last executing test programs: 2m42.866598578s ago: executing program 3 (id=1633): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000900)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x240}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000007880)=""/102400, 0x19000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="fffff000000010051a409ed86813", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m39.82761742s ago: executing program 3 (id=1644): openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_vhci(0x0, 0x7) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$userfaultfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000078010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e20, 0x4, @private0, 0x3}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040840}, 0x844) 2m38.858786328s ago: executing program 3 (id=1646): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2m36.245045633s ago: executing program 3 (id=1651): r0 = socket(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="10797fcd6c7704e11e05000000000000009ff075475e4b94", 0x18) accept$alg(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = accept$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) setsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000280)=0xb3b, 0x3) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'veth1_macvtap\x00', {0x2, 0x0, @initdev}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x3, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000840}, 0x880) r5 = gettid() sched_setscheduler(r5, 0x1, &(0x7f0000000040)=0x7) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) timer_getoverrun(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000700)='./file0/../file0\x00', 0x0, 0x219d88b, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1184, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r7, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000005220010005bd700004000000020000000500010000000000"], 0x1c}}, 0x800) 2m35.634375249s ago: executing program 3 (id=1653): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES32=r0]) r2 = socket$netlink(0x10, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r6, @ANYRES16=r7, @ANYBLOB="5b5e08007000ffdbdf250100dbc96024c70ac9cff854d1084713"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20808a0}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="200025bd7000ffdbdf2503ff00000000000000e6000014000700fe8800000000000000000000000000015e7b15eff6ca8ca3ce4cc15bb9fb296ec368ba173eaff1580439e2960844"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x94) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x11, 0x1b, r4, 0x1, 0xd8, 0x6, @random}, 0x14) 2m35.310841417s ago: executing program 3 (id=1656): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x30, 0x0) mq_notify(r1, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000002380), r0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000480)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002600)=[{&(0x7f00000000c0)="04", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000140)="a9c2", 0x2}], 0x1}}], 0x2, 0x4050000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000003c0)={r4}, 0x8) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000ffdbdf25110000000800150000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4440}, 0x80) 2m33.970374839s ago: executing program 32 (id=1656): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x30, 0x0) mq_notify(r1, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000002380), r0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000480)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002600)=[{&(0x7f00000000c0)="04", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000140)="a9c2", 0x2}], 0x1}}], 0x2, 0x4050000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000003c0)={r4}, 0x8) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000ffdbdf25110000000800150000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4440}, 0x80) 2m5.315728916s ago: executing program 5 (id=1657): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008", @ANYRES32=r1, @ANYBLOB="a927", @ANYRES64=r0], 0x78}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10) socketpair(0x2a, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}, 0xff8d}, {{0x0, 0x0, 0x0}}], 0xa32, 0x60, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = open(&(0x7f0000000100)='./bus\x00', 0x60440, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x404c050) finit_module(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 1m44.77439538s ago: executing program 5 (id=1657): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008", @ANYRES32=r1, @ANYBLOB="a927", @ANYRES64=r0], 0x78}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10) socketpair(0x2a, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}, 0xff8d}, {{0x0, 0x0, 0x0}}], 0xa32, 0x60, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = open(&(0x7f0000000100)='./bus\x00', 0x60440, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x404c050) finit_module(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 1m18.969769522s ago: executing program 5 (id=1657): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008", @ANYRES32=r1, @ANYBLOB="a927", @ANYRES64=r0], 0x78}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10) socketpair(0x2a, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}, 0xff8d}, {{0x0, 0x0, 0x0}}], 0xa32, 0x60, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = open(&(0x7f0000000100)='./bus\x00', 0x60440, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x404c050) finit_module(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 1m9.373617913s ago: executing program 5 (id=1657): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008", @ANYRES32=r1, @ANYBLOB="a927", @ANYRES64=r0], 0x78}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10) socketpair(0x2a, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}, 0xff8d}, {{0x0, 0x0, 0x0}}], 0xa32, 0x60, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = open(&(0x7f0000000100)='./bus\x00', 0x60440, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x404c050) finit_module(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 9.757151596s ago: executing program 4 (id=2074): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) read$FUSE(r0, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000003040)=[&(0x7f0000419000/0x1000)=nil], &(0x7f0000003080), 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000500), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x3) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x15}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x80}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {0x16}, {0xfffc}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0xc}]}}, @common=@hl={{0x28}, {0x0, 0xfc}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @mcast1, [0x0, 0xff000000, 0xffff00, 0xffffff00], [0xff000000, 0xffffffff, 0xffffff00, 0xffffffff], 'bridge_slave_1\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x3a, 0xb, 0x1, 0x2}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) socket$kcm(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x800000000004) syz_genetlink_get_family_id$nfc(0x0, r3) sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x45057}, 0x64140) r5 = getpid() syz_usb_connect(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f900090503000000000000090504"], 0x0) sched_setscheduler(r5, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 7.34581724s ago: executing program 0 (id=2075): r0 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x8, 0x162000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff6}) 7.290723452s ago: executing program 4 (id=2078): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x4000002, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmctl$SHM_LOCK(0x0, 0xb) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) r2 = gettid() tkill(r2, 0x12) io_setup(0x401, &(0x7f00000001c0)=0x0) io_pgetevents(r3, 0x4, 0x4a6d730c7316a803, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000000)={&(0x7f00000000c0), 0x8}) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) unshare(0x2d060600) semctl$SETALL(0x0, 0x0, 0x11, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000600)={0x13, 0x10, 0xfa00, {&(0x7f0000000640), r5}}, 0x18) unshare(0x40400) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000040)={0x11080}) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r7 = semget$private(0x0, 0x4000, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x6}, 0x8) semctl$SETVAL(r7, 0x1, 0x10, &(0x7f00000000c0)=0x74c3) 7.252647149s ago: executing program 0 (id=2079): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c76436ffffff8800135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.202250685s ago: executing program 1 (id=2080): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @private=0xa010100}, 0x2, 0x0, 0x4}}, 0x2e) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b7050000000000007910a800000000001da0000000000000950000000000000006539e35158ecd9bc7afa4f6a86a179d95bb90539c38a54ed3eae1f15c9679c85ac07d17a1199163ff47dbf5f682cfe2110f7937e240e3ccff4ef567c7fef3f3d16c4eca6df0a9351eea28700c4841bde36467c2f019a4a3762a630b8346cd9ec2c1dbef02993f95c4b5a3fa781ddccb51599c953c49d77d74370890dd280e488d6a9cde379ddb74e670efa3503e97a5a346ab045b6c"], &(0x7f00000002c0)='GPL\x00', 0x1, 0xcc, &(0x7f0000000940)=""/204, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x10000, 0x8, 0x1}, 0x10}, 0x94) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sched_setattr(0x0, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f0000003280)={0x28, 0x19, 0x0, 0xffffffffffffffff, &(0x7f00000031c0)="f2799f730678486afc349b8898f526a8f907b3dedd4e2fb86d9af6b32f338dcf9a454fa655f8b812f7159915c883d30e34cee4c2f802b9e400a91f8c6271c9c322061d340ac5955bb5ed1e77ab4be4f8cafeab0996d716c31f06beb54818fed86a210eda2750b16af0ca7045650b6670af409b094898283a7ef0a0a1bfa4652a49afb37f37a62c89ac7ecda3606dbd162613c430872d54c03b019c", 0x0, 0x8, 0x0, 0x1, {0x0, 0x0, r0, 0xffff}}, 0x1) (async) mmap$xdp(&(0x7f0000e82000/0x2000)=nil, 0x2000, 0x7000009, 0x6e073, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x20000014) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002000a01010008000100ac14143308000300", @ANYRES8=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x0, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) (async) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r3, @ANYRES16=r2], 0x0, 0x2a, 0x0, 0x0, 0x1d, 0x10000, @value=r5}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) 6.862110622s ago: executing program 1 (id=2082): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getuid() setreuid(0xffffffffffffffff, r1) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x40, &(0x7f0000000440)={[{@max={'max', 0x3d, 0x4}}, {@stats}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x258e}}], [{@subj_role={'subj_role', 0x3d, 'xfrm0\x00'}}, {@dont_hash}, {@subj_role={'subj_role', 0x3d, '!'}}, {@obj_user={'obj_user', 0x3d, '$,$}+%\\!'}}, {@fsname={'fsname', 0x3d, '$,'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@obj_user}, {@fowner_gt={'fowner>', r1}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x5d, 0x30, 0x32, 0x35, 0x64, 0x39, 0x31], 0x2d, [0x36, 0x36, 0x33, 0x33], 0x2d, [0x34, 0x35, 0x30, 0x63], 0x2d, [0x38, 0x66, 0x62, 0x36], 0x2d, [0x62, 0x61, 0x65, 0x31, 0x64, 0x64, 0x35, 0x39]}}}, {@hash}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x8, &(0x7f0000000280)) mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000000240)="b6", 0x1, 0x200080c1, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x1000008}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) shutdown(r6, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x68, 0x10, 0x1, 0x70bd2d, 0x25dddbfb, {0x0, 0x0, 0x0, 0x0, 0x14318, 0x1a2a1}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_AF_SPEC={0x34, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000884}, 0x8000) 6.056744417s ago: executing program 4 (id=2083): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}}, 0x20004018) 5.919651218s ago: executing program 1 (id=2084): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f000000f480)={0x0, 0x0, &(0x7f000000f440)={&(0x7f0000001280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0xd5c, 0xe, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xd48, 0x3, 0x0, 0x1, [{0x29c, 0x8d, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @osf={{0x8}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0xf0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3e, 0x1, "c3bc385bc84ed6003e8a23d404156a2f8640f675ee7b648db65936a54d7735ca93a640c554051d6cde376d6f242ff18b9f11e4c086e40df35a84"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xd, 0x1, "5d8f0090c291d0d61d"}, @NFTA_DATA_VALUE={0x89, 0x1, "0c87c88ba087eacfab989ba15cc6cf64c4d1d1fcf449ada661192723f1c9b8c6e78977b4bb90e31b91d8db6c59bff1b0afdec7a3f22417e4da1573498536ed360992a13a67e5c6e77db3def59bf17640e67b019f5c18c64611e56c7e7e9a8172d11547b277259914a54cff67f62556264221fe51b14b55582bcf4b5d6ad087499a78696693"}]}, @NFTA_SET_ELEM_USERDATA={0xea, 0x6, 0x1, 0x0, "7fa37e01032c883155119083e19dd2de1db13a7134a9e94cc8ddf673385e93331f13702c8c9f6cbb41b3cdb96c2c119d43cd785af97c9d5fbaadd619378347b2e6264cbccbabbb1b460e72424014393b128fcfcba98273eaaf6086cb0b7a7a6ddfb9d6a222dffc616667b5bcd4502b7532291b79544255ab441ab057852fceffb3155b03a4ced885982e7a738f3a56c05f447866a5e59f0c5eba58b19a6b43a3263c1bcf4be342bcdbf7d0d2014acc6bca6f4a89e09ade2cf9886b2fb7c1499489608cc5e56f3083f9170aa8f45bc0413f114116772c237c6b671873600acf84b5a39c31f3fb"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xeb6}, @NFTA_SET_ELEM_USERDATA={0x69, 0x6, 0x1, 0x0, "951670a9c0096ff7f569807079aaf76b12ccced65211f8f03b14b6f42dc1e89b6df6531844927532666f02f8ca6d6ee29aa96f8783f1dd457a3a5cbf40bd753eaa747aacdddbc89ed9ca56a442ab5162e485ee019231a57b4e87c14ba0362bbab866426b70"}]}, {0x4}, {0x3fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x8}]}}}]}, @NFTA_SET_ELEM_KEY_END={0xdc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x55, 0x1, "2afacbff0c1bb070fc5e97059cf5e547551c51eb2c4cd03fdc1b95b8676ec4c08412110e356024d28595938b0a3d19d0b70d2c5757c2d6175e379f528c9e1fc5ba9134df10bc485c85c488df9ca796f712"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x15, 0x1, "a695cea0b048fa4f8aeed3d18b3d4b3c48"}]}, @NFTA_SET_ELEM_USERDATA={0xd9, 0x6, 0x1, 0x0, "25f820c54ba6ea1977ca0e252c98b1d29b580bf76eabe10bfcb7cdf3a28ec79df4f47870d9b7c255914c9a99e717d2516555ac4ce08cfb8b03ba55b45adf8679a279c0190ed3c5868bb90ec8def230d797a220253f9bb54a1686541545544e705cb4160fee8bcbc3e4fa6b785490fb2556d70a950948a1c58520c88a77b41b0030313fed44257580bdf6f329fba33b0592f356087154d66a8a9029dbbec0aa9b75560d2fb7965df02a80728d5e164096ba5a40b5f2fcc3808ed208b508529df237e03ae67b4c7ebd1e6b0626ab0ce2f4f0a2f9edc0"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x100000000}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x1f0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdd, 0x1, "c15835efe8f9a6c691eb5cb043b8b0bc6cf9339e548d72b3818bf50fd6661c790792ca34d329dcf7bd444981ecd86f47d9027f711b88bdd49b91974946d073ef57d8fd5eda49f3fb0d9a215a32b7087d200d138e4bfc0260d625bdba7bb8b6bc71512ea59417708240b91ada44d1472fc2585fda3afa294a91cee86045e9873af674964efc6a32373025b69eebda09c23075567c5b10498b69affd8e7d6ce45fc473073950434ed5af32c27bd6d977be02761c6c8ff52b95845c29e7d9711a97d4ed13ccad7ba54647d15ebaabe68073d5f0f91c61c18404a1"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xfd, 0x1, "5228414b795e4e7a59204b4f2c9845c0d888365ef7a2479666a4b79b7ceee837a3870a609daf358c9d3b83c7ce7efe2d838974e5a78dee44d63dfaa4db3767452f34e9956ac9b0d310f6011035290171598b640a5ebc4faf3215a3d1f5192c26b95778eaa4f3a8eaa44307e9ac48068994ba6b495b6e894b27e6e303586985ddaedc369dd490ae8f3a9066e6b28b166da03ab9c60bbc46f6e11784717628e3de7bb3664d4d1052fc7ed1c90cce703d405f6f7c55e378e71303e11e09dd15f60e5d1fde81dbfed7cf08e37710b4abae711adf28b6b822d90bb2e999a17d3649cecfade3dc9e987060a0b2bf26efb6d03c587e6bf941be2646a4"}]}]}, {0x6a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_USERDATA={0x59, 0x6, 0x1, 0x0, "eef555927216d93216b1bd85a392e33cfd5d612fc45ea6f18c196b71350ebe6fef32264a0db0dc64a6b1bd2b58e82922a9c41f6840ea8012dc0c997bc61fd8e75ebbfd10f2cd9dc02c82cc9408e7128c67d29d9a6f"}, @NFTA_SET_ELEM_EXPRESSIONS={0x8c, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}]}}}, {0x4c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_QUOTA_FLAGS={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_SET_ELEM_KEY={0x5a8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5a1, 0x1, "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"}]}]}]}]}], {0x14}}, 0xd84}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 5.746120922s ago: executing program 4 (id=2086): syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0], 0x50) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) openat$null(0xffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', r3}, 0x94) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x700, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 5.626729897s ago: executing program 1 (id=2087): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x42) close(r3) socket(0x2, 0xa, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f00000019c0)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e000f00fdc6c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000003000000", 0x2e}], 0x1}, 0x4005) 5.624736505s ago: executing program 0 (id=2088): fsopen(0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff0905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0xa, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="380000005500e50226d270000100000007000000", @ANYRES32=r4, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000140) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r5 = socket$inet(0xa, 0x801, 0x84) r6 = semget(0x0, 0x0, 0x2) semtimedop(r6, &(0x7f0000000100)=[{0x2, 0x7, 0x1000}, {0x3, 0xf7a3, 0x1800}, {0x3, 0x2, 0x2000}, {0x3, 0x1}, {0x0, 0x2, 0x1000}], 0x5, &(0x7f0000000180)={0x0, 0x3938700}) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0xfffffffd) 5.5994016s ago: executing program 2 (id=2089): r0 = socket$rds(0x15, 0x5, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mount$fuse(0x0, 0x0, 0x0, 0x10813, &(0x7f0000000540)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r0, @ANYBLOB=',rootmod', @ANYRESDEC=r0]) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x3, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f6622d337642b89005000000000000001b7ef6619dd6b2ca4edb6f7debd38b6d889a8c986b33e249c3157f1f370dfd6700"}, 0xd8) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x0, 0x5004) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) socket(0x40000000015, 0x5, 0x0) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) (async) syz_usb_connect(0x5, 0x164, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007af28810d30bf4055b000000000109025201010000000009044000000e0100008c2406"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) pipe2$9p(&(0x7f00000001c0), 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c309000001000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94) (async) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x19) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={r5, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x7, 0x9, 0x7, 0x80, 0x7, 0x78}, 0xcd) 5.337052075s ago: executing program 2 (id=2090): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000340)="05036d1ee8fe091c6202a0ffffffff00600312000000892f143488a87f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r2, &(0x7f0000000340)="05036d1ee8fe091c6202a0ffffffff00600312000000892f143488a87f43055762cb8094", 0x24, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.219035793s ago: executing program 2 (id=2091): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="358742"], 0x44}, 0x1, 0x0, 0x0, 0x6cb3fe8b19b50fba}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = landlock_create_ruleset(&(0x7f00000001c0)={0x4024, 0x0, 0x4, 0x6132, 0x3, 0x3}, 0x30, 0x0) landlock_restrict_self(r6, 0x8) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x7f, 0x584e4f53, 0x3, 0x2, 0x7, 0x4, 0x5, 0x1, 0x4, 0x2, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x10820, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@metacopy_on}], [], 0x2c}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r10, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r9, r8, 0x0, 0x578410eb) writev(0xffffffffffffffff, &(0x7f0000019440)=[{0x0}], 0x1) 5.101025351s ago: executing program 4 (id=2092): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000040000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f4000000080007000000000005000200020000000800030009ac0f"], 0x58}}, 0x0) 1.44488344s ago: executing program 4 (id=2093): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x4c) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000880)=ANY=[@ANYRESDEC, @ANYBLOB="3ca3dfea0f7647e9617b33aff7d3d5fca648cd795052d41132a58c3b7b74810b235fe6b355cb481b898bde46924e351d73d5c267cd3155afa3b739c4f672085888e0e6e78cb34b0b84aa23509be023", @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x183200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, 0xfa00, {0x0, &(0x7f0000000380), 0x2}}, 0x20) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb1800e60080b8785d9600010000000000000000000000000000000017f531b0152f682d00", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b4a0d93481b232b11b819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x1000008]}}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0d, &(0x7f0000000040)) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x400000, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3400) sendto$packet(r7, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r10, 0x1, &(0x7f0000000700)=[&(0x7f0000000140)={0xfff0, 0x20000000, 0x4, 0x5, 0x100, 0xffffffffffffffff, &(0x7f0000000800)="319a31dd25f37f7582fd47a56a1774e9eb969bd3c2050360ef60e43f815272876cdd73d57b1f4b33517a6faded41831932e55195a4c0ea974031e7784049988f2ab2ac433f9f34853c7eaa09bf3a5b97994aca4e1d0958e11d72c83d7a6068009597b4a7ee9d94be2ae5984ce24002ff67ddec8d2c", 0x75, 0x2, 0x0, 0x0, r9}]) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRES64=r3], 0x2d) dup3(r9, r5, 0x80000) 1.331162688s ago: executing program 1 (id=2094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c000000020605089e000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) 1.306760356s ago: executing program 0 (id=2095): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000080)={0xffffffffffffffff, 0x4, 0x4f, 0x5, @vifc_lcl_ifindex=r2, @multicast2}, 0x10) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000c40)={0x1, 0x0, [{0x8f}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x0, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r6, &(0x7f0000000880)={0x27, 0x0, 0x0, 0x6, 0x0, 0x2, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3c}, 0x60) sendmmsg(r6, &(0x7f0000003740)=[{{&(0x7f0000000000)=@generic={0xf, "77a7f0b96ce573cec7dec6164fd645ca3fe9ac4eae9b5fab1e1401050102dd36914c54fbb4e8b53384415932a8f5fc2e80729baf8ac2fe77feabd073acc8036cc9e530bc4d45564aabe4843d830fd66c3207b90526ab791bc480f092e6a25157efd1782b582cf4cef7f72cde328938fa32ecabadded54433c6b1f13b4f1e"}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="5c97994dc3ce805c6684b14ea8f86d14f95ba8b301a63e8510c30797c328f9eaffd37967035f262a6e4811e53db9adf911738e689638c19c02d254a549faaaa017f4c55dbc5623ae7d19f870dff3aef84c0e6ca36dc75549f8086ba486b3411647a119305ec6c9bc686afe63be9fa38de2689d19202506104d7b3fd919f0f06b0b", 0x81}], 0x1}}], 0x1, 0x20000800) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000500)={0x48, 0x7, r7, 0x0, 0x10000, 0x0, 0x200000, 0xffffffec, 0x334e8a}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x2fc247, 0x3f}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) 1.270415148s ago: executing program 2 (id=2096): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x18}}, 0x20004018) 1.178215916s ago: executing program 1 (id=2097): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) io_setup(0x1, &(0x7f0000000200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = io_uring_setup(0x87d, &(0x7f0000000440)={0x0, 0x8ad4, 0x1002, 0x2, 0x2e9}) socket$packet(0x11, 0x0, 0x300) io_uring_enter(r2, 0x4d1, 0xc923, 0x1, &(0x7f0000000040), 0x8) io_submit(r0, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r4 = dup(r3) ioctl$FS_IOC_SETFLAGS(r4, 0x40081271, &(0x7f0000000040)=0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r4, 0x2c93a000) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000)={0x0, r4}) madvise(&(0x7f0000201000/0x2000)=nil, 0x2000, 0x9) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f00000000c0)={0x10003, 0x0, &(0x7f0000510000/0x2000)=nil}) syz_usb_connect$cdc_ncm(0x6, 0x7a, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x2, 0x1, 0x9, 0x50, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "cf53"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x1, 0x2, 0xd1}, {0x6, 0x24, 0x1a, 0x8000, 0x22}, [@obex={0x5, 0x24, 0x15, 0x40}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xff}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xfb, 0x5, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x5, 0x8, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0x80, 0x4}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x0, 0x90, 0xc1, 0x29, 0x40, 0xe5}, 0x34, &(0x7f00000001c0)={0x5, 0xf, 0x34, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x0, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x7, 0x400}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "333f2e787ec12ebe3319f366a0d9e71d"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x3, 0x9}]}, 0x7, [{0xbd, &(0x7f0000000200)=@string={0xbd, 0x3, "269b5d48eaa8196a0ff5cc81039e2d13ca5a1021257be18ff0ba48ead0dd4694577c74fb6457c2bd9e5f5886d2e3d1274d7ee027b620b4080e8e1cde918581ad05e5b963aac80050752df128410fa65ffc4debab3a477c8b56ad0528fd7e5b3af111f904c12a353ad065bfacb3c3a8bc3f5cab7c2c0f1b7daffa1101a6a8a04f89f94eda69735b19868894d89f91f7cbac7d30448ccfd3982d4644ed303c9ee0cc53f952d2786660c177c39e28817c9277a3fd0712b3e7d5815670"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x3409}}, {0xe9, &(0x7f0000000340)=@string={0xe9, 0x3, "c8240756c13c8ef2f14810058aa10d77d372698f46475f50b7627f251d7336707e9ecc44dc324e7f34f1a0d8398c2803ddca053fe7bfbd5dac1ceddca4c9be86e4cb94ded2e9453bdbf7517aec38c520c0a90696ede07a0f51936ace7fa19fe8602bc4bd28870deadcc80d355bf0dc98f489fbec90d2d2c408813823fbe422d273de7f8d05aa256659e8549d8d3af2c909afa5f143989303f7c4870c41bbdcad49c2900737850050ae10693bcca179adeba2526ceee0809369f1dcd762dea107807ea3c00b59f7a00e25abed5a44c793d4471d2227dc066a913773f2ffb2871f9f1d7ad46df417"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x414}}, {0x7c, &(0x7f0000000480)=@string={0x7c, 0x3, "757a4984e75054a17924fae867cbc408145a3ebdf8e55d7a67544e5612ed00d33af4ff5ba17de1d27a0ebd58aa90a08385c531c9c733fcb802a7529d37c41121f2c8d531185e2ec6772282e25efc1a188a14fad8868c1db95ddc210ad48c29e81da371f86a819c6e60206b486b054e3927c8c4ac139402b73444"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x458}}]}) 1.132641406s ago: executing program 2 (id=2098): socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x8004) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) semget$private(0x0, 0x6, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0xc80, 0x55007}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x48}, 0x1, 0x4000}, 0x20000000) 659.871127ms ago: executing program 0 (id=2099): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdfc6ea55887dfa18d0aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37df95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14ecadd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50ab12b13c1b8ce93093a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841acee7c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c76436ffffff8800135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 534.466935ms ago: executing program 2 (id=2100): mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000400000008000000028000001800", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000fffff000"/28], 0x50) mkdirat(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f00000003c0), 0x40, 0x0) chdir(0x0) r0 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), 0x0, &(0x7f0000000100), 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000001d00)={0x0, 0x84c, 0x10, 0x2, 0xe6}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1dd7, 0x0, 0x0, 0x2ce}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x12, 0x40, 0x1, 0x262}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa774, 0x100, 0x0, 0x56}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3998, 0x8, 0x0, 0x1ae}}], 0x4, 0x0, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x11) openat$ublk_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r3, 0x0, 0x0, 0x0) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x4000010) 0s ago: executing program 0 (id=2101): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000340)="05036d1ee8fe091c6202a0ffffffff00600312000000892f143488a87f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r2, &(0x7f0000000340)="05036d1ee8fe091c6202a0ffffffff00600312000000892f143488a87f43055762cb8094", 0x24, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): t, device number 43 [ 525.087451][ T30] audit: type=1400 audit(525.049:1008): avc: denied { write } for pid=11895 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.372447][T11781] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.388285][ T30] audit: type=1400 audit(525.349:1009): avc: denied { write } for pid=11927 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.401150][T11781] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.466376][T11781] bridge_slave_0: entered allmulticast mode [ 525.488160][ T5704] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 525.503641][T11781] bridge_slave_0: entered promiscuous mode [ 525.517610][T11937] netlink: 'syz.2.1692': attribute type 11 has an invalid length. [ 525.523068][T11781] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.534755][T11781] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.542093][T11781] bridge_slave_1: entered allmulticast mode [ 525.576961][T11781] bridge_slave_1: entered promiscuous mode [ 525.748127][ T5704] usb 5-1: Using ep0 maxpacket: 8 [ 525.765886][ T5704] usb 5-1: config 1 has an invalid interface number: 128 but max is 1 [ 525.775363][ T5704] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.801569][ T5704] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 525.811812][ T5704] usb 5-1: config 1 has no interface number 0 [ 525.827328][ T5704] usb 5-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.861085][ T5704] usb 5-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.887592][ T5704] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 525.897482][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.908114][ T5704] usb 5-1: Product: syz [ 525.912477][ T5704] usb 5-1: Manufacturer: syz [ 525.917231][ T5704] usb 5-1: SerialNumber: syz [ 525.996527][ T5704] cdc_wdm 5-1:1.128: skipping garbage [ 526.094921][ T5704] cdc_wdm 5-1:1.128: cdc-wdm0: USB WDM device [ 526.233602][ T5704] cdc_wdm 5-1:1.128: Unknown control protocol [ 526.732734][ T11] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 526.897931][ T11] usb 3-1: Using ep0 maxpacket: 8 [ 526.911685][ T11] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 526.946128][ T11] usb 3-1: config 2 has no interface number 0 [ 526.955468][ T11] usb 3-1: config 2 interface 31 has no altsetting 0 [ 526.990903][ T11] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 527.025581][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.069451][T11781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.087258][ T11] usb 3-1: Product: syz [ 527.633380][ T11] usb 3-1: Manufacturer: syz [ 527.645849][ T11] usb 3-1: SerialNumber: syz [ 527.653996][T11781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.481217][T11972] SELinux: policydb version 813182997 does not match my version range 15-35 [ 528.493561][ T30] audit: type=1400 audit(528.449:1010): avc: denied { load_policy } for pid=11969 comm="syz.0.1698" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 528.550744][T11972] SELinux: failed to load policy [ 528.559845][T11781] team0: Port device team_slave_0 added [ 528.753889][ T30] audit: type=1400 audit(528.719:1011): avc: denied { write } for pid=11943 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 528.782766][T11781] team0: Port device team_slave_1 added [ 528.840533][T11937] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1692'. [ 529.222784][T11940] wireguard: wg0: Could not create IPv4 socket [ 529.240122][T11940] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 529.274319][ T6211] hsr_slave_0: left promiscuous mode [ 529.297575][ T6211] hsr_slave_1: left promiscuous mode [ 529.319153][ T6211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.335375][ T6211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.348990][ T6211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.356771][ T6211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.398769][ T30] audit: type=1400 audit(529.359:1012): avc: denied { write } for pid=11985 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 529.429156][ T5837] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 529.478899][ T6211] veth1_macvtap: left promiscuous mode [ 529.488132][ T11] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 529.515011][ T6211] veth0_macvtap: left promiscuous mode [ 529.576406][ T30] audit: type=1800 audit(529.539:1013): pid=11989 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1700" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 529.603084][ T5837] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 529.614094][ T5837] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 529.628119][ T5837] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 529.637398][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.667371][ T5837] usb 1-1: config 0 descriptor?? [ 530.207648][ T30] audit: type=1400 audit(530.169:1014): avc: denied { connect } for pid=11993 comm="syz.1.1702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 530.236317][ T30] audit: type=1400 audit(530.169:1015): avc: denied { write } for pid=11993 comm="syz.1.1702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 530.261074][ T5837] ath6kl: Failed to submit usb control message: -71 [ 530.279009][ T5837] ath6kl: unable to send the bmi data to the device: -71 [ 530.307370][ T5837] ath6kl: Unable to send get target info: -71 [ 530.332051][ T5837] ath6kl: Failed to init ath6kl core: -71 [ 530.341894][ T5837] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 530.357439][ T5837] usb 1-1: USB disconnect, device number 61 [ 530.407275][ T6211] team0 (unregistering): Port device team_slave_1 removed [ 530.423648][ T6211] team0 (unregistering): Port device team_slave_0 removed [ 530.516097][T11781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.523127][T11781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.549684][T11781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.605511][ T5837] usb 3-1: USB disconnect, device number 55 [ 530.657022][ T5711] usb 5-1: USB disconnect, device number 45 [ 530.667657][T11781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.696251][T11781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.726542][T11781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.819150][ T30] audit: type=1400 audit(530.789:1016): avc: denied { mounton } for pid=12006 comm="syz.4.1705" path="/332/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 530.827028][T12008] overlay: ./file0 is not a directory [ 531.005559][ T30] audit: type=1400 audit(530.789:1017): avc: denied { mount } for pid=12006 comm="syz.4.1705" name="/" dev="configfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 531.525571][T12000] syzkaller0: entered promiscuous mode [ 531.533228][T12000] syzkaller0: entered allmulticast mode [ 531.556255][T12007] tipc: Started in network mode [ 531.572864][T12007] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 531.588823][T12007] tipc: Enabling of bearer rejected, failed to enable media [ 531.853593][T12018] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 531.894746][T12025] Bluetooth: hci5: Frame reassembly failed (-84) [ 531.923795][T11781] hsr_slave_0: entered promiscuous mode [ 531.941234][T11781] hsr_slave_1: entered promiscuous mode [ 531.962666][T11781] debugfs: 'hsr0' already exists in 'hsr' [ 531.971574][T11781] Cannot create hsr debugfs directory [ 532.122225][ T187] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 532.133666][T12029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1709'. [ 532.245420][T12031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1709'. [ 532.348756][T12021] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 532.422618][ T187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.473883][ T187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.528835][ T30] audit: type=1400 audit(532.409:1018): avc: denied { read } for pid=12016 comm="syz.0.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 532.563987][ T187] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 532.609101][ T187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.084456][ T187] usb 2-1: config 0 descriptor?? [ 533.167037][ T57] Bluetooth: hci5: Frame reassembly failed (-84) [ 533.176212][ T57] Bluetooth: hci5: Frame reassembly failed (-84) [ 533.252237][T12029] 8021q: adding VLAN 0 to HW filter on device bond5 [ 533.525199][ T187] cm6533_jd 0003:0D8C:0022.0022: unknown main item tag 0x0 [ 533.536789][ T187] cm6533_jd 0003:0D8C:0022.0022: unknown main item tag 0x0 [ 533.632120][ T187] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0022/input/input35 [ 533.691574][ T187] cm6533_jd 0003:0D8C:0022.0022: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 533.759320][ T187] usb 2-1: USB disconnect, device number 44 [ 533.931695][T12047] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1713'. [ 534.024607][T12047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1713'. [ 534.508377][ T5726] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 534.733141][T11781] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 534.780589][ T5726] usb 1-1: Using ep0 maxpacket: 32 [ 534.782472][T11781] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 534.792467][ T5726] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 534.816786][T11781] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 534.828628][ T5726] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x1 has invalid maxpacket 1041, setting to 1024 [ 534.846698][ T5726] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 534.850452][T11781] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 534.876356][T11781] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 534.877875][ T5726] usb 1-1: config 1 interface 2 has no altsetting 0 [ 534.921549][T11781] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 534.942092][ T5726] usb 1-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 534.947696][T11781] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 534.974459][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.985293][T11781] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 534.996520][ T5726] usb 1-1: Product: syz [ 534.998077][ T11] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 535.012461][ T5726] usb 1-1: Manufacturer: syz [ 535.023761][ T5726] usb 1-1: SerialNumber: syz [ 535.038855][T12070] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1720'. [ 535.159305][ T11] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.162004][ T5624] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 535.170430][ T11] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 535.194204][ T11] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 535.204103][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.255402][ T11] usb 5-1: Product: syz [ 535.266015][ T11] usb 5-1: Manufacturer: syz [ 535.289287][ T11] usb 5-1: SerialNumber: syz [ 535.332734][ T5726] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 535.342682][ T5726] usb 1-1: selecting invalid altsetting 0 [ 535.489360][ T5726] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 535.559701][T12068] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1719'. [ 535.580504][ T5726] usb 1-1: USB disconnect, device number 62 [ 535.582824][T11781] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.641278][ T6211] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.648455][ T6211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.699024][ T30] audit: type=1400 audit(535.659:1019): avc: denied { mount } for pid=12067 comm="syz.4.1719" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 535.726602][ T7061] udevd[7061]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 535.830116][ T6211] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.837291][ T6211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.398907][ T11] usb 5-1: USB disconnect, device number 46 [ 536.755863][ T7061] udevd[7061]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 537.227687][T12097] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1724'. [ 537.958357][ T5704] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 538.139151][ T30] audit: type=1400 audit(538.089:1020): avc: denied { audit_read } for pid=12100 comm="syz.1.1726" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 538.190194][ T5704] usb 1-1: Using ep0 maxpacket: 8 [ 538.205185][ T5704] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 538.231668][ T5704] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.244354][ T5704] usb 1-1: config 0 has no interface number 0 [ 538.270339][ T5704] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 538.300002][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.330166][ T5704] usb 1-1: Product: syz [ 538.345835][ T5704] usb 1-1: Manufacturer: syz [ 538.367311][ T5704] usb 1-1: SerialNumber: syz [ 538.400324][ T5704] usb 1-1: config 0 descriptor?? [ 538.426448][ T5704] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 538.456367][ T5704] uvcvideo 1-1:0.31: No valid video chain found. [ 538.708874][T12121] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1729'. [ 538.897671][ T11] usb 1-1: USB disconnect, device number 63 [ 539.389193][T11781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.597289][T12134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1731'. [ 539.746590][T12140] netlink: 'syz.1.1733': attribute type 4 has an invalid length. [ 539.927465][T12145] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 539.934055][T12145] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 540.403625][ T30] audit: type=1400 audit(540.369:1021): avc: denied { write } for pid=12138 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 540.633686][T11781] veth0_vlan: entered promiscuous mode [ 540.683487][T11781] veth1_vlan: entered promiscuous mode [ 540.689400][ T30] audit: type=1400 audit(540.659:1022): avc: denied { write } for pid=12162 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 541.402259][T11781] veth1_macvtap: entered promiscuous mode [ 541.498002][ T11] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 541.551613][T11781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.619537][T11781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.668005][ T11] usb 5-1: Using ep0 maxpacket: 16 [ 541.677631][T11781] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 541.704645][ T11] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 541.723812][T11781] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 541.733162][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.772010][ T11] usb 5-1: Product: syz [ 541.776346][ T11] usb 5-1: Manufacturer: syz [ 541.781187][ T11] usb 5-1: SerialNumber: syz [ 541.892593][T11781] wireguard: wg0: Could not create IPv4 socket [ 541.902061][T11781] wireguard: wg1: Could not create IPv4 socket [ 542.097632][T11781] wireguard: wg2: Could not create IPv4 socket [ 542.129975][ T11] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 542.244952][T12196] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 542.262612][ T11] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 542.276258][T12196] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 542.291536][ T30] audit: type=1400 audit(542.249:1023): avc: denied { write } for pid=12172 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 542.295168][T12196] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 542.333358][ T11] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 542.373408][ T11] usb 5-1: media controller created [ 542.402698][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 542.411844][T12196] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 542.429738][T12196] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 542.488218][T12196] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 542.525015][T12196] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 542.549896][ T30] audit: type=1400 audit(542.519:1024): avc: denied { write } for pid=12200 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 542.554719][T12196] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 542.581204][T12196] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 542.679447][T12171] binder: BC_ATTEMPT_ACQUIRE not supported [ 542.698286][T12171] binder: 12170:12171 ioctl c0306201 200000000c00 returned -22 [ 542.746230][T12171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1738'. [ 543.182159][ T11] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 544.678648][ T11] usb 5-1: USB disconnect, device number 47 [ 544.910882][T12218] syzkaller0: entered promiscuous mode [ 544.929714][T12218] syzkaller0: entered allmulticast mode [ 544.948744][T12218] TC_ACT_REPEAT abuse ? [ 545.120740][T12224] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1747'. [ 545.288440][T12227] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12227 comm=syz.1.1747 [ 545.423463][T11783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 545.447526][T11783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 545.456919][T11783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 545.464846][T11783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 545.493102][T11783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 546.242772][ T30] audit: type=1400 audit(546.209:1025): avc: denied { write } for pid=12209 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 546.825373][T12224] veth3: entered allmulticast mode [ 547.244200][ T30] audit: type=1400 audit(547.209:1026): avc: denied { write } for pid=12248 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 547.358708][T12265] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1753'. [ 548.162235][ T5624] Bluetooth: hci4: command tx timeout [ 549.540924][T12231] Failed to initialize the IGMP autojoin socket (err -2) [ 549.585739][T12289] rdma_rxe: Failed to create IPv4 UDP tunnel [ 549.987975][ T187] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 549.998239][ T30] audit: type=1400 audit(549.959:1027): avc: denied { write } for pid=12309 comm="syz.2.1768" name="mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 550.106977][ T30] audit: type=1400 audit(550.069:1028): avc: denied { write } for pid=12279 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 550.172696][ T187] usb 2-1: Using ep0 maxpacket: 32 [ 550.189829][ T187] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 550.202835][ T5624] Bluetooth: hci4: command tx timeout [ 550.230411][ T187] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 550.247037][ T187] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 550.267888][ T187] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 550.298041][ T9] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 550.318793][ T187] usb 2-1: config 0 interface 0 has no altsetting 0 [ 550.326389][ T30] audit: type=1400 audit(550.279:1029): avc: denied { write } for pid=12316 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 550.351233][ T187] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 550.367636][ T187] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 550.421893][ T187] usb 2-1: Product: syz [ 550.459559][ T187] usb 2-1: Manufacturer: syz [ 550.476592][ T187] usb 2-1: SerialNumber: syz [ 550.502053][ T9] usb 3-1: config 127 has an invalid interface number: 102 but max is 0 [ 550.517543][ T187] usb 2-1: config 0 descriptor?? [ 550.527403][ T9] usb 3-1: config 127 has no interface number 0 [ 550.546957][ T187] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 550.557336][ T9] usb 3-1: config 127 interface 102 altsetting 255 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 550.587052][ T9] usb 3-1: config 127 interface 102 has no altsetting 0 [ 550.598313][ T187] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 550.632045][ T9] usb 3-1: New USB device found, idVendor=1608, idProduct=0206, bcdDevice=db.2d [ 550.651236][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.668674][ T9] usb 3-1: Product: syz [ 550.686205][ T9] usb 3-1: Manufacturer: syz [ 550.699170][ T9] usb 3-1: SerialNumber: syz [ 550.738500][T12310] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 550.901019][ T187] usb 2-1: USB disconnect, device number 45 [ 550.907081][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 551.010580][T12297] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 551.017029][ T9] io_ti 3-1:127.102: required endpoints missing [ 551.224239][ T9] usb 3-1: USB disconnect, device number 56 [ 551.234485][T12327] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 551.251403][ T187] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 551.427532][ T30] audit: type=1400 audit(551.389:1030): avc: denied { write } for pid=12321 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 551.547628][ T30] audit: type=1400 audit(551.499:1031): avc: denied { write } for pid=12339 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 551.864269][T12347] loop3: detected capacity change from 0 to 7 [ 551.900461][T12347] Dev loop3: unable to read RDB block 7 [ 551.930162][T12347] loop3: AHDI p3 p4 [ 551.941632][T12347] loop3: partition table partially beyond EOD, truncated [ 552.007699][T12347] loop3: p3 start 1702000233 is beyond EOD, truncated [ 552.273726][T12356] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1772'. [ 552.347989][ T5624] Bluetooth: hci4: command tx timeout [ 554.513224][ T5624] Bluetooth: hci4: command tx timeout [ 555.139136][T12231] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 555.162704][ T30] audit: type=1400 audit(555.129:1032): avc: denied { write } for pid=12342 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 555.205049][T12231] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 555.244872][T12231] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 555.288637][T12231] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 555.298831][T12231] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 555.322198][T12231] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 555.335537][T12231] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 555.411950][T12231] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 556.135964][ T30] audit: type=1400 audit(556.099:1033): avc: denied { write } for pid=12383 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 556.880745][T12409] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input37 [ 557.407241][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.414276][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.434701][T12417] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 557.441168][T12417] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 558.133985][T12433] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 558.634369][ T30] audit: type=1400 audit(558.599:1034): avc: denied { write } for pid=12418 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 558.903007][ T30] audit: type=1400 audit(558.869:1035): avc: denied { write } for pid=12462 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 559.681585][T12486] random: crng reseeded on system resumption [ 559.695270][T12231] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 559.707979][ T5700] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 559.745292][T12231] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 559.897993][ T5700] usb 3-1: Using ep0 maxpacket: 8 [ 560.015813][ T5700] usb 3-1: config 1 has an invalid interface number: 128 but max is 1 [ 560.088944][ T30] audit: type=1804 audit(560.009:1036): pid=12492 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1796" name="/newroot/368/file0" dev="tmpfs" ino=1921 res=1 errno=0 [ 560.132952][ T5700] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.199593][T12231] wireguard: wg0: Could not create IPv4 socket [ 560.209518][T12231] wireguard: wg1: Could not create IPv4 socket [ 560.210968][ T5700] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 560.219201][T12231] wireguard: wg2: Could not create IPv4 socket [ 560.284355][ T5700] usb 3-1: config 1 has no interface number 0 [ 560.329219][ T5700] usb 3-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.424333][ T5700] usb 3-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.513289][ T5700] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 560.596501][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.646069][ T5700] usb 3-1: Product: syz [ 560.674518][ T5700] usb 3-1: Manufacturer: syz [ 560.697253][ T5700] usb 3-1: SerialNumber: syz [ 560.794875][ T30] audit: type=1400 audit(560.759:1037): avc: denied { write } for pid=12476 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 561.090333][ T5700] cdc_wdm 3-1:1.128: skipping garbage [ 561.267784][ T5700] cdc_wdm 3-1:1.128: cdc-wdm0: USB WDM device [ 561.322813][ T5700] cdc_wdm 3-1:1.128: Unknown control protocol [ 561.424099][ T30] audit: type=1400 audit(561.389:1038): avc: denied { write } for pid=12503 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 561.675705][T12500] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.683321][T12500] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.797178][ T30] audit: type=1326 audit(561.759:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12518 comm="syz.4.1800" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a4519de59 code=0x0 [ 562.709203][T12500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.766341][ T30] audit: type=1400 audit(562.729:1040): avc: denied { write } for pid=12509 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 562.821910][T12500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.903655][ T30] audit: type=1400 audit(562.869:1041): avc: denied { write } for pid=12541 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 563.304937][ T30] audit: type=1400 audit(563.269:1042): avc: denied { write } for pid=12546 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 563.367026][ T5764] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.393840][ T5764] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.496863][ T5764] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.511393][ T9] usb 3-1: USB disconnect, device number 57 [ 563.544637][ T5764] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.584380][ T30] audit: type=1400 audit(563.549:1043): avc: denied { write } for pid=12565 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 563.676104][T12558] syzkaller0: entered promiscuous mode [ 563.692528][T12558] syzkaller0: entered allmulticast mode [ 564.123043][T11783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 564.139409][T11783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 564.158257][ T5700] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 564.185692][T11783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 564.205401][T11783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 564.223218][ T30] audit: type=1400 audit(564.189:1044): avc: denied { read } for pid=12589 comm="syz.1.1809" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 564.247743][T11783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 564.267660][ T30] audit: type=1400 audit(564.189:1045): avc: denied { open } for pid=12589 comm="syz.1.1809" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 564.376735][ T5700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.466002][ T5700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.600132][ T5700] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 564.704808][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.751180][ T5700] usb 5-1: config 0 descriptor?? [ 564.909501][ T30] audit: type=1400 audit(564.869:1046): avc: denied { write } for pid=12572 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 565.427220][ T5700] usbhid 5-1:0.0: can't add hid device: -71 [ 565.465155][ T5700] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 565.487943][ T187] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 565.493447][ T5700] usb 5-1: USB disconnect, device number 48 [ 565.756816][ T187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 565.782371][ T187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 565.792516][ T187] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 565.817086][ T187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.841721][ T187] usb 2-1: config 0 descriptor?? [ 566.245613][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 566.245649][ T30] audit: type=1400 audit(566.049:1048): avc: denied { write } for pid=12618 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 566.389133][ T5624] Bluetooth: hci4: command tx timeout [ 566.419347][ T30] audit: type=1400 audit(566.129:1049): avc: denied { write } for pid=12632 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 566.451350][ T187] ath6kl: Failed to submit usb control message: -71 [ 566.458729][ T187] ath6kl: unable to send the bmi data to the device: -71 [ 566.466166][ T187] ath6kl: Unable to send get target info: -71 [ 566.499817][ T187] ath6kl: Failed to init ath6kl core: -71 [ 566.506093][ T187] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 566.536935][ T187] usb 2-1: USB disconnect, device number 46 [ 566.940270][ T30] audit: type=1400 audit(566.899:1050): avc: denied { write } for pid=12635 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 567.120236][ T30] audit: type=1400 audit(567.069:1051): avc: denied { write } for pid=12648 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 567.720239][T12675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1818'. [ 567.887455][ T30] audit: type=1400 audit(567.849:1052): avc: denied { write } for pid=12651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 567.996628][ T30] audit: type=1400 audit(567.959:1053): avc: denied { write } for pid=12685 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 568.443593][ T5624] Bluetooth: hci4: command tx timeout [ 568.466340][ T30] audit: type=1400 audit(568.429:1054): avc: denied { write } for pid=12688 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 568.594461][ T30] audit: type=1400 audit(568.559:1055): avc: denied { write } for pid=12699 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 569.032070][ T30] audit: type=1400 audit(568.999:1056): avc: denied { write } for pid=12702 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 569.141255][ T30] audit: type=1400 audit(569.109:1057): avc: denied { write } for pid=12713 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 570.522948][ T5624] Bluetooth: hci4: command tx timeout [ 570.742128][T12760] bond4: (slave geneve2): Opening slave failed [ 571.710150][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 571.710171][ T30] audit: type=1400 audit(571.679:1062): avc: denied { write } for pid=12744 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 572.004323][T12583] Failed to initialize the IGMP autojoin socket (err -2) [ 572.101766][T12789] netlink: 'syz.1.1828': attribute type 3 has an invalid length. [ 572.658644][ T5624] Bluetooth: hci4: command tx timeout [ 572.669106][ T5700] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 572.680770][ T30] audit: type=1400 audit(572.639:1063): avc: denied { write } for pid=12783 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 572.864357][ T5700] usb 1-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=8b.8e [ 572.875645][ T5700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.917304][ T5700] usb 1-1: Product: syz [ 572.957367][ T5700] usb 1-1: Manufacturer: syz [ 572.999627][ T5700] usb 1-1: SerialNumber: syz [ 573.258432][ T5700] gspca_main: touptek-2.14.0 probing 0547:6801 [ 573.335110][T12807] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1831'. [ 573.658551][ T5700] usb 1-1: USB disconnect, device number 64 [ 573.927286][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 574.085953][ T9] usb 2-1: device descriptor read/64, error -71 [ 574.140920][T12816] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1832'. [ 575.519292][ T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 575.729514][ T9] usb 2-1: device descriptor read/64, error -71 [ 575.760907][ T30] audit: type=1400 audit(575.729:1064): avc: denied { write } for pid=12802 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 575.779420][T12817] syzkaller0: entered promiscuous mode [ 575.792157][T12817] syzkaller0: entered allmulticast mode [ 575.872313][T12837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1836'. [ 575.982880][ T9] usb usb2-port1: attempt power cycle [ 576.026967][ T30] audit: type=1400 audit(575.989:1065): avc: denied { write } for pid=12839 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 576.955470][ T30] audit: type=1400 audit(576.919:1066): avc: denied { write } for pid=12846 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 576.982588][ T187] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 577.096122][ T30] audit: type=1400 audit(577.059:1067): avc: denied { write } for pid=12864 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 577.173254][ T187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 577.191078][ T187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 577.205660][ T187] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 577.227611][ T187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.261317][ T187] usb 3-1: config 0 descriptor?? [ 577.715008][ T187] ath6kl: Failed to submit usb control message: -71 [ 577.722392][ T187] ath6kl: unable to send the bmi data to the device: -71 [ 577.762677][ T187] ath6kl: Unable to send get target info: -71 [ 577.778693][ T187] ath6kl: Failed to init ath6kl core: -71 [ 577.816376][ T187] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 577.825503][ T30] audit: type=1400 audit(577.789:1068): avc: denied { write } for pid=12868 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 577.853718][ T187] usb 3-1: USB disconnect, device number 58 [ 577.926481][ T30] audit: type=1400 audit(577.879:1069): avc: denied { write } for pid=12879 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 578.472200][ T30] audit: type=1400 audit(578.439:1070): avc: denied { write } for pid=12882 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 578.594440][ T30] audit: type=1400 audit(578.559:1071): avc: denied { write } for pid=12893 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 579.496138][ T30] audit: type=1400 audit(579.459:1072): avc: denied { write } for pid=12899 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 579.621272][ T30] audit: type=1400 audit(579.579:1073): avc: denied { write } for pid=12912 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 579.992065][ T30] audit: type=1400 audit(579.949:1074): avc: denied { write } for pid=12915 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 580.087411][ T30] audit: type=1400 audit(580.039:1075): avc: denied { write } for pid=12926 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.944886][ T5700] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 583.350126][ T9] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 583.507882][ T5700] usb 1-1: Using ep0 maxpacket: 8 [ 583.530929][ T5700] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 583.541695][ T5700] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.549912][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 583.552800][ T5700] usb 1-1: config 0 has no interface number 0 [ 583.573484][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 583.573498][ T30] audit: type=1400 audit(583.539:1080): avc: denied { write } for pid=12957 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 583.589221][ T9] usb 5-1: config 2 has an invalid interface number: 101 but max is 0 [ 583.605496][ T5700] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 583.641742][ T9] usb 5-1: config 2 has no interface number 0 [ 583.654788][ T9] usb 5-1: config 2 interface 101 has no altsetting 0 [ 583.672023][ T9] usb 5-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=53.2a [ 583.681826][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.706553][ T9] usb 5-1: Product: syz [ 583.710871][ T11] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 583.742258][ T9] usb 5-1: Manufacturer: syz [ 583.758178][ T5700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.766244][ T5700] usb 1-1: Product: syz [ 583.770839][ T5700] usb 1-1: Manufacturer: syz [ 583.775463][ T5700] usb 1-1: SerialNumber: syz [ 583.782663][ T5700] usb 1-1: config 0 descriptor?? [ 583.791596][ T5700] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 583.792183][ T9] usb 5-1: SerialNumber: syz [ 583.799190][ T5700] uvcvideo 1-1:0.31: No valid video chain found. [ 583.823405][T12583] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 583.835958][T12583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 583.845624][T12583] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 583.865532][T12999] netlink: 'syz.2.1850': attribute type 3 has an invalid length. [ 583.870001][ T30] audit: type=1400 audit(583.799:1081): avc: denied { write } for pid=12998 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 583.899688][ T11] usb 2-1: Using ep0 maxpacket: 32 [ 583.916049][T12583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 583.925131][ T11] usb 2-1: unable to get BOS descriptor or descriptor too short [ 583.937598][T12583] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 583.937761][ T11] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 96, changing to 7 [ 583.963180][T12583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 583.974640][T12583] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 583.983522][ T11] usb 2-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 584.009262][T12583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 584.016568][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.151878][T12078] usb 1-1: USB disconnect, device number 65 [ 584.162645][ T11] usb 2-1: Product: syz [ 584.182616][ T11] usb 2-1: Manufacturer: syz [ 584.188707][T12978] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1845'. [ 584.196872][ T11] usb 2-1: SerialNumber: syz [ 584.202644][ T187] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 584.222051][ T9] ipw 5-1:2.101: IPWireless converter converter detected [ 584.247928][ T11] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 584.263427][ T9] usb 5-1: USB disconnect, device number 49 [ 584.294967][ T9] ipw 5-1:2.101: device disconnected [ 584.519302][ T30] audit: type=1400 audit(584.489:1082): avc: denied { write } for pid=13004 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 584.733518][T13024] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.740736][T13024] bridge0: port 2(bridge_slave_1) entered listening state [ 584.748135][T13024] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.755273][T13024] bridge0: port 1(bridge_slave_0) entered listening state [ 584.772996][ T30] audit: type=1400 audit(584.729:1083): avc: denied { write } for pid=13021 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 584.797288][ T11] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 584.858818][T13027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1851'. [ 584.859147][ T11] usb 2-1: USB disconnect, device number 50 [ 584.940602][T13024] veth1_vlan: left promiscuous mode [ 584.951757][ T7061] udevd[7061]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 584.981281][T13024] veth0_vlan: left promiscuous mode [ 584.996459][T13024] veth0_vlan: entered promiscuous mode [ 585.007973][T13024] veth1_vlan: entered promiscuous mode [ 585.021235][T13024] veth1_macvtap: left promiscuous mode [ 585.035993][T13024] veth0_macvtap: left promiscuous mode [ 585.054742][T13024] veth0_macvtap: entered promiscuous mode [ 585.068420][T13024] veth1_macvtap: entered promiscuous mode [ 585.081354][T13024] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 585.902892][ T30] audit: type=1400 audit(585.869:1084): avc: denied { write } for pid=13034 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 586.171545][ T30] audit: type=1400 audit(586.129:1085): avc: denied { write } for pid=13069 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 586.185252][T13071] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1857'. [ 586.203349][T13071] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1857'. [ 586.225898][T13071] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1857'. [ 586.423319][T12583] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 586.474772][T12583] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 586.523085][T12583] wireguard: wg0: Could not create IPv4 socket [ 586.547759][T12583] wireguard: wg1: Could not create IPv4 socket [ 586.563526][ T30] audit: type=1400 audit(586.529:1086): avc: denied { create } for pid=13078 comm="syz.4.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 586.577990][ T5726] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 586.594439][T12583] wireguard: wg2: Could not create IPv4 socket [ 586.869832][ T5726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.907581][ T5726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.950432][ T5726] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 587.013837][ T5726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.098701][ T5726] usb 1-1: config 0 descriptor?? [ 587.440912][T13097] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13097 comm=syz.1.1862 [ 588.347106][ T5726] cm6533_jd 0003:0D8C:0022.0023: unknown main item tag 0x0 [ 588.452476][ T5726] cm6533_jd 0003:0D8C:0022.0023: item fetching failed at offset 4/5 [ 588.480609][ T5726] cm6533_jd 0003:0D8C:0022.0023: parse failed [ 588.502073][ T5726] cm6533_jd 0003:0D8C:0022.0023: probe with driver cm6533_jd failed with error -22 [ 588.538379][ T5726] usb 1-1: USB disconnect, device number 66 [ 588.746442][ T187] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 588.754173][ T30] audit: type=1400 audit(588.489:1087): avc: denied { write } for pid=13077 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 588.929099][ T187] usb 3-1: Using ep0 maxpacket: 8 [ 588.935596][ T187] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 588.937698][ T30] audit: type=1400 audit(588.899:1088): avc: denied { write } for pid=13102 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 588.944559][ T187] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.108083][ T5700] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 589.114987][ T187] usb 3-1: config 0 has no interface number 0 [ 589.136355][ T187] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 589.272102][ T5700] usb 2-1: unable to get BOS descriptor or descriptor too short [ 589.276197][ T187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.309644][ T187] usb 3-1: Product: syz [ 589.321520][ T187] usb 3-1: Manufacturer: syz [ 589.335833][ T187] usb 3-1: SerialNumber: syz [ 589.362782][ T187] usb 3-1: config 0 descriptor?? [ 589.363480][ T5700] usb 2-1: not running at top speed; connect to a high speed hub [ 589.392915][ T187] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 589.416364][ T187] uvcvideo 3-1:0.31: No valid video chain found. [ 589.432228][ T5700] usb 2-1: New USB device found, idVendor=0499, idProduct=101f, bcdDevice= 0.40 [ 589.462792][ T5700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.497913][ T5700] usb 2-1: Product: syz [ 589.513921][ T5700] usb 2-1: Manufacturer: syz [ 589.520410][ T5700] usb 2-1: SerialNumber: syz [ 589.707555][ T187] usb 3-1: USB disconnect, device number 60 [ 589.814310][ T5700] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 589.841109][ T5700] usb 2-1: invalid MIDI in EP 0 [ 589.849132][ T5726] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 589.957901][ T24] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 589.981460][T11783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 589.993843][T11783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 590.003667][T11783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 590.013558][T11783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 590.025658][T11783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 590.069749][ T5726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 590.110619][ T5726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 590.154768][ T5726] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 590.164415][ T5700] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 590.199739][ T5726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.213841][ T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 590.267596][ T5700] usb 2-1: USB disconnect, device number 51 [ 590.298795][ T5726] usb 5-1: config 0 descriptor?? [ 590.306838][ T24] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 590.329010][ T30] audit: type=1400 audit(590.289:1089): avc: denied { write } for pid=13109 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 590.356686][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 590.411961][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.451182][T13134] netlink: 'syz.2.1866': attribute type 9 has an invalid length. [ 590.818901][T13115] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 590.841312][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 590.911793][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 591.057874][ T5726] ath6kl: Failed to submit usb control message: -71 [ 591.088719][ T5726] ath6kl: unable to send the bmi data to the device: -71 [ 591.112754][ T30] audit: type=1400 audit(591.079:1090): avc: denied { write } for pid=13144 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 591.169482][ T5726] ath6kl: Unable to send get target info: -71 [ 591.263317][ T5726] ath6kl: Failed to init ath6kl core: -71 [ 591.311115][ T5726] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 591.353931][ T30] audit: type=1400 audit(591.319:1091): avc: denied { map } for pid=13148 comm="syz.1.1868" path="socket:[41987]" dev="sockfs" ino=41987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 591.410683][ T9] usb 1-1: USB disconnect, device number 67 [ 591.433296][ T5726] usb 5-1: USB disconnect, device number 50 [ 591.533390][T13119] Failed to initialize the IGMP autojoin socket (err -2) [ 591.548173][ T30] audit: type=1400 audit(591.319:1092): avc: denied { read accept } for pid=13148 comm="syz.1.1868" path="socket:[41987]" dev="sockfs" ino=41987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 592.118126][ T5624] Bluetooth: hci4: command tx timeout [ 592.529215][ T30] audit: type=1400 audit(592.429:1093): avc: denied { write } for pid=13156 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 592.646613][ T30] audit: type=1400 audit(592.609:1094): avc: denied { write } for pid=13185 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 592.944745][T13194] binder: 13192:13194 ioctl c0306201 2000000001c0 returned -22 [ 593.179061][ T9] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 593.389142][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 593.406305][ T9] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 593.497438][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.517780][ T9] usb 2-1: config 0 has no interface number 0 [ 593.584723][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 593.608432][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.652467][ T9] usb 2-1: Product: syz [ 593.676341][ T9] usb 2-1: Manufacturer: syz [ 593.693676][ T9] usb 2-1: SerialNumber: syz [ 593.718424][ T9] usb 2-1: config 0 descriptor?? [ 593.817475][ T9] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 593.843660][ T9] uvcvideo 2-1:0.31: No valid video chain found. [ 593.845162][ T30] audit: type=1400 audit(593.809:1095): avc: denied { write } for pid=13197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 594.114917][ T24] usb 2-1: USB disconnect, device number 52 [ 594.198062][ T5624] Bluetooth: hci4: command tx timeout [ 594.858227][T13216] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13216 comm=syz.4.1879 [ 594.896429][ T30] audit: type=1400 audit(594.859:1096): avc: denied { write } for pid=13214 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 595.201111][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 595.253441][T13119] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 595.267725][T11783] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 595.311671][T13119] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 595.319785][T13119] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 595.352927][T13119] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 595.373691][T13119] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 595.452255][T13119] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 595.477629][T13119] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 595.547060][T13119] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 596.278477][T11783] Bluetooth: hci4: command tx timeout [ 597.251542][T11783] Bluetooth: hci5: command 0x1003 tx timeout [ 597.270532][ T5624] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 597.681658][T13272] loop7: detected capacity change from 0 to 16384 [ 597.727576][T13119] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 597.768038][ T24] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 598.047723][T13119] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 598.101065][T13119] wireguard: wg0: Could not create IPv4 socket [ 598.127335][T13119] wireguard: wg1: Could not create IPv4 socket [ 598.160236][T13119] wireguard: wg2: Could not create IPv4 socket [ 598.187966][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 598.209768][ T24] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 598.231453][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.277351][ T24] usb 3-1: Product: syz [ 598.286391][ T24] usb 3-1: Manufacturer: syz [ 598.301904][T13276] loop7: detected capacity change from 16384 to 0 [ 598.310723][ C0] I/O error, dev loop7, sector 5632 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 598.312277][ T24] usb 3-1: SerialNumber: syz [ 598.330486][ T984] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 598.359182][ T5624] Bluetooth: hci4: command tx timeout [ 598.396290][ T24] usb 3-1: config 0 descriptor?? [ 598.429959][ T24] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 598.448796][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 598.464411][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 598.488012][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 598.494938][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 598.519678][ T984] usb 5-1: Using ep0 maxpacket: 8 [ 598.539012][ T984] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 598.564210][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 598.580469][ T984] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.602510][ T24] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 598.616840][ T984] usb 5-1: config 0 has no interface number 0 [ 598.623651][ T24] usb 3-1: media controller created [ 598.640252][ T984] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 598.665109][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 598.675546][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.701904][ T984] usb 5-1: Product: syz [ 598.716163][ T984] usb 5-1: Manufacturer: syz [ 598.724809][ T24] usb 3-1: selecting invalid altsetting 3 [ 598.740827][ T984] usb 5-1: SerialNumber: syz [ 598.751023][ T24] ttusb2: set interface to alts=3 failed [ 598.782055][ T984] usb 5-1: config 0 descriptor?? [ 598.806639][ T984] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 598.823017][ T984] uvcvideo 5-1:0.31: No valid video chain found. [ 598.834104][ T24] DVB: Unable to find symbol tda10086_attach() [ 598.850664][ T24] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 598.886333][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 598.912993][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 598.938526][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 598.952106][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 598.974904][ T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 599.095027][ T24] usb 3-1: USB disconnect, device number 61 [ 599.097474][ T9] usb 5-1: USB disconnect, device number 51 [ 599.230776][ T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 599.841937][T13294] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 599.848509][T13294] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 599.920276][T13301] netlink: 'syz.2.1894': attribute type 1 has an invalid length. [ 600.357052][T11783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 600.373661][T11783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 600.384445][T11783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 600.397684][T11783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 600.409676][T13311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1894'. [ 600.421564][T11783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 601.157981][ T30] audit: type=1400 audit(601.119:1097): avc: denied { create } for pid=13331 comm="syz.4.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 601.251036][T13340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1902'. [ 601.287925][ T1090] Bluetooth: hci5: Frame reassembly failed (-84) [ 601.294456][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 601.335378][T11783] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 602.186847][T13309] Failed to initialize the IGMP autojoin socket (err -2) [ 602.337909][T12078] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 602.350522][T13371] trusted_key: encrypted_key: key user:syz not found [ 602.528854][T11783] Bluetooth: hci4: command tx timeout [ 602.541441][T12078] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 602.578179][T12078] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 602.603981][T12078] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 602.632245][T12078] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.662423][T12078] usb 2-1: config 0 descriptor?? [ 602.995420][T12078] ath6kl: Failed to submit usb control message: -71 [ 603.023125][T12078] ath6kl: unable to send the bmi data to the device: -71 [ 603.042499][T12078] ath6kl: Unable to send get target info: -71 [ 603.065248][T12078] ath6kl: Failed to init ath6kl core: -71 [ 603.093878][T12078] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 603.156910][T12078] usb 2-1: USB disconnect, device number 53 [ 603.318223][T11783] Bluetooth: hci5: command 0x1003 tx timeout [ 603.331071][ T5624] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 603.536606][T13392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1912'. [ 604.558650][ T984] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 604.598423][ T5624] Bluetooth: hci4: command tx timeout [ 605.088562][ T984] usb 5-1: Using ep0 maxpacket: 8 [ 605.544452][ T984] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.554727][ T984] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 605.565929][ T984] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 605.576391][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.586362][ T984] usb 5-1: Product: syz [ 605.592214][ T984] usb 5-1: Manufacturer: syz [ 605.598166][ T984] usb 5-1: SerialNumber: syz [ 605.608621][ T984] usb 5-1: config 0 descriptor?? [ 605.626152][ T984] powermate 5-1:0.0: probe with driver powermate failed with error -22 [ 605.761382][T13309] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 605.799991][T13309] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 605.808923][T13309] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 605.851644][T13309] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 605.890479][T13309] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 605.924960][T13309] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 606.088686][ T984] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 606.387681][ T984] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.414718][ T984] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 606.429991][ T984] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 606.434524][T13407] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.449776][ T984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.500335][ T984] usb 1-1: config 0 descriptor?? [ 606.678460][ T5624] Bluetooth: hci4: command tx timeout [ 606.735690][T13309] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 606.738806][T13420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1918'. [ 606.810135][T13309] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 606.935372][T13407] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.126002][ T984] Bluetooth: Can't get state to change to load configuration err [ 607.150480][T13438] syzkaller0: entered promiscuous mode [ 607.156049][ T984] Bluetooth: Loading sysconfig file failed [ 607.156061][T13438] syzkaller0: entered allmulticast mode [ 607.211392][ T984] ath3k 1-1:0.0: probe with driver ath3k failed with error -16 [ 607.256089][ T30] audit: type=1400 audit(607.219:1098): avc: denied { write } for pid=13433 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.260392][ T984] usb 1-1: USB disconnect, device number 68 [ 607.339383][T13407] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.669887][ T30] audit: type=1400 audit(607.639:1099): avc: denied { write } for pid=13463 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.885299][T13470] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 607.891821][T13470] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 608.313053][ T30] audit: type=1400 audit(608.269:1100): avc: denied { write } for pid=13467 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 608.539476][ T30] audit: type=1400 audit(608.499:1101): avc: denied { write } for pid=13485 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 608.698234][ T187] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 608.772336][ T5624] Bluetooth: hci4: command tx timeout [ 608.849749][ T187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 608.860050][ T187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 608.873498][ T187] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 608.884973][ T187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.932382][ T187] usb 1-1: config 0 descriptor?? [ 609.268115][ T187] ath6kl: Failed to submit usb control message: -71 [ 609.295204][ T187] ath6kl: unable to send the bmi data to the device: -71 [ 609.314103][ T187] ath6kl: Unable to send get target info: -71 [ 609.383607][ T187] ath6kl: Failed to init ath6kl core: -71 [ 609.401478][ T187] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 609.424882][ T187] usb 1-1: USB disconnect, device number 69 [ 609.694973][ T30] audit: type=1400 audit(609.649:1102): avc: denied { write } for pid=13499 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 609.764997][ T30] audit: type=1400 audit(609.719:1103): avc: denied { write } for pid=13510 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 610.269649][ T30] audit: type=1400 audit(610.229:1104): avc: denied { write } for pid=13513 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 610.354752][ T30] audit: type=1400 audit(610.309:1105): avc: denied { write } for pid=13526 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 610.378454][ T984] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 610.538316][ T984] usb 1-1: Using ep0 maxpacket: 8 [ 610.545062][ T984] usb 1-1: config 2 has an invalid interface number: 118 but max is 0 [ 610.561220][ T984] usb 1-1: config 2 has no interface number 0 [ 610.577931][ T984] usb 1-1: config 2 interface 118 has no altsetting 0 [ 610.626491][ T984] usb 1-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice=d9.fa [ 610.641590][ T984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.668384][ T984] usb 1-1: Product: syz [ 610.677940][ T984] usb 1-1: Manufacturer: syz [ 610.687751][ T984] usb 1-1: SerialNumber: syz [ 611.125887][ T30] audit: type=1400 audit(611.089:1106): avc: denied { write } for pid=13533 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 611.225624][ T30] audit: type=1400 audit(611.189:1107): avc: denied { write } for pid=13544 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 611.282703][ T984] usb 1-1: unsupported MDLM descriptors [ 611.306022][ T984] usb 1-1: USB disconnect, device number 70 [ 612.343672][ T30] audit: type=1400 audit(612.299:1108): avc: denied { write } for pid=13567 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.457253][ T30] audit: type=1400 audit(612.409:1109): avc: denied { write } for pid=13585 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.934313][ T30] audit: type=1400 audit(612.899:1110): avc: denied { write } for pid=13588 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 613.072531][T13407] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.092747][T13602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1929'. [ 613.135303][ T30] audit: type=1400 audit(613.099:1111): avc: denied { write } for pid=13601 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 613.195878][ T30] audit: type=1400 audit(613.159:1112): avc: denied { checkpoint_restore } for pid=13606 comm="syz.0.1931" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 614.123648][ T58] smbdirect: ib_dev[syz1] removed [ 614.192410][T13600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.232177][T13600] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.306548][T13600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.353834][T13627] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 614.355627][T13600] wireguard: wg0: Could not create IPv4 socket [ 614.360401][T13627] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 614.385766][T13600] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 614.917962][ T187] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 614.925958][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.998186][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 615.005416][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 615.820563][ T187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 615.836675][ T187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 615.850515][ T187] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 615.879580][ T187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.881223][ T57] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.909517][ T187] usb 3-1: config 0 descriptor?? [ 616.411695][ T187] ath6kl: Failed to submit usb control message: -71 [ 616.439989][ T187] ath6kl: unable to send the bmi data to the device: -71 [ 616.457757][ T5923] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.476410][ T187] ath6kl: Unable to send get target info: -71 [ 616.496143][ T5923] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.515118][ T187] ath6kl: Failed to init ath6kl core: -71 [ 616.525645][ T187] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 616.557166][ T984] usb 5-1: USB disconnect, device number 52 [ 616.591555][ T187] usb 3-1: USB disconnect, device number 62 [ 616.784099][T13669] syzkaller0: entered promiscuous mode [ 616.790103][T13669] syzkaller0: entered allmulticast mode [ 616.863493][ T30] audit: type=1400 audit(616.829:1113): avc: denied { write } for pid=13653 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.018111][ T984] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 617.035408][ T30] audit: type=1400 audit(616.989:1114): avc: denied { write } for pid=13687 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.180727][ T984] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 617.240071][ T984] usb 5-1: config 1 interface 0 has no altsetting 0 [ 617.260873][ T984] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 617.272268][ T984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 617.288821][ T984] usb 5-1: SerialNumber: syz [ 617.805966][ T30] audit: type=1400 audit(617.759:1115): avc: denied { write } for pid=13692 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.904068][ T30] audit: type=1400 audit(617.859:1116): avc: denied { write } for pid=13710 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.954778][ T984] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 618.164799][ T30] audit: type=1326 audit(618.129:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13670 comm="syz.4.1942" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a4519de59 code=0x0 [ 618.459806][ T30] audit: type=1400 audit(618.419:1118): avc: denied { write } for pid=13713 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 618.544508][ T30] audit: type=1400 audit(618.499:1119): avc: denied { write } for pid=13725 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 618.685712][ T984] usb 5-1: USB disconnect, device number 53 [ 618.872000][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.878458][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 618.997701][ T30] audit: type=1400 audit(618.959:1120): avc: denied { write } for pid=13728 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.096840][ T30] audit: type=1400 audit(619.049:1121): avc: denied { write } for pid=13739 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.571921][ T30] audit: type=1400 audit(619.519:1122): avc: denied { write } for pid=13742 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.704008][ T30] audit: type=1400 audit(619.669:1123): avc: denied { write } for pid=13753 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.837170][T13759] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 619.843707][T13759] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 620.297644][ T30] audit: type=1400 audit(620.249:1124): avc: denied { write } for pid=13760 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 622.530906][T13688] syzkaller0: entered promiscuous mode [ 622.536463][T13688] syzkaller0: entered allmulticast mode [ 622.821970][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 622.821987][ T30] audit: type=1400 audit(622.789:1216): avc: denied { write } for pid=13844 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 624.926686][T13309] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 624.963419][T13309] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 625.108994][T13309] wireguard: wg0: Could not create IPv4 socket [ 625.124712][T13309] wireguard: wg1: Could not create IPv4 socket [ 625.137212][T13309] wireguard: wg2: Could not create IPv4 socket [ 625.443840][T13890] netlink: 'syz.1.1964': attribute type 9 has an invalid length. [ 625.706988][ T30] audit: type=1400 audit(625.669:1217): avc: denied { write } for pid=13863 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 625.833175][ T30] audit: type=1400 audit(625.799:1218): avc: denied { write } for pid=13896 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.197106][T13900] syzkaller0: entered promiscuous mode [ 626.204751][T13900] syzkaller0: entered allmulticast mode [ 626.370034][T13909] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1966'. [ 626.735711][ T30] audit: type=1400 audit(626.699:1219): avc: denied { write } for pid=13901 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.883837][ T30] audit: type=1400 audit(626.839:1220): avc: denied { write } for pid=13933 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 627.172690][ T187] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 627.315518][ T30] audit: type=1400 audit(627.279:1221): avc: denied { write } for pid=13938 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 627.349810][ T187] usb 3-1: Using ep0 maxpacket: 16 [ 627.367506][ T187] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 627.379112][ T187] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 250, changing to 7 [ 627.409391][ T30] audit: type=1400 audit(627.379:1222): avc: denied { write } for pid=13949 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 627.442901][ T187] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 627.452215][ T187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.460468][ T187] usb 3-1: Product: syz [ 627.476696][ T187] usb 3-1: Manufacturer: syz [ 627.482310][ T187] usb 3-1: SerialNumber: syz [ 627.973198][ T30] audit: type=1400 audit(627.939:1223): avc: denied { write } for pid=13952 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 628.154532][ T187] snd-ua101 3-1:1.1: sample format descriptor not found [ 628.173242][ T187] snd-ua101 3-1:1.0: invalid bNumEndpoints [ 628.216090][ T187] usb 3-1: USB disconnect, device number 63 [ 628.250698][ T30] audit: type=1400 audit(628.219:1224): avc: denied { write } for pid=13964 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 628.660514][ T30] audit: type=1400 audit(628.629:1225): avc: denied { write } for pid=13967 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 628.774992][ T30] audit: type=1400 audit(628.739:1226): avc: denied { write } for pid=13978 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 628.897690][T13982] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1970'. [ 628.963680][T13985] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1970'. [ 629.249877][ T30] audit: type=1400 audit(629.199:1227): avc: denied { write } for pid=13983 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.333729][ T30] audit: type=1400 audit(629.299:1228): avc: denied { write } for pid=13996 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.683704][ T30] audit: type=1400 audit(629.639:1229): avc: denied { write } for pid=13999 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.743232][ T30] audit: type=1400 audit(629.709:1230): avc: denied { write } for pid=14010 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 630.185125][ T30] audit: type=1400 audit(630.149:1231): avc: denied { write } for pid=14013 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 630.289413][ T30] audit: type=1400 audit(630.259:1232): avc: denied { write } for pid=14024 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 630.381405][T13982] bond7: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 630.413180][T13985] bond7: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 630.591759][T14029] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1971'. [ 630.688760][T14042] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1974'. [ 631.346367][T14069] syzkaller0: entered promiscuous mode [ 631.390045][T14069] syzkaller0: entered allmulticast mode [ 631.654199][T14080] netlink: 'syz.4.1979': attribute type 4 has an invalid length. [ 631.688531][T14080] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1979'. [ 631.755768][T14080] .`: renamed from bond0 (while UP) [ 632.200310][T14100] FAULT_INJECTION: forcing a failure. [ 632.200310][T14100] name failslab, interval 1, probability 0, space 0, times 0 [ 632.213025][T14100] CPU: 0 UID: 0 PID: 14100 Comm: syz.4.1982 Tainted: G L syzkaller #0 PREEMPT(full) [ 632.213055][T14100] Tainted: [L]=SOFTLOCKUP [ 632.213062][T14100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 632.213073][T14100] Call Trace: [ 632.213080][T14100] [ 632.213088][T14100] dump_stack_lvl+0x100/0x190 [ 632.213118][T14100] should_fail_ex.cold+0x5/0xa [ 632.213141][T14100] should_failslab+0xc2/0x120 [ 632.213164][T14100] kmem_cache_alloc_noprof+0x91/0x6a0 [ 632.213184][T14100] ? trace_kmem_cache_alloc+0xdd/0x100 [ 632.213206][T14100] ? security_file_alloc+0x34/0x2c0 [ 632.213235][T14100] security_file_alloc+0x34/0x2c0 [ 632.213261][T14100] init_file+0x95/0x480 [ 632.213281][T14100] alloc_empty_file+0x79/0x1c0 [ 632.213303][T14100] path_openat+0xe7/0x4280 [ 632.213326][T14100] ? lockdep_hardirqs_on+0x78/0x100 [ 632.213352][T14100] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 632.213378][T14100] ? rcu_is_watching+0x12/0xc0 [ 632.213403][T14100] ? trace_sched_exit_tp+0x120/0x160 [ 632.213430][T14100] ? __schedule+0x126e/0x6730 [ 632.213452][T14100] ? __pfx_path_openat+0x10/0x10 [ 632.213477][T14100] do_file_open+0x20e/0x430 [ 632.213496][T14100] ? __pfx_do_file_open+0x10/0x10 [ 632.213513][T14100] ? __pfx___schedule+0x10/0x10 [ 632.213551][T14100] ? alloc_fd+0x471/0x7a0 [ 632.213571][T14100] ? do_getname+0x191/0x390 [ 632.213595][T14100] do_sys_openat2+0x10f/0x1e0 [ 632.213616][T14100] ? __pfx_do_sys_openat2+0x10/0x10 [ 632.213637][T14100] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 632.213663][T14100] ? __fget_files+0x21f/0x3d0 [ 632.213695][T14100] __x64_sys_openat+0x12d/0x210 [ 632.213716][T14100] ? __pfx___x64_sys_openat+0x10/0x10 [ 632.213735][T14100] ? ksys_write+0x1ac/0x250 [ 632.213768][T14100] do_syscall_64+0x115/0x870 [ 632.213791][T14100] ? clear_bhb_loop+0x40/0x90 [ 632.213813][T14100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.213832][T14100] RIP: 0033:0x7f6a4519de59 [ 632.213847][T14100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.213864][T14100] RSP: 002b:00007f6a46096028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 632.213882][T14100] RAX: ffffffffffffffda RBX: 00007f6a45426180 RCX: 00007f6a4519de59 [ 632.213894][T14100] RDX: 000000000000c180 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 632.213905][T14100] RBP: 00007f6a46096090 R08: 0000000000000000 R09: 0000000000000000 [ 632.213917][T14100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.213928][T14100] R13: 00007f6a45426218 R14: 00007f6a45426180 R15: 00007ffca7de9368 [ 632.213953][T14100] [ 632.759596][T14043] Bluetooth: hci5: command 0x1003 tx timeout [ 632.767996][T11783] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 633.065321][T14111] syzkaller0: entered promiscuous mode [ 633.083323][T14111] syzkaller0: entered allmulticast mode [ 633.279621][T14143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1990'. [ 633.656641][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 633.656654][ T30] audit: type=1400 audit(633.619:1239): avc: denied { write } for pid=14136 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 633.942235][ T30] audit: type=1400 audit(633.909:1240): avc: denied { write } for pid=14158 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 634.198434][ T984] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 634.369466][ T984] usb 5-1: Using ep0 maxpacket: 32 [ 634.385855][ T984] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 634.404858][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.435505][ T984] usb 5-1: Product: syz [ 634.456516][ T984] usb 5-1: Manufacturer: syz [ 634.461223][ T984] usb 5-1: SerialNumber: syz [ 634.483863][ T984] usb 5-1: config 0 descriptor?? [ 634.538099][ T984] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 634.557982][ T984] dvb-usb: bulk message failed: -22 (4/0) [ 634.577150][ T984] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 634.628238][ T984] dvb-usb: bulk message failed: -22 (5/0) [ 634.642973][ T984] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 634.723251][ T984] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 634.754485][ T984] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 634.771290][ T984] usb 5-1: media controller created [ 634.815815][ T30] audit: type=1400 audit(634.779:1241): avc: denied { write } for pid=14165 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 634.842203][ T984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 634.941287][ T984] usb 5-1: selecting invalid altsetting 3 [ 634.952561][ T30] audit: type=1400 audit(634.909:1242): avc: denied { write } for pid=14176 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 634.974174][ T984] ttusb2: set interface to alts=3 failed [ 635.087216][ T984] DVB: Unable to find symbol tda10086_attach() [ 635.100112][ T984] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 635.120192][ T984] dvb-usb: bulk message failed: -22 (4/0) [ 635.132656][ T984] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 635.148547][ T984] dvb-usb: bulk message failed: -22 (5/0) [ 635.154366][ T984] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 635.165193][ T984] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 635.205935][ T984] usb 5-1: USB disconnect, device number 55 [ 635.448184][ T984] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 635.588611][ T30] audit: type=1400 audit(635.549:1243): avc: denied { setopt } for pid=14188 comm="syz.2.1995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 635.623159][ T30] audit: type=1400 audit(635.549:1244): avc: denied { write } for pid=14188 comm="syz.2.1995" path="socket:[44670]" dev="sockfs" ino=44670 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 635.689842][T14199] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=14199 comm=syz.4.1997 [ 635.714389][ T30] audit: type=1400 audit(635.669:1245): avc: denied { write } for pid=14180 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.792250][ T30] audit: type=1400 audit(635.759:1246): avc: denied { write } for pid=14202 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.815924][T14203] netlink: 'syz.4.1997': attribute type 27 has an invalid length. [ 636.177374][ T30] audit: type=1400 audit(636.139:1247): avc: denied { write } for pid=14208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 636.285079][ T30] audit: type=1400 audit(636.249:1248): avc: denied { write } for pid=14219 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 636.525836][T11783] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 636.526407][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 636.526984][ T6211] Bluetooth: hci5: Frame reassembly failed (-84) [ 637.694449][T14140] wireguard: wg0: Could not create IPv4 socket [ 637.701028][T14140] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 637.826633][T14203] tipc: Resetting bearer [ 637.841446][T14203] team0: left allmulticast mode [ 637.857644][T14203] xfrm0: left allmulticast mode [ 637.880103][T14203] dummy0: left promiscuous mode [ 638.053513][ T57] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.069233][T14279] Failed to initialize the IGMP autojoin socket (err -2) [ 638.076421][ T57] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.101420][ T57] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.124268][ T57] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.157696][T14287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2003'. [ 638.277857][ T11] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 638.310188][T14297] jfs: Unknown parameter 'discart' [ 638.449392][ T11] usb 1-1: config 0 has no interfaces? [ 638.468639][ T11] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 638.487951][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.506213][ T11] usb 1-1: Product: syz [ 638.510984][ T11] usb 1-1: Manufacturer: syz [ 638.520959][T14043] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 638.526427][ T11] usb 1-1: SerialNumber: syz [ 638.871970][ T11] usb 1-1: config 0 descriptor?? [ 639.099247][ T11] usb 1-1: USB disconnect, device number 71 [ 640.297694][T14319] syzkaller0: entered promiscuous mode [ 640.326258][T14319] syzkaller0: entered allmulticast mode [ 640.472951][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 640.472966][ T30] audit: type=1400 audit(640.439:1257): avc: denied { write } for pid=14309 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 640.660826][ T30] audit: type=1400 audit(640.619:1258): avc: denied { write } for pid=14334 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 641.029863][ T5726] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 641.534240][ T5726] usb 1-1: Using ep0 maxpacket: 16 [ 641.554261][ T5726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.576818][ T5726] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 641.590996][ T5726] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 641.600448][ T5726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.645191][ T5726] usb 1-1: config 0 descriptor?? [ 641.684466][T14365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2014'. [ 641.754169][ T30] audit: type=1400 audit(641.709:1259): avc: denied { write } for pid=14340 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 641.825099][ T30] audit: type=1400 audit(641.789:1260): avc: denied { write } for pid=14368 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.079636][ T5726] microsoft 0003:045E:07DA.0024: item fetching failed at offset 31/34 [ 642.088519][ T5726] microsoft 0003:045E:07DA.0024: parse failed [ 642.094747][ T5726] microsoft 0003:045E:07DA.0024: probe with driver microsoft failed with error -22 [ 642.285856][ T30] audit: type=1400 audit(642.239:1261): avc: denied { write } for pid=14371 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.352152][ T30] audit: type=1400 audit(642.309:1262): avc: denied { write } for pid=14382 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.730903][ T30] audit: type=1400 audit(642.689:1263): avc: denied { write } for pid=14385 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.803846][ T30] audit: type=1400 audit(642.759:1264): avc: denied { write } for pid=14396 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.140913][ T30] audit: type=1400 audit(643.099:1265): avc: denied { write } for pid=14400 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.232606][ T30] audit: type=1400 audit(643.179:1266): avc: denied { write } for pid=14411 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 644.987947][ T5726] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 645.078067][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.085330][ C1] bridge0: topology change detected, propagating [ 645.091886][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.099107][ C1] bridge0: topology change detected, propagating [ 645.235150][ T984] usb 1-1: USB disconnect, device number 72 [ 645.278172][ T5726] usb 3-1: Using ep0 maxpacket: 8 [ 645.297548][ T5726] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 645.307259][ T5726] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.334085][ T5726] usb 3-1: config 0 has no interface number 0 [ 645.358409][ T5726] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 645.383644][ T5726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.394591][ T5726] usb 3-1: Product: syz [ 645.415371][ T5726] usb 3-1: Manufacturer: syz [ 645.434503][ T5726] usb 3-1: SerialNumber: syz [ 645.521056][ T5726] usb 3-1: config 0 descriptor?? [ 645.743121][ T5726] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 645.771938][ T5726] uvcvideo 3-1:0.31: No valid video chain found. [ 645.785269][T14479] syzkaller0: entered promiscuous mode [ 645.791669][T14479] syzkaller0: entered allmulticast mode [ 645.863429][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 645.863446][ T30] audit: type=1400 audit(645.829:1272): avc: denied { write } for pid=14480 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 646.175091][ T187] usb 3-1: USB disconnect, device number 64 [ 646.190131][T14483] syzkaller0: entered promiscuous mode [ 646.195633][T14483] syzkaller0: entered allmulticast mode [ 646.363983][T14498] syzkaller0: entered promiscuous mode [ 646.370452][T14498] syzkaller0: entered allmulticast mode [ 646.488902][ T24] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 646.512094][ T30] audit: type=1400 audit(646.469:1273): avc: denied { write } for pid=14490 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 646.635324][ T30] audit: type=1400 audit(646.599:1274): avc: denied { write } for pid=14512 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 646.635884][T14515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2027'. [ 646.687863][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 646.743749][ T24] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 646.774342][ T24] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 646.798317][ T24] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 646.829030][ T24] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 646.891506][ T24] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 646.901041][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.920280][ T24] usb 2-1: Product: syz [ 646.930265][ T24] usb 2-1: Manufacturer: syz [ 646.934901][ T24] usb 2-1: SerialNumber: syz [ 646.948333][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 646.964138][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input39 [ 647.321145][ T24] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 647.337581][ T24] (id 0x00) [ 647.497948][ T24] rc_core: IR keymap rc-imon-pad not found [ 647.505661][ T24] Registered IR keymap rc-empty [ 647.511178][ T24] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 647.522296][ T24] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 647.540980][ T30] audit: type=1400 audit(647.499:1275): avc: denied { write } for pid=14525 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.573195][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 647.683502][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input40 [ 647.715666][ T24] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:54> initialized [ 647.724628][ T30] audit: type=1400 audit(647.679:1276): avc: denied { write } for pid=14544 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.109194][ T30] audit: type=1400 audit(648.079:1277): avc: denied { append } for pid=14492 comm="syz.1.2025" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 648.184894][ T30] audit: type=1400 audit(648.149:1278): avc: denied { write } for pid=14547 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.203799][T14558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.228426][T14558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.323812][ T30] audit: type=1400 audit(648.289:1279): avc: denied { write } for pid=14560 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.717223][ T30] audit: type=1400 audit(648.679:1280): avc: denied { write } for pid=14566 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.821010][ T30] audit: type=1400 audit(648.789:1281): avc: denied { write } for pid=14577 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 649.384806][T14553] imon:send_packet: task interrupted [ 649.391337][T14553] imon:send_packet: packet tx failed (-512) [ 649.399724][T14553] imon:vfd_write: send packet #1 failed [ 649.450206][ T187] usb 2-1: USB disconnect, device number 54 [ 651.270137][T14667] syzkaller0: entered promiscuous mode [ 651.320060][T14667] syzkaller0: entered allmulticast mode [ 651.931437][T14727] syzkaller0: entered promiscuous mode [ 651.945272][T14727] syzkaller0: entered allmulticast mode [ 652.725896][ T24] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 652.859819][ T24] usb 1-1: device descriptor read/64, error -71 [ 653.100051][ T24] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 653.237988][ T24] usb 1-1: device descriptor read/64, error -71 [ 653.348080][ T24] usb usb1-port1: attempt power cycle [ 653.738978][ T24] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 653.767477][ T24] usb 1-1: device descriptor read/8, error -71 [ 654.041605][ T24] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 654.089236][ T24] usb 1-1: device descriptor read/8, error -71 [ 654.208316][ T24] usb usb1-port1: unable to enumerate USB device [ 654.707958][ T24] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 654.867871][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 654.874709][ T24] usb 3-1: config 1 has an invalid interface number: 128 but max is 1 [ 654.884506][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 654.895367][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 654.904353][ T24] usb 3-1: config 1 has no interface number 0 [ 654.910783][ T24] usb 3-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.923366][ T24] usb 3-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.935515][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 654.944747][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.953074][ T24] usb 3-1: Product: syz [ 654.957317][ T24] usb 3-1: Manufacturer: syz [ 654.962175][ T24] usb 3-1: SerialNumber: syz [ 654.979340][ T24] cdc_wdm 3-1:1.128: skipping garbage [ 655.019394][ T24] cdc_wdm 3-1:1.128: cdc-wdm0: USB WDM device [ 655.025544][ T24] cdc_wdm 3-1:1.128: Unknown control protocol [ 655.806203][T14731] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 655.896749][ T24] usb 3-1: USB disconnect, device number 65 [ 656.453702][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 656.453719][ T30] audit: type=1400 audit(656.419:1289): avc: denied { accept } for pid=14777 comm="syz.4.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 656.816653][T14795] syzkaller0: entered promiscuous mode [ 656.837899][T14795] syzkaller0: entered allmulticast mode [ 656.858059][ T187] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 656.917972][T12078] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 657.031281][ T187] usb 5-1: unable to get BOS descriptor or descriptor too short [ 657.051493][ T187] usb 5-1: not running at top speed; connect to a high speed hub [ 657.063054][ T187] usb 5-1: New USB device found, idVendor=0499, idProduct=101f, bcdDevice= 0.40 [ 657.072892][ T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.081363][ T187] usb 5-1: Product: syz [ 657.085605][ T187] usb 5-1: Manufacturer: syz [ 657.090607][ T187] usb 5-1: SerialNumber: syz [ 657.098193][T12078] usb 3-1: Using ep0 maxpacket: 8 [ 657.106916][T12078] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 657.121101][T12078] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 657.131312][T12078] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 657.142923][T12078] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 657.154150][T12078] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 657.168675][T12078] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 657.177809][T12078] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.193023][T12078] usbtmc 3-1:16.0: bulk endpoints not found [ 657.439894][ T187] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 657.447714][ T187] usb 5-1: invalid MIDI in EP 0 [ 657.550712][ T187] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 657.568836][ T187] usb 5-1: USB disconnect, device number 56 [ 657.607454][ T5615] udevd[5615]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 658.085117][T14813] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2071'. [ 658.963810][ T187] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 659.141570][ T187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 659.161058][ T187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 659.171048][ T187] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 659.191082][ T187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.220061][ T187] usb 5-1: config 0 descriptor?? [ 659.569210][ T187] ath6kl: Failed to submit usb control message: -71 [ 659.578299][ T187] ath6kl: unable to send the bmi data to the device: -71 [ 659.585423][ T187] ath6kl: Unable to send get target info: -71 [ 659.599010][ T187] ath6kl: Failed to init ath6kl core: -71 [ 659.605448][ T187] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 659.627133][ T187] usb 5-1: USB disconnect, device number 57 [ 660.783906][ T24] usb 3-1: USB disconnect, device number 66 [ 660.985893][T14832] syzkaller0: entered promiscuous mode [ 661.001842][T14832] syzkaller0: entered allmulticast mode [ 661.104539][T11783] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 661.131217][T11783] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 661.148435][T11783] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 661.170462][T11783] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 661.184250][T11783] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 661.760604][T14870] xfrm0: entered allmulticast mode [ 662.944583][T14916] syzkaller0: entered promiscuous mode [ 662.974719][T14916] syzkaller0: entered allmulticast mode [ 662.998110][ T187] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 663.013310][T14836] Failed to initialize the IGMP autojoin socket (err -2) [ 663.178330][ T187] usb 1-1: Using ep0 maxpacket: 8 [ 663.206719][ T187] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 663.216952][ T187] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 663.229063][ T187] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 663.238878][T11783] Bluetooth: hci5: command tx timeout [ 663.259612][ T187] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 663.284214][ T187] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 663.297603][ T187] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 663.320793][ T187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.347610][ T187] usbtmc 1-1:16.0: bulk endpoints not found [ 663.498536][ T30] audit: type=1400 audit(663.449:1290): avc: denied { write } for pid=14945 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 663.595327][ T30] audit: type=1400 audit(663.549:1291): avc: denied { write } for pid=14962 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 664.112060][ T30] audit: type=1400 audit(664.069:1292): avc: denied { write } for pid=14966 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 664.222169][ T30] audit: type=1400 audit(664.189:1293): avc: denied { write } for pid=14978 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 665.269921][ T30] audit: type=1400 audit(665.239:1294): avc: denied { write } for pid=14984 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 665.330362][ T5624] Bluetooth: hci5: command tx timeout [ 665.442110][ T30] audit: type=1400 audit(665.409:1295): avc: denied { write } for pid=14995 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 665.936303][ T30] audit: type=1400 audit(665.889:1296): avc: denied { write } for pid=14998 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 665.993874][ T30] audit: type=1400 audit(665.959:1297): avc: denied { write } for pid=15009 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 666.921100][ T984] usb 1-1: USB disconnect, device number 77 [ 667.099037][ T187] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 667.419013][ T5624] Bluetooth: hci5: command tx timeout [ 667.425472][ T187] usb 5-1: Using ep0 maxpacket: 8 [ 667.472974][ T187] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 667.489051][ T187] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 667.507041][ T187] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 667.517304][ T187] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 667.538488][ T187] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 667.547646][ T187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.779125][ T187] usb 5-1: GET_CAPABILITIES returned 0 [ 667.795296][ T187] usbtmc 5-1:16.0: can't read capabilities [ 667.815684][T15028] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x200000ad4 pfn:0x1f359 [ 667.826086][ T30] audit: type=1800 audit(667.789:1298): pid=15042 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2100" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 667.826435][T15026] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x7d9 pfn:0x45b39 [ 667.873781][T15028] memcg:ffff8880309abd00 [ 667.891124][T15028] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 667.898866][T15026] memcg:ffff8880309abd00 [ 667.898879][T15026] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 667.898903][T15026] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 667.899304][T15026] raw: 00000000000007d9 0000000000000000 00000001ffffffff ffff8880309abd00 [ 667.932921][T15028] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 667.963084][T15028] raw: 0000000200000ad4 0000000000000000 00000001ffffffff ffff8880309abd00 [ 667.969761][T15026] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 667.988282][T15013] loop5: detected capacity change from 0 to 7 [ 667.991279][T15028] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 667.997759][T15026] page_owner tracks the page as allocated [ 668.011588][T15013] Dev loop5: unable to read RDB block 7 [ 668.024227][ T30] audit: type=1400 audit(667.989:1299): avc: denied { read } for pid=4957 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 668.047320][T15013] loop5: unable to read partition table [ 668.047476][T15013] loop5: partition table beyond EOD, truncated [ 668.069746][T15028] page_owner tracks the page as allocated [ 668.073851][T15013] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 668.090292][T15028] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 15028, tgid 15026 (syz.1.2097), ts 667815642414, free_ts 667537711138 [ 668.096083][T15026] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 15026, tgid 15026 (syz.1.2097), ts 667825847704, free_ts 667783870589 [ 668.132895][T15026] post_alloc_hook+0xfd/0x120 [ 668.139680][T15026] get_page_from_freelist+0xf48/0x3530 [ 668.145549][T15026] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 668.156710][T15026] alloc_pages_mpol+0x1fb/0x540 [ 668.162000][T15028] post_alloc_hook+0xfd/0x120 [ 668.166941][T15028] get_page_from_freelist+0xf48/0x3530 [ 668.172861][T15026] folio_alloc_noprof+0x22/0x250 [ 668.179050][T15026] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 668.185488][T15028] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 668.192000][T15028] alloc_pages_mpol+0x1fb/0x540 [ 668.196958][T15026] filemap_alloc_folio_noprof+0x5e/0x80 [ 668.203183][T15028] folio_alloc_noprof+0x22/0x250 [ 668.208486][T15026] page_cache_ra_order+0x539/0xed0 [ 668.213782][T15028] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 668.220619][T15026] filemap_fault+0x1943/0x3130 [ 668.225541][T15026] __do_fault+0x10b/0x440 [ 668.232108][T15028] filemap_alloc_folio_noprof+0x5e/0x80 [ 668.238186][T15026] do_fault+0x2db/0x1750 [ 668.250331][T15028] page_cache_ra_order+0x539/0xed0 [ 668.262018][T15026] __handle_mm_fault+0x187d/0x2a00 [ 668.270494][T15028] filemap_fault+0x1943/0x3130 [ 668.278129][T15026] handle_mm_fault+0x37b/0xa30 [ 668.283053][T15028] __do_fault+0x10b/0x440 [ 668.287446][T15028] do_fault+0xa99/0x1750 [ 668.291906][T15049] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 668.291979][T15049] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 668.305931][T15026] do_user_addr_fault+0x5a3/0x12f0 [ 668.311453][T15026] exc_page_fault+0x6f/0xd0 [ 668.316156][T15026] asm_exc_page_fault+0x26/0x30 [ 668.321536][T15028] __handle_mm_fault+0x187d/0x2a00 [ 668.326882][T15026] page last free pid 15035 tgid 15026 stack trace: [ 668.333812][T15028] handle_mm_fault+0x37b/0xa30 [ 668.339145][T15028] __get_user_pages+0x1178/0x32a0 [ 668.344267][T15026] free_unref_folios+0xa44/0x1710 [ 668.349775][T15028] populate_vma_page_range+0x267/0x3f0 [ 668.355754][T15026] folios_put_refs+0x585/0xaa0 [ 668.361579][T15026] truncate_inode_pages_range+0x30c/0x1050 [ 668.366435][T15028] __mm_populate+0x107/0x3a0 [ 668.371662][T15026] set_blocksize+0x2d1/0x460 [ 668.372367][T15028] page last free pid 15017 tgid 15017 stack trace: [ 668.383199][T15028] free_unref_folios+0xa44/0x1710 [ 668.388025][T15026] blkdev_bszset+0x19b/0x240 [ 668.388542][T15028] folios_put_refs+0x585/0xaa0 [ 668.397613][T15028] free_pages_and_swap_cache+0x22d/0x3b0 [ 668.398159][T15026] blkdev_ioctl+0x513/0x6f0 [ 668.403748][T15028] __tlb_batch_free_encoded_pages+0xe9/0x280 [ 668.415020][T15028] tlb_flush_mmu+0xe9/0x590 [ 668.419829][T15026] __x64_sys_ioctl+0x18e/0x210 [ 668.424630][T15026] do_syscall_64+0x115/0x870 [ 668.424996][T15028] __zap_vma_range+0x223f/0x4a30 [ 668.434545][T15028] unmap_vmas+0x299/0x5f0 [ 668.441066][T15028] exit_mmap+0x1ef/0xa00 [ 668.444223][T15026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.445401][T15028] __mmput+0x12a/0x410 [ 668.455796][T15028] mmput+0x67/0x80 [ 668.457733][T15026] ------------[ cut here ]------------ [ 668.465428][T15026] kernel BUG at mm/filemap.c:858! [ 668.471763][T15026] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 668.478185][T15026] CPU: 1 UID: 0 PID: 15026 Comm: syz.1.2097 Tainted: G L syzkaller #0 PREEMPT(full) [ 668.489105][T15026] Tainted: [L]=SOFTLOCKUP [ 668.493403][T15026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 668.503435][T15026] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0 [ 668.509413][T15026] Code: 4c c1 ff 48 c7 c6 a0 93 dd 8b 4c 89 ef e8 d6 eb 12 00 90 0f 0b e8 ee 4b c1 ff 48 c7 c6 00 94 dd 8b 4c 89 ef e8 bf eb 12 00 90 <0f> 0b e8 d7 4b c1 ff 48 c7 c6 80 94 dd 8b 4c 89 ef e8 a8 eb 12 00 [ 668.528998][T15026] RSP: 0018:ffffc9000d887820 EFLAGS: 00010293 [ 668.535045][T15026] RAX: 0000000000000000 RBX: 0000000000112c00 RCX: 0000000000000000 [ 668.542995][T15026] RDX: ffff888069eba540 RSI: ffffffff825b70a8 RDI: ffff888069ebaa04 [ 668.550943][T15026] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 668.558896][T15026] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000002 [ 668.566843][T15026] R13: ffffea000116ce40 R14: 000000000002c928 R15: 0000000000000000 [ 668.574791][T15026] FS: 0000555572433500(0000) GS:ffff888123eec000(0000) knlGS:0000000000000000 [ 668.583703][T15026] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 668.590267][T15026] CR2: 00007efcac8a9286 CR3: 0000000079bc6000 CR4: 00000000003526f0 [ 668.598216][T15026] Call Trace: [ 668.601473][T15026] [ 668.604387][T15026] ? __pfx___filemap_add_folio+0x10/0x10 [ 668.610006][T15026] filemap_add_folio+0x1d3/0x630 [ 668.614925][T15026] ? __lock_acquire+0x49f/0x1a40 [ 668.619843][T15026] ? __pfx_filemap_add_folio+0x10/0x10 [ 668.625285][T15026] ? __pfx___css_rstat_updated+0x10/0x10 [ 668.630900][T15026] page_cache_ra_order+0x602/0xed0 [ 668.635997][T15026] filemap_fault+0x1943/0x3130 [ 668.640746][T15026] ? __pfx_filemap_fault+0x10/0x10 [ 668.645843][T15026] ? __pfx_filemap_map_pages+0x10/0x10 [ 668.651282][T15026] __do_fault+0x10b/0x440 [ 668.655677][T15026] do_fault+0x2db/0x1750 [ 668.659908][T15026] __handle_mm_fault+0x187d/0x2a00 [ 668.665008][T15026] ? reacquire_held_locks+0xce/0x1e0 [ 668.670272][T15026] ? __pfx___handle_mm_fault+0x10/0x10 [ 668.675715][T15026] ? lock_vma_under_rcu+0x17c/0x590 [ 668.680899][T15026] ? lockdep_hardirqs_on+0x78/0x100 [ 668.686081][T15026] handle_mm_fault+0x37b/0xa30 [ 668.690830][T15026] do_user_addr_fault+0x5a3/0x12f0 [ 668.695927][T15026] exc_page_fault+0x6f/0xd0 [ 668.700416][T15026] asm_exc_page_fault+0x26/0x30 [ 668.705243][T15026] RIP: 0033:0x7ff93ec675a2 [ 668.709634][T15026] Code: 30 48 8b 14 24 48 85 d2 74 17 8b 44 24 10 0f c8 89 c0 48 89 44 24 10 48 83 fa 01 0f 85 aa 02 00 00 48 8b 44 24 18 8b 74 24 10 <89> 30 e9 1e fe ff ff 48 8b 44 24 18 8b 10 48 8b 04 24 48 85 c0 0f [ 668.729218][T15026] RSP: 002b:00007ffc29544760 EFLAGS: 00010246 [ 668.735696][T15026] RAX: 0000200000000000 RBX: 0000000000000004 RCX: 0000000000000000 [ 668.743654][T15026] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555724333d8 [ 668.751604][T15026] RBP: 00007ffc29544880 R08: 0000000000000000 R09: 0000000000000000 [ 668.759553][T15026] R10: 0000000000000000 R11: 0000000000000000 R12: 00007ffc295448c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 668.767503][T15026] R13: 00007ff93f025fac R14: 00000000000a2dbb R15: 00007ffc295448a0 [ 668.775454][T15026] [ 668.778542][T15026] Modules linked in: [ 668.782681][T15026] ---[ end trace 0000000000000000 ]--- [ 668.793193][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 668.793208][ T30] audit: type=1400 audit(668.759:1307): avc: denied { write } for pid=5592 comm="syz-executor" path="pipe:[5128]" dev="pipefs" ino=5128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 668.827113][T15028] do_exit+0x8b1/0x2ae0 [ 668.837249][T15028] do_group_exit+0xd5/0x2a0 [ 668.850131][T15026] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0 [ 668.856143][T15026] Code: 4c c1 ff 48 c7 c6 a0 93 dd 8b 4c 89 ef e8 d6 eb 12 00 90 0f 0b e8 ee 4b c1 ff 48 c7 c6 00 94 dd 8b 4c 89 ef e8 bf eb 12 00 90 <0f> 0b e8 d7 4b c1 ff 48 c7 c6 80 94 dd 8b 4c 89 ef e8 a8 eb 12 00 [ 668.869648][T15028] __x64_sys_exit_group+0x3e/0x50 [ 668.900738][ T30] audit: type=1400 audit(668.859:1308): avc: denied { write } for pid=15057 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 668.932395][T15026] RSP: 0018:ffffc9000d887820 EFLAGS: 00010293 [ 668.957371][T15028] x64_sys_call+0x102c/0x1530 [ 668.962569][T15028] do_syscall_64+0x115/0x870 [ 668.967202][T15028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.968714][T15026] RAX: 0000000000000000 RBX: 0000000000112c00 RCX: 0000000000000000 [ 668.983716][T15028] ------------[ cut here ]------------ [ 668.989236][T15028] kernel BUG at mm/filemap.c:858! [ 668.990977][ T984] usb 5-1: USB disconnect, device number 58 [ 668.994510][T15028] Oops: invalid opcode: 0000 [#2] SMP KASAN NOPTI [ 669.006529][T15028] CPU: 0 UID: 0 PID: 15028 Comm: syz.1.2097 Tainted: G D L syzkaller #0 PREEMPT(full) [ 669.017482][T15028] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 669.022589][T15028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 669.032640][T15028] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0 [ 669.038618][T15028] Code: 4c c1 ff 48 c7 c6 a0 93 dd 8b 4c 89 ef e8 d6 eb 12 00 90 0f 0b e8 ee 4b c1 ff 48 c7 c6 00 94 dd 8b 4c 89 ef e8 bf eb 12 00 90 <0f> 0b e8 d7 4b c1 ff 48 c7 c6 80 94 dd 8b 4c 89 ef e8 a8 eb 12 00 [ 669.058207][T15028] RSP: 0018:ffffc900061073f8 EFLAGS: 00010246 [ 669.064258][T15028] RAX: 0000000000080000 RBX: 0000000000112c00 RCX: ffffc900053e9000 [ 669.072208][T15028] RDX: 0000000000080000 RSI: ffffffff825b70a8 RDI: ffff88802892aa04 [ 669.080174][T15028] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff22444d2 [ 669.088122][T15028] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000002 [ 669.096071][T15028] R13: ffffea00007cd640 R14: 000000000002c928 R15: 0000000000000000 [ 669.104021][T15028] FS: 00007ff93cff66c0(0000) GS:ffff888123dec000(0000) knlGS:0000000000000000 [ 669.112932][T15028] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 669.119495][T15028] CR2: 0000556450b14b11 CR3: 0000000079bc6000 CR4: 00000000003526f0 [ 669.127448][T15028] Call Trace: [ 669.130705][T15028] [ 669.133617][T15028] ? __pfx___filemap_add_folio+0x10/0x10 [ 669.139240][T15028] filemap_add_folio+0x1d3/0x630 [ 669.144163][T15028] ? __lock_acquire+0x49f/0x1a40 [ 669.149086][T15028] ? __pfx_filemap_add_folio+0x10/0x10 [ 669.154528][T15028] ? __pfx___css_rstat_updated+0x10/0x10 [ 669.160149][T15028] page_cache_ra_order+0x602/0xed0 [ 669.165249][T15028] filemap_fault+0x1943/0x3130 [ 669.169999][T15028] ? __pfx_filemap_fault+0x10/0x10 [ 669.175097][T15028] ? __do_fault+0xbb/0x440 [ 669.179492][T15028] ? filemap_fault+0x10/0x3130 [ 669.184244][T15028] __do_fault+0x10b/0x440 [ 669.188551][T15028] do_fault+0xa99/0x1750 [ 669.192777][T15028] __handle_mm_fault+0x187d/0x2a00 [ 669.197886][T15028] ? mt_find+0x45e/0x8e0 [ 669.202108][T15028] ? __pfx___handle_mm_fault+0x10/0x10 [ 669.207560][T15028] ? __pfx_mt_find+0x10/0x10 [ 669.212144][T15028] handle_mm_fault+0x37b/0xa30 [ 669.216897][T15028] __get_user_pages+0x1178/0x32a0 [ 669.221908][T15028] ? __pfx___get_user_pages+0x10/0x10 [ 669.227266][T15028] populate_vma_page_range+0x267/0x3f0 [ 669.232711][T15028] ? __pfx_populate_vma_page_range+0x10/0x10 [ 669.238688][T15028] ? __pfx_find_vma_intersection+0x10/0x10 [ 669.244477][T15028] ? do_mmap+0x93f/0x12f0 [ 669.248789][T15028] __mm_populate+0x107/0x3a0 [ 669.253370][T15028] ? __pfx___mm_populate+0x10/0x10 [ 669.258485][T15028] ? up_write+0x2e5/0x5c0 [ 669.262811][T15028] vm_mmap_pgoff+0x37f/0x470 [ 669.267390][T15028] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 669.272494][T15028] ? __fget_files+0x215/0x3d0 [ 669.277160][T15028] ? __fget_files+0x21f/0x3d0 [ 669.281836][T15028] ksys_mmap_pgoff+0x3cb/0x610 [ 669.286584][T15028] ? __x64_sys_futex+0x358/0x4d0 [ 669.291508][T15028] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 669.296787][T15028] ? xfd_validate_state+0x129/0x190 [ 669.301972][T15028] __x64_sys_mmap+0x125/0x190 [ 669.306640][T15028] do_syscall_64+0x115/0x870 [ 669.311214][T15028] ? clear_bhb_loop+0x40/0x90 [ 669.315872][T15028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.321745][T15028] RIP: 0033:0x7ff93ed9de59 [ 669.326139][T15028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.345739][T15028] RSP: 002b:00007ff93cff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 669.354143][T15028] RAX: ffffffffffffffda RBX: 00007ff93f025fa0 RCX: 00007ff93ed9de59 [ 669.362096][T15028] RDX: 0000000001000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 669.370062][T15028] RBP: 00007ff93ee33e6f R08: 0000000000000007 R09: 000000002c93a000 [ 669.378031][T15028] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 669.385982][T15028] R13: 00007ff93f026038 R14: 00007ff93f025fa0 R15: 00007ffc29544638 [ 669.393939][T15028] [ 669.396938][T15028] Modules linked in: [ 669.400917][T15026] RDX: ffff888069eba540 RSI: ffffffff825b70a8 RDI: ffff888069ebaa04 [ 669.401315][T15028] ---[ end trace 0000000000000000 ]--- [ 669.408986][T15026] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 669.414701][T15028] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0 [ 669.424017][T15026] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000002 [ 669.436458][T15026] R13: ffffea000116ce40 R14: 000000000002c928 R15: 0000000000000000 [ 669.455915][T15026] FS: 0000555572433500(0000) GS:ffff888123eec000(0000) knlGS:0000000000000000 [ 669.466732][T15028] Code: 4c c1 ff 48 c7 c6 a0 93 dd 8b 4c 89 ef e8 d6 eb 12 00 90 0f 0b e8 ee 4b c1 ff 48 c7 c6 00 94 dd 8b 4c 89 ef e8 bf eb 12 00 90 <0f> 0b e8 d7 4b c1 ff 48 c7 c6 80 94 dd 8b 4c 89 ef e8 a8 eb 12 00 [ 669.471228][T15026] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 669.493430][ T5624] Bluetooth: hci5: command tx timeout [ 669.500567][T15028] RSP: 0018:ffffc9000d887820 EFLAGS: 00010293 [ 669.507416][T15026] CR2: 0000556450b0f300 CR3: 0000000079bc6000 CR4: 00000000003526f0 [ 669.516897][T15028] RAX: 0000000000000000 RBX: 0000000000112c00 RCX: 0000000000000000 [ 669.525277][T15026] Kernel panic - not syncing: Fatal exception [ 669.531565][T15026] Kernel Offset: disabled [ 669.535871][T15026] Rebooting in 86400 seconds..