last executing test programs: 22.558086392s ago: executing program 4 (id=308): bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={0x0, @vsock={0x28, 0x0, 0x0, @local}, @xdp={0x2c, 0x8, 0x0, 0x27}, @qipcrtr={0x2a, 0xffffffff, 0x3fff}, 0x2, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000100)='veth1_to_bridge\x00', 0x6, 0x10001, 0x2bef}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket(0x23, 0x5, 0x0) r4 = epoll_create1(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, 0xffffffffffffffff, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r6, &(0x7f0000000a80)=""/188, 0xba) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000114) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) write$char_usb(r6, 0x0, 0x0) syz_usb_disconnect(r5) close_range(r6, r6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0x10000001}) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 16.960852252s ago: executing program 4 (id=319): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000fc0), 0x0, 0x48c4) socket(0x2d, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = gettid() tkill(r5, 0x2a) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x42, 0x0) r7 = fanotify_init(0xef0, 0x2) fanotify_mark(r7, 0x105, 0x40009965, r6, 0x0) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) 15.084381912s ago: executing program 4 (id=322): r0 = socket(0x2, 0x80805, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = request_key(&(0x7f0000000300)='ceph\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='\x00', 0xfffffffffffffff9) keyctl$set_timeout(0xf, r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, &(0x7f0000003140)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xee8}, 0x0, 0x0, '\x00', {0x1, 0x2f7, 0x0, 0x0}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ipv6_route\x00') preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000080)=""/275, 0x113}], 0x1, 0x40, 0x20000fa4) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x1c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x1, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(r9, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x1b2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7541, 0x1, 0x0, 0x14c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x20, 0x0, 0x1c3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x7ffffffe, {}, 0x1f, 0x0, '\x00', {0x0, 0x4, 0x0, 0x0}}, 0x0) sendto$inet6(r2, &(0x7f00000002c0)="ed", 0x1, 0x808d1, &(0x7f00000001c0)={0xa, 0x4e22, 0x1, @private0, 0x6}, 0x1c) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000010c0)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0xfffffffc}}, 0x8}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy_home_node(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0) 12.94581324s ago: executing program 2 (id=327): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') acct(0x0) socket(0x15, 0x80005, 0x0) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r3) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080)={r4}, &(0x7f00000000c0)=ANY=[@ANYBLOB="656e633d6f6165702068d709345265686162682d636c6d81683f6f45d3398d00"/78], 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f0000000100)=0x3) r7 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc}) socket$packet(0x11, 0x3, 0x300) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0xc000, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0x2, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4004, 0x8, 0x200003ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xff, 0x8000012f, 0x8004, 0x5, 0xffff7fe3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x5, 0xfc, 0x5, 0x1000003, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x0, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xc, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0xa, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120000, 0x5, 0x3, 0x2, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x934, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffc, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x300}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) lseek(r0, 0x9, 0x0) 12.896516037s ago: executing program 0 (id=328): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) dup(r3) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r5, 0xc013fd03, &(0x7f0000001000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000070") ioctl(r5, 0xc013fd04, &(0x7f0000003000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000070") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) pwrite64$ublk_bdev(r2, &(0x7f0000000180), 0x0, 0x7f) ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0x7, '.\x00'}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES8=r3, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 11.609044817s ago: executing program 4 (id=329): openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x74, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x6, 0x7, 0x8000, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0xd4, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@generic="3a5d383a62c377d28b75cf0d77ba3b1c5a588b5626eb8f1a4b80c11e92027cb9019f0e291125cf4412659182981986a03bf9c1c2d3bc6bb13450ef78e5c05d5061b5182101d950443d54381e0730372925cd454b12c30ad3c05dacb6d6a8adcc68e135ffdf4fbd4478857161f338e564fb501f52e4d1bf440c17d46df617117cbd55c80f10e21dc5c3884a41366b995c7d7feab2833d57bb648138eedb41cbed4a30b33b838664a2c0b96c33c67c059c93d2bd2efa", @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}, 0xd4}}, 0x20000004) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f0000000100)=0x3) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff0f) getpriority(0x2, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r7, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r7, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) socket$kcm(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) 11.520528263s ago: executing program 2 (id=330): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x5) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0xffffdfffffffffff, 0x800, 0xb, 0x3}, 0x20) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./trace/trace_options\x00', 0x800) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) write$cgroup_pid(r3, &(0x7f0000000300)=r4, 0x12) r5 = socket(0x1e, 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/current_tracer\x00', 0x1, 0x0) write(r6, &(0x7f0000000140)='blk', 0x3) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/trace_options\x00', 0x1, 0x0) write(r7, &(0x7f00000001c0)='bin', 0x3) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f00000001f0)='./trace/trace_marker\x00', 0x1, 0x0) close(r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/trace_pipe\x00', 0x800, 0x0) read(r9, &(0x7f0000000300), 0x1000) close(r9) read(0xffffffffffffffff, &(0x7f0000000500), 0x1000) close(0xffffffffffffffff) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r2, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000240)={0x20, 0xfb, 0xa, 0x8, 0xfad, 0x81}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x23) 11.446686189s ago: executing program 3 (id=332): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0xfffffffe) userfaultfd(0x80801) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)=0x8) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000140)=""/105, 0x69}], 0x1) r2 = socket(0x10, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0x0, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x4, 0x9, 0x11, 0x40, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) readv(r5, &(0x7f0000000740)=[{&(0x7f0000000480)=""/215, 0xd7}], 0x1) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000100)="19", 0x1}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000) setns(0xc9, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000c40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000940)=@bridge_setlink={0x2c0, 0x13, 0x20, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x11020, 0x400}, [@IFLA_PHYS_SWITCH_ID={0x5, 0x24, 'r'}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x4}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x4}, @IFLA_LINKINFO={0x84, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x74, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff, 0xffff8000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5135038b, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x5}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1d, 0x2}}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x6f8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x6}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x1d}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x4, 0x10}}]}}}, @IFLA_VFINFO_LIST={0x1fc, 0x16, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x9, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1b, 0x2}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7fffffff, 0x7f}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x4800, 0x6}}]}, {0xb0, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0xffffffa9}}, @IFLA_VF_MAC={0x28, 0x1, {0x8001, @broadcast}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x2, 0x1f8, 0x3, 0x8100}}, {0x14, 0x1, {0x7fffffff, 0xa11, 0x80000001, 0x88a8}}, {0x14, 0x1, {0x6, 0x49c, 0x1, 0x88a8}}]}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x5, 0x2}}, @IFLA_VF_TRUST={0xc, 0x9, {0x400000, 0x3ff}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x400}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7ff, 0xb9}}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8, 0x4}}, @IFLA_VF_RATE={0x10, 0x6, {0x0, 0x5, 0x3}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1000, 0xf74, 0x2, 0x88a8}}, {0x14, 0x1, {0x10000, 0x30c, 0x7, 0x8100}}, {0x14, 0x1, {0x7f, 0x2c2, 0xec0, 0x8100}}]}]}, {0xa4, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x40, 0xeec, 0x1}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3, 0x31c1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x823, 0x10}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5, 0x6}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x6, 0x8}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xe, 0x4}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x0, 0x9}}, @IFLA_VF_MAC={0x28, 0x1, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}}]}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4000004}, 0x81) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r10, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x3, @dev={0xfe, 0x80, '\x00', 0x2e}}, 0x1c, 0x0}, 0x20008b88) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000a00feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0xa}}, 0x20) r11 = socket$can_bcm(0x1d, 0x2, 0x2) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_usb_connect(0x5, 0x3f, &(0x7f0000000100)=ANY=[@ANYRES8=r11], 0x0) 9.432534013s ago: executing program 0 (id=334): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 8.454421735s ago: executing program 1 (id=335): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x24044001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$ttys(0xc, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x64, 0x6, 0x798, 0x550, 0x1f0, 0x408, 0x550, 0x120, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x1d0, 0x218, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@recent0={{0xf8}, {0x9, 0x58, 0x4, 0x1, 'syz0\x00', 0x9}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0xfffffffc, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x1, 0x8]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f8) r7 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCCONS(r7, 0x541d) close(0x3) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, 0x0, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x3cb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xc8}}], 0x1, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000080)='\x00', 0x1) 8.097612959s ago: executing program 4 (id=336): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getpid() fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x42, 0x6, 0x3, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xd, 0x4, 0x4, 0x8001, 0x0, r7, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2a, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) 7.396383898s ago: executing program 0 (id=337): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x14b1c2, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000), 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000000000002000000000000000100000000000000", @ANYRES32=r0, @ANYBLOB="00000000080000000000018000"/28]) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f00000000c0)={&(0x7f0000000140)={0x1d, r3}, 0x10, &(0x7f0000000000)={&(0x7f00000001c0)=@can={{0x0, 0x1, 0x1, 0x1}, 0x3, 0x6, 0x0, 0x0, "c9095300"}, 0x10}, 0x1, 0x0, 0x0, 0x2400c015}, 0x4000811) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = timerfd_create(0x0, 0x800) mount(&(0x7f0000000280)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='udf\x00', 0x8000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000340)={0x34, 0x1, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x43d, 0x2}) fcntl$setownex(r5, 0xf, &(0x7f0000000380)={0x1, r6}) bpf$PROG_LOAD(0x5, 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="020b"], 0x10}}, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r9, &(0x7f00000000c0)={0x40000004}) 6.462277204s ago: executing program 3 (id=338): ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) syz_emit_vhci(&(0x7f0000001180)=ANY=[@ANYBLOB="043e1f0a0088edee0d4eab3ee503f5292c2c0d48fae2c11f9477c479dd8d26460261a048cee207ec3cd36d97461bb32abb68f3fc202e0eae16874e797196ba0f494aae9ca90f9f3efc61025c6cd042a2c0a906eefacec02d6f680d33f44e0497559aa427335c9d499bbbd85ddcaa02569d09b3e4d1b0842d1043d9eea68a70dd8c9387ae25530b15b03a8e88ed6745ac694684ddfbc6522290e5fc5afd4d36b7fbd86997c24ef298bb22c9cb5c43fb9fc982c5339273f2655a76c52c1b8d1059e39bcc54187693753e6f0e6d4292766af9", @ANYRES64, @ANYRES8, @ANYRES32], 0x22) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f00000012c0)={0xffffffffffffeab}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x9}, 0x1c) setsockopt$packet_int(r4, 0x107, 0x7, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, 0x0, 0x0, 0x200400c4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xc0}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) shutdown(r5, 0x1) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, 0x0, 0x0) r7 = syz_open_dev$I2C(0x0, 0x1, 0x0) ioctl$I2C_RDWR(r7, 0x707, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendfile(r3, r8, 0x0, 0x20000023896) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842) finit_module(r8, &(0x7f0000000100)='!\x00', 0x0) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000001ac0)={r9, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f00000006c0)) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) 6.385367854s ago: executing program 0 (id=339): r0 = socket(0x2, 0x80805, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = request_key(&(0x7f0000000300)='ceph\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='\x00', 0xfffffffffffffff9) keyctl$set_timeout(0xf, r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, &(0x7f0000003140)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xee8}, 0x0, 0x0, '\x00', {0x1, 0x2f7, 0x0, 0x0}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ipv6_route\x00') preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000080)=""/275, 0x113}], 0x1, 0x40, 0x20000fa4) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x1c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x1, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(r9, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x1b2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7541, 0x1, 0x0, 0x14c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x20, 0x0, 0x1c3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x7ffffffe, {}, 0x1f, 0x0, '\x00', {0x0, 0x4, 0x0, 0x0}}, 0x0) sendto$inet6(r2, &(0x7f00000002c0)="ed", 0x1, 0x808d1, &(0x7f00000001c0)={0xa, 0x4e22, 0x1, @private0, 0x6}, 0x1c) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000010c0)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0xfffffffc}}, 0x8}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy_home_node(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0) 5.93408188s ago: executing program 3 (id=340): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1/file0\x00', 0x181201, 0x0) write(r3, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='1234567890\n', 0xb) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cec", 0x39) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f0000000480)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) write(r7, &(0x7f00000004c0)='\n', 0x1) socket(0x10, 0x803, 0x0) 5.730274085s ago: executing program 4 (id=341): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) recvmsg$unix(r4, 0x0, 0x40000300) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0x7ffe) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e20, 0x80000000, @mcast2, 0x5}, 0x1c) syz_genetlink_get_family_id$batadv(0x0, r3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000006000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x901002}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 5.240380568s ago: executing program 1 (id=342): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x14b1c2, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000), 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000000000002000000000000000100000000000000", @ANYRES32=r0, @ANYBLOB="00000000080000000000018000"/28]) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f00000000c0)={&(0x7f0000000140)={0x1d, r3}, 0x10, &(0x7f0000000000)={&(0x7f00000001c0)=@can={{0x0, 0x1, 0x1, 0x1}, 0x3, 0x6, 0x0, 0x0, "c9095300"}, 0x10}, 0x1, 0x0, 0x0, 0x2400c015}, 0x4000811) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = timerfd_create(0x0, 0x800) mount(&(0x7f0000000280)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='udf\x00', 0x8000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000340)={0x34, 0x1, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x43d, 0x2}) fcntl$setownex(r5, 0xf, &(0x7f0000000380)={0x1, r6}) bpf$PROG_LOAD(0x5, 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="020b"], 0x10}}, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r9, &(0x7f00000000c0)={0x40000004}) 5.017869821s ago: executing program 2 (id=343): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, 0x0) timer_create(0x2, 0x0, &(0x7f0000001cc0)=0x0) timer_settime(r4, 0x0, &(0x7f0000001d40)={{}, {0x0, 0x3938700}}, &(0x7f0000001d80)) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r5 = open$dir(&(0x7f0000000100)='.\x00', 0x18100, 0x0) fcntl$notify(r5, 0x402, 0x80000038) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="20020000", @ANYRES16=0x0, @ANYBLOB="10002dbd7000ffdbdf253f000000080003000e188c807631ab8a922be3436d4f49a59dee86f3fc76be2f9566320ff945914db07f087fab8c9599b7b9b23e9cc122337fe4cf6f50e99b5fd345e391aa181b8bc74b354c0c273d2d6a3e5d05554ff8e2567ecd69a52b379f3b8616f3f24c932c3bd7060ae6a385c0a8061b1a346a4f4080464203e16519fb10a12b25f786caaea7c988be134829fcdfb6cf16bfb03c2d0f7c1853ff67812c7cb53978", @ANYRES32=r6, @ANYBLOB="0c009900030000005000000048005e80080005004900000018000100030000000800000007000000020000000e0000000c000100ad0000000800000008000300320000000800090009000000080006000500000014005e800800060000000000080002000700000024005e80080007009b0500000800060005000000080005001f000000080001004c10000054005e800800020003000000080006000200000008000700bf0300000800020003000000080002000100010010000100000000000000008004000000080007008305000065fd02008661000008000500350000006c005e800c0001003a080000080000000800030000100000080003000000000008000700bd0500002000010092db000007000000872b00000f010000ff0f0000cf08000006000000140001000300000005000000e5000000010400000800020000100000080007001a0100006c005e8008000700db010000080001000200000008000700c10500000800050035000000080001000300000008000300a7030000080002"], 0x220}, 0x1, 0x0, 0x0, 0x8ebed589d3f323fa}, 0x4) setxattr$incfs_metadata(&(0x7f0000000280)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x45, 0x9, 0xf1d}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') prlimit64(0x0, 0x7, &(0x7f0000000300)={0xffffffffffffffff, 0x9}, &(0x7f00000003c0)) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) 4.835920386s ago: executing program 1 (id=344): keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000026c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) pipe2(0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x4, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x8, 0x400, 0x4, 0x0, 0x8, 0x0, 0x6, 0x40000001, 0x7, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffa, 0x0, 0xffffffeb, 0x2004, 0x3, 0x7, 0xf253, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x9537, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x5, 0xf1, 0x5, 0x2000000e, 0x2, 0x2, 0x8000006f, 0x8, 0x405, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0x3, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x9, 0x5], [0x7, 0x45cb, 0x3, 0x8000, 0xfffffffd, 0x3, 0x2, 0x25, 0x3, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x1, 0x10000, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x9, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x14, 0xfffffff7, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x4, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x20002, 0x0, 0x2, 0x9, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x5, 0x6, 0x6, 0x3, 0x1, 0xe, 0x20007, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x8001, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x3, 0x5, 0x80000001, 0xffff0000, 0x9, 0x1000, 0x0, 0x3fff, 0x6, 0xfffffff9, 0x0, 0x8001000, 0x80040101, 0x81, 0x8, 0x6, 0x200003, 0xfffffffe, 0x5, 0x80, 0x9, 0x8001, 0x12000, 0x4, 0x407, 0x400004, 0x3, 0x9, 0x3, 0x8, 0xb3d, 0xbf23, 0x6, 0x5, 0x956, 0x0, 0x3ff, 0x81, 0x6, 0x100dffd, 0x2005, 0x9, 0x4, 0x1000, 0x9, 0x7fffffff, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x80108e, 0xffff, 0x3, 0x3, 0x88, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x5, 0x5, 0x8, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x2, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4004, 0x20008, 0x8a5, 0x8003, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x7, 0xfffffff7, 0x7fff, 0xffff8a33, 0xfffffff8, 0x481, 0x0, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xffffffa3, 0x136, 0x7]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) readv(0xffffffffffffffff, 0x0, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, &(0x7f00000001c0)) msgsnd(0x0, 0x0, 0x8, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0x80000) sendto$inet(r1, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/ports/1\x00', 0x200) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x1, 0x0) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r3, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000)}, 0x0}, 0x1) 4.822120103s ago: executing program 0 (id=345): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(&(0x7f0000000800)='hfs\x00', 0x1) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = syz_io_uring_setup(0x3e82, &(0x7f00000003c0)={0x0, 0x69ee, 0xc00, 0x5, 0x24b}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0xa, 0x0, 0x2, 0x3, 0x0, 0x1000982, 0x0, 0x1}) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_STATUS(r4, 0x1a, &(0x7f0000000200), 0x1) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1000000004000000080000000500000000d6e725", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) r14 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ec, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r15, r16, r17, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0xfffffffffffffff2, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r14, 0x521c, 0x1, 0x61, 0x0, 0x18) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r18 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r18, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000000d08000140000000090900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x10002) socket$tipc(0x1e, 0x2, 0x0) 4.632895371s ago: executing program 3 (id=346): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x10a0, 0x1, 0x0, 0x6, 0x0, 0xe17}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000340)=0x81) socket(0x1e, 0x4, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x7}) getitimer(0x0, 0x0) ioctl(r1, 0x8b32, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xc) syz_emit_ethernet(0xa8, &(0x7f0000000400)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x96, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}, {"f67d92d01c2d73c28026cf8ffd39cca15af01516ef4ecbbbc12316e142155ee1e1f5b9ba7b908d31c8263c7dc24c124c317e74b830fa5f7776d08a9c06bfe9eade1a273e12ca0197457b9c139f6c952e534227f8d619576811697fb693fc8742f35f2c87fb156340a14c3d585839"}}}}}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f0000000080)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000001300)={{r1}, r4, 0x4, @inherit={0x78, &(0x7f0000000280)=ANY=[]}, @subvolid=0x1ff}) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000080)="890704", 0x3) getsockopt$inet_opts(r5, 0x0, 0x4, 0x0, &(0x7f0000000200)) openat$tun(0xffffff9c, 0x0, 0x2000, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendto$inet6(r3, &(0x7f0000000500)="b69319d96fcfb32cfcd529bdb605867f0120a4bd127ab81c71069443fc61aff033dfb41c1d1163f85dc18cfb872221a7aea396b233138946dc745b4005027137d076d1574e0b23cb7f3ef7bcf6a3d250b8240c3c69555d578c8bbee6204e2b34e1aa6ee4b0ac7c963a21313d46", 0x6d, 0x2400c050, &(0x7f0000000600)={0xa, 0x4e21, 0x9, @private2, 0x9}, 0x1c) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r8, 0x4068aea3, &(0x7f0000000200)={0xbe, 0x0, 0x1}) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d05, 0xec000000, 0x401}]}) 3.104997199s ago: executing program 1 (id=347): syz_open_dev$loop(&(0x7f0000000180), 0x7cc, 0xa00) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fsopen(&(0x7f0000000280)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x1, 0x85) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0xe8, 0x180, 0xffffffff, 0xffffffff, 0xe8, 0x180, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001dc0), 0xa81, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0xfffffffffffffffa, 0xec76, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000003, 0xc595, 0x8, 0x400, 0xffffffffffffffff, 0x3, 0xb3, 0x8d], 0xeeee8000, 0x5400}) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/ports/1\x00', 0x1de) openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) 2.750737538s ago: executing program 2 (id=348): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x2, 0x3}, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r1, &(0x7f0000019380)={'#! ', './file0', [{0x20, '\x15\xe6\x8e\\\xfe\x15^\xca\xbb\x88B\xeb\x90FAv\xdc\xbc\x1eiU\b\xc2D\xdb\xca\x9d\xb4oL\xe92\x7f+\f\x0e\xfd\xceTC\x1f;u\x84E\x04\xe3B19xO\xc2\xd4.Mp\xf4\x80{e\x87\xc4V\xe0\x99\x99\x8b\x93I\x8a\xb3\xce*\x9b\xd0X\aA0S\x02k\xdb\x12\v\x9c\x10nY\x85\x92\xf6\x93\xc4%\x0f\x80.\x8d\x9b\x15\x8e\xf4LWr\x14\x9eKh\x97L\xb4\x03\xe9=\x8e\xff\xf0\xb1al\xb6\xc9\xa1/L\x8c7\xa0\x8eD\x1f,\x93`\xc0h\xacjGx\xb8\x9cv\x99bA\xc5]\b\xf8\xa5\x9b\x1c\xeeKB\xdd\xe8\xbboT\x90\x84k\xae\xb5\xfa\xd9\x0f\xd4T<\x0f\xdb\xec\x05HcN\xae;\x87\x00\x00\x00\x00\b\x92\xa7\xdf\x1dS\x00\x8b\x81\xf4\x84X*\xa6e\x922|FO\v\xa6\x17jG\xe3]'}]}, 0xe4) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x64010101}, 0x2, 0x400000, 0x0, 0x4}}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, 0x0) r9 = dup(r8) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000000)={0x1, r9}) ioctl$VHOST_NET_SET_BACKEND(r7, 0xaf02, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000080000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000048000000060a0104000000000000000001000000200004801c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) 2.746685451s ago: executing program 1 (id=358): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={r1, r2/1000+60000}, 0x10) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x5228, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x22}], 0x1, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES64=0x0, @ANYBLOB="0000000000000000b70500000500000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x700) io_setup(0x2007, &(0x7f0000000980)=0x0) r9 = eventfd2(0x3, 0x80000) io_pgetevents(r8, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_getevents(r8, 0x1, 0x7fffffffffffe0e, &(0x7f0000000040), 0x0) io_submit(r8, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1, r9}]) io_submit(r8, 0x1, &(0x7f0000000240)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x6, r5, &(0x7f0000000100)="45d294aa112298dee6c00e01d1a2cca2ee53e112a12dfffb15927686364ee784d73a09b276c07d6f971769b42c576b4705f18286f08bc6cf88c46bcdd523fd6f11ed2353495b1f2e84521dbb853be1c624381505f46f80f288d0e17dd63ee8ed65b9087ae2a60d0cdb7c37a782d0f0079479a2227d222b17fa731e9eeb25d66f0a13e2d8869e54e3fff4b0dbe15956e9924d9ba6cb580d7c", 0x98, 0x4}]) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r10, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) landlock_restrict_self(0xffffffffffffffff, 0xc) r11 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0xa0800) ioctl$CEC_ADAP_S_LOG_ADDRS(r11, 0xc05c6104, &(0x7f0000000580)={"0d0000d3", 0x0, 0x6, 0x3, 0x4, 0x2000008, "3377f877c734c40400", "bd1c2415", "3469def7", "04ffffbf", ["c386afeefff8ffffff7eec01", "0080000000000000001000", "000000000000000000c40800", "0000000000000100"]}) 2.607068207s ago: executing program 3 (id=349): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x14b1c2, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000), 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000000000002000000000000000100000000000000", @ANYRES32=r0, @ANYBLOB="00000000080000000000018000"/28]) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f00000000c0)={&(0x7f0000000140)={0x1d, r3}, 0x10, &(0x7f0000000000)={&(0x7f00000001c0)=@can={{0x0, 0x1, 0x1, 0x1}, 0x3, 0x6, 0x0, 0x0, "c9095300"}, 0x10}, 0x1, 0x0, 0x0, 0x2400c015}, 0x4000811) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = timerfd_create(0x0, 0x800) mount(&(0x7f0000000280)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='udf\x00', 0x8000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000340)={0x34, 0x1, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x43d, 0x2}) fcntl$setownex(r5, 0xf, &(0x7f0000000380)={0x1, r6}) bpf$PROG_LOAD(0x5, 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="020b"], 0x10}}, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r9, &(0x7f00000000c0)={0x40000004}) 1.577484678s ago: executing program 2 (id=350): r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}], '\x00', 0x3ffc}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000080)=0xfd8) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) fadvise64(0xffffffffffffffff, 0xe7a, 0x5, 0x5) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f0000001540)=0x2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat(r1, &(0x7f0000000140)='root/proc/sys\x00', 0x10000, 0x0) getdents(r2, 0x0, 0x18) waitid$P_PIDFD(0x3, r1, &(0x7f00000013c0), 0x20000000, &(0x7f0000001440)) getdents(r2, &(0x7f00000003c0)=""/4096, 0x1000) r3 = socket(0x10, 0x80002, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001500), 0x6aa2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x7, 0x7fffffff, 0x8, @remote, @mcast2, 0x1, 0x10, 0x7, 0x81}}) r6 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, &(0x7f00000005c0)={0x2c, 0x3, r5, 0x20, r6}, 0x10) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000005c0)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00090009"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000040)={0x0, 0xb}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000600)={r11, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00', 0x1}, @in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x23}, 0x9}]}, &(0x7f00000004c0)=0x10) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x1, 0xa, 0x0, 0x80009, 0x9, 0xffffff7f, 0x8000002}]}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x486, 0x0, 0x8000003d}]}) sendmsg$nl_route_sched(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x8, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x6c}}, 0x20000804) 1.451210018s ago: executing program 3 (id=351): r0 = openat(0xffffffffffffff9c, 0x0, 0x62000, 0x1d3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(0x0, 0x0) gettid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x4, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x0, 0x100b, 0x4, 0x0, 0x0, 0x5, 0x4}}) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) close(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'xfrm0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f00000001c0)=ANY=[@ANYRES16=r5, @ANYRES64=r2], 0x3a) r7 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000010}, 0x8000) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file1/../file0', [], 0xa, "a93f46aef367039840d1a0c6630aa67a94a49dc47a68e39b44bd1cd6a5f0d0d3028e13f527c8799782903f02f2a2205b61acb6b5424641ef224de2c3b4d38bb95878652c9e580e0861bc56cd394d19c7f41db159dd7dfb946c9f010000000000"}, 0x29) write$UHID_INPUT(r8, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) mmap(&(0x7f0000cda000/0x4000)=nil, 0x4000, 0x9, 0x12, r0, 0x173b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 1.429917521s ago: executing program 0 (id=352): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000010000000000005000000850000002f000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000600000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2a, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000400)=r2, 0x4) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$l2tp(0x2, 0x2, 0x73) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001a40)="f37217c7c14949ea7ee7030cb410d660d9a8569d91e5d8448a863d45a71f74e881d39d0b13283cab28c23df90b0066a41fbcfc79bc9209be186ee973fb1d6288b8c32b4225acefbeaabffe8d0690cceb12171d21b9298d0ee2d077aa180fd32d96d5d750ccfd57b45574d723e35a8e51fbd0998078f5a85d7c5906c78f9cbcc324d46affaaa0351947941ed4922c117a1a27d7b142970998cfc1704adfb43f16db6301523d326792f84f5ed6bad57a2b254da4b2df45f5b1a0a89a46005a2f0f9259f1c75145447fff1335790e258c36949155829c513a630be6c42613b74b44cb31a328437f84f2451d71a1238b220c42b95057509aba24126f9a6f547876c34678c68017ab70277452860d58a4fa11cb3e2558393d9105400e76c3dd8c995480d928f583796c3bd33ec4235d5669d8db31d81267b51a50ed197709424e40999dea5a7b704bd89d626133b7df3fd1c46e7e7fe10f83d453381471f81cd37b9381e070820b0fe44bd0e29d5f61401c05b1d3b9cbb77716e7f8d31992a95d077c7b8e28fcc00573994b45c3ade151bb9384f21d58b3ce1813949f8a495b1125b40d08675a19bc9ae3a94f824e21b2fbcd8137151f9a50266e4b295fa6003e2c00df05eb2591640e3e101044c3f0154a6870d36c91f8fb9fbed7f01730433d60c5d37e90301ed3ec16b150387c5baad8973a649d6f3901b9cc4a3730eb33eb379e9dc1fee2f46a81a726014e8f942be2bf6468b4173ba0e770711d5aac169e5d9b215ad5095a681adcbbd1e0f4e48f18ed88d91dd7697196b9e53ac60aec0e511fcf09e5cc572f20ebe9a1f58e1133b0b45e599dcbe0a70dbb1a461768f17f51c5368646402b596e523a3c202509f233553bd77d0268e3546ed20d27457fd6299ed84fdfcdf3f3223eaa36cd2492100226397708e575cac38b0834b8beca43da7357af344304a28dc3d3932d90d927fc37cc2b292184a7ca7db421fa9b5ef4e091a35887e21df1047be3224d42008e9028d17986631a3ac18a9816d8e35facd86f3cdad216312d14e652f5c4aa5c55b77aecaa2fd2c8276bbbd8219b17309bc1b3fa3cb6dba2a094b11ca80eeac1ad165dec4274de28ea1b224fc0474ee9c43a75195630055c7f1fe684a69669d1a3d4f12c76dc711508d2a5c27ff8f4ab2fd3e31f2b016156ee64dbd757dbe9950f1b93d91f6035661254335b8411490688f7f62c25d9b47750ce820ea0536f0cec901c035cde7f7ebd5eaf61b100fdb1a346b42f64cd007bd41f28ad9630859be8ae04d0b06146820d441058213f0f73d2aaa01193f378304e6825ed3bec97fd9c0849f2d69144c7d8f5c6d7448b496455bb7efa3cad343068f39b5f52815cdc7bf991645c233f5a33d9fd4ffcb4f6a0070a0bb7fa7646688ed40dd05bc4b9351b405c615a3285e54a41a886dd3f1fbb820ac5835404488e630b150b5b70bcca2c6842ea105c502bc80fdfda7b4e0e29eeeef662d767054237292c32a3833763342daa4885e72800fc3df7d69bd7d9a73169a86fbca7fb45011f83f5fafc549f84c70e47bc9b3a630fbaaf1308430fd5cdadb955d80255a0e8b97a34a913a675e9485c5fe03c15545fc1409f694c6a0e6988b177d96539e89899198042a5e48dc990ce8d4d3b3672118d056273a11d93ec087e0db57cb976a2f92db24eaf5143248608faae5fd31f3e0a826b05a3de164e613ed03816bc9e352b3002f86a953b97abf756953f151885d6c6a8879700320619d1e1432917327d7283331c214707a32e4482bfdfeb102c19dc4188198ffd108e970c969e3727720d143cb36d1846b8b9d6f0ac7588f058e0c03606f6cfb1aabd0c9b72f379412f43f30127be4f9db917806fe83a824004c2c1430b87e3e43ca46a841a9c195515e290ec9a45342e5eac56529f8e6f23b0bdf7a590112def6037c14afe973ddbf7c1d75821f204bdeb2a99fbc9b62b3fbb0a083a7c", 0x57a}], 0x1}}], 0x1, 0x4001c00) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r5 = syz_usb_connect(0x1, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r5) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) recvmmsg$unix(r1, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1, &(0x7f0000002480)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb8}}], 0x1, 0x40000000, 0x0) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(r7, &(0x7f0000000440)={0x2020}, 0x2020) write$cgroup_freezer_state(r1, 0x0, 0x0) 181.261582ms ago: executing program 2 (id=353): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x8, &(0x7f00000002c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r1, r2, 0x25, 0x0, @void}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000031c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010010905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) mkdirat(0xffffffffffffff9c, 0x0, 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000004c0)='hugetlbfs\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./config\x00', 0x2100, 0x197) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)="030f000000", 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r6, &(0x7f00000002c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000003c0)='dum', 0x3) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0xffffe000) close(r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r7, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x70, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x89}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6a}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000004) 0s ago: executing program 1 (id=354): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x14b1c2, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000), 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000000000002000000000000000100000000000000", @ANYRES32=r0, @ANYBLOB="00000000080000000000018000"/28]) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f00000000c0)={&(0x7f0000000140)={0x1d, r3}, 0x10, &(0x7f0000000000)={&(0x7f00000001c0)=@can={{0x0, 0x1, 0x1, 0x1}, 0x3, 0x6, 0x0, 0x0, "c9095300"}, 0x10}, 0x1, 0x0, 0x0, 0x2400c015}, 0x4000811) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = timerfd_create(0x0, 0x800) mount(&(0x7f0000000280)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='udf\x00', 0x8000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000340)={0x34, 0x1, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x43d, 0x2}) fcntl$setownex(r5, 0xf, &(0x7f0000000380)={0x1, r6}) bpf$PROG_LOAD(0x5, 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="020b"], 0x10}}, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r9, &(0x7f00000000c0)={0x40000004}) kernel console output (not intermixed with test programs): root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc2b7f9e159 code=0x7ffc0000 [ 176.545266][ T30] audit: type=1326 audit(1788903660.217:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.0.137" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b7f9e159 code=0x7ffc0000 [ 176.580505][ T30] audit: type=1326 audit(1788903660.257:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.0.137" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc2b7f9e159 code=0x7ffc0000 [ 176.607977][ T30] audit: type=1326 audit(1788903660.287:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.0.137" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b7f9e159 code=0x7ffc0000 [ 176.641763][ T30] audit: type=1326 audit(1788903660.317:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.0.137" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b7f9e159 code=0x7ffc0000 [ 176.690077][ T6471] ubi0: attaching mtd0 [ 176.700220][ T30] audit: type=1326 audit(1788903660.377:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.0.137" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc2b7f9e159 code=0x7ffc0000 [ 176.757072][ T30] audit: type=1400 audit(1788903660.437:554): avc: denied { setopt } for pid=6454 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 177.119128][ T6471] ubi0: scanning is finished [ 177.815895][ T30] audit: type=1800 audit(1788903660.937:555): pid=6477 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.139" name="file0" dev="overlay" ino=202 res=0 errno=0 [ 178.069181][ T5623] usb 4-1: USB disconnect, device number 6 [ 178.170197][ T6471] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 178.193720][ T6471] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 178.204819][ T6471] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 178.204856][ T6471] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 178.204876][ T6471] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 178.204896][ T6471] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 178.204925][ T6471] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1753188880 [ 178.204947][ T6471] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 178.222205][ T6478] ubi0: background thread "ubi_bgt0d" started, PID 6478 [ 179.429123][ T6490] [U]  [ 180.137792][ T5623] usb 1-1: USB disconnect, device number 3 [ 180.985174][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.146'. [ 181.365415][ T6513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=6513 comm=syz.4.145 [ 182.662724][ T6519] netlink: 'syz.1.148': attribute type 10 has an invalid length. [ 183.139318][ T6526] netlink: 24 bytes leftover after parsing attributes in process `syz.4.150'. [ 183.428255][ T6528] netlink: 132 bytes leftover after parsing attributes in process `syz.4.150'. [ 183.786552][ T5691] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 183.967364][ T5691] usb 4-1: Using ep0 maxpacket: 16 [ 184.011532][ T5691] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.023853][ T5691] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.023918][ T5691] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 184.023941][ T5691] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 184.023970][ T5691] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 184.073328][ T5691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.073365][ T5691] usb 4-1: Product: syz [ 184.073402][ T5691] usb 4-1: Manufacturer: syz [ 184.073415][ T5691] usb 4-1: SerialNumber: syz [ 184.305990][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 184.312871][ T30] audit: type=1326 audit(1788903667.977:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6531 comm="syz.1.151" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97bb9e159 code=0x7ffc0000 [ 184.341770][ T30] audit: type=1400 audit(1788903668.017:570): avc: denied { connect } for pid=6529 comm="syz.4.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 184.367327][ T30] audit: type=1326 audit(1788903668.037:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6531 comm="syz.1.151" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97bb9e159 code=0x7ffc0000 [ 184.398938][ T30] audit: type=1326 audit(1788903668.067:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6531 comm="syz.1.151" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97bb9e159 code=0x7ffc0000 [ 184.399007][ T30] audit: type=1326 audit(1788903668.067:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6531 comm="syz.1.151" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97bb9e159 code=0x7ffc0000 [ 184.399089][ T30] audit: type=1326 audit(1788903668.067:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6531 comm="syz.1.151" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe97bb5e98e code=0x7ffc0000 [ 184.399128][ T30] audit: type=1326 audit(1788903668.077:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6531 comm="syz.1.151" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97bb9e159 code=0x7ffc0000 [ 184.399171][ T30] audit: type=1326 audit(1788903668.077:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6531 comm="syz.1.151" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97bb9e159 code=0x7ffc0000 [ 184.399234][ T30] audit: type=1326 audit(1788903668.077:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6531 comm="syz.1.151" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97bb9e159 code=0x7ffc0000 [ 184.399277][ T30] audit: type=1326 audit(1788903668.077:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6531 comm="syz.1.151" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe97bb5e98e code=0x7ffc0000 [ 184.456427][ T6529] [U]  [ 184.720552][ T6525] netlink: 'syz.3.149': attribute type 4 has an invalid length. [ 185.047239][ T5623] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 185.197756][ T5623] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 185.208927][ T5623] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 185.208968][ T5623] usb 1-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 185.208991][ T5623] usb 1-1: config 0 has no interface number 0 [ 185.209017][ T5623] usb 1-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 185.209041][ T5623] usb 1-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 185.209058][ T5623] usb 1-1: config 0 interface 143 has no altsetting 0 [ 185.288575][ T5623] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.288615][ T5623] usb 1-1: Product: syz [ 185.288662][ T5623] usb 1-1: Manufacturer: syz [ 185.288679][ T5623] usb 1-1: SerialNumber: syz [ 185.314668][ T5623] usb 1-1: config 0 descriptor?? [ 185.366409][ T6535] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 185.366469][ T6535] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 185.718120][ T5623] usb 1-1: USB disconnect, device number 4 [ 186.060821][ T6535] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 186.060860][ T6535] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 186.309412][ T6549] netlink: 16 bytes leftover after parsing attributes in process `syz.2.156'. [ 186.309458][ T6549] netlink: 40 bytes leftover after parsing attributes in process `syz.2.156'. [ 186.377487][ T5781] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 186.405581][ T6550] block nbd2: shutting down sockets [ 186.529217][ T5781] usb 1-1: device descriptor read/64, error -71 [ 186.777580][ T5781] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 186.917228][ T5781] usb 1-1: device descriptor read/64, error -71 [ 186.941824][ T6535] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 186.941877][ T6535] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 187.118166][ T5781] usb usb1-port1: attempt power cycle [ 187.165676][ T6535] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 187.165720][ T6535] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 187.457416][ T5781] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 187.587272][ T5781] usb 1-1: device descriptor read/8, error -71 [ 187.657814][ T6535] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 187.693353][ T6535] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 187.993392][ T6566] dlm: no local IP address has been set [ 187.994282][ T6566] dlm: cannot start dlm midcomms -107 [ 188.571539][ T6558] netlink: 'syz.2.157': attribute type 21 has an invalid length. [ 188.579542][ T6558] netlink: 128 bytes leftover after parsing attributes in process `syz.2.157'. [ 188.657318][ T5781] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 188.677495][ T6558] netlink: 'syz.2.157': attribute type 5 has an invalid length. [ 188.677530][ T6558] netlink: 'syz.2.157': attribute type 6 has an invalid length. [ 188.677544][ T6558] netlink: 3 bytes leftover after parsing attributes in process `syz.2.157'. [ 188.707617][ T5781] usb 1-1: Using ep0 maxpacket: 32 [ 188.713393][ T5781] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 188.725200][ T5781] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 188.725238][ T5781] usb 1-1: config 0 has no interface number 0 [ 188.725284][ T5781] usb 1-1: config 0 interface 85 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 188.725308][ T5781] usb 1-1: config 0 interface 85 has no altsetting 0 [ 188.751776][ T6569] netlink: 'syz.4.161': attribute type 10 has an invalid length. [ 188.772013][ T5781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.772050][ T5781] usb 1-1: Product: syz [ 188.772074][ T5781] usb 1-1: Manufacturer: syz [ 188.772090][ T5781] usb 1-1: SerialNumber: syz [ 188.807789][ T5781] usb 1-1: config 0 descriptor?? [ 188.835837][ T5781] appletouch 1-1:0.85: Could not find int-in endpoint [ 188.843687][ T5781] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 188.864524][ T5781] usbhid 1-1:0.85: couldn't find an input interrupt endpoint [ 188.956649][ T6572] netlink: 16 bytes leftover after parsing attributes in process `syz.1.160'. [ 189.043715][ T6565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.043967][ T6565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.295781][ T6573] ceph: No mds server is up or the cluster is laggy [ 189.530534][ T5623] libceph: connect (1)[c::]:6789 error -101 [ 189.597068][ T5623] libceph: mon0 (1)[c::]:6789 connect error [ 189.912151][ T30] kauditd_printk_skb: 125 callbacks suppressed [ 189.912188][ T30] audit: type=1400 audit(1788903673.587:704): avc: denied { create } for pid=6581 comm="syz.3.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 189.919927][ T5781] libceph: connect (1)[c::]:6789 error -101 [ 189.920044][ T5781] libceph: mon0 (1)[c::]:6789 connect error [ 190.187366][ T30] audit: type=1400 audit(1788903673.827:705): avc: denied { write } for pid=6581 comm="syz.3.162" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 190.929942][ T9] usb 1-1: USB disconnect, device number 8 [ 190.945703][ T30] audit: type=1400 audit(1788903674.617:706): avc: denied { read write } for pid=5608 comm="syz-executor" name="loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 191.005425][ T5781] libceph: connect (1)[c::]:6789 error -101 [ 191.005580][ T5781] libceph: mon0 (1)[c::]:6789 connect error [ 191.018575][ T30] audit: type=1400 audit(1788903674.687:707): avc: denied { open } for pid=5608 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 191.018696][ T30] audit: type=1400 audit(1788903674.687:708): avc: denied { ioctl } for pid=5608 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 191.184576][ T30] audit: type=1400 audit(1788903674.857:709): avc: denied { execmem } for pid=6581 comm="syz.3.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 191.223346][ T5691] usb 4-1: USB disconnect, device number 7 [ 191.281483][ T30] audit: type=1400 audit(1788903674.957:710): avc: denied { create } for pid=6587 comm="syz.0.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 191.345419][ T30] audit: type=1400 audit(1788903675.017:711): avc: denied { connect } for pid=6587 comm="syz.0.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 191.380791][ T30] audit: type=1400 audit(1788903675.057:712): avc: denied { setopt } for pid=6587 comm="syz.0.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 191.451697][ T30] audit: type=1400 audit(1788903675.127:713): avc: denied { create } for pid=6581 comm="syz.3.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 191.836137][ T5691] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 191.993398][ T5691] usb 4-1: Using ep0 maxpacket: 32 [ 191.998728][ T5691] usb 4-1: unable to get BOS descriptor or descriptor too short [ 191.998774][ T5691] usb 4-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 192.002926][ T5691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.002951][ T5691] usb 4-1: Product: syz [ 192.002965][ T5691] usb 4-1: Manufacturer: syz [ 192.002980][ T5691] usb 4-1: SerialNumber: syz [ 192.066608][ T6597] xt_l2tp: missing protocol rule (udp|l2tpip) [ 192.774592][ T6600] tmpfs: Unknown parameter 'nrÿXÿå“Vvp<ü' [ 192.823416][ T6599] qnx6: unable to read the first superblock [ 192.957356][ T6601] RDS: rds_bind could not find a transport for 75:6c6c::, load rds_tcp or rds_rdma? [ 193.070104][ T5691] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 193.081715][ T5691] usb 4-1: MIDIStreaming interface descriptor not found [ 193.166317][ T5691] usb 4-1: USB disconnect, device number 8 [ 193.234907][ T5606] udevd[5606]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.121382][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.121451][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.596202][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 194.761374][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 194.775278][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 194.788511][ T9] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.800843][ T9] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.813848][ T6610] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.169'. [ 194.826898][ T9] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 194.826924][ T9] usb 3-1: Product: syz [ 194.826947][ T9] usb 3-1: Manufacturer: syz [ 194.868745][ T9] hub 3-1:4.0: USB hub found [ 195.089412][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 195.089456][ T30] audit: type=1400 audit(1788903678.767:756): avc: denied { mount } for pid=6607 comm="syz.2.168" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 195.149314][ T30] audit: type=1400 audit(1788903678.817:757): avc: denied { module_request } for pid=6607 comm="syz.2.168" kmod=5B6E6F6E655D206D712D646561646C2D696F7363686564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 195.366198][ T30] audit: type=1400 audit(1788903679.027:758): avc: denied { create } for pid=6607 comm="syz.2.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 195.428317][ T6608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6608 comm=syz.2.168 [ 195.433126][ T30] audit: type=1400 audit(1788903679.107:759): avc: denied { setopt } for pid=6607 comm="syz.2.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 195.626126][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 195.679303][ T6616] syz.2.168 (6616): drop_caches: 2 [ 195.786876][ T30] audit: type=1400 audit(1788903679.457:760): avc: denied { write } for pid=6622 comm="syz.0.172" name="video5" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 195.787679][ T30] audit: type=1400 audit(1788903679.467:761): avc: denied { ioctl } for pid=6622 comm="syz.0.172" path="/dev/video5" dev="devtmpfs" ino=933 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 195.836734][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 195.846313][ T9] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 195.858692][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 195.858746][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.858775][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.858801][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 195.904612][ T10] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 195.904650][ T10] usb 4-1: Manufacturer: syz [ 195.967710][ T10] usb 4-1: config 0 descriptor?? [ 195.978094][ T9] usb 3-1: USB disconnect, device number 8 [ 196.004041][ T30] audit: type=1400 audit(1788903679.677:762): avc: denied { create } for pid=6611 comm="syz.4.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 196.033991][ T30] audit: type=1400 audit(1788903679.707:763): avc: denied { setopt } for pid=6611 comm="syz.4.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 196.252939][ T30] audit: type=1400 audit(1788903679.927:764): avc: denied { write } for pid=6611 comm="syz.4.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 196.319127][ T30] audit: type=1400 audit(1788903679.997:765): avc: denied { create } for pid=6626 comm="syz.1.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 196.432390][ T6623] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 196.432598][ T6623] block device autoloading is deprecated and will be removed. [ 196.518317][ T10] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 196.994354][ T10] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 197.316057][ T6643] warning: `syz.2.174' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 198.825410][ T12] nvmet: connect request for invalid subsystem tes! [ 198.985923][ T6638] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "tes" [ 199.180651][ T5623] usb 4-1: reset high-speed USB device number 9 using dummy_hcd [ 202.063522][ T6660] tmpfs: Unknown parameter 'nrÿXÿå“Vvp<ü' [ 202.298623][ T6661] RDS: rds_bind could not find a transport for 75:6c6c::, load rds_tcp or rds_rdma? [ 202.410532][ T6663] netlink: 'syz.4.181': attribute type 10 has an invalid length. [ 202.422596][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 202.422634][ T30] audit: type=1400 audit(1788903686.097:800): avc: denied { write } for pid=6662 comm="syz.4.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 202.449325][ T30] audit: type=1400 audit(1788903686.107:801): avc: denied { write } for pid=6662 comm="syz.4.181" name="ipv6_route" dev="proc" ino=4026532902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 202.519448][ T30] audit: type=1400 audit(1788903686.197:802): avc: denied { write } for pid=6666 comm="syz.2.182" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 202.549614][ T30] audit: type=1400 audit(1788903686.227:803): avc: denied { ioctl } for pid=6664 comm="syz.0.183" path="socket:[12613]" dev="sockfs" ino=12613 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 202.635603][ T30] audit: type=1400 audit(1788903686.307:804): avc: denied { write } for pid=6664 comm="syz.0.183" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 202.755084][ T30] audit: type=1400 audit(1788903686.407:805): avc: denied { connect } for pid=6662 comm="syz.4.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 202.773418][ T30] audit: type=1400 audit(1788903686.427:806): avc: denied { mount } for pid=6664 comm="syz.0.183" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 202.807433][ T30] audit: type=1400 audit(1788903686.477:807): avc: denied { name_connect } for pid=6662 comm="syz.4.181" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 202.841852][ T30] audit: type=1400 audit(1788903686.517:808): avc: denied { search } for pid=6664 comm="syz.0.183" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 202.841907][ T30] audit: type=1400 audit(1788903686.517:809): avc: denied { write } for pid=6664 comm="syz.0.183" name="buffer_subbuf_size_kb" dev="tracefs" ino=3591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 203.577195][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 203.577448][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 203.727194][ T10] usb 5-1: device descriptor read/64, error -32 [ 203.977398][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 204.373394][ T44] usb 4-1: USB disconnect, device number 9 [ 204.389562][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 204.413065][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 204.414132][ T10] usb 5-1: New USB device found, idVendor=0499, idProduct=89a4, bcdDevice=4f.cd [ 204.425020][ T10] usb 5-1: config 2 has an invalid interface number: 232 but max is 0 [ 204.425050][ T10] usb 5-1: config 2 has no interface number 0 [ 204.425087][ T10] usb 5-1: config 2 interface 232 altsetting 128 endpoint 0x5 has invalid maxpacket 3917, setting to 1024 [ 204.425114][ T10] usb 5-1: config 2 interface 232 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 1024 [ 204.425139][ T10] usb 5-1: config 2 interface 232 has no altsetting 0 [ 204.472668][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.472697][ T10] usb 5-1: Product: syz [ 204.472712][ T10] usb 5-1: Manufacturer: syz [ 204.472726][ T10] usb 5-1: SerialNumber: syz [ 204.545810][ T6676] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 204.853157][ T6688] netlink: 'syz.0.186': attribute type 1 has an invalid length. [ 208.389271][ T10] usb 5-1: USB disconnect, device number 7 [ 208.400845][ T6688] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 208.485780][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:2.232/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.544104][ T6700] netlink: 'syz.4.189': attribute type 10 has an invalid length. [ 208.560500][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 208.560553][ T30] audit: type=1400 audit(1788903692.237:827): avc: denied { create } for pid=6701 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 208.798018][ T30] audit: type=1400 audit(1788903692.477:828): avc: denied { map } for pid=6696 comm="syz.4.189" path="socket:[12726]" dev="sockfs" ino=12726 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 208.897288][ T44] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 210.019678][ T30] audit: type=1400 audit(1788903693.337:829): avc: denied { write } for pid=6707 comm="syz.0.192" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 210.072574][ T30] audit: type=1400 audit(1788903693.747:830): avc: denied { create } for pid=6704 comm="syz.1.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 210.097139][ T30] audit: type=1400 audit(1788903693.767:831): avc: denied { setopt } for pid=6704 comm="syz.1.191" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 210.098241][ T44] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 210.103246][ T44] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 210.103273][ T44] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 210.103291][ T44] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 210.103331][ T44] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 210.103356][ T44] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 210.121904][ T44] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 210.121929][ T44] usb 4-1: Product: syz [ 210.121943][ T44] usb 4-1: Manufacturer: syz [ 210.128669][ T44] cdc_wdm 4-1:1.0: skipping garbage [ 210.128687][ T44] cdc_wdm 4-1:1.0: skipping garbage [ 210.280287][ T44] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 210.280320][ T44] cdc_wdm 4-1:1.0: Unknown control protocol [ 210.325699][ T30] audit: type=1400 audit(1788903693.997:832): avc: denied { write } for pid=6704 comm="syz.1.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 210.414681][ T30] audit: type=1400 audit(1788903694.077:833): avc: denied { read write } for pid=6701 comm="syz.3.190" name="cdc-wdm0" dev="devtmpfs" ino=2916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 210.414736][ T30] audit: type=1400 audit(1788903694.077:834): avc: denied { open } for pid=6701 comm="syz.3.190" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 210.503558][ T30] audit: type=1400 audit(1788903694.177:835): avc: denied { bind } for pid=6715 comm="syz.4.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 210.699921][ T30] audit: type=1400 audit(1788903694.357:836): avc: denied { bind } for pid=6715 comm="syz.4.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 211.037738][ C1] cdc_wdm 4-1:1.0: Unexpected error -71 [ 211.038363][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 211.038511][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 211.038796][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 211.038815][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 211.039033][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 211.039054][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 211.039260][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 211.039280][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 211.039474][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 211.039494][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 211.039687][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 211.039708][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 211.039905][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 211.039925][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 211.040118][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 211.040139][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 211.040331][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 211.040352][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 211.040542][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 211.040563][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 211.040751][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 211.040780][ T44] usb 4-1: USB disconnect, device number 10 [ 213.501081][ T6722] netlink: 'syz.1.195': attribute type 10 has an invalid length. [ 214.082069][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 214.082108][ T30] audit: type=1400 audit(1788903697.757:839): avc: denied { create } for pid=6726 comm="syz.4.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 214.134313][ T30] audit: type=1400 audit(1788903697.807:840): avc: denied { connect } for pid=6726 comm="syz.4.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 214.167114][ T30] audit: type=1400 audit(1788903697.847:841): avc: denied { write } for pid=6726 comm="syz.4.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 214.195269][ T30] audit: type=1400 audit(1788903697.867:842): avc: denied { mounton } for pid=6726 comm="syz.4.197" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 215.997732][ T6733] XFS (loop4): SB validate failed with error -5. [ 216.803494][ T2090] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 217.700147][ T6753] netlink: 'syz.1.203': attribute type 10 has an invalid length. [ 217.901514][ T6755] 9p: Bad value for 'wfdno' [ 217.939647][ T30] audit: type=1400 audit(1788903701.617:843): avc: denied { sqpoll } for pid=6754 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 217.994506][ T30] audit: type=1400 audit(1788903701.667:844): avc: denied { write } for pid=6754 comm="syz.0.194" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 218.015509][ T6755] raw_sendmsg: syz.0.194 forgot to set AF_INET. Fix it! [ 218.026664][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 218.051303][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 218.067149][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x7f68 instead [ 218.078669][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x87ea instead [ 218.090602][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 218.107190][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 218.118887][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 218.130525][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 218.185838][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 218.227261][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 218.227307][ T6755] jffs2: Further such events for this erase block will not be printed [ 218.227766][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 218.227788][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 218.227806][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x7f68 instead [ 218.227827][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x87ea instead [ 218.227844][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 218.227861][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 218.227877][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 218.227897][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 218.227928][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 218.227960][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 218.227975][ T6755] jffs2: Further such events for this erase block will not be printed [ 218.228323][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 218.228339][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 218.228355][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x7f68 instead [ 218.228374][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x4cd5 instead [ 218.228420][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 218.228436][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 218.228452][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x7f68 instead [ 218.228472][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x4cd5 instead [ 218.228526][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 218.228544][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 218.228563][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x7f68 instead [ 218.228583][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x4cd5 instead [ 218.228635][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 218.228652][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 218.228670][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x7f68 instead [ 218.228689][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x4cd5 instead [ 218.228734][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 218.228750][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 218.228767][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x7f68 instead [ 218.228803][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x4cd5 instead [ 218.283030][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 218.283058][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 218.283077][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x7f68 instead [ 218.283098][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x4cd5 instead [ 218.283150][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 218.283168][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 218.283186][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x7f68 instead [ 218.283206][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x4cd5 instead [ 218.283256][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 218.283273][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 218.283290][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x7f68 instead [ 218.283309][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x4cd5 instead [ 218.283355][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 218.283370][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 218.283387][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x7f68 instead [ 218.283405][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x4cd5 instead [ 218.283450][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 218.283466][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 218.283482][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x7f68 instead [ 218.283513][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x4cd5 instead [ 218.283563][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 218.283582][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 218.283599][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x7f68 instead [ 218.283618][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x4cd5 instead [ 218.283671][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 218.283688][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 218.283705][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x7f68 instead [ 218.283724][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x4cd5 instead [ 218.283773][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 218.283790][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 218.283807][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x7f68 instead [ 218.283825][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x4cd5 instead [ 218.283871][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 218.283886][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 218.283903][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x7f68 instead [ 218.283921][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x4cd5 instead [ 218.283967][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 218.283982][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 218.283999][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x7f68 instead [ 218.284017][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x4cd5 instead [ 218.284063][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 218.284078][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 218.284094][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x7f68 instead [ 218.284112][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x4cd5 instead [ 218.284157][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 218.641051][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 218.641081][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x7f68 instead [ 218.641101][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x4cd5 instead [ 218.641161][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 218.641178][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 218.641197][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x7f68 instead [ 218.641216][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x4cd5 instead [ 218.641262][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 218.641275][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 218.641290][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x7f68 instead [ 218.641306][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x4cd5 instead [ 218.641355][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 218.641371][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 218.641388][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x7f68 instead [ 218.641406][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x4cd5 instead [ 218.641453][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 218.641468][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 218.641486][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x7f68 instead [ 218.641504][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x4cd5 instead [ 218.641554][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 218.641570][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 218.641587][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x7f68 instead [ 218.641605][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x4cd5 instead [ 218.641652][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 218.641677][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 218.641698][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x7f68 instead [ 218.641719][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x4cd5 instead [ 218.641770][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 218.641788][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 218.641806][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x7f68 instead [ 218.641825][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x4cd5 instead [ 218.641879][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 218.641895][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 218.641912][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x7f68 instead [ 218.641930][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x4cd5 instead [ 218.641979][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 218.641995][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 218.642013][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x7f68 instead [ 218.642031][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x4cd5 instead [ 218.642080][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 218.642096][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 218.642113][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x7f68 instead [ 218.642139][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x4cd5 instead [ 218.642239][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 218.642257][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 218.642275][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x7f68 instead [ 218.642290][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x4cd5 instead [ 218.642328][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 218.642345][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 218.642367][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x7f68 instead [ 218.642417][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x4cd5 instead [ 218.642468][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 218.642484][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 218.642501][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x7f68 instead [ 218.642519][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x4cd5 instead [ 218.642549][ T6755] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 218.642556][ T6755] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 219.374411][ T6761] bond1: option miimon: invalid value (18446744073709551609) [ 219.374437][ T6761] bond1: option miimon: allowed values 0 - 2147483647 [ 219.761149][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 219.761201][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 219.771858][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x7f68 instead [ 219.771880][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x87ea instead [ 219.771895][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 219.771910][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 219.771924][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 219.771940][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 219.771971][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 219.772002][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 219.772019][ T6755] jffs2: Further such events for this erase block will not be printed [ 219.772378][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 219.772396][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 219.772412][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x7f68 instead [ 219.772430][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x87ea instead [ 219.772444][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 219.772456][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 219.772472][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 219.772489][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 219.772520][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 219.772552][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 219.772576][ T6755] jffs2: Further such events for this erase block will not be printed [ 219.962318][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 219.962346][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 219.962365][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x7f68 instead [ 219.962384][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x4cd5 instead [ 219.962432][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 219.962447][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 219.962464][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x7f68 instead [ 219.962482][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x4cd5 instead [ 219.962534][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 219.962551][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 219.962569][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x7f68 instead [ 219.962589][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x4cd5 instead [ 219.962638][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 219.962653][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 219.962670][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x7f68 instead [ 219.962688][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x4cd5 instead [ 219.962733][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 219.962748][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 219.962765][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x7f68 instead [ 219.962783][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x4cd5 instead [ 219.962828][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 219.962844][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 219.962861][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x7f68 instead [ 219.962879][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x4cd5 instead [ 219.962924][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 219.962940][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 219.962956][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x7f68 instead [ 219.962974][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x4cd5 instead [ 219.963018][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 219.963033][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 219.963050][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x7f68 instead [ 219.963068][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x4cd5 instead [ 219.963113][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 219.963129][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 219.970318][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x7f68 instead [ 219.970346][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x4cd5 instead [ 219.970405][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 219.970423][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 219.970442][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x7f68 instead [ 219.970462][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x4cd5 instead [ 219.970517][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 219.970534][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 219.970552][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x7f68 instead [ 219.970572][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x4cd5 instead [ 219.970622][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 219.970639][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 219.970657][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x7f68 instead [ 219.970677][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x4cd5 instead [ 219.984095][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 219.984120][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 219.984138][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x7f68 instead [ 219.984158][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x4cd5 instead [ 219.984206][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 219.984222][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 219.984238][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x7f68 instead [ 219.984256][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x4cd5 instead [ 219.984300][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 219.984316][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 219.984333][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x7f68 instead [ 219.984350][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x4cd5 instead [ 219.984412][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 219.984428][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 219.984444][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x7f68 instead [ 219.984462][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x4cd5 instead [ 219.984513][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 219.984531][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 219.984548][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x7f68 instead [ 219.984568][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x4cd5 instead [ 219.984616][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 219.984632][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 219.984651][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x7f68 instead [ 219.984670][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x4cd5 instead [ 219.984715][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 219.984731][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 219.984747][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x7f68 instead [ 219.984765][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x4cd5 instead [ 219.984809][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 219.984824][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 219.984841][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x7f68 instead [ 219.984859][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x4cd5 instead [ 219.984917][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 219.984934][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 219.984952][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x7f68 instead [ 219.984971][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x4cd5 instead [ 219.985018][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 220.019539][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 220.019571][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x7f68 instead [ 220.019592][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x4cd5 instead [ 220.019651][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 220.019670][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 220.019687][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x7f68 instead [ 220.019707][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x4cd5 instead [ 220.019770][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 220.019785][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 220.019804][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x7f68 instead [ 220.019825][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x4cd5 instead [ 220.019872][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 220.019887][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 220.019904][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x7f68 instead [ 220.019921][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x4cd5 instead [ 220.154096][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 220.154127][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 220.154144][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x7f68 instead [ 220.154162][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x4cd5 instead [ 220.154214][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 220.154231][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 220.154248][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x7f68 instead [ 220.154268][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x4cd5 instead [ 220.154321][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 220.154339][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 220.154358][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x7f68 instead [ 220.154378][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x4cd5 instead [ 220.154428][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 220.154444][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 220.154462][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x7f68 instead [ 220.154480][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x4cd5 instead [ 220.154532][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 220.154548][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 220.154565][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x7f68 instead [ 220.154584][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x4cd5 instead [ 220.154622][ T6755] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 220.154631][ T6755] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 220.159003][ T6761] bond1 (unregistering): Released all slaves [ 220.509560][ T30] audit: type=1400 audit(1788903704.177:845): avc: denied { read } for pid=5267 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 221.465807][ T30] audit: type=1400 audit(1788903705.137:846): avc: denied { read write } for pid=6772 comm="syz.3.205" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 221.491291][ T30] audit: type=1400 audit(1788903705.167:847): avc: denied { open } for pid=6772 comm="syz.3.205" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 221.828780][ T30] audit: type=1400 audit(1788903705.507:848): avc: denied { create } for pid=6783 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 221.883292][ T30] audit: type=1400 audit(1788903705.557:849): avc: denied { read write } for pid=6783 comm="syz.0.207" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 221.883344][ T30] audit: type=1400 audit(1788903705.557:850): avc: denied { open } for pid=6783 comm="syz.0.207" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 221.980349][ T6785] CUSE: info not properly terminated [ 222.035466][ T30] audit: type=1400 audit(1788903705.707:851): avc: denied { sys_module } for pid=6777 comm="syz.1.206" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 222.057501][ T30] audit: type=1400 audit(1788903705.727:852): avc: denied { bind } for pid=6783 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 222.057546][ T30] audit: type=1400 audit(1788903705.737:853): avc: denied { setopt } for pid=6783 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 222.102033][ T30] audit: type=1400 audit(1788903705.737:854): avc: denied { accept } for pid=6783 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 222.125572][ T6778] Invalid ELF header magic: != ELF [ 222.269662][ T6790] netlink: 68 bytes leftover after parsing attributes in process `syz.4.208'. [ 222.509602][ T6792] tipc: Started in network mode [ 222.509717][ T6792] tipc: Node identity 4, cluster identity 4711 [ 222.509771][ T6792] tipc: Node number set to 4 [ 223.118454][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.208'. [ 223.199669][ T6795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.225342][ T6795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.242949][ T6795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.252400][ T6795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.384571][ T6799] snd_dummy snd_dummy.0: control 0:0:4:syz0:7 is already present [ 223.431617][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.211'. [ 223.431652][ T6799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.211'. [ 223.431688][ T6799] netlink: 'syz.2.211': attribute type 20 has an invalid length. [ 223.911413][ T6799] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 223.911435][ T6799] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 223.912347][ T6799] vhci_hcd vhci_hcd.0: Device attached [ 223.921451][ T6810] vhci_hcd: connection closed [ 224.083708][ T1291] vhci_hcd vhci_hcd.2: stop threads [ 224.092284][ T1291] vhci_hcd vhci_hcd.2: release socket [ 224.130999][ T1291] vhci_hcd vhci_hcd.2: disconnect device [ 224.147227][ T5691] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 224.275508][ T6815] ip6gretap1: entered allmulticast mode [ 224.285853][ T6815] batman_adv: batadv0: Adding interface: ip6gretap1 [ 224.285906][ T6815] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.287124][ T6815] batman_adv: batadv0: Interface activated: ip6gretap1 [ 225.694462][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 225.694526][ T30] audit: type=1400 audit(1788903709.367:867): avc: denied { unmount } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 225.771690][ T30] audit: type=1400 audit(1788903709.447:868): avc: denied { ioctl } for pid=6817 comm="syz.3.214" path="socket:[12907]" dev="sockfs" ino=12907 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 227.421748][ T6823] Bluetooth: Invalid esc byte 0x04 [ 227.428005][ T30] audit: type=1400 audit(1788903711.107:869): avc: denied { write } for pid=6822 comm="syz.4.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 227.451680][ T1007] Bluetooth: (null): Invalid header checksum [ 227.459892][ T30] audit: type=1400 audit(1788903711.127:870): avc: denied { bind } for pid=6822 comm="syz.4.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 227.483863][ T6827] netlink: 'syz.1.217': attribute type 1 has an invalid length. [ 228.617010][ T30] audit: type=1400 audit(1788903712.297:871): avc: denied { unmount } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 228.697536][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.215'. [ 228.709844][ T30] audit: type=1400 audit(1788903712.387:872): avc: denied { listen } for pid=6822 comm="syz.4.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 228.711907][ T1291] Bluetooth: (null): Invalid header checksum [ 228.711975][ T1291] Bluetooth: (null): Invalid header checksum [ 228.712028][ T1291] Bluetooth: (null): Invalid header checksum [ 228.712085][ T1291] Bluetooth: (null): Invalid header checksum [ 228.712139][ T1291] Bluetooth: (null): Invalid header checksum [ 228.712192][ T1291] Bluetooth: (null): Invalid header checksum [ 228.712245][ T1291] Bluetooth: (null): Invalid header checksum [ 228.712434][ T1291] Bluetooth: (null): Invalid header checksum [ 228.712487][ T1291] Bluetooth: (null): Invalid header checksum [ 228.712541][ T1291] Bluetooth: (null): Invalid header checksum [ 228.732954][ T1007] Bluetooth: (null): Invalid header checksum [ 228.792497][ T1291] Bluetooth: (null): Invalid header checksum [ 229.410926][ T6834] fuse: Bad value for 'fd' [ 229.415860][ T30] audit: type=1400 audit(1788903713.087:873): avc: denied { mounton } for pid=6832 comm="syz.1.220" path="/49/file0" dev="tmpfs" ino=305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 229.456424][ T5623] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 229.479666][ T30] audit: type=1400 audit(1788903713.147:874): avc: denied { mount } for pid=6832 comm="syz.1.220" name="/" dev="configfs" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 229.509053][ T6834] Illegal XDP return value 4294967274 on prog (id 18) dev N/A, expect packet loss! [ 229.551713][ T30] audit: type=1400 audit(1788903713.227:875): avc: denied { open } for pid=6833 comm="syz.0.221" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 229.612087][ T6839] netlink: 'syz.4.222': attribute type 10 has an invalid length. [ 229.627737][ T5623] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 229.638372][ T5623] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.638421][ T5623] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 229.661517][ T5623] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.661544][ T5623] usb 4-1: Product: syz [ 229.661565][ T5623] usb 4-1: Manufacturer: syz [ 229.670986][ T5623] usb 4-1: SerialNumber: syz [ 229.837155][ T5691] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 229.911080][ T30] audit: type=1400 audit(1788903713.587:876): avc: denied { mount } for pid=6843 comm="syz.1.223" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 229.965751][ T6831] netlink: 16 bytes leftover after parsing attributes in process `syz.3.219'. [ 229.981763][ T6844] siw: device registration error -23 [ 229.997138][ T5691] usb 1-1: Using ep0 maxpacket: 16 [ 229.997904][ T5691] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 229.999255][ T5691] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 229.999304][ T5691] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.999331][ T5691] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.999353][ T5691] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 229.999395][ T5691] usb 1-1: config 7 interface 0 has no altsetting 0 [ 229.999425][ T5691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.908873][ T5691] hid (null): invalid report_size 1734701673 [ 230.994311][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 230.994372][ T30] audit: type=1400 audit(1788903714.667:880): avc: denied { ioctl } for pid=6833 comm="syz.0.221" path="/dev/ptyq4" dev="devtmpfs" ino=123 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 231.062170][ T5691] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.0002/input/input8 [ 231.140248][ T30] audit: type=1400 audit(1788903714.817:881): avc: denied { read } for pid=4957 comm="acpid" name="mouse1" dev="devtmpfs" ino=2922 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 231.165672][ T30] audit: type=1400 audit(1788903714.817:882): avc: denied { open } for pid=4957 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2922 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 231.307358][ T30] audit: type=1400 audit(1788903714.987:883): avc: denied { ioctl } for pid=4957 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2922 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 231.540757][ T30] audit: type=1400 audit(1788903715.217:884): avc: denied { connect } for pid=6854 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 231.679309][ T5691] kye 0003:0458:5010.0002: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 231.764685][ T5691] usb 1-1: USB disconnect, device number 9 [ 231.839389][ T30] audit: type=1400 audit(1788903715.517:885): avc: denied { append } for pid=6857 comm="syz.2.226" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 231.976088][ T6858] fido_id[6858]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 232.540022][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.227'. [ 232.586165][ T30] audit: type=1400 audit(1788903716.207:886): avc: denied { bind } for pid=6860 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 233.081090][ T6863] netlink: 'syz.2.226': attribute type 1 has an invalid length. [ 233.081142][ T6863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.226'. [ 233.245451][ T5623] usb 4-1: USB disconnect, device number 11 [ 233.415861][ T6870] netlink: 'syz.1.238': attribute type 10 has an invalid length. [ 233.497225][ T29] rcu_tasks_wait_gp: rcu_tasks grace period number 9 (since boot) is 1021 jiffies old. [ 233.849978][ T5691] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 234.089923][ T5691] usb 4-1: Using ep0 maxpacket: 16 [ 234.351643][ T30] audit: type=1400 audit(1788903718.007:887): avc: denied { read } for pid=6873 comm="syz.3.230" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 234.351713][ T30] audit: type=1400 audit(1788903718.017:888): avc: denied { open } for pid=6873 comm="syz.3.230" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 234.351747][ T30] audit: type=1400 audit(1788903718.017:889): avc: denied { ioctl } for pid=6873 comm="syz.3.230" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 234.487418][ T5781] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 234.637103][ T5781] usb 1-1: Using ep0 maxpacket: 32 [ 234.637728][ T5781] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 234.638903][ T5781] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.638938][ T5781] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.640583][ T5781] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 234.640611][ T5781] usb 1-1: Product: syz [ 234.640628][ T5781] usb 1-1: Manufacturer: syz [ 235.600713][ T5728] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 236.125807][ T6896] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 236.125881][ T6896] CPU: 1 UID: 0 PID: 6896 Comm: syz.2.234 Not tainted syzkaller #0 PREEMPT(full) [ 236.125909][ T6896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 236.125925][ T6896] Call Trace: [ 236.125939][ T6896] [ 236.125947][ T6896] dump_stack_lvl+0x100/0x190 [ 236.125994][ T6896] sysfs_warn_dup.cold+0x1c/0x28 [ 236.126029][ T6896] sysfs_create_dir_ns+0x24b/0x2b0 [ 236.126059][ T6896] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 236.126087][ T6896] ? find_held_lock+0x2b/0x80 [ 236.126112][ T6896] ? kobject_add_internal+0x25f/0x930 [ 236.126161][ T6896] ? kobject_add_internal+0x25f/0x930 [ 236.126195][ T6896] ? class_dir_child_ns_type+0xd/0x60 [ 236.126224][ T6896] kobject_add_internal+0x2c8/0x930 [ 236.126260][ T6896] kobject_add+0x16a/0x1e0 [ 236.126290][ T6896] ? __pfx_kobject_add+0x10/0x10 [ 236.126323][ T6896] ? get_device_parent+0x1b3/0x4c0 [ 236.126347][ T6896] ? kobject_put+0xb9/0x640 [ 236.126383][ T6896] device_add+0x294/0x1970 [ 236.126409][ T6896] ? lockdep_init_map_type+0x5c/0x250 [ 236.126432][ T6896] ? __pfx_device_add+0x10/0x10 [ 236.126456][ T6896] ? lockdep_init_map_type+0x5c/0x250 [ 236.126480][ T6896] ? __init_waitqueue_head+0xca/0x150 [ 236.126512][ T6896] tty_register_device_attr+0x388/0x7f0 [ 236.126536][ T6896] ? lockdep_init_map_type+0x5c/0x250 [ 236.126559][ T6896] ? __pfx_tty_register_device_attr+0x10/0x10 [ 236.126588][ T6896] ? tty_port_init+0x156/0x1c0 [ 236.126616][ T6896] gsm_activate_mux+0x155/0x2a0 [ 236.126640][ T6896] gsmld_ioctl+0xbbc/0x15c0 [ 236.126673][ T6896] ? __pfx_gsmld_ioctl+0x10/0x10 [ 236.126721][ T6896] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 236.126747][ T6896] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 236.126779][ T6896] ? __pfx_gsmld_ioctl+0x10/0x10 [ 236.126804][ T6896] tty_ioctl+0x11b4/0x1640 [ 236.126827][ T6896] ? __pfx_tty_ioctl+0x10/0x10 [ 236.126846][ T6896] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 236.126878][ T6896] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 236.126907][ T6896] ? __fget_files+0x34/0x3d0 [ 236.126948][ T6896] ? selinux_file_ioctl+0x13b/0x290 [ 236.126970][ T6896] ? selinux_file_ioctl+0xb6/0x290 [ 236.126994][ T6896] ? __pfx_tty_ioctl+0x10/0x10 [ 236.127019][ T6896] __x64_sys_ioctl+0x18e/0x210 [ 236.127043][ T6896] do_syscall_64+0x123/0x790 [ 236.127073][ T6896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.127095][ T6896] RIP: 0033:0x7f1e1c59e159 [ 236.127121][ T6896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.127143][ T6896] RSP: 002b:00007f1e1d41c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.127167][ T6896] RAX: ffffffffffffffda RBX: 00007f1e1c826180 RCX: 00007f1e1c59e159 [ 236.127183][ T6896] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000008 [ 236.127198][ T6896] RBP: 00007f1e1c63503b R08: 0000000000000000 R09: 0000000000000000 [ 236.127212][ T6896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.127226][ T6896] R13: 00007f1e1c826218 R14: 00007f1e1c826180 R15: 00007ffe567034c8 [ 236.127256][ T6896] [ 236.135514][ T6896] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 236.187514][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 236.187540][ T30] audit: type=1400 audit(1788903719.867:892): avc: denied { bind } for pid=6891 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 236.805856][ T5728] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 236.858841][ T5728] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 236.858895][ T5728] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.858937][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.210942][ T6887] syz.0.232 (6887): drop_caches: 2 [ 237.277586][ T6887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6887 comm=syz.0.232 [ 237.320609][ T5781] hub 1-1:4.0: USB hub found [ 237.350493][ T5781] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 237.543557][ T5781] usb 1-1: USB disconnect, device number 10 [ 237.682378][ T6905] openvswitch: netlink: Message has 8 unknown bytes. [ 238.419146][ T1494] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.482217][ T1291] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.482282][ T1291] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.482310][ T1291] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.720000][ T5728] usb 5-1: usb_control_msg returned -71 [ 238.720056][ T5728] usbtmc 5-1:16.0: can't read capabilities [ 238.778208][ T5728] usb 5-1: USB disconnect, device number 8 [ 239.141690][ T5691] usb 4-1: unable to get BOS descriptor or descriptor too short [ 239.141736][ T5691] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 239.141773][ T5691] usb 4-1: no configurations [ 239.141782][ T5691] usb 4-1: can't read configurations, error -22 [ 239.278756][ T5691] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 239.467267][ T6914] tipc: Started in network mode [ 239.467311][ T6914] tipc: Node identity 4, cluster identity 4711 [ 239.467335][ T6914] tipc: Node number set to 4 [ 239.969520][ T5691] usb 4-1: device descriptor read/64, error -32 [ 240.117869][ T5691] usb usb4-port1: attempt power cycle [ 242.488831][ T30] audit: type=1400 audit(1788903726.167:893): avc: denied { mount } for pid=6938 comm="syz.4.247" name="/" dev="hugetlbfs" ino=11993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 242.808138][ T6943] futex_wake_op: syz.0.248 tries to shift op by 144; fix this program [ 242.817468][ T30] audit: type=1400 audit(1788903726.477:894): avc: denied { write } for pid=6936 comm="syz.0.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 244.138024][ T30] audit: type=1400 audit(1788903727.647:895): avc: denied { read } for pid=6934 comm="syz.1.246" path="socket:[11986]" dev="sockfs" ino=11986 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 245.621832][ T30] audit: type=1400 audit(1788903729.297:896): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 246.250002][ T30] audit: type=1400 audit(1788903729.877:897): avc: denied { read write } for pid=6953 comm="syz.0.250" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 246.250072][ T30] audit: type=1400 audit(1788903729.887:898): avc: denied { open } for pid=6953 comm="syz.0.250" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 246.472328][ T6966] netlink: 'syz.1.253': attribute type 10 has an invalid length. [ 246.483869][ T5623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 246.655677][ T6965] netlink: 'syz.3.251': attribute type 1 has an invalid length. [ 246.760648][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.251'. [ 246.776887][ T6970] netlink: 36 bytes leftover after parsing attributes in process `syz.3.251'. [ 247.133563][ T5623] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 247.523915][ T6965] bond1: entered promiscuous mode [ 247.549424][ T6965] 8021q: adding VLAN 0 to HW filter on device bond1 [ 249.217398][ T30] audit: type=1400 audit(1788903732.887:899): avc: denied { accept } for pid=6980 comm="syz.4.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 249.413924][ T6985] tmpfs: Unknown parameter 'nrÿXÿå“Vvp<ü' [ 249.827263][ T5623] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 250.002673][ T5623] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 250.059445][ T5623] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 250.059505][ T5623] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 250.128519][ T5623] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.137955][ T5623] usb 1-1: Product: syz [ 250.137998][ T5623] usb 1-1: Manufacturer: syz [ 250.138017][ T5623] usb 1-1: SerialNumber: syz [ 250.629003][ T6989] RDS: rds_bind could not find a transport for 75:6c6c::, load rds_tcp or rds_rdma? [ 250.920558][ T6988] Bluetooth: MGMT ver 1.23 [ 251.038673][ T30] audit: type=1400 audit(1788903734.677:900): avc: denied { ioctl } for pid=6986 comm="syz.0.256" path="socket:[13207]" dev="sockfs" ino=13207 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 251.397167][ T44] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 251.561191][ T44] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 251.851931][ T44] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 251.860739][ T44] usb 3-1: Product: syz [ 251.860768][ T44] usb 3-1: SerialNumber: syz [ 251.872806][ T44] usb 3-1: config 0 descriptor?? [ 252.205091][ T5623] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 252.717287][ T6999] trusted_key: encrypted_key: insufficient parameters specified [ 252.728793][ T5623] dvb_usb_af9015 1-1:2.0: probe with driver dvb_usb_af9015 failed with error -22 [ 252.730327][ T5623] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 252.730409][ T5623] dvb_usb_af9035 1-1:2.0: probe with driver dvb_usb_af9035 failed with error -22 [ 252.762439][ T5623] usb 1-1: USB disconnect, device number 11 [ 253.190657][ T30] audit: type=1400 audit(1788903736.867:901): avc: denied { write } for pid=6990 comm="syz.2.257" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 253.222332][ T30] audit: type=1400 audit(1788903736.897:902): avc: denied { open } for pid=6990 comm="syz.2.257" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 253.815732][ T30] audit: type=1400 audit(1788903737.357:903): avc: denied { remount } for pid=7005 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 254.694136][ T44] usb 3-1: USB disconnect, device number 9 [ 254.708146][ T30] audit: type=1400 audit(1788903738.377:904): avc: denied { name_connect } for pid=7018 comm="syz.0.263" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 254.825409][ T30] audit: type=1400 audit(1788903738.487:905): avc: denied { listen } for pid=7018 comm="syz.0.263" lport=48621 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 254.934414][ T30] audit: type=1400 audit(1788903738.597:906): avc: denied { accept } for pid=7018 comm="syz.0.263" lport=48621 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 255.258250][ T5623] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 256.595258][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.604081][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.668309][ T5623] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 256.679097][ T5623] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.679126][ T5623] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 256.704799][ T5623] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 256.704858][ T5623] usb 1-1: SerialNumber: syz [ 257.488533][ T30] audit: type=1326 audit(1788903741.167:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7019 comm="syz.3.264" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c3b9e159 code=0x7ffc0000 [ 257.488586][ T30] audit: type=1326 audit(1788903741.167:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7019 comm="syz.3.264" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c3b9e159 code=0x7ffc0000 [ 257.552977][ T30] audit: type=1326 audit(1788903741.227:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7019 comm="syz.3.264" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f57c3b5a5ac code=0x7ffc0000 [ 257.553044][ T30] audit: type=1326 audit(1788903741.227:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7019 comm="syz.3.264" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f57c3b5a60e code=0x7ffc0000 [ 257.553079][ T30] audit: type=1326 audit(1788903741.227:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7019 comm="syz.3.264" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f57c3b9ddeb code=0x7ffc0000 [ 257.553104][ T30] audit: type=1326 audit(1788903741.227:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7019 comm="syz.3.264" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57c3b5e98e code=0x7ffc0000 [ 257.692239][ T30] audit: type=1326 audit(1788903741.357:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7019 comm="syz.3.264" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c3b9e159 code=0x7ffc0000 [ 258.679992][ T5623] usb 1-1: can't set config #1, error -71 [ 258.732032][ T5623] usb 1-1: USB disconnect, device number 12 [ 259.367144][ T29] rcu_tasks_wait_gp: rcu_tasks grace period number 13 (since boot) is 1021 jiffies old. [ 260.540415][ T7051] netlink: 108 bytes leftover after parsing attributes in process `syz.0.273'. [ 262.064348][ T7063] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 262.158095][ T7063] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 265.820357][ T30] kauditd_printk_skb: 144 callbacks suppressed [ 265.829459][ T30] audit: type=1400 audit(1788903749.497:1058): avc: denied { shutdown } for pid=7070 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 267.925777][ T30] audit: type=1400 audit(1788903751.597:1059): avc: denied { ioctl } for pid=7081 comm="syz.2.267" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 268.097812][ T7099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=7099 comm=syz.4.280 [ 268.648284][ T7091] binder: 7081:7091 ioctl c018620c 200000000540 returned -1 [ 269.446710][ T30] audit: type=1400 audit(1788903753.127:1060): avc: denied { connect } for pid=7105 comm="syz.1.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 269.488524][ T30] audit: type=1400 audit(1788903753.167:1061): avc: denied { listen } for pid=7105 comm="syz.1.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 269.595274][ T7082] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 269.748571][ T30] audit: type=1400 audit(1788903753.427:1062): avc: denied { create } for pid=7107 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 270.118908][ T7113] bridge_slave_0: left allmulticast mode [ 270.118951][ T7113] bridge_slave_0: left promiscuous mode [ 270.137818][ T7113] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.164875][ T7113] bridge_slave_1: left allmulticast mode [ 270.164916][ T7113] bridge_slave_1: left promiscuous mode [ 270.165122][ T7113] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.039386][ T7113] bond0: (slave bond_slave_0): Releasing backup interface [ 272.794058][ T30] audit: type=1400 audit(1788903756.467:1063): avc: denied { read } for pid=7130 comm="syz.2.291" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 272.818748][ T30] audit: type=1400 audit(1788903756.497:1064): avc: denied { open } for pid=7130 comm="syz.2.291" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 272.845161][ T7113] bond0: (slave bond_slave_1): Releasing backup interface [ 272.890520][ T7113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.890557][ T7113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.954314][ T7113] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 272.975505][ T7121] tipc: Enabling of bearer rejected, failed to enable media [ 273.061419][ T7135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3092 sclass=netlink_route_socket pid=7135 comm=syz.2.291 [ 273.271082][ T30] audit: type=1400 audit(1788903756.947:1065): avc: denied { ioctl } for pid=7130 comm="syz.2.291" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 273.315364][ T7132] netlink: 'syz.2.291': attribute type 2 has an invalid length. [ 273.315413][ T7132] netlink: 48 bytes leftover after parsing attributes in process `syz.2.291'. [ 273.606714][ T7132] : entered promiscuous mode [ 273.834055][ T30] audit: type=1400 audit(1788903757.507:1066): avc: denied { getopt } for pid=7140 comm="syz.4.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 273.920358][ T30] audit: type=1400 audit(1788903757.597:1067): avc: denied { create } for pid=7137 comm="syz.1.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 274.126027][ T30] audit: type=1400 audit(1788903757.677:1068): avc: denied { write } for pid=7137 comm="syz.1.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 274.140267][ T7138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.202795][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.297'. [ 275.214483][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.297'. [ 275.263866][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.297'. [ 275.282123][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.297'. [ 275.282276][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.297'. [ 275.382198][ T7154] syz.4.297: vmalloc error: size 34359742464, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 275.415936][ T7154] CPU: 1 UID: 0 PID: 7154 Comm: syz.4.297 Tainted: G L syzkaller #0 PREEMPT(full) [ 275.415976][ T7154] Tainted: [L]=SOFTLOCKUP [ 275.415984][ T7154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 275.415997][ T7154] Call Trace: [ 275.416004][ T7154] [ 275.416013][ T7154] dump_stack_lvl+0x100/0x190 [ 275.416044][ T7154] warn_alloc.cold+0x9e/0xb2 [ 275.416059][ T7154] ? __pfx_warn_alloc+0x10/0x10 [ 275.416076][ T7154] ? __kasan_kmalloc+0xaa/0xb0 [ 275.416089][ T7154] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 275.416105][ T7154] ? xskq_create+0x52/0x290 [ 275.416122][ T7154] ? do_sock_setsockopt+0xf3/0x1d0 [ 275.416139][ T7154] ? do_syscall_64+0x123/0x790 [ 275.416153][ T7154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.416174][ T7154] ? xsk_setsockopt+0x56f/0xab0 [ 275.416186][ T7154] __vmalloc_node_range_noprof+0x123b/0x1420 [ 275.416208][ T7154] ? xsk_setsockopt+0x56f/0xab0 [ 275.416221][ T7154] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 275.416236][ T7154] ? kasan_save_track+0x14/0x30 [ 275.416248][ T7154] ? __kasan_kmalloc+0xaa/0xb0 [ 275.416260][ T7154] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 275.416277][ T7154] ? xskq_create+0x52/0x290 [ 275.416289][ T7154] ? xsk_setsockopt+0x56f/0xab0 [ 275.416300][ T7154] xskq_create+0x18f/0x290 [ 275.416312][ T7154] ? xsk_setsockopt+0x56f/0xab0 [ 275.416324][ T7154] xsk_setsockopt+0x56f/0xab0 [ 275.416336][ T7154] ? __pfx_xsk_setsockopt+0x10/0x10 [ 275.416347][ T7154] ? find_held_lock+0x2b/0x80 [ 275.416363][ T7154] ? __fget_files+0x215/0x3d0 [ 275.416379][ T7154] ? selinux_socket_setsockopt+0x6a/0x80 [ 275.416398][ T7154] ? __pfx_xsk_setsockopt+0x10/0x10 [ 275.416410][ T7154] do_sock_setsockopt+0xf3/0x1d0 [ 275.416426][ T7154] __sys_setsockopt+0x195/0x220 [ 275.416441][ T7154] __x64_sys_setsockopt+0xbd/0x160 [ 275.416453][ T7154] ? do_syscall_64+0xae/0x790 [ 275.416467][ T7154] ? lockdep_hardirqs_on+0x7d/0x110 [ 275.416481][ T7154] do_syscall_64+0x123/0x790 [ 275.416496][ T7154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.416508][ T7154] RIP: 0033:0x7feda939e159 [ 275.416520][ T7154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.416538][ T7154] RSP: 002b:00007fedaa32d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 275.416551][ T7154] RAX: ffffffffffffffda RBX: 00007feda9626090 RCX: 00007feda939e159 [ 275.416559][ T7154] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000013 [ 275.416567][ T7154] RBP: 00007feda943503b R08: 0000000000000004 R09: 0000000000000000 [ 275.416575][ T7154] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.416584][ T7154] R13: 00007feda9626128 R14: 00007feda9626090 R15: 00007ffc348eaf08 [ 275.416600][ T7154] [ 275.438767][ T7154] Mem-Info: [ 275.438786][ T7154] active_anon:12221 inactive_anon:39134 isolated_anon:0 [ 275.438786][ T7154] active_file:23155 inactive_file:39070 isolated_file:0 [ 275.438786][ T7154] unevictable:2048 dirty:690 writeback:0 [ 275.438786][ T7154] slab_reclaimable:7427 slab_unreclaimable:99522 [ 275.438786][ T7154] mapped:40343 shmem:38474 pagetables:1338 [ 275.438786][ T7154] sec_pagetables:0 bounce:0 [ 275.438786][ T7154] kernel_misc_reclaimable:0 [ 275.438786][ T7154] free:1251357 free_pcp:16904 free_cma:0 [ 275.438843][ T7154] Node 0 active_anon:48884kB inactive_anon:156536kB active_file:92612kB inactive_file:156092kB unevictable:6144kB isolated(anon):0kB isolated(file):0kB mapped:161372kB dirty:2760kB writeback:0kB shmem:151848kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12736kB pagetables:5220kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 275.438900][ T7154] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:188kB unevictable:2048kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 275.438950][ T7154] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 275.445746][ T7154] lowmem_reserve[]: 0 2470 2470 2470 2470 [ 275.445789][ T7154] Node 0 DMA32 free:1043268kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:48884kB inactive_anon:156136kB active_file:92612kB inactive_file:156092kB unevictable:6144kB writepending:2760kB zspages:148kB present:3129332kB managed:2530196kB mlocked:0kB bounce:0kB free_pcp:68448kB local_pcp:26532kB free_cma:0kB [ 275.445855][ T7154] lowmem_reserve[]: 0 0 0 0 0 [ 275.445888][ T7154] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:72kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 275.445941][ T7154] lowmem_reserve[]: 0 0 0 0 0 [ 275.447073][ T7154] Node 1 Normal free:3946800kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:188kB unevictable:2048kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 275.447136][ T7154] lowmem_reserve[]: 0 0 0 0 0 [ 275.447171][ T7154] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 275.447346][ T7154] Node 0 DMA32: 2357*4kB (UM) 2073*8kB (UME) 926*16kB (UME) 485*32kB (UME) 242*64kB (UME) 98*128kB (UME) 54*256kB (UME) 8*512kB (UME) 1*1024kB (E) 5*2048kB (ME) 227*4096kB (UM) = 1043356kB [ 275.447508][ T7154] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 275.447620][ T7154] Node 1 Normal: 6*4kB (UM) 7*8kB (UM) 10*16kB (U) 10*32kB (UM) 10*64kB (UM) 7*128kB (UM) 3*256kB (UM) 3*512kB (U) 0*1024kB 1*2048kB (U) 962*4096kB (M) = 3946800kB [ 275.447768][ T7154] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 275.447783][ T7154] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 275.447797][ T7154] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 275.447812][ T7154] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 275.447827][ T7154] 100643 total pagecache pages [ 275.447834][ T7154] 0 pages in swap cache [ 275.447840][ T7154] Free swap = 124000kB [ 275.447847][ T7154] Total swap = 124996kB [ 275.447854][ T7154] 2097051 pages RAM [ 275.447861][ T7154] 0 pages HighMem/MovableOnly [ 275.447867][ T7154] 432868 pages reserved [ 275.447873][ T7154] 0 pages cma reserved [ 277.616614][ T7166] netlink: 'syz.4.302': attribute type 10 has an invalid length. [ 277.931095][ T7168] can: request_module (can-proto-5) failed. [ 278.489035][ T7162] netlink: 28 bytes leftover after parsing attributes in process `syz.1.300'. [ 278.539665][ T30] audit: type=1400 audit(1788903762.197:1069): avc: denied { lock } for pid=7160 comm="syz.1.300" path="socket:[13554]" dev="sockfs" ino=13554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 278.561121][ T7173] openvswitch: netlink: Invalid VLAN frame [ 278.579237][ T7162] netlink: 'syz.1.300': attribute type 10 has an invalid length. [ 278.914328][ T7194] ubi: mtd0 is already attached to ubi0 [ 279.341345][ T30] audit: type=1400 audit(1788903763.017:1070): avc: denied { write } for pid=7196 comm="syz.3.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 279.379543][ T5784] Process accounting resumed [ 279.572945][ T7162] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 279.581276][ T7162] team0: Port device netdevsim1 added [ 281.357297][ T5784] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 281.537536][ T5784] usb 5-1: Using ep0 maxpacket: 8 [ 281.553992][ T5784] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 281.577139][ T5784] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 281.585931][ T5784] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 281.604299][ T5784] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 281.604359][ T5784] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 281.604387][ T5784] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 281.604414][ T5784] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 281.604437][ T5784] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 281.604462][ T5784] usb 5-1: config 168 interface 0 has no altsetting 0 [ 281.682520][ T5784] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 281.682567][ T5784] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 281.682627][ T5784] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 281.682659][ T5784] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 281.682688][ T5784] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 281.682715][ T5784] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 281.682741][ T5784] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 281.682769][ T5784] usb 5-1: config 168 interface 0 has no altsetting 0 [ 281.715111][ T5784] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 281.715147][ T5784] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 281.715173][ T5784] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 281.715193][ T5784] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 281.715208][ T5784] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 281.715222][ T5784] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 281.715237][ T5784] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 281.715252][ T5784] usb 5-1: config 168 interface 0 has no altsetting 0 [ 281.875942][ T5784] usb 5-1: string descriptor 0 read error: -22 [ 281.877677][ T5784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.972153][ T30] audit: type=1400 audit(1788903765.627:1071): avc: denied { search } for pid=7229 comm="syz.0.312" name="/" dev="configfs" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 281.972338][ T30] audit: type=1400 audit(1788903765.627:1072): avc: denied { search } for pid=7229 comm="syz.0.312" name="nvmet" dev="configfs" ino=3338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 281.972485][ T30] audit: type=1400 audit(1788903765.627:1073): avc: denied { search } for pid=7229 comm="syz.0.312" name="ports" dev="configfs" ino=3340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 281.979525][ T30] audit: type=1400 audit(1788903765.647:1074): avc: denied { write search } for pid=7229 comm="syz.0.312" name="ports" dev="configfs" ino=3340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 281.981262][ T30] audit: type=1400 audit(1788903765.657:1075): avc: denied { add_name } for pid=7229 comm="syz.0.312" name="1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 282.013268][ T30] audit: type=1400 audit(1788903765.657:1076): avc: denied { create } for pid=7229 comm="syz.0.312" name="1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 282.148182][ T30] audit: type=1400 audit(1788903765.827:1077): avc: denied { search } for pid=7229 comm="syz.0.312" name="/" dev="configfs" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 282.171955][ T30] audit: type=1400 audit(1788903765.827:1078): avc: denied { search } for pid=7229 comm="syz.0.312" name="nvmet" dev="configfs" ino=3338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 282.517494][ T5784] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 283.673038][ T5784] usb 5-1: USB disconnect, device number 9 [ 283.797216][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 283.797254][ T30] audit: type=1400 audit(1788903767.447:1084): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 283.932891][ T7239] netlink: 'syz.2.314': attribute type 10 has an invalid length. [ 283.988225][ T7239] team0: Port device dummy0 added [ 284.269981][ T7244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.315'. [ 284.270017][ T7244] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 285.334060][ T7254] Invalid option length (1004290) for dns_resolver key [ 285.441030][ T30] audit: type=1400 audit(1788903769.117:1085): avc: denied { cmd } for pid=7255 comm="syz.0.318" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 285.686998][ T30] audit: type=1326 audit(1788903769.367:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7253 comm="syz.1.317" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe97bb9e159 code=0x0 [ 287.173470][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.713114][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.723998][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.737163][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.323497][ T30] audit: type=1400 audit(1788903772.997:1087): avc: denied { watch } for pid=7294 comm="syz.3.326" path="/57" dev="tmpfs" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 289.369756][ T7295] ªªªªª»: renamed from dummy0 (while UP) [ 289.421443][ T30] audit: type=1400 audit(1788903773.097:1088): avc: denied { create } for pid=7294 comm="syz.3.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 290.558626][ T30] audit: type=1400 audit(1788903774.237:1089): avc: denied { write } for pid=7294 comm="syz.3.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 290.915472][ T30] audit: type=1400 audit(1788903774.587:1090): avc: denied { read write } for pid=7300 comm="syz.0.328" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 290.918751][ T30] audit: type=1400 audit(1788903774.597:1091): avc: denied { open } for pid=7300 comm="syz.0.328" path="/65/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 291.011722][ T30] audit: type=1400 audit(1788903774.667:1092): avc: denied { ioctl } for pid=7300 comm="syz.0.328" path="/65/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 291.112218][ T7303] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 291.112390][ T7303] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 291.118100][ T7303] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 291.148422][ T30] audit: type=1400 audit(1788903774.797:1093): avc: denied { firmware_load } for pid=7300 comm="syz.0.328" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 291.727685][ T30] audit: type=1400 audit(1788903775.397:1094): avc: denied { connect } for pid=7305 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 291.932289][ T7309] netlink: 188 bytes leftover after parsing attributes in process `syz.4.329'. [ 292.509084][ T30] audit: type=1400 audit(1788903776.087:1095): avc: denied { write } for pid=7307 comm="syz.4.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 292.509536][ T30] audit: type=1400 audit(1788903776.137:1096): avc: denied { setopt } for pid=7307 comm="syz.4.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 293.614847][ T7312] netlink: 128 bytes leftover after parsing attributes in process `syz.3.332'. [ 293.631295][ T7312] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.297053][ T7327] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 296.348809][ T30] audit: type=1400 audit(1788903780.027:1097): avc: denied { create } for pid=7339 comm="syz.2.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 296.375832][ T30] audit: type=1400 audit(1788903780.047:1098): avc: denied { listen } for pid=7339 comm="syz.2.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 296.641916][ T30] audit: type=1400 audit(1788903780.317:1099): avc: denied { read } for pid=7339 comm="syz.2.330" name="trace_pipe" dev="tracefs" ino=3586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 296.720434][ T30] audit: type=1400 audit(1788903780.397:1100): avc: denied { read } for pid=7339 comm="syz.2.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 296.759372][ T30] audit: type=1400 audit(1788903780.437:1101): avc: denied { ioctl } for pid=7339 comm="syz.2.330" path="socket:[13790]" dev="sockfs" ino=13790 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 296.797644][ T30] audit: type=1400 audit(1788903780.477:1102): avc: denied { ioctl } for pid=7349 comm="syz.4.341" path="socket:[13798]" dev="sockfs" ino=13798 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 297.773991][ T30] audit: type=1400 audit(1788903781.407:1103): avc: denied { ioctl } for pid=7358 comm="syz.2.343" path="socket:[13823]" dev="sockfs" ino=13823 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 297.810618][ T30] audit: type=1326 audit(1788903781.487:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.2.343" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e1c59e159 code=0x0 [ 299.175461][ T7372] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 299.260768][ T30] audit: type=1400 audit(1788903782.937:1105): avc: denied { getopt } for pid=7367 comm="syz.3.346" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 299.642806][ T30] audit: type=1326 audit(1788903783.317:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="syz.1.358" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97bb9e159 code=0x7ffc0000 [ 299.913603][ T7380] /dev/nullb0: Can't lookup blockdev [ 301.111605][ T7385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.369351][ T30] kauditd_printk_skb: 178 callbacks suppressed [ 301.369390][ T30] audit: type=1326 audit(1788903785.047:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="syz.1.358" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe97bb5e98e code=0x7ffc0000 [ 301.369434][ T30] audit: type=1326 audit(1788903785.047:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="syz.1.358" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97bb9e159 code=0x7ffc0000 [ 301.369470][ T30] audit: type=1326 audit(1788903785.047:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="syz.1.358" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97bb9e159 code=0x7ffc0000 [ 301.416821][ T30] audit: type=1326 audit(1788903785.087:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="syz.1.358" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97bb9e159 code=0x7ffc0000 [ 301.416874][ T30] audit: type=1326 audit(1788903785.087:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="syz.1.358" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97bb9e159 code=0x7ffc0000 [ 301.416914][ T30] audit: type=1326 audit(1788903785.087:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="syz.1.358" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe97bb9e159 code=0x7ffc0000 [ 301.416955][ T30] audit: type=1326 audit(1788903785.087:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="syz.1.358" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97bb9e159 code=0x7ffc0000 [ 301.416996][ T30] audit: type=1326 audit(1788903785.087:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="syz.1.358" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97bb9e159 code=0x7ffc0000 [ 301.422102][ T30] audit: type=1326 audit(1788903785.087:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="syz.1.358" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe97bb5e98e code=0x7ffc0000 [ 301.423961][ T30] audit: type=1326 audit(1788903785.087:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="syz.1.358" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe97bb5e98e code=0x7ffc0000 [ 301.491510][ T5691] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 301.752215][ T5691] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 301.763643][ T5691] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 301.763686][ T5691] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 301.763721][ T5691] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 301.763744][ T5691] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 301.763767][ T5691] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 301.763792][ T5691] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 301.763816][ T5691] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 301.763841][ T5691] usb 1-1: config 168 interface 0 has no altsetting 0 [ 301.768100][ T5691] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 301.768137][ T5691] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 301.768173][ T5691] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 301.768199][ T5691] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 301.768222][ T5691] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 301.768246][ T5691] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 301.768272][ T5691] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 301.768298][ T5691] usb 1-1: config 168 interface 0 has no altsetting 0 [ 301.802465][ T5691] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 301.802501][ T5691] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 301.802549][ T5691] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 301.802574][ T5691] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 301.802599][ T5691] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 301.802625][ T5691] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 301.802650][ T5691] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 301.802675][ T5691] usb 1-1: config 168 interface 0 has no altsetting 0 [ 301.895842][ T5691] usb 1-1: string descriptor 0 read error: -22 [ 301.896231][ T5691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.068450][ T5691] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 302.121485][ T7394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.454889][ C1] ================================================================== [ 302.454920][ C1] BUG: KASAN: use-after-free in find_endpoint+0x2a3/0x2c0 [ 302.454963][ C1] Read of size 1 at addr ffff88807bf238e8 by task syz.0.352/7385 [ 302.454984][ C1] [ 302.455001][ C1] CPU: 1 UID: 0 PID: 7385 Comm: syz.0.352 Tainted: G L syzkaller #0 PREEMPT(full) [ 302.455034][ C1] Tainted: [L]=SOFTLOCKUP [ 302.455043][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 302.455057][ C1] Call Trace: [ 302.455065][ C1] [ 302.455081][ C1] dump_stack_lvl+0x100/0x190 [ 302.455122][ C1] print_report+0x13d/0x4b0 [ 302.455159][ C1] ? __virt_addr_valid+0x239/0x430 [ 302.455183][ C1] ? find_endpoint+0x2a3/0x2c0 [ 302.455201][ C1] kasan_report+0xdf/0x1c0 [ 302.455218][ C1] ? find_endpoint+0x2a3/0x2c0 [ 302.455236][ C1] find_endpoint+0x2a3/0x2c0 [ 302.455254][ C1] dummy_timer+0x500/0x3700 [ 302.455279][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 302.455295][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 302.455312][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 302.455332][ C1] ? mark_held_locks+0x40/0x70 [ 302.455348][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 302.455373][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 302.455410][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 302.455433][ C1] hrtimer_run_softirq+0x1ca/0x360 [ 302.455452][ C1] handle_softirqs+0x1e6/0x9d0 [ 302.455467][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 302.455480][ C1] ? _raw_spin_unlock+0x28/0x50 [ 302.455493][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 302.455513][ C1] __irq_exit_rcu+0x16a/0x210 [ 302.455526][ C1] irq_exit_rcu+0x9/0x30 [ 302.455538][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 302.455554][ C1] [ 302.455559][ C1] [ 302.455563][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 302.455581][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 302.455597][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 76 1d 14 f6 48 89 df e8 fe 73 14 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 85 69 03 f6 65 48 83 3d 74 04 b9 08 00 74 16 5b [ 302.455610][ C1] RSP: 0018:ffffc90005e57768 EFLAGS: 00000246 [ 302.455622][ C1] RAX: 0000000000000006 RBX: ffff888021b18000 RCX: 0000000000000040 [ 302.455631][ C1] RDX: 0000000000000001 RSI: ffffffff8e3ec063 RDI: ffffffff8c621080 [ 302.455640][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 302.455648][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000040000000 [ 302.455656][ C1] R13: ffff88802b068478 R14: 0000000000000000 R15: ffff88802b068400 [ 302.455670][ C1] dummy_urb_enqueue+0x56c/0x880 [ 302.455691][ C1] usb_hcd_submit_urb+0x268/0x2150 [ 302.455713][ C1] ? kobject_put+0xb9/0x640 [ 302.455733][ C1] usb_submit_urb+0x827/0x19b0 [ 302.455748][ C1] adu_open+0x59c/0x890 [ 302.455762][ C1] ? chrdev_open+0x589/0x6a0 [ 302.455777][ C1] ? __pfx_adu_open+0x10/0x10 [ 302.455791][ C1] usb_open+0x189/0x220 [ 302.455810][ C1] ? __pfx_usb_open+0x10/0x10 [ 302.455828][ C1] chrdev_open+0x234/0x6a0 [ 302.455844][ C1] ? __pfx_chrdev_open+0x10/0x10 [ 302.455859][ C1] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 302.455881][ C1] do_dentry_open+0x6ab/0x14d0 [ 302.455894][ C1] ? __pfx_chrdev_open+0x10/0x10 [ 302.455911][ C1] vfs_open+0x82/0x3f0 [ 302.455928][ C1] path_openat+0x19fa/0x2440 [ 302.455945][ C1] ? __pfx_path_openat+0x10/0x10 [ 302.455975][ C1] do_file_open+0x20e/0x430 [ 302.456006][ C1] ? __pfx_do_file_open+0x10/0x10 [ 302.456051][ C1] ? _raw_spin_unlock+0x28/0x50 [ 302.456084][ C1] ? alloc_fd+0x471/0x7a0 [ 302.456122][ C1] do_sys_openat2+0x10f/0x1e0 [ 302.456159][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 302.456196][ C1] ? __pfx_get_timespec64+0x10/0x10 [ 302.456228][ C1] __x64_sys_openat+0x12d/0x210 [ 302.456264][ C1] ? __pfx___x64_sys_openat+0x10/0x10 [ 302.456310][ C1] do_syscall_64+0x123/0x790 [ 302.456345][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.456373][ C1] RIP: 0033:0x7fc2b7f5e98e [ 302.456393][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 302.456420][ C1] RSP: 002b:00007fc2b8da2b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 302.456445][ C1] RAX: ffffffffffffffda RBX: 00007fc2b8da36c0 RCX: 00007fc2b7f5e98e [ 302.456464][ C1] RDX: 0000000000000002 RSI: 00007fc2b8da2c00 RDI: ffffffffffffff9c [ 302.456482][ C1] RBP: 00007fc2b803503b R08: 0000000000000000 R09: 0000000000000000 [ 302.456499][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.456515][ C1] R13: 00007fc2b8226038 R14: 00007fc2b8225fa0 R15: 00007ffe18303a58 [ 302.456543][ C1] [ 302.456552][ C1] [ 302.456558][ C1] The buggy address belongs to the physical page: [ 302.456568][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7bf23 [ 302.456592][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 302.456624][ C1] raw: 00fff00000000000 0000000000000000 ffffea0001efc888 0000000000000000 [ 302.456657][ C1] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 302.456673][ C1] page dumped because: kasan: bad access detected [ 302.456685][ C1] page_owner tracks the page as freed [ 302.456693][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7013, tgid 7005 (syz.0.261), ts 253728468611 [ 302.456737][ C1] post_alloc_hook+0xfd/0x120 [ 302.456774][ C1] get_page_from_freelist+0x110d/0x35d0 [ 302.456814][ C1] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 302.456857][ C1] new_slab+0xa9/0x6e0 [ 302.456894][ C1] refill_objects+0xe3/0x410 [ 302.456934][ C1] __pcs_replace_empty_main+0x35e/0x650 [ 302.456972][ C1] kmem_cache_alloc_node_noprof+0x4f2/0x6e0 [ 302.456994][ C1] kmalloc_reserve+0x148/0x350 [ 302.457013][ C1] __alloc_skb+0x185/0x710 [ 302.457023][ C1] __ip_append_data+0x2c95/0x44d0 [ 302.457036][ C1] ip_make_skb+0x28b/0x310 [ 302.457050][ C1] udp_sendmsg+0x171c/0x2710 [ 302.457063][ C1] inet_sendmsg+0x105/0x140 [ 302.457083][ C1] ____sys_sendmsg+0x9c9/0xbe0 [ 302.457098][ C1] ___sys_sendmsg+0x190/0x1e0 [ 302.457114][ C1] __sys_sendmmsg+0x20c/0x440 [ 302.457126][ C1] page last free pid 7248 tgid 7243 ts 284446585787 stack trace: [ 302.457134][ C1] __free_frozen_pages+0x79f/0x10f0 [ 302.457150][ C1] qlist_free_all+0x47/0xf0 [ 302.457162][ C1] kasan_quarantine_reduce+0x1a0/0x1f0 [ 302.457174][ C1] __kasan_slab_alloc+0x69/0x90 [ 302.457187][ C1] kmem_cache_alloc_lru_noprof+0x265/0x6a0 [ 302.457200][ C1] __d_alloc+0x35/0xa50 [ 302.457215][ C1] d_alloc_pseudo+0x1c/0xc0 [ 302.457227][ C1] alloc_file_pseudo+0x118/0x290 [ 302.457243][ C1] __anon_inode_getfile+0xe8/0x280 [ 302.457254][ C1] __anon_inode_getfd+0x5c/0xe0 [ 302.457265][ C1] bpf_prog_load+0x2510/0x2a80 [ 302.457281][ C1] __sys_bpf+0x1f46/0x4a30 [ 302.457291][ C1] __x64_sys_bpf+0xce/0x140 [ 302.457301][ C1] do_syscall_64+0x123/0x790 [ 302.457316][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.457328][ C1] [ 302.457331][ C1] Memory state around the buggy address: [ 302.457341][ C1] ffff88807bf23780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 302.457350][ C1] ffff88807bf23800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 302.457359][ C1] >ffff88807bf23880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 302.457377][ C1] ^ [ 302.457384][ C1] ffff88807bf23900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 302.457393][ C1] ffff88807bf23980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 302.457400][ C1] ================================================================== [ 302.457410][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 303.222703][ C1] CPU: 1 UID: 0 PID: 7385 Comm: syz.0.352 Tainted: G L syzkaller #0 PREEMPT(full) [ 303.233462][ C1] Tainted: [L]=SOFTLOCKUP [ 303.237782][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 303.247831][ C1] Call Trace: [ 303.251178][ C1] [ 303.254010][ C1] dump_stack_lvl+0x100/0x190 [ 303.258693][ C1] vpanic+0x553/0x970 [ 303.262670][ C1] ? __pfx_vpanic+0x10/0x10 [ 303.267172][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 303.272197][ C1] ? find_endpoint+0x2a3/0x2c0 [ 303.276945][ C1] panic+0xd1/0xe0 [ 303.280651][ C1] ? __pfx_panic+0x10/0x10 [ 303.285059][ C1] ? end_report.part.0+0x23/0x90 [ 303.290006][ C1] ? rcu_is_watching+0x13/0xc0 [ 303.294772][ C1] ? end_report.part.0+0x23/0x90 [ 303.299696][ C1] check_panic_on_warn.cold+0x19/0x34 [ 303.305068][ C1] end_report.part.0+0x3a/0x90 [ 303.309822][ C1] kasan_report.cold+0xe/0x18 [ 303.314511][ C1] ? find_endpoint+0x2a3/0x2c0 [ 303.319323][ C1] find_endpoint+0x2a3/0x2c0 [ 303.323913][ C1] dummy_timer+0x500/0x3700 [ 303.328407][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 303.334216][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 303.339834][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 303.344763][ C1] ? mark_held_locks+0x40/0x70 [ 303.349509][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 303.355314][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 303.360259][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 303.365451][ C1] hrtimer_run_softirq+0x1ca/0x360 [ 303.370554][ C1] handle_softirqs+0x1e6/0x9d0 [ 303.375384][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 303.380663][ C1] ? _raw_spin_unlock+0x28/0x50 [ 303.385492][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 303.391138][ C1] __irq_exit_rcu+0x16a/0x210 [ 303.395804][ C1] irq_exit_rcu+0x9/0x30 [ 303.400026][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 303.405650][ C1] [ 303.408603][ C1] [ 303.411524][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 303.417500][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 303.423909][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 76 1d 14 f6 48 89 df e8 fe 73 14 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 85 69 03 f6 65 48 83 3d 74 04 b9 08 00 74 16 5b [ 303.443695][ C1] RSP: 0018:ffffc90005e57768 EFLAGS: 00000246 [ 303.449744][ C1] RAX: 0000000000000006 RBX: ffff888021b18000 RCX: 0000000000000040 [ 303.457706][ C1] RDX: 0000000000000001 RSI: ffffffff8e3ec063 RDI: ffffffff8c621080 [ 303.465682][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 303.473637][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000040000000 [ 303.481606][ C1] R13: ffff88802b068478 R14: 0000000000000000 R15: ffff88802b068400 [ 303.489573][ C1] dummy_urb_enqueue+0x56c/0x880 [ 303.494514][ C1] usb_hcd_submit_urb+0x268/0x2150 [ 303.499631][ C1] ? kobject_put+0xb9/0x640 [ 303.504135][ C1] usb_submit_urb+0x827/0x19b0 [ 303.508902][ C1] adu_open+0x59c/0x890 [ 303.513047][ C1] ? chrdev_open+0x589/0x6a0 [ 303.517623][ C1] ? __pfx_adu_open+0x10/0x10 [ 303.522280][ C1] usb_open+0x189/0x220 [ 303.526438][ C1] ? __pfx_usb_open+0x10/0x10 [ 303.531101][ C1] chrdev_open+0x234/0x6a0 [ 303.535499][ C1] ? __pfx_chrdev_open+0x10/0x10 [ 303.540424][ C1] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 303.546771][ C1] do_dentry_open+0x6ab/0x14d0 [ 303.551518][ C1] ? __pfx_chrdev_open+0x10/0x10 [ 303.556449][ C1] vfs_open+0x82/0x3f0 [ 303.560529][ C1] path_openat+0x19fa/0x2440 [ 303.565107][ C1] ? __pfx_path_openat+0x10/0x10 [ 303.570025][ C1] do_file_open+0x20e/0x430 [ 303.574509][ C1] ? __pfx_do_file_open+0x10/0x10 [ 303.579524][ C1] ? _raw_spin_unlock+0x28/0x50 [ 303.584368][ C1] ? alloc_fd+0x471/0x7a0 [ 303.588691][ C1] do_sys_openat2+0x10f/0x1e0 [ 303.593354][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 303.598536][ C1] ? __pfx_get_timespec64+0x10/0x10 [ 303.603731][ C1] __x64_sys_openat+0x12d/0x210 [ 303.608569][ C1] ? __pfx___x64_sys_openat+0x10/0x10 [ 303.613927][ C1] do_syscall_64+0x123/0x790 [ 303.618500][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.624375][ C1] RIP: 0033:0x7fc2b7f5e98e [ 303.628771][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 303.648361][ C1] RSP: 002b:00007fc2b8da2b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 303.656762][ C1] RAX: ffffffffffffffda RBX: 00007fc2b8da36c0 RCX: 00007fc2b7f5e98e [ 303.664755][ C1] RDX: 0000000000000002 RSI: 00007fc2b8da2c00 RDI: ffffffffffffff9c [ 303.672711][ C1] RBP: 00007fc2b803503b R08: 0000000000000000 R09: 0000000000000000 [ 303.680661][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.688633][ C1] R13: 00007fc2b8226038 R14: 00007fc2b8225fa0 R15: 00007ffe18303a58 [ 303.696592][ C1] [ 303.699872][ C1] Kernel Offset: disabled [ 303.704184][ C1] Rebooting in 86400 seconds..