last executing test programs: 11.206151279s ago: executing program 1 (id=312): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0xa2002, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x13) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/29/smp_affinity\x00', 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000041000701fefffffffeffffff017c0000040042800c00018006000600800a00000c0002800800010022270e"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) write(r1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002a40)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="08d6790862c7ad739759c580aace08a69cdb9ecaf633d960c7b249465825b824ab5aadfdf8f31952e6b27fa489e4e2b969c128ac17e2c4dfec060e58bc43d793ff7e0bd789967fc8cc1b990a76cd36e9e9aa34d57f", 0x55}, {&(0x7f0000002b00)="b6b407b423502a66935b5916d713cf62f6001a49f73d80e3742e40b804d2e6727ec7df431693816ca02c0812330c7af69e56cae2afd837d41e464dab981aa6750717ef76e7567050e4f6788415c5a9b56e506df7b3fa0654b8f904c51ac79610c90451f94a92c39c0e", 0x69}], 0x2, &(0x7f0000000340)=[@op={0x18}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x1030, 0x40040c0}, {0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001380)="503f21dd526ebbd7a9adaa9a367de1e3391e728b95990535748ebe476f5f628e764eedbf995e9374ae9a244606e6d3f54cdd341df8e2357f27c640682a84d0a0616a6382e557afd98d5e858ff8b18355262bd813ccaca5e319dbc445e09c05d3e85369a2a2277fc6e52f578f438ea33e1af0da8150bee3a2e88cac5c", 0x7c}], 0x1, &(0x7f0000002b80)=ANY=[@ANYBLOB="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"], 0x1a0, 0x40000}, {0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000001600)="d961ba37b1e4fad3f46b077019b380a39c58de9d3b7cd5fdb761dffe2347f1d00ab94257d0b3fd0105636d9320cace30ebdb07e4c6b93a2adb8ea7197aa60e43f9e84fc8619fab33d0d258cce8b99949571689eb071cd6d15ffafc583c33166517f489a8ff1374", 0x67}, {&(0x7f0000001680)="d0d841302ac8e4ec51c3b80ef9c989dde7c461496cdb797c32f1904b8edc891b27b793833847b8e5f220753ea104852aa7fab122f1f2229a9a1a76b2897784617c063a3ddcee4392a8da322f7191ae4799d7373bac0085888a6e5b1083a5f1ccbf4aaa6978c01be1ec5452bfa09ec559bc705c89297469c16040788335660b1c48767a910881b32d09d3dcf2abf2981bfbd2bfa5be94175ab0c1bb4747cbcbb77c2d42af72d0af79ccdba19bd2fb62996a645448b047d9d7821f46c9c4cfd4e9369130b346a5ade4", 0xc8}, {&(0x7f0000001780)="0a54947859", 0x5}, {&(0x7f00000017c0)="6f02a95332539c13cc82b136dedc8b3ac7b1013c25af5b96fc0bea0fdfec35506ad543004c5960ea6aa2b5481d01a7c8f5b4975db6d2340175d558a09068da1794a668e41a14cb1462d378c1c3f333160e0b6a1309c47756043378bde68e606f446f2f9a450f357cea4597d572c1ca4b1a9249ad232592c2ee7b448ffcaf7bd09a3e68b013cd9599072635c016a79dc7c275075525aa1a258fecf43172e2619fb903eb28a5bd25c1e2b60cfe50ab7cd3d85dd64f", 0xb4}, {&(0x7f0000001880)="56406d729d0b70b15c1cf6660d957e04c546dab22346ce66df5ebfe39ca15e116bd3da8efa1db1614fdd9e7ba9371fe69826856772f258eebae05e08057828868ec8a5898707d6245b9776992d300211ad0f16c3331859e7d1feb6390924d462f0b44495c2454c4d66972e8b62f65d603f91d0ff56175005e8d10e719bdee9", 0x7f}, {&(0x7f0000001900)="675916271b24efb9c6bf519f0da3e8ff77dbbc0d2389a4e5c49243ecffda854f8dae0668dd6dd92552055363d126160238034b15b3761a088dc7462431165152bca492d1cafefe6180aa3e37cb25a537a3670d60d5f0abfb63225401d785a492d0b013a8da08e7349def8488173b65b36b7610592975e5d801bcd01bc6326363e63c37a64b5d9fc5cb7f71e9034e31e0b7f1d31a11aaee380b39f8b570b03436d889f9bd1e05a28c5e456c2610ba21ee78cb5bb9675ccbc79eba5c958c72a539", 0xc0}, {&(0x7f00000083c0)="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", 0x11b8}], 0x7, 0x0, 0x0, 0x20004005}], 0x3, 0x40800) recvmmsg(r0, &(0x7f0000002f80)=[{{&(0x7f0000000280)=@tipc=@id, 0x80, &(0x7f00000031c0), 0x0, &(0x7f0000003280)=""/81, 0x51}, 0x9}, {{&(0x7f00000048c0)=@tipc, 0x80, &(0x7f0000005dc0)=[{&(0x7f0000004940)=""/217, 0xd9}, {&(0x7f0000004a40)=""/4096, 0x1000}, {&(0x7f0000005a40)=""/71, 0x47}, {&(0x7f0000005ac0)=""/163, 0xa3}, {&(0x7f0000005b80)=""/163, 0xa3}, {&(0x7f0000005c40)=""/105, 0x69}, {&(0x7f0000005cc0)=""/196, 0xc4}], 0x7, &(0x7f0000005e40)=""/131, 0x83}, 0x2}, {{&(0x7f0000006500)=@llc, 0x80, &(0x7f0000006dc0)=[{&(0x7f0000006580)=""/252, 0xfc}, {&(0x7f0000006680)=""/164, 0xa4}, {&(0x7f00000047c0)=""/161, 0x6f}, {&(0x7f0000006800)=""/248, 0xf8}, {&(0x7f0000006900)=""/193, 0xc1}, {&(0x7f0000006a00)=""/140, 0x8c}, {&(0x7f0000006ac0)=""/196, 0xc4}, {&(0x7f0000006bc0)}, {&(0x7f0000006c00)=""/206, 0xce}, {&(0x7f0000006d00)=""/161, 0xa1}], 0xa, &(0x7f0000006e80)=""/94, 0x5e}, 0xcb}, {{&(0x7f0000006f00)=@nl, 0x80, &(0x7f00000070c0)=[{&(0x7f0000006f80)=""/35, 0x23}, {&(0x7f0000006fc0)=""/214, 0xd6}], 0x2, &(0x7f0000007100)=""/4096, 0x1000}, 0x10001}, {{&(0x7f0000005f00)=@nfc, 0x80, &(0x7f0000006440)=[{&(0x7f0000005f80)=""/10, 0xa}, {&(0x7f0000005fc0)=""/251, 0xfb}, {&(0x7f00000060c0)=""/66, 0x42}, {&(0x7f0000006140)=""/224, 0xe0}, {&(0x7f0000006240)=""/224, 0xe0}, {&(0x7f0000006340)=""/59, 0x3b}, {&(0x7f00000063c0)=""/88, 0x58}], 0x7, &(0x7f00000064c0)=""/12, 0xc}, 0x2}, {{&(0x7f0000003500)=@alg, 0x80, &(0x7f0000004780)=[{&(0x7f0000003580)=""/138, 0x8a}, {&(0x7f0000003640)=""/115, 0x73}, {&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f00000046c0)=""/186, 0xba}], 0x4, &(0x7f00000082c0)=""/251, 0xfb}, 0x1000}, {{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000003300)=""/227, 0xe3}], 0x1, &(0x7f0000003440)=""/130, 0x82}, 0x9}, {{&(0x7f0000001480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000002e40)=[{&(0x7f00000019c0)=""/4096, 0x1000}], 0x1, &(0x7f0000002e80)=""/220, 0xdc}, 0x5}], 0x8, 0x1, &(0x7f0000000080)={0x0, 0x989680}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001440), 0x2) r4 = socket(0x10, 0x3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r5, 0x4b2f, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000100)=0xfffffffffffffff9, 0x4) bind$inet(r6, &(0x7f0000000540)={0x2, 0x4e23, @remote}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff, 0x800000, 0x40000}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000004200010a00000000000000000a0011"], 0x14}}, 0x408c0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$FBIOPUTCMAP(r3, 0x4605, &(0x7f0000000140)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x9, &(0x7f00000000c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb905}, @map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 11.081476794s ago: executing program 1 (id=314): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) syz_open_dev$loop(0x0, 0x2, 0x2001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listns(&(0x7f0000000000)={0x20, 0x0, 0x5, 0x10000000, 0x0, 0x3}, &(0x7f0000000080)=[0x0], 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) r4 = fsopen(&(0x7f0000000080)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="8b97ec46b835"}) write$tun(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="080088f7060006000000ff070000450a0fc0006600000b29907864010101ffffffff3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fd00351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d5661f6865e030487"], 0xfce) 9.588045786s ago: executing program 1 (id=322): r0 = syz_open_dev$vim2m(&(0x7f0000000440), 0x7, 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRAWPHYS(r3, 0x80404805, &(0x7f0000000040)) ioctl$TIOCSETD(r1, 0x5423, 0x0) close(0x3) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000ec0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@iv={0xf8, 0x117, 0x2, 0xe1, "dc3f7e5624a87e6c627be0de0e1106c61f552a7a3302bef77e6b920b6478b6ecef001890b51b9b12205cf5558e80355ce80dd013248e1bd955e5380c2a46dd1e6f02e79a6dc364602a0b9c634f3e70b9cb206cc4b7b0b9d4a4226ffc0aef6ba690e15db33759cd61ec41f51765bf7c8f8cddb646ca4b4a733e100348c7e65b2d9f5e797cd60ee0e981cac87f76fb65518d9bf03cb2ade64aa66741155c246f7cd35cc70c129612682cf6ce806e08775db613f00826df5ac6c4f0dbf3eb1a8a2905f242179f3ea328e68055ebc21ba1fc0d9548dfd4f08d39ed162d83ffc7829018"}], 0xf8, 0x14}], 0x1, 0x800) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200008d0}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4000854}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)=ANY=[@ANYRESHEX, @ANYBLOB="51c3dfc1bf1e039996883a12d5cc8846ff899e7bbc913efcbd10e061030933df3c3c7fc0244ab107b9c38aa2e8d217cb1c6811907bb64495059af848cb67f48096bbe110470b5a58a57b8731dd7d806b7d4f07e5cb8ad45b290227c3d50b578b53ad8548a60567d3551fbd7ead9569a44deda0e43550810124964eb6d1ddaded76f71172749ae6e8db3060ee50da5784158db9a404453a35ae0aa1efcce01823c7e4e6599f91c7a3d52c6f6b14b773924d1d31aeafcb", @ANYRESDEC=r5, @ANYBLOB, @ANYRESHEX=r4, @ANYRESHEX=r2, @ANYRES64], 0x70}, 0x1, 0x0, 0x0, 0x11}, 0x800) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000400)={0x0, 0x47425247, 0x0, @discrete={0x7, 0xffffffff}}) setns(0xc9, 0x0) fsopen(0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001000000"], 0x50}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8000000"], 0x2c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010003fdffffff0000000000000064000000"], 0x20}}, 0x0) 9.432017269s ago: executing program 0 (id=323): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2f, 0x0, 0xf0, 0x0, 0x0, 0x0}, 0x4c) 9.225744261s ago: executing program 0 (id=324): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x3, @dev={0xfe, 0x80, '\x00', 0x2e}}, 0x1c, 0x0}, 0x20008b88) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000600e8fe55a11800150006001400030000120800040043000000a8001600a400014020000a00feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 8.355564307s ago: executing program 0 (id=326): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) r1 = gettid() r2 = fspick(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x228000, 0x11) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000100)='}@}:\x00', &(0x7f0000000140)='./file0\x00', r3) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x4e20, 0x0, @mcast1, 0x1000}, {0xa, 0x4e21, 0xfffff801, @mcast1, 0x4}, 0xffffffffffffffff, {[0xe347, 0x80000000, 0xffffffff, 0x7f, 0xffffff97, 0x7, 0x4, 0x31d]}}, 0x5c) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240), 0x301001, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r5, 0xffffffffffffffff}, 0x4) sched_getaffinity(r1, 0x8, &(0x7f00000002c0)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000580)={{r3, &(0x7f0000000300)='\x00', 0x8001, &(0x7f0000000340)={@_ha_fsid={[0x9, 0x3]}, {0x2, 0xfff, 0x3, 0x92}}, 0x5, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x6}, 0x2, &(0x7f0000000540)=[{0x3, 0xffff0001, &(0x7f0000000400)='\x00', &(0x7f0000000440)="989bc6cf4b45d5f3cb6e786b649eb159bacc82a73c416fff3416568bf43f34ce43b6bbd447b13edc14049ea1db0e0686", 0x30, 0x20}, {0x3, 0x8, &(0x7f0000000480)='@^[)\x00', &(0x7f00000004c0)="9a331ecbbaf3b7389aee30dfb009463aec1aa93f26fe0c3c0cfdb7ef11cffb1a0fe097cb52db5f994440e726f83a26c82278080e442ffdbaa6de834d44fdab357e255b1dd62b094df4c3f0b96e8b64afe708fff1398eda395257e28620af6c98a5ffe7c47da8d5c7bc37d4", 0x6b}]}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x13, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x1, 0x0, 0x0, 0x7, 0x2, 0x0, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @exit, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @jmp={0x5, 0x0, 0x8, 0xa, 0x4, 0x4, 0x8}]}, &(0x7f00000006c0)='GPL\x00', 0xfff, 0xec, &(0x7f0000000700)=""/236, 0x41000, 0x20, '\x00', r8, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x5, 0xf, 0x6, 0x200}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000880)=[r6], &(0x7f00000008c0)=[{0x5, 0x1, 0xa, 0x1}, {0x4, 0x3, 0x8}, {0x5, 0x1, 0x2, 0x4}, {0x5, 0x5, 0xd, 0x5}, {0x1, 0x5, 0x7, 0x5}], 0x10, 0x2}, 0x94) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e21, @local}}, 0x6, 0x6, 0x0, 0x4, 0xffff}, &(0x7f0000000ac0)=0x98) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f0000000b00)={r11, 0x8000, 0x8}, &(0x7f0000000b40)=0x8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r6, {0x0, 0xee01}}, './file0\x00'}) ioctl$F2FS_IOC_FLUSH_DEVICE(r12, 0x4008f50a, &(0x7f0000000bc0)={0x1, 0x9}) r15 = syz_genetlink_get_family_id$gtp(&(0x7f0000000c40), r12) sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r15, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x5}, @GTPA_I_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40094) write$vga_arbiter(r7, &(0x7f0000000d40), 0xf) nanosleep(&(0x7f0000000d80)={0x77359400}, 0x0) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000dc0)={r1, r13, r14}, 0xc) syz_open_dev$vim2m(&(0x7f0000000e00), 0x3, 0x2) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e40)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x100, '\x00', 0x0, r12, 0x0, 0x5, 0x5}, 0x50) r17 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0xc, &(0x7f0000000ec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffa}, [@map_val={0x18, 0x7, 0x2, 0x0, r12, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xd}, @call={0x85, 0x0, 0x0, 0x81}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xc545}, @map_val={0x18, 0x5, 0x2, 0x0, r16, 0x0, 0x0, 0x0, 0xc6}]}, &(0x7f0000000f40)='GPL\x00', 0x2, 0x60, &(0x7f0000000f80)=""/96, 0x41100, 0x21, '\x00', r8, 0x0, r17, 0x8, &(0x7f0000001040)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001080)=[r5, r7, r6, r6, r6], &(0x7f00000010c0)=[{0x0, 0x3, 0xa, 0xb}, {0x5, 0x1, 0x5, 0x2}, {0x1, 0x2, 0x10}, {0x5, 0x3, 0x8, 0x4}, {0x5, 0x2}, {0x1, 0x2, 0xe, 0x6}, {0x0, 0x2, 0x7, 0xc}, {0x2, 0x5, 0xa, 0x2}], 0x10, 0x6c929305}, 0x94) sched_setaffinity(r1, 0x8, &(0x7f0000001200)=0x7) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r12, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 7.797724622s ago: executing program 3 (id=328): syz_open_dev$vim2m(&(0x7f0000000440), 0x7, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRAWPHYS(r2, 0x80404805, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, 0x0) close(0x3) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) socket$inet_tcp(0x2, 0x1, 0x0) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008"], 0x84}, 0x1, 0x0, 0x0, 0x200008d0}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x4000854}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x800) setns(0xc9, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001000000"], 0x50}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000007800010402f0000000000000070000006400000014000180080001006400000008000200c8000000"], 0x2c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110001000300000000000000000000006400"/32], 0x20}}, 0x0) 7.287256347s ago: executing program 2 (id=329): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1903, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='0\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/vtconsole/vtcon0/bind\x00', 0x1, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000fc0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x34, 0xa, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2e}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xb50b}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x9db29a468187b72c) ioctl$TIOCL_SETVESABLANK(r5, 0x541c, 0x0) ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000200)) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c1200000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000e0110380dc1100800800034000000002"], 0x120c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r7, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000180)=""/59, 0x3b}, {&(0x7f0000000240)=""/239, 0xef}, {&(0x7f0000000340)=""/205, 0xcd}, {&(0x7f00000004c0)=""/131, 0x83}, {&(0x7f0000000740)=""/130, 0x82}], 0x5, &(0x7f0000000880)=""/91, 0x5b}, 0x9076}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/216, 0xd8}, 0x80000000}, {{&(0x7f0000000f40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000001440)=""/176, 0xb0}, 0x7}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001500)=""/219, 0xdb}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000001640)=""/8, 0x8}], 0x3, &(0x7f00000016c0)=""/140, 0x8c}, 0x9}, {{&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000002a40)=[{0xfffffffffffffffd}, {&(0x7f0000001800)=""/140, 0x8c}, {&(0x7f00000018c0)=""/38, 0x26}, {&(0x7f0000001900)=""/192, 0xc0}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/96, 0x60}], 0x6, &(0x7f0000002ac0)=""/126, 0x7e}, 0xdb8251f}, {{&(0x7f0000002b40)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002bc0)=""/28, 0x1c}, {&(0x7f0000002c00)=""/93, 0x5d}], 0x2}, 0x8}], 0x6, 0x20, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a40000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000050000000000000000000114000400fc0000000000000000000000000000010800074000000000100006"], 0xa4}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000)=0x77, 0x4) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000700)=0x31) 6.975611202s ago: executing program 0 (id=330): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4040002}, 0x4000080) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) fsopen(&(0x7f00000003c0)='ecryptfs\x00', 0x1) r3 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000440)={0x0, 0x4ee24, 0x2000, 0x6, 0x15a}, &(0x7f0000000100), &(0x7f0000000400), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x4000000) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f0000000000)='f2fs\x00', 0x800401, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000300)={0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040001) accept4(r0, 0x0, 0x0, 0x80000) syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_FIXED_FD_INSTALL={0x36, 0x15, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x6d36, 0x80000, 0x2, 0x1a6}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb578, 0x20, 0x1, 0x1cd, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x98a5, 0x2000, 0x1, 0x1aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6254, 0x20000, 0x3, 0xef, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x69b4, 0x200, 0x2, 0x194, 0x0, r4}}], 0x4, &(0x7f0000002340)={0x2e, 0x8, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, 0x0, '\x00', {0x3, 0xc51, 0x0, &(0x7f0000001340)=@buf_1k="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"}}, &(0x7f00000023c0)) 6.876290825s ago: executing program 2 (id=332): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x72, {"b8010000000f01d966ba2000b047eeb9800000c00f3235000400000f30410f01f80fc77dd1c744240200000000c744240600000000c482f2f7500048b83c000000000000000f23d8420f210035000000e00f23f8e999b90000c48285bce4f3dfcd"}}], 0x72}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@code={0xa, 0x58, {"d3576ecf420f01b8a93a0b0f66baf80cb81c372e8cef66bafc0c66b8e3af66ef450f0017c441ad6a122ef2470f00d2c46335786d000b440f20c03502000000440f22c0400fdef2"}}], 0x58}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000002c0)={[{0x7, 0xc003, 0x7, 0x5, 0x2, 0x12, 0x7, 0xd, 0xb9, 0x3, 0xe, 0x8, 0x201}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xfb, 0x2, 0x3, 0x1f, 0x13, 0x4, 0x7b, 0x20e}, {0xfffffffe, 0x15, 0x18, 0x34, 0x8, 0xfd, 0x3, 0x84, 0x0, 0x4, 0x4, 0x7, 0x1}], 0xfaffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x7f, 0x88, 0x0, 0x40, 0x4, 0x0, 0x2004cb, 0x1, 0xfffffd, 0x20000000000068ff, 0x5, 0x745, 0x8, 0x3, 0x0, 0x9], 0x1, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x300000000000000) 6.163369604s ago: executing program 2 (id=334): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000002f0009002abd7000fddbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) listen(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000080), 0x0, 0x2}, 0x20) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0x2) setsockopt$inet6_opts(r5, 0x29, 0x3b, &(0x7f0000000600)=ANY=[], 0x18) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB="87000000000000"], 0x8) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$inet6(r5, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @loopback={0x3000000000000000}}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00\x00\x00\x00'], 0x60}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000041000100fcff070004000000010000000400488014000180100010800c000b8008000100ac1414bb08000200", @ANYRES32=r6, @ANYBLOB="f16c9deeeee27ed1e72798752a55f54ae4d2a6838a40344c37992a6f10bf06e3bb85d066824b6d7dc755bc5dd05622d1c2bbf2fbe5a76cca7dc1480520ddc4d923a3040cd185ae3187167db185a9d1252f896705d64ce77500a21f17d612f6e4262cab7a69adbdb5cd"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) move_pages(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x2) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x2) 5.187445613s ago: executing program 2 (id=335): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9a9c042ad77c4ad) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) close(r6) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) creat(0x0, 0xd931d3864d39dcdb) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0xff90, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x9c, 0x0, 0x0, 0x40000000}, {}, {0x3, 0x7}, {}, {0x0, 0x5a}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, r1, 0x100, 0x70bd25, 0x3, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x880) ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000140)=0x2000004) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) 5.138869388s ago: executing program 1 (id=336): mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='tmpfs\x00', 0x64481, &(0x7f0000000340)='discard\x80\xae\x8c\x9a\xef\xfd\x1fc\\{\x8f\"\x84\xf1f:\xdc\x8e\xf4\xfd\xd6X\xeb-\x15\xa6\r\x0e@L\xc8\xaa\x1d\xadEL\xa2g\xf1\xdb\xde\a\xe3\xcf\x17\xb6\x95q1\x1a\xac\xcd{z\xc0\xdf\x8b\xa4\xb8\b\x00b\xbax\xdd\xd4\xd9\x10}p\x19\xab3\xcdg\x06\xed\xdf\xf6F}\xb2\x9d-\x0fy\a\rP `N(\xc7\xa6\xd8\x88\xa3!\x12i@') syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x80881) madvise(&(0x7f0000779000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f00000000c0)=0x4) syz_emit_ethernet(0x52, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa6286dd604dd318001c0600fc010000000000000000000000000000fe8000000000000000000000000000aafffe4001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7002d9deea00000020000000000000000769e49034812301db0f761202d39dea01a9824a718761fe6229f6962a378a11d8a5e82445e80539f2a29e46b66896ebed286b445739b54896b2306b1e74dbbdb36a1942ca90b74459d140603270e6079f579ae02014e79737a1148433104da042fb990fa5d42f1ebc3db9c82a2bbe3c7a591e59e078b076a8b9b479080a62df1768d77b83a240b0d180785aa29318cce22e8230a631856e069851f409350e3b446d07f871be09d1a3a7eaeb758168249ec4395d9ab5466f23db7f9ca12cce4fb46523c78c2bcc88c3b6bbcbea3b2fccdf527d27af95f529c3c2d2"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) socket$inet(0x2, 0x1, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000280)={{0x2, 0x4e20, @private=0xa010101}, {0x306}, 0xc, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}, 'ip6gre0\x00'}) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$ARCH_MAP_VDSO_64(0x1e, r2, 0xfffffffffffffffa, 0x2003) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_procfs(r2, &(0x7f0000000200)='net/rt_acct\x00') pread64(r3, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) 5.121001787s ago: executing program 3 (id=337): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x300, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0x8, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x41) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b04000000000000000002006a000900020073797a32000000000900010073797a3000000000240004802000018007000100637400001400028008000140000000170800024000000002050007401400000014000000110001"], 0x80}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x20000014) recvmmsg(r0, &(0x7f0000003000)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000000240)=""/59, 0x3b}, {&(0x7f0000000280)=""/72, 0x48}, {&(0x7f0000000300)=""/160, 0xa0}, {&(0x7f00000003c0)=""/74, 0x4a}, {&(0x7f0000000440)=""/61, 0x3d}], 0x6, &(0x7f0000000500)=""/243, 0xf3}, 0x2}, {{&(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000000680)=""/129, 0x81}, {&(0x7f0000000740)=""/181, 0xb5}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/147, 0x93}, {&(0x7f00000018c0)=""/200, 0xc8}, {&(0x7f00000019c0)=""/196, 0xc4}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x7, &(0x7f0000002b40)=""/190, 0xbe}, 0x3}, {{&(0x7f0000002c00)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002c80)=""/10, 0xa}, {&(0x7f0000002cc0)=""/165, 0xa5}, {&(0x7f0000002d80)=""/54, 0x36}, {&(0x7f0000002dc0)=""/162, 0xa2}, {&(0x7f0000002e80)=""/89, 0x59}, {&(0x7f0000002f00)=""/28, 0x1c}], 0x6, &(0x7f0000002fc0)=""/59, 0x3b}, 0x854d}], 0x3, 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002ac0), r5) sendmsg$IEEE802154_DISASSOCIATE_REQ(r5, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003100)={0x14, r6, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40898}, 0x8010) sendmsg$IEEE802154_LLSEC_LIST_KEY(r4, &(0x7f0000003180)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003140)={&(0x7f0000003100)={0x14, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44004}, 0x40000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003200), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r7, &(0x7f0000003c00)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003240)={0x980, r8, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x20c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x80}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x14, 0xd, 0x0, 0x1, [{0x10, 0x0, "57f75dcef5470d650b1c146a"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0xbc, 0xe, 0x0, 0x1, [{0x4}, {0xb3, 0x0, "e5b78b3b705a1e588b3960141d3c57011a3cba6ec94f7105b4d09e51a3445b5db544e20a8710588c067bd432c8e1db8d4051fa2f27f9fb0e738ba38f7b83d94aadc0adc3aa5e4369c0334839527f84aceba1ea8c599f85489c928f25ea967c20dbc79ffb7e1a7fae3975861e3124764e2f78df796d8b5bf4d49435256aa740647c320419d1cb0a3423a2ea25aade1690f3eb98e6dfb6342df5015cebe17e99f41ef6b36218950fde2b8486a7ea2189"}]}, @NL80211_NAN_FUNC_SRF={0x50, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xa4}, @NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x5}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x7}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x2}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0xc4, 0xe, 0x0, 0x1, [{0xbe, 0x0, "6862a06ee809a9215b5a26e965771f8f4ab30881cbdb40828991acacf76ffddf5ef34a6e7b1ba53bcc5140c95e1461eaf740b5f2fb9f42a429e642c3a69b6d5dee4107490f2395a2e6dc788c8f1bf8c05a6cfc51e90d1d5de3d4364defc37f5d791403591c1b081f0e51839ca2d30eef61f72dc28c6df5ffc6643a7687f785adf227278943040159f25187abb780d13e62fe858bb40651f85f9af1fbdfe13c6d0c6d7689e7792bb4e9f89a8dc9400e2aaeedf6fa2a5369eecc45"}]}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "6461d96a4127"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x318, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x228, 0xd, 0x0, 0x1, [{0xa0, 0x0, "63ffae9d683779d0b588fbcd8490e3eb34e9acc4180e331601548871f182d5381fc482c38ab731d69e1d06a82cac708560547306b94f2149b6a41a4dae5162da6eb01d576b07f73a01f8dc89d10ca68a7159b641697e18249d03b765659c1b0c31c253fa5b98f3d5e91f44906b474eb9be8d3240b01d3545d97c1bd20da787df8db39b711dea223ae1d0ec4ace14fd008224ef0964d1445353217980"}, {0xe5, 0x0, "f27a0865ffb312a62344503f49a270b645bff60d9465cd9e75523a1311dda0bad4d88d764a2e308dc7c3976a9c2b24e286f85a90790f67264dc1a74b696cebf8140100d063eb76aa9f32c13b1d58314f86844957b86196e068c3ef1d0fa8d1379904327a74492d5182f388bbac3104220aead0263fce4ceb241b56b3e2c3b52f836df81ae985e7f8c7866dceb35e5cd2376c6ddcea390d5bb4ebd44ad6a6e27947e4d542cd650ff2b3ec15c4948b09ec03b0e55813cf26d10c12e8595bc70fed11c79f4a13a0747fc3ed1cdd852b66bf39431ed59b1a7c6795cb3c006927adad09"}, {0x5c, 0x0, "02961a4679e66f927f2043a59610608e4c20249493e53c71ec42896dff2cfa742a2fccae089ca0864ec9de436316835c97e6dc703413bea61b85ba9fdc1215b4731e2211f40d22003e98e79764fa6c49f495c83d4b8fef4a"}, {0x3f, 0x0, "5e92d202b8adf979271da8cfe97da0b506225c4b119b9a12a3788b659ec50f6cc3836d4a8f7af68c302b3a57bf2d942e85e3631672cf6ce17a6a07"}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1c}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0xbc, 0xd, 0x0, 0x1, [{0x1e, 0x0, "b154052c286500796c85e9e55fba1b4431ef099aa0191dd2e384"}, {0x7d, 0x0, "3d47fbf899d6dfad7e2aa2c80835df9eb3be4b2a42fdcdd60671b99a6d3df8e970ee8801200fb6fd7d9f0fa6b068f4cb494a002f3d9a109d079a9045fcae669f8cc6e245f9cad77e451f112ee63213a5b7acb7101dd89ffc095845b62b6ddc7c627765a9b7fa4ffa485b8df039f41f9b95018df13359b54e1d"}, {0x17, 0x0, "0c5f8cf0cc413b13740da3e52624312da1401b"}]}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x9a32116d}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x128, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x114, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x6}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x5}]}, @NL80211_ATTR_NAN_FUNC={0x24, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x1f, 0xb, "68038f062d9de6d5458c53ad19602e2d56264954ba87ae8d1a41b4"}]}, @NL80211_ATTR_NAN_FUNC={0x28, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xa}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x5}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x2}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x12c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x8}, @NL80211_NAN_FUNC_SRF={0x10c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xd}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x174, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xd}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x154, 0xe, 0x0, 0x1, [{0xab, 0x0, "05811b21c4a8cac43771d83e2d6819fe337fb0a05b70ce9df0dfdb2da13289afba01ab7035d6b08c4c3f876280ebc45bfd81a06d4ffdd3629f8d283be33ec740c671b1fbe8ecb45047118c83437abba253cee35c3b96f1093ff6c99b5610ebc7c0b8eafb055755c8b9a6db1014f31a6705507d0d16e9763f8404754144e759d0eb110550ed4b32d3721dfaa08ee76bfd5c99f8986ad81f91167dd2e70b662fb41544677520415b"}, {0x54, 0x0, "30890bfc9aad497f3a7d559bd82161a38b3c6512ccc42112cbbb5e59594830bda2ad5902709c8a8a787e74ced80c0bb7a8488d913671395c16b6990cea2bc4efcfdc4af93944c8c48831f443339bcfae"}, {0x4f, 0x0, "ae6e1cd3e2d71cc523d1c77e5581f6064a8b7eb51274b609cb8699c1d57314a0f6d7cce9095ff0b0a58cac4ecf4c02019835d7827b530cef1f85ea5422fbefda225bceb1af6979ca113d95"}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "0d3a0acc9f20"}]}]}, 0x980}, 0x1, 0x0, 0x0, 0x40001}, 0x240400c5) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 4.374798137s ago: executing program 4 (id=338): io_uring_setup(0x4a86, &(0x7f0000000180)={0x0, 0x67db, 0x2020, 0x3, 0x131}) r0 = openat(0xffffffffffffffff, &(0x7f000000c380)='./file1\x00', 0x20a42, 0x40) write$P9_RLERRORu(r0, &(0x7f0000000280)=ANY=[], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sndseq(0xffffffffffffff9c, 0x0, 0x101041) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x49}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000006c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000480), 0x0, 0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x5) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=0x0) r4 = getpgrp(r3) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x541042, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) eventfd2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x10044, &(0x7f00000002c0)=ANY=[]) shutdown(r5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) mmap(&(0x7f000003e000/0x1000)=nil, 0x1000, 0xb635773f02ebbeed, 0x12, r1, 0xe601e000) syz_clone(0x62000300, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x89) prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee01, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') 4.274505544s ago: executing program 0 (id=339): socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x1a000, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 4.148151764s ago: executing program 2 (id=340): mkdirat(0xffffffffffffff9c, 0x0, 0x1e9) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000010085c40b4040200b16a0102030109021b0001000000000904"], 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0x142}, {&(0x7f0000000d00)="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", 0x33f}], 0x2}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000100)={'pcmda12\x00', [0x100, 0xb, 0x1, 0x101, 0x6, 0x100, 0x3, 0x20000000, 0x8, 0xb, 0x2, 0x7, 0x1, 0x401, 0x10001, 0x1, 0x9, 0xc, 0xfe9, 0x401, 0xffff0000, 0x2, 0x200007, 0xc, 0x48, 0xb, 0x7, 0x6a74, 0x400, 0x6b, 0x2000008]}) 3.942334725s ago: executing program 4 (id=341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x3, 0xe3fd, 0x37, 0xfffffffffffffffc, 0x3, 0x4}) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)='/', 0x1}], 0x1, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x56, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/23, 0x23}], 0x1, 0x0, 0x1e}, 0x10040) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'veth1\x00', @broadcast}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001042088be"], 0xfdef) 3.330530003s ago: executing program 3 (id=342): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1903, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='0\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/vtconsole/vtcon0/bind\x00', 0x1, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000fc0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x34, 0xa, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2e}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xb50b}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x9db29a468187b72c) ioctl$TIOCL_SETVESABLANK(r5, 0x541c, 0x0) ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000200)) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c1200000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000e0110380dc1100800800034000000002"], 0x120c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r7, &(0x7f0000002cc0)=[{{&(0x7f0000000100)=@ieee802154, 0x80, 0x0, 0x0, &(0x7f0000000880)=""/91, 0x5b}, 0x9076}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/216, 0xd8}, 0x80000000}, {{&(0x7f0000000f40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000001440)=""/176, 0xb0}, 0x7}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001500)=""/219, 0xdb}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000001640)=""/8, 0x8}], 0x3, &(0x7f00000016c0)=""/140, 0x8c}, 0x9}, {{&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000002a40)=[{0xfffffffffffffffd}, {&(0x7f0000001800)=""/140, 0x8c}, {&(0x7f00000018c0)=""/38, 0x26}, {&(0x7f0000001900)=""/192, 0xc0}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/96, 0x60}], 0x6, &(0x7f0000002ac0)=""/126, 0x7e}, 0xdb8251f}, {{&(0x7f0000002b40)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002bc0)=""/28, 0x1c}, {&(0x7f0000002c00)=""/93, 0x5d}], 0x2}, 0x8}], 0x6, 0x20, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a40000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000050000000000000000000114000400fc0000000000000000000000000000010800074000000000100006"], 0xa4}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000)=0x77, 0x4) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000700)=0x31) 2.935664074s ago: executing program 0 (id=343): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r0 = socket$inet_sctp(0x2, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) pause() r1 = syz_clone3(0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) accept$alg(r2, 0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='mqueue\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x20a0, 0x4287, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x6, 0x5, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xf6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x0, 0x6) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0xffffffff, 0x3, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x5}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x5}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xefa5}]}}]}, 0x4c}}, 0x2000400c) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={@empty, @mcast1, @mcast2, 0x0, 0x7, 0xf, 0x600, 0x5, 0x40000004, r7}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) fchdir(r5) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086ec0008bb3500142f00fe8000000000080000000000000000bbfe80000000000000000000aa000022eb00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xffffffff) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) 2.907472007s ago: executing program 3 (id=344): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f00000000c0)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x20841, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000180)='wg2\x00') r3 = dup(r2) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) 2.824538303s ago: executing program 3 (id=345): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7}, 0x10) (async) write(r0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) (async) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async, rerun: 64) r2 = getpgrp(0x0) (rerun: 64) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000440)=@add_del={0x2, 0x0}) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) (async, rerun: 64) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f0000000100)=0x3) (async) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) unshare(0x68040000) (async, rerun: 64) fsmount(0xffffffffffffffff, 0x0, 0x1) (async, rerun: 64) fchdir(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1038f592d25da52269fed5c50a58", @ANYRESDEC=r5, @ANYRES64=r2, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x376bd2ae0a1097ca, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r7, 0x0, 0x25, 0x8, @void}, 0x10) (async) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[], 0x0) 2.765507187s ago: executing program 1 (id=346): syz_open_procfs(0x0, &(0x7f0000000140)='net/ipv6_route\x00') set_mempolicy_home_node(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x2c, 0x4}, {0x20, 0xfe, 0xff, 0xfffff024}, {0x6, 0xfc, 0x0, 0x4}]}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xffffffffffffffff, 0x40000) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f00000001c0)={'bond_slave_1\x00', {0x2, 0x0, @multicast1}}) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000200)='dummy_hcd.0', 0xb) 2.695915218s ago: executing program 4 (id=347): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe581, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000080)=0x5afb, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f000002b8c0)='tracing\x00', 0x1ff) mount(0x0, &(0x7f000002b940)='tracing\x00', &(0x7f000002b980)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000002ba80)='tracing/events/xfs/xfs_rmap_convert/trigger\x00', 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000845, 0x0, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x3d, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x68}, 0x80) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r7, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2.149672052s ago: executing program 3 (id=348): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000b00)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000480)="1c0000001a009b8a140000003b000000ff0000000000000000000000fd", 0x1d) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socket$rxrpc(0x21, 0x2, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x6f}, 0x94) syz_emit_ethernet(0x4e, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @remote}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) 1.494544967s ago: executing program 4 (id=349): socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffffffffffff, 0x7842) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, 0x0, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8", 0x23}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="8456e4141aa77a2584408967c3fea338fb1e2c13", @ANYRES32=0x0, @ANYBLOB="4200000021200000240012800c0001006d6163766c616e00140002800800030003000000080001001000000008000500", @ANYRES32=r5, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000002) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x222203, 0x0) accept$alg(r6, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x6, 0x9, 0x0, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x9, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x40081}, 0x90) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000880)=@polexpire={0x2b8, 0x1b, 0x100, 0x70bd2b, 0x25dfdbfe, {{{@in6=@mcast2, @in6=@empty, 0x4e22, 0x0, 0x4e24, 0x81, 0xa, 0x20, 0x20, 0x3c, r5}, {0xa82, 0x91, 0x0, 0x0, 0xfffffffffffffbff, 0x3, 0x1, 0xe0}, {0xfffffffffffffff7, 0x9, 0x5, 0x4}, 0x100, 0x6e6bbe, 0x2}}, [@encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e22, 0x4e23, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @proto={0x5, 0x19, 0x32}, @replay_thresh={0x8, 0xb, 0xcc2}, @algo_crypt={0x108, 0x2, {{'ctr(aes)\x00'}, 0x600, "70048db0b814cf0150a903fd62d67a55803480832adc78fc5bfa30239a771bf73cee3c0fc3c271277106b71e964d579c16d8aedf3c1f6a4e73a863ad3d14db149dc07ee6247b40b18a3d1a7eb012aee3cabe8b76fefa36a10daa4a62d345411773a1122edef574a31f785c1dc82f8e22d7bdee1e1364d7ce1e99f76305943ed60ed38f8fc237f9595534d2ee843e896c19db77dfd1a932799434185bede9617d9b11422471c53be543f031020db5718215f0758e114912ad1d587a1621c8272b"}}, @policy={0xac, 0x7, {{@in=@multicast2, @in=@remote, 0x4e20, 0x2, 0x4e22, 0x0, 0x2, 0x20, 0x0, 0x33, r5, 0xffffffffffffffff}, {0xba1, 0x4, 0xd, 0x32, 0xa, 0x5, 0x6, 0x7}, {0x9, 0x4, 0x8, 0x14fd53bc}, 0x9, 0x6e6bb1, 0x1, 0x0, 0x2, 0x1}}, @lastused={0xc, 0xf, 0xf2}, @lastused={0xc, 0xf, 0x8000}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 862.468026ms ago: executing program 2 (id=350): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x40) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xa) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) io_setup(0x4fe, &(0x7f00000009c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x1000000, 0x0, 0x0, 0x1, 0x40, r4, &(0x7f0000000200)='8', 0x1, 0x10000000005971}]) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$packet(0x11, 0x2, 0x300) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_disconnect(r0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 533.846871ms ago: executing program 4 (id=351): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4a}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 89.732174ms ago: executing program 4 (id=352): set_mempolicy(0x4005, 0x0, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0x8044000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r0, 0x89a3, &(0x7f0000000080)="94b58ec726ebd03a") syz_usb_connect$uac1(0x0, 0x7b, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000406b1d010140000102030109026900030100000209cc8e833f4a5412b10a24010000000201020524040205052405000709040100000500000000000000010102000009050109400008050007250100070000090402000001"], 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002400)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1b8, 0x12, 0x600, 0x3b8, 0x202, 0x3b8, 0x2e8, 0x2e8, 0x3b8, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x4000000}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd8, 0x200, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0xc9, 0x11, 0x3}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x8890) setns(0xc9, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e21, 0x802, @remote, 0xfffffffc}, 0x1c) socket(0x2a, 0x2, 0x9) r7 = socket(0x10, 0x3, 0x0) recvmmsg(r7, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 1 (id=353): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4040002}, 0x4000080) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) fsopen(&(0x7f00000003c0)='ecryptfs\x00', 0x1) r3 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000440)={0x0, 0x4ee24, 0x2000, 0x6, 0x15a}, &(0x7f0000000100), &(0x7f0000000400), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x4000000) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f0000000000)='f2fs\x00', 0x800401, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x10, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf}, 0x94) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000300)={0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040001) accept4(r0, 0x0, 0x0, 0x80000) syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_FIXED_FD_INSTALL={0x36, 0x15, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x6d36, 0x80000, 0x2, 0x1a6}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb578, 0x20, 0x1, 0x1cd, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x98a5, 0x2000, 0x1, 0x1aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6254, 0x20000, 0x3, 0xef, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x69b4, 0x200, 0x2, 0x194, 0x0, r4}}], 0x4, &(0x7f0000002340)={0x2e, 0x8, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, 0x0, '\x00', {0x3, 0xc51, 0x0, &(0x7f0000001340)=@buf_1k="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"}}, &(0x7f00000023c0)) kernel console output (not intermixed with test programs): lave_0 [ 76.181105][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.217075][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.228642][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.250039][ T5607] veth0_vlan: entered promiscuous mode [ 76.309305][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.318406][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.337481][ T5607] veth1_vlan: entered promiscuous mode [ 76.343020][ T30] audit: type=1400 audit(1785662956.946:152): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.aczsSo/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 76.367747][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.368710][ T30] audit: type=1400 audit(1785662956.946:153): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.382688][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.399043][ T30] audit: type=1400 audit(1785662956.946:154): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.aczsSo/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 76.399084][ T30] audit: type=1400 audit(1785662956.946:155): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 76.467693][ T30] audit: type=1400 audit(1785662956.956:156): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.aczsSo/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 76.510017][ T30] audit: type=1400 audit(1785662956.956:157): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.aczsSo/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 76.518824][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.543399][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.557387][ T30] audit: type=1400 audit(1785662956.956:158): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 76.577939][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.580109][ T30] audit: type=1400 audit(1785662957.016:159): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 76.592834][ T5608] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.612028][ T5618] veth0_vlan: entered promiscuous mode [ 76.628679][ T30] audit: type=1400 audit(1785662957.016:160): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="gadgetfs" ino=7566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 76.651728][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.653656][ T30] audit: type=1400 audit(1785662957.016:161): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 76.696542][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.732238][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.741475][ T5799] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1'. [ 76.751287][ T146] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.796541][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.809198][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.821681][ T5619] Bluetooth: hci1: command tx timeout [ 76.832407][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.842369][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.851548][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.864069][ T5618] veth1_vlan: entered promiscuous mode [ 76.905789][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.913323][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.914314][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.921681][ T5619] Bluetooth: hci0: command tx timeout [ 76.937258][ T5607] veth0_macvtap: entered promiscuous mode [ 76.939965][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.946604][ T5607] veth1_macvtap: entered promiscuous mode [ 76.977934][ T5619] Bluetooth: hci2: command tx timeout [ 77.054285][ T5619] Bluetooth: hci4: command tx timeout [ 77.060040][ T50] Bluetooth: hci3: command tx timeout [ 77.191216][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.366666][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.407232][ T5618] veth0_macvtap: entered promiscuous mode [ 77.416868][ T5618] veth1_macvtap: entered promiscuous mode [ 77.448954][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.461369][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.494252][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.544904][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.586858][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.750336][ T5814] capability: warning: `syz.1.8' uses deprecated v2 capabilities in a way that may be insecure [ 77.882878][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.893921][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.909611][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.925834][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.072944][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.410229][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.422889][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.436015][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.465208][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.465223][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.505621][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.505639][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.523185][ T188] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.706015][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.714253][ T188] usb 2-1: Using ep0 maxpacket: 16 [ 78.717811][ T188] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 78.737659][ T5831] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11'. [ 78.791575][ T188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 39, changing to 7 [ 78.791604][ T188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 18039, setting to 1024 [ 78.793638][ T188] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 78.793662][ T188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.793679][ T188] usb 2-1: Product: syz [ 78.793692][ T188] usb 2-1: Manufacturer: syz [ 78.793705][ T188] usb 2-1: SerialNumber: syz [ 78.827827][ T188] usb 2-1: config 0 descriptor?? [ 78.847826][ T188] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 78.902121][ T50] Bluetooth: hci1: command tx timeout [ 78.909750][ T188] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 78.977686][ T50] Bluetooth: hci0: command tx timeout [ 79.055383][ T50] Bluetooth: hci2: command tx timeout [ 79.134156][ T50] Bluetooth: hci3: command tx timeout [ 79.134184][ T50] Bluetooth: hci4: command tx timeout [ 79.234827][ T5842] vlan2: entered promiscuous mode [ 79.234859][ T5842] batadv0: entered promiscuous mode [ 79.980247][ T5847] Console: switching to colour VGA+ 80x25 [ 80.000802][ T188] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 80.001268][ T188] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 80.001751][ T188] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 80.001764][ T188] em28xx 2-1:0.0: No AC97 audio processor [ 80.119655][ T5850] syzkaller0: entered promiscuous mode [ 80.119669][ T5850] syzkaller0: entered allmulticast mode [ 80.160951][ T5856] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.14'. [ 80.160975][ T5856] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.14'. [ 80.245268][ T5856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14'. [ 80.552431][ T5836] ======================================================= [ 80.552431][ T5836] WARNING: The mand mount option has been deprecated and [ 80.552431][ T5836] and is ignored by this kernel. Remove the mand [ 80.552431][ T5836] option from the mount to silence this warning. [ 80.552431][ T5836] ======================================================= [ 80.641421][ T5844] warning: `syz.0.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.786623][ T5836] befs: (nbd0): unable to read superblock [ 81.414221][ T5342] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.483711][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 81.483725][ T30] audit: type=1400 audit(1785662962.086:234): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 81.525409][ T9] usb 2-1: USB disconnect, device number 2 [ 81.549719][ T9] em28xx 2-1:0.0: Disconnecting em28xx [ 81.590711][ T9] em28xx 2-1:0.0: Freeing device [ 81.597412][ T30] audit: type=1400 audit(1785662962.196:235): avc: denied { create } for pid=5872 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 81.641518][ T5342] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.685981][ T30] audit: type=1400 audit(1785662962.206:236): avc: denied { bind } for pid=5872 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 81.709802][ T5342] usb 5-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 81.853440][ T5878] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 81.861710][ T5878] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 81.864765][ T5342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 81.872422][ T5878] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 81.887006][ T5878] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 82.054572][ T30] audit: type=1400 audit(1785662962.206:237): avc: denied { create } for pid=5872 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 82.075439][ T30] audit: type=1400 audit(1785662962.236:238): avc: denied { wake_alarm } for pid=5871 comm="syz.1.21" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 82.120935][ T5342] usb 5-1: Product: syz [ 82.165234][ T30] audit: type=1400 audit(1785662962.266:239): avc: denied { write } for pid=5872 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 82.170708][ T5342] usb 5-1: Manufacturer: syz [ 82.205883][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 82.266264][ T30] audit: type=1400 audit(1785662962.826:240): avc: denied { ioctl } for pid=5872 comm="syz.3.19" path="socket:[8073]" dev="sockfs" ino=8073 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 82.307012][ T30] audit: type=1400 audit(1785662962.826:241): avc: denied { accept } for pid=5872 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 82.385151][ T5342] navman 5-1:1.0: navman converter detected [ 82.394204][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 82.423832][ T30] audit: type=1400 audit(1785662962.896:242): avc: denied { bind } for pid=5881 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.436449][ T5342] usb 5-1: navman converter now attached to ttyUSB0 [ 82.465565][ T9] usb 2-1: config 10 has an invalid interface number: 251 but max is 0 [ 82.487498][ T9] usb 2-1: config 10 has no interface number 0 [ 82.503560][ T9] usb 2-1: config 10 interface 251 has no altsetting 0 [ 82.529273][ T9] usb 2-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= 5.ff [ 82.552402][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.552426][ T9] usb 2-1: Product: syz [ 82.552441][ T9] usb 2-1: Manufacturer: syz [ 82.552455][ T9] usb 2-1: SerialNumber: syz [ 82.685978][ T188] usb 5-1: USB disconnect, device number 2 [ 82.688611][ T188] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 82.689228][ T188] navman 5-1:1.0: device disconnected [ 82.789787][ T9] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 82.799423][ T9] gspca_sunplus: reg_r err -71 [ 82.799482][ T9] sunplus 2-1:10.251: probe with driver sunplus failed with error -71 [ 82.809968][ T9] usb 2-1: USB disconnect, device number 3 [ 83.559926][ T30] audit: type=1400 audit(1785662963.686:243): avc: denied { write } for pid=5898 comm="syz.3.25" name="demux0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 84.061078][ T5909] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 84.061269][ T5909] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 84.062187][ T5909] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 84.062249][ T5909] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 84.084319][ T5734] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.494467][ T5734] usb 4-1: Using ep0 maxpacket: 8 [ 84.497194][ T5734] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.497232][ T5734] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 84.497245][ T5734] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.498628][ T5734] usb 4-1: config 0 descriptor?? [ 84.500414][ T5734] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 85.425416][ T5734] gspca_vc032x: reg_r err -110 [ 85.557840][ T5734] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 85.654264][ T188] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 85.805755][ T188] usb 1-1: unable to get BOS descriptor or descriptor too short [ 85.813898][ T188] usb 1-1: not running at top speed; connect to a high speed hub [ 85.824160][ T5706] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 85.832159][ T188] usb 1-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 85.842141][ T188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.850180][ T188] usb 1-1: Product: syz [ 85.854547][ T188] usb 1-1: Manufacturer: 伢뒕â¸êŸœá’¿æ–䮬뛨ȥ䞸瘯헇웪⵨íµÎƒë°–î»â¬‘喆ꓒǟ䊷縷薕න㚶Ꙫ鼔ê–௪爡훣 [ 85.868065][ T188] usb 1-1: SerialNumber: syz [ 85.987993][ T5706] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 85.997111][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.005150][ T5706] usb 5-1: Product: syz [ 86.010098][ T5706] usb 5-1: Manufacturer: syz [ 86.014709][ T5706] usb 5-1: SerialNumber: syz [ 86.024601][ T5734] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.098407][ T188] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 86.119087][ T188] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 86.156852][ T5931] comedi comedi4: bad chanlist[1]=0x0000009b chan=155 range length=2 [ 86.177003][ T5734] usb 3-1: Using ep0 maxpacket: 16 [ 86.190188][ T5734] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.205107][ T188] usb 1-1: USB disconnect, device number 2 [ 86.215623][ T5734] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.250598][ T5734] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 86.263343][ T805] cfg80211: failed to load regulatory.db [ 86.272458][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.284342][ T5734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.327468][ T5734] usb 3-1: config 0 descriptor?? [ 86.431722][ T5706] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 86.522539][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 86.522554][ T30] audit: type=1400 audit(1785662967.126:258): avc: denied { ioctl } for pid=5932 comm="syz.1.36" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5513 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 86.540263][ T5937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27'. [ 86.584296][ T30] audit: type=1400 audit(1785662967.136:259): avc: denied { bind } for pid=5902 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.604012][ T30] audit: type=1400 audit(1785662967.136:260): avc: denied { name_bind } for pid=5902 comm="syz.3.27" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 86.641758][ T30] audit: type=1400 audit(1785662967.136:261): avc: denied { node_bind } for pid=5902 comm="syz.3.27" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 86.672126][ T5734] usbhid 3-1:0.0: can't add hid device: -71 [ 86.672331][ T30] audit: type=1400 audit(1785662967.146:262): avc: denied { name_connect } for pid=5902 comm="syz.3.27" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 86.684010][ T5734] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 86.750975][ T5734] usb 3-1: USB disconnect, device number 2 [ 86.756736][ T30] audit: type=1400 audit(1785662967.146:263): avc: denied { ioctl } for pid=5902 comm="syz.3.27" path="socket:[8947]" dev="sockfs" ino=8947 ioctlcmd=0x9362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.790264][ T30] audit: type=1400 audit(1785662967.186:264): avc: denied { create } for pid=5902 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 86.819827][ T30] audit: type=1400 audit(1785662967.386:265): avc: denied { read write } for pid=5921 comm="syz.4.32" name="lp0" dev="devtmpfs" ino=2811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 86.848121][ T30] audit: type=1400 audit(1785662967.386:266): avc: denied { open } for pid=5921 comm="syz.4.32" path="/dev/usb/lp0" dev="devtmpfs" ino=2811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 86.876853][ T30] audit: type=1400 audit(1785662967.396:267): avc: denied { mount } for pid=5939 comm="syz.0.38" name="/" dev="configfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 86.908644][ T5945] FAULT_INJECTION: forcing a failure. [ 86.908644][ T5945] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 86.921822][ T5945] CPU: 0 UID: 0 PID: 5945 Comm: syz.0.38 Not tainted syzkaller #0 PREEMPT(full) [ 86.921845][ T5945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 86.921855][ T5945] Call Trace: [ 86.921860][ T5945] [ 86.921867][ T5945] dump_stack_lvl+0x100/0x190 [ 86.921894][ T5945] should_fail_ex.cold+0x5/0xa [ 86.921916][ T5945] strncpy_from_user+0x3b/0x2d0 [ 86.921942][ T5945] do_getname+0x78/0x390 [ 86.921968][ T5945] do_sys_openat2+0xc7/0x1e0 [ 86.921990][ T5945] ? __pfx_do_sys_openat2+0x10/0x10 [ 86.922012][ T5945] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 86.922036][ T5945] ? __fget_files+0x21f/0x3d0 [ 86.922059][ T5945] __x64_sys_openat+0x12d/0x210 [ 86.922081][ T5945] ? __pfx___x64_sys_openat+0x10/0x10 [ 86.922102][ T5945] ? ksys_write+0x1ac/0x250 [ 86.922136][ T5945] do_syscall_64+0x115/0x870 [ 86.922156][ T5945] ? clear_bhb_loop+0x40/0x90 [ 86.922177][ T5945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.922194][ T5945] RIP: 0033:0x7f9f71b9e019 [ 86.922209][ T5945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.922225][ T5945] RSP: 002b:00007f9f6fdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 86.922242][ T5945] RAX: ffffffffffffffda RBX: 00007f9f71e26090 RCX: 00007f9f71b9e019 [ 86.922253][ T5945] RDX: 0000000000020400 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 86.922263][ T5945] RBP: 00007f9f6fdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 86.922278][ T5945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.922288][ T5945] R13: 00007f9f71e26128 R14: 00007f9f71e26090 R15: 00007ffe30176408 [ 86.922310][ T5945] [ 87.380841][ T5950] loop5: detected capacity change from 0 to 7 [ 87.398105][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.407851][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 87.416224][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.425850][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 87.434610][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.444238][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 87.455025][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.464643][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 87.472828][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.482464][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 87.490452][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.500119][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 87.509427][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.519129][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 87.527361][ T5950] ldm_validate_partition_table(): Disk read failed. [ 87.540797][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.550506][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 87.561010][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.570656][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 87.587366][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.597045][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 87.619517][ T5950] Dev loop5: unable to read RDB block 0 [ 87.646918][ T188] usb 4-1: USB disconnect, device number 2 [ 87.676061][ T5950] loop5: unable to read partition table [ 87.697819][ T5950] loop5: partition table beyond EOD, truncated [ 87.726579][ T5950] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 87.831876][ T5956] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 87.945743][ T5956] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 87.962199][ T5956] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 87.970236][ T5956] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 88.085247][ T5959] netlink: 20 bytes leftover after parsing attributes in process `syz.0.41'. [ 89.046490][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.45'. [ 89.247829][ T805] usb 5-1: USB disconnect, device number 3 [ 90.210572][ T805] usblp0: removed [ 90.233472][ T5974] netlink: 4560 bytes leftover after parsing attributes in process `syz.4.46'. [ 90.245777][ T5974] netlink: 4560 bytes leftover after parsing attributes in process `syz.4.46'. [ 90.275927][ T5974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.46'. [ 90.350359][ T5983] mmap: syz.3.49 (5983) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.474170][ T5734] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.544831][ T188] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 90.605026][ T5734] usb 1-1: device descriptor read/64, error -71 [ 90.684326][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 90.726930][ T188] usb 2-1: unable to get BOS descriptor or descriptor too short [ 90.747128][ T188] usb 2-1: not running at top speed; connect to a high speed hub [ 90.765967][ T188] usb 2-1: config index 0 descriptor too short (expected 2076, got 18) [ 90.774623][ T188] usb 2-1: config 0 has an invalid interface number: 251 but max is -1 [ 90.788088][ T188] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 90.804136][ T188] usb 2-1: config 0 has no interface number 0 [ 90.810384][ T188] usb 2-1: too many endpoints for config 0 interface 251 altsetting 8: 111, using maximum allowed: 30 [ 90.827428][ T188] usb 2-1: config 0 interface 251 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 90.850946][ T188] usb 2-1: config 0 interface 251 has no altsetting 0 [ 90.862052][ T9] usb 5-1: config 2 has an invalid interface number: 228 but max is 0 [ 90.873370][ T9] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 90.883675][ T188] usb 2-1: New USB device found, idVendor=0df6, idProduct=0072, bcdDevice=f8.4f [ 90.903213][ T188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.911573][ T9] usb 5-1: config 2 has no interface number 0 [ 90.917945][ T188] usb 2-1: Product: syz [ 90.922162][ T9] usb 5-1: config 2 interface 228 altsetting 177 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 90.935836][ T188] usb 2-1: Manufacturer: syz [ 90.940456][ T188] usb 2-1: SerialNumber: syz [ 90.946744][ T9] usb 5-1: config 2 interface 228 has no altsetting 0 [ 90.958190][ T188] usb 2-1: config 0 descriptor?? [ 90.968827][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 90.979010][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.988971][ T9] usb 5-1: Product: syz [ 90.993178][ T9] usb 5-1: Manufacturer: syz [ 90.998170][ T9] usb 5-1: SerialNumber: syz [ 91.084814][ T5342] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.245462][ T5342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.282511][ T5342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.317627][ T5342] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 91.352423][ T5342] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.372281][ T5342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.402586][ T5342] usb 3-1: config 0 descriptor?? [ 91.634224][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 91.634243][ T30] audit: type=1400 audit(1785662972.216:300): avc: denied { create } for pid=6005 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 91.701867][ T30] audit: type=1400 audit(1785662972.306:301): avc: denied { read append } for pid=6003 comm="syz.3.56" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 91.756933][ T30] audit: type=1400 audit(1785662972.306:302): avc: denied { open } for pid=6003 comm="syz.3.56" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 91.757041][ T30] audit: type=1400 audit(1785662972.306:303): avc: denied { ioctl } for pid=6003 comm="syz.3.56" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 91.793137][ T6007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.56'. [ 91.898639][ T30] audit: type=1400 audit(1785662972.506:304): avc: denied { read write } for pid=6005 comm="syz.0.57" dev="sockfs" ino=9022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 91.971122][ T5342] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 92.628770][ T30] audit: type=1400 audit(1785662973.226:305): avc: denied { create } for pid=6018 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.628846][ T30] audit: type=1400 audit(1785662973.236:306): avc: denied { setopt } for pid=6018 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.652341][ T6019] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=94 sclass=netlink_xfrm_socket pid=6019 comm=syz.0.60 [ 92.660033][ T30] audit: type=1400 audit(1785662973.256:307): avc: denied { ioctl } for pid=6018 comm="syz.0.60" path="socket:[9046]" dev="sockfs" ino=9046 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.662851][ T30] audit: type=1400 audit(1785662973.266:308): avc: denied { read } for pid=6018 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.998829][ T6021] netlink: 48 bytes leftover after parsing attributes in process `syz.0.61'. [ 93.113351][ T188] usb 2-1: USB disconnect, device number 4 [ 93.201351][ T30] audit: type=1400 audit(1785662973.806:309): avc: denied { bind } for pid=6025 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.223077][ T6027] Bluetooth: MGMT ver 1.23 [ 93.332127][ T6026] Zero length message leads to an empty skb [ 93.469663][ T9] ims_pcu 5-1:2.228: Missing CDC union descriptor [ 93.493379][ T9] ims_pcu 5-1:2.228: probe with driver ims_pcu failed with error -22 [ 93.564475][ T9] usb 5-1: USB disconnect, device number 4 [ 93.644171][ T188] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 94.487723][ T5720] usb 3-1: USB disconnect, device number 3 [ 94.809641][ T6049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.927774][ T6049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.034367][ T5720] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 95.225868][ T5720] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 95.261571][ T5720] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 95.275900][ T29] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 95.290160][ T5720] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 95.317553][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.353589][ T6048] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 95.378746][ T5720] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 95.444469][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 95.467251][ T29] usb 5-1: config 143 has an invalid interface number: 184 but max is 0 [ 95.510957][ T29] usb 5-1: config 143 has no interface number 0 [ 95.549273][ T29] usb 5-1: config 143 interface 184 altsetting 9 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 95.585112][ T29] usb 5-1: config 143 interface 184 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.592502][ T5720] usb 1-1: USB disconnect, device number 5 [ 95.610840][ T29] usb 5-1: config 143 interface 184 has no altsetting 0 [ 95.637290][ T29] usb 5-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice=ff.3c [ 95.647353][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.667131][ T29] usb 5-1: Product: syz [ 95.671441][ T29] usb 5-1: Manufacturer: syz [ 95.676220][ T29] usb 5-1: SerialNumber: syz [ 95.924977][ T29] appletouch 5-1:143.184: Could not find int-in endpoint [ 95.946018][ T29] appletouch 5-1:143.184: probe with driver appletouch failed with error -5 [ 95.977053][ T6071] netlink: 'syz.2.74': attribute type 1 has an invalid length. [ 95.988477][ T29] usbhid 5-1:143.184: couldn't find an input interrupt endpoint [ 96.023123][ T29] usb 5-1: USB disconnect, device number 5 [ 96.254613][ T5720] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 96.343018][ T6078] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.351710][ T6078] IPv6: NLM_F_CREATE should be set when creating new route [ 96.596879][ T5720] usb 4-1: config 0 has no interfaces? [ 96.605280][ T5720] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 96.621697][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.639586][ T6076] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.655799][ T5720] usb 4-1: config 0 descriptor?? [ 96.743524][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 96.743540][ T30] audit: type=1400 audit(1785662977.346:337): avc: denied { unlink } for pid=6081 comm="syz.2.77" name="#1" dev="tmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 96.793890][ T30] audit: type=1400 audit(1785662977.396:338): avc: denied { setopt } for pid=6081 comm="syz.2.77" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.815895][ T30] audit: type=1400 audit(1785662977.396:339): avc: denied { mount } for pid=6081 comm="syz.2.77" name="/" dev="overlay" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 96.934229][ T188] usb 2-1: device descriptor read/64, error -71 [ 96.975382][ T30] audit: type=1400 audit(1785662977.586:340): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 97.675158][ T188] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 97.690702][ T30] audit: type=1400 audit(1785662978.296:341): avc: denied { write } for pid=6091 comm="syz.0.80" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 97.729433][ T6092] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 97.740329][ T6092] overlayfs: failed to set xattr on upper [ 97.746675][ T6092] overlayfs: ...falling back to redirect_dir=nofollow. [ 97.753632][ T30] audit: type=1400 audit(1785662978.336:342): avc: denied { mount } for pid=6091 comm="syz.0.80" name="/" dev="ramfs" ino=9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 97.785489][ T6092] overlayfs: ...falling back to metacopy=off. [ 97.792768][ T6092] overlayfs: ...falling back to index=off. [ 97.799578][ T6092] overlayfs: ...falling back to uuid=null. [ 97.805697][ T5720] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 97.813691][ T30] audit: type=1400 audit(1785662978.336:343): avc: denied { mounton } for pid=6091 comm="syz.0.80" path="/19/file0/file0" dev="ramfs" ino=9204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 97.841904][ T30] audit: type=1400 audit(1785662978.406:344): avc: denied { ioctl } for pid=6091 comm="syz.0.80" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 97.894880][ T188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.906835][ T30] audit: type=1400 audit(1785662978.506:345): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 97.927637][ T188] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 97.939063][ T188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.956688][ T188] usb 2-1: config 0 descriptor?? [ 97.986578][ T5720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.013872][ T5720] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 98.934127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.134187][ T30] audit: type=1400 audit(1785662979.136:346): avc: denied { mount } for pid=6098 comm="syz.0.82" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 99.144786][ T188] usbhid 2-1:0.0: can't add hid device: -71 [ 99.182377][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.234901][ T188] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 99.246366][ T5720] usb 3-1: config 0 descriptor?? [ 99.270183][ T188] usb 2-1: USB disconnect, device number 6 [ 99.290467][ T9] usb 4-1: USB disconnect, device number 3 [ 99.594613][ T5720] usbhid 3-1:0.0: can't add hid device: -71 [ 99.704298][ T5720] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 99.768584][ T188] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 99.823433][ T5720] usb 3-1: USB disconnect, device number 4 [ 99.995686][ T188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.014574][ T188] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 100.033486][ T188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.050042][ T188] usb 2-1: config 0 descriptor?? [ 100.204298][ T5720] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 100.258904][ T6117] netlink: 'syz.0.84': attribute type 6 has an invalid length. [ 100.316117][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 100.356234][ T5720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.370160][ T5720] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 100.383149][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.438581][ T5720] usb 3-1: config 0 descriptor?? [ 100.476306][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 100.497177][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.512407][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 100.529263][ T9] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=21.11 [ 100.541409][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.549647][ T9] usb 4-1: Product: syz [ 100.553903][ T9] usb 4-1: Manufacturer: syz [ 100.558783][ T9] usb 4-1: SerialNumber: syz [ 100.633104][ T9] usb 4-1: config 0 descriptor?? [ 101.017574][ T5734] usb 4-1: USB disconnect, device number 4 [ 101.220157][ T188] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 101.234456][ T188] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 101.544977][ T188] usb 2-1: USB disconnect, device number 7 [ 101.550873][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 101.626768][ T5720] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 101.636104][ T5720] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 101.695031][ T5734] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 102.037894][ T5734] usb 5-1: unable to get BOS descriptor or descriptor too short [ 102.146694][ T5734] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 64, setting to 0 [ 102.233552][ T5734] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 150, changing to 4 [ 102.251743][ T805] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 102.356352][ T5734] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 102.398172][ T5720] usb 3-1: USB disconnect, device number 5 [ 102.404061][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 102.405965][ T5734] usb 5-1: language id specifier not provided by device, defaulting to English [ 102.434981][ T5734] usb 5-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 102.445522][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.453661][ T5734] usb 5-1: Manufacturer: 쾗휬nâ¤ç™¯åƒŽâ†¢å¨°å¬¿åŸµé«§è„½áŒä¦®ïŽè¯¨ä¡å±°æ¶ªã»žç¢ë°¬ë‹¨éˆ€é“…⺰ᆵ텸℞貒总Ⰰ㋵ê³å‚§â¶±â¢²ë¹€ë¬¸ÍŒç½¿ä¨šê©¨î½šÝ”Þ¥ [ 102.515096][ T805] usb 2-1: Using ep0 maxpacket: 32 [ 102.523263][ T805] usb 2-1: unable to get BOS descriptor or descriptor too short [ 102.537575][ T805] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.548272][ T805] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.560263][ T805] usb 2-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 102.569800][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.597101][ T805] usb 2-1: Product: syz [ 102.605572][ T805] usb 2-1: Manufacturer: syz [ 102.621860][ T805] usb 2-1: SerialNumber: syz [ 102.707798][ T5734] usb 5-1: low speed audio streaming not supported [ 102.722525][ T5734] usb 5-1: low speed audio streaming not supported [ 102.816958][ T5734] usb 5-1: USB disconnect, device number 6 [ 102.829816][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 102.829830][ T30] audit: type=1400 audit(1785662983.436:352): avc: denied { watch } for pid=6140 comm="syz.2.93" path="/18/file1" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 102.886702][ T6144] process 'syz.3.94' launched './file2' with NULL argv: empty string added [ 102.947114][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.991077][ T30] audit: type=1400 audit(1785662983.486:353): avc: denied { watch_mount } for pid=6130 comm="syz.1.91" path="/13/file0" dev="tmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.066901][ T6146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.93'. [ 103.067499][ T30] audit: type=1400 audit(1785662983.486:354): avc: denied { watch } for pid=6130 comm="syz.1.91" path="/13" dev="tmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 103.172777][ T6147] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 103.930233][ T30] audit: type=1400 audit(1785662983.506:355): avc: denied { watch_sb watch_reads } for pid=6140 comm="syz.2.93" path="/18/file1" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 104.748418][ T805] usb 2-1: cannot find UAC_HEADER [ 104.784555][ T30] audit: type=1400 audit(1785662983.546:356): avc: denied { execute_no_trans } for pid=6142 comm="syz.3.94" path="/20/file2" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 104.926791][ T30] audit: type=1400 audit(1785662983.586:357): avc: denied { create } for pid=6142 comm="syz.3.94" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 104.955166][ T805] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 105.001854][ T805] usb 2-1: USB disconnect, device number 8 [ 105.075635][ T30] audit: type=1400 audit(1785662985.686:358): avc: denied { setopt } for pid=6160 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 105.102480][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.159327][ T30] audit: type=1400 audit(1785662985.766:359): avc: denied { ioctl } for pid=6160 comm="syz.3.98" path="socket:[10335]" dev="sockfs" ino=10335 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 105.194222][ T188] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 105.214153][ T5720] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 105.373328][ T30] audit: type=1400 audit(1785662985.976:360): avc: denied { read write } for pid=6152 comm="syz.1.97" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 105.403583][ T30] audit: type=1400 audit(1785662985.976:361): avc: denied { open } for pid=6152 comm="syz.1.97" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 105.404252][ T188] usb 1-1: Using ep0 maxpacket: 32 [ 105.457925][ T5720] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 105.471263][ T6154] syzkaller0: entered promiscuous mode [ 105.476886][ T5720] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.490904][ T6154] syzkaller0: entered allmulticast mode [ 105.501788][ T5720] usb 5-1: config 0 has no interface number 0 [ 105.516798][ T188] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 105.527459][ T188] usb 1-1: config 0 has no interface number 0 [ 105.544981][ T188] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 105.545007][ T188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.545023][ T188] usb 1-1: Product: syz [ 105.545045][ T188] usb 1-1: Manufacturer: syz [ 105.545079][ T188] usb 1-1: SerialNumber: syz [ 105.546988][ T5720] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 105.547014][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.547038][ T5720] usb 5-1: Product: syz [ 105.547050][ T5720] usb 5-1: Manufacturer: syz [ 105.547063][ T5720] usb 5-1: SerialNumber: syz [ 105.549594][ T188] usb 1-1: config 0 descriptor?? [ 105.550738][ T5720] usb 5-1: config 0 descriptor?? [ 105.558138][ T188] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 105.558163][ T188] usb 1-1: selecting invalid altsetting 1 [ 105.558177][ T188] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 105.579521][ T6165] netlink: 4560 bytes leftover after parsing attributes in process `syz.3.99'. [ 105.579545][ T6165] netlink: 4560 bytes leftover after parsing attributes in process `syz.3.99'. [ 105.587451][ T188] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 105.819399][ T188] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 105.829251][ T188] usb 1-1: media controller created [ 105.845313][ T188] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.859262][ T6164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.99'. [ 106.407830][ T6158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.95'. [ 106.422682][ T6158] bridge_slave_1: left allmulticast mode [ 106.428758][ T6158] bridge_slave_1: left promiscuous mode [ 106.448470][ T6158] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.710125][ T6158] bridge_slave_0: left allmulticast mode [ 106.723456][ T188] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 106.741647][ T6158] bridge_slave_0: left promiscuous mode [ 106.756940][ T188] zl10353_read_register: readreg error (reg=127, ret==-71) [ 106.790181][ T6158] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.790322][ T188] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 106.891595][ T188] usb 1-1: USB disconnect, device number 6 [ 106.999669][ T6180] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.094838][ T5706] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 107.184818][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.107'. [ 107.294365][ T5706] usb 2-1: Using ep0 maxpacket: 32 [ 107.323439][ T5706] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.345010][ T5706] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 107.357818][ T5706] usb 2-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 107.370600][ T5706] usb 2-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 107.387831][ T5706] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 107.428232][ T5706] usb 2-1: config 1 interface 1 has no altsetting 0 [ 107.452889][ T5706] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 107.463989][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.483635][ T5706] usb 2-1: Product: syz [ 107.500858][ T5706] usb 2-1: Manufacturer: syz [ 107.555786][ T5706] usb 2-1: SerialNumber: syz [ 107.610075][ T5720] uvcvideo 5-1:0.64: probe with driver uvcvideo failed with error -22 [ 107.639354][ T5720] usb 5-1: USB disconnect, device number 7 [ 107.793606][ T5706] usb 2-1: selecting invalid altsetting 0 [ 107.801549][ T5706] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 107.810826][ T5706] usb 2-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 107.869069][ T5706] usb 2-1: USB disconnect, device number 9 [ 108.252956][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 108.252979][ T30] audit: type=1400 audit(1785662988.856:401): avc: denied { write } for pid=6210 comm="syz.2.113" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 108.289452][ T30] audit: type=1400 audit(1785662988.896:402): avc: denied { open } for pid=6210 comm="syz.2.113" path="/dev/ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 108.304293][ T6211] ip6gre0: entered promiscuous mode [ 108.358133][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.112'. [ 108.392261][ T6215] Invalid ELF header magic: != ELF [ 108.427369][ T30] audit: type=1400 audit(1785662988.956:403): avc: denied { connect } for pid=6210 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 108.496203][ T30] audit: type=1400 audit(1785662988.996:404): avc: denied { module_load } for pid=6213 comm="syz.0.114" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 108.655111][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.956101][ T6213] ALSA: mixer_oss: invalid OSS volume 'ÆHßÿCW˜òùÇðé!Γägd$Ź¡r' [ 109.037436][ T6213] ALSA: mixer_oss: invalid OSS volume '`²' [ 109.111131][ T6213] ALSA: mixer_oss: invalid OSS volume 'Sy£Nº-]'qÆûš©Z¨€Bx½74Ï"¥ê$•ýT' [ 109.138781][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.191949][ T6213] ALSA: mixer_oss: invalid OSS volume 'ˆÖÏ4i B眜æÊxÊ¡E#6éó1WÐY3/' [ 109.253135][ T6213] ALSA: mixer_oss: invalid OSS volume 'mÑ0çQzØiRw+¡^N¯g$¾“‹ýî' [ 109.390823][ T6213] ALSA: mixer_oss: invalid OSS volume '}c®¼\êQö' [ 109.451228][ T6213] ALSA: mixer_oss: invalid OSS volume 't{•fÀhÌñ¯“îžo•(ÿyâù‰8;¦¦¾ÄcK' [ 109.478262][ T30] audit: type=1400 audit(1785662989.476:405): avc: denied { block_suspend } for pid=6218 comm="syz.1.115" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 109.556248][ T6213] ALSA: mixer_oss: invalid OSS volume 'J˜è̽ö?‰—ùd6àþoý¿GÿóS°†«Ô£' [ 109.628633][ T6213] ALSA: mixer_oss: invalid OSS volume 'ª' [ 109.694840][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.739960][ T6213] ALSA: mixer_oss: invalid OSS volume 'Oÿð"F4G%wÜ 5©ÁS@Ÿ+ÝÁ“² M$Mœ»Õ' [ 109.771126][ T30] audit: type=1400 audit(1785662990.366:406): avc: denied { map } for pid=6227 comm="syz.2.117" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 109.937277][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.178991][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.117'. [ 110.258718][ T6226] xt_l2tp: wrong L2TP version: 0 [ 110.305121][ T5619] Bluetooth: hci0: unexpected event 0x2f length: 763 > 260 [ 110.305151][ T5619] Bluetooth: hci0: Malformed Event: 0x2f [ 110.721582][ T29] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 110.825923][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.889875][ T5720] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 111.000302][ T29] usb 3-1: config 255 has an invalid interface number: 97 but max is 0 [ 111.050412][ T29] usb 3-1: config 255 has no interface number 0 [ 111.083038][ T29] usb 3-1: config 255 interface 97 has no altsetting 0 [ 111.122126][ T29] usb 3-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 111.340084][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.353211][ T29] usb 3-1: Product: syz [ 111.362702][ T29] usb 3-1: Manufacturer: syz [ 111.377817][ T29] usb 3-1: SerialNumber: syz [ 111.459585][ T5720] usb 5-1: Using ep0 maxpacket: 16 [ 111.492106][ T5720] usb 5-1: config 9 has an invalid interface number: 189 but max is 0 [ 111.519889][ T5720] usb 5-1: config 9 has an invalid interface association descriptor of length 2, skipping [ 111.533094][ T30] audit: type=1400 audit(1785662992.126:407): avc: denied { write } for pid=6260 comm="syz.1.127" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 111.569153][ T5720] usb 5-1: config 9 has no interface number 0 [ 111.586510][ T30] audit: type=1400 audit(1785662992.126:408): avc: denied { open } for pid=6260 comm="syz.1.127" path="/dev/input/mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 111.624437][ T5720] usb 5-1: New USB device found, idVendor=19d2, idProduct=fffc, bcdDevice=ac.a6 [ 111.636764][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.669266][ T30] audit: type=1400 audit(1785662992.126:409): avc: denied { getopt } for pid=6260 comm="syz.1.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 111.691178][ T5720] usb 5-1: Product: syz [ 111.699323][ T5720] usb 5-1: Manufacturer: syz [ 111.710918][ T5720] usb 5-1: SerialNumber: syz [ 111.798932][ T29] rndis_host 3-1:255.97: ACM capabilities 01, not really RNDIS? [ 111.835255][ T5705] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 111.844672][ T29] usb 3-1: USB disconnect, device number 6 [ 111.875960][ T6247] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.876110][ T805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.883790][ T6247] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.939261][ T30] audit: type=1400 audit(1785662992.536:410): avc: denied { bind } for pid=6240 comm="syz.4.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 112.079590][ T6247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.100824][ T6247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.122702][ T6241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.134177][ T5705] usb 4-1: Using ep0 maxpacket: 16 [ 112.142629][ T5705] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 112.150961][ T5705] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.162681][ T5705] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 112.167586][ T6241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.172599][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.183336][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.501215][ T5720] cdc_ether 5-1:9.189: invalid descriptor buffer length [ 112.533901][ T5720] usb 5-1: No union descriptors [ 112.596953][ T5705] usb 4-1: config 0 descriptor?? [ 112.610611][ T5705] pxrc 4-1:0.0: Could not find endpoint [ 112.610814][ T5720] usb 5-1: USB disconnect, device number 8 [ 112.714576][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.724185][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.747740][ T142] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.756980][ T142] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.887490][ T29] usb 4-1: USB disconnect, device number 5 [ 112.909668][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.934170][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 112.967164][ T6289] netlink: 'syz.1.133': attribute type 1 has an invalid length. [ 112.976067][ T6289] netlink: 244 bytes leftover after parsing attributes in process `syz.1.133'. [ 113.084309][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 113.091357][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.101918][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.111927][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 113.121101][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 113.129473][ T9] usb 1-1: SerialNumber: syz [ 113.148213][ T9] usb 1-1: 0:2 : does not exist [ 114.020619][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 114.020631][ T30] audit: type=1400 audit(1785662994.626:415): avc: denied { kexec_image_load } for pid=6293 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 114.052311][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.112103][ T30] audit: type=1400 audit(1785662994.706:416): avc: denied { append } for pid=6293 comm="syz.2.135" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 114.238338][ T30] audit: type=1400 audit(1785662994.846:417): avc: denied { write } for pid=6293 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 114.305280][ T30] audit: type=1400 audit(1785662994.876:418): avc: denied { read } for pid=6293 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 114.366916][ T6302] netlink: 4560 bytes leftover after parsing attributes in process `syz.3.136'. [ 114.420753][ T6302] netlink: 4560 bytes leftover after parsing attributes in process `syz.3.136'. [ 114.441374][ T6298] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 114.462501][ T6305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.136'. [ 114.668895][ T30] audit: type=1400 audit(1785662995.276:419): avc: denied { remount } for pid=6308 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 114.718984][ T6312] SELinux: failed to load policy [ 114.757145][ T30] audit: type=1400 audit(1785662995.306:420): avc: denied { setopt } for pid=6308 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 114.824404][ T30] audit: type=1400 audit(1785662995.306:421): avc: denied { connect } for pid=6311 comm="syz.4.140" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.934122][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 114.952866][ T6319] capability: warning: `syz.4.141' uses 32-bit capabilities (legacy support in use) [ 114.964787][ T30] audit: type=1400 audit(1785662995.326:422): avc: denied { ioctl } for pid=6311 comm="syz.4.140" path="socket:[10835]" dev="sockfs" ino=10835 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.998218][ T30] audit: type=1400 audit(1785662995.326:423): avc: denied { load_policy } for pid=6311 comm="syz.4.140" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 115.021325][ T6320] lo speed is unknown, defaulting to 1000 [ 115.027211][ T6320] lo speed is unknown, defaulting to 1000 [ 115.034265][ T6320] lo speed is unknown, defaulting to 1000 [ 115.040772][ T6320] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 115.055242][ T6320] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 115.067584][ T5342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.072211][ T6320] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 115.092800][ T6320] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 115.105599][ T6320] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 115.127502][ T6320] lo speed is unknown, defaulting to 1000 [ 115.134228][ T6320] lo speed is unknown, defaulting to 1000 [ 115.140794][ T6320] lo speed is unknown, defaulting to 1000 [ 115.148192][ T6320] lo speed is unknown, defaulting to 1000 [ 115.155428][ T6320] lo speed is unknown, defaulting to 1000 [ 115.198064][ T30] audit: type=1400 audit(1785662995.336:424): avc: denied { create } for pid=6311 comm="syz.4.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 115.219811][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.634472][ T5342] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 115.775248][ T6333] netlink: 3 bytes leftover after parsing attributes in process `syz.1.144'. [ 115.779472][ T6335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 115.792453][ T6333] netlink: 264 bytes leftover after parsing attributes in process `syz.1.144'. [ 115.824650][ T5342] usb 3-1: Using ep0 maxpacket: 32 [ 115.840526][ T5342] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 115.860351][ T5342] usb 3-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 115.877429][ T5342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.893903][ T5342] usb 3-1: Product: syz [ 115.903398][ T5342] usb 3-1: Manufacturer: syz [ 115.913088][ T5342] usb 3-1: SerialNumber: syz [ 115.931590][ T6328] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 116.121846][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.579193][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.630057][ T6328] netlink: 'syz.2.143': attribute type 13 has an invalid length. [ 116.645560][ T6328] netlink: 'syz.2.143': attribute type 17 has an invalid length. [ 117.310565][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.407533][ T9] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 117.425158][ T9] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 117.427250][ T6328] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 117.443869][ T9] usb 1-1: [5] FU [Feature 5 Playback Volume] ch = 1, val = 0/1/1 [ 117.553787][ T6356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.149'. [ 117.568446][ T6356] netlink: 32 bytes leftover after parsing attributes in process `syz.1.149'. [ 117.580977][ T6356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.149'. [ 117.592541][ T6356] netlink: 32 bytes leftover after parsing attributes in process `syz.1.149'. [ 117.837014][ T9] usb 1-1: USB disconnect, device number 7 [ 118.247712][ T5342] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 118.262584][ T6377] netlink: 20 bytes leftover after parsing attributes in process `syz.1.154'. [ 118.275946][ T5342] usb 3-1: MIDIStreaming interface descriptor not found [ 118.339452][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.608785][ T805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.618277][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.628809][ T6377] team0 (unregistering): Port device team_slave_0 removed [ 119.637833][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.800228][ T6388] FAULT_INJECTION: forcing a failure. [ 119.800228][ T6388] name failslab, interval 1, probability 0, space 0, times 1 [ 119.812942][ T6388] CPU: 0 UID: 0 PID: 6388 Comm: syz.0.155 Not tainted syzkaller #0 PREEMPT(full) [ 119.812966][ T6388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 119.812977][ T6388] Call Trace: [ 119.812984][ T6388] [ 119.812991][ T6388] dump_stack_lvl+0x100/0x190 [ 119.813018][ T6388] should_fail_ex.cold+0x5/0xa [ 119.813041][ T6388] should_failslab+0xc2/0x120 [ 119.813065][ T6388] kmem_cache_alloc_noprof+0x91/0x6a0 [ 119.813086][ T6388] ? preempt_schedule_thunk+0x16/0x40 [ 119.813104][ T6388] ? alloc_empty_file+0x5b/0x1c0 [ 119.813131][ T6388] alloc_empty_file+0x5b/0x1c0 [ 119.813155][ T6388] alloc_file_pseudo+0x183/0x290 [ 119.813180][ T6388] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 119.813207][ T6388] ? _raw_spin_unlock+0x28/0x50 [ 119.813225][ T6388] ? alloc_fd+0x471/0x7a0 [ 119.813246][ T6388] __anon_inode_getfile+0xe8/0x280 [ 119.813275][ T6388] __anon_inode_getfd+0x5c/0xe0 [ 119.813303][ T6388] __x64_sys_fsopen+0x190/0x220 [ 119.813330][ T6388] do_syscall_64+0x115/0x870 [ 119.813351][ T6388] ? clear_bhb_loop+0x40/0x90 [ 119.813372][ T6388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.813389][ T6388] RIP: 0033:0x7f9f71b9e019 [ 119.813404][ T6388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.813418][ T6388] RSP: 002b:00007f9f6fdf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 119.813434][ T6388] RAX: ffffffffffffffda RBX: 00007f9f71e26090 RCX: 00007f9f71b9e019 [ 119.813444][ T6388] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000040 [ 119.813454][ T6388] RBP: 00007f9f6fdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 119.813463][ T6388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.813473][ T6388] R13: 00007f9f71e26128 R14: 00007f9f71e26090 R15: 00007ffe30176408 [ 119.813495][ T6388] [ 120.247791][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.327622][ T6377] team0 (unregistering): Port device team_slave_1 removed [ 120.832029][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.855814][ T5342] usb 3-1: USB disconnect, device number 7 [ 121.059538][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 121.059554][ T30] audit: type=1400 audit(1785663001.666:440): avc: denied { create } for pid=6396 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.644386][ T5342] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 121.646230][ T6406] __nla_validate_parse: 1 callbacks suppressed [ 121.646243][ T6406] netlink: 156 bytes leftover after parsing attributes in process `syz.3.159'. [ 121.671439][ T30] audit: type=1400 audit(1785663001.696:441): avc: denied { getopt } for pid=6396 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.820923][ T30] audit: type=1400 audit(1785663002.426:442): avc: denied { listen } for pid=6408 comm="syz.4.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.856863][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.885608][ T5342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.908152][ T6394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=6394 comm=syz.3.159 [ 121.921546][ T5342] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 121.941816][ T5342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.052485][ T5342] usb 3-1: config 0 descriptor?? [ 122.144034][ T30] audit: type=1400 audit(1785663002.746:443): avc: denied { read write } for pid=6414 comm="syz.4.163" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 122.168619][ T30] audit: type=1400 audit(1785663002.776:444): avc: denied { open } for pid=6414 comm="syz.4.163" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 122.206023][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 122.292013][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 122.344472][ T5342] usbhid 3-1:0.0: can't add hid device: -71 [ 122.350476][ T5342] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 122.398904][ T5342] usb 3-1: USB disconnect, device number 8 [ 122.654247][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.730577][ T30] audit: type=1400 audit(1785663003.336:445): avc: denied { search } for pid=5271 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.788224][ T30] audit: type=1400 audit(1785663003.366:446): avc: denied { search } for pid=5271 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.812600][ T30] audit: type=1400 audit(1785663003.366:447): avc: denied { search } for pid=5271 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.838694][ T6418] can0: slcan on ptm0. [ 122.844153][ T30] audit: type=1400 audit(1785663003.366:448): avc: denied { read } for pid=5271 comm="dhcpcd" name="n30" dev="tmpfs" ino=2726 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 122.865918][ T5342] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 122.896387][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.957220][ T6427] Driver unsupported XDP return value 0 on prog (id 24) dev N/A, expect packet loss! [ 122.969442][ T30] audit: type=1400 audit(1785663003.366:449): avc: denied { open } for pid=5271 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2726 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 123.026076][ T5342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.060603][ T5342] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 123.092122][ T5342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.114026][ T6433] netlink: 'syz.0.164': attribute type 10 has an invalid length. [ 123.129980][ T5342] usb 3-1: config 0 descriptor?? [ 123.948993][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.340707][ T5342] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 124.420638][ T6418] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.490520][ T5342] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 124.536660][ T6418] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.751514][ T5342] usb 3-1: USB disconnect, device number 9 [ 124.757404][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 124.976195][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.485336][ T6436] lo: entered promiscuous mode [ 125.503848][ T6436] tunl0: entered promiscuous mode [ 125.519053][ T6436] gre0: entered promiscuous mode [ 125.538738][ T6436] gretap0: entered promiscuous mode [ 125.558394][ T6436] erspan0: entered promiscuous mode [ 125.571407][ T6436] ip_vti0: entered promiscuous mode [ 125.604358][ T6436] ip6_vti0: entered promiscuous mode [ 125.621993][ T6436] sit0: entered promiscuous mode [ 125.638162][ T6436] ip6tnl0: entered promiscuous mode [ 125.672258][ T6436] ip6gre0: entered promiscuous mode [ 125.694355][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.706398][ T6436] syz_tun: entered promiscuous mode [ 125.736962][ T6436] ip6gretap0: entered promiscuous mode [ 125.786316][ T6436] bridge0: entered promiscuous mode [ 125.810256][ T6436] vcan0: entered promiscuous mode [ 125.835804][ T6436] bond0: entered promiscuous mode [ 125.843064][ T6436] bond_slave_0: entered promiscuous mode [ 125.869492][ T6436] bond_slave_1: entered promiscuous mode [ 125.915993][ T6436] team0: entered promiscuous mode [ 125.922773][ T6462] netlink: 'syz.3.171': attribute type 1 has an invalid length. [ 125.931564][ T6436] team_slave_0: entered promiscuous mode [ 125.942939][ T6436] team_slave_1: entered promiscuous mode [ 125.957150][ T6462] netlink: 'syz.3.171': attribute type 1 has an invalid length. [ 126.017294][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.093272][ T6436] dummy0: entered promiscuous mode [ 126.126376][ T6436] nlmon0: entered promiscuous mode [ 126.143766][ T6436] batadv0: entered promiscuous mode [ 126.170779][ T6436] vxcan0: entered promiscuous mode [ 126.192005][ T6436] vxcan1: entered promiscuous mode [ 126.362369][ T6436] veth0: entered promiscuous mode [ 126.614737][ T6436] veth1: entered promiscuous mode [ 126.922157][ T6436] wg0: entered promiscuous mode [ 127.016449][ T6436] wg1: entered promiscuous mode [ 127.062317][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.095595][ T6436] wg2: entered promiscuous mode [ 127.151583][ T6436] veth0_to_bridge: entered promiscuous mode [ 127.216471][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.227332][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.236947][ T6436] veth1_to_bridge: entered promiscuous mode [ 127.282081][ T6436] veth0_to_bond: entered promiscuous mode [ 127.300258][ T6436] veth1_to_bond: entered promiscuous mode [ 127.321994][ T6436] veth0_to_team: entered promiscuous mode [ 127.343674][ T6436] veth1_to_team: entered promiscuous mode [ 127.366581][ T6436] veth0_to_batadv: entered promiscuous mode [ 127.390790][ T6436] batadv_slave_0: entered promiscuous mode [ 127.405156][ T6436] veth1_to_batadv: entered promiscuous mode [ 127.422048][ T6436] batadv_slave_1: entered promiscuous mode [ 127.440377][ T6436] xfrm0: entered promiscuous mode [ 127.459970][ T6436] veth0_to_hsr: entered promiscuous mode [ 127.481041][ T6436] veth1_to_hsr: entered promiscuous mode [ 127.504035][ T6436] hsr0: entered promiscuous mode [ 127.528244][ T6436] veth1_virt_wifi: entered promiscuous mode [ 127.557379][ T6436] veth0_virt_wifi: entered promiscuous mode [ 127.578507][ T6436] virt_wifi0: entered promiscuous mode [ 127.603838][ T6436] vlan0: entered promiscuous mode [ 127.626747][ T6436] vlan1: entered promiscuous mode [ 127.647647][ T6436] macvlan0: entered promiscuous mode [ 127.668461][ T6436] macvlan1: entered promiscuous mode [ 127.684911][ T6436] ipvlan0: entered promiscuous mode [ 127.716586][ T6436] ipvlan1: entered promiscuous mode [ 127.734041][ T6436] macvtap0: entered promiscuous mode [ 127.759829][ T6436] macsec0: entered promiscuous mode [ 127.784798][ T6436] geneve0: entered promiscuous mode [ 127.810539][ T6436] geneve1: entered promiscuous mode [ 127.832081][ T6436] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 127.846166][ T6479] Cannot find add_set index 0 as target [ 128.099810][ T805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.140560][ T6436] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 128.159566][ T6436] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 128.181016][ T6436] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 128.197946][ T6436] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 128.220047][ T6436] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 128.237826][ T6433] bridge0: left promiscuous mode [ 128.255189][ T6433] bridge0: entered promiscuous mode [ 128.265568][ T6433] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 128.295204][ T6477] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 128.309630][ T6477] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 128.376151][ T6416] can0 (unregistered): slcan off ptm0. [ 128.481898][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 128.481913][ T30] audit: type=1400 audit(1785663009.086:467): avc: denied { create } for pid=6485 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 128.587162][ T6493] netlink: 'syz.3.179': attribute type 23 has an invalid length. [ 128.654798][ T30] audit: type=1400 audit(1785663009.096:468): avc: denied { append } for pid=6486 comm="syz.3.179" name="001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 128.747190][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.958360][ T6487] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 129.136132][ T5342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.345101][ T805] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 129.517311][ T30] audit: type=1400 audit(1785663010.126:469): avc: denied { write } for pid=6483 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.572114][ T805] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 129.599287][ T805] usb 5-1: config 0 has no interface number 0 [ 129.629452][ T805] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 129.674926][ T805] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 129.721203][ T805] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 129.721904][ T6514] binder: 6511:6514 ioctl c00c620f 200000000180 returned -22 [ 129.733156][ T30] audit: type=1400 audit(1785663010.326:470): avc: denied { ioctl } for pid=6511 comm="syz.0.181" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x620f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 129.871458][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.013996][ T805] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 130.099939][ T805] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 130.133673][ T30] audit: type=1400 audit(1785663010.606:471): avc: denied { write } for pid=6518 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.174345][ T5342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.183926][ T805] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 130.212239][ T805] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 130.233209][ T805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.412068][ T805] usb 5-1: config 0 descriptor?? [ 130.732383][ T6501] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 130.746251][ T6501] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 130.773543][ T805] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 130.985652][ T6501] ldusb 5-1:0.55: Write buffer overflow, 1 bytes dropped [ 130.985656][ T30] audit: type=1400 audit(1785663011.596:472): avc: denied { write } for pid=6529 comm="syz.0.187" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 131.020877][ T6530] random: crng reseeded on system resumption [ 131.030796][ T30] audit: type=1400 audit(1785663011.626:473): avc: denied { open } for pid=6529 comm="syz.0.187" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 131.033114][ T6501] binder: 6500:6501 ioctl 4018620d 0 returned -22 [ 131.074221][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.125969][ T5720] hid (null): report_id 33474 is invalid [ 131.144887][ T30] audit: type=1400 audit(1785663011.696:474): avc: denied { connect } for pid=6529 comm="syz.0.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 131.212305][ T805] usb 5-1: USB disconnect, device number 9 [ 131.213908][ T5720] hid-generic 0005:4C4A:5505.0003: collection stack underflow [ 131.221024][ T5342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.236126][ T805] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 131.275986][ T5720] hid-generic 0005:4C4A:5505.0003: item 0 2 0 12 parsing failed [ 131.308847][ T5720] hid-generic 0005:4C4A:5505.0003: probe with driver hid-generic failed with error -22 [ 131.562633][ T30] audit: type=1400 audit(1785663011.166:475): avc: denied { bind } for pid=6548 comm="syz.1.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 131.607646][ T6547] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 131.758008][ T30] audit: type=1400 audit(1785663011.366:476): avc: denied { read } for pid=6554 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 131.779608][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.254559][ T805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.328774][ T6567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.832559][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888031b67c00: rx timeout, send abort [ 132.914246][ T805] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 133.074240][ T805] usb 4-1: Using ep0 maxpacket: 8 [ 133.086781][ T805] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 133.100835][ T6590] lo speed is unknown, defaulting to 1000 [ 133.107565][ T805] usb 4-1: config 0 has no interface number 0 [ 133.113707][ T805] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 133.114167][ T5720] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 133.127428][ T805] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 133.154240][ T805] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 133.171147][ T805] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 133.192925][ T805] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 133.202425][ T805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.218630][ T805] usb 4-1: config 0 descriptor?? [ 133.245203][ T805] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 133.295174][ T5705] net_ratelimit: 5 callbacks suppressed [ 133.295190][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.299500][ T5720] usb 1-1: Using ep0 maxpacket: 16 [ 133.332749][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888031b67000: rx timeout, send abort [ 133.333096][ T5720] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 133.342150][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888031b67c00: abort rx timeout. Force session deactivation [ 133.425075][ T5720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 133.548360][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 133.548375][ T30] audit: type=1400 audit(1785663013.156:487): avc: denied { map } for pid=6592 comm="syz.2.206" path="/newroot/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 133.749727][ T5720] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 133.772559][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.780656][ T30] audit: type=1400 audit(1785663013.376:488): avc: denied { map } for pid=6574 comm="syz.3.201" path="socket:[12477]" dev="sockfs" ino=12477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 133.835055][ T5720] usb 1-1: Product: syz [ 133.841108][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888031b67000: abort rx timeout. Force session deactivation [ 133.854651][ T5720] usb 1-1: Manufacturer: syz [ 133.875576][ T5720] usb 1-1: SerialNumber: syz [ 133.916291][ T5720] usb 1-1: config 0 descriptor?? [ 133.954750][ T5720] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 133.965154][ T5720] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 134.149155][ T30] audit: type=1400 audit(1785663013.756:489): avc: denied { append } for pid=6607 comm="syz.4.209" name="comedi3" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 134.194901][ T30] audit: type=1326 audit(1785663013.796:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6607 comm="syz.4.209" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f99a619e019 code=0x0 [ 134.331915][ T30] audit: type=1400 audit(1785663013.936:491): avc: denied { read write } for pid=6616 comm="syz.1.211" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 134.335123][ T805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.357390][ T30] audit: type=1400 audit(1785663013.936:492): avc: denied { open } for pid=6616 comm="syz.1.211" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 134.393094][ T30] audit: type=1400 audit(1785663013.936:493): avc: denied { ioctl } for pid=6616 comm="syz.1.211" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 134.594768][ T5720] em28xx 1-1:0.0: chip ID is em2874 [ 134.814814][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.830253][ T30] audit: type=1400 audit(1785663014.436:494): avc: denied { connect } for pid=6580 comm="syz.0.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 134.853507][ T5720] usb 1-1: USB disconnect, device number 8 [ 134.862710][ T5720] em28xx 1-1:0.0: Disconnecting em28xx [ 134.869675][ T5720] em28xx 1-1:0.0: Freeing device [ 135.040379][ T6624] netlink: 36 bytes leftover after parsing attributes in process `syz.4.213'. [ 135.049425][ T6624] netlink: 16 bytes leftover after parsing attributes in process `syz.4.213'. [ 135.058667][ T6624] netlink: 36 bytes leftover after parsing attributes in process `syz.4.213'. [ 135.379987][ T805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.492980][ T805] usb 4-1: USB disconnect, device number 6 [ 135.544741][ T805] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 135.855195][ T5720] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 135.895758][ T6651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.923786][ T805] lo speed is unknown, defaulting to 1000 [ 135.929838][ T805] syz0: Port: 1 Link DOWN [ 136.026785][ T5720] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 136.026989][ T6655] netlink: 28 bytes leftover after parsing attributes in process `syz.2.222'. [ 136.044109][ T5720] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 136.066985][ T5720] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 136.079484][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.091615][ T5720] usb 1-1: Product: syz [ 136.098725][ T5720] usb 1-1: Manufacturer: syz [ 136.103381][ T5720] usb 1-1: SerialNumber: syz [ 136.127811][ T5720] usb 1-1: config 0 descriptor?? [ 136.138925][ T6636] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 136.146125][ T6636] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 136.182828][ T30] audit: type=1400 audit(1785663015.786:495): avc: denied { create } for pid=6657 comm="syz.4.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 136.355420][ T6636] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 136.362640][ T6636] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 136.484179][ T5713] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 136.635650][ T5713] usb 5-1: config 0 has no interfaces? [ 136.641210][ T5713] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 136.650720][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.661444][ T5713] usb 5-1: config 0 descriptor?? [ 136.778215][ T5720] Error reading MAC address [ 136.790038][ T5720] usb 1-1: USB disconnect, device number 9 [ 136.882693][ T5713] usb 5-1: USB disconnect, device number 10 [ 136.946004][ T30] audit: type=1400 audit(1785663016.556:496): avc: denied { append } for pid=6657 comm="syz.4.223" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 137.373607][ T6668] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.226'. [ 137.384268][ T6668] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.226'. [ 137.430557][ T6670] netlink: 'syz.2.227': attribute type 1 has an invalid length. [ 137.451782][ T6670] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.480385][ T6670] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 137.502663][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.226'. [ 138.408504][ T6631] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 138.640288][ T6699] random: crng reseeded on system resumption [ 138.804161][ T5705] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 140.754123][ T5705] usb 4-1: Using ep0 maxpacket: 32 [ 140.765578][ T5705] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 140.773841][ T5705] usb 4-1: config 0 has no interface number 0 [ 140.782338][ T5705] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 140.791717][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.799820][ T5705] usb 4-1: Product: syz [ 140.804031][ T5705] usb 4-1: Manufacturer: syz [ 140.808690][ T5705] usb 4-1: SerialNumber: syz [ 140.818314][ T5705] usb 4-1: config 0 descriptor?? [ 140.829782][ T5705] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 140.842063][ T6714] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 141.045198][ T5705] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 141.064114][ T6722] tc action pedit offset must be on 32 bit boundaries [ 141.077819][ T5705] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 141.126076][ T30] audit: type=1400 audit(1785663020.736:497): avc: denied { mount } for pid=6726 comm="syz.4.243" name="/" dev="autofs" ino=12762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 141.339876][ T30] audit: type=1400 audit(1785663020.946:498): avc: denied { unmount } for pid=5618 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 141.501326][ T6696] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 141.536313][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 141.546718][ T5705] usb 4-1: USB disconnect, device number 7 [ 141.570609][ T30] audit: type=1400 audit(1785663021.176:499): avc: denied { relabelfrom } for pid=6743 comm="syz.2.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 141.599248][ T5705] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 141.616847][ T6746] lo speed is unknown, defaulting to 1000 [ 141.633487][ T5705] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 141.647087][ T30] audit: type=1400 audit(1785663021.176:500): avc: denied { relabelto } for pid=6743 comm="syz.2.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 141.681352][ T5705] quatech2 4-1:0.51: device disconnected [ 142.525796][ T30] audit: type=1400 audit(1785663022.126:501): avc: denied { getopt } for pid=6784 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 142.828982][ T30] audit: type=1400 audit(1785663022.436:502): avc: denied { write } for pid=6799 comm="syz.0.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 142.865043][ T6800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.898159][ T30] audit: type=1400 audit(1785663022.456:503): avc: denied { read } for pid=6799 comm="syz.0.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 142.988725][ T6811] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20000 [ 143.083270][ T30] audit: type=1400 audit(1785663022.586:504): avc: denied { nlmsg_read } for pid=6810 comm="syz.1.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 143.413434][ T6819] kvm: Disabled LAPIC found during irq injection [ 143.449343][ T30] audit: type=1400 audit(1785663023.056:505): avc: denied { connect } for pid=6825 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 143.475890][ T6829] No source specified [ 143.651721][ T6834] netlink: 'syz.4.270': attribute type 1 has an invalid length. [ 143.945622][ T30] audit: type=1400 audit(1785663023.486:506): avc: denied { write } for pid=6833 comm="syz.4.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 144.364190][ T188] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 144.541796][ T188] usb 3-1: device descriptor read/64, error -71 [ 144.604435][ T5713] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 144.737566][ T6851] ip6t_srh: unknown srh match flags FF3F [ 144.766171][ T5713] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.787812][ T188] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 144.814714][ T5713] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 144.866131][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.934646][ T188] usb 3-1: device descriptor read/64, error -71 [ 145.002935][ T5713] usb 2-1: config 0 descriptor?? [ 145.079512][ T188] usb usb3-port1: attempt power cycle [ 145.353595][ T5713] usbhid 2-1:0.0: can't add hid device: -71 [ 145.447869][ T5713] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 145.516090][ T188] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 145.630789][ T188] usb 3-1: device descriptor read/8, error -71 [ 145.640443][ T5713] usb 2-1: USB disconnect, device number 10 [ 146.035410][ T188] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 146.157113][ T188] usb 3-1: device descriptor read/8, error -71 [ 146.351537][ T188] usb usb3-port1: unable to enumerate USB device [ 146.488754][ T5713] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 146.705118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 146.745538][ T5713] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.890013][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 146.890054][ T30] audit: type=1400 audit(1785663026.436:509): avc: denied { create } for pid=6865 comm="syz.4.277" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 147.116548][ T30] audit: type=1400 audit(1785663026.436:510): avc: denied { write } for pid=6865 comm="syz.4.277" name="file2" dev="tmpfs" ino=310 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 147.146008][ T5713] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 147.163781][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.195342][ T30] audit: type=1400 audit(1785663026.436:511): avc: denied { open } for pid=6865 comm="syz.4.277" path="/55/file2" dev="tmpfs" ino=310 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 147.227555][ T5713] usb 2-1: config 0 descriptor?? [ 147.296067][ T30] audit: type=1400 audit(1785663026.446:512): avc: denied { cmd } for pid=6865 comm="syz.4.277" path="/55/file2" dev="tmpfs" ino=310 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=io_uring permissive=1 [ 147.376410][ T30] audit: type=1400 audit(1785663026.896:513): avc: denied { unlink } for pid=5618 comm="syz-executor" name="file2" dev="tmpfs" ino=310 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 147.431874][ T5713] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 147.462399][ T5713] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10 [ 147.537873][ T5713] usb 2-1: USB disconnect, device number 11 [ 147.543866][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 147.574140][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 147.706269][ T5720] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 147.748439][ T6875] 9p: Bad value for 'wfdno' [ 147.818251][ T30] audit: type=1400 audit(1785663027.426:514): avc: denied { bind } for pid=6874 comm="syz.1.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 147.820975][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 148.079914][ T5720] usb 5-1: Using ep0 maxpacket: 8 [ 148.098011][ T5720] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 148.121176][ T9] usb 3-1: config 127 has an invalid interface number: 124 but max is 0 [ 148.136095][ T5720] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 148.284319][ T6879] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 148.292296][ T6879] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 148.303711][ T6879] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 148.311670][ T6879] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 148.331651][ T9] usb 3-1: config 127 has no interface number 0 [ 148.344133][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.352226][ T9] usb 3-1: config 127 interface 124 has no altsetting 0 [ 148.359599][ T5720] usb 5-1: Product: syz [ 148.364963][ T5720] usb 5-1: Manufacturer: syz [ 148.386895][ T5720] usb 5-1: SerialNumber: syz [ 148.395597][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 148.509928][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.521947][ T5720] usb 5-1: config 0 descriptor?? [ 148.532996][ T9] usb 3-1: Product: syz [ 148.539813][ T5720] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 148.552046][ T9] usb 3-1: Manufacturer: syz [ 148.559780][ T5720] usb 5-1: setting power ON [ 148.564360][ T9] usb 3-1: SerialNumber: syz [ 148.586190][ T5720] dvb-usb: bulk message failed: -22 (2/0) [ 148.601268][ T6882] netlink: 1988 bytes leftover after parsing attributes in process `syz.1.283'. [ 148.621082][ T5720] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 148.635642][ T5720] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 148.649754][ T5720] usb 5-1: media controller created [ 148.681816][ T5720] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.725906][ T5720] usb 5-1: selecting invalid altsetting 6 [ 148.742443][ T5720] usb 5-1: digital interface selection failed (-22) [ 148.757869][ T5720] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 148.777050][ T5720] usb 5-1: setting power OFF [ 148.783544][ T30] audit: type=1400 audit(1785663028.386:515): avc: denied { mounton } for pid=6870 comm="syz.4.279" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 148.790578][ T5720] dvb-usb: bulk message failed: -22 (2/0) [ 148.857846][ T6887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.876491][ T5720] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 148.887870][ T5720] (NULL device *): no alternate interface [ 148.888274][ T6887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.924152][ T6887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.932923][ T5720] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 148.958111][ T5720] usb 5-1: USB disconnect, device number 11 [ 148.962024][ T6887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.031016][ T30] audit: type=1400 audit(1785663028.636:516): avc: denied { write } for pid=6885 comm="syz.1.285" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 149.084472][ T5713] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 149.171899][ T6890] netlink: 'syz.0.286': attribute type 29 has an invalid length. [ 149.276181][ T5713] usb 2-1: config 0 interface 0 has no altsetting 0 [ 149.292173][ T5713] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 149.316277][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.338879][ T5713] usb 2-1: config 0 descriptor?? [ 149.531773][ T9] usb 3-1: reset high-speed USB device number 14 using dummy_hcd [ 149.560798][ T5713] usbhid 2-1:0.0: can't add hid device: -71 [ 149.578682][ T5713] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 149.600496][ T5713] usb 2-1: USB disconnect, device number 12 [ 149.632101][ T30] audit: type=1400 audit(1785663029.236:517): avc: denied { map } for pid=6895 comm="syz.4.289" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 149.778315][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 149.792507][ T9] usb 3-1: device firmware changed [ 149.831209][ T9] usb 3-1: USB disconnect, device number 14 [ 149.926834][ T6892] lo speed is unknown, defaulting to 1000 [ 150.014323][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 150.177282][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.199934][ T24] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 150.224188][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.365876][ T24] usb 5-1: config 0 descriptor?? [ 150.537633][ T30] audit: type=1400 audit(1785663030.136:518): avc: denied { write } for pid=6904 comm="syz.1.292" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 150.970709][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 150.977313][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 150.997393][ T24] usb 5-1: USB disconnect, device number 12 [ 151.505459][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 151.549323][ T6921] FAULT_INJECTION: forcing a failure. [ 151.549323][ T6921] name failslab, interval 1, probability 0, space 0, times 0 [ 151.606949][ T6921] CPU: 1 UID: 0 PID: 6921 Comm: syz.2.296 Not tainted syzkaller #0 PREEMPT(full) [ 151.606967][ T6921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 151.606973][ T6921] Call Trace: [ 151.606977][ T6921] [ 151.606981][ T6921] dump_stack_lvl+0x100/0x190 [ 151.606999][ T6921] should_fail_ex.cold+0x5/0xa [ 151.607012][ T6921] should_failslab+0xc2/0x120 [ 151.607027][ T6921] __kmalloc_node_noprof+0x101/0x830 [ 151.607041][ T6921] ? qdisc_alloc+0xbb/0xb30 [ 151.607059][ T6921] qdisc_alloc+0xbb/0xb30 [ 151.607077][ T6921] qdisc_create_dflt+0x93/0x490 [ 151.607094][ T6921] dev_activate+0x64f/0xce0 [ 151.607117][ T6921] ? __pfx_dev_activate+0x10/0x10 [ 151.607136][ T6921] __dev_open+0x490/0x8f0 [ 151.607152][ T6921] ? __pfx___dev_open+0x10/0x10 [ 151.607169][ T6921] ? __local_bh_enable_ip+0x9e/0x120 [ 151.607185][ T6921] __dev_change_flags+0x596/0x850 [ 151.607199][ T6921] ? __pfx___dev_change_flags+0x10/0x10 [ 151.607216][ T6921] netif_change_flags+0x8d/0x160 [ 151.607230][ T6921] dev_change_flags+0xba/0x260 [ 151.607246][ T6921] devinet_ioctl+0x110b/0x1f10 [ 151.607261][ T6921] ? __pfx_devinet_ioctl+0x10/0x10 [ 151.607273][ T6921] ? _copy_from_user+0x59/0xd0 [ 151.607290][ T6921] inet_ioctl+0x3aa/0x3f0 [ 151.607303][ T6921] ? __pfx_inet_ioctl+0x10/0x10 [ 151.607323][ T6921] ? tomoyo_path_number_perm+0x188/0x580 [ 151.607341][ T6921] sock_do_ioctl+0x118/0x280 [ 151.607358][ T6921] ? __pfx_sock_do_ioctl+0x10/0x10 [ 151.607377][ T6921] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 151.607393][ T6921] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 151.607413][ T6921] sock_ioctl+0x599/0x6b0 [ 151.607424][ T6921] ? __pfx_sock_ioctl+0x10/0x10 [ 151.607433][ T6921] ? hook_file_ioctl_common+0x140/0x440 [ 151.607449][ T6921] ? selinux_file_ioctl+0x13b/0x290 [ 151.607464][ T6921] ? selinux_file_ioctl+0xb6/0x290 [ 151.607481][ T6921] ? __pfx_sock_ioctl+0x10/0x10 [ 151.607492][ T6921] __x64_sys_ioctl+0x18e/0x210 [ 151.607508][ T6921] do_syscall_64+0x115/0x870 [ 151.607522][ T6921] ? clear_bhb_loop+0x40/0x90 [ 151.607534][ T6921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.607545][ T6921] RIP: 0033:0x7f38d399e019 [ 151.607554][ T6921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.607569][ T6921] RSP: 002b:00007f38d4791028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.607580][ T6921] RAX: ffffffffffffffda RBX: 00007f38d3c26090 RCX: 00007f38d399e019 [ 151.607587][ T6921] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000008 [ 151.607593][ T6921] RBP: 00007f38d4791090 R08: 0000000000000000 R09: 0000000000000000 [ 151.607599][ T6921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.607606][ T6921] R13: 00007f38d3c26128 R14: 00007f38d3c26090 R15: 00007ffd8a44f978 [ 151.607627][ T6921] [ 151.607639][ T6921] mac80211_hwsim hwsim7 syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 151.939231][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.950230][ T24] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 151.962370][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.005549][ T24] usb 5-1: config 0 descriptor?? [ 152.080459][ T30] audit: type=1400 audit(1785663031.686:519): avc: denied { write } for pid=6924 comm="syz.1.298" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 152.107738][ T30] audit: type=1400 audit(1785663031.716:520): avc: denied { remove_name } for pid=6924 comm="syz.1.298" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 152.165339][ T30] audit: type=1400 audit(1785663031.716:521): avc: denied { unlink } for pid=6924 comm="syz.1.298" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 152.239856][ T30] audit: type=1400 audit(1785663031.716:522): avc: denied { create } for pid=6924 comm="syz.1.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 152.296123][ T6932] netlink: 48 bytes leftover after parsing attributes in process `syz.3.300'. [ 152.402777][ T30] audit: type=1400 audit(1785663032.006:523): avc: denied { ioctl } for pid=6937 comm="syz.1.301" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x5648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 152.440833][ T30] audit: type=1400 audit(1785663032.046:524): avc: denied { ioctl } for pid=6937 comm="syz.1.301" path="socket:[13832]" dev="sockfs" ino=13832 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 152.588176][ T6946] netlink: 4560 bytes leftover after parsing attributes in process `syz.3.304'. [ 152.604162][ T6946] netlink: 4560 bytes leftover after parsing attributes in process `syz.3.304'. [ 152.671634][ T6946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.304'. [ 152.836454][ T24] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 152.847493][ T24] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11 [ 152.912754][ T30] audit: type=1400 audit(1785663032.516:525): avc: denied { accept } for pid=6953 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 153.515439][ T24] usb 5-1: USB disconnect, device number 13 [ 153.521386][ C1] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 153.955452][ T30] audit: type=1400 audit(1785663033.466:526): avc: denied { connect } for pid=6961 comm="syz.1.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 154.099368][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.309'. [ 154.109314][ T6966] tipc: Enabling of bearer rejected, media not registered [ 154.259004][ T6967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.309'. [ 154.340787][ T30] audit: type=1400 audit(1785663033.866:527): avc: denied { watch_reads } for pid=6963 comm="syz.3.309" path="/61" dev="tmpfs" ino=337 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 154.442522][ T6973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.463734][ T30] audit: type=1400 audit(1785663034.066:528): avc: denied { bind } for pid=6972 comm="syz.1.312" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.694888][ T6976] SELinux: failed to load policy [ 155.301597][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.315'. [ 155.454752][ T6990] netlink: 4560 bytes leftover after parsing attributes in process `syz.4.317'. [ 155.479973][ T6990] netlink: 4560 bytes leftover after parsing attributes in process `syz.4.317'. [ 155.523923][ T6992] »»»»»»: renamed from vlan0 (while UP) [ 155.533689][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.317'. [ 156.120333][ T5342] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 156.179106][ T5342] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 156.532176][ T7010] netlink: 20 bytes leftover after parsing attributes in process `syz.3.325'. [ 156.792008][ T7010] team0 (unregistering): Port device team_slave_0 removed [ 156.853776][ T7010] team0 (unregistering): Port device team_slave_1 removed [ 157.703690][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 157.703704][ T30] audit: type=1400 audit(1785663037.306:532): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 157.876743][ T7020] libceph: resolve '400' (ret=-3): failed [ 157.933765][ T5342] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 157.988063][ T5342] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 158.156321][ T7023] ftl_cs: FTL header not found. [ 158.463842][ T7037] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.329'. [ 158.481962][ T7023] block2mtd: mtd1: [/dev/loop0] erase_size = 1KiB [1310] [ 158.509480][ T7037] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.329'. [ 158.555941][ T7041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.329'. [ 158.687653][ T30] audit: type=1400 audit(1785663038.296:533): avc: denied { write } for pid=7024 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.900914][ T7048] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 159.106446][ T7055] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 159.114469][ T7055] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 159.123610][ T7055] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 159.131557][ T7055] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 159.266061][ T30] audit: type=1400 audit(1785663038.866:534): avc: denied { write } for pid=7051 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.406874][ T7061] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7061 comm=syz.4.333 [ 159.613121][ T7056] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.687499][ T7067] openvswitch: netlink: IP tunnel dst address not specified [ 160.125954][ T30] audit: type=1400 audit(1785663039.286:535): avc: denied { read write } for pid=7062 comm="syz.2.334" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 160.271598][ T30] audit: type=1400 audit(1785663039.286:536): avc: denied { open } for pid=7062 comm="syz.2.334" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 160.418099][ T7056] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 161.213442][ T30] audit: type=1400 audit(1785663040.816:537): avc: denied { write } for pid=7066 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.257587][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.337'. [ 161.271662][ T7083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.337'. [ 161.282138][ T7083] netlink: 'syz.3.337': attribute type 11 has an invalid length. [ 161.290177][ T7083] netlink: 'syz.3.337': attribute type 12 has an invalid length. [ 161.433536][ T7090] lo speed is unknown, defaulting to 1000 [ 162.028142][ T30] audit: type=1400 audit(1785663041.516:538): avc: denied { write } for pid=7092 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.201859][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 162.274022][ T30] audit: type=1400 audit(1785663041.846:539): avc: denied { open } for pid=7078 comm="syz.1.336" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 162.362876][ T30] audit: type=1400 audit(1785663041.916:540): avc: denied { create } for pid=7101 comm="syz.4.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 162.436368][ T30] audit: type=1400 audit(1785663041.926:541): avc: denied { bind } for pid=7101 comm="syz.4.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 162.509219][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.521495][ T7108] netlink: 4560 bytes leftover after parsing attributes in process `syz.3.342'. [ 162.522486][ T9] usb 3-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=6a.b1 [ 162.540471][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.548667][ T9] usb 3-1: Product: syz [ 162.553922][ T9] usb 3-1: Manufacturer: syz [ 162.558578][ T9] usb 3-1: SerialNumber: syz [ 162.567201][ T9] usb 3-1: config 0 descriptor?? [ 162.576729][ T9] cytherm 3-1:0.0: Cypress thermometer device now attached [ 162.595624][ T7108] netlink: 4560 bytes leftover after parsing attributes in process `syz.3.342'. [ 162.638050][ T7110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.342'. [ 162.727482][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 162.727497][ T30] audit: type=1326 audit(1785663042.336:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7111 comm="syz.0.343" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f71b9e019 code=0x7ffc0000 [ 162.791201][ T30] audit: type=1326 audit(1785663042.366:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7111 comm="syz.0.343" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f71b9e019 code=0x7ffc0000 [ 162.862096][ T30] audit: type=1326 audit(1785663042.366:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7111 comm="syz.0.343" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9f71b9dd82 code=0x7ffc0000 [ 162.909283][ T30] audit: type=1326 audit(1785663042.366:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7111 comm="syz.0.343" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9f71b9de17 code=0x7ffc0000 [ 162.994868][ T7117] comedi comedi3: pcmda12: I/O port conflict (0x100,16) [ 163.113686][ T30] audit: type=1326 audit(1785663042.366:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7111 comm="syz.0.343" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9f71b5ad11 code=0x7ffc0000 [ 163.319282][ T30] audit: type=1326 audit(1785663042.366:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7111 comm="syz.0.343" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f9f71b9ee09 code=0x7ffc0000 [ 163.534855][ T30] audit: type=1326 audit(1785663042.366:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7111 comm="syz.0.343" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9f71b5ad7b code=0x7ffc0000 [ 163.779538][ T30] audit: type=1326 audit(1785663042.366:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7111 comm="syz.0.343" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f71b9e019 code=0x7ffc0000 [ 163.824187][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 164.030098][ T30] audit: type=1326 audit(1785663042.366:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7111 comm="syz.0.343" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f9f71b5a46c code=0x7ffc0000 [ 164.369395][ T30] audit: type=1326 audit(1785663042.366:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7111 comm="syz.0.343" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9f71b5a4ce code=0x7ffc0000 [ 164.662195][ T24] usb 3-1: USB disconnect, device number 15 [ 164.678757][ T24] cytherm 3-1:0.0: Cypress thermometer now disconnected [ 164.701614][ T7124] dummy_hcd dummy_hcd.0: remove, state 1 [ 164.794993][ T9] usb 1-1: device descriptor read/all, error -108 [ 164.815393][ T7124] usb usb1: USB disconnect, device number 1 [ 164.826837][ T9] usb usb1-port1: attempt power cycle [ 165.207811][ T7124] dummy_hcd dummy_hcd.0: stopped [ 165.216996][ T7124] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 165.394640][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 165.604138][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 165.616728][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 165.629288][ T24] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 165.638577][ T24] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 165.648547][ T24] usb 3-1: Product: syz [ 165.655985][ T24] usb 3-1: Manufacturer: syz [ 165.665669][ T24] usb 3-1: SerialNumber: syz [ 165.772866][ T7147] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 165.780907][ T7147] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 165.789967][ T7147] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 165.798010][ T7147] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 166.011937][ T7115] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 166.024012][ T7115] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 166.032402][ T7115] CPU: 0 UID: 0 PID: 7115 Comm: syz.0.343 Not tainted syzkaller #0 PREEMPT(full) [ 166.041654][ T7115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 166.051680][ T7115] RIP: 0010:set_link_state+0x27/0xc70 [ 166.057041][ T7115] Code: 90 90 90 41 57 41 56 41 55 41 54 55 53 48 89 fb 48 83 ec 18 e8 da 50 39 fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 35 0b 00 00 4c 8d ab a3 00 00 00 48 8b 2b 48 b8 [ 166.076625][ T7115] RSP: 0018:ffffc9000390f850 EFLAGS: 00010046 [ 166.082674][ T7115] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff87d11fe3 [ 166.090620][ T7115] RDX: 0000000000000000 RSI: ffffffff87d11106 RDI: 0000000000000000 [ 166.098574][ T7115] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 166.106527][ T7115] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000293 [ 166.114467][ T7115] R13: ffff888021384000 R14: 0000000000000000 R15: ffff888021384c00 [ 166.122415][ T7115] FS: 0000000000000000(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 [ 166.131327][ T7115] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.137897][ T7115] CR2: 00007f88831eb700 CR3: 00000000600f6000 CR4: 00000000003526f0 [ 166.145846][ T7115] Call Trace: [ 166.149098][ T7115] [ 166.152002][ T7115] ? __pfx_dummy_pullup+0x10/0x10 [ 166.157008][ T7115] dummy_pullup+0xf3/0x170 [ 166.161408][ T7115] ? __pfx_dummy_pullup+0x10/0x10 [ 166.166416][ T7115] usb_gadget_disconnect_locked+0x142/0x4e0 [ 166.172292][ T7115] gadget_unbind_driver+0xd8/0x4f0 [ 166.177407][ T7115] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 166.183098][ T7115] device_remove+0xcb/0x180 [ 166.187572][ T7115] device_release_driver_internal+0x44e/0x620 [ 166.193622][ T7115] driver_detach+0xd8/0x1b0 [ 166.198101][ T7115] bus_remove_driver+0x13b/0x2e0 [ 166.203019][ T7115] driver_unregister+0x76/0xb0 [ 166.207767][ T7115] usb_gadget_unregister_driver+0x49/0x70 [ 166.213466][ T7115] raw_release+0x19b/0x260 [ 166.217866][ T7115] ? __pfx_raw_release+0x10/0x10 [ 166.222779][ T7115] __fput+0x3ff/0xb50 [ 166.226747][ T7115] task_work_run+0x150/0x240 [ 166.231312][ T7115] ? __pfx_task_work_run+0x10/0x10 [ 166.236392][ T7115] ? do_raw_spin_unlock+0x145/0x1e0 [ 166.241572][ T7115] do_exit+0x951/0x2ae0 [ 166.245704][ T7115] ? __pfx_do_exit+0x10/0x10 [ 166.250272][ T7115] ? do_raw_spin_lock+0x128/0x260 [ 166.255271][ T7115] ? find_held_lock+0x2b/0x80 [ 166.259935][ T7115] ? get_signal+0x7e0/0x21e0 [ 166.264499][ T7115] do_group_exit+0xd5/0x2a0 [ 166.268980][ T7115] get_signal+0x1ec7/0x21e0 [ 166.273464][ T7115] ? __down_common+0x6c5/0x8b0 [ 166.278209][ T7115] ? __pfx_get_signal+0x10/0x10 [ 166.283037][ T7115] ? down_interruptible+0x66/0xa0 [ 166.288042][ T7115] ? rcu_is_watching+0x12/0xc0 [ 166.292793][ T7115] arch_do_signal_or_restart+0x91/0x7e0 [ 166.298308][ T7115] ? down_interruptible+0x66/0xa0 [ 166.303309][ T7115] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 166.309442][ T7115] ? __pfx_raw_ioctl+0x10/0x10 [ 166.314186][ T7115] exit_to_user_mode_loop+0x139/0x6f0 [ 166.319547][ T7115] ? rcu_is_watching+0x12/0xc0 [ 166.324294][ T7115] do_syscall_64+0x666/0x870 [ 166.328863][ T7115] ? clear_bhb_loop+0x40/0x90 [ 166.333517][ T7115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.339384][ T7115] RIP: 0033:0x7f9f71b9dcab [ 166.343857][ T7115] Code: Unable to access opcode bytes at 0x7f9f71b9dc81. [ 166.350859][ T7115] RSP: 002b:00007f9f6fdf3f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.359242][ T7115] RAX: fffffffffffffffc RBX: 0000000000000008 RCX: 00007f9f71b9dcab [ 166.367193][ T7115] RDX: 00007f9f6fdf4fd0 RSI: 0000000080085502 RDI: 0000000000000008 [ 166.375147][ T7115] RBP: 00007f9f6fdf4fd0 R08: 0000000000000040 R09: 00007f9f6fdf3fc8 [ 166.383090][ T7115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 166.391039][ T7115] R13: 0000000800000000 R14: 0000000000000012 R15: 00007f9f71c5386a [ 166.398989][ T7115] [ 166.401981][ T7115] Modules linked in: [ 166.405856][ T7115] ---[ end trace 0000000000000000 ]--- [ 166.411281][ T7115] RIP: 0010:set_link_state+0x27/0xc70 [ 166.416635][ T7115] Code: 90 90 90 41 57 41 56 41 55 41 54 55 53 48 89 fb 48 83 ec 18 e8 da 50 39 fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 35 0b 00 00 4c 8d ab a3 00 00 00 48 8b 2b 48 b8 [ 166.436233][ T7115] RSP: 0018:ffffc9000390f850 EFLAGS: 00010046 [ 166.442288][ T7115] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff87d11fe3 [ 166.450243][ T7115] RDX: 0000000000000000 RSI: ffffffff87d11106 RDI: 0000000000000000 [ 166.458189][ T7115] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 166.466134][ T7115] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000293 [ 166.474095][ T7115] R13: ffff888021384000 R14: 0000000000000000 R15: ffff888021384c00 [ 166.482057][ T7115] FS: 0000000000000000(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 [ 166.490985][ T7115] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.497561][ T7115] CR2: 00007f88831eb700 CR3: 00000000600f6000 CR4: 00000000003526f0 [ 166.505530][ T7115] Kernel panic - not syncing: Fatal exception [ 166.511668][ T7115] Kernel Offset: disabled [ 166.515964][ T7115] Rebooting in 86400 seconds..