last executing test programs: 3m6.575198405s ago: executing program 4 (id=1991): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000fe8000000000000000000000000000aa00000005000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000b30b000000000000ffffffffffffffff0008000000000000ffffffffffffffffffffff7f000000008100000000000000df00000300000000000000000000000000000000008040000000000000000008000000000000000001000003000000004400050000000000000000000000000000000000000004d23c"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 3m5.652216455s ago: executing program 4 (id=2008): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0xc, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r4, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000180)={0x0, 0x3e0e, 0x0, 0x3, 0x28e, 0x0, r0}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8bf, 0x1, 0x2, 0x1af, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x3b2, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x4, 0x0, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x3, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x48, 0x0, r7, 0xc0107526, 0x0, 0x0, 0x0, 0x0, {0x10}, 0x0, r5, '\x00', {0x3, 0xb59, 0x100104, 0x0}}, &(0x7f0000000280)) 3m5.498689568s ago: executing program 4 (id=2010): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2, 0x0, 0x400000000000000], 0x10000, 0x202}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x26000, 0x0, 0xf, 0xb, 0x8, 0x0, 0x6, 0x3, 0x0, 0x8, 0x6, 0x6}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0xeeef0000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0xc, 0x3, 0x0, 0xfc}, {0x0, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x80a0000, 0xeeee8000, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x47fac7d8324b07f2, 0x0, 0x78, 0x5, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1}, {0x0, 0x7000, 0xa, 0x4, 0x0, 0x4, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0x9, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x4}, {}, 0xddf8ffdb, 0x0, 0x0, 0x111, 0x0, 0xf801, 0xdddd0000, [0x80000001, 0x0, 0x1, 0x1]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3m5.435791979s ago: executing program 4 (id=2011): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 3m5.371787368s ago: executing program 4 (id=2014): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000000), 0x8) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003680)=[{{&(0x7f0000000500)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@txtime={{0x18, 0x1, 0x3d, 0x1000000000003}}], 0x18}}], 0x1, 0x8840) 3m4.657303091s ago: executing program 4 (id=2018): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x3022d6e144aa3cee}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x28a43, 0x0) 3m4.223708074s ago: executing program 32 (id=2018): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x3022d6e144aa3cee}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x28a43, 0x0) 11.953010532s ago: executing program 0 (id=2844): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x4000000008, 0x2) syz_emit_ethernet(0x33, &(0x7f0000000040)={@local, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x4, 0x11, 0x0, @empty, @empty}, {0xffff, 0x4e23, 0x11, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}, "72c0ed933f"}}}}}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x30800, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00'}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x80002, 0x4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES32=r6], 0x20}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3}, 0x8, 0xa20, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000003980)}}], 0x1, 0x4000000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xa1798b1747472e26, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000002840)=""/82, 0x52}], 0x1, 0x8, 0x6) 11.940230461s ago: executing program 5 (id=2845): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000840)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000500)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000001540)=""/4092}) r2 = eventfd(0xf7b2) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 10.905620716s ago: executing program 0 (id=2847): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi4\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$vimc0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) socket(0x2, 0x3, 0x4) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000380)={0x0, 0x31d5, 0x400, 0x0, 0x3e2}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r1, 0x1008, 0xfffffffd, 0x9, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405668, &(0x7f0000000000)={0x6, 0x0, 0x1, "0000087aba10fdfffffbe30b51751bc53051a30000000000000016ebffffff00", 0x34565559}) io_submit(0x0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) mount$tmpfs(0x0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200), 0x2020005, 0x0) chdir(&(0x7f0000000100)='./file0\x00') ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, 0x0) socket(0x2, 0x80805, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) creat(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12f) syz_usb_disconnect(r0) 10.341765935s ago: executing program 5 (id=2849): syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x202, 0x12) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b40)="86545d2157646172b815818bfd0e", 0xe}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c", 0xf}], 0x2, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800007feb00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000851b0000860000001868000010000000000000000700000018090000e6271967", @ANYRES32, @ANYBLOB="0000000000000000850000008c000000183800000300000000000000000000009500000000000000"], 0x0, 0x7fff, 0x0, 0x0, 0x41100, 0x3}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c8a6ffb80", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = gettid() syz_open_procfs$namespace(r4, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000005c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x22, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f0000000580)={0x10, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f0000000740)={0x5, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_SYNC(0xffffffffffffffff, 0xc010644f, &(0x7f0000000880)={{0x18, 0x3, &(0x7f0000000780)=[{0x0, 0x0, 0x7fff, 0x1174}, {r8, 0x1, 0x0, 0x9}, {r9, 0x0, 0x3, 0x2}]}}) tkill(r4, 0xc) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 9.464459601s ago: executing program 0 (id=2851): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047d"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 7.9466087s ago: executing program 5 (id=2856): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi4\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$vimc0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) socket(0x2, 0x3, 0x4) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000380)={0x0, 0x31d5, 0x400, 0x0, 0x3e2}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r1, 0x1008, 0xfffffffd, 0x9, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405668, &(0x7f0000000000)={0x6, 0x0, 0x1, "0000087aba10fdfffffbe30b51751bc53051a30000000000000016ebffffff00", 0x34565559}) io_submit(0x0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) mount$tmpfs(0x0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200), 0x2020005, 0x0) chdir(&(0x7f0000000100)='./file0\x00') ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, 0x0) socket(0x2, 0x80805, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) syz_usb_disconnect(r0) 6.065611071s ago: executing program 5 (id=2861): socket$inet6(0xa, 0x1, 0x84) close(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x107d) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_extract_tcp_res(&(0x7f0000000080), 0x80000000, 0xd) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) syz_emit_ethernet(0x6e, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a661", 0x3f}, {&(0x7f0000000500)="f02ec70a0e8900b151d826894f", 0xd}], 0x2}, 0x0) syz_emit_ethernet(0xc6, 0x0, &(0x7f0000000540)={0x0, 0x2, [0x43b, 0xb10, 0x33e, 0x6ea]}) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x38, &(0x7f00000002c0)={0x0, 0x36a9, 0x8, 0x0, 0x55}, 0x0, 0x0, &(0x7f0000000340)) syz_open_dev$sndpcmp(0x0, 0x3, 0x480000) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_clone(0x18200000, 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000006c0)) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r3, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084) ioctl$DRM_IOCTL_PANTHOR_BO_SYNC(0xffffffffffffffff, 0xc010644f, &(0x7f0000000740)={{0x18, 0x8, &(0x7f0000000680)=[{0x0, 0x1, 0xffffffffffffad09}, {0x0, 0x0, 0xd2, 0x100000000}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x1, 0x2, 0x100000000}, {0x0, 0x1, 0x5, 0x1}, {0x0, 0x0, 0x0, 0x453}, {0x0, 0x0, 0x3, 0xe}, {0x0, 0x1, 0xbcf3, 0x8000000000000001}]}}) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5.769671876s ago: executing program 0 (id=2862): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a847e0ffff00124000638477fbac141416e000030a945e9f03", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.748328399s ago: executing program 0 (id=2866): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UBLK_U_CMD_GET_DEV_INFO(r2, 0x80207502, &(0x7f0000000280)={0x0, 0xffff, 0x40, &(0x7f0000000040)=@ublk_ctrl_dev_info_existing}) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 4.506434094s ago: executing program 0 (id=2868): socket$inet_tcp(0x2, 0x1, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @auto=[0x31, 0x37, 0x36, 0x66, 0x64, 0x66, 0x61, 0x65, 0x35, 0x65, 0x66, 0x63, 0x30, 0x0, 0x37, 0x30]}, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x8c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000f7ff0105daa8d9ff85c3000000c0000000000003000003"], 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r5}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f00000005c0)={r5}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.505929159s ago: executing program 1 (id=2869): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x14b041, 0x2) memfd_create(0x0, 0x1) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@u, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000a58ba87d0b616a4adcc07f174fef63fc4d6648f6eec1724586361dbfe4756fae36e5eacbfda743d3d6baac58c485513cd3309959488ce56f871d11c9a26a252f83a49d9e618d3eb049cacae9f0d65db917de49dcdd16f3d6fe8838f5de41f0cfff86820e85ba9906f4e1a77c768ce6ab2d51c6cc929937ddf721c95c4b1337996b92f1c3406503b8d8460fc6bf8b753a0fe24f0bc22fa3a9a0491a35d995e1e57b5a8619dfd16c1555a8297d9761230dbde7743263b5a1f6ea788648fa22f7a0c57103d9ff30fd5085d2a7df273a79334c031d999823a14c587128bc2f220d412cdcad2f2f55e18b42fe9da92b5b3ce274184c96a2d309a221aecc44a561a2e80e8115958c9fba6fb384c3756043668b754a8f60b8ef535d3c4dddc2e8c8ef56f7434b68e0bcd4b10d73de04054af92ab0efc87aa6fc3bbeb8cf58ea3df6db2691ea37b158c8608754481384abfd3d7d673a9f9a15b0b7cced101992166497"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x40000001}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000040000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c900000014003100fc010000000000000000000000000001ef948c95c530"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) 4.017584088s ago: executing program 1 (id=2871): r0 = socket$netlink(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="02030003420000002cbd7000ffdbdf2502000900080000001c00000000000000050006003c0000000a004e2400000006ff010000000000000000000000000001000000000000000002000100000000000000060c000000c005000500000000000a004e240000000900000000000000000000000000000000060000000000000032000800300c"], 0x210}, 0x1, 0x7}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000580)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000100)={r3, r4, 0x0, 0x0, 0xfffffffffffffffe}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000000)={r3, r4, 0x0, 0x0, 0xd4}) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@gettfilter={0x24, 0x25, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c004}, 0x0) 3.927657886s ago: executing program 3 (id=2872): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000007ffffffe05000c000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.484247402s ago: executing program 3 (id=2874): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x12) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0xfffffffffffffffb, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x30004004, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x48002, 0x1) umount2(&(0x7f0000000280)='./file0\x00', 0x3) read(0xffffffffffffffff, &(0x7f00000001c0)=""/254, 0xfdef) 3.160072435s ago: executing program 1 (id=2878): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x50, r2, 0x81128000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000500)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.866254482s ago: executing program 3 (id=2879): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000000)=[{r0, 0x8520}], 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2) setresuid(0xee01, 0xee01, 0xee00) r1 = getpgid(0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r4 = socket(0x2, 0x400000000002, 0x0) setsockopt(r4, 0x0, 0x82, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3ffffffffffde, {0x0, 0x200000000, 0x8000001, 0x4, 0x6, 0x0, {0xfffffffffffffffc, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r5, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000440)={{}, {0x1, 0x6}, [{0x2, 0xa, 0xee01}, {0x2, 0x2, r2}, {0x2, 0x7, r5}, {0x2, 0x1, r6}], {0x4, 0x4}, [{}, {0x8, 0x3, r8}, {0x8, 0x4, 0xee01}, {0x8, 0x1, 0xee00}], {0x10, 0x2}, {0x20, 0x5}}, 0x64, 0x0) prlimit64(r1, 0xe, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x2200000, 0x0) 2.777476056s ago: executing program 5 (id=2881): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020) 1.944181949s ago: executing program 3 (id=2884): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x14b041, 0x2) memfd_create(0x0, 0x1) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@u, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x40000001}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000040000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) socket$netlink(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) 1.846165392s ago: executing program 2 (id=2885): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=@newqdisc={0x84c, 0x24, 0x20, 0x70bd2d, 0x1, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xd, 0xf}, {0x0, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x820, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xfe8}, @TCA_TBF_RTAB={0x404, 0x2, [0x100, 0x0, 0x4, 0x0, 0x3ff, 0x80, 0x400, 0xe, 0x1, 0x7, 0x80, 0x729, 0x5, 0x29, 0x9, 0x7, 0x9, 0x3, 0xffffff7d, 0x4, 0x0, 0x1, 0xff, 0x7, 0x6, 0x3, 0x5, 0x4, 0x8001, 0x9, 0x118c, 0xffff, 0xdd35, 0xffffffff, 0x3, 0x8, 0xb8ad, 0x2f, 0x7fff, 0x1, 0x10, 0x7, 0x2, 0x0, 0x2, 0xfffffe00, 0x9, 0xec1, 0xffffffc0, 0xf, 0x729, 0x9, 0x2, 0x5, 0x8, 0x6, 0x2, 0x2759, 0x3, 0x2, 0x6, 0x8, 0x4, 0x7fffffff, 0x5, 0x1000, 0x800, 0x1, 0xffff, 0x2, 0xdef9, 0x8, 0x95, 0x7, 0x3e97a195, 0x28f, 0x9, 0xfbcf, 0x4, 0xb, 0xfffffffc, 0x2, 0xe70b, 0xffff94b9, 0x200, 0xfffffff8, 0x8, 0xc00, 0xfffffff0, 0x7f, 0x6, 0x100, 0x8, 0x0, 0x6c7, 0x8, 0x5a8, 0xd, 0xcc, 0xb8ea, 0x4, 0x1ff, 0xe, 0xe5a2, 0x3, 0x80000001, 0x6, 0x9, 0x0, 0x2, 0x6, 0x1, 0xffff, 0x1, 0xffff, 0xfd, 0x8, 0x1, 0x0, 0x100, 0x7, 0x908, 0x3, 0x3, 0x7, 0x1, 0xe, 0x6, 0x3, 0x5, 0x0, 0x97, 0x6, 0x2, 0x1, 0xe, 0x800, 0x6, 0x3207, 0x8000, 0x8, 0x200, 0x1, 0x6, 0x9, 0x9, 0xfffffff7, 0x401, 0xff, 0x2, 0x6, 0x80000000, 0x4, 0xc8cd, 0x8, 0x9, 0x7, 0x5, 0x1ff, 0x8, 0x800, 0x5, 0xd, 0x5, 0xd, 0x1ff, 0x8, 0x9, 0x0, 0xfffffffc, 0x0, 0x9, 0x6, 0x1000, 0x8000, 0x65af, 0x10ae, 0xfffffff7, 0x10000, 0x400, 0x8000, 0x9, 0x9, 0x8, 0x81, 0x6, 0x9, 0xf, 0x0, 0x3, 0x2a16, 0x7fffffff, 0x0, 0x3ff, 0x0, 0x1, 0xfffffff8, 0x7fff, 0x1, 0x2, 0x4e551ea7, 0x7, 0x81, 0xc0ed, 0xa, 0x3, 0x0, 0x2, 0x4, 0x8, 0x6, 0xfffffc01, 0xb, 0x3, 0xfffffff7, 0x1, 0x5, 0x6, 0x2, 0x7, 0x2, 0x42, 0x3, 0x81, 0x6, 0x2, 0x40, 0x0, 0x6, 0x8, 0x1, 0x4eaf, 0xed, 0x4, 0x7, 0x10, 0x8000, 0x24, 0xb, 0x7c43, 0x4, 0x8001, 0xef76, 0x1, 0x7, 0x6, 0x8, 0x7, 0xd06, 0x101, 0x0, 0x7, 0x603, 0x4, 0x8fe, 0x7fff]}, @TCA_TBF_RATE64={0xc, 0x4, 0xc4627e4c1f22eaa3}, @TCA_TBF_PTAB={0x404, 0x3, [0x7fff8000, 0x4, 0x2, 0x92a, 0x3, 0xf, 0x4f, 0x3, 0x8, 0x6, 0x2, 0x4, 0x738, 0x0, 0x3d8, 0xd, 0xd, 0x3, 0x6, 0x9, 0x3, 0x8, 0x7fffffff, 0x3, 0x100, 0x1, 0x7, 0x2, 0x9, 0x3, 0x1ff, 0x7, 0x3, 0x8e1, 0x0, 0x2, 0x1, 0x1, 0x4, 0x3, 0x5, 0x6, 0xe, 0x8, 0x101, 0x5, 0x0, 0x7, 0x238f, 0x9, 0x81, 0xa1e5, 0xe, 0x4, 0x0, 0x7, 0x8001, 0x7, 0x6, 0xffff, 0xcd9, 0x5, 0x4, 0x7fffffff, 0x7, 0x55, 0x7, 0x881, 0xd, 0x4, 0x400, 0xd, 0x8, 0x6, 0x1, 0x5, 0xed7c, 0x3, 0x7, 0x5d, 0x7, 0xf8, 0x3, 0x81, 0x0, 0x7a68, 0xfffffffb, 0x3, 0x3, 0x8caa, 0x9, 0x9, 0x9, 0x8000, 0x3, 0x8, 0x3, 0x3812, 0x5, 0x2, 0xa6, 0xffff, 0x9, 0x1000, 0xa86, 0x3ff, 0x4, 0x75, 0x7ff, 0x9, 0xffff, 0xb8fa, 0x7fffffff, 0xf53, 0x5, 0x7fffffff, 0x255, 0x2, 0x6, 0x9, 0xa2, 0xf03, 0x9, 0x4, 0x7d, 0x9, 0x2, 0x5, 0xffffffc0, 0x0, 0x361b, 0x1891, 0x6, 0x4, 0x5, 0x7fff, 0x2, 0x7, 0x8, 0x8001, 0xc, 0x7, 0x4, 0x10001, 0x6, 0x6, 0x8, 0x8, 0xd2, 0x80, 0x80000001, 0x4, 0x9, 0xa8, 0x6, 0x7, 0x1, 0x0, 0x9, 0xffff, 0xe, 0x1, 0x1, 0x4, 0x6, 0x1, 0x101, 0xf, 0x1, 0xa4, 0x5, 0xffff, 0x7, 0x9, 0x4, 0xfff, 0x4, 0x6, 0x80, 0x5, 0x5, 0x7f, 0x4, 0x44, 0x7, 0x0, 0xfffffc01, 0x1, 0x3, 0xd, 0x8001, 0xffffffff, 0x2, 0x80000000, 0x8, 0x3, 0x9, 0x52e, 0xfffffffa, 0x2, 0x6, 0x6, 0xffff7fff, 0x40, 0x5, 0x9, 0x1, 0x1, 0x1, 0x7, 0x7fff, 0x7, 0x1, 0xfffffc01, 0x1, 0x8, 0x8001, 0x2, 0xb94, 0xced, 0x0, 0xfffffffc, 0x4, 0x6, 0x8000, 0x1000, 0x3d, 0xe5, 0x1, 0x9, 0x42f, 0x300, 0x4f9583b3, 0x5, 0x4, 0x1, 0x0, 0x3, 0x8, 0xfffffffe, 0x7a, 0x6, 0x4, 0x5, 0x5, 0x3, 0x1, 0x8001, 0xfffff3fc, 0x1, 0x0, 0x5, 0x6, 0x740e, 0x3ff, 0x40]}]}}]}, 0x84c}, 0x1, 0x0, 0x0, 0x24000045}, 0x4c950) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000080)=r0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000007c0)={0x0, &(0x7f0000000500)=[@nested_amd_vmsave={0x183, 0x18}, @uexit={0x0, 0x18}, @set_irq_handler={0xc8, 0x20, {0x6a}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_vmresume={0x130, 0x18, 0x1}, @enable_nested={0x12c, 0x18}, @wr_drn={0x68, 0x20, {0x3, 0x6}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x1, 0x800}}, @nested_amd_stgi={0x17e, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @guest16=0x800, 0x8, 0x8000000000000000, 0x93}}, @nested_amd_clgi={0x17f, 0x10}, @out_dx={0x6a, 0x28, {0x3990, 0x5, 0x63}}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_load_syzos={0x136, 0xd5, {0x1, 0xfffffffffffffffb, [@nested_load_code={0x12e, 0x7d, {0x3, "c463c16d593780360feaadfe1633eec4614973d804c40269bf273e3e660f72d100450f212448b804000000000000000f23d00f21f835200000060f23f8c7442400ea000000c74424020b000000ff2c24dbe3c744240023010000c7442402dec30000ff2c24"}}, @wrmsr={0x65, 0x20, {0x400000b6, 0x4}}, @nested_amd_vmload={0x182, 0x18, 0x2}]}}, @nested_create_vm={0x12d, 0x18}, @out_dx={0x6a, 0x28, {0x5204, 0x7, 0x5}}, @nested_amd_clgi={0x17f, 0x10}, @enable_nested={0x12c, 0x18}], 0x2bd}) pipe2(&(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) waitid$P_PIDFD(0x2, r1, 0x0, 0x4, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0xc0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket(0x2b, 0x1, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1.421428091s ago: executing program 3 (id=2886): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e9000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x80, 0x0, {}, {0x0, 0xb846941ed94b4582, 0x80, 0x0, 0x0, 0xa, "a500e300"}, 0x4, 0x2, {}, 0x20800, 0x0, r1}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) 1.373129434s ago: executing program 1 (id=2887): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x1a1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448d4, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='hpfs\x00', 0x800, 0x0) mount(0x0, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='hpfs\x00', 0x800, 0x0) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003700)={r5, 0x0, 0x9b, 0x85, &(0x7f0000000300)="a8ba55a9c7701fbafbf819fad33c5623762fd3c30fd9c648d53cd162e15ceb0e05b6167359ecd99d942ab254f1652afc211d235aec8a695d71f6ccf0f255329357bb261f28aa00c50631c10494894cffab63c603f1543c5f6be8f704125b1b009343c8f049135d94c578f4b95201ddf4837601a564ecf3f7e77b6112892122416941f781e851d5775ae04c022832ef6d56095e4ec0404e935545e6", &(0x7f00000003c0)=""/133, 0x10000, 0x0, 0xc00, 0xfff, &(0x7f0000000480)="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", &(0x7f0000002700)="6c9ab289c8676897819b7736e320ed0aa0fe9e9748febc1033954cc85021142ecbd9d6c39c5fbd3f088409c06653039197ace9ac14fe410c859bcf464b9700c08d20784491a02044e9f52e08de9f5dee3c27291b7bc7a4fddc525ba6020279ff086fe505af6ad798325d8d799e6f0fd5c2a2ba7ea661a60e7b556ac7b26702ff443b09a2275063c3a8c1f2777c0ab8dd196bcab1b2091a70c790e89c8552ae8f72096e5866ede4e91b3478bb92849871024d9a4ee98996f132ea430e3337ebb8d7d551c684d253b764796d254ff9da194ca42ad7d0eade1140300e6bbebd82791a1686ac65e2b603d20bf99308da45d97f1da6a7dc624b701044de4e1607d06627dceccf100ea4fb21f1b94fd39a28d86104c87b4e16384d8bce4c7417c399e8bdfc268b9868c38d4347630ad865c268042971f35f4f8d41cea08f56df19ef2aaf09aa18cc11412b98546d02653de1f38eac65c8cc4fe2ff49b51172b5c4352bcf3dc11ea59c81fbb2331ee118d7c64c3b776cf07f894ed670271c298821cffa61239bc317ed4dad06d25a485fc735fdd45751347d8deda80e735ceb1ffc4e60eed7caa261c052bd122a538cc3ba008e7f1f071c99951a9cc32e846da5314b1924f46d71d9e96cdd90f3c34d8e27a4552b01e8f70ba03530375f4d2565ba4e9f063a004b0da0ca17ab5c149ff32577f78f9dac1badf8c49c6de1fcf47b0c48149d3aa07acf0e1a555afa888436ef68b843a27b281e88ee1f542c758afa89fae32566bbb246556c118261ee991502bc21d6bb778e2cd5f9efdb2889a0943c5fa5cb70fb8de677634ec28773fdf0e7b03bbefb6a891c992f9fc5f5e5c20b13a24e8e41362e2f35e7639ac1ecf492a2ced5296dd40a1d62adb591fefc6e032d069125113a084f3cc9575b79e7837c8bb367a64ad0afc159fad249d618a5df5f88c21e4c9be2d49dd2d69e3c7b3a8a7ceb8a8817f2456905be2e0f6ed1558e3dba09fe6524b786712e4df950a822dcb4070ebbdf7314d280f8e833fabb75b49126e99135a30f486e63def129d7ca301e97670bd0ecb255271192a894f899f1a2b5e900fdf5120892e2dfd0e59c8e78137d4a613888890365ff4d3f9e09bbbc22a8408e9469fffb723f5298c251c583d4a34688503d8b9d2567ad4191cdac57977cd7385d68dd70e2d9ccfbd5bc927ad916dfc27117d7ef32e87493a0d68905c14ed718aacb7a98c09450907f44b85d33ec035357bd844468827231e63603b82b8a8cd150f86d72e0eff0fdf409d4d4c5960abb96049a58dd7e98f7ebd0c79c6cb6637051629cc002859227b6d87ee3c153176e83156831b69d1c8bafae30ffbfa8bac74a3698e2eb0171622e4fe92d548af5806b55a441d5479e7515793044acaf683256a28b01202effba8d431a3de98ffa40e26a209d351772514e14f6c77e7f863ed5724d73a7e523bdfb20bc54f2313508081a8fa8232ea50e555342c0c42da23fcfa962736f42904003eb98e36077d441768c749f31a277b2e6e8b780d174a981899b4a2c673c12095530c1d2ce8f0c74e47816d5347f46aef8c9379ec3eeb31a62ebe6e60a87436f1b240c796d7a927993d3ea0386dfe97c06093f42571711690e0903dab17905d420804c06754d614748de25426bd0cb1886959e11346a617bb624eb12bb2c401f6be8c0af4ca8745fdbda7e35f0a24a870c79e3918510e158a4b1449d181a37de78a341d3ce95d2289c5453fa8fa092705e9c521734e5af07bb73a5e10a2da3175d99f6bcf81356b2020664e4fcf277d5d233237ac6acad47dcc43ebe700cb5aecd889f73b208089e311adc5332d6f5918e51aefa0efc2f9a2dc0a100d67027f5b6782ff7c7d2e882b2e37ce36b57758bfb79a02909490909e486d4e3030f93a08ab019d617397f796d3bf1723dfae4a602ee226387b78f096af680a8b714502b4b86424b1b0e4feba2ecee4be657c6e178d7e02e22ad0827e393ce5c43d978abcecc8c14e59ea062a69aa629415ebb96a1cdd7e4834c86beb0254f071b38cba0d518107828132dd2928d141efb30c0e1f5f5ed82fe23c01f2a55733ec94032c9ccc5d7177d8863391528f6ad208b4c1e147b5c6d5d5a66232109c633e97f9d877a337018ae3ea0460c55cb825fa2248ee8243563735b84a7149ec7666a8e192eae5016e5cedd1a315c44f6f55b8c98645dfe885f1c6dd052d4c9fcc854a33823e1787f0384037c9aefd201774874e63d6fe7bcdca630053f243ee59c116a1103ce16b78ab8048aeb7405230afa7560e1b5817797559e7754ecbbaf985761b7e0c7be431594bcc09823f99fa3d65d22a57e8d470678be4d1f94055f5e8e7698cacd10ba41a6f6ef7eb35833fffeba8c5e94864c5e888f2029fef1c70e66536810c7639fa5738fc16a36c6fb838761e6c46a0db7d366db2d90be79741ea53e9fdc05026e5bfc909d53f21558f91eb2bd39d30b072f2f8ff172421903a826255f6c9e6082d1babfa2af01464b3203b498241c1844a5830fb9566bf86887af9fc29077a9d3820be8ba5f8293d4b708b41626a791e19bf5b035bee3a1e20f0f936a10089ed156f4ef966ca727c38c68e71496c0338fb3e8340b380e95b30ca4eb8c43d665a3b5effde207458923e18e8940e437f2917d36664c67afb2c39416b0242e6a55f52aa05e3ca96fc80ee16e4df3463175b85111c456ed59c5f97514fe52d91dae840fd96140000211e9cbb6040194436d3ac48baf00d404883b360e925a160fad5c649708088e65ef6405084bfa6affe9c6265d03982b61b76eb398d78d314bac58d3e2b6c7d07cacc55a766c1f17b3e631910905b781e7c1719bd3965e8c05601fedcecff2980de9424407e2bc01397644051e417d52d5504e666bcf556d3d2d916cb8b0e24ce47f1663b76f81b885652bd1a6cb07e5b4f5d19ef73b7ee2eb7fa95f2359e94ae7da4e029a5bb17f8b650b2fb15b12b7756d5bad0b066e8eca314b3ef1897a178dda1813afc97a75670cc8171173a4f7a60cef8d70a8b7ee344dd75f5a5198a8aca5a81e20ae15812cf3b4119771b010726c906385a770d4beb1783c558e5f46c05a3c41eafa3bc1c0da8b2b3fdea0653ee8adfb36c807d0aafaf8f3c9169a75d9289236ac6f7410978645b1020f5df4491487bc66c02bc12842ff5ae31d9bbc24005b4510bb7d0cbf92b2d19130d55cd6dc0a54d00e36ec286e27d788f8846bd91ac070555ff5f21251bea87ceef9f08ad4f8a8986ff38364d81cb794dfabb419d0d4d5c85193bf7bf500f748e540a0c6599dbba1574b86baf3c02862431ffafa0deff050b57552edf3aed9ef15cc2c64ea827528fac850df0d36c6ee530a13fec0a05e62a42b8ba70ed6cf4dabe0e60ff662c7b37159f11e3b8ed3ffcbd2278a7ac4f84286cf5f8016e9cd0f8f0f7b4a8eb5b8b18bbe1e20fd49a9002edd573836f8f94a993e30084e64617060c66ddc7367e12d773e1227648f7a2922e5e6ee61c93b8477ac3fc23b772e59157d4a279cbca8e7d09ddf658cb1e5103eb8ccbd57f6f6095a065d37e194111e3a0bf5811e76704462949bbb44a18b33d130d86dbfa7c158d1a27a5a6233b38789cc89f31550cf02b076049f6eb556b1857c5ee0efd901f393d9f26d2bff79bb2d0a0c6c88836cad5583de6bd4c8e3ad0fb5bd4d8bb31427c16ffe6dec85c92e19c406bb6ca9c387af417ab20de17ca9e1aed915a72f8957e5fc02c6241355076ca6df644c270b2eb81269b8387b8e802ff8c56525591a36342ade574a0d349e07b1871c5c18bb34c068bade2a750d27f9daf75598915014630b4a832c2cfb0412e552c593e40400b9270861548c56ebeb775448f48616aaa7eca51eef7ca0eecd198cf3deef39e43b65e08d9a9bd27ff2bd29f0d0badd57fc52c9d2199e4957c04f2b394ebb7b9d792fc50eb01de99f7d80cb50be5f606a802455754670e069d3376fc01abbde8960a24d745256fcc922fea5b2864bfd3f77c00e8be420b8650e7ac67367ab40c11f5402356c85e29757e92f0dc7cd93282a6142711ea55913836b8b9958df83235eae976d95c30dc2b2859e207bdcff227ca154cc70b65d6aa2d238ad0e4fc7f94a6861dbe2dca734b320bfaf3822f05dc2778d5eb92fc373c1d0be1e03e1fb7181bbe4d218726f78be02ab950c4c6971a91256ad8c036523f3253fe2d80eba4adcb3ea58b9f21b4e0f26e31366f246a82b45ce163723da01ccd1874babbb398804990ae1adc27c6cc1f5a307b7d731c0b39ae5f77667ab618f6d07b8a5886c69161a73c71cc29e773418886231480614dcaa371473118e4966eb5d3fb79f8dd8a9924bb905c099024fba25d189563f55359f6489ec81b011466c26426f2f33cedc56259a3cca30f71edb371d695eb49ac87d8ce3ca7da41ca34c6b4d833712f6bcc61c8712aad82b445bd94b41193855c5d809faa0484b968f3b78b3714bdfb0998141c282c667e3e700b227870f435ad33dd58cda5b97d43fbf8d4733a5cf45e0a0e361269dddd3297e1d49d11708bce08028d057e1a1893dc4bd173fcfd318b324c5648e08ac46d1cc3be61162659f47de790f6b0ffa87f5ee8a303b7120febb95fe0692c5a30af99237aca4c5f26db2e2f055eee161831e4912001f720bf2296e79106c848ea43c87c3a049f69ccf74609e9ff417c7b15c87de1b463648bf3ce40b8ca0c9fd7ac1bb3451c5ce4a34c44fb13a35a6af671cdbad03c0c33b7bbb162cff25be01a2ce6f5df6fd4c862f21a6293f398521f1464a1486d9e5fc2ec98e8b3c01b31d229d6f9c2aade4a2921b113b62f7f214ac62b31bf30620a298f7134d5b509c126d9534eefeff6f8a5670a70c26e33a2c765dad731ad3c7d163afd5734212bdf3eebe6ecd5415c7cefaa72312010780b0603fb5177529553a676b78eebe9465a4530edbe539f43ef250ba07f0351bec734e190a794936d95bb007a8ba5beb1343ada8b49ec3522bcee37648f3b836553964dab8b13a8ea036742897b408c85d5a1f85cadf1e4c89e4b505801c0513d2a781ca7b699bae034079825fb858920f66d6d7409b440e8cdf74050bfb43af7acbc94c4806df0dff564ececf305ffdb113715cbfe264daf184ee16a10da366d020910fd628037f69b69c4a946e4502d7fc560acfac46cfdffad8d801a2ff4d90fd840efaae53ca3abc4b2566cb412390f563668884a54a4675d8385c9c39dd00ad58dabb765d2d323d67ad964249f113314b5195cbdd7888629ae03bb93dc0b7da963b29bc508c27bd8ac0c4aa24ace0abf4bb1801598f61aa003f74728e06dffc338f878f5784d3ef8bd1fcc972fc83cf5b4fcb32015879342eeddd3594b783e7836d35fcd2692171af835aa91a55132963e3f8018252965c17f551680cea69e797e443e21eed1fa297d9cae4ab0ebf18794e05627bfd14a28858fc6f24678d965bc56270d6b62f8b9a0a03118d085385c55c83f5aba4ff6d0931bf241e405f3531ba6ebf02d7e6e3ad5d8fb17a28f5755d18d37671f91c392bfde934625dc98959dde8ebf27c189e36bce48d42c84b0bbe3f434c7422146f819ad7a101e8d3f7113f148c456985c230ef655bc1f8dfa27cc837b174aab4625e0dd6d67bce13057895651ba4c275b62b286c78bbf0ddd97805d75369352fbad89cfc27a117c08c0ea7d70b077932faa2148cd0c32b194d91687d868ec60f2a5f32de23acac29f92d09c3e605c82adce40461204752aa72a5f23b8a1199371c19d2965cb09a05736818", 0x2, 0x0, 0x9449}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0), 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) madvise(&(0x7f00009cb000/0x2000)=nil, 0x2000, 0x8) 1.372183404s ago: executing program 2 (id=2888): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0xa0000, 0x0) r4 = openat$autofs(0xffffffffffffff9c, 0x0, 0x28800, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r3}, './file0\x00'}) 604.69302ms ago: executing program 2 (id=2889): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x28, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x80000, 0x0, 0x0, 0x2, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x1f}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 471.814577ms ago: executing program 2 (id=2890): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5f", 0x18}], 0x1}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0_macvtap\x00', &(0x7f0000000680)=@ethtool_per_queue_op={0x4b, 0x2f, [0x7fefffff, 0xffffffff, 0x3, 0x1, 0x3, 0x5, 0x7, 0x0, 0xa4d, 0x0, 0x7, 0x4, 0xe, 0x4, 0x5, 0x2, 0xa0, 0x10001, 0xb, 0xc2, 0x0, 0x6, 0x7, 0xa4, 0xffff, 0x2a, 0x4, 0x5, 0x5, 0x6, 0x0, 0x0, 0xfffffffd, 0x3, 0x5, 0xcb, 0x401, 0x8000, 0x7fff, 0x9, 0x80000001, 0xd, 0x4, 0xffffffff, 0x28b5, 0xfffffffa, 0x2, 0xfffffffe, 0x6, 0x7, 0xff, 0x3, 0x8, 0x1, 0x100, 0x8, 0x4, 0xa0, 0x3335a578, 0x800, 0x6, 0x0, 0xff, 0x1, 0x400, 0x3, 0x5, 0x10, 0x90, 0x7, 0x38, 0xffff0000, 0xfffffffe, 0x6, 0x8, 0x2, 0x3, 0xfff, 0x2, 0x4, 0x2, 0x3, 0x9, 0x5, 0x2, 0xc55b, 0xc, 0x62, 0x8, 0xfffffff8, 0x3, 0x404, 0x4, 0x583, 0xef5, 0x0, 0x0, 0x1, 0x7fffffff, 0x0, 0xfffffffc, 0x1000, 0x3, 0xfff, 0x7, 0x3, 0x9, 0x9, 0x8, 0x1, 0x2, 0x7, 0xd, 0x7ff, 0x0, 0x0, 0x0, 0xb53, 0x7fffffff, 0x1, 0x5, 0x3, 0x101, 0x2, 0xe17, 0x5]}}) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 468.868065ms ago: executing program 3 (id=2891): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc044) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) r4 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r4, &(0x7f0000000640)={&(0x7f0000000340)=@xdp, 0x80, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/170, 0xaa}, {&(0x7f0000000480)=""/171, 0xab}], 0x2, &(0x7f00000005c0)=""/76, 0x4c}, 0x2000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x101000, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) inotify_init1(0x80000) inotify_add_watch(0xffffffffffffffff, 0x0, 0x5db) symlinkat(0x0, 0xffffffffffffff9c, 0x0) inotify_init1(0x80800) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000300)=0x4) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x7, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x80000000, 0xfffdffffffffffff, 0x9, 0x2000000000003, 0xf, 0x80000006, 0x4}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r6, 0x7af, &(0x7f0000000180)={@my=0x1, 0xc}) set_mempolicy(0x6005, 0x0, 0x7) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) 386.332807ms ago: executing program 1 (id=2892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd00032800e6000003a60c6eec00be202829fffe"], 0xfdef) 277.121127ms ago: executing program 2 (id=2893): socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xffffffffffffff1d) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x1d, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x87, &(0x7f0000000480)=""/135}, 0x21) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="93c95c47d1f79045c42fac513564d847323029633bd53915909f941556fbbde02199f8b4dde230fb1499bc58ab249b48d6b3ffdc45918fb1586c142296cebb01f4fb0100837e791a92a36678426a2790305083b01934c804754d7925d470", 0x5e}, {&(0x7f0000000200)="3bf3be7e7dfa70f4c0ed6decdc7ca0c964677af34081f765bafe66e58ae4e3fe922d46d35da5cfd428ee17c915365b50616231a84670b51bbe5bf9be742e4491e66da10973eab1c8e5ab0c5ee22056f341ab8ec847a64193261446646d497231343a2b4b4314659aa44fcc095e73c4e329c7798a6407e0dff8f96d44c912d04c3edc7e39c749bb261e8e1bf24d31f168ad43f84d4498051d8b0e18683f4c63f46e96045377baf0a1b200cfcf89d4d3a9d8d3614e53f0efa3f400456d441515a5e3370034dffef067cbe4eb6c77f229bd85f42e704cf33869c7937c88d2237da1aa144c00ffca48d7eff783f05c9b61c1e53b02ec2f56dcdb", 0xf8}], 0x2, 0x0, 0x0, 0x2c}, 0x4020845) 22.903382ms ago: executing program 2 (id=2894): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xe86c0, 0x161) close(0x3) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x105, 0x5000003a, r1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0x102c8000, 0x0, 0xfffffffffffffef7, 0x0, 0x0, 0x0) ptrace(0x10, r6) wait4(r6, 0x0, 0x2, 0x0) 21.235722ms ago: executing program 1 (id=2895): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x14b041, 0x2) memfd_create(0x0, 0x1) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@u, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x40000001}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000040000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) socket$netlink(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) 0s ago: executing program 5 (id=2896): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x42000000) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, 0x0, 0x80) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, 0x4}, 0x80) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0), 0x8) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f0000000000)=0x1, 0x4) kernel console output (not intermixed with test programs): 677229][ T29] usb 5-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 602.705036][ T29] usb 5-1: config 118 has 0 interfaces, different from the descriptor's value: 1 [ 602.723686][ T5730] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 602.728362][ T29] usb 5-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 602.752949][ T5730] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 602.759887][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.778738][ T5730] usb 2-1: media controller created [ 602.793590][ T29] usb 5-1: Product: syz [ 602.805698][ T29] usb 5-1: Manufacturer: syz [ 602.823283][ T29] usb 5-1: SerialNumber: syz [ 602.831269][T12260] dvb-usb: bulk message failed: -22 (3/0) [ 602.887452][ T5730] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 602.970317][ T5730] usb 2-1: selecting invalid altsetting 7 [ 603.008352][ T5730] cxusb: set interface failed [ 603.014134][ T5730] dvb-usb: bulk message failed: -22 (1/0) [ 603.154140][ T30] audit: type=1400 audit(1784659201.098:872): avc: denied { read write } for pid=12269 comm="syz.4.1684" name="vbi6" dev="devtmpfs" ino=994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 603.409693][ T30] audit: type=1400 audit(1784659201.108:873): avc: denied { open } for pid=12269 comm="syz.4.1684" path="/dev/vbi6" dev="devtmpfs" ino=994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 603.588194][ T29] usb 5-1: USB disconnect, device number 66 [ 603.634586][ T5715] tipc: Node number set to 4146207216 [ 603.788104][T12287] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1688'. [ 603.902122][ T5730] DVB: Unable to find symbol lgdt330x_attach() [ 604.734865][ T5730] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 605.184718][ T5730] rc_core: IR keymap rc-dvico-portable not found [ 605.191535][ T5730] Registered IR keymap rc-empty [ 605.198056][ T5730] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 605.221351][ T5730] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input44 [ 605.237474][ T5730] dvb-usb: schedule remote query interval to 100 msecs. [ 605.245471][ T5730] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 605.284161][ T5730] usb 2-1: USB disconnect, device number 44 [ 605.458737][ T5730] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 605.601824][ T29] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 605.742003][ T29] usb 1-1: device descriptor read/64, error -71 [ 606.003826][ T29] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 606.065052][T12320] netlink: 'syz.4.1696': attribute type 49 has an invalid length. [ 606.281687][ T29] usb 1-1: device descriptor read/64, error -71 [ 606.396143][ T29] usb usb1-port1: attempt power cycle [ 606.749668][ T29] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 606.790360][ T29] usb 1-1: device descriptor read/8, error -71 [ 607.038035][ T29] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 607.072299][ T29] usb 1-1: device descriptor read/8, error -71 [ 607.181977][ T29] usb usb1-port1: unable to enumerate USB device [ 607.284342][T12326] binder: 12325:12326 ioctl c0306201 0 returned -14 [ 607.383767][T12329] binder: 12325:12329 ioctl c0306201 2000000003c0 returned -14 [ 607.574195][T12331] netlink: 'syz.1.1698': attribute type 49 has an invalid length. [ 608.122399][T12329] binder: 12325:12329 ioctl c0306201 200000000400 returned -14 [ 608.672246][T12335] netlink: 'syz.0.1700': attribute type 49 has an invalid length. [ 610.225480][T12351] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1701'. [ 610.604736][T12348] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1702'. [ 612.742622][ T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 612.998988][T12381] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1710'. [ 614.163458][ T29] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 614.171775][ T30] audit: type=1400 audit(1784659212.138:874): avc: denied { read } for pid=12388 comm="syz.1.1714" dev="nsfs" ino=4026532938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 614.222277][ T30] audit: type=1400 audit(1784659212.138:875): avc: denied { open } for pid=12388 comm="syz.1.1714" path="net:[4026532938]" dev="nsfs" ino=4026532938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 614.248582][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.304904][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 614.386571][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 614.396989][ T29] usb 5-1: not running at top speed; connect to a high speed hub [ 614.496850][ T29] usb 5-1: config 13 has an invalid interface number: 165 but max is 1 [ 614.576431][ T29] usb 5-1: config 13 has an invalid interface number: 165 but max is 1 [ 614.647324][ T29] usb 5-1: config 13 has 1 interface, different from the descriptor's value: 2 [ 614.690683][ T29] usb 5-1: config 13 has no interface number 0 [ 614.765769][ T29] usb 5-1: config 13 interface 165 has no altsetting 0 [ 614.768788][T12392] netlink: 'syz.2.1715': attribute type 49 has an invalid length. [ 614.823418][ T29] usb 5-1: config 13 interface 165 has no altsetting 1 [ 614.919544][ T29] usb 5-1: New USB device found, idVendor=d5f0, idProduct=cb11, bcdDevice=a4.09 [ 614.964410][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.988842][T12395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1716'. [ 615.002087][ T29] usb 5-1: Product: syz [ 615.006391][ T29] usb 5-1: Manufacturer: syz [ 615.017273][T12395] 8021q: VLANs not supported on ip_vti0 [ 615.044287][ T29] usb 5-1: SerialNumber: syz [ 615.095584][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.106564][ T10] usb 4-1: config 0 descriptor?? [ 615.184592][T12398] netlink: 'syz.0.1718': attribute type 12 has an invalid length. [ 615.193667][T12398] netlink: 'syz.0.1718': attribute type 29 has an invalid length. [ 615.202335][T12398] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1718'. [ 615.223227][T12398] netlink: 'syz.0.1718': attribute type 1 has an invalid length. [ 615.236657][T12398] netlink: 'syz.0.1718': attribute type 2 has an invalid length. [ 615.272552][T12398] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1718'. [ 615.343972][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 615.357566][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 615.414916][ T30] audit: type=1400 audit(1784659213.388:876): avc: denied { ioctl } for pid=12384 comm="syz.4.1713" path="/dev/video36" dev="devtmpfs" ino=1045 ioctlcmd=0x5640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 615.490697][T12386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.499844][T12386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.689432][ T10] usb 4-1: USB disconnect, device number 54 [ 616.702602][T12412] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1719'. [ 616.731364][T12414] siw: device registration error -23 [ 616.841171][ T29] usb 5-1: USB disconnect, device number 67 [ 617.422006][ T29] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 617.486312][T12422] loop5: detected capacity change from 0 to 2640 [ 617.501197][T12422] buffer_io_error: 348 callbacks suppressed [ 617.501228][T12422] Buffer I/O error on dev loop5, logical block 0, async page read [ 617.518864][T12422] Buffer I/O error on dev loop5, logical block 0, async page read [ 617.529129][T12422] Buffer I/O error on dev loop5, logical block 0, async page read [ 617.538630][T12422] Buffer I/O error on dev loop5, logical block 0, async page read [ 617.548077][T12422] Buffer I/O error on dev loop5, logical block 0, async page read [ 617.557689][T12422] Buffer I/O error on dev loop5, logical block 0, async page read [ 617.567417][T12422] Buffer I/O error on dev loop5, logical block 0, async page read [ 617.580054][T12422] Buffer I/O error on dev loop5, logical block 0, async page read [ 617.589968][T12422] ldm_validate_partition_table(): Disk read failed. [ 617.602853][T12422] loop5: unable to read partition table [ 617.610984][T12422] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 617.811701][ T29] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 617.839760][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 617.887345][T12423] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 617.889768][ T29] usb 5-1: config 0 has no interface number 0 [ 617.909891][T12423] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 617.963984][ T29] usb 5-1: too many endpoints for config 0 interface 101 altsetting 114: 112, using maximum allowed: 30 [ 618.002233][ T29] usb 5-1: config 0 interface 101 altsetting 114 has 0 endpoint descriptors, different from the interface descriptor's value: 112 [ 618.044546][ T29] usb 5-1: config 0 interface 101 has no altsetting 0 [ 618.078313][ T29] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 618.100926][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.119277][ T29] usb 5-1: Product: syz [ 618.125932][ T4975] ldm_validate_partition_table(): Disk read failed. [ 618.129799][ T29] usb 5-1: Manufacturer: syz [ 618.149926][ T29] usb 5-1: SerialNumber: syz [ 618.166434][ T29] usb 5-1: config 0 descriptor?? [ 618.173665][ T4975] Dev loop5: unable to read RDB block 0 [ 618.179586][ T4975] loop5: unable to read partition table [ 618.298330][T12430] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 618.304878][T12430] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 618.319233][T12430] vhci_hcd vhci_hcd.0: Device attached [ 618.395716][T12431] vhci_hcd: connection closed [ 618.396065][ T13] vhci_hcd vhci_hcd.3: stop threads [ 618.412601][ T13] vhci_hcd vhci_hcd.3: release socket [ 618.474219][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 618.502189][ T5730] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 618.616757][ T29] asix 5-1:0.101: probe with driver asix failed with error -22 [ 618.651984][ T29] usb 5-1: USB disconnect, device number 68 [ 619.115818][ T30] audit: type=1400 audit(1784659217.088:877): avc: denied { read } for pid=12447 comm="syz.1.1732" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 619.138754][T12452] lo speed is unknown, defaulting to 1000 [ 619.181734][ T30] audit: type=1400 audit(1784659217.108:878): avc: denied { open } for pid=12447 comm="syz.1.1732" path="/365/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 619.238759][T12455] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 619.270755][T12455] block device autoloading is deprecated and will be removed. [ 619.287819][T12449] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 619.317135][T12449] block device autoloading is deprecated and will be removed. [ 619.843027][ T30] audit: type=1400 audit(1784659217.818:879): avc: denied { setopt } for pid=12482 comm="syz.2.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 621.403948][ T30] audit: type=1400 audit(1784659219.378:880): avc: denied { read write } for pid=12512 comm="syz.3.1756" name="file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 621.460586][ T30] audit: type=1400 audit(1784659219.398:881): avc: denied { open } for pid=12512 comm="syz.3.1756" path="/337/file0/file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 621.665905][T12523] kvm: user requested TSC rate below hardware speed [ 621.694519][T12523] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 621.899797][T12533] netlink: 'syz.0.1763': attribute type 1 has an invalid length. [ 621.935257][T12533] 8021q: adding VLAN 0 to HW filter on device bond4 [ 621.966875][T12533] bond4: (slave gretap1): making interface the new active one [ 621.996764][T12533] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 622.071110][T12533] bond4 (unregistering): (slave gretap1): Releasing active interface [ 622.085428][T12533] bond4 (unregistering): Released all slaves [ 622.800058][T12559] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 623.069901][T12575] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 623.456453][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.463587][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.806449][T12607] SELinux: failed to load policy [ 623.986094][ T187] IPVS: starting estimator thread 0... [ 624.091770][T12623] IPVS: using max 42 ests per chain, 100800 per kthread [ 624.267519][T12638] netlink: 'syz.4.1801': attribute type 1 has an invalid length. [ 624.348734][T12638] 8021q: adding VLAN 0 to HW filter on device bond2 [ 624.371315][T12642] bond2: (slave geneve2): making interface the new active one [ 624.424659][T12642] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 624.666993][T12656] 9pnet_virtio: no channels available for device syz [ 624.689606][T12656] overlayfs: overlapping lowerdir path [ 624.791745][ T30] audit: type=1400 audit(1784659222.748:882): avc: denied { write } for pid=12659 comm="syz.0.1810" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 624.827724][T12663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1811'. [ 625.084208][ T5730] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 625.224219][T12686] binder_alloc: 12685: pid 12685 spamming oneway? 1 buffers allocated for a total size of 4096 [ 625.241762][ T5730] usb 2-1: Using ep0 maxpacket: 16 [ 625.251261][ T5730] usb 2-1: config 1 has no interfaces? [ 625.270758][ T5730] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 625.289426][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.337985][ T5730] usb 2-1: Product: syz [ 625.355068][ T5730] usb 2-1: Manufacturer: syz [ 625.355605][T12688] netlink: 'syz.2.1821': attribute type 10 has an invalid length. [ 625.359764][ T5730] usb 2-1: SerialNumber: syz [ 625.467917][T12688] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 625.623860][ T5730] usb 2-1: USB disconnect, device number 45 [ 625.703991][T12703] syzkaller1: entered promiscuous mode [ 625.709533][T12703] syzkaller1: entered allmulticast mode [ 625.784377][T12706] netlink: 'syz.4.1829': attribute type 1 has an invalid length. [ 626.100627][T12722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1836'. [ 626.296700][T12737] ubi: mtd0 is already attached to ubi31 [ 626.362907][ T5730] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 626.503802][T12744] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 626.532442][ T5730] usb 4-1: Using ep0 maxpacket: 8 [ 626.553379][ T5730] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 626.572536][ T5730] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 626.593540][ T5730] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 626.619340][ T5730] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 626.627092][T12753] virt_wifi0: entered promiscuous mode [ 626.644575][ T5730] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 626.658891][T12753] virt_wifi0: entered allmulticast mode [ 626.718038][ T5730] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 626.792489][ T5730] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 626.813735][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.024647][ T30] audit: type=1400 audit(1784659224.998:883): avc: denied { ioctl } for pid=12766 comm="syz.1.1855" path="/392/file0/file0" dev="fuse" ino=288230376151711744 ioctlcmd=0x70ce scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 627.050900][T12767] sd 0:0:1:0: PR command failed: 1026 [ 627.056526][T12767] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 627.065668][T12767] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 627.100578][ T5730] usb 4-1: GET_CAPABILITIES returned 0 [ 627.107048][ T5730] usbtmc 4-1:16.0: can't read capabilities [ 627.121884][ T29] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 627.321135][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.352847][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.384718][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 627.394503][T12722] usbtmc 4-1:16.0: Unable to send data, error -71 [ 627.411079][ T29] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 627.448174][ T5720] usb 4-1: USB disconnect, device number 56 [ 627.470316][ T29] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 627.492039][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.509991][ T29] usb 1-1: config 0 descriptor?? [ 627.545984][T12776] block device autoloading is deprecated and will be removed. [ 627.580209][T12776] md: invalid raid superblock magic on ram32 [ 627.588710][T12776] md: ram32 does not have a valid v0.0 superblock, not importing! [ 627.598295][T12776] md: md_import_device returned -22 [ 627.658050][ T5610] Bluetooth: hci5: sending frame failed (-49) [ 627.670139][ T5616] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 627.903705][T12798] SELinux: invalid class [ 627.941091][ T29] plantronics 0003:047F:FFFF.000F: reserved main item tag 0xd [ 627.984449][ T29] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 628.003757][T12798] SELinux: failed to load policy [ 628.169177][T12814] xt_hashlimit: size too large, truncated to 1048576 [ 628.185141][T12818] vlan2: entered promiscuous mode [ 628.201429][T12818] hsr0: entered promiscuous mode [ 628.212930][T12818] vlan2: entered allmulticast mode [ 628.225863][T12818] hsr0: entered allmulticast mode [ 628.241294][T12818] hsr_slave_0: entered allmulticast mode [ 628.258686][ T29] usb 1-1: USB disconnect, device number 67 [ 628.273182][T12818] hsr_slave_1: entered allmulticast mode [ 629.382090][T12874] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1895'. [ 629.412859][ T29] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 629.603407][ T29] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 629.612160][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.623797][ T29] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 629.645060][ T29] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 629.654163][ T29] usb 1-1: Manufacturer: syz [ 629.661515][ T29] usb 1-1: config 0 descriptor?? [ 629.803289][ T29] rc_core: IR keymap rc-hauppauge not found [ 629.814688][ T29] Registered IR keymap rc-empty [ 629.847118][ T29] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 629.879338][ T29] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input47 [ 629.930276][ T29] usb 1-1: USB disconnect, device number 68 [ 630.111096][T12900] syzkaller0: entered promiscuous mode [ 630.116849][T12900] syzkaller0: entered allmulticast mode [ 630.751719][ T29] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 630.929629][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 630.942401][ T29] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 630.952249][ T29] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 630.991717][ T29] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 631.013265][ T29] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 631.023265][ T10] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 631.023324][ T29] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 631.043896][ T29] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 631.053155][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.205629][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 631.230288][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 631.249191][ T10] usb 4-1: config 0 has no interfaces? [ 631.263963][ T10] usb 4-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 631.287803][ T29] usb 1-1: usb_control_msg returned -32 [ 631.293976][ T29] usbtmc 1-1:16.0: can't read capabilities [ 631.294694][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.338488][ T10] usb 4-1: config 0 descriptor?? [ 632.036153][T12930] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 632.238196][ T187] usb 1-1: USB disconnect, device number 69 [ 633.686293][T12961] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1924'. [ 633.706355][T12961] netlink: 'syz.0.1924': attribute type 7 has an invalid length. [ 633.726785][T12961] netlink: 'syz.0.1924': attribute type 8 has an invalid length. [ 633.747237][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1924'. [ 633.772129][ T5723] usb 4-1: USB disconnect, device number 57 [ 634.274476][T12974] SELinux: invalid class [ 634.342237][ T5620] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 634.359083][T12974] SELinux: failed to load policy [ 634.531695][ T5620] usb 3-1: Using ep0 maxpacket: 8 [ 635.354375][ T5620] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 635.476432][ T5620] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 635.486234][ T5620] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.556854][ T5620] usb 3-1: config 0 descriptor?? [ 635.769041][ T5620] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 635.978660][T13013] lo speed is unknown, defaulting to 1000 [ 635.997896][ T5620] usb 3-1: USB disconnect, device number 49 [ 637.057561][T13068] loop5: detected capacity change from 0 to 7 [ 637.094535][T13068] loop5: p1 < > p3 p4 [ 637.103187][T13068] loop5: partition table partially beyond EOD, truncated [ 637.138611][T13068] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 637.252513][T11456] udevd[11456]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 637.263828][T11400] udevd[11400]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 637.274931][T11262] udevd[11262]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 637.416053][T13077] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 637.451531][T13077] SELinux: failed to load policy [ 637.746863][T13092] input: syz1 as /devices/virtual/input/input48 [ 638.103625][T13112] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 638.126983][T13112] SELinux: failed to load policy [ 638.340204][T13125] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1994'. [ 638.369122][T13130] md: md2 stopped. [ 638.707522][T13148] syzkaller0: entered promiscuous mode [ 638.713318][T13148] syzkaller0: entered allmulticast mode [ 638.873531][T13154] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 638.883765][T13154] SELinux: failed to load policy [ 638.932944][T13156] netlink: 'syz.0.2005': attribute type 13 has an invalid length. [ 639.343013][ T5723] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 639.495381][T13182] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 639.509838][T13182] SELinux: failed to load policy [ 639.759299][T13185] netlink: 'syz.1.2017': attribute type 49 has an invalid length. [ 639.773621][ T29] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 639.810240][ T5723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.821704][ T5723] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 639.830944][ T5723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.956384][ T5723] usb 3-1: config 0 descriptor?? [ 640.021863][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 640.089088][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 640.170350][ T29] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 640.201331][ T5723] usbhid 3-1:0.0: can't add hid device: -71 [ 640.211626][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.226176][ T5723] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 640.240952][ T29] usb 1-1: config 0 descriptor?? [ 640.253182][ T5723] usb 3-1: USB disconnect, device number 50 [ 640.385223][ T57] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.397297][ T57] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.483311][ T29] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 640.583950][ T57] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.597120][ T5610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 640.609911][ T5610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 640.619321][ T57] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.635599][ T5610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 640.650563][ T5610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 640.662185][ T5610] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 640.697375][ T5616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 640.707614][ T5616] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 640.715919][ T5616] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 640.727195][ T5616] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 640.736167][ T5616] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 640.761689][ T5723] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 640.863474][ T57] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.898855][ T57] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.926674][ T5715] usb 1-1: USB disconnect, device number 70 [ 640.944027][ T5723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.974522][ T5723] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 640.996194][ T5723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.019846][ T5723] usb 3-1: config 0 descriptor?? [ 641.030288][ T57] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.064048][ T57] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.595284][T13220] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 641.628765][T13220] SELinux: failed to load policy [ 641.664777][T13167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.684951][T13167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.872826][ T5723] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 641.901930][ T5723] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input49 [ 641.928538][ T30] audit: type=1400 audit(1784659239.898:884): avc: denied { write } for pid=13215 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.180465][ T30] audit: type=1400 audit(1784659240.148:885): avc: denied { write } for pid=13245 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.313526][ T57] bond2 (unregistering): (slave geneve2): Releasing active interface [ 642.373462][ T57] bridge0 (unregistering): left promiscuous mode [ 642.425580][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.441448][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.455270][ T57] bond0 (unregistering): Released all slaves [ 642.471934][ T57] bond1 (unregistering): Released all slaves [ 642.494800][ T57] bond2 (unregistering): Released all slaves [ 642.520951][ T5715] usb 3-1: USB disconnect, device number 51 [ 642.522180][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 642.539208][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1 [ 642.607466][T13190] lo speed is unknown, defaulting to 1000 [ 642.692784][ T57] tipc: Left network mode [ 642.815527][ T5616] Bluetooth: hci4: command tx timeout [ 643.047802][ T30] audit: type=1400 audit(1784659241.008:886): avc: denied { read } for pid=13264 comm="syz.0.2039" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 643.181949][ T30] audit: type=1400 audit(1784659241.008:887): avc: denied { open } for pid=13264 comm="syz.0.2039" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 643.385705][T13275] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2038'. [ 643.402631][ T30] audit: type=1400 audit(1784659241.018:888): avc: denied { ioctl } for pid=13264 comm="syz.0.2039" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 643.672561][T13280] loop5: detected capacity change from 0 to 7 [ 643.703606][T13280] Dev loop5: unable to read RDB block 7 [ 643.723160][T13280] loop5: unable to read partition table [ 643.743136][T13280] loop5: partition table beyond EOD, truncated [ 643.773578][ T30] audit: type=1400 audit(1784659241.738:889): avc: denied { write } for pid=13258 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.798118][T13280] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 644.630848][ T30] audit: type=1400 audit(1784659242.598:890): avc: denied { write } for pid=13289 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 644.672361][T13290] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 644.727778][T13290] SELinux: failed to load policy [ 644.827365][ T5270] 8021q: adding VLAN 0 to HW filter on device eth2 [ 644.894507][ T5616] Bluetooth: hci4: command tx timeout [ 645.257324][ T30] audit: type=1400 audit(1784659243.228:891): avc: denied { mounton } for pid=13317 comm="syz.2.2050" path="/proc/1278/task" dev="proc" ino=55151 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 645.320220][T13190] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.336370][T13190] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.353713][T13190] bridge_slave_0: entered allmulticast mode [ 645.373066][T13190] bridge_slave_0: entered promiscuous mode [ 645.432813][ T57] hsr_slave_0: left promiscuous mode [ 645.457002][ T57] hsr_slave_1: left promiscuous mode [ 645.478773][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.490159][ T30] audit: type=1400 audit(1784659243.468:892): avc: denied { write } for pid=13307 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 645.497288][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.646975][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.664733][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.399541][ T30] audit: type=1400 audit(1784659244.358:893): avc: denied { write } for pid=13335 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 646.446818][ T57] veth1_macvtap: left promiscuous mode [ 646.457871][ T57] veth0_macvtap: left promiscuous mode [ 646.464353][ T57] veth1_vlan: left promiscuous mode [ 646.470848][ T57] veth0_vlan: left promiscuous mode [ 646.581668][ T5723] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 646.754014][ T5723] usb 2-1: config 0 has no interfaces? [ 646.761404][ T5723] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 646.784381][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 646.812591][ T5723] usb 2-1: Product: syz [ 646.827027][ T5723] usb 2-1: Manufacturer: syz [ 646.864330][ T5723] usb 2-1: SerialNumber: syz [ 646.910922][ T5723] usb 2-1: config 0 descriptor?? [ 646.980926][ T5616] Bluetooth: hci4: command tx timeout [ 647.461416][ T57] team0 (unregistering): Port device team_slave_1 removed [ 647.571185][ T57] team0 (unregistering): Port device team_slave_0 removed [ 647.925051][T13190] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.935241][T13190] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.942604][T13190] bridge_slave_1: entered allmulticast mode [ 647.950384][T13190] bridge_slave_1: entered promiscuous mode [ 648.019161][ T5270] 8021q: adding VLAN 0 to HW filter on device eth3 [ 648.166708][T13330] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.190917][T13190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.205794][T13344] lo speed is unknown, defaulting to 1000 [ 648.213556][T13190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.266585][ T5730] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 648.296424][T13190] team0: Port device team_slave_0 added [ 648.306735][T13190] team0: Port device team_slave_1 added [ 648.385586][T13330] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.443325][ T5730] usb 3-1: config 0 has an invalid interface number: 101 but max is 0 [ 648.454251][T13190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.461229][T13190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.487965][ T5730] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.500476][ T5730] usb 3-1: config 0 has no interface number 0 [ 648.506973][ T5730] usb 3-1: too many endpoints for config 0 interface 101 altsetting 114: 112, using maximum allowed: 30 [ 648.519064][ T5730] usb 3-1: config 0 interface 101 altsetting 114 has 0 endpoint descriptors, different from the interface descriptor's value: 112 [ 648.521612][T13190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.533353][ T5730] usb 3-1: config 0 interface 101 has no altsetting 0 [ 648.546430][ T57] IPVS: stop unused estimator thread 0... [ 648.556832][T13190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.563977][T13190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.615804][T13190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.689029][ T5730] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 648.706178][ T5730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.715084][ T5730] usb 3-1: Product: syz [ 648.719274][ T5730] usb 3-1: Manufacturer: syz [ 648.732914][ T5730] usb 3-1: SerialNumber: syz [ 648.754626][ T5730] usb 3-1: config 0 descriptor?? [ 648.788271][T13330] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.928985][T13330] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.977573][T13190] hsr_slave_0: entered promiscuous mode [ 648.997084][ T5730] asix 3-1:0.101: probe with driver asix failed with error -22 [ 649.023269][T13190] hsr_slave_1: entered promiscuous mode [ 649.053586][ T5616] Bluetooth: hci4: command tx timeout [ 649.062659][T13190] debugfs: 'hsr0' already exists in 'hsr' [ 649.069161][ T5730] usb 3-1: USB disconnect, device number 52 [ 649.085778][T13190] Cannot create hsr debugfs directory [ 649.271088][ T30] audit: type=1400 audit(1784659247.238:894): avc: denied { write } for pid=13374 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 649.415212][ T30] audit: type=1400 audit(1784659247.378:895): avc: denied { write } for pid=13389 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 649.445790][ T6615] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.036548][T13394] syz.0.2067 (13394): drop_caches: 2 [ 650.396876][ T6615] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.413588][ T5270] 8021q: adding VLAN 0 to HW filter on device eth4 [ 650.543191][ T57] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.137316][ T57] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.178663][T13190] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 651.195233][ T29] usb 2-1: USB disconnect, device number 46 [ 651.244933][T13190] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 651.281238][T13190] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 651.329909][T13190] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 651.340410][T13190] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 651.356704][T13190] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 651.381165][T13190] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 651.435040][T13190] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 651.611050][T13190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.640374][T13435] lo speed is unknown, defaulting to 1000 [ 651.643475][T13190] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.737244][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.744472][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.782643][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.789844][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.971065][T13456] binder: BINDER_SET_CONTEXT_MGR already set [ 653.009320][T13456] binder: 13452:13456 ioctl 4018620d 200000000040 returned -16 [ 654.133068][T13500] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 654.193752][T13190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.341113][T13511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2100'. [ 654.367842][T13511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2100'. [ 654.370867][T13508] lo speed is unknown, defaulting to 1000 [ 654.400707][T13511] netlink: 'syz.0.2100': attribute type 12 has an invalid length. [ 654.453423][T13511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2100'. [ 654.457483][ T6609] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.482976][T13511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2100'. [ 654.487024][ T6609] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.503037][ T6609] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.511631][T13511] netlink: 'syz.0.2100': attribute type 12 has an invalid length. [ 654.526008][ T6609] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.793094][T13190] veth0_vlan: entered promiscuous mode [ 654.858374][T13190] veth1_vlan: entered promiscuous mode [ 654.951128][T13190] veth0_macvtap: entered promiscuous mode [ 654.986028][T13190] veth1_macvtap: entered promiscuous mode [ 655.026778][T13190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.128185][T13538] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 655.226600][T13190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.241829][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.251370][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.276075][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.296120][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.349048][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.384802][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.514942][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.527142][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.567314][ T30] audit: type=1400 audit(1784659254.538:896): avc: denied { mounton } for pid=13190 comm="syz-executor" path="/root/syzkaller.97YlzZ/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 656.608275][ T30] audit: type=1400 audit(1784659254.568:897): avc: denied { mounton } for pid=13190 comm="syz-executor" path="/root/syzkaller.97YlzZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 656.646694][ T30] audit: type=1400 audit(1784659254.568:898): avc: denied { mounton } for pid=13190 comm="syz-executor" path="/root/syzkaller.97YlzZ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=58491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 656.704159][ T30] audit: type=1400 audit(1784659254.618:899): avc: denied { mounton } for pid=13190 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 656.731384][ T30] audit: type=1400 audit(1784659254.618:900): avc: denied { mounton } for pid=13190 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 656.899049][T13572] lo speed is unknown, defaulting to 1000 [ 657.424733][T13583] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 657.984925][T13605] syz.3.2131 (13605): drop_caches: 2 [ 660.413892][T13653] siw: device registration error -23 [ 660.606532][ T30] audit: type=1400 audit(1784659258.568:901): avc: denied { recv } for pid=13645 comm="syz.0.2147" saddr=10.128.0.169 src=33008 daddr=10.128.1.33 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 660.927470][T13658] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2150'. [ 662.022831][T13672] syzkaller1: entered promiscuous mode [ 662.045281][T13672] syzkaller1: entered allmulticast mode [ 662.552300][T13673] lo speed is unknown, defaulting to 1000 [ 663.599129][ T30] audit: type=1400 audit(1784659261.568:902): avc: denied { write } for pid=13662 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 663.845258][ T30] audit: type=1400 audit(1784659261.818:903): avc: denied { write } for pid=13709 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 663.942258][ T187] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 664.137178][ T187] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.202369][ T187] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 664.240355][ T187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.553231][ T187] usb 4-1: config 0 descriptor?? [ 664.716727][ T30] audit: type=1400 audit(1784659262.688:904): avc: denied { write } for pid=13726 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 664.781633][ T187] usbhid 4-1:0.0: can't add hid device: -71 [ 664.808297][ T187] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 664.810150][ T5620] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 664.872899][ T187] usb 4-1: USB disconnect, device number 58 [ 665.032415][ T5620] usb 2-1: Using ep0 maxpacket: 16 [ 665.110185][ T5620] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 665.122275][ T30] audit: type=1400 audit(1784659263.078:905): avc: denied { write } for pid=13756 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 665.175567][ T5620] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 665.209158][ T5620] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 665.232758][ T5620] usb 2-1: config 0 has no interface number 1 [ 665.287348][ T5620] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 665.350689][ T5620] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 665.392437][ T187] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 665.422855][ T5620] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 665.497663][ T5620] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 665.619033][ T5620] usb 2-1: config 0 interface 125 has no altsetting 0 [ 665.705218][ T5620] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 665.767581][ T187] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.783450][ T5620] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.857683][ T5620] usb 2-1: Product: syz [ 665.895972][ T5620] usb 2-1: Manufacturer: syz [ 665.940377][ T5620] usb 2-1: SerialNumber: syz [ 666.078855][ T5620] usb 2-1: config 0 descriptor?? [ 666.774199][ T187] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 666.783921][ T187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.804154][ T187] usb 4-1: config 0 descriptor?? [ 666.928254][ T187] usb 4-1: can't set config #0, error -71 [ 666.930137][ T30] audit: type=1400 audit(1784659264.898:906): avc: denied { write } for pid=13763 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 667.049568][ T187] usb 4-1: USB disconnect, device number 59 [ 667.137806][ T30] audit: type=1400 audit(1784659265.108:907): avc: denied { write } for pid=13790 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 667.219169][T13794] lo speed is unknown, defaulting to 1000 [ 667.569038][T13810] netlink: 'syz.2.2187': attribute type 49 has an invalid length. [ 668.229635][ T30] audit: type=1400 audit(1784659266.198:908): avc: denied { write } for pid=13802 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 668.902210][ T5616] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 668.910590][ T5610] Bluetooth: hci5: command 0x1003 tx timeout [ 669.609757][ T30] audit: type=1400 audit(1784659267.578:909): avc: denied { write } for pid=13839 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 669.635709][ T10] usb 2-1: USB disconnect, device number 47 [ 669.767021][ T187] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 670.065010][ T187] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.107845][ T187] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 670.128622][ T187] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.150696][ T187] usb 6-1: config 0 descriptor?? [ 670.190838][T13850] SELinux: invalid class [ 670.245889][T13850] SELinux: failed to load policy [ 670.430910][ T187] usbhid 6-1:0.0: can't add hid device: -71 [ 670.449584][ T187] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 670.477195][ T187] usb 6-1: USB disconnect, device number 2 [ 670.903096][ T187] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 671.237690][ T187] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.248331][T13896] SELinux: invalid class [ 672.767986][ T187] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 672.777997][ T187] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.798682][T13896] SELinux: failed to load policy [ 672.803745][ T187] usb 6-1: config 0 descriptor?? [ 672.810724][ T187] usb 6-1: can't set config #0, error -71 [ 672.854281][ T187] usb 6-1: USB disconnect, device number 3 [ 673.481965][T13945] siw: device registration error -23 [ 675.415845][T13952] lo speed is unknown, defaulting to 1000 [ 675.461049][T13974] loop5: detected capacity change from 0 to 7 [ 675.468531][T13974] Dev loop5: unable to read RDB block 7 [ 675.476225][T13974] loop5: AHDI p2 [ 675.480431][T13974] loop5: partition table partially beyond EOD, truncated [ 675.511693][ T5723] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 675.672106][ T5723] usb 6-1: device descriptor read/64, error -71 [ 675.926421][ T5723] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 676.101804][ T5723] usb 6-1: device descriptor read/64, error -71 [ 676.221970][ T5723] usb usb6-port1: attempt power cycle [ 676.602822][ T5723] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 676.648474][ T5723] usb 6-1: device descriptor read/8, error -71 [ 676.911779][ T5723] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 676.944225][ T5723] usb 6-1: device descriptor read/8, error -71 [ 677.090927][ T5723] usb usb6-port1: unable to enumerate USB device [ 677.320739][T14017] netlink: 'syz.1.2252': attribute type 49 has an invalid length. [ 678.898853][ T5616] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 678.899462][ T5610] Bluetooth: hci5: command 0x1003 tx timeout [ 680.666425][T14022] lo speed is unknown, defaulting to 1000 [ 680.798201][T14046] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2263'. [ 681.237444][T14067] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2271'. [ 681.272210][T14067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2271'. [ 681.487736][T14073] netlink: 'syz.0.2272': attribute type 49 has an invalid length. [ 681.681520][T14077] overlayfs: failed to resolve './file2': -2 [ 681.896245][T14080] netlink: 'syz.5.2275': attribute type 49 has an invalid length. [ 682.051177][T14086] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2279'. [ 682.193210][T14094] netlink: 'syz.5.2281': attribute type 1 has an invalid length. [ 682.302929][T14094] 8021q: adding VLAN 0 to HW filter on device bond1 [ 682.537388][T14112] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2288'. [ 682.724394][T14116] netlink: 'syz.1.2289': attribute type 49 has an invalid length. [ 682.931052][T14119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2291'. [ 682.951767][T14119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2291'. [ 682.980781][T14119] netlink: 'syz.2.2291': attribute type 12 has an invalid length. [ 683.010521][T14119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2291'. [ 683.042276][T14119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2291'. [ 683.095514][T14119] netlink: 'syz.2.2291': attribute type 12 has an invalid length. [ 683.317777][T14126] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2294'. [ 683.343704][T14122] netlink: 'syz.5.2292': attribute type 49 has an invalid length. [ 683.988069][T14141] loop2: detected capacity change from 0 to 7 [ 684.147864][T14141] Dev loop2: unable to read RDB block 7 [ 684.157084][T14141] loop2: AHDI p1 p2 p3 [ 684.177604][T14141] loop2: partition table partially beyond EOD, truncated [ 684.211777][T14141] loop2: p1 start 1601398130 is beyond EOD, truncated [ 684.218709][T14141] loop2: p2 start 1702059890 is beyond EOD, truncated [ 684.361518][ T4975] Dev loop2: unable to read RDB block 7 [ 684.367864][ T4975] loop2: AHDI p1 p2 p3 [ 684.372132][ T4975] loop2: partition table partially beyond EOD, truncated [ 684.426718][ T4975] loop2: p1 start 1601398130 is beyond EOD, truncated [ 684.466027][ T4975] loop2: p2 start 1702059890 is beyond EOD, truncated [ 684.841354][T14158] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 684.879596][T14158] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 684.896489][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 684.903562][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.361824][ T24] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 685.503771][T14172] netlink: 'syz.5.2307': attribute type 49 has an invalid length. [ 685.723031][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.753545][ T24] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 685.764591][T14178] netlink: 'syz.3.2308': attribute type 12 has an invalid length. [ 685.771130][T14179] binder: 14177:14179 ioctl 4018620d 0 returned -22 [ 685.783047][T14178] netlink: 'syz.3.2308': attribute type 12 has an invalid length. [ 685.791255][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.807556][ T24] usb 2-1: config 0 descriptor?? [ 685.909910][T14184] loop5: detected capacity change from 0 to 7 [ 685.934136][T14184] Dev loop5: unable to read RDB block 7 [ 685.946507][T14184] loop5: AHDI p2 [ 685.950468][T14184] loop5: partition table partially beyond EOD, truncated [ 686.137195][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 686.169244][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 686.264762][ T24] usb 2-1: USB disconnect, device number 48 [ 686.269443][T14196] netlink: 'syz.3.2315': attribute type 1 has an invalid length. [ 686.286228][T14195] loop2: detected capacity change from 0 to 7 [ 686.301419][T14195] Dev loop2: unable to read RDB block 7 [ 686.309251][T14195] loop2: AHDI p1 p2 p3 [ 686.315603][T14195] loop2: partition table partially beyond EOD, truncated [ 686.327052][T14195] loop2: p1 start 1601398130 is beyond EOD, truncated [ 686.335534][T14195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 686.391510][T14199] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 686.400689][T14199] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 686.712001][ T24] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 686.759395][T14196] 8021q: adding VLAN 0 to HW filter on device bond1 [ 686.777459][ T4975] Dev loop2: unable to read RDB block 7 [ 686.827961][ T4975] loop2: AHDI p1 p2 p3 [ 686.866912][ T4975] loop2: partition table partially beyond EOD, truncated [ 686.903399][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.912729][ T4975] loop2: p1 start 1601398130 is beyond EOD, truncated [ 686.976044][ T4975] loop2: p2 start 1702059890 is beyond EOD, truncated [ 687.064471][T14207] syz.0.2318 (14207): drop_caches: 2 [ 687.747848][ T24] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 687.757023][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.767086][ T24] usb 2-1: config 0 descriptor?? [ 687.769965][T14215] syzkaller0: entered promiscuous mode [ 687.793619][T14215] syzkaller0: entered allmulticast mode [ 687.878980][T14218] netlink: 'syz.2.2321': attribute type 49 has an invalid length. [ 687.963975][ T24] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 688.141265][ T24] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input50 [ 688.312436][T14225] binder: 14224:14225 ioctl 4018620d 0 returned -22 [ 688.318790][ T24] usb 2-1: USB disconnect, device number 49 [ 688.319083][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 688.348213][T14227] siw: device registration error -23 [ 688.407385][T14229] __nla_validate_parse: 4 callbacks suppressed [ 688.407403][T14229] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2326'. [ 688.607795][T14240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2329'. [ 688.874211][T14246] loop2: detected capacity change from 0 to 7 [ 688.898586][T14246] Dev loop2: unable to read RDB block 7 [ 688.905237][ T10] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 688.914081][T14246] loop2: AHDI p1 p2 p3 [ 688.921307][T14246] loop2: partition table partially beyond EOD, truncated [ 688.936813][T14246] loop2: p1 start 1601398130 is beyond EOD, truncated [ 688.944304][T14246] loop2: p2 start 1702059890 is beyond EOD, truncated [ 689.161791][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 689.169330][ T10] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 689.198501][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 689.239556][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 689.255638][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 689.268187][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 689.279343][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 689.293987][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 689.304374][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.623150][ T10] usb 1-1: GET_CAPABILITIES returned 0 [ 689.686911][ T10] usbtmc 1-1:16.0: can't read capabilities [ 689.950310][ T10] usb 1-1: USB disconnect, device number 71 [ 690.196267][T14265] netlink: 'syz.2.2336': attribute type 49 has an invalid length. [ 690.364272][T14267] binder: 14266:14267 ioctl 4018620d 0 returned -22 [ 690.472274][ T5715] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 690.613745][T14276] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2341'. [ 690.625002][ T5715] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.650771][ T5715] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 690.674644][ T5715] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.686331][ T5715] usb 6-1: config 0 descriptor?? [ 690.921981][T14287] siw: device registration error -23 [ 691.395526][ T5715] usbhid 6-1:0.0: can't add hid device: -71 [ 691.403072][ T5715] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 691.413937][ T5715] usb 6-1: USB disconnect, device number 8 [ 691.441174][T14285] syz.3.2344 (14285): drop_caches: 2 [ 692.072590][ T5715] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 692.090188][T14308] binder: BINDER_SET_CONTEXT_MGR already set [ 692.103487][T14308] binder: 14307:14308 ioctl 4018620d 200000000040 returned -16 [ 692.244046][T14310] netlink: 'syz.3.2349': attribute type 49 has an invalid length. [ 692.363717][ T5715] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.544783][ T5715] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 692.753281][ T5715] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.777571][ T5715] usb 6-1: config 0 descriptor?? [ 693.403901][T14262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.175985][T14262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.188991][ T5715] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 694.202538][ T5715] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input51 [ 694.738888][T14349] binder: BINDER_SET_CONTEXT_MGR already set [ 694.751322][T14349] binder: 14348:14349 ioctl 4018620d 200000000040 returned -16 [ 695.389712][T14358] netlink: 'syz.3.2363': attribute type 49 has an invalid length. [ 695.589375][T14354] loop2: detected capacity change from 0 to 7 [ 695.596894][T14354] Dev loop2: unable to read RDB block 7 [ 695.602499][T14354] loop2: AHDI p1 p2 p3 [ 695.606680][T14354] loop2: partition table partially beyond EOD, truncated [ 695.613889][T14354] loop2: p1 start 1601398130 is beyond EOD, truncated [ 695.620649][T14354] loop2: p2 start 1702059890 is beyond EOD, truncated [ 698.106372][ T24] usb 6-1: USB disconnect, device number 9 [ 698.106421][ C0] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 699.687832][T14409] netlink: 'syz.0.2378': attribute type 1 has an invalid length. [ 699.696285][T14407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2377'. [ 700.235698][ T5723] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 700.332631][ T24] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 700.406172][ T5723] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.418871][ T5723] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 700.440581][ T5723] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.462776][ T5723] usb 6-1: config 0 descriptor?? [ 700.512523][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 700.522892][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 700.563667][ T24] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 700.573187][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.603496][ T24] usb 1-1: config 0 descriptor?? [ 700.689938][ T5723] usbhid 6-1:0.0: can't add hid device: -71 [ 700.696140][ T5723] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 701.028463][ T5723] usb 6-1: USB disconnect, device number 10 [ 701.035689][ T24] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 701.094101][T14429] loop2: detected capacity change from 0 to 7 [ 701.101021][T14429] Dev loop2: unable to read RDB block 7 [ 701.107291][T14429] loop2: AHDI p1 p2 p3 [ 701.111478][T14429] loop2: partition table partially beyond EOD, truncated [ 701.118853][T14429] loop2: p1 start 1601398130 is beyond EOD, truncated [ 701.125631][T14429] loop2: p2 start 1702059890 is beyond EOD, truncated [ 701.152883][ T24] usb 1-1: USB disconnect, device number 72 [ 701.451707][ T5723] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 701.623803][ T5723] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.647154][ T5723] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 701.667667][ T5723] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.701476][ T5723] usb 6-1: config 0 descriptor?? [ 701.965636][T14444] syz.0.2389 (14444): drop_caches: 2 [ 702.540356][T14419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.655030][T14419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.796239][ T5723] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 702.965560][ T5723] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input52 [ 705.432706][T14463] siw: device registration error -23 [ 705.872631][ T187] usb 6-1: USB disconnect, device number 11 [ 705.872752][ C1] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 706.302659][T14468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2394'. [ 706.342583][T14468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2394'. [ 706.366777][T14473] loop5: detected capacity change from 0 to 7 [ 706.377782][T14468] netlink: 'syz.0.2394': attribute type 12 has an invalid length. [ 706.393448][T14473] Dev loop5: unable to read RDB block 7 [ 706.400490][T14468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2394'. [ 706.410274][T14473] loop5: AHDI p2 [ 706.415130][T14473] loop5: partition table partially beyond EOD, truncated [ 706.423482][T14468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2394'. [ 706.466546][T14468] netlink: 'syz.0.2394': attribute type 12 has an invalid length. [ 706.593079][T14486] syzkaller1: entered promiscuous mode [ 706.617789][T14486] syzkaller1: entered allmulticast mode [ 706.689329][T14491] overlayfs: missing 'lowerdir' [ 706.767098][T14493] siw: device registration error -23 [ 707.186387][T14491] netlink: 'syz.3.2403': attribute type 49 has an invalid length. [ 707.260898][T14500] netlink: 'syz.1.2406': attribute type 10 has an invalid length. [ 707.269295][T14500] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.276660][T14500] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.294081][T14500] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.301288][T14500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.308776][T14500] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.315953][T14500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.336202][T14501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2406'. [ 707.379078][T14500] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 707.512871][T14501] bridge_slave_1: left allmulticast mode [ 707.518621][T14501] bridge_slave_1: left promiscuous mode [ 707.525919][T14501] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.539543][T14501] bridge_slave_0: left allmulticast mode [ 707.555514][T14501] bridge_slave_0: left promiscuous mode [ 707.561407][T14501] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.584886][T14501] bond0: (slave bridge0): Releasing backup interface [ 707.612197][ T29] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 707.787104][T14517] loop5: detected capacity change from 0 to 7 [ 707.795626][T14517] Dev loop5: unable to read RDB block 7 [ 707.801238][T14517] loop5: AHDI p2 [ 707.806048][T14517] loop5: partition table partially beyond EOD, truncated [ 708.128091][T14527] syzkaller1: entered promiscuous mode [ 708.152138][T14527] syzkaller1: entered allmulticast mode [ 708.444071][T14537] overlayfs: missing 'lowerdir' [ 708.666722][T14540] netlink: 'syz.0.2419': attribute type 49 has an invalid length. [ 709.727087][T14565] loop5: detected capacity change from 0 to 7 [ 709.760509][T14565] Dev loop5: unable to read RDB block 7 [ 709.766487][T14565] loop5: AHDI p2 [ 709.784489][T14565] loop5: partition table partially beyond EOD, truncated [ 710.015241][T14566] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2423'. [ 711.737239][T14577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2427'. [ 711.738269][T14575] syzkaller0: entered promiscuous mode [ 711.747372][T14577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2427'. [ 711.762662][T14577] netlink: 'syz.0.2427': attribute type 12 has an invalid length. [ 711.782226][T14572] syz.5.2425 (14572): drop_caches: 2 [ 711.819480][T14575] syzkaller0: entered allmulticast mode [ 711.849576][T14577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2427'. [ 711.899342][T14577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2427'. [ 711.954654][T14577] netlink: 'syz.0.2427': attribute type 12 has an invalid length. [ 712.527334][T14604] loop5: detected capacity change from 0 to 7 [ 712.552583][T14606] syzkaller0: left promiscuous mode [ 712.560470][T14604] Dev loop5: unable to read RDB block 7 [ 712.574929][T14604] loop5: AHDI p2 [ 712.581073][T14606] syzkaller0: left allmulticast mode [ 712.589856][T14604] loop5: partition table partially beyond EOD, truncated [ 713.309454][T14625] syz.2.2442 (14625): drop_caches: 2 [ 713.599675][T14628] syzkaller0: entered promiscuous mode [ 713.640465][T14628] syzkaller0: entered allmulticast mode [ 714.067881][T14635] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 714.507620][T14649] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 714.543977][T14649] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 714.661078][T14652] netlink: 'syz.5.2451': attribute type 49 has an invalid length. [ 714.842327][T14647] SELinux: invalid class [ 714.958429][T14651] loop2: detected capacity change from 0 to 7 [ 715.033626][T14651] Dev loop2: unable to read RDB block 7 [ 715.048328][T14651] loop2: AHDI p1 p2 p3 [ 715.082268][T14651] loop2: partition table partially beyond EOD, truncated [ 715.094285][T14651] loop2: p1 start 1601398130 is beyond EOD, truncated [ 715.101255][T14651] loop2: p2 start 1702059890 is beyond EOD, truncated [ 715.265828][T14647] SELinux: failed to load policy [ 715.657737][T14669] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 715.865492][T14678] syzkaller1: entered promiscuous mode [ 715.897974][T14678] syzkaller1: entered allmulticast mode [ 716.178650][T14683] syz.1.2461 (14683): drop_caches: 2 [ 718.386016][T14733] siw: device registration error -23 [ 719.235199][T14744] syz.3.2478 (14744): drop_caches: 2 [ 720.091868][ T5610] Bluetooth: hci5: command 0x1003 tx timeout [ 720.097588][ T5616] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 720.475491][T14760] syzkaller0: entered promiscuous mode [ 720.489900][T14760] syzkaller0: entered allmulticast mode [ 720.560553][T14754] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2480'. [ 722.907531][T14785] syz.0.2490 (14785): drop_caches: 2 [ 723.858954][T14804] siw: device registration error -23 [ 724.019110][T14809] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2498'. [ 724.173002][T14817] overlayfs: missing 'lowerdir' [ 724.367147][T14819] netlink: 'syz.2.2501': attribute type 49 has an invalid length. [ 724.705884][ T6607] Bluetooth: hci5: Frame reassembly failed (-84) [ 726.194323][T14837] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2510'. [ 726.300546][T14853] overlayfs: missing 'lowerdir' [ 726.598142][T14853] netlink: 'syz.2.2515': attribute type 49 has an invalid length. [ 726.630926][T12795] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 726.632537][ T187] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 726.745415][T14749] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 726.824603][ T187] usb 4-1: Using ep0 maxpacket: 8 [ 726.855231][ T187] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 726.914116][ T187] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 726.968245][ T187] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 727.059888][ T187] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 727.125680][ T187] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 727.185936][ T187] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 727.200267][ T187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.432607][ T187] usb 4-1: usb_control_msg returned -32 [ 727.438580][ T187] usbtmc 4-1:16.0: can't read capabilities [ 727.545816][T14892] siw: device registration error -23 [ 727.806621][T14895] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 727.847444][ T5720] usb 4-1: USB disconnect, device number 60 [ 728.645271][T14903] loop5: detected capacity change from 0 to 7 [ 728.656592][T14903] Dev loop5: unable to read RDB block 7 [ 728.667746][T14903] loop5: AHDI p2 [ 728.674266][T14903] loop5: partition table partially beyond EOD, truncated [ 728.674769][T14905] overlayfs: missing 'lowerdir' [ 729.012722][T14905] netlink: 'syz.5.2528': attribute type 49 has an invalid length. [ 731.411884][ T5720] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 731.582390][ T5720] usb 1-1: Using ep0 maxpacket: 8 [ 731.599631][ T5720] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 731.623371][ T5720] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 731.646101][ T5720] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 731.666289][ T5720] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 731.684388][T14945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2540'. [ 731.701690][ T5720] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 731.719404][ T5720] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 731.729107][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.772547][T14749] Bluetooth: hci5: command 0x1003 tx timeout [ 731.780584][T12795] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 731.971717][ T29] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 732.061610][ T24] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 732.131879][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 732.173530][ T29] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 732.197524][ T29] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 732.212997][ T29] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 732.229149][ T24] usb 2-1: device descriptor read/64, error -71 [ 732.235956][ T29] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 732.250330][ T29] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 732.267188][ T29] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 732.282718][ T29] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 732.295092][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.471603][ T24] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 732.546102][ T29] usb 4-1: GET_CAPABILITIES returned 0 [ 732.554729][T14936] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 732.561184][ T29] usbtmc 4-1:16.0: can't read capabilities [ 732.563158][ T5715] usb 1-1: USB disconnect, device number 73 [ 732.623214][ T24] usb 2-1: device descriptor read/64, error -71 [ 732.731955][ T24] usb usb2-port1: attempt power cycle [ 732.763731][ T5730] usb 4-1: USB disconnect, device number 61 [ 732.998457][T14968] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2548'. [ 733.112757][ T24] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 733.181063][ T24] usb 2-1: device descriptor read/8, error -71 [ 733.431895][T14971] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2549'. [ 733.471683][ T24] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 733.548894][ T24] usb 2-1: device descriptor read/8, error -71 [ 733.712026][ T24] usb usb2-port1: unable to enumerate USB device [ 734.460208][T14994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2558'. [ 734.470564][T14994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2558'. [ 734.482983][T14994] netlink: 'syz.2.2558': attribute type 12 has an invalid length. [ 734.502195][T14994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2558'. [ 734.527907][T14994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2558'. [ 734.589040][T14994] netlink: 'syz.2.2558': attribute type 12 has an invalid length. [ 734.999331][T14998] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2556'. [ 735.442278][ T29] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 735.722464][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 735.787292][ T29] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 735.926795][ T29] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 736.080066][ T29] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 736.224751][T15008] loop2: detected capacity change from 0 to 7 [ 736.323494][T15008] Dev loop2: unable to read RDB block 7 [ 736.330647][T15008] loop2: AHDI p1 p2 p3 [ 736.332070][ T29] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 736.349913][T15011] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2562'. [ 736.359693][T15008] loop2: partition table partially beyond EOD, truncated [ 736.367814][T15008] loop2: p1 start 1601398130 is beyond EOD, truncated [ 736.378659][T15008] loop2: p2 start 1702059890 is beyond EOD, truncated [ 736.421496][ T29] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 736.459669][ T29] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 736.472695][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.474179][T15015] overlayfs: failed to resolve './file2': -2 [ 736.912765][T15015] netlink: 'syz.5.2563': attribute type 49 has an invalid length. [ 737.164141][T15027] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2567'. [ 737.310805][T15002] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 737.329569][ T5720] usb 3-1: USB disconnect, device number 53 [ 737.374160][T15030] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2564'. [ 738.521057][T15048] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2573'. [ 738.567331][T15049] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2572'. [ 738.602208][ T5715] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 738.755364][ T5715] usb 4-1: device descriptor read/64, error -71 [ 739.022300][ T5715] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 739.287127][T15058] loop2: detected capacity change from 0 to 7 [ 739.298647][T15058] Dev loop2: unable to read RDB block 7 [ 739.304884][T15058] loop2: AHDI p1 p2 p3 [ 739.309226][T15058] loop2: partition table partially beyond EOD, truncated [ 739.318731][T15058] loop2: p1 start 1601398130 is beyond EOD, truncated [ 739.326214][T15058] loop2: p2 start 1702059890 is beyond EOD, truncated [ 739.522526][ T5715] usb 4-1: device descriptor read/64, error -71 [ 739.632371][ T5715] usb usb4-port1: attempt power cycle [ 739.729699][T15065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2577'. [ 740.003073][ T5715] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 740.034807][ T5715] usb 4-1: device descriptor read/8, error -71 [ 740.101696][ T5720] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 740.291726][ T5720] usb 3-1: Using ep0 maxpacket: 8 [ 740.292492][ T5715] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 740.301008][ T5720] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 740.323435][ T5715] usb 4-1: device descriptor read/8, error -71 [ 740.347910][ T5720] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 740.365829][ T5720] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 740.376376][ T5720] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 740.387875][ T5720] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 740.398229][ T5720] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 740.414434][ T5720] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 740.424617][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.487670][ T5715] usb usb4-port1: unable to enumerate USB device [ 740.735636][ T5720] usb 3-1: GET_CAPABILITIES returned 0 [ 740.743759][ T5720] usbtmc 3-1:16.0: can't read capabilities [ 740.960483][T15077] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2580'. [ 741.013130][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 741.025759][T15065] usbtmc 3-1:16.0: Unable to send data, error -71 [ 741.036329][ T5730] usb 3-1: USB disconnect, device number 54 [ 741.497100][ T5720] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 741.707745][ T5720] usb 2-1: Using ep0 maxpacket: 8 [ 741.747507][ T5720] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 741.789403][ T5720] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 741.864319][ T5720] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 741.933647][ T5720] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 742.041970][ T5720] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 742.177390][ T5720] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 742.192757][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.392914][T15100] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2586'. [ 742.590578][T15105] syz.3.2585 (15105): drop_caches: 2 [ 743.031657][T15087] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 744.660349][ T5730] usb 2-1: USB disconnect, device number 54 [ 744.805472][T15113] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2588'. [ 744.863438][T15115] siw: device registration error -23 [ 745.019090][T15122] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2592'. [ 746.333568][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.341405][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.360869][T15149] SELinux: invalid class [ 748.793594][T15149] SELinux: failed to load policy [ 749.278348][T15159] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2602'. [ 749.588138][T15167] netlink: 'syz.3.2604': attribute type 49 has an invalid length. [ 750.034579][T15174] loop2: detected capacity change from 0 to 7 [ 750.107692][T15174] Dev loop2: unable to read RDB block 7 [ 750.117134][T15174] loop2: AHDI p1 p2 p3 [ 750.151095][T15174] loop2: partition table partially beyond EOD, truncated [ 750.168995][T15174] loop2: p1 start 1601398130 is beyond EOD, truncated [ 750.185872][T15174] loop2: p2 start 1702059890 is beyond EOD, truncated [ 750.423769][T15180] netlink: 'syz.0.2607': attribute type 49 has an invalid length. [ 751.125451][T15208] siw: device registration error -23 [ 752.122609][T15213] loop5: detected capacity change from 0 to 7 [ 752.233217][T15213] Dev loop5: unable to read RDB block 7 [ 752.269785][T15213] loop5: AHDI p2 [ 752.298638][T15213] loop5: partition table partially beyond EOD, truncated [ 752.783954][T15224] loop2: detected capacity change from 0 to 7 [ 752.796654][T15224] Dev loop2: unable to read RDB block 7 [ 752.804316][T15224] loop2: AHDI p1 p2 p3 [ 752.810113][T15224] loop2: partition table partially beyond EOD, truncated [ 752.820539][T15224] loop2: p1 start 1601398130 is beyond EOD, truncated [ 752.836775][T15224] loop2: p2 start 1702059890 is beyond EOD, truncated [ 753.117041][T15231] syz.5.2620 (15231): drop_caches: 2 [ 754.195099][T15245] netlink: 'syz.0.2626': attribute type 49 has an invalid length. [ 754.450646][T15248] syz.5.2628 (15248): drop_caches: 2 [ 755.283805][T15250] netlink: 'syz.2.2629': attribute type 49 has an invalid length. [ 755.578577][ T5715] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 755.742728][ T5715] usb 6-1: Using ep0 maxpacket: 8 [ 755.750175][ T5715] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 755.765237][T15262] loop2: detected capacity change from 0 to 7 [ 755.772265][T15262] Dev loop2: unable to read RDB block 7 [ 755.777850][T15262] loop2: AHDI p1 p2 p3 [ 755.782232][T15262] loop2: partition table partially beyond EOD, truncated [ 755.789342][T15262] loop2: p1 start 1601398130 is beyond EOD, truncated [ 755.796311][T15262] loop2: p2 start 1702059890 is beyond EOD, truncated [ 755.835350][ T5715] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 755.848511][ T5715] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.883292][ T5715] usb 6-1: config 0 descriptor?? [ 756.120614][ T5715] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 756.381374][T15276] netlink: 'syz.1.2635': attribute type 49 has an invalid length. [ 756.569550][ T5723] usb 6-1: USB disconnect, device number 12 [ 757.391463][T15296] syz.5.2643 (15296): drop_caches: 2 [ 759.002237][ T5730] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 759.061970][T15316] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2646'. [ 760.422224][ T5730] usb 4-1: Using ep0 maxpacket: 8 [ 760.429064][ T5730] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 760.439222][ T5730] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 760.450100][ T5730] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 760.460179][ T5730] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 760.471275][ T5730] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 760.511335][ T5730] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 760.553498][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.796071][ T5730] usb 4-1: usb_control_msg returned -32 [ 760.804504][ T5730] usbtmc 4-1:16.0: can't read capabilities [ 761.093425][T15336] fuse: Bad value for 'group_id' [ 761.099888][T15336] fuse: Bad value for 'group_id' [ 761.461933][ T5723] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 761.509519][T15307] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 761.653096][ T5723] usb 3-1: Using ep0 maxpacket: 16 [ 761.672952][ T5723] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 761.710634][ T5723] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 761.710974][ T5730] usb 4-1: USB disconnect, device number 66 [ 761.721345][ T5723] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 761.738295][ T5723] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 761.746770][ T5723] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 761.756114][ T5723] usb 3-1: config 0 has no interface number 0 [ 761.765966][ T5723] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 761.778012][ T5723] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 761.789313][ T5723] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 761.800371][ T5723] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 761.816602][ T5723] usb 3-1: config 0 interface 125 has no altsetting 2 [ 761.834429][ T5723] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 761.853280][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.863772][ T5723] usb 3-1: Product: syz [ 761.868066][ T5723] usb 3-1: Manufacturer: syz [ 761.873020][ T5723] usb 3-1: SerialNumber: syz [ 761.897699][ T5723] usb 3-1: config 0 descriptor?? [ 761.921085][ T5723] usb 3-1: selecting invalid altsetting 2 [ 761.946412][ T5723] uss720 3-1:0.125: probe with driver uss720 failed with error -22 [ 762.240961][T15346] SELinux: invalid class [ 762.319794][T15346] SELinux: failed to load policy [ 763.433860][T15361] syz.0.2660 (15361): drop_caches: 2 [ 763.772264][T14749] Bluetooth: hci4: command 0x0406 tx timeout [ 763.944473][T15369] syz.3.2662 (15369): drop_caches: 2 [ 764.816428][ T5715] usb 3-1: USB disconnect, device number 55 [ 764.887313][T15374] netlink: 'syz.1.2663': attribute type 49 has an invalid length. [ 767.964578][T15389] syzkaller1: entered promiscuous mode [ 767.990176][T15389] syzkaller1: entered allmulticast mode [ 768.052149][T15394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2668'. [ 768.320898][T15407] syz.5.2671 (15407): drop_caches: 2 [ 768.532345][ T5715] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 768.606928][T15409] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2669'. [ 768.762327][ T5715] usb 4-1: Using ep0 maxpacket: 8 [ 769.076939][ T5715] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 769.150763][ T5715] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 769.163287][ T5715] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 769.182696][ T5715] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 769.200711][ T5715] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 769.220570][ T5715] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 769.261719][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.557107][T15418] syz.2.2672 (15418): drop_caches: 2 [ 770.022359][ T5715] usb 4-1: usb_control_msg returned -32 [ 770.065328][T15422] syz.0.2675 (15422): drop_caches: 2 [ 770.077277][ T5715] usbtmc 4-1:16.0: can't read capabilities [ 770.270345][T15425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2676'. [ 770.299558][T15425] netlink: 'syz.1.2676': attribute type 12 has an invalid length. [ 771.375402][T15425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2676'. [ 771.390164][ T138] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.398461][T15425] netlink: 'syz.1.2676': attribute type 12 has an invalid length. [ 771.463765][ T138] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.486289][ T24] usb 4-1: USB disconnect, device number 67 [ 771.594542][ T138] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.649508][ T138] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.053523][T15438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2679'. [ 772.701496][T15440] netlink: 'syz.3.2680': attribute type 49 has an invalid length. [ 773.403160][T15444] syzkaller1: entered promiscuous mode [ 773.419877][T15444] syzkaller1: entered allmulticast mode [ 774.054676][T15460] syz.0.2686 (15460): drop_caches: 2 [ 774.527845][T15467] syz.1.2688 (15467): drop_caches: 2 [ 775.157819][T15473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2690'. [ 775.167302][T15473] netlink: 'syz.3.2690': attribute type 12 has an invalid length. [ 776.702308][T15469] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 776.739432][T15473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2690'. [ 776.784610][T15473] netlink: 'syz.3.2690': attribute type 12 has an invalid length. [ 776.799411][T15478] netlink: 'syz.1.2691': attribute type 1 has an invalid length. [ 777.417644][T15490] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2696'. [ 777.732512][T15492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2697'. [ 778.897720][T15497] lo speed is unknown, defaulting to 1000 [ 779.132215][ T5730] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 779.160868][T15505] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2700'. [ 780.301817][ T5730] usb 1-1: Using ep0 maxpacket: 8 [ 780.318661][ T5730] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 780.324255][T15520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2706'. [ 780.329876][ T5730] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 780.344074][T15516] 8021q: adding VLAN 0 to HW filter on device bond4 [ 780.361630][T15520] netlink: 'syz.3.2706': attribute type 12 has an invalid length. [ 780.368796][ T5730] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 780.382182][T15520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2706'. [ 780.390415][ T5730] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 780.404366][T15520] netlink: 'syz.3.2706': attribute type 12 has an invalid length. [ 780.413492][ T5730] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 780.435737][ T5730] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 780.439431][T15521] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 780.449780][ T5730] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 780.468722][ T5730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.483495][ T5730] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 780.671311][T15526] loop5: detected capacity change from 0 to 7 [ 780.693914][T15526] Dev loop5: unable to read RDB block 7 [ 780.715616][T15526] loop5: AHDI p2 [ 780.728053][T15526] loop5: partition table partially beyond EOD, truncated [ 780.820289][T15533] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2712'. [ 781.975754][T15553] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2716'. [ 782.028618][ T30] audit: type=1400 audit(1784659379.918:910): avc: denied { unmount } for pid=13190 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 782.996391][ T5730] usb 1-1: USB disconnect, device number 74 [ 783.153750][T15557] 8021q: adding VLAN 0 to HW filter on device bond5 [ 784.118815][T15594] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2730'. [ 784.383056][ T5730] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 785.851132][ T5730] usb 2-1: Using ep0 maxpacket: 8 [ 785.914394][ T5730] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 785.923269][ T5730] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 785.935377][ T5730] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 785.946448][ T5730] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 785.957703][ T5730] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 785.973363][ T5730] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 785.987662][ T5730] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 785.997935][ T5730] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.114132][ T5730] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 786.481999][ T5730] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 786.834002][ T5730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.845868][ T5730] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 786.876681][ T5730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.911261][ T5730] usb 3-1: config 0 descriptor?? [ 786.929033][T15620] loop2: detected capacity change from 0 to 7 [ 786.937316][T15620] Dev loop2: unable to read RDB block 7 [ 786.942958][T15620] loop2: AHDI p1 p2 p3 [ 786.947135][T15620] loop2: partition table partially beyond EOD, truncated [ 786.954374][T15620] loop2: p1 start 1601398130 is beyond EOD, truncated [ 786.961122][T15620] loop2: p2 start 1702059890 is beyond EOD, truncated [ 787.095225][T15630] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2741'. [ 787.137283][T15630] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2741'. [ 787.139912][ T5730] usbhid 3-1:0.0: can't add hid device: -71 [ 787.156761][ T5730] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 787.169121][ T5730] usb 3-1: USB disconnect, device number 56 [ 787.176446][T15630] netlink: 'syz.5.2741': attribute type 12 has an invalid length. [ 787.210454][ T57] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.220293][T15630] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2741'. [ 787.230806][ T6609] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.232510][T15630] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2741'. [ 787.250616][T15630] netlink: 'syz.5.2741': attribute type 12 has an invalid length. [ 787.260862][ T6609] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.290612][ T6609] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.682401][ T5730] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 787.809401][ T5620] usb 2-1: USB disconnect, device number 55 [ 787.852776][ T5730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.879607][ T5730] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 787.893238][ T5730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.907570][ T5730] usb 3-1: config 0 descriptor?? [ 787.939462][T15643] loop5: detected capacity change from 0 to 7 [ 787.958996][T15643] Dev loop5: unable to read RDB block 7 [ 787.968388][T15643] loop5: AHDI p2 [ 787.973891][T15643] loop5: partition table partially beyond EOD, truncated [ 788.688739][T15616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.731639][T15616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.780909][ T5730] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 788.880682][ T5730] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input53 [ 789.205684][T15659] siw: device registration error -23 [ 789.262546][ T5620] usb 3-1: USB disconnect, device number 57 [ 789.262547][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 789.526954][T15666] loop5: detected capacity change from 0 to 7 [ 789.550600][T15666] Dev loop5: unable to read RDB block 7 [ 789.557009][T15666] loop5: AHDI p2 [ 789.598739][T15666] loop5: partition table partially beyond EOD, truncated [ 789.846496][T15674] siw: device registration error -23 [ 790.360533][T15672] netlink: 'syz.1.2756': attribute type 49 has an invalid length. [ 790.462041][ T5715] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 790.640488][ T5715] usb 4-1: device descriptor read/64, error -71 [ 791.232178][ T5715] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 791.362527][ T5715] usb 4-1: device descriptor read/64, error -71 [ 791.473773][ T5715] usb usb4-port1: attempt power cycle [ 791.822167][ T5715] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 791.852125][ T5715] usb 4-1: device descriptor read/8, error -71 [ 792.103901][ T5715] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 792.464133][ T5715] usb 4-1: device descriptor read/8, error -71 [ 792.582352][ T5715] usb usb4-port1: unable to enumerate USB device [ 792.610848][T15711] loop2: detected capacity change from 0 to 7 [ 792.617539][T15711] Dev loop2: unable to read RDB block 7 [ 792.623170][T15711] loop2: AHDI p1 p2 p3 [ 792.627322][T15711] loop2: partition table partially beyond EOD, truncated [ 792.634453][T15711] loop2: p1 start 1601398130 is beyond EOD, truncated [ 792.641196][T15711] loop2: p2 start 1702059890 is beyond EOD, truncated [ 792.654962][T15715] loop5: detected capacity change from 0 to 7 [ 792.697394][T15715] Dev loop5: unable to read RDB block 7 [ 792.709532][T15715] loop5: AHDI p2 [ 792.719564][T15715] loop5: partition table partially beyond EOD, truncated [ 793.142634][T15726] netlink: 'syz.0.2771': attribute type 49 has an invalid length. [ 793.565580][T15729] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2772'. [ 795.059695][T14749] Bluetooth: hci5: command 0x1003 tx timeout [ 795.068142][T12795] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 795.741316][T15744] fuse: Unknown parameter 'grou00000000000000000000' [ 796.700354][T15765] loop5: detected capacity change from 0 to 7 [ 796.709686][T15765] Dev loop5: unable to read RDB block 7 [ 796.723488][T15765] loop5: AHDI p2 [ 796.729939][T15765] loop5: partition table partially beyond EOD, truncated [ 796.791650][ T5620] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 796.953718][ T5620] usb 2-1: Using ep0 maxpacket: 16 [ 796.970616][ T5620] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 796.993433][ T5620] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 797.026954][ T5620] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 797.041407][ T5620] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 797.060344][ T5620] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 797.069889][T15771] syzkaller1: entered promiscuous mode [ 797.075878][T15771] syzkaller1: entered allmulticast mode [ 797.081484][ T5620] usb 2-1: config 0 has no interface number 0 [ 797.100361][ T5620] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 797.114372][ T5620] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 797.125076][ T5620] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 797.135989][ T5620] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 797.162197][ T5620] usb 2-1: config 0 interface 125 has no altsetting 2 [ 797.171578][ T5620] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 797.180855][ T5620] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.189150][ T5620] usb 2-1: Product: syz [ 797.193492][ T5620] usb 2-1: Manufacturer: syz [ 797.198191][ T5620] usb 2-1: SerialNumber: syz [ 797.240621][ T5620] usb 2-1: config 0 descriptor?? [ 797.250829][ T5620] usb 2-1: selecting invalid altsetting 2 [ 797.285563][ T5620] uss720 2-1:0.125: probe with driver uss720 failed with error -22 [ 797.475627][T15772] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2785'. [ 797.693643][T12795] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 797.702096][T14749] Bluetooth: hci5: command 0x1003 tx timeout [ 798.593769][T15794] siw: device registration error -23 [ 798.747610][T15795] syz.3.2791 (15795): drop_caches: 2 [ 799.690238][ T5715] usb 2-1: USB disconnect, device number 56 [ 799.736238][T15800] fuse: Bad value for 'group_id' [ 799.743043][T15800] fuse: Bad value for 'group_id' [ 799.780020][T15804] loop5: detected capacity change from 0 to 7 [ 799.833536][T15804] Dev loop5: unable to read RDB block 7 [ 799.861002][T15804] loop5: AHDI p2 [ 799.885167][T15804] loop5: partition table partially beyond EOD, truncated [ 800.434730][T15827] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2799'. [ 800.592077][ T24] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 800.767437][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 800.895089][ T24] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 801.037993][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.412471][ T24] usb 3-1: config 0 descriptor?? [ 801.733482][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 801.743017][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 801.766643][ T24] usb 3-1: USB disconnect, device number 58 [ 802.539178][T15842] loop2: detected capacity change from 0 to 7 [ 802.612347][T15842] Dev loop2: unable to read RDB block 7 [ 802.637700][T15842] loop2: AHDI p1 p2 p3 [ 802.671118][T15842] loop2: partition table partially beyond EOD, truncated [ 802.686177][T15842] loop2: p1 start 1601398130 is beyond EOD, truncated [ 802.704452][T15842] loop2: p2 start 1702059890 is beyond EOD, truncated [ 802.871806][ T24] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 802.881604][ T5715] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 802.995542][T15855] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2809'. [ 803.053206][ T5715] usb 1-1: Using ep0 maxpacket: 16 [ 803.064774][ T5715] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 803.074494][ T5715] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 803.084128][ T5715] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 803.085630][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.093834][ T5715] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 803.104050][ T24] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 803.123533][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.171398][ T24] usb 3-1: config 0 descriptor?? [ 803.179782][ T5715] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 803.202876][ T5715] usb 1-1: config 0 has no interface number 0 [ 803.217884][ T5715] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 803.243436][ T5715] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 803.268055][ T5715] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 803.296599][T15862] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2811'. [ 803.297164][ T5715] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 803.325721][T15862] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2811'. [ 803.338335][ T24] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 803.371388][T15862] netlink: 'syz.5.2811': attribute type 12 has an invalid length. [ 803.385128][ T24] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input54 [ 803.443627][T15862] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2811'. [ 803.468008][T15860] syz.3.2810 (15860): drop_caches: 2 [ 803.554309][T15862] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2811'. [ 803.688736][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 803.698399][ T24] usb 3-1: USB disconnect, device number 59 [ 803.708659][T15862] netlink: 'syz.5.2811': attribute type 12 has an invalid length. [ 804.021415][ T5715] usb 1-1: config 0 interface 125 has no altsetting 2 [ 804.032802][ T5715] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 804.042932][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.050971][ T5715] usb 1-1: Product: syz [ 804.055830][ T5715] usb 1-1: Manufacturer: syz [ 804.060464][ T5715] usb 1-1: SerialNumber: syz [ 804.180637][ T5715] usb 1-1: config 0 descriptor?? [ 804.307648][ T5715] usb 1-1: selecting invalid altsetting 2 [ 804.378360][ T5715] uss720 1-1:0.125: probe with driver uss720 failed with error -22 [ 804.421329][T15872] syz.1.2813 (15872): drop_caches: 2 [ 806.470982][ T5620] usb 1-1: USB disconnect, device number 75 [ 806.899431][T15894] loop5: detected capacity change from 0 to 7 [ 806.925957][T15894] Dev loop5: unable to read RDB block 7 [ 806.967407][T15894] loop5: AHDI p2 [ 806.979069][T15894] loop5: partition table partially beyond EOD, truncated [ 806.992852][T15896] 8021q: adding VLAN 0 to HW filter on device bond6 [ 807.387836][T15905] netlink: 'syz.1.2822': attribute type 1 has an invalid length. [ 807.391279][T15908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2824'. [ 807.406227][T15908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2824'. [ 807.445124][T15908] netlink: 'syz.0.2824': attribute type 12 has an invalid length. [ 807.483192][T15905] 8021q: adding VLAN 0 to HW filter on device bond7 [ 807.522354][T15908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2824'. [ 807.537603][T15908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2824'. [ 807.557269][T15908] netlink: 'syz.0.2824': attribute type 12 has an invalid length. [ 807.646806][ T5620] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 807.773990][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.780720][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 807.824980][T15920] loop5: detected capacity change from 0 to 7 [ 807.832428][T15920] Dev loop5: unable to read RDB block 7 [ 808.216916][ T5620] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.325714][T15920] loop5: AHDI p2 [ 808.338957][T15920] loop5: partition table partially beyond EOD, truncated [ 808.347910][ T5620] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 808.357226][ T5620] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.387832][ T5620] usb 4-1: config 0 descriptor?? [ 808.695508][ T5723] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 808.855484][ T5620] usbhid 4-1:0.0: can't add hid device: -71 [ 808.911778][ T5620] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 808.944111][ T5620] usb 4-1: USB disconnect, device number 72 [ 808.981809][ T5723] usb 3-1: Using ep0 maxpacket: 16 [ 808.993745][ T5723] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 809.010823][ T5723] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 809.034818][ T5723] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 809.054704][ T5723] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 809.072928][ T5723] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 809.102725][ T5723] usb 3-1: config 0 has no interface number 0 [ 809.124669][ T5723] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 809.150434][ T5723] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 809.163466][ T5723] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 809.174316][ T5723] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 809.187561][ T5723] usb 3-1: config 0 interface 125 has no altsetting 2 [ 809.199177][ T5723] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 809.208630][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.217189][ T5723] usb 3-1: Product: syz [ 809.221694][ T5723] usb 3-1: Manufacturer: syz [ 809.388215][ T5723] usb 3-1: SerialNumber: syz [ 809.396618][ T5723] usb 3-1: config 0 descriptor?? [ 809.406234][ T5723] usb 3-1: selecting invalid altsetting 2 [ 809.412047][ T5723] uss720 3-1:0.125: probe with driver uss720 failed with error -22 [ 809.621792][ T5620] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 809.807497][ T5620] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.824567][ T5620] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 809.859616][ T5620] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.897358][ T5620] usb 4-1: config 0 descriptor?? [ 810.597616][T15909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.649014][T15909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.815018][ T5620] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 810.997664][T15952] tmpfs: Unknown parameter 'fsmagic' [ 811.006799][ T5620] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input55 [ 811.068533][ T30] audit: type=1400 audit(1784659409.038:911): avc: denied { mount } for pid=15951 comm="syz.5.2836" name="/" dev="hugetlbfs" ino=72099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 811.935464][ T30] audit: type=1400 audit(1784659409.068:912): avc: denied { read write } for pid=15951 comm="syz.5.2836" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 811.961118][ T30] audit: type=1400 audit(1784659409.068:913): avc: denied { open } for pid=15951 comm="syz.5.2836" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 812.234743][ T5620] usb 3-1: USB disconnect, device number 60 [ 812.295065][ T5715] usb 4-1: USB disconnect, device number 73 [ 812.295106][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 812.684284][ T5620] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 812.733715][T15986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2843'. [ 812.773885][T15986] netlink: 'syz.3.2843': attribute type 12 has an invalid length. [ 812.789817][T15986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2843'. [ 812.801355][T15986] netlink: 'syz.3.2843': attribute type 12 has an invalid length. [ 812.881567][ T5620] usb 3-1: Using ep0 maxpacket: 32 [ 812.906273][T15995] siw: device registration error -23 [ 812.958827][ T5620] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 813.055986][ T5620] usb 3-1: config 0 has no interface number 0 [ 813.113335][ T5620] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 55, changing to 9 [ 813.188144][ T5620] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid maxpacket 8496, setting to 1024 [ 813.333905][T15999] siw: device registration error -23 [ 813.365163][ T5620] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 813.396297][ T5620] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.430216][ T5620] usb 3-1: Product: syz [ 813.448526][ T5620] usb 3-1: Manufacturer: syz [ 813.477951][ T5620] usb 3-1: SerialNumber: syz [ 813.810591][ T5620] usb 3-1: config 0 descriptor?? [ 814.288351][ T5620] radio-si470x 3-1:0.35: this is not a si470x device. [ 814.852573][ T5620] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 815.872249][ T5723] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 816.081686][ T5723] usb 1-1: Using ep0 maxpacket: 16 [ 816.129185][ T5723] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 816.180726][ T5723] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 816.287081][ T5723] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 816.296099][ T5723] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 816.311040][ T5723] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 816.324845][ T5723] usb 1-1: config 0 has no interface number 0 [ 816.331067][ T5723] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 816.354062][ T5723] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 816.376445][ T5723] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 816.407517][ T5723] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 816.437774][ T187] usb 3-1: USB disconnect, device number 61 [ 816.463295][ T5723] usb 1-1: config 0 interface 125 has no altsetting 2 [ 816.510494][ T5723] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 816.542586][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.591644][ T5620] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 816.616218][ T5723] usb 1-1: Product: syz [ 816.645578][ T5723] usb 1-1: Manufacturer: syz [ 816.670257][ T5723] usb 1-1: SerialNumber: syz [ 816.699946][ T5723] usb 1-1: config 0 descriptor?? [ 816.731919][ T5723] usb 1-1: selecting invalid altsetting 2 [ 816.750147][ T5723] uss720 1-1:0.125: probe with driver uss720 failed with error -22 [ 818.095265][T16051] syz.1.2858 (16051): drop_caches: 2 [ 818.901574][ T5620] usb 1-1: USB disconnect, device number 76 [ 819.067927][T16064] syz.5.2861 (16064): drop_caches: 2 [ 819.461582][ T5702] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 819.614315][ T5702] usb 2-1: config 0 has an invalid interface number: 91 but max is 0 [ 819.623129][ T5702] usb 2-1: config 0 has no interface number 0 [ 819.629733][ T5702] usb 2-1: too many endpoints for config 0 interface 91 altsetting 24: 159, using maximum allowed: 30 [ 819.643506][ T5702] usb 2-1: config 0 interface 91 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 159 [ 819.657374][ T5702] usb 2-1: config 0 interface 91 has no altsetting 0 [ 819.668321][ T5702] usb 2-1: New USB device found, idVendor=046d, idProduct=0920, bcdDevice=78.55 [ 819.679778][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.688974][ T5702] usb 2-1: Product: syz [ 819.694979][ T5702] usb 2-1: Manufacturer: syz [ 819.699835][ T5702] usb 2-1: SerialNumber: syz [ 819.717896][ T5702] usb 2-1: config 0 descriptor?? [ 819.961075][ T30] audit: type=1400 audit(1784659417.928:914): avc: denied { read } for pid=16070 comm="syz.1.2865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 820.080861][ T5702] gspca_main: tv8532-2.14.0 probing 046d:0920 [ 820.211285][ T5702] usb 2-1: USB disconnect, device number 58 [ 820.403504][T16089] netlink: 'syz.1.2869': attribute type 49 has an invalid length. [ 820.585207][T16088] FAULT_INJECTION: forcing a failure. [ 820.585207][T16088] name failslab, interval 1, probability 0, space 0, times 0 [ 820.669385][T16088] CPU: 0 UID: 0 PID: 16088 Comm: syz.2.2870 Tainted: G L syzkaller #0 PREEMPT(full) [ 820.669406][T16088] Tainted: [L]=SOFTLOCKUP [ 820.669410][T16088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 820.669417][T16088] Call Trace: [ 820.669421][T16088] [ 820.669426][T16088] dump_stack_lvl+0x100/0x190 [ 820.669444][T16088] should_fail_ex.cold+0x5/0xa [ 820.669458][T16088] should_failslab+0xc2/0x120 [ 820.669472][T16088] __kmalloc_noprof+0xfc/0x820 [ 820.669482][T16088] ? rcu_is_watching+0x12/0xc0 [ 820.669498][T16088] ? tomoyo_realpath_from_path+0xb6/0x690 [ 820.669518][T16088] tomoyo_realpath_from_path+0xb6/0x690 [ 820.669538][T16088] tomoyo_path_number_perm+0x23c/0x580 [ 820.669552][T16088] ? tomoyo_path_number_perm+0x22e/0x580 [ 820.669567][T16088] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 820.669594][T16088] ? find_held_lock+0x2b/0x80 [ 820.669609][T16088] ? __fget_files+0x215/0x3d0 [ 820.669619][T16088] ? hook_file_ioctl_common+0x140/0x440 [ 820.669629][T16088] ? __fget_files+0x215/0x3d0 [ 820.669641][T16088] ? __fget_files+0x21f/0x3d0 [ 820.669653][T16088] security_file_ioctl+0xd3/0x230 [ 820.669669][T16088] __x64_sys_ioctl+0xb7/0x210 [ 820.669703][T16088] do_syscall_64+0x115/0x870 [ 820.669714][T16088] ? clear_bhb_loop+0x40/0x90 [ 820.669727][T16088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.669738][T16088] RIP: 0033:0x7fe66f99de99 [ 820.669748][T16088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 820.669759][T16088] RSP: 002b:00007fe670905028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 820.669772][T16088] RAX: ffffffffffffffda RBX: 00007fe66fc25fa0 RCX: 00007fe66f99de99 [ 820.669778][T16088] RDX: 0000200000000080 RSI: 00000000c1105517 RDI: 0000000000000005 [ 820.669785][T16088] RBP: 00007fe670905090 R08: 0000000000000000 R09: 0000000000000000 [ 820.669795][T16088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 820.669804][T16088] R13: 00007fe66fc26038 R14: 00007fe66fc25fa0 R15: 00007ffd54ae6d38 [ 820.669821][T16088] [ 820.902717][T16088] ERROR: Out of memory at tomoyo_realpath_from_path. [ 821.008771][T16095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2872'. [ 821.112688][T16097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2871'. [ 821.303433][T16097] 8021q: adding VLAN 0 to HW filter on device bond8 [ 821.401099][T16111] syz.2.2876 (16111): drop_caches: 2 [ 821.886887][ T30] audit: type=1400 audit(1784659419.858:915): avc: denied { map } for pid=16119 comm="syz.1.2878" path="socket:[73044]" dev="sockfs" ino=73044 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 822.213157][ T5730] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 822.311142][T16139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2882'. [ 822.523807][ T5730] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 822.533285][ T5730] usb 6-1: config 0 has no interface number 0 [ 822.549418][ T5730] usb 6-1: config 0 interface 41 has no altsetting 0 [ 822.575180][ T5730] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 822.577071][T12795] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 822.585220][ T5730] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.622723][T12795] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 822.635861][T12795] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 822.643841][T12795] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 822.649075][ T5730] usb 6-1: Product: syz [ 822.656924][T12795] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 822.719128][ T5730] usb 6-1: Manufacturer: syz [ 822.736171][ T5730] usb 6-1: SerialNumber: syz [ 822.786115][ T5730] usb 6-1: config 0 descriptor?? [ 823.554137][T16157] loop5: detected capacity change from 0 to 7 [ 823.572844][ T5730] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 823.683169][T16163] hpfs: Bad magic ... probably not HPFS [ 824.004968][T16157] Dev loop5: unable to read RDB block 7 [ 824.035899][T16157] loop5: AHDI p2 [ 824.046432][ T5730] usb 6-1: USB disconnect, device number 14 [ 824.062140][T16157] loop5: partition table partially beyond EOD, truncated [ 824.111980][T16141] lo speed is unknown, defaulting to 1000 [ 824.755466][T12795] Bluetooth: hci5: command tx timeout [ 826.113360][T16169] [ 826.115715][T16169] ============================================ [ 826.121837][T16169] WARNING: possible recursive locking detected [ 826.127969][T16169] syzkaller #0 Tainted: G L [ 826.133936][T16169] -------------------------------------------- [ 826.140052][T16169] syz.3.2891/16169 is trying to acquire lock: [ 826.146080][T16169] ffffffff8fc4e6d0 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 826.156305][T16169] [ 826.156305][T16169] but task is already holding lock: [ 826.163650][T16169] ffffffff8fc4e6d0 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 826.173929][T16169] [ 826.173929][T16169] other info that might help us debug this: [ 826.181989][T16169] Possible unsafe locking scenario: [ 826.181989][T16169] [ 826.189442][T16169] CPU0 [ 826.192700][T16169] ---- [ 826.195962][T16169] lock(qp_broker_list.mutex); [ 826.200784][T16169] lock(qp_broker_list.mutex); [ 826.205606][T16169] [ 826.205606][T16169] *** DEADLOCK *** [ 826.205606][T16169] [ 826.213719][T16169] May be due to missing lock nesting notation [ 826.213719][T16169] [ 826.222105][T16169] 1 lock held by syz.3.2891/16169: [ 826.227200][T16169] #0: ffffffff8fc4e6d0 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 826.237869][T16169] [ 826.237869][T16169] stack backtrace: [ 826.243733][T16169] CPU: 0 UID: 0 PID: 16169 Comm: syz.3.2891 Tainted: G L syzkaller #0 PREEMPT(full) [ 826.243749][T16169] Tainted: [L]=SOFTLOCKUP [ 826.243753][T16169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 826.243760][T16169] Call Trace: [ 826.243765][T16169] [ 826.243770][T16169] dump_stack_lvl+0x100/0x190 [ 826.243784][T16169] print_deadlock_bug.cold+0xbd/0xca [ 826.243801][T16169] __lock_acquire+0x1256/0x1a40 [ 826.243815][T16169] lock_acquire+0x1b9/0x370 [ 826.243826][T16169] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 826.243838][T16169] ? __pfx___might_resched+0x10/0x10 [ 826.243851][T16169] __mutex_lock+0x1a4/0x1bd0 [ 826.243862][T16169] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 826.243872][T16169] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 826.243882][T16169] ? vmci_host_close+0x115/0x1a0 [ 826.243898][T16169] ? __pfx___mutex_lock+0x10/0x10 [ 826.243912][T16169] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 826.243922][T16169] vmci_qp_broker_detach+0x14c/0x11e0 [ 826.243937][T16169] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 826.243950][T16169] ctx_free_ctx+0x517/0xda0 [ 826.243962][T16169] ? __pfx___schedule+0x10/0x10 [ 826.243977][T16169] ? __pfx_ctx_free_ctx+0x10/0x10 [ 826.243989][T16169] ? preempt_schedule_thunk+0x16/0x40 [ 826.243999][T16169] ? preempt_schedule_common+0x42/0xc0 [ 826.244015][T16169] ? preempt_schedule_thunk+0x16/0x40 [ 826.244026][T16169] vmci_ctx_enqueue_datagram+0x4be/0x5f0 [ 826.244040][T16169] vmci_datagram_dispatch+0x3db/0xc60 [ 826.244054][T16169] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 826.244068][T16169] ? find_held_lock+0x2b/0x80 [ 826.244083][T16169] ? vmci_qp_broker_detach+0xef9/0x11e0 [ 826.244094][T16169] qp_notify_peer+0x1a6/0x230 [ 826.244109][T16169] ? __pfx_qp_notify_peer+0x10/0x10 [ 826.244127][T16169] ? __pfx_vmci_ctx_qp_exists+0x10/0x10 [ 826.244141][T16169] vmci_qp_broker_detach+0xa20/0x11e0 [ 826.244152][T16169] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 826.244163][T16169] ? ctx_free_ctx+0x574/0xda0 [ 826.244176][T16169] ctx_free_ctx+0x517/0xda0 [ 826.244187][T16169] ? synchronize_rcu_expedited+0x3c3/0x450 [ 826.244200][T16169] ? __pfx_ctx_free_ctx+0x10/0x10 [ 826.244211][T16169] ? __pfx_autoremove_wake_function+0x10/0x10 [ 826.244228][T16169] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 826.244241][T16169] vmci_ctx_destroy+0x150/0x1c0 [ 826.244253][T16169] vmci_host_close+0x115/0x1a0 [ 826.244269][T16169] ? __pfx_vmci_host_close+0x10/0x10 [ 826.244284][T16169] __fput+0x3ff/0xb50 [ 826.244296][T16169] task_work_run+0x150/0x240 [ 826.244307][T16169] ? __pfx_task_work_run+0x10/0x10 [ 826.244318][T16169] exit_to_user_mode_loop+0x1d8/0x6f0 [ 826.244331][T16169] ? rcu_is_watching+0x12/0xc0 [ 826.244345][T16169] do_syscall_64+0x666/0x870 [ 826.244355][T16169] ? clear_bhb_loop+0x40/0x90 [ 826.244366][T16169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.244377][T16169] RIP: 0033:0x7f3c8739de99 [ 826.244387][T16169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.244397][T16169] RSP: 002b:00007ffc894075b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 826.244407][T16169] RAX: 0000000000000000 RBX: 00007f3c87627da0 RCX: 00007f3c8739de99 [ 826.244414][T16169] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 826.244420][T16169] RBP: 00007f3c87627da0 R08: 0000000000000006 R09: 0000000000000000 [ 826.244427][T16169] R10: 00007f3c87627cb0 R11: 0000000000000246 R12: 00000000000c9938 [ 826.244433][T16169] R13: 00007f3c8762609c R14: 00000000000c96a0 R15: 00007f3c87626090 [ 826.244442][T16169] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 826.752364][ T30] audit: type=1400 audit(1784659424.718:916): avc: denied { write } for pid=5590 comm="syz-executor" path="pipe:[4787]" dev="pipefs" ino=4787 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 826.811549][T12795] Bluetooth: hci5: command tx timeout [ 827.656910][T12060] bond2: (slave syz_tun): Removing an active aggregator [ 827.686406][T12060] bond2: (slave syz_tun): Releasing backup interface [ 827.947730][ T138] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.958387][ T138] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.034870][ T138] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 828.045569][ T138] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.114123][ T138] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 828.124452][ T138] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.204785][ T138] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 828.215239][ T138] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.301314][ T138] bridge_slave_1: left allmulticast mode [ 828.307611][ T138] bridge_slave_1: left promiscuous mode [ 828.314469][ T138] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.323962][ T138] bridge_slave_0: left allmulticast mode [ 828.329620][ T138] bridge_slave_0: left promiscuous mode [ 828.335335][ T138] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.377592][ T24] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 828.431569][ T138] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 828.444136][ T138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 828.453625][ T138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 828.466432][ T138] bond0 (unregistering): Released all slaves [ 828.474689][ T138] bond1 (unregistering): Released all slaves [ 828.483174][ T138] bond2 (unregistering): Released all slaves [ 828.491205][ T138] bond3 (unregistering): Released all slaves [ 828.634720][ T30] audit: type=1400 audit(1784659426.608:917): avc: denied { write } for pid=16201 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 828.699392][ T30] audit: type=1400 audit(1784659426.658:918): avc: denied { write } for pid=16212 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 828.741167][ T5270] 8021q: adding VLAN 0 to HW filter on device eth5 [ 828.771987][ T138] hsr_slave_0: left promiscuous mode [ 828.777554][ T138] hsr_slave_1: left promiscuous mode [ 828.783311][ T138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 828.790715][ T138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 828.798342][ T138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 828.805748][ T138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 828.815065][ T138] veth1_macvtap: left promiscuous mode [ 828.820525][ T138] veth0_macvtap: left promiscuous mode [ 828.826106][ T138] veth1_vlan: left promiscuous mode [ 828.831330][ T138] veth0_vlan: left promiscuous mode [ 828.911180][ T138] team0 (unregistering): Port device team_slave_1 removed [ 828.920998][ T138] team0 (unregistering): Port device team_slave_0 removed [ 829.141302][ T30] audit: type=1400 audit(1784659427.108:919): avc: denied { write } for pid=16215 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 829.173235][ T30] audit: type=1400 audit(1784659427.148:920): avc: denied { write } for pid=16226 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 829.197994][ T5270] 8021q: adding VLAN 0 to HW filter on device eth6 [ 829.209119][ T138] IPVS: stop unused estimator thread 0... [ 829.267036][ T138] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 829.277448][ T138] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.318460][ T138] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 829.329467][ T138] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.349328][ T30] audit: type=1400 audit(1784659427.318:921): avc: denied { write } for pid=16229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 829.383986][ T30] audit: type=1400 audit(1784659427.358:922): avc: denied { write } for pid=16240 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 829.416100][ T138] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 829.426560][ T138] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.438568][ T5270] 8021q: adding VLAN 0 to HW filter on device eth7 [ 829.474812][ T138] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 829.493105][ T138] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.563293][ T30] audit: type=1400 audit(1784659427.538:923): avc: denied { write } for pid=16243 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 829.618174][ T138] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 829.629847][ T138] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.655285][ T30] audit: type=1400 audit(1784659427.628:924): avc: denied { write } for pid=16254 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 829.681171][ T5270] 8021q: adding VLAN 0 to HW filter on device eth8 [ 829.695824][ T138] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 829.709926][ T138] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.769076][ T138] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 829.783033][ T138] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.828003][ T138] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 829.840655][ T138] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.853618][ T30] audit: type=1400 audit(1784659427.818:925): avc: denied { write } for pid=16258 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 829.909327][ T5270] 8021q: adding VLAN 0 to HW filter on device eth10 [ 829.941216][ T138] bridge_slave_1: left allmulticast mode [ 829.947835][ T138] bridge_slave_1: left promiscuous mode [ 829.954181][ T138] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.963138][ T138] bridge_slave_0: left allmulticast mode [ 829.968790][ T138] bridge_slave_0: left promiscuous mode [ 829.977448][ T138] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.031292][ T138] bond1 (unregistering): (slave gretap1): Releasing active interface [ 830.059379][ T138] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 830.076437][ T138] bond0 (unregistering): Released all slaves [ 830.085687][ T138] bond1 (unregistering): Released all slaves [ 830.094340][ T138] bond2 (unregistering): Released all slaves [ 830.112776][ T138] bond0 (unregistering): Released all slaves [ 830.146473][ T138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 830.157006][ T138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 830.166663][ T138] bond0 (unregistering): Released all slaves [ 830.176592][ T138] bond1 (unregistering): Released all slaves [ 830.377174][ T5270] 8021q: adding VLAN 0 to HW filter on device eth9 [ 830.548690][ T5270] 8021q: adding VLAN 0 to HW filter on device eth11 [ 830.717493][ T5270] 8021q: adding VLAN 0 to HW filter on device eth12 [ 830.887225][ T138] hsr_slave_0: left promiscuous mode [ 830.895523][ T138] hsr_slave_1: left promiscuous mode [ 830.918833][ T138] hsr_slave_0: left promiscuous mode [ 830.927947][ T138] hsr_slave_1: left promiscuous mode [ 830.941892][ T138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 830.950627][ T138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 830.959085][ T138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 830.967072][ T138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 830.980322][ T138] veth1_macvtap: left promiscuous mode [ 830.988680][ T138] veth0_macvtap: left promiscuous mode [ 830.994317][ T138] veth1_vlan: left promiscuous mode [ 830.999560][ T138] veth0_vlan: left promiscuous mode [ 831.005279][ T138] veth1_macvtap: left promiscuous mode [ 831.010732][ T138] veth0_macvtap: left promiscuous mode [ 831.016265][ T138] veth1_vlan: left promiscuous mode [ 831.021476][ T138] veth0_vlan: left promiscuous mode [ 831.090096][ T138] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 831.158115][ T5756] smbdirect: ib_dev[syz0] removed [ 831.218697][ T138] team0 (unregistering): Port device team_slave_1 removed [ 831.228176][ T138] team0 (unregistering): Port device team_slave_0 removed [ 831.268519][ T5270] 8021q: adding VLAN 0 to HW filter on device eth13 [ 831.275826][ T5723] lo speed is unknown, defaulting to 1000 [ 831.281751][ T5723] infiniband syz0: ib_query_port failed (-19) [ 831.506601][ T5270] 8021q: adding VLAN 0 to HW filter on device eth15 [ 831.689930][ T5270] 8021q: adding VLAN 0 to HW filter on device eth14 [ 831.886212][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 831.886226][ T30] audit: type=1400 audit(1784659429.858:939): avc: denied { write } for pid=16359 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 831.921085][ T30] audit: type=1400 audit(1784659429.898:940): avc: denied { write } for pid=16370 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 831.946650][ T5270] 8021q: adding VLAN 0 to HW filter on device eth16 [ 832.038329][ T30] audit: type=1400 audit(1784659430.008:941): avc: denied { write } for pid=16372 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 832.077993][ T30] audit: type=1400 audit(1784659430.048:942): avc: denied { write } for pid=16383 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 832.184361][ T30] audit: type=1400 audit(1784659430.158:943): avc: denied { write } for pid=16385 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 832.224006][ T30] audit: type=1400 audit(1784659430.198:944): avc: denied { write } for pid=16396 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 832.325409][ T30] audit: type=1400 audit(1784659430.298:945): avc: denied { write } for pid=16398 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 832.365442][ T30] audit: type=1400 audit(1784659430.338:946): avc: denied { write } for pid=16409 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 832.497465][ T30] audit: type=1400 audit(1784659430.468:947): avc: denied { write } for pid=16413 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 832.530180][ T30] audit: type=1400 audit(1784659430.498:948): avc: denied { write } for pid=16424 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1