ 651.741870][ T5714] pwc: recv_control_msg error -32 req 02 val 2c00 [ 651.760113][ T5714] pwc: recv_control_msg error -32 req 04 val 1000 [ 651.772897][ T5714] pwc: recv_control_msg error -32 req 04 val 1300 [ 651.788713][ T5714] pwc: recv_control_msg error -32 req 04 val 1400 [ 651.812322][ T5714] pwc: recv_control_msg error -32 req 02 val 2000 [ 652.024203][ T5714] pwc: recv_control_msg error -32 req 04 val 1500 [ 652.040278][ T5714] pwc: recv_control_msg error -32 req 02 val 2500 [ 652.226588][ T5714] pwc: recv_control_msg error -32 req 02 val 2400 [ 652.364683][ T5714] pwc: recv_control_msg error -32 req 02 val 2600 [ 652.474851][ T5714] pwc: recv_control_msg error -71 req 02 val 2900 [ 652.498489][ T5714] pwc: recv_control_msg error -71 req 02 val 2800 [ 652.515768][ T5714] pwc: recv_control_msg error -71 req 04 val 1100 [ 652.525060][ T5714] pwc: recv_control_msg error -71 req 04 val 1200 [ 652.539186][ T5714] pwc: Registered as video103. [ 652.555188][ T5714] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input22 [ 652.605787][ T5714] usb 1-1: USB disconnect, device number 24 [ 653.948861][T13047] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 654.441167][T13056] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 654.997260][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 655.796590][T13064] syzkaller0: entered promiscuous mode [ 655.809668][T13064] syzkaller0: entered allmulticast mode [ 657.526040][T13083] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 657.980784][T13093] binder: BINDER_SET_CONTEXT_MGR already set [ 657.994234][T13093] binder: 13091:13093 ioctl 4018620d 200000000100 returned -16 [ 658.016793][T13093] binder: BINDER_SET_CONTEXT_MGR already set [ 658.022961][T13093] binder: 13091:13093 ioctl 4018620d 200000004a80 returned -16 [ 658.222677][T13101] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 658.638854][T13109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2011'. [ 659.237603][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 663.347037][T13173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2029'. [ 663.515251][T13176] syzkaller0: entered promiscuous mode [ 663.538895][T13176] syzkaller0: entered allmulticast mode [ 664.550269][ T29] audit: type=1400 audit(1785159798.071:904): avc: denied { load_policy } for pid=13188 comm="syz.3.2033" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 664.579055][T13190] SELinux: invalid class [ 664.602882][T13190] SELinux: failed to load policy [ 668.009695][T13228] tipc: Enabling of bearer rejected, failed to enable media [ 668.119597][T13238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2035'. [ 670.571604][T13273] syzkaller0: entered promiscuous mode [ 670.577407][T13273] syzkaller0: entered allmulticast mode [ 672.526527][T13294] fuse: fd is not a fuse device [ 673.770057][T13311] tipc: Started in network mode [ 673.793033][T13311] tipc: Node identity 7af854d7030a, cluster identity 4711 [ 673.814293][T13311] tipc: Enabled bearer , priority 0 [ 673.834909][T13317] syzkaller0: entered promiscuous mode [ 673.844602][T13317] syzkaller0: entered allmulticast mode [ 673.915685][T13311] tipc: Resetting bearer [ 673.976923][T13309] tipc: Resetting bearer [ 673.991427][T13322] binder: 13321:13322 ioctl c0306201 2000000002c0 returned -14 [ 674.036266][T13309] tipc: Disabling bearer [ 674.115167][T13319] loop4: detected capacity change from 0 to 2640 [ 674.146974][ T29] audit: type=1400 audit(1785159807.670:905): avc: denied { append } for pid=13325 comm="syz.0.2070" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 674.197191][ T29] audit: type=1400 audit(1785159807.670:906): avc: denied { map } for pid=13316 comm="syz.3.2069" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 674.266237][ T29] audit: type=1400 audit(1785159807.670:907): avc: denied { execute } for pid=13316 comm="syz.3.2069" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 674.327022][T13319] buffer_io_error: 325 callbacks suppressed [ 674.327041][T13319] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 674.327042][T10177] Buffer I/O error on dev loop4, logical block 74, async page read [ 674.336454][T13319] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 676.263804][T13350] syzkaller0: entered promiscuous mode [ 676.297449][T13350] syzkaller0: entered allmulticast mode [ 676.485881][T13361] syzkaller0: entered promiscuous mode [ 676.502936][T13361] syzkaller0: entered allmulticast mode [ 677.283045][T13369] pimreg: entered allmulticast mode [ 677.361464][ T29] audit: type=1400 audit(1785159810.900:908): avc: denied { write } for pid=13376 comm="syz.0.2083" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 677.574268][T13386] bridge6: entered promiscuous mode [ 679.827215][T13413] Invalid ELF header magic: != ELF [ 680.619394][ T5697] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 681.241624][ T5697] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.315446][ T5697] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 681.343565][ T5697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.047305][ T5697] usb 1-1: config 0 descriptor?? [ 682.210699][ T5697] pwc: Askey VC010 type 2 USB webcam detected. [ 683.501461][ T5697] pwc: recv_control_msg error -32 req 02 val 2b00 [ 683.767584][ T5697] pwc: recv_control_msg error -32 req 02 val 2700 [ 683.805534][ T5697] pwc: recv_control_msg error -32 req 02 val 2c00 [ 683.830946][ T5697] pwc: recv_control_msg error -32 req 04 val 1000 [ 683.874482][ T5697] pwc: recv_control_msg error -32 req 04 val 1300 [ 683.896160][ T5697] pwc: recv_control_msg error -32 req 04 val 1400 [ 683.925296][ T5697] pwc: recv_control_msg error -32 req 02 val 2000 [ 683.966607][ T5697] pwc: recv_control_msg error -32 req 02 val 2100 [ 683.990489][ T5697] pwc: recv_control_msg error -32 req 04 val 1500 [ 684.011065][ T5697] pwc: recv_control_msg error -32 req 02 val 2500 [ 684.033165][ T5697] pwc: recv_control_msg error -32 req 02 val 2400 [ 684.052826][ T5697] pwc: recv_control_msg error -32 req 02 val 2600 [ 684.069901][ T5697] pwc: recv_control_msg error -32 req 02 val 2900 [ 684.882976][ T5697] pwc: recv_control_msg error -71 req 04 val 1100 [ 684.890807][ T5697] pwc: recv_control_msg error -71 req 04 val 1200 [ 684.922774][ T5697] pwc: Registered as video103. [ 684.930972][ T5697] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input23 [ 685.397573][ T5697] usb 1-1: USB disconnect, device number 25 [ 686.187119][T13477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2113'. [ 686.210079][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.353090][ T29] audit: type=1400 audit(1785159820.839:909): avc: denied { create } for pid=13483 comm="syz.3.2109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 687.574649][ T29] audit: type=1400 audit(1785159820.859:910): avc: denied { write } for pid=13483 comm="syz.3.2109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 688.185469][ T29] audit: type=1400 audit(1785159821.699:911): avc: denied { write } for pid=13495 comm="syz.5.2116" name="functions" dev="configfs" ino=32166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 688.229426][ T29] audit: type=1400 audit(1785159821.719:912): avc: denied { write } for pid=13495 comm="syz.5.2116" name="c.1" dev="configfs" ino=32654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 688.391247][ T29] audit: type=1400 audit(1785159821.719:913): avc: denied { create } for pid=13495 comm="syz.5.2116" name="midi2.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 688.414271][ T29] audit: type=1400 audit(1785159821.719:914): avc: denied { write } for pid=13495 comm="syz.5.2116" name="c.1" dev="configfs" ino=32654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 689.860115][ T5697] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 690.548331][T13530] bridge7: entered promiscuous mode [ 690.597928][T13530] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 691.980374][ T5697] usb 1-1: Dual-Role OTG device on HNP port [ 692.514837][ T5697] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 692.526658][ T5697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.561439][ T5697] gspca_main: spca501-2.14.0 probing 0000:0000 [ 692.597748][ T5697] gspca_spca501: reg write: error -32 [ 692.615638][ T5697] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 692.639849][ T5697] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 692.663028][ C0] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI [ 692.675124][ C0] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 692.683548][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 692.694063][ C0] Tainted: [L]=SOFTLOCKUP [ 692.698388][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 692.708446][ C0] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 692.714366][ C0] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 692.733988][ C0] RSP: 0018:ffffc900000079e8 EFLAGS: 00010002 [ 692.740048][ C0] RAX: dffffc0000000000 RBX: ffff88805c4c4000 RCX: ffffffff87e7a829 [ 692.748001][ C0] RDX: 00000000000000e6 RSI: ffffffff87e7a666 RDI: ffff88805c4c4128 [ 692.756389][ C0] RBP: ffff88805c4c4128 R08: 0000000000000004 R09: 0000000000000020 [ 692.764351][ C0] R10: 0000000000000020 R11: 000000000000aa89 R12: ffff88805c4c40f0 [ 692.772317][ C0] R13: ffff88805c4c4128 R14: ffff88805c4c4740 R15: 0000000000000001 [ 692.780274][ C0] FS: 0000000000000000(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 692.789187][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 692.795776][ C0] CR2: 000020000000f000 CR3: 000000002368e000 CR4: 00000000003526f0 [ 692.803728][ C0] Call Trace: [ 692.806986][ C0] [ 692.809814][ C0] f_midi2_set_alt+0x444/0x5f0 [ 692.814571][ C0] composite_setup+0x16f8/0x9290 [ 692.819493][ C0] ? __lock_acquire+0x49f/0x1a40 [ 692.824422][ C0] ? __ww_mutex_check_waiters+0x81/0x440 [ 692.830048][ C0] ? __pfx_composite_setup+0x10/0x10 [ 692.835320][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 692.840860][ C0] ? do_raw_spin_lock+0x128/0x260 [ 692.845879][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 692.851249][ C0] ? configfs_composite_setup+0xfb/0x130 [ 692.856869][ C0] configfs_composite_setup+0xfb/0x130 [ 692.862309][ C0] dummy_timer+0x2045/0x36f0 [ 692.866894][ C0] ? trace_seq_putmem_hex+0x1e1/0x2e0 [ 692.872269][ C0] ? do_raw_spin_lock+0x128/0x260 [ 692.877284][ C0] ? find_held_lock+0x2b/0x80 [ 692.881948][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 692.887569][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 692.893185][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 692.898971][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 692.904594][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 692.910560][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 692.915487][ C0] ? rcu_is_watching+0x12/0xc0 [ 692.920237][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 692.926027][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 692.930962][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 692.936151][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 692.941250][ C0] handle_softirqs+0x1ea/0x9b0 [ 692.946001][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 692.951268][ C0] ? _raw_spin_unlock+0x28/0x50 [ 692.956107][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 692.961736][ C0] __irq_exit_rcu+0x162/0x210 [ 692.966418][ C0] irq_exit_rcu+0x9/0x30 [ 692.970650][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 692.976284][ C0] [ 692.979199][ C0] [ 692.982110][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 692.988161][ C0] RIP: 0010:finish_task_switch.isra.0+0x2cd/0x10c0 [ 692.994649][ C0] Code: ab 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 e9 47 04 00 00 49 8d 7f 48 e8 30 04 e8 09 e8 ab ac 3c 00 fb 48 8d bb f8 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 693.014250][ C0] RSP: 0018:ffffffff8e807c40 EFLAGS: 00000202 [ 693.020313][ C0] RAX: 0000000001e32fc1 RBX: ffffffff8e891480 RCX: 0000000000000000 [ 693.028272][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a5b18 RDI: ffffffff8e892b78 [ 693.036224][ C0] RBP: ffffffff8e807c98 R08: 0000000000000001 R09: 0000000000000000 [ 693.044177][ C0] R10: 0000000000000001 R11: ffffffff81d6005c R12: ffff88807da70000 [ 693.052148][ C0] R13: 0000000000000001 R14: ffffffff9122a7a4 R15: ffff8880b843b4c0 [ 693.060104][ C0] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 693.066011][ C0] __schedule+0x1264/0x6730 [ 693.070501][ C0] ? __pfx___schedule+0x10/0x10 [ 693.075352][ C0] ? rcu_is_watching+0x12/0xc0 [ 693.080108][ C0] ? tick_nohz_idle_exit+0x1a1/0x3f0 [ 693.085384][ C0] schedule_idle+0x54/0x80 [ 693.089781][ C0] do_idle+0x35e/0x5b0 [ 693.093837][ C0] ? __pfx_do_idle+0x10/0x10 [ 693.098415][ C0] cpu_startup_entry+0x4f/0x60 [ 693.103166][ C0] rest_init+0x251/0x260 [ 693.107405][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 693.112939][ C0] start_kernel+0x48e/0x490 [ 693.117443][ C0] x86_64_start_reservations+0x24/0x30 [ 693.122897][ C0] x86_64_start_kernel+0x12b/0x130 [ 693.127994][ C0] common_startup_64+0x13e/0x158 [ 693.132940][ C0] [ 693.135939][ C0] Modules linked in: [ 693.139833][ C0] ---[ end trace 0000000000000000 ]--- [ 693.145281][ C0] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 693.151176][ C0] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 693.170878][ C0] RSP: 0018:ffffc900000079e8 EFLAGS: 00010002 [ 693.176931][ C0] RAX: dffffc0000000000 RBX: ffff88805c4c4000 RCX: ffffffff87e7a829 [ 693.184901][ C0] RDX: 00000000000000e6 RSI: ffffffff87e7a666 RDI: ffff88805c4c4128 [ 693.192856][ C0] RBP: ffff88805c4c4128 R08: 0000000000000004 R09: 0000000000000020 [ 693.200813][ C0] R10: 0000000000000020 R11: 000000000000aa89 R12: ffff88805c4c40f0 [ 693.208766][ C0] R13: ffff88805c4c4128 R14: ffff88805c4c4740 R15: 0000000000000001 [ 693.216720][ C0] FS: 0000000000000000(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 693.225634][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 693.232373][ C0] CR2: 000020000000f000 CR3: 000000002368e000 CR4: 00000000003526f0 [ 693.240363][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 693.247784][ C0] Kernel Offset: disabled [ 693.252088][ C0] Rebooting in 86400 seconds..