last executing test programs: 2m52.305953505s ago: executing program 1 (id=150): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002c00)=@newtaction={0x8e0, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x8cc, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x87c, 0x2, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x28, 0xfffffff8, 0x3, 0x4, 0xffffffc0, 0x6, 0x5, 0x5, 0x2, 0x117, 0x10000, 0x8001, 0x2, 0x1, 0x7, 0x9, 0x80000000, 0xaa, 0x3ff, 0x4, 0x9, 0x0, 0x51, 0xf, 0x2, 0x1, 0x10000, 0x200, 0x7, 0x2, 0x4, 0x8, 0x101, 0x8, 0x0, 0x3, 0xb, 0x66d, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x7fff, 0xd, 0x4, 0x1ff, 0xffff, 0x7f, 0xfffffffd, 0x40, 0x7, 0x3, 0x400, 0x6, 0x8, 0x2, 0x1, 0x7, 0x9, 0x594, 0x0, 0x2900, 0x100, 0x4, 0x305c000, 0x7, 0xfffffff7, 0x7, 0x803, 0x5, 0xf24, 0x5, 0x7fffffff, 0x923, 0x101, 0x1155, 0x3, 0x1, 0x0, 0xffffffff, 0xcd2, 0xfffffffa, 0x800, 0x4, 0x81, 0x3, 0x0, 0x1e, 0xf, 0x1, 0x1, 0xe, 0x3b2, 0x6, 0x4, 0x1ff, 0x6, 0x5, 0x1000, 0xe6, 0x7fff, 0x1, 0x8c, 0x1, 0x80, 0xfffffffb, 0x5, 0x7f0, 0xfffffff0, 0xffef, 0xfffffff7, 0xcfb6, 0x6, 0x4, 0x1194, 0xaf, 0xa, 0x7ff, 0xe0, 0x0, 0x7f, 0x6, 0x0, 0x2, 0x9a7, 0x7a2, 0x5, 0x83f, 0xa36e58b, 0x100, 0x9, 0x7, 0x8, 0x2, 0x1, 0xfffffffe, 0x1242, 0x579, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8d, 0x3, 0x4, 0x5, 0x8, 0xc, 0x6, 0xffffffff, 0xaebe, 0x9, 0x90a, 0x7, 0x3, 0x2, 0x80000000, 0x9, 0x9, 0x5, 0xfffffff1, 0x3cd, 0xc, 0x4, 0x2, 0x9, 0x6, 0x4, 0x4, 0x7, 0x0, 0x2, 0x1, 0x5, 0x7f, 0xe6ef, 0x9, 0x6, 0x1, 0x7, 0x0, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x5, 0x8, 0x0, 0x6, 0x7, 0x1, 0x401, 0x8762, 0x9, 0x0, 0x4, 0x4, 0xff, 0x3, 0xc, 0x8, 0xf, 0x2, 0x6, 0x80000000, 0x3, 0x7f, 0xfffffffc, 0x2, 0x61, 0x8, 0x100, 0x5, 0xc56, 0xe, 0x0, 0x8, 0x8, 0x6, 0x9, 0x5b0, 0x6, 0xffff, 0x5f3, 0xc5f8, 0x1000, 0x2, 0x9, 0x7, 0x1, 0x1, 0x3, 0x0, 0x2, 0x200, 0x253a, 0xb, 0x9, 0x3, 0x0, 0xf, 0x1, 0x4, 0x2, 0x1000, 0x7, 0xb96, 0x3, 0xff, 0x8, 0x9, 0xb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1ff, 0x4835, 0x4c30, 0x8, 0x8, 0xffffff68, 0x1000000, 0x7, 0x1d, 0x8000, 0xd3d9, 0x2, 0x82fd, 0x3, 0x8000, 0x7f, 0x401, 0x800, 0x2, 0xe3a2, 0x2, 0x7, 0x1, 0x401, 0x400, 0x1855af6b, 0xff, 0xfffffffa, 0xf5, 0xffff70f3, 0x8, 0xfff, 0x6, 0x8, 0x7, 0x0, 0xf61, 0x8, 0x80000000, 0x5, 0xc2, 0x14c6, 0x4, 0x2, 0xfffff800, 0x3d3, 0x4, 0x0, 0x1, 0x163af427, 0x6, 0xfffffff8, 0xffff5f90, 0x9, 0x5, 0x6, 0xca41, 0x4, 0xffffffff, 0x7, 0x80000001, 0x7, 0x6, 0x80, 0x3, 0x9, 0x9, 0x3, 0x40, 0xe5, 0x6, 0x0, 0x4, 0xe, 0x9, 0xc7f, 0x7, 0x7363, 0x3, 0xc0000000, 0x7d2, 0x200, 0x13e, 0x5, 0x4d, 0x10000, 0x2, 0x1e7, 0x8, 0x7fff, 0xfffffff8, 0xc, 0x6, 0x3, 0xfffffff9, 0xb, 0x8001, 0x7, 0xfffffffe, 0x7, 0x0, 0x954, 0x8, 0x3ff, 0x8, 0x0, 0xab2e, 0xaf, 0x7, 0x2, 0x4, 0x3, 0x3, 0x6, 0xe6, 0x8, 0x0, 0xfffffff8, 0x1, 0x2, 0xffffff52, 0x3, 0xf, 0x4, 0x2, 0x4, 0x6, 0x4, 0x3, 0x7, 0x7, 0xffffffff, 0x1, 0x9, 0x6, 0x4, 0x178, 0xbbfc, 0x8000, 0xc, 0x0, 0x7, 0x101, 0x9, 0xfff, 0x2, 0x4, 0x0, 0x2, 0x8, 0x0, 0x10, 0x8, 0x2, 0x62, 0x3, 0x6, 0x10000, 0x7, 0xe9, 0x6, 0x7f, 0x6, 0xfffffff8, 0x0, 0x0, 0x81, 0x2, 0x0, 0xd, 0x7f, 0x200000, 0x3, 0x2, 0x8839, 0x200, 0x80, 0xffff0000, 0x1ff, 0x6fc3eb4a, 0x8f, 0x2, 0x4, 0x6, 0x9, 0x7, 0x0, 0x1000, 0x7, 0x3, 0x8000, 0xb96, 0x200, 0x1, 0x80, 0xfff, 0xff, 0x400, 0xe7d, 0xd, 0x80000000, 0x9, 0xe122, 0x9, 0xffffff80, 0x2, 0x3, 0x3fffc000, 0x1ff, 0x6, 0x7, 0x0, 0x7, 0x7, 0x7, 0x6, 0x9000, 0xffffffff, 0x9, 0x800, 0x6, 0x1000, 0x0, 0xe, 0xcca, 0x7, 0x80, 0x0, 0x8, 0xef000000, 0x0, 0x3, 0x4, 0xba, 0x7ff, 0x1, 0x8, 0x5320, 0x7, 0xdd, 0x1, 0xfb, 0x1ff, 0x6, 0xc90, 0x40, 0xffffffff, 0x2, 0x7, 0xd, 0x1, 0x0, 0x1, 0x73be, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xfffffffffffffffa, 0xffff, 0x7, 0x401, {0x4, 0x2, 0x3ff, 0x5, 0x3ff, 0x2ddc}, {0xb, 0x0, 0x8, 0x6, 0x2, 0xc23}, 0x8, 0x800, 0xec3b}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) 2m52.276231496s ago: executing program 1 (id=151): syz_emit_ethernet(0x76, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb86dd600a843500402f00fe8000000000ffffeb220000000000bbfe8000000000000000000000000000aa"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m52.208088526s ago: executing program 1 (id=152): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}}, 0x801) syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0], 0x48}}, 0x24000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1400000004000000040000000400010014000000", @ANYRES32, @ANYBLOB="dd06000000080000000000000000000000060000c337d7ec748e5475485700661b1889a8f9efa4cf9644111f74a218a2ccd3eca532e884c4cc9be05e3ba4ca19120ec598825c69c7e74277523f6591d2b3b7c2310e8863538630278e761df3858a53b0d9573c5af48753d2881e1526607804041a77dbc70fb0b9e9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000700"/28], 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r4, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='1', 0x1) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1800040, &(0x7f0000000c80)={[{@noswap}]}) write(r6, &(0x7f0000000340)='1\n', 0x2) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r7, &(0x7f0000000400)='./file0\n', 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r8, &(0x7f00000004c0)='1\n', 0x2) 2m49.153977983s ago: executing program 1 (id=163): r0 = io_uring_setup(0x7eef, &(0x7f0000002340)={0x0, 0x5880, 0x200, 0x0, 0xee}) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, &(0x7f00000023c0)={0x5, 0x2}, 0x0) setresuid(0x0, 0xffffffffffffffff, 0xffffffffffffffff) setreuid(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000002400)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff7000/0x7000)=nil, 0x2000, 0x3}) r3 = shmget(0x0, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRESDEC], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d10300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000810}, 0x40) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r9 = syz_open_procfs(0x0, &(0x7f0000019280)='attr/fscreate\x00') pread64(r9, 0x0, 0x0, 0x1000000000) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000002240)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) shmctl$IPC_SET(r3, 0x1, &(0x7f00000022c0)={{0x0, 0xee01, 0x0, r4, r5, 0x0, 0x7fff}, 0x3, 0x93, 0x5, 0x18ba4c5b, r8, r10, 0x7}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 2m48.913220392s ago: executing program 1 (id=166): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write(r0, &(0x7f0000001f00)="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", 0x27b) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c", @ANYRES32, @ANYBLOB='\b\x00'], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) sendto$inet(r0, &(0x7f0000000140)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d2e3b", 0xfe2b, 0x10000485, 0x0, 0xfffffffffffffe91) 2m48.676648839s ago: executing program 1 (id=172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async, rerun: 64) r0 = getpgrp(0x0) (rerun: 64) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r1 = getpid() (rerun: 64) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) (async) r2 = open_tree(0xffffffffffffffff, 0x0, 0x8c01) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) (async, rerun: 64) write(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, r4, 0x100, 0x70bd25, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000040) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x200}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) setrlimit(0x8396070e229498d7, &(0x7f0000000080)={0x4, 0x6cf1}) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) (async, rerun: 32) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3801000018000100feffffff00010000e0000002000000000000000000000000fc0100000000000000000000000000014e2000074e2100050200a0203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x844) (async, rerun: 32) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000300)={0x1, [[0x1, 0x0, 0x2, 0x9, 0x6, 0xe], [0x10001, 0x0, 0x0, 0xfffffffc, 0x40000000, 0x3, 0x0, 0x7], [0x1, 0x0, 0x0, 0x7bf5, 0x0, 0x5dd6, 0x200, 0x9]], '\x00', [{0x4, 0x4000000}, {0x0, 0x1641c}, {}, {0x1, 0x80000000, 0x0, 0x0, 0x1}, {0x0, 0x2000010, 0x0, 0x1}, {0xffff5283, 0xffffffff, 0x1}, {0x2000000}, {0x1}, {}, {}, {}, {0x8}], '\x00', 0x1000}) (async, rerun: 32) sched_setaffinity(r5, 0x8, &(0x7f0000000200)=0x7) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write$sysctl(r8, &(0x7f0000000280)='1\x00', 0x1) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) 2m47.724369464s ago: executing program 32 (id=172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async, rerun: 64) r0 = getpgrp(0x0) (rerun: 64) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r1 = getpid() (rerun: 64) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) (async) r2 = open_tree(0xffffffffffffffff, 0x0, 0x8c01) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) (async, rerun: 64) write(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, r4, 0x100, 0x70bd25, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000040) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x200}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) setrlimit(0x8396070e229498d7, &(0x7f0000000080)={0x4, 0x6cf1}) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) (async, rerun: 32) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3801000018000100feffffff00010000e0000002000000000000000000000000fc0100000000000000000000000000014e2000074e2100050200a0203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x844) (async, rerun: 32) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000300)={0x1, [[0x1, 0x0, 0x2, 0x9, 0x6, 0xe], [0x10001, 0x0, 0x0, 0xfffffffc, 0x40000000, 0x3, 0x0, 0x7], [0x1, 0x0, 0x0, 0x7bf5, 0x0, 0x5dd6, 0x200, 0x9]], '\x00', [{0x4, 0x4000000}, {0x0, 0x1641c}, {}, {0x1, 0x80000000, 0x0, 0x0, 0x1}, {0x0, 0x2000010, 0x0, 0x1}, {0xffff5283, 0xffffffff, 0x1}, {0x2000000}, {0x1}, {}, {}, {}, {0x8}], '\x00', 0x1000}) (async, rerun: 32) sched_setaffinity(r5, 0x8, &(0x7f0000000200)=0x7) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write$sysctl(r8, &(0x7f0000000280)='1\x00', 0x1) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) 2m39.971948999s ago: executing program 4 (id=202): r0 = socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000240)='\'-/@]\x00', 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0xa, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x19}}, 0x10) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f00000001c0)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001800011306007000000000000a001400fe04ff06"], 0x1c}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x10040) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10000, 0xffffff87}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x2008001, 0x400055}]}}}}}}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000580)="e2", 0x20000}], 0x11) getpid() r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000080)={0x6}) ioctl$TCXONC(r6, 0x540a, 0x2) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r3}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x6a88}, &(0x7f0000000100)=0xc) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22, 0x2, @mcast1, 0x2}, 0x1c) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x0, 0x3, @mcast1, 0x2}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000140)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x9c, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0xe22, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "8742fe4687d86e5da82e41ef2302058dc3b5674f7389ec494011ccec4f7d012c", "f2760709a418c2d54dfc3bcd6b0dc0f026e4dbbd0fc37c4cf9e05eebedd14ed77e5af90f021be4d1922cd5279600538f", "9cd204eeecae9a729ee1662af2f006faf435c215365df6e6c5db8235", {"aeb6eb691496126a2d28d73f1a738b14", "fc81aa717bf9ce692ed96249827491df"}}}}}}}}, 0x0) 2m39.418865903s ago: executing program 4 (id=205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x2000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0xa, 0x8}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x3f, 0x60000080}, 0x20000000) 2m38.997831288s ago: executing program 4 (id=209): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) dup(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01042abd7000fbdbdf252e00000008000300", @ANYRES32=r6, @ANYBLOB="0a003400020202020202000006006400216a0000"], 0x30}, 0x1, 0x0, 0x0, 0x20}, 0x0) timer_create(0x4, &(0x7f0000000240)={0x0, 0x1000029}, &(0x7f0000000300)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/xfrm_stat\x00') read$eventfd(r7, &(0x7f0000000080), 0x8) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd87, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000f, 0x204031, 0xffffffffffffffff, 0xb320a000) r8 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdf0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x800, &(0x7f00000000c0)=ANY=[@ANYBLOB="21ae0e3493bd617fe20e44f8a8fd78282c646566636f6e746578743d22"]) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r9, 0x84, 0x16, &(0x7f0000000280)=ANY=[@ANYRES32=r2], 0x6) ioctl$DVB_DEMUX_DMX_SET_FILTER(r8, 0x403c6f2b, &(0x7f0000000040)={0x4, {"0dbad96fff010058a0298433631fe800", "3dfab043615fad47a639f905b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x40012, 0x6}) preadv(r8, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r8, 0x6f2d, 0x8) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000200", @ANYRES16=r3, @ANYBLOB="010000000000000000002a00000008005800000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000002"], 0x44}}, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0xc0844123, &(0x7f00000001c0)) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, &(0x7f0000000100)=0x8) 2m37.429765485s ago: executing program 4 (id=216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x8000000000000003, {}, 0xfd}, 0x18) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x800a}}) io_uring_enter(r5, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'wlan1\x00', 0x6}) fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f0000000040)=@v2={0x3, 0x0, 0xd, 0x200}, 0x9, 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0xfd27c4eff795f0e1}, 0x480c5) r9 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0x64010100, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0xfffffffffffffff7, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc, 0x6c}, 0x0, @in6=@empty, 0xfffffffc, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r9, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0xc1}, {0x4, 0x2}, 0x6, 0x2, 0xa, 0x4, 0x18, 0x19}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}}, 0x0) 2m35.417850749s ago: executing program 4 (id=225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x2, &(0x7f0000000000)=0x80000000000003) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001080)={0x27, 0x0, 0x0, 0x1, 0x5, 0x81, "bf4ee1a1cc3ebcffc0a5611154ee4f2b0e4bc32ff9b3d2064fc8cfd35115d8b2f42ec29e80a3250d99b87a57406cbe21951cd627a9165d8f8920789245c424", 0xa}, 0x60) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000100280012000c00010076657468"], 0x48}}, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x3e9, 0x10, 0x70bd26, 0x25dfdbfc, {0x79, 0x0, 0x1, r0, 0xb53, 0x2, 0x6, 0x9, 0x0, 0x401, 0x1}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044090}, 0x4004800) open(0x0, 0x240000, 0x10a) 2m33.953607755s ago: executing program 4 (id=228): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x7, 0x10c062) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0xc8901, 0x196) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0xc8901, 0x196) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x5a, 0x6010000000000ffd, 0x0, 0x0, 0x19, 0x19, "faf98317e5a1149989fc8dbe43ee6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60b534464c516bdd8a0f3500", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce8, 0x100]}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/platform/devices/snd_aloop.0/driver/unbind\x00', 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) (async) r3 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, 0x0) write(r2, &(0x7f00000002c0)='snd_aloop.0', 0xb) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r5, 0x4188aec6, &(0x7f0000000d80)={0x0, [{0x1, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x3, 0x0, 0xd, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x400e0, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0xca, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x13f, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xffffffbc, 0x0}, {0x7, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x0, 0x0}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) (async) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 2m18.601823628s ago: executing program 33 (id=228): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x7, 0x10c062) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0xc8901, 0x196) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0xc8901, 0x196) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x5a, 0x6010000000000ffd, 0x0, 0x0, 0x19, 0x19, "faf98317e5a1149989fc8dbe43ee6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60b534464c516bdd8a0f3500", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce8, 0x100]}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/platform/devices/snd_aloop.0/driver/unbind\x00', 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) (async) r3 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, 0x0) write(r2, &(0x7f00000002c0)='snd_aloop.0', 0xb) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r5, 0x4188aec6, &(0x7f0000000d80)={0x0, [{0x1, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x3, 0x0, 0xd, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x400e0, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0xca, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x13f, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xffffffbc, 0x0}, {0x7, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x0, 0x0}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) (async) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 32.228755483s ago: executing program 6 (id=742): syz_emit_ethernet(0x76, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb86dd600a843500402f00fe8000000000f5ffffff0000000000bbfe8000000000000000000000000000aa"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) 32.110095051s ago: executing program 6 (id=743): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x1c, 0x64, 0x3, 0xb, 0x88, 0x0, 0x8, 0x10, 0x63, 0xe, 0xf, 0x4, 0x2, 0x3, 0xf9}}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000200)={"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"}) (async, rerun: 32) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000070, 0x0, 0x20}]}) (async, rerun: 32) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) (async) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) (async) r4 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{0x0}], 0x1}, 0x48043) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) (rerun: 32) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={r5, &(0x7f0000000240)="a7", &(0x7f0000001700)=""/4096}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES8], 0x1c}}, 0x8002) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) (async) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x6a521, 0x210}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x5}, @IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0x49}]}}}, @IFLA_VF_PORTS={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async) write$uinput_user_dev(r3, &(0x7f0000000cc0)={'syz1\x00', {0x6, 0x1, 0x6, 0x2}, 0x2e, [0xb, 0x77e, 0x9, 0x9, 0x7fffffff, 0x8, 0xa, 0xfffff801, 0x8000, 0x7, 0x7, 0x2, 0x10, 0x9, 0xfffffff8, 0x1, 0x8, 0x2, 0x7, 0x5, 0x2, 0x8000, 0x3, 0x5b8, 0x0, 0x6, 0x2, 0x1, 0x2, 0x7, 0x5, 0xfffffff3, 0x1, 0x4f, 0x1, 0x2, 0xf, 0x2, 0x4, 0x2, 0x8, 0x54, 0x6, 0xf, 0x9, 0x7, 0x9, 0xae63, 0xf, 0x4, 0x2c, 0x8, 0x3, 0x0, 0xf8000000, 0xc529, 0x2, 0x10, 0x7f, 0x2, 0x8080, 0x593, 0x5, 0x8], [0x0, 0x0, 0x3, 0xf898, 0x1000, 0x10800, 0xfffffffe, 0x4, 0xf, 0x3, 0x8, 0x0, 0x0, 0xd4, 0x101, 0x800, 0x3, 0x6, 0x1000, 0x9, 0xffffffff, 0x23e, 0x5, 0xc, 0x4, 0x2, 0x7fff, 0xc, 0x0, 0x101, 0x9, 0x8, 0xf, 0xe, 0x80000080, 0xafd, 0x7, 0xe9, 0x82, 0x4, 0x10, 0xb, 0x1ff, 0x8, 0x7, 0x0, 0xfffffff1, 0xd, 0x3, 0x1, 0x5, 0x3, 0x7ff, 0x1, 0x4000003, 0x80000000, 0x1, 0x6, 0x9, 0x10, 0xfffffffe, 0xa7, 0xd, 0x4], [0x7, 0x1, 0x7, 0x1ff, 0x4, 0x108, 0xfffffffe, 0x5, 0xa0000000, 0x8, 0x80000000, 0x2, 0xb, 0x5, 0x3, 0xc, 0xa000, 0x10005, 0x4, 0x8000, 0x3, 0x9, 0x0, 0x9, 0x7, 0x7ff, 0x6, 0x7, 0x4, 0xff, 0x5, 0x2a, 0x40, 0x3, 0x2, 0x2, 0x9, 0x3, 0x8, 0x8, 0x80000001, 0x1ff, 0x440, 0xee5, 0x4, 0x2, 0x4, 0x8000, 0xa0a3, 0x0, 0x3, 0x401, 0x2, 0x95b, 0x7e5, 0x8, 0xe676, 0x1c, 0x0, 0xe7ca, 0x9, 0x9, 0x101, 0x8], [0xc5, 0x6, 0x8001, 0x3, 0x0, 0x5, 0x6, 0x0, 0x7ff, 0xffffff5b, 0x2, 0x3, 0x8, 0x2, 0xb47a, 0x7fffffff, 0xfe6, 0x10000, 0x65c, 0x1, 0x100, 0x9, 0x9, 0x3, 0xfffffff7, 0x2, 0xfffff000, 0x4, 0x1, 0x1000, 0x200, 0xfffffffd, 0x2, 0x0, 0xfffffff8, 0x80000000, 0xba, 0x7fffffff, 0xffffffff, 0xa, 0x6, 0x0, 0x0, 0x10001, 0x2, 0x200, 0x1, 0x9, 0xf79, 0x3, 0xffff, 0xdb, 0x7, 0x0, 0x0, 0xff, 0x6, 0x1, 0x4, 0x0, 0x1, 0x7, 0x5, 0x3]}, 0x45c) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 32.024881297s ago: executing program 6 (id=744): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000006ba6d00ffffff900000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000090000000bca900000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 31.886388132s ago: executing program 6 (id=746): syz_clone(0x46068011, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 30.713026827s ago: executing program 6 (id=748): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffb}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x1000000, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 30.463518008s ago: executing program 6 (id=750): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x403, 0x3, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e24}]}}}, @IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x50}}, 0x4008080) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000120001000000000000000000ac14140000000000000000000000000000007d9e0000000014000d00200100"/60], 0x3c}}, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$proc_mixer(r2, 0x0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_async', 0x1a1081, 0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x9, r4, &(0x7f0000000200)="cd61fc", 0x3, 0xd}]) 30.189160635s ago: executing program 34 (id=750): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x403, 0x3, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40102}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e24}]}}}, @IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x50}}, 0x4008080) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000120001000000000000000000ac14140000000000000000000000000000007d9e0000000014000d00200100"/60], 0x3c}}, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$proc_mixer(r2, 0x0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_async', 0x1a1081, 0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x9, r4, &(0x7f0000000200)="cd61fc", 0x3, 0xd}]) 8.42599988s ago: executing program 0 (id=849): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setscheduler(0xffffffffffffffff, 0x5, &(0x7f0000000980)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = socket(0x2, 0x80805, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x205, 0x1, 0x7, 0xe, 0x1, @random="c28a3c256abf"}, 0x10) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b14"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) open(0x0, 0x240000, 0x10a) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06000000040000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 7.696570904s ago: executing program 5 (id=855): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$video(0x0, 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x2, 0x0, {0xffffffff, 0xbde, 0x1, 0x10000}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000100)=0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r9 = syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) r10 = dup2(r9, r9) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) syz_ublk_setup_queues(r10, r11, &(0x7f0000000180)={0x0, 0x8d57, 0x1, 0x8, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800001, 0x2000, 0x2000, 0x10000008}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x40, 0x3, 0x30a, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe562, 0x0, 0x2, 0x1c3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x82, 0x800345}}], 0x1, 0x0, 0x0) r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r13 = dup(r12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r13, 0x6000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 6.461170592s ago: executing program 5 (id=858): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b80000001900010002000000fbdbdf25e0000002000000000000000000000000fe8000000000000000000000000300aa00000040000000000a00008006"], 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) 6.37810923s ago: executing program 3 (id=859): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200000000000000010902"], 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "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"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000171c000104293d7000ffdbdf250700000093691180d6941919c4d7e78fde4d5352716f49", @ANYRES32, @ANYBLOB="800006070a000200aaaa"], 0x28}, 0x1, 0x0, 0x0, 0x2000c880}, 0x9840) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3], 0x6f4}}, 0x0) 6.242297734s ago: executing program 5 (id=860): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 6.012491974s ago: executing program 5 (id=863): r0 = userfaultfd(0x801) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt/del3\x00', 0x42, 0x1ff) close(r1) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt/del3\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000180)=@sr0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, &(0x7f0000000140)='compr=none\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt/file2\x00', 0x42, 0x1ff) write(r2, &(0x7f0000000240)='\x00', 0x1) close(r2) unlinkat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/file2\x00', 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x6a0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xa) 5.94282468s ago: executing program 0 (id=864): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000400000003c055170640000008000300", @ANYRES32=r2, @ANYBLOB="0800050003"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001080)={0x1a8, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {{{}, {}, @broadcast, @device_a, @random="b92e35ac622e"}, 0x0, @default, 0xb, @void, @void, @val={0x3, 0x1, 0x95}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_IE_PROBE_RESP={0x18, 0x7f, [@link_id={0x65, 0x12, {@from_mac=@device_b, @device_b, @device_b}}]}, @NL80211_ATTR_IE={0x9, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0xb3, 0x1}}]}, @NL80211_ATTR_PROBE_RESP={0x11d, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}]]}, 0x1a8}, 0x1, 0x0, 0x0, 0x80}, 0x300) 5.202019599s ago: executing program 0 (id=866): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc4206000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}, 0x1, 0x1f000000}, 0x0) 5.201665999s ago: executing program 2 (id=867): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019440)=""/102400, 0x19000) listns(&(0x7f0000000000)={0x20, 0x0, 0x2}, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000100039042cbd7000eaffffff000003", @ANYRES32=0x0], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r5, 0x0, 0x0) write(r5, &(0x7f0000000100)='file read /etc/passwd task.uid=0 exec.argv[0]=\"sh\" exec.envp[\"PAT]=]=\"/bin\"', 0x4b) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x301, 0x0, 0xfffffffd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x800000}, 0xc) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0) r7 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x1f0, 0x288, 0x158, 0x0, 0x8f, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0xff, 0x0, 'pim6reg0\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x158}}, {{@ip={@rand_addr=0x64010100, @local, 0x0, 0x0, 'pim6reg1\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x6, 0x3, 0x40}, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0xfe, 0x7}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x33, 0x3}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'ip6tnl0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x4, 0x5}, {0x0, 0x6, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) 4.351144324s ago: executing program 2 (id=869): ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="dbaa00141001000000000000"], &(0x7f0000000480)='syzkaller\x00', 0xa}, 0x94) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) socket(0x2b, 0x2, 0x1) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000002080)={0x9, {"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", 0x1000}}, 0x1006) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000000)) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0x200, 0xfa14, 0x8}, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unshare(0x28000600) (async) socket$l2tp6(0xa, 0x2, 0x73) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async, rerun: 32) r4 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, 0x0) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) r5 = syz_open_dev$mtd(0x0, 0x48a99fbe, 0x143203) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000004000000000edcdf2535000000", @ANYRES32=0x0, @ANYBLOB="14d00400000000001c00128009000100626f6e64000000000c0002800800140007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20004003}, 0x0) (async, rerun: 32) ioctl$MEMGETREGIONCOUNT(r5, 0x80044d07, 0x0) (rerun: 32) 3.745982292s ago: executing program 5 (id=870): listns(&(0x7f0000000200)={0x20, 0x0, 0x8000000000000000, 0x8000000, 0x0, 0x3}, 0x0, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x80800, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r1, 0xc004ae0a, &(0x7f0000000280)) listen(r0, 0x402) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000), 0x400, &(0x7f0000000100)=ANY=[]) openat$kvm(0xffffffffffffff9c, 0x0, 0x2001, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) r2 = fsmount(0xffffffffffffffff, 0x0, 0x2) fchdir(r2) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r2, 0x5e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x300}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x5) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000080)={'dt2817\x00', [0x3c8, 0x5, 0x2, 0x8, 0x14000000, 0x0, 0x3, 0xa, 0xefd, 0x7ffe, 0x9, 0x13, 0x400, 0x2, 0x13, 0xbd55, 0xffffffa7, 0x3c, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0x860, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x3]}) ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) 3.696009108s ago: executing program 3 (id=871): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000400), 0x20002, 0x0) ioctl$mixer_OSS_GETVERSION(r2, 0x80044d76, &(0x7f0000000000)) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"a2e3ad0e090d07f91b5e1b1887f70706d038e7ff7fc6e5539b0d3e0a8b089b3f32356c030890e0879b0a4cc6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07732f0acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973725b36d5b1b7ddd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fde70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe090064f11e4fe852c3f7c4239963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632bcfaaa5ae6c07a236d9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79ca389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e55fc4a41ea4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c46bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eb0600f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180610117a13638e9a14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae0036327bd1f4108b7807fb33b72685ec37a2d3f766413a60459516247e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7d78aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e9fbfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c675879c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885594ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xffffffffffffff68}}, 0x1006) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x1, 0x4) ioctl$KVM_GET_MSRS_cpu(r1, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [{0x1b0, 0x0, 0xa000000000000000}, {0x9a0, 0x0, 0x1}]}) 3.407378081s ago: executing program 3 (id=874): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0xe) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x8) connect$inet(r3, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r4 = accept$inet(r2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendto(r4, &(0x7f0000000700)='ab', 0xfffffcf4, 0x11, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r7, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r7, 0x14, 0x0, 0x0) openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r7) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000001c0)=0x3, 0x2) 3.323626425s ago: executing program 0 (id=875): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 3.11823462s ago: executing program 7 (id=876): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)='\x00', 0x1, 0x1e8133) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "00000000000000000000000000000000000000000000000100"}) 2.916271895s ago: executing program 0 (id=877): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x300, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x0, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_RTT={0x8, 0x7, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x20008844) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x13, &(0x7f0000000780)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) ioctl$OCFS2_IOC_RESVSP(r1, 0x40305828, &(0x7f00000009c0)={0x2, 0x1, 0xf1, 0x8, 0x5, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) writev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000340)="368899c7a0db4bd252ecc8dddad4d1e63904befcd239835abd5bbe2138fd242b5bb326c888128b8bc0efccca2951a894eee6459a27d9455eb63a58afead0c3b1dae5df3f89a75ba9f6fac09fa0e694dcaf06503a63f86952c562468e8694981bd6", 0x61}, {&(0x7f0000000440)="25a3a5a87500eb73f6d1a10557bd1c017f48e9c61fa18a32648a58d8fac6d6142a7c73fc22615f1ef68980c4b9f82d002fd4f0eec58a4cb0720df17297ca3c668fe5e595ce71e74501f6bcf7e97d01a028972d37db3a04833c8a374352257974f4375c714b16b7b8fda04573801c89c660f9b0098add4b62bba47c307f510047a073e36eb039bcaf6d9b3fff44eb24cb1bb30f401822ec9cf9ff324957cf20", 0x9f}, {&(0x7f0000000540)="2fbead346f8777bb1fcb9a6ccde9cf9bae11b3ca9a3ce43a760641f9b1680af477c4cb152358d8e5d3830b2695103e0c06767c62ba1d37f759c3599b3a823fce177ab6ecf94d18aa3da44fdc0422f6352c5accda12a3c053db3e28367d3d8695d4fc63a45f97929d68b7c02e85f0f7e9cae93d3b", 0x74}, {&(0x7f0000000640)="9532e0a2138b4268ce17d4d8e644311439f57a6a8a75d783b7c828772bc21b6dbd887ca3c489155289e376d7b11f1834ec3230305d2142aacea19c2e8ca351f13513a95e8342ea07785a2c2a4879553116aca07fcb1cb592ac2b468d942cd7d1025954876257de028178f97d7dd834da84169ac64fd3b459c25f98b90664dd4f504d9f4083f810f76f5f295f21268d02a8986d594d1c002fb810818e7ee3fb917888c7abee71facb9dcf1d4d5419594cbd78f122fd60520713e06546e237763a60e80b", 0xc3}], 0x4) 2.774603047s ago: executing program 7 (id=878): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='secret\x00', &(0x7f0000000100)='=QAA=AAAAAAAAAAAABAAA=AAAAAAAAAAAAAAAA=/\x00', 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000a, 0x200000005c831, r0, 0xbee35000) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000110054010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r2, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%pi6 \x00'}, 0x20) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80820}, 0xc0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r4 = gettid() r5 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYBLOB="089805000750050008001300", @ANYRES32=r4, @ANYBLOB="08002c0005000000140003007665"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r9 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b40500000000000079101000000000005e500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r3}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r9, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x190}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000c80)=@newqdisc={0x28, 0x24, 0x2, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0x5}, {0x1ffe3, 0xd}, {0xa, 0xb}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x44844}, 0x0) write$selinux_load(r8, &(0x7f0000000000)=ANY=[], 0xffaf) 2.585981451s ago: executing program 2 (id=879): socket$inet(0x2, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x40, 0x1}}, 0x50) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x202, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r4, 0x0, &(0x7f0000605000/0x3000)=nil, 0x3000, 0x100}) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000020"]) 2.549508946s ago: executing program 7 (id=880): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0xa00, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xfffffff0}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.229357165s ago: executing program 7 (id=881): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000001100000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) 2.086160854s ago: executing program 3 (id=882): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200000000000000010902"], 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "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"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000171c000104293d7000ffdbdf250700000093691180d6941919c4d7e78fde4d5352716f49", @ANYRES32, @ANYBLOB="800006070a000200aaaa"], 0x28}, 0x1, 0x0, 0x0, 0x2000c880}, 0x9840) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB], 0x6f4}}, 0x0) 2.085710292s ago: executing program 7 (id=883): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000008100800000030000000000000500130006000000"], 0x24}}, 0x0) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0xe, 0x2640) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c41f4040110f00107f000000000109021200010000000009"], 0x0) dup3(r1, r4, 0x0) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x2002429, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x70bd25, 0x25dfdbfc, 0x5, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040004}, 0x20004040) ioctl(r5, 0x40104d06, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc010643a, &(0x7f0000000000)={0x3e, 0x4, 0x7}) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r0}}) 1.877758979s ago: executing program 5 (id=884): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x124) r0 = socket$inet_sctp(0x2, 0x1, 0x84) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYBLOB="d83c4680c6ac959faf9d1114c55b560f04218add8e253e0f1c5a95036b001bbff66ef85e44e3d7a5b6b0411a4a9c9a89201ef31dd7cc921e7da14422584076018c1fd1ac9af9da328ebce9940a6c66efc8d1ee01803dc0"], 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRES8, @ANYRES16=r4, @ANYBLOB="c3a723563aa1f71e5973715f593d20fdf577af3560aedc793f6d28c217296637df7d6649d943fe484c898fdec295b0a5b15b05925a2420fc4f84ee1d1294cef3656d259cde95b337573ce700", @ANYRES32=r5, @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4854) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @sack_perm, @window={0x3, 0x8}, @mss={0x2, 0xfff}, @timestamp, @window], 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_virt_wifi\x00', &(0x7f0000000040)=@ethtool_test={0x1a, 0xfffff801, 0x6, 0x5, [0x4, 0x0, 0x5, 0x8000, 0x6]}}) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc08c5332, &(0x7f0000000400)={{0x40, 0x13}, 0x1, 0x4, 0x88, {}, 0x0, 0x4000ffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r6, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x3}}) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/prev\x00') read$FUSE(r7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000500), 0xffffffffffffffff) 1.793960701s ago: executing program 0 (id=885): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @private0, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.686663689s ago: executing program 2 (id=886): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@delneigh={0x1c, 0x1d, 0x1, 0x70bd29, 0x0, {0x7, 0x0, 0x0, r2, 0x10, 0xff, 0x4}}, 0x1c}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @empty, @remote, [@hopopts={0x3a}, @srh={0xc, 0x0, 0x4, 0x0, 0x9, 0x20, 0x2}]}}}}}}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000000)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012, r4}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0xfffffff6, 0x1004}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, @empty}}) 1.581165967s ago: executing program 2 (id=887): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_io_uring_complete(0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 687.290358ms ago: executing program 2 (id=888): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x2, &(0x7f0000000000)=0x80000000000003) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001080)={0x27, 0x0, 0x0, 0x1, 0x5, 0x81, "bf4ee1a1cc3ebcffc0a5611154ee4f2b0e4bc32ff9b3d2064fc8cfd35115d8b2f42ec29e80a3250d99b87a57406cbe21951cd627a9165d8f8920789245c424", 0xa}, 0x60) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x3e9, 0x10, 0x70bd26, 0x25dfdbfc, {0x79, 0x0, 0x1, r0, 0xb53, 0x2, 0x6, 0x9, 0x0, 0x401, 0x1}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044090}, 0x4004800) open(0x0, 0x240000, 0x10a) 667.366944ms ago: executing program 3 (id=889): bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000001000000000000000700000000"], 0x48) 590.279578ms ago: executing program 7 (id=890): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='secret\x00', &(0x7f0000000100)='=QAA=AAAAAAAAAAAABAAA=AAAAAAAAAAAAAAAA=/\x00', 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000a, 0x200000005c831, r0, 0xbee35000) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000110054010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r2, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%pi6 \x00'}, 0x20) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80820}, 0xc0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r4 = gettid() r5 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYBLOB="089805000750050008001300", @ANYRES32=r4, @ANYBLOB="08002c0005000000140003007665"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r9 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b40500000000000079101000000000005e500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r3}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r9, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x190}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000c80)=@newqdisc={0x28, 0x24, 0x2, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0x5}, {0x1ffe3, 0xd}, {0xa, 0xb}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x44844}, 0x0) write$selinux_load(r8, &(0x7f0000000000)=ANY=[], 0xffaf) 0s ago: executing program 3 (id=891): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r4, &(0x7f0000001480)='-', 0x1) splice(r3, 0x0, r0, 0x0, 0x100000000, 0x1) write$tun(r2, &(0x7f00000002c0)=ANY=[], 0x5c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0xfffd) kernel console output (not intermixed with test programs): tadv0: Adding interface: batadv_slave_0 [ 159.660406][ T7018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.715041][ T7018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.753120][ T29] audit: type=1400 audit(1787701962.539:487): avc: denied { write } for pid=7128 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.778452][ T7018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.785572][ T7018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.801327][ T7153] futex_wake_op: syz.5.316 tries to shift op by 144; fix this program [ 159.824548][ T7018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.855792][ T22] process 7149 (syz.2.315) no longer affine to cpu1 [ 159.876871][ T984] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 159.910125][ T29] audit: type=1400 audit(1787701962.709:488): avc: denied { write } for pid=7158 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.961939][ T7157] smpboot: CPU 1 is now offline [ 160.001776][ T7018] hsr_slave_0: entered promiscuous mode [ 160.663556][ T7018] hsr_slave_1: entered promiscuous mode [ 160.694311][ T7018] debugfs: 'hsr0' already exists in 'hsr' [ 160.721609][ T7018] Cannot create hsr debugfs directory [ 160.858524][ T984] usb 1-1: Using ep0 maxpacket: 8 [ 160.879995][ T984] usb 1-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 160.934945][ T984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.993587][ T984] usb 1-1: config 0 descriptor?? [ 161.043442][ T984] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 161.098515][ T5610] Bluetooth: hci5: command tx timeout [ 161.362849][ T7182] netlink: 20 bytes leftover after parsing attributes in process `syz.2.320'. [ 161.454787][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 161.506598][ T984] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 161.516156][ T192] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 161.552971][ T29] audit: type=1400 audit(1787701964.349:489): avc: denied { write } for pid=7170 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.606046][ T984] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 161.650467][ T984] usb 1-1: media controller created [ 161.655938][ T7018] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 161.697575][ T29] audit: type=1400 audit(1787701964.429:490): avc: denied { write } for pid=7187 comm="syz.2.321" name="nullb" dev="configfs" ino=3558 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 161.733135][ T7018] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 161.740684][ T192] usb 6-1: Using ep0 maxpacket: 8 [ 161.748260][ T984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 161.771907][ T192] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 161.791848][ T7018] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 161.826059][ T192] usb 6-1: config 0 has no interfaces? [ 161.841394][ T7018] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 161.862133][ T192] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.874232][ T29] audit: type=1400 audit(1787701964.489:491): avc: denied { read } for pid=7187 comm="syz.2.321" name="memory_backed" dev="configfs" ino=15712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 161.912289][ T7018] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 161.944844][ T192] usb 6-1: config 0 descriptor?? [ 161.960943][ T7018] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 161.989382][ T984] DVB: Unable to find symbol lgdt330x_attach() [ 162.014095][ T7018] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 162.028763][ T984] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 162.046302][ T29] audit: type=1800 audit(1787701964.519:492): pid=7190 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.321" name="memory_backed" dev="configfs" ino=15712 res=0 errno=0 [ 162.082017][ T7018] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 162.099376][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 162.113364][ T984] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 162.153377][ T29] audit: type=1800 audit(1787701964.569:493): pid=7189 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.321" name="zoned" dev="configfs" ino=15713 res=0 errno=0 [ 162.184983][ T984] usb 1-1: USB disconnect, device number 8 [ 162.215058][ T7189] null_blk: disk my_zoned_dev created [ 162.286591][ T5696] usb 6-1: USB disconnect, device number 4 [ 162.346953][ T192] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 162.361319][ T984] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 162.449012][ T7018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.537573][ T192] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 163.319164][ T192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.335800][ T7018] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.365409][ T192] usb 3-1: Product: syz [ 163.392024][ T192] usb 3-1: Manufacturer: syz [ 163.410322][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.417473][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.432027][ T192] usb 3-1: SerialNumber: syz [ 163.529346][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.536467][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.579280][ T7196] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 163.733860][ T7222] TCP: TCP_TX_DELAY enabled [ 164.487444][ T5712] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 164.629962][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 164.629973][ T29] audit: type=1400 audit(1787701967.429:500): avc: denied { create } for pid=7232 comm="syz.0.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 164.703999][ T5712] usb 6-1: Using ep0 maxpacket: 32 [ 164.716686][ T7251] netlink: 24 bytes leftover after parsing attributes in process `syz.0.326'. [ 164.747248][ T7256] netlink: 24 bytes leftover after parsing attributes in process `syz.0.326'. [ 164.779863][ T5712] usb 6-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 164.808841][ T5696] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 164.823594][ T5712] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 164.844189][ T192] usb 3-1: selecting invalid altsetting 1 [ 164.886273][ T192] speedtch 3-1:1.0: speedtch_bind: setting interface to 1 failed (-22)! [ 164.927314][ T5712] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.961130][ T7018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.969395][ T192] speedtch 3-1:1.0: usbatm_usb_probe: bind failed: -22! [ 164.981059][ T5712] usb 6-1: Product: syz [ 164.990953][ T29] audit: type=1400 audit(1787701967.779:501): avc: denied { write } for pid=7240 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.024944][ T5712] usb 6-1: Manufacturer: syz [ 165.038326][ T192] speedtch 3-1:1.0: probe with driver speedtch failed with error -22 [ 165.046571][ T5696] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 165.069311][ T5712] usb 6-1: SerialNumber: syz [ 165.080088][ T7264] sctp: [Deprecated]: syz.2.330 (pid 7264) Use of struct sctp_assoc_value in delayed_ack socket option. [ 165.080088][ T7264] Use struct sctp_sack_info instead [ 165.130772][ T5696] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 165.142566][ T192] usb 3-1: selecting invalid altsetting 1 [ 165.172827][ T192] speedtch 3-1:1.1: speedtch_bind: setting interface to 1 failed (-22)! [ 165.187114][ T5696] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 165.222632][ T192] speedtch 3-1:1.1: usbatm_usb_probe: bind failed: -22! [ 165.235375][ T5696] usb 4-1: config 150 has no interface number 0 [ 165.253801][ T7264] binder: 7262:7264 ioctl c0285629 200000000440 returned -22 [ 165.272398][ T192] speedtch 3-1:1.1: probe with driver speedtch failed with error -22 [ 165.292021][ T29] audit: type=1400 audit(1787701968.089:502): avc: denied { write } for pid=7270 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.314822][ T5696] usb 4-1: config 150 interface 204 has no altsetting 0 [ 165.382806][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.394250][ T192] usb 3-1: USB disconnect, device number 6 [ 165.442531][ T5696] usb 4-1: Product: syz [ 165.483603][ T5696] usb 4-1: Manufacturer: syz [ 165.491861][ T29] audit: type=1400 audit(1787701968.149:503): avc: denied { call } for pid=7262 comm="syz.2.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 165.546599][ T5696] usb 4-1: SerialNumber: syz [ 165.934735][ T7018] veth0_vlan: entered promiscuous mode [ 165.953537][ T5696] xr_serial 4-1:150.204: skipping garbage [ 165.993321][ T5712] usb 6-1: selecting invalid altsetting 1 [ 166.017070][ T5696] xr_serial 4-1:150.204: xr_serial converter detected [ 166.030373][ T7018] veth1_vlan: entered promiscuous mode [ 166.042328][ T5712] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 166.042383][ T5712] dvb_usb_lmedm04 6-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 166.146683][ T29] audit: type=1400 audit(1787701968.939:504): avc: denied { read write } for pid=7286 comm="syz.5.333" name="sg0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 166.184388][ T5712] usb 6-1: USB disconnect, device number 5 [ 166.212078][ T7018] veth0_macvtap: entered promiscuous mode [ 166.354596][ T7018] veth1_macvtap: entered promiscuous mode [ 166.420747][ T29] audit: type=1400 audit(1787701968.939:505): avc: denied { open } for pid=7286 comm="syz.5.333" path="/dev/sg0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 166.446691][ T7018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.511581][ T7018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.606560][ T29] audit: type=1400 audit(1787701969.389:506): avc: denied { write } for pid=7277 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.630578][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.679950][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.798951][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.878162][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.910302][ T29] audit: type=1400 audit(1787701969.699:507): avc: denied { connect } for pid=7248 comm="syz.3.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 167.014555][ T5696] usb 4-1: xr_serial converter now attached to ttyUSB0 [ 167.113754][ T29] audit: type=1400 audit(1787701969.809:508): avc: denied { write } for pid=7298 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.151061][ T316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.201059][ T7303] ieee802154 phy0 wpan0: encryption failed: -22 [ 167.224044][ T316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.304142][ T29] audit: type=1400 audit(1787701969.939:509): avc: denied { create } for pid=7302 comm="syz.2.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 167.332811][ T316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.385516][ T316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.501972][ T7311] sctp: [Deprecated]: syz.0.338 (pid 7311) Use of int in max_burst socket option. [ 167.501972][ T7311] Use struct sctp_assoc_value instead [ 167.572292][ T5787] usb 4-1: USB disconnect, device number 11 [ 167.632906][ T5787] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 167.700561][ T5787] xr_serial 4-1:150.204: device disconnected [ 167.884597][ T7320] device-mapper: ioctl: Invalid target message parameters. [ 169.356882][ T192] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 169.438173][ T5709] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 169.538452][ T192] usb 6-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 169.580807][ T192] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.181378][ T7361] netlink: 24 bytes leftover after parsing attributes in process `syz.6.347'. [ 170.192267][ T7361] xt_TPROXY: Can be used only with -p tcp or -p udp [ 170.259373][ T5709] usb 3-1: Using ep0 maxpacket: 32 [ 170.281907][ T192] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 170.305376][ T5709] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 170.350990][ T192] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 170.398492][ T5709] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 170.421295][ T192] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.470141][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.486466][ T5709] usb 3-1: Product: syz [ 170.503635][ T192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.518462][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 170.518473][ T29] audit: type=1400 audit(1787701973.319:516): avc: denied { write } for pid=7346 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.550259][ T5709] usb 3-1: Manufacturer: syz [ 170.574641][ T5709] usb 3-1: SerialNumber: syz [ 170.585359][ T192] usb 6-1: Product: syz [ 170.620255][ T192] usb 6-1: Manufacturer: syz [ 170.640471][ T192] usb 6-1: SerialNumber: syz [ 170.682093][ T192] ums-onetouch 6-1:1.0: USB Mass Storage device detected [ 170.780870][ T29] audit: type=1400 audit(1787701973.579:517): avc: denied { write } for pid=7368 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.196078][ T29] audit: type=1400 audit(1787701973.989:518): avc: denied { accept } for pid=7379 comm="syz.0.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 171.378889][ T5709] usb 3-1: selecting invalid altsetting 1 [ 171.417192][ T5709] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 171.417244][ T5709] dvb_usb_lmedm04 3-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 171.473503][ T29] audit: type=1400 audit(1787701974.269:519): avc: denied { setopt } for pid=7383 comm="syz.6.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 171.508219][ T5709] usb 3-1: USB disconnect, device number 7 [ 171.677026][ T5787] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 171.959352][ T5696] usb 6-1: USB disconnect, device number 6 [ 172.099570][ T29] audit: type=1400 audit(1787701974.889:520): avc: denied { read } for pid=7399 comm="syz.2.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 172.137318][ T5787] usb 1-1: Using ep0 maxpacket: 32 [ 172.165275][ T5787] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 172.223280][ T5787] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 172.250039][ T5787] usb 1-1: config 0 has no interface number 0 [ 172.280256][ T5787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.314942][ T5787] usb 1-1: Product: syz [ 172.324108][ T7410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.356'. [ 172.345765][ T7410] bridge1: port 1(dummy0) entered blocking state [ 172.352800][ T7410] bridge1: port 1(dummy0) entered disabled state [ 172.360030][ T7410] dummy0: entered allmulticast mode [ 172.366262][ T7410] dummy0: entered promiscuous mode [ 172.371841][ T7410] bridge1: port 1(dummy0) entered blocking state [ 172.378208][ T7410] bridge1: port 1(dummy0) entered forwarding state [ 172.391447][ T7410] netlink: 'syz.3.356': attribute type 10 has an invalid length. [ 172.399247][ T7410] netlink: 40 bytes leftover after parsing attributes in process `syz.3.356'. [ 172.408573][ T7410] dummy0: left allmulticast mode [ 172.413586][ T7410] bridge1: port 1(dummy0) entered disabled state [ 172.429811][ T5787] usb 1-1: Manufacturer: syz [ 172.449951][ T5787] usb 1-1: SerialNumber: syz [ 172.471403][ T5787] usb 1-1: config 0 descriptor?? [ 172.500223][ T5787] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 172.541647][ T5787] usb 1-1: selecting invalid altsetting 1 [ 172.562844][ T5787] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 172.590077][ T5787] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 172.610022][ T5787] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 172.712988][ T5787] usb 1-1: media controller created [ 172.757663][ T192] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 172.819309][ T29] audit: type=1400 audit(1787701975.619:521): avc: denied { append } for pid=7379 comm="syz.0.349" name="i2c-1" dev="devtmpfs" ino=2917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.845044][ T5787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 172.853466][ T5709] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 172.906578][ T7381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.948409][ T192] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 172.982420][ T7381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.000504][ T192] usb 7-1: config 2 interface 0 altsetting 178 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 173.036342][ T5787] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 173.045971][ T5709] usb 6-1: Using ep0 maxpacket: 32 [ 173.052201][ T5709] usb 6-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 173.062247][ T192] usb 7-1: config 2 interface 0 altsetting 178 endpoint 0x88 has invalid wMaxPacketSize 0 [ 173.080435][ T5787] zl10353_read_register: readreg error (reg=127, ret==-71) [ 173.099528][ T5709] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 173.112086][ T192] usb 7-1: config 2 interface 0 has no altsetting 0 [ 173.123771][ T5787] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 173.163220][ T192] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.172210][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.197005][ T5709] usb 6-1: Product: syz [ 173.206535][ T192] usb 7-1: Product: syz [ 173.218515][ T5709] usb 6-1: Manufacturer: syz [ 173.228383][ T192] usb 7-1: Manufacturer: syz [ 173.251307][ T5709] usb 6-1: SerialNumber: syz [ 173.264798][ T5787] usb 1-1: USB disconnect, device number 9 [ 173.272842][ T192] usb 7-1: SerialNumber: syz [ 173.653817][ T29] audit: type=1400 audit(1787701976.449:522): avc: denied { create } for pid=7437 comm="syz.3.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 173.684948][ T29] audit: type=1400 audit(1787701976.479:523): avc: denied { getopt } for pid=7437 comm="syz.3.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 173.736947][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 173.815452][ T5610] Bluetooth: hci1: Invalid handle: 0x70bc > 0x0eff [ 173.831934][ T29] audit: type=1400 audit(1787701976.629:524): avc: denied { read append } for pid=7439 comm="syz.0.369" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 173.880125][ T29] audit: type=1400 audit(1787701976.629:525): avc: denied { open } for pid=7439 comm="syz.0.369" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 173.922709][ T5696] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 173.932785][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 173.942044][ T10] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 173.952981][ T7440] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 173.967642][ T10] usb 3-1: config 0 has no interfaces? [ 173.978449][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.987715][ T7440] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 174.009712][ T10] usb 3-1: config 0 descriptor?? [ 174.051795][ T5709] usb 6-1: selecting invalid altsetting 1 [ 174.069680][ T7440] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 174.086954][ T5696] usb 4-1: Using ep0 maxpacket: 32 [ 174.102463][ T5709] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 174.102564][ T5709] dvb_usb_lmedm04 6-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 174.120566][ T5696] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 174.153186][ T7440] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 174.167147][ T5696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.179892][ T7440] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 174.194929][ T5696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.219868][ T5709] usb 6-1: USB disconnect, device number 7 [ 174.233783][ T7440] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 174.261518][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.281020][ T10] usb 3-1: USB disconnect, device number 8 [ 174.309050][ T7440] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 174.320217][ T5696] usb 4-1: config 0 descriptor?? [ 174.334922][ T7440] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 174.372935][ T7440] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 174.418518][ T7440] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 174.452272][ T7440] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 174.581360][ T7440] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 175.434856][ T192] ims_pcu 7-1:2.0: Control endpoint is not INTERRUPT IN [ 175.549829][ T192] ims_pcu 7-1:2.0: probe with driver ims_pcu failed with error -22 [ 175.577069][ T5696] usbhid 4-1:0.0: can't add hid device: -32 [ 175.583138][ T5610] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 175.618732][ T5696] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 175.650814][ T192] usb 7-1: USB disconnect, device number 2 [ 175.677869][ T7453] loop5: detected capacity change from 0 to 7 [ 175.705302][ T5696] usb 4-1: USB disconnect, device number 12 [ 175.715156][ T29] audit: type=1400 audit(1787701978.519:526): avc: denied { nlmsg_write } for pid=7454 comm="syz.5.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 175.765604][ T7453] Dev loop5: unable to read RDB block 7 [ 175.795155][ T7453] loop5: unable to read partition table [ 175.837434][ T29] audit: type=1400 audit(1787701978.639:527): avc: denied { audit_write } for pid=7450 comm="syz.0.372" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 175.863178][ T7453] loop5: partition table beyond EOD, truncated [ 175.890947][ T7453] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 175.912902][ T29] audit: type=1400 audit(1787701978.669:528): avc: denied { watch } for pid=7450 comm="syz.0.372" path="/81/bus" dev="tmpfs" ino=467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 175.956819][ T5601] Bluetooth: hci1: command 0x0c1a tx timeout [ 175.966287][ T29] audit: type=1400 audit(1787701978.669:529): avc: denied { watch_sb watch_reads } for pid=7450 comm="syz.0.372" path="/81/bus" dev="tmpfs" ino=467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 176.196780][ T5601] Bluetooth: hci3: command 0x0c1a tx timeout [ 176.361501][ T5601] Bluetooth: hci4: command 0x0c1a tx timeout [ 176.438139][ T5601] Bluetooth: hci5: command 0x0405 tx timeout [ 177.187452][ T7475] netlink: 40 bytes leftover after parsing attributes in process `syz.2.383'. [ 177.292319][ T7481] netlink: 24 bytes leftover after parsing attributes in process `syz.5.385'. [ 177.328246][ T7481] netlink: 24 bytes leftover after parsing attributes in process `syz.5.385'. [ 177.367976][ T5696] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 177.416896][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 177.462195][ T29] audit: type=1400 audit(1787701980.259:530): avc: denied { mount } for pid=7485 comm="syz.2.387" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 177.577149][ T5696] usb 1-1: Using ep0 maxpacket: 32 [ 177.584962][ T5696] usb 1-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 177.594259][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 177.610942][ T10] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 177.630394][ T7490] netlink: 64 bytes leftover after parsing attributes in process `syz.2.387'. [ 177.649514][ T5696] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 177.670869][ T10] usb 7-1: config index 0 descriptor too short (expected 6427, got 27) [ 177.690912][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.701664][ T10] usb 7-1: config 0 has an invalid interface number: 21 but max is 0 [ 177.712455][ T5696] usb 1-1: Product: syz [ 177.724769][ T5696] usb 1-1: Manufacturer: syz [ 177.740894][ T10] usb 7-1: config 0 has no interface number 0 [ 177.754014][ T5696] usb 1-1: SerialNumber: syz [ 177.768100][ T10] usb 7-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 177.822116][ T10] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 177.880008][ T10] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 177.912280][ T10] usb 7-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 177.932769][ T10] usb 7-1: Product: syz [ 177.954451][ T10] usb 7-1: Manufacturer: syz [ 178.004906][ T10] usb 7-1: config 0 descriptor?? [ 178.032146][ T7478] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 178.040607][ T5610] Bluetooth: hci1: command 0x0c1a tx timeout [ 178.211573][ T29] audit: type=1400 audit(1787701981.009:531): avc: denied { getopt } for pid=7500 comm="syz.3.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 178.277055][ T5610] Bluetooth: hci3: command 0x0c1a tx timeout [ 178.438167][ T5610] Bluetooth: hci4: command 0x0c1a tx timeout [ 178.510639][ T5696] usb 1-1: selecting invalid altsetting 1 [ 178.516933][ T5610] Bluetooth: hci5: command 0x0405 tx timeout [ 178.534344][ T10] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.21/input/input11 [ 178.551715][ T5696] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 178.551770][ T5696] dvb_usb_lmedm04 1-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 178.683804][ T10] usb 7-1: USB disconnect, device number 3 [ 178.689757][ C0] keyspan_remote 7-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 178.730282][ T5696] usb 1-1: USB disconnect, device number 10 [ 178.764739][ T7514] netlink: 'syz.0.396': attribute type 12 has an invalid length. [ 178.832690][ T7514] netlink: 132 bytes leftover after parsing attributes in process `syz.0.396'. [ 180.116790][ T5610] Bluetooth: hci1: command 0x0c1a tx timeout [ 180.357635][ T5610] Bluetooth: hci3: command 0x0c1a tx timeout [ 180.516843][ T5610] Bluetooth: hci4: command 0x0c1a tx timeout [ 180.596825][ T5610] Bluetooth: hci5: command 0x0405 tx timeout [ 181.113817][ T29] audit: type=1400 audit(1787701983.909:532): avc: denied { listen } for pid=7530 comm="syz.6.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 181.233431][ T29] audit: type=1400 audit(1787701983.939:533): avc: denied { read } for pid=7530 comm="syz.6.401" path="socket:[17398]" dev="sockfs" ino=17398 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 181.462016][ T29] audit: type=1400 audit(1787701984.259:534): avc: denied { bind } for pid=7548 comm="syz.0.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 181.502649][ T7552] nfs: Bad value for 'retrans' [ 181.520716][ T7535] netlink: 156 bytes leftover after parsing attributes in process `syz.2.402'. [ 181.566966][ T192] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 181.574903][ T7535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.402'. [ 182.421451][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 182.458524][ T192] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 182.475635][ T7556] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 182.510422][ T13] Bluetooth: hci6: Frame reassembly failed (-84) [ 182.520758][ T192] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 182.545177][ T192] usb 7-1: config 0 has no interface number 0 [ 182.557382][ T7558] team0: Device gtp0 is up. Set it down before adding it as a team port [ 182.569409][ T192] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 182.597413][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 182.615350][ T10] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 182.626725][ T192] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 182.662082][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.672638][ T192] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 182.685256][ T5601] Bluetooth: hci5: command 0x0405 tx timeout [ 182.696223][ T10] usb 1-1: Product: syz [ 182.713894][ T10] usb 1-1: Manufacturer: syz [ 182.727095][ T192] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 182.744835][ T10] usb 1-1: SerialNumber: syz [ 182.771756][ T10] usb 1-1: config 0 descriptor?? [ 182.791046][ T192] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 182.808392][ T10] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 182.832537][ T192] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 182.926494][ T192] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.950208][ T192] usb 7-1: config 0 descriptor?? [ 182.969357][ T7531] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 182.987462][ T7531] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 183.019915][ T10] gspca_topro: reg_w err -71 [ 183.027342][ T192] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 183.057117][ T5712] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 183.067995][ T10] gspca_topro: Sensor soi763a [ 183.080438][ T192] usb 7-1: USB disconnect, device number 4 [ 183.133948][ T192] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 183.156657][ T10] usb 1-1: USB disconnect, device number 11 [ 183.228108][ T5712] usb 3-1: Using ep0 maxpacket: 8 [ 183.239860][ T7569] loop0: detected capacity change from 0 to 3904 [ 183.251283][ T5712] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 183.285103][ T5712] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.299784][ T7569] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 183.330452][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.343897][ T7569] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 183.362867][ T5712] usb 3-1: Product: syz [ 183.381128][ T5712] usb 3-1: Manufacturer: syz [ 183.392463][ T7569] loop0: [ 183.395439][ T5712] usb 3-1: SerialNumber: syz [ 183.414848][ T5712] usb 3-1: config 0 descriptor?? [ 183.444158][ T5712] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 183.493993][ T5712] usb 3-1: selecting invalid altsetting 1 [ 184.018088][ T5712] gspca_stk014: reg_r err -110 [ 184.364211][ T7575] siw: device registration error -23 [ 184.376667][ T5712] stk014 3-1:0.0: probe with driver stk014 failed with error -110 [ 184.456239][ T5712] usb 3-1: USB disconnect, device number 9 [ 184.517312][ T5610] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 184.523679][ T5601] Bluetooth: hci6: command 0x1003 tx timeout [ 184.612697][ T7581] netlink: 40 bytes leftover after parsing attributes in process `syz.6.418'. [ 184.747254][ T5787] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 184.765840][ T29] audit: type=1400 audit(1787701987.559:535): avc: denied { setopt } for pid=7586 comm="syz.5.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 184.940229][ T5787] usb 1-1: unable to get BOS descriptor or descriptor too short [ 184.958185][ T5787] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 184.982791][ T7606] netlink: 20 bytes leftover after parsing attributes in process `syz.5.427'. [ 185.002075][ T5787] usb 1-1: config 100 has an invalid interface number: 173 but max is 0 [ 185.023990][ T5787] usb 1-1: config 100 has no interface number 0 [ 185.042864][ T5787] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 185.109701][ T5787] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 185.137781][ T192] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 185.171114][ T7613] FAULT_INJECTION: forcing a failure. [ 185.171114][ T7613] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 185.186119][ T5787] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 185.208084][ T5787] usb 1-1: config 100 interface 173 has no altsetting 0 [ 185.248787][ T5787] usb 1-1: string descriptor 0 read error: -22 [ 185.263253][ T5787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.277284][ T7613] CPU: 0 UID: 0 PID: 7613 Comm: syz.5.430 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.277303][ T7613] Tainted: [L]=SOFTLOCKUP [ 185.277306][ T7613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 185.277312][ T7613] Call Trace: [ 185.277316][ T7613] [ 185.277320][ T7613] dump_stack_lvl+0x100/0x190 [ 185.277342][ T7613] should_fail_ex.cold+0x5/0xa [ 185.277357][ T7613] _copy_to_user+0x32/0xd0 [ 185.277371][ T7613] simple_read_from_buffer+0xcb/0x170 [ 185.277390][ T7613] proc_fail_nth_read+0x1af/0x230 [ 185.277408][ T7613] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 185.277426][ T7613] ? rw_verify_area+0xce/0x6d0 [ 185.277440][ T7613] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 185.277457][ T7613] vfs_read+0x1e4/0xb40 [ 185.277473][ T7613] ? __pfx_vfs_read+0x10/0x10 [ 185.277486][ T7613] ? find_held_lock+0x2b/0x80 [ 185.277500][ T7613] ? __fget_files+0x215/0x3d0 [ 185.277513][ T7613] ? __fget_files+0x21f/0x3d0 [ 185.277526][ T7613] ksys_read+0x12a/0x250 [ 185.277540][ T7613] ? __pfx_ksys_read+0x10/0x10 [ 185.277559][ T7613] do_syscall_64+0x123/0x790 [ 185.277574][ T7613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.277585][ T7613] RIP: 0033:0x7fbca175e90e [ 185.277594][ T7613] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 185.277604][ T7613] RSP: 002b:00007fbca26d9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 185.277615][ T7613] RAX: ffffffffffffffda RBX: 00007fbca26da6c0 RCX: 00007fbca175e90e [ 185.277621][ T7613] RDX: 000000000000000f RSI: 00007fbca26da0a0 RDI: 0000000000000004 [ 185.277627][ T7613] RBP: 00007fbca26da090 R08: 0000000000000000 R09: 0000000000000000 [ 185.277633][ T7613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.277639][ T7613] R13: 00007fbca1a26038 R14: 00007fbca1a25fa0 R15: 00007ffd40bffdb8 [ 185.277652][ T7613] [ 185.504995][ T7579] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 185.513450][ T5787] metro_usb 1-1:100.173: Metrologic USB to Serial converter detected [ 185.524337][ T5787] usb 1-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 185.535193][ T192] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 185.559386][ T192] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.586670][ T192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.595345][ T192] usb 4-1: Product: syz [ 185.599781][ T192] usb 4-1: Manufacturer: syz [ 185.604587][ T192] usb 4-1: SerialNumber: syz [ 185.617422][ T192] usb 4-1: 1:1 : unsupported format bits 0x2020000 [ 185.734027][ T29] audit: type=1400 audit(1787701988.529:536): avc: denied { write } for pid=7620 comm="syz.2.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 185.803911][ T7579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.866176][ T7600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.884604][ T7579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.927800][ T7600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.943018][ T10] usb 1-1: USB disconnect, device number 12 [ 186.793425][ T10] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 186.850328][ T10] metro_usb 1-1:100.173: device disconnected [ 186.865002][ T192] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 187.844743][ T29] audit: type=1326 audit(1787701989.679:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7628 comm="syz.2.437" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b519e0d9 code=0x7fc00000 [ 188.839807][ T192] usb 4-1: 2:1 : unsupported format bits 0x2020000 [ 189.960310][ T29] audit: type=1326 audit(1787701989.679:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7628 comm="syz.2.437" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f75b519e0d9 code=0x7fc00000 [ 190.021098][ T192] usb 4-1: USB disconnect, device number 13 [ 190.124184][ T7650] bridge1: entered promiscuous mode [ 190.186900][ T10] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 191.302655][ T10] usb 6-1: device descriptor read/all, error -71 [ 192.165560][ T7667] netlink: 24 bytes leftover after parsing attributes in process `syz.3.449'. [ 192.247371][ T7667] netlink: 24 bytes leftover after parsing attributes in process `syz.3.449'. [ 192.337071][ T192] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 192.521206][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.527594][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.535984][ T192] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 192.569173][ T192] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.600325][ T192] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.667086][ T10] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 192.688275][ T192] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.712566][ T192] usb 7-1: Product: syz [ 193.037955][ T10] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 193.494727][ T192] usb 7-1: Manufacturer: syz [ 193.511767][ T192] usb 7-1: SerialNumber: syz [ 193.527440][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.552768][ T192] cyberjack 7-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 193.586371][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 193.622532][ T192] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 193.645319][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.664714][ T192] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 193.681410][ T10] usb 6-1: config 0 descriptor?? [ 194.566027][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 194.798743][ T192] usb 7-1: USB disconnect, device number 5 [ 194.827426][ T29] audit: type=1400 audit(1787701997.619:539): avc: denied { write } for pid=7680 comm="syz.5.454" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 194.868435][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 194.885303][ T192] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 194.928846][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 194.961650][ T192] cyberjack 7-1:1.0: device disconnected [ 194.975563][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 195.128770][ T29] audit: type=1400 audit(1787701997.619:540): avc: denied { open } for pid=7680 comm="syz.5.454" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 195.176804][ T5787] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 195.808558][ T10] usb 6-1: media controller created [ 195.865216][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.924017][ T7690] sctp_transport_update_pmtu: 48 callbacks suppressed [ 195.924031][ T7690] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 195.942998][ T7690] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 195.953267][ T7690] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 195.963753][ T7690] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 195.974610][ T7690] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 195.984883][ T7690] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 195.995154][ T7690] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 196.005403][ T7690] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 196.015679][ T7690] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 196.026008][ T7690] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 196.063963][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 196.089548][ T29] audit: type=1400 audit(1787701997.669:541): avc: denied { create } for pid=7680 comm="syz.5.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 196.120501][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 196.133321][ T5787] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 196.161510][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input12 [ 196.180661][ T5787] usb 4-1: config 2 interface 0 altsetting 178 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 196.332283][ T29] audit: type=1400 audit(1787701997.719:542): avc: denied { create } for pid=7688 comm="syz.2.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 197.304832][ T5787] usb 4-1: config 2 interface 0 altsetting 178 endpoint 0x88 has invalid wMaxPacketSize 0 [ 197.332874][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 197.368625][ T5787] usb 4-1: config 2 interface 0 has no altsetting 0 [ 197.382061][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 197.415197][ T5787] usb 4-1: string descriptor 0 read error: -71 [ 197.424245][ T29] audit: type=1400 audit(1787701998.439:543): avc: denied { setopt } for pid=7688 comm="syz.2.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 197.445311][ T7698] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7698 comm=syz.0.459 [ 197.493209][ T10] usb 6-1: USB disconnect, device number 9 [ 197.508595][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.570475][ T5787] usb 4-1: can't set config #2, error -71 [ 197.626377][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 197.638057][ T29] audit: type=1400 audit(1787701998.439:544): avc: denied { bind } for pid=7688 comm="syz.2.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 197.662090][ T5787] usb 4-1: USB disconnect, device number 14 [ 197.780643][ T29] audit: type=1400 audit(1787701998.459:545): avc: denied { getopt } for pid=7688 comm="syz.2.457" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 198.125626][ T7730] openvswitch: netlink: IP tunnel TTL not specified. [ 198.143424][ T29] audit: type=1400 audit(1787701998.459:546): avc: denied { connect } for pid=7688 comm="syz.2.457" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 198.238022][ T29] audit: type=1400 audit(1787701998.949:547): avc: denied { write } for pid=7702 comm="syz.6.460" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 198.257172][ T5787] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 198.274057][ T7729] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 198.421575][ T29] audit: type=1400 audit(1787701999.819:548): avc: denied { create } for pid=7702 comm="syz.6.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 198.547864][ T5787] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 198.566480][ T5787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.588337][ T5787] usb 1-1: config 0 descriptor?? [ 198.606814][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 198.815289][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 198.846041][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.885878][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.913151][ T5787] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 198.953309][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 199.012395][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.143219][ T10] usb 6-1: config 0 descriptor?? [ 199.317305][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.476'. [ 199.359165][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.476'. [ 199.444093][ T7722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.461823][ T7748] netlink: 'syz.3.476': attribute type 11 has an invalid length. [ 199.487015][ T7722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.595467][ T7748] netlink: 'syz.3.476': attribute type 7 has an invalid length. [ 199.639517][ T5787] [drm:udl_init] *ERROR* Selecting channel failed [ 199.695168][ T10] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 199.829479][ T5787] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 199.865416][ T5787] [drm] Initialized udl on minor 1 [ 199.886915][ T192] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 199.909735][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 199.909744][ T29] audit: type=1400 audit(1787702002.709:558): avc: denied { bind } for pid=7754 comm="syz.6.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 199.951902][ T5787] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 199.983474][ T5787] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 199.992155][ T10] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 200.027720][ T29] audit: type=1400 audit(1787702002.749:559): avc: denied { write } for pid=7754 comm="syz.6.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 200.062886][ T5787] usb 1-1: USB disconnect, device number 13 [ 200.083067][ T10] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 200.129927][ T192] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 200.161462][ T192] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.177313][ T5696] usb 6-1: USB disconnect, device number 10 [ 200.184980][ T10] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 200.201471][ T7759] bond1: option mode: unable to set because the bond device has slaves [ 200.214120][ T192] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 200.265737][ T192] usb 4-1: config 0 has no interface number 0 [ 200.296638][ T192] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.333505][ T192] usb 4-1: config 0 descriptor?? [ 200.391134][ T29] audit: type=1400 audit(1787702003.189:560): avc: denied { read } for pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 200.736945][ T5787] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 200.807466][ T7778] ip_tables: iptables: counters copy to user failed while replacing table [ 200.912891][ T5787] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 200.978294][ T5787] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 201.030962][ T5787] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.073386][ T29] audit: type=1400 audit(1787702003.859:561): avc: denied { write } for pid=7764 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.925276][ T5787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 201.960679][ T5787] usb 1-1: Product: syz [ 201.983687][ T5787] usb 1-1: Manufacturer: syz [ 202.954940][ T29] audit: type=1326 audit(1787702004.799:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7788 comm="syz.6.487" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7570b9e0d9 code=0x7fc00000 [ 203.938712][ T5787] usb 1-1: SerialNumber: syz [ 203.975389][ T192] usb 4-1: USB disconnect, device number 15 [ 204.992497][ T5787] usb 1-1: can't set config #1, error -71 [ 205.073522][ T5787] usb 1-1: USB disconnect, device number 14 [ 205.111580][ T29] audit: type=1326 audit(1787702004.799:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7788 comm="syz.6.487" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7570b9e0d9 code=0x7fc00000 [ 205.302126][ T29] audit: type=1400 audit(1787702007.779:564): avc: denied { write } for pid=7796 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.545591][ T5696] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 206.262723][ T5787] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 206.430916][ T5696] usb 4-1: Using ep0 maxpacket: 32 [ 206.576162][ T7817] netlink: 56 bytes leftover after parsing attributes in process `syz.6.493'. [ 206.596234][ T5696] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 206.642294][ T5787] usb 1-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 206.651994][ T29] audit: type=1400 audit(1787702009.439:565): avc: denied { getopt } for pid=7813 comm="syz.6.493" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 206.679361][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.698589][ T5787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 206.723032][ T5696] usb 4-1: config 0 descriptor?? [ 206.863258][ T5787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.943866][ T5787] usb 1-1: config 0 descriptor?? [ 206.977476][ T7806] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 207.020829][ T29] audit: type=1400 audit(1787702009.819:566): avc: denied { setopt } for pid=7823 comm="syz.6.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 207.064578][ T5696] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 207.108213][ T5696] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 207.137618][ T29] audit: type=1400 audit(1787702009.879:567): avc: denied { ioctl } for pid=7830 comm="syz.2.496" path="socket:[18533]" dev="sockfs" ino=18533 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 207.210330][ T5696] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 207.252238][ T5696] usb 4-1: media controller created [ 207.429680][ T29] audit: type=1400 audit(1787702009.889:568): avc: denied { setopt } for pid=7830 comm="syz.2.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 207.450612][ T5696] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 207.563407][ T5696] az6027: usb out operation failed. (-71) [ 207.584468][ T29] audit: type=1400 audit(1787702009.929:569): avc: denied { write } for pid=7807 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.629565][ T5696] az6027: usb out operation failed. (-71) [ 207.660974][ T5696] stb0899_attach: Driver disabled by Kconfig [ 207.700835][ T5696] az6027: no front-end attached [ 207.700835][ T5696] [ 207.744569][ T5696] az6027: usb out operation failed. (-71) [ 207.753015][ T29] audit: type=1400 audit(1787702010.309:570): avc: denied { write } for pid=7837 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.788179][ T5696] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 208.013013][ T5696] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 208.066329][ T29] audit: type=1400 audit(1787702010.859:571): avc: denied { write } for pid=7839 comm="syz.5.498" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 208.093792][ T7841] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 208.127937][ T5696] dvb-usb: schedule remote query interval to 400 msecs. [ 208.165092][ T5696] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 208.203631][ T7856] netlink: 24 bytes leftover after parsing attributes in process `syz.6.502'. [ 208.239819][ T5696] usb 4-1: USB disconnect, device number 16 [ 208.321875][ T7856] netlink: 12 bytes leftover after parsing attributes in process `syz.6.502'. [ 208.417918][ T29] audit: type=1400 audit(1787702011.219:572): avc: denied { accept } for pid=7855 comm="syz.2.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 208.446278][ T5787] usbhid 1-1:0.0: can't add hid device: -71 [ 208.499631][ T5787] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 208.542032][ T5696] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 208.562132][ T7868] FAULT_INJECTION: forcing a failure. [ 208.562132][ T7868] name failslab, interval 1, probability 0, space 0, times 0 [ 208.580900][ T5787] usb 1-1: USB disconnect, device number 15 [ 208.613132][ T7870] loop0: detected capacity change from 0 to 3904 [ 208.636659][ T7868] CPU: 0 UID: 0 PID: 7868 Comm: syz.0.506 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.636680][ T7868] Tainted: [L]=SOFTLOCKUP [ 208.636683][ T7868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 208.636689][ T7868] Call Trace: [ 208.636693][ T7868] [ 208.636697][ T7868] dump_stack_lvl+0x100/0x190 [ 208.636723][ T7868] should_fail_ex.cold+0x5/0xa [ 208.636738][ T7868] should_failslab+0xc2/0x120 [ 208.636750][ T7868] __kmalloc_noprof+0xfc/0x840 [ 208.636767][ T7868] ? tomoyo_encode2+0xfb/0x3c0 [ 208.636789][ T7868] tomoyo_encode2+0xfb/0x3c0 [ 208.636805][ T7868] tomoyo_encode+0x29/0x50 [ 208.636818][ T7868] tomoyo_realpath_from_path+0x18c/0x690 [ 208.636836][ T7868] tomoyo_path_number_perm+0x23c/0x580 [ 208.636847][ T7868] ? tomoyo_path_number_perm+0x22e/0x580 [ 208.636860][ T7868] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 208.636887][ T7868] ? find_held_lock+0x2b/0x80 [ 208.636900][ T7868] ? hook_file_ioctl_common+0x140/0x440 [ 208.636920][ T7868] ? __fget_files+0x21f/0x3d0 [ 208.636932][ T7868] security_file_ioctl+0xd3/0x230 [ 208.636946][ T7868] __x64_sys_ioctl+0xb7/0x210 [ 208.636963][ T7868] do_syscall_64+0x123/0x790 [ 208.636977][ T7868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.636989][ T7868] RIP: 0033:0x7f65c119e0d9 [ 208.636999][ T7868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.637010][ T7868] RSP: 002b:00007f65c20ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.637021][ T7868] RAX: ffffffffffffffda RBX: 00007f65c1425fa0 RCX: 00007f65c119e0d9 [ 208.637027][ T7868] RDX: 0000200000000340 RSI: 00000000c0d05640 RDI: 0000000000000003 [ 208.637033][ T7868] RBP: 00007f65c20ba090 R08: 0000000000000000 R09: 0000000000000000 [ 208.637039][ T7868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.637045][ T7868] R13: 00007f65c1426038 R14: 00007f65c1425fa0 R15: 00007ffe604e06e8 [ 208.637059][ T7868] [ 208.925755][ T7870] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 208.935410][ T7870] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 208.943532][ T7870] loop0: [ 209.085490][ T7876] bond1: option mode: unable to set because the bond device is up [ 209.110284][ T7868] ERROR: Out of memory at tomoyo_realpath_from_path. [ 209.146427][ T7876] bond1: (slave ip6erspan0): making interface the new active one [ 209.165716][ T7876] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 209.661155][ T7893] netlink: 40 bytes leftover after parsing attributes in process `syz.2.513'. [ 210.308901][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 210.308912][ T29] audit: type=1400 audit(1787702013.109:575): avc: denied { write } for pid=7891 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.515862][ T29] audit: type=1400 audit(1787702013.309:576): avc: denied { write } for pid=7935 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.677035][ T5787] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 211.748810][ T7949] netlink: 40 bytes leftover after parsing attributes in process `syz.5.525'. [ 211.763573][ T5787] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 211.820250][ T5787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.869994][ T5787] usb 4-1: config 0 descriptor?? [ 211.912765][ T5787] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 212.028714][ T29] audit: type=1400 audit(1787702014.819:577): avc: denied { write } for pid=7951 comm="syz.2.526" name="functions" dev="configfs" ino=9593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 212.143475][ T29] audit: type=1400 audit(1787702014.919:578): avc: denied { write } for pid=7951 comm="syz.2.526" name="extensions" dev="configfs" ino=19203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 212.252159][ T7965] device-mapper: ioctl: Invalid target message parameters. [ 212.272480][ T29] audit: type=1400 audit(1787702015.029:579): avc: denied { write } for pid=7941 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.414614][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.526'. [ 212.690190][ T29] audit: type=1400 audit(1787702015.489:580): avc: denied { write } for pid=7973 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.789844][ T7979] binder: 7977:7979 ioctl c0306201 200000000080 returned -14 [ 212.842126][ T7982] binder: 7977:7982 ioctl d0009411 2000000009c0 returned -22 [ 212.893164][ T7979] binder: 7977:7979 ioctl d0009412 2000000019c0 returned -22 [ 212.924383][ T7979] binder: 7977:7979 ioctl c0306201 2000000003c0 returned -14 [ 213.038096][ T5787] gspca_stv06xx: I2C: Read error writing address: -71 [ 213.065270][ T5787] usb 4-1: USB disconnect, device number 17 [ 214.899641][ T29] audit: type=1326 audit(1787702016.739:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7986 comm="syz.0.533" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c119e0d9 code=0x7fc00000 [ 216.941860][ T29] audit: type=1326 audit(1787702016.739:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7986 comm="syz.0.533" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f65c119e0d9 code=0x7fc00000 [ 217.061991][ T29] audit: type=1400 audit(1787702019.739:583): avc: denied { ioctl } for pid=7998 comm="syz.2.537" path="/dev/sg0" dev="devtmpfs" ino=716 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 217.177697][ T5787] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 217.590406][ T5787] usb 4-1: Using ep0 maxpacket: 16 [ 218.032786][ T5787] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 218.092192][ T5787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 218.153056][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.221189][ T5787] usb 4-1: Product: syz [ 218.275438][ T5787] usb 4-1: Manufacturer: syz [ 218.301605][ T5787] usb 4-1: SerialNumber: syz [ 218.352587][ T5787] usb 4-1: config 0 descriptor?? [ 218.386713][ T5787] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 218.402707][ T8011] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8011 comm=syz.6.542 [ 218.458735][ T5787] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 218.737727][ T29] audit: type=1400 audit(1787702021.539:584): avc: denied { search } for pid=8029 comm="syz.6.548" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 218.784934][ T29] audit: type=1400 audit(1787702021.559:585): avc: denied { write } for pid=8029 comm="syz.6.548" name="exports" dev="nfsd" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 218.826915][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 218.854922][ T29] audit: type=1400 audit(1787702021.559:586): avc: denied { open } for pid=8029 comm="syz.6.548" path="/52/nfsd/exports" dev="nfsd" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 218.919521][ T29] audit: type=1400 audit(1787702021.699:587): avc: denied { unmount } for pid=7018 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 218.982297][ T29] audit: type=1400 audit(1787702021.749:588): avc: denied { unmount } for pid=6490 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 219.007460][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 219.022401][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 219.037424][ T5787] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 219.048847][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 219.089184][ T10] usb 3-1: config 0 has no interface number 0 [ 219.106116][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.118576][ T10] usb 3-1: Product: syz [ 219.128335][ T10] usb 3-1: Manufacturer: syz [ 219.132963][ T10] usb 3-1: SerialNumber: syz [ 219.145086][ T10] usb 3-1: config 0 descriptor?? [ 219.154984][ T10] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 219.167056][ T10] usb 3-1: selecting invalid altsetting 1 [ 219.173253][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 219.187246][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 219.199562][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 219.208981][ T10] usb 3-1: media controller created [ 219.221795][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 219.336969][ T5696] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 219.378758][ T5698] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 219.488524][ T5696] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 219.498806][ T5696] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 219.507365][ T5696] usb 7-1: config 0 has no interface number 0 [ 219.515282][ T5696] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.523466][ T5698] usb 6-1: device descriptor read/64, error -71 [ 219.530577][ T5696] usb 7-1: Product: syz [ 219.534801][ T5696] usb 7-1: Manufacturer: syz [ 219.539737][ T5696] usb 7-1: SerialNumber: syz [ 219.551622][ T5696] usb 7-1: config 0 descriptor?? [ 219.761333][ T5696] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 219.770147][ T5698] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 219.783974][ T5696] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 219.800293][ T5696] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 219.808967][ T5696] usb 7-1: media controller created [ 219.821934][ T5696] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 219.926895][ T5698] usb 6-1: device descriptor read/64, error -71 [ 220.040386][ T5698] usb usb6-port1: attempt power cycle [ 220.278092][ T10] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 220.303868][ T10] zl10353_read_register: readreg error (reg=127, ret==-110) [ 220.412388][ T8025] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 220.439437][ T8032] usb 3-1: dvb_usb_ce6230: I2C read not implemented [ 220.450754][ T5696] i2c i2c-3: ec100: i2c rd failed=-71 reg=33 [ 220.592784][ T8044] netlink: 60 bytes leftover after parsing attributes in process `syz.0.552'. [ 220.604846][ T5698] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 220.618825][ T5787] em28xx 4-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 220.638655][ T5787] em28xx 4-1:0.0: board has no eeprom [ 220.649278][ T5698] usb 6-1: device descriptor read/8, error -71 [ 220.683140][ T5696] usb 7-1: USB disconnect, device number 6 [ 220.727019][ T5787] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 220.737888][ T5787] em28xx 4-1:0.0: dvb set to bulk mode. [ 220.755815][ T5712] em28xx 4-1:0.0: Binding DVB extension [ 220.773175][ T5787] usb 4-1: USB disconnect, device number 18 [ 220.802169][ T5787] em28xx 4-1:0.0: Disconnecting em28xx [ 220.904783][ T5712] em28xx 4-1:0.0: Registering input extension [ 220.912398][ T5698] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 220.923378][ T5787] em28xx 4-1:0.0: Closing input extension [ 220.947897][ T5698] usb 6-1: device descriptor read/8, error -71 [ 221.058578][ T5787] em28xx: Freeing device [ 221.079749][ T5698] usb usb6-port1: unable to enumerate USB device [ 221.282579][ T29] audit: type=1400 audit(1787702024.079:589): avc: denied { read } for pid=8055 comm="syz.0.557" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 221.386343][ T29] audit: type=1400 audit(1787702024.079:590): avc: denied { open } for pid=8055 comm="syz.0.557" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 221.512176][ T29] audit: type=1400 audit(1787702024.289:591): avc: denied { read } for pid=8060 comm="syz.6.559" name="binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 222.455858][ T10] usb 3-1: USB disconnect, device number 10 [ 223.083413][ T8089] xt_limit: Overflow, try lower: 2147483649/3300 [ 223.416832][ T10] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 223.907591][ T8095] siw: device registration error -23 [ 224.097316][ T10] usb 6-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.00 [ 224.267752][ T10] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 224.318170][ T10] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.006922][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 225.006935][ T29] audit: type=1400 audit(1787702027.729:593): avc: denied { setopt } for pid=8105 comm="syz.3.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 225.099043][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 225.123738][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.154205][ T29] audit: type=1400 audit(1787702027.729:594): avc: denied { setopt } for pid=8105 comm="syz.3.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 225.184825][ T10] usb 6-1: config 0 descriptor?? [ 225.905730][ T10] wacom 0003:056A:00DE.0006: Unknown device_type for 'HID 056a:00de'. Assuming pen. [ 225.940055][ T29] audit: type=1400 audit(1787702028.739:595): avc: denied { write } for pid=8124 comm="syz.0.583" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 225.974170][ T10] wacom 0003:056A:00DE.0006: hidraw0: USB HID v80.03 Joystick [HID 056a:00de] on usb-dummy_hcd.5-1/input0 [ 226.021532][ T8125] netlink: 'syz.0.583': attribute type 1 has an invalid length. [ 226.126917][ T10] input: Wacom Bamboo 16FG 4x5 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:00DE.0006/input/input15 [ 226.326063][ T10] usb 6-1: USB disconnect, device number 15 [ 226.357342][ T29] audit: type=1400 audit(1787702029.149:596): avc: denied { read write } for pid=8128 comm="syz.0.584" name="usbmon9" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 226.387661][ T8135] netlink: 68 bytes leftover after parsing attributes in process `syz.2.586'. [ 226.454041][ T29] audit: type=1400 audit(1787702029.149:597): avc: denied { open } for pid=8128 comm="syz.0.584" path="/dev/usbmon9" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 226.701898][ T29] audit: type=1400 audit(1787702029.499:598): avc: denied { setopt } for pid=8142 comm="syz.2.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 226.853982][ T8150] nfs: Bad value for 'retrans' [ 226.861231][ T29] audit: type=1400 audit(1787702029.549:599): avc: denied { listen } for pid=8142 comm="syz.2.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 227.003579][ T29] audit: type=1400 audit(1787702029.569:600): avc: denied { accept } for pid=8142 comm="syz.2.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 227.100053][ T29] audit: type=1400 audit(1787702029.739:601): avc: denied { append } for pid=8151 comm="syz.5.590" name="sg0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 227.434729][ T29] audit: type=1400 audit(1787702030.229:602): avc: denied { mount } for pid=8153 comm="syz.0.591" name="/" dev="overlay" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 227.995981][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.6.598'. [ 229.005439][ T8187] netlink: 4 bytes leftover after parsing attributes in process `syz.6.598'. [ 230.010060][ T8187] netlink: 'syz.6.598': attribute type 11 has an invalid length. [ 230.965729][ T8188] usb usb8: usbfs: process 8188 (syz.5.599) did not claim interface 0 before use [ 230.976934][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 230.976943][ T29] audit: type=1400 audit(1787702033.779:607): avc: denied { bind } for pid=8184 comm="syz.5.599" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 231.031808][ T8187] netlink: 'syz.6.598': attribute type 7 has an invalid length. [ 231.084501][ T29] audit: type=1400 audit(1787702033.779:608): avc: denied { name_bind } for pid=8184 comm="syz.5.599" src=20006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 231.288746][ T29] audit: type=1400 audit(1787702033.779:609): avc: denied { node_bind } for pid=8184 comm="syz.5.599" saddr=172.30.1.6 src=20006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 231.333794][ T8197] FAULT_INJECTION: forcing a failure. [ 231.333794][ T8197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.419059][ T8197] CPU: 0 UID: 0 PID: 8197 Comm: syz.5.602 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.419078][ T8197] Tainted: [L]=SOFTLOCKUP [ 231.419081][ T8197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 231.419087][ T8197] Call Trace: [ 231.419091][ T8197] [ 231.419095][ T8197] dump_stack_lvl+0x100/0x190 [ 231.419116][ T8197] should_fail_ex.cold+0x5/0xa [ 231.419131][ T8197] _copy_from_user+0x2e/0xd0 [ 231.419144][ T8197] video_usercopy+0xe71/0x1730 [ 231.419161][ T8197] ? __pfx___video_do_ioctl+0x10/0x10 [ 231.419177][ T8197] ? __pfx_video_usercopy+0x10/0x10 [ 231.419199][ T8197] v4l2_ioctl+0x1bd/0x250 [ 231.419214][ T8197] ? __pfx_v4l2_ioctl+0x10/0x10 [ 231.419230][ T8197] __x64_sys_ioctl+0x18e/0x210 [ 231.419246][ T8197] do_syscall_64+0x123/0x790 [ 231.419261][ T8197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.419272][ T8197] RIP: 0033:0x7fbca179e0d9 [ 231.419282][ T8197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.419292][ T8197] RSP: 002b:00007fbca26da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.419303][ T8197] RAX: ffffffffffffffda RBX: 00007fbca1a25fa0 RCX: 00007fbca179e0d9 [ 231.419310][ T8197] RDX: 0000200000000340 RSI: 00000000c0d05640 RDI: 0000000000000003 [ 231.419316][ T8197] RBP: 00007fbca26da090 R08: 0000000000000000 R09: 0000000000000000 [ 231.419322][ T8197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.419328][ T8197] R13: 00007fbca1a26038 R14: 00007fbca1a25fa0 R15: 00007ffd40bffdb8 [ 231.419342][ T8197] [ 231.635391][ T8202] netlink: 20 bytes leftover after parsing attributes in process `syz.2.604'. [ 231.644302][ T8202] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 231.651863][ T29] audit: type=1400 audit(1787702034.059:610): avc: denied { ioctl } for pid=8192 comm="syz.3.601" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 232.750215][ T8222] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20004 [ 233.176406][ T192] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 233.426510][ T8239] loop0: detected capacity change from 0 to 3904 [ 233.433134][ T192] usb 4-1: device descriptor read/64, error -71 [ 233.485246][ T8239] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 233.512577][ T8239] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 233.555916][ T8239] loop0: [ 233.672518][ T5601] Bluetooth: hci1: Malformed Event: 0x2f [ 233.687356][ T192] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 233.743445][ T29] audit: type=1400 audit(1787702036.539:611): avc: denied { ioctl } for pid=8240 comm="syz.0.618" path="socket:[20447]" dev="sockfs" ino=20447 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 233.769870][ T8242] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 233.777858][ T8242] dummy0: left promiscuous mode [ 233.788614][ T8242] team0: Port device dummy0 added [ 233.880654][ T29] audit: type=1400 audit(1787702036.569:612): avc: denied { create } for pid=8240 comm="syz.0.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 233.998011][ T192] usb 4-1: device descriptor read/64, error -71 [ 234.014702][ T29] audit: type=1400 audit(1787702036.569:613): avc: denied { write } for pid=8240 comm="syz.0.618" path="socket:[20448]" dev="sockfs" ino=20448 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 234.147019][ T192] usb usb4-port1: attempt power cycle [ 234.350098][ T29] audit: type=1400 audit(1787702037.149:614): avc: denied { write } for pid=8269 comm="syz.0.626" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 234.407182][ T8271] binder: 8269:8271 ioctl c0306201 200000000080 returned -14 [ 234.439814][ T8275] fuse: Unknown parameter '0000000000000000021500000000000000000003' [ 234.483660][ T29] audit: type=1400 audit(1787702037.179:615): avc: denied { listen } for pid=8255 comm="syz.2.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 234.517388][ T192] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 234.567298][ T192] usb 4-1: device descriptor read/8, error -71 [ 234.862285][ T192] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 234.938818][ T192] usb 4-1: device descriptor read/8, error -71 [ 234.992193][ T29] audit: type=1400 audit(1787702037.789:616): avc: denied { write } for pid=8288 comm="syz.2.632" name="functions" dev="configfs" ino=9593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 235.081755][ T8289] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 235.089041][ T192] usb usb4-port1: unable to enumerate USB device [ 236.032315][ T8323] program syz.0.643 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.109907][ T29] audit: type=1400 audit(1787702038.908:617): avc: denied { ioctl } for pid=8321 comm="syz.0.643" path="socket:[20676]" dev="sockfs" ino=20676 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 237.447719][ T192] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 237.666189][ T192] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 237.697742][ T29] audit: type=1400 audit(1787702040.488:618): avc: denied { mount } for pid=8344 comm="syz.6.650" name="/" dev="autofs" ino=20745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 237.755746][ T192] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.792174][ T192] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 237.843304][ T192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.860384][ T192] usb 3-1: Product: syz [ 237.878514][ T192] usb 3-1: Manufacturer: syz [ 237.893109][ T192] usb 3-1: SerialNumber: syz [ 238.188884][ T192] usb 3-1: unit 4 not found! [ 238.526038][ T192] usb 3-1: USB disconnect, device number 11 [ 238.696297][ T8362] binder: 8358:8362 ioctl 4018620d 0 returned -22 [ 239.934716][ T29] audit: type=1400 audit(1787702042.728:619): avc: denied { connect } for pid=8363 comm="syz.5.656" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 241.510713][ T8405] netlink: 68 bytes leftover after parsing attributes in process `syz.6.670'. [ 241.692224][ T29] audit: type=1400 audit(1787702044.488:620): avc: denied { load_policy } for pid=8407 comm="syz.5.671" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 241.715579][ T8409] SELinux: policydb version -860095830 does not match my version range 15-35 [ 241.748419][ T8408] netlink: 4 bytes leftover after parsing attributes in process `syz.5.671'. [ 241.814924][ T8409] SELinux: failed to load policy [ 241.823281][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.5.671'. [ 241.889917][ T8408] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 241.897624][ T8408] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 241.953383][ T8416] netlink: 12 bytes leftover after parsing attributes in process `syz.5.671'. [ 241.976309][ T29] audit: type=1400 audit(1787702044.771:621): avc: denied { read } for pid=8421 comm="syz.2.676" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 242.008493][ T8422] binder: 8421:8422 ioctl c01864cb 200000000840 returned -22 [ 242.021016][ T8422] binder: 8421:8422 ioctl c0184d15 0 returned -22 [ 242.088045][ T8422] binder: 8421:8422 ioctl c0189378 200000000540 returned -22 [ 242.142377][ T29] audit: type=1400 audit(1787702044.941:622): avc: denied { setopt } for pid=8421 comm="syz.2.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 242.200351][ T8430] gretap1: entered promiscuous mode [ 242.207950][ T8434] netlink: 24 bytes leftover after parsing attributes in process `syz.5.678'. [ 242.298864][ T8430] syz.6.677 (8430): /proc/8430/oom_adj is deprecated, please use /proc/8430/oom_score_adj instead. [ 242.330556][ T8442] loop5: detected capacity change from 0 to 7 [ 242.355589][ T8442] Dev loop5: unable to read RDB block 7 [ 242.386397][ T8442] loop5: unable to read partition table [ 242.429257][ T8442] loop5: partition table beyond EOD, truncated [ 242.453117][ T8442] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 243.258684][ T4964] Dev loop5: unable to read RDB block 7 [ 243.275105][ T4964] loop5: unable to read partition table [ 243.293061][ T4964] loop5: partition table beyond EOD, truncated [ 243.392152][ T8453] ipvlan3: entered promiscuous mode [ 243.398176][ T8453] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 243.405745][ T8453] team0: Device ipvlan3 is already an upper device of the team interface [ 244.259731][ T29] audit: type=1326 audit(1787702046.221:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8444 comm="syz.5.681" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca179e0d9 code=0x7fc00000 [ 246.308268][ T29] audit: type=1326 audit(1787702046.221:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8444 comm="syz.5.681" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbca179e0d9 code=0x7fc00000 [ 246.542585][ T8462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.687'. [ 246.566609][ T8465] netlink: 40 bytes leftover after parsing attributes in process `syz.6.689'. [ 246.698480][ T29] audit: type=1800 audit(1787702049.501:625): pid=8467 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.687" name="attr_qid_max" dev="configfs" ino=21188 res=0 errno=0 [ 246.738133][ T8462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.687'. [ 246.777937][ T8457] IPv6: NLM_F_REPLACE set, but no existing node found! [ 246.913342][ T29] audit: type=1400 audit(1787702049.711:626): avc: denied { bind } for pid=8459 comm="syz.2.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 246.946530][ T8462] netlink: 'syz.3.687': attribute type 11 has an invalid length. [ 246.987787][ T29] audit: type=1400 audit(1787702049.741:627): avc: denied { getopt } for pid=8459 comm="syz.2.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 247.105397][ T8462] netlink: 'syz.3.687': attribute type 7 has an invalid length. [ 248.471178][ T8486] netlink: 12 bytes leftover after parsing attributes in process `syz.5.695'. [ 248.494172][ T8486] bridge0: port 1(dummy0) entered blocking state [ 248.500864][ T8486] bridge0: port 1(dummy0) entered disabled state [ 248.508776][ T8486] dummy0: entered allmulticast mode [ 248.514807][ T8486] dummy0: entered promiscuous mode [ 248.520798][ T8486] bridge0: port 1(dummy0) entered blocking state [ 248.527209][ T8486] bridge0: port 1(dummy0) entered forwarding state [ 248.741110][ T8482] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8482 comm=syz.3.693 [ 248.794847][ T29] audit: type=1400 audit(1787702051.591:628): avc: denied { map } for pid=8487 comm="syz.0.696" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 248.915251][ T29] audit: type=1400 audit(1787702051.621:629): avc: denied { append } for pid=8491 comm="syz.6.698" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 249.089875][ T29] audit: type=1400 audit(1787702051.681:630): avc: denied { setattr } for pid=8491 comm="syz.6.698" name="/" dev="configfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 249.232116][ T29] audit: type=1400 audit(1787702051.691:631): avc: denied { write } for pid=8491 comm="syz.6.698" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 249.361665][ T29] audit: type=1400 audit(1787702051.701:632): avc: denied { mounton } for pid=8491 comm="syz.6.698" path="/" dev="configfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 249.526300][ T29] audit: type=1400 audit(1787702051.944:633): avc: denied { ioctl } for pid=8503 comm="syz.3.701" path="socket:[21317]" dev="sockfs" ino=21317 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 250.010542][ T29] audit: type=1400 audit(1787702052.814:634): avc: denied { create } for pid=8526 comm="syz.6.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 251.058137][ T8529] netlink: 52 bytes leftover after parsing attributes in process `syz.0.705'. [ 252.227443][ T8534] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8534 comm=syz.2.710 [ 252.261518][ T8534] sctp_transport_update_pmtu: 47 callbacks suppressed [ 252.261532][ T8534] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 252.280255][ T8534] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 252.290717][ T8534] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 252.301638][ T8534] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 252.312950][ T8534] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 252.323458][ T8534] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 252.333837][ T8534] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 252.344298][ T8534] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 252.354958][ T8534] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 252.365433][ T8534] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 252.487724][ T8538] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8538 comm=syz.6.712 [ 253.272350][ T8550] netlink: 24 bytes leftover after parsing attributes in process `syz.5.715'. [ 253.282820][ T8550] xt_TPROXY: Can be used only with -p tcp or -p udp [ 253.546369][ T8552] xt_policy: output policy not valid in PREROUTING and INPUT [ 253.654234][ T8555] batadv1: entered promiscuous mode [ 253.825995][ T29] audit: type=1400 audit(1787702056.624:635): avc: denied { execute } for pid=8553 comm="syz.2.717" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=21627 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 253.968205][ T29] audit: type=1400 audit(1787702056.714:636): avc: denied { read write } for pid=8553 comm="syz.2.717" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 254.130036][ T8557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.332671][ T29] audit: type=1400 audit(1787702056.714:637): avc: denied { open } for pid=8553 comm="syz.2.717" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 255.300728][ T8587] fuse: Unknown parameter '0000000000000000048900000000000000000003' [ 255.311815][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.322863][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.447300][ T10] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 255.480197][ T8582] netlink: 60 bytes leftover after parsing attributes in process `syz.3.725'. [ 255.606965][ T5787] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 255.627731][ T10] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 255.676157][ T10] usb 6-1: config 150 has an invalid interface number: 204 but max is 2 [ 255.702841][ T10] usb 6-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 256.354070][ T10] usb 6-1: config 150 has no interface number 0 [ 256.379347][ T10] usb 6-1: config 150 interface 204 has no altsetting 0 [ 256.402629][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.411021][ T5787] usb 7-1: Using ep0 maxpacket: 16 [ 256.443937][ T10] usb 6-1: Product: syz [ 256.448521][ T5787] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 256.462891][ T10] usb 6-1: Manufacturer: syz [ 256.474165][ T10] usb 6-1: SerialNumber: syz [ 256.478962][ T5787] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.511744][ T5787] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.553224][ T5787] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.584242][ T5787] usb 7-1: config 0 descriptor?? [ 256.707698][ T10] xr_serial 6-1:150.204: skipping garbage [ 256.722263][ T10] xr_serial 6-1:150.204: xr_serial converter detected [ 256.820286][ T5787] acrux 0003:1A34:0802.0007: no output reports found [ 256.849608][ T5787] acrux 0003:1A34:0802.0007: hidraw0: USB HID v0.04 Joystick [HID 1a34:0802] on usb-dummy_hcd.6-1/input0 [ 257.021760][ T29] audit: type=1400 audit(1787702059.824:638): avc: denied { listen } for pid=8583 comm="syz.6.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 257.084746][ T5787] usb 7-1: USB disconnect, device number 7 [ 257.105196][ T8602] sctp: [Deprecated]: syz.2.729 (pid 8602) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.105196][ T8602] Use struct sctp_sack_info instead [ 257.539663][ T10] usb 6-1: xr_serial converter now attached to ttyUSB0 [ 257.766349][ T10] usb 6-1: USB disconnect, device number 16 [ 257.807057][ T10] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 257.840186][ T10] xr_serial 6-1:150.204: device disconnected [ 258.178437][ T29] audit: type=1400 audit(1787702060.984:639): avc: denied { name_bind } for pid=8614 comm="syz.6.732" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 258.394209][ T8632] loop5: detected capacity change from 0 to 7 [ 258.401124][ T5787] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 258.428332][ T8632] Dev loop5: unable to read RDB block 7 [ 258.453867][ T8632] loop5: unable to read partition table [ 258.485081][ T8632] loop5: partition table beyond EOD, truncated [ 258.504400][ T8632] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 258.557383][ T5787] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 258.576262][ T5787] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.605682][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.646974][ T5787] usb 3-1: config 0 descriptor?? [ 258.808375][ T8638] usb usb7: usbfs: process 8638 (syz.0.741) did not claim interface 0 before use [ 258.927981][ T5787] usb 3-1: USB disconnect, device number 12 [ 259.076122][ T8653] netlink: 24 bytes leftover after parsing attributes in process `syz.0.745'. [ 260.032087][ T8653] openvswitch: netlink: IP tunnel attribute has 5365 unknown bytes. [ 260.073049][ T8624] raw_sendmsg: syz.2.736 forgot to set AF_INET. Fix it! [ 260.154084][ T8653] ip_tables: iptables: counters copy to user failed while replacing table [ 261.182932][ T5610] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 261.197092][ T5610] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 261.357834][ T5610] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 261.370353][ T5610] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 261.377829][ T5610] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 261.696446][ T8690] FAULT_INJECTION: forcing a failure. [ 261.696446][ T8690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.735688][ T8690] CPU: 0 UID: 0 PID: 8690 Comm: syz.2.757 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.735707][ T8690] Tainted: [L]=SOFTLOCKUP [ 261.735710][ T8690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 261.735717][ T8690] Call Trace: [ 261.735720][ T8690] [ 261.735725][ T8690] dump_stack_lvl+0x100/0x190 [ 261.735745][ T8690] should_fail_ex.cold+0x5/0xa [ 261.735760][ T8690] _copy_to_user+0x32/0xd0 [ 261.735774][ T8690] simple_read_from_buffer+0xcb/0x170 [ 261.735793][ T8690] proc_fail_nth_read+0x1af/0x230 [ 261.735811][ T8690] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 261.735830][ T8690] ? rw_verify_area+0xce/0x6d0 [ 261.735843][ T8690] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 261.735860][ T8690] vfs_read+0x1e4/0xb40 [ 261.735876][ T8690] ? __pfx_vfs_read+0x10/0x10 [ 261.735890][ T8690] ? find_held_lock+0x2b/0x80 [ 261.735903][ T8690] ? __fget_files+0x215/0x3d0 [ 261.735916][ T8690] ? __fget_files+0x21f/0x3d0 [ 261.735929][ T8690] ksys_read+0x12a/0x250 [ 261.735944][ T8690] ? __pfx_ksys_read+0x10/0x10 [ 261.735962][ T8690] do_syscall_64+0x123/0x790 [ 261.735977][ T8690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.735988][ T8690] RIP: 0033:0x7f75b515e90e [ 261.735997][ T8690] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 261.736008][ T8690] RSP: 002b:00007f75b603afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 261.736018][ T8690] RAX: ffffffffffffffda RBX: 00007f75b603b6c0 RCX: 00007f75b515e90e [ 261.736025][ T8690] RDX: 000000000000000f RSI: 00007f75b603b0a0 RDI: 0000000000000006 [ 261.736031][ T8690] RBP: 00007f75b603b090 R08: 0000000000000000 R09: 0000000000000000 [ 261.736037][ T8690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.736043][ T8690] R13: 00007f75b5426038 R14: 00007f75b5425fa0 R15: 00007ffe14cbb968 [ 261.736057][ T8690] [ 262.967641][ T8679] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.035858][ T8679] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.079349][ T8679] bridge_slave_0: entered allmulticast mode [ 263.477101][ T5610] Bluetooth: hci5: command tx timeout [ 263.590341][ T8696] netlink: 52 bytes leftover after parsing attributes in process `syz.3.758'. [ 263.910926][ T8679] bridge_slave_0: entered promiscuous mode [ 263.964484][ T8679] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.108215][ T8679] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.287358][ T8679] bridge_slave_1: entered allmulticast mode [ 264.319375][ T8679] bridge_slave_1: entered promiscuous mode [ 264.430194][ T8679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.474437][ T8679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.591579][ T8679] team0: Port device team_slave_0 added [ 264.632698][ T8679] team0: Port device team_slave_1 added [ 264.783296][ T29] audit: type=1400 audit(1787702067.584:640): avc: denied { append } for pid=8728 comm="syz.2.767" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 265.022763][ T8679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.056605][ T8679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.183758][ T8679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.260466][ T8679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.289149][ T8679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.462762][ T8752] xt_policy: output policy not valid in PREROUTING and INPUT [ 265.475936][ T8679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.536694][ T8753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.772'. [ 265.594856][ T5610] Bluetooth: hci5: command tx timeout [ 265.716347][ T8679] hsr_slave_0: entered promiscuous mode [ 265.741590][ T8679] hsr_slave_1: entered promiscuous mode [ 265.780245][ T8679] debugfs: 'hsr0' already exists in 'hsr' [ 265.819653][ T8679] Cannot create hsr debugfs directory [ 266.103388][ T29] audit: type=1400 audit(1787702068.904:641): avc: denied { append } for pid=8761 comm="syz.2.778" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 266.259961][ T8762] usb usb7: usbfs: interface 0 claimed by hub while 'syz.2.778' resets device [ 266.471285][ T8762] 9p: Bad value for 'wfdno' [ 266.639072][ T8774] netlink: 40 bytes leftover after parsing attributes in process `syz.0.780'. [ 266.728292][ T8771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8771 comm=syz.3.777 [ 266.781578][ T5712] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 266.889919][ T8771] dvmrp0: entered allmulticast mode [ 266.925946][ T8679] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 266.939831][ T5712] usb 6-1: unable to get BOS descriptor or descriptor too short [ 266.950545][ T8679] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 266.960783][ T5712] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 266.973485][ T8679] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 266.989476][ T5712] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.005596][ T8679] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 267.018110][ T5712] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 267.031166][ T8679] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 267.043800][ T8679] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 267.056426][ T5712] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.068582][ T8679] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 267.085137][ T5712] usb 6-1: Product: syz [ 267.098023][ T5712] usb 6-1: Manufacturer: syz [ 267.108044][ T8679] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 267.116821][ T192] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 267.124622][ T5712] usb 6-1: SerialNumber: syz [ 267.145888][ T5712] usb 6-1: selecting invalid altsetting 1 [ 267.170343][ T5712] usb 6-1: unit 6 not found! [ 267.327401][ T192] usb 3-1: Using ep0 maxpacket: 32 [ 267.351310][ T8780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.373925][ T8679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.407897][ T8679] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.428320][ T8780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.445182][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.452315][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.512892][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.519989][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.637418][ T5610] Bluetooth: hci5: command tx timeout [ 267.877217][ T5787] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 268.077694][ T5787] usb 4-1: Using ep0 maxpacket: 8 [ 268.098441][ T5787] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 268.132094][ T5787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 268.177829][ T5787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.231512][ T5787] usb 4-1: config 0 descriptor?? [ 268.345810][ T5712] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 268.399607][ T5712] usb 6-1: USB disconnect, device number 17 [ 268.462429][ T5620] udevd[5620]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 268.515936][ T29] audit: type=1400 audit(1787702071.314:642): avc: denied { setopt } for pid=8796 comm="syz.3.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 268.569873][ T192] usb 3-1: unable to get BOS descriptor or descriptor too short [ 268.590394][ T5787] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 268.627360][ T192] usb 3-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 268.674430][ T192] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 268.697049][ T8679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.710559][ T192] usb 3-1: can't read configurations, error -71 [ 268.881280][ T8814] device-mapper: ioctl: Invalid target message parameters. [ 269.309066][ T8679] veth0_vlan: entered promiscuous mode [ 269.362990][ T8679] veth1_vlan: entered promiscuous mode [ 269.469183][ T8679] veth0_macvtap: entered promiscuous mode [ 269.500360][ T8679] veth1_macvtap: entered promiscuous mode [ 269.579516][ T8679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.637355][ T8679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.717093][ T5610] Bluetooth: hci5: command tx timeout [ 269.860327][ T29] audit: type=1400 audit(1787702072.664:643): avc: denied { ioctl } for pid=8844 comm="syz.5.797" path="socket:[24356]" dev="sockfs" ino=24356 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 269.899184][ T10] usb 4-1: USB disconnect, device number 23 [ 269.930623][ T29] audit: type=1400 audit(1787702072.694:644): avc: denied { getopt } for pid=8844 comm="syz.5.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 270.087056][ T316] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.201006][ T316] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.250752][ T316] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.302552][ T316] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.561851][ T8850] netlink: 20 bytes leftover after parsing attributes in process `syz.2.799'. [ 270.642021][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.684219][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.831449][ T316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.877176][ T316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.913292][ T29] audit: type=1400 audit(1787702074.714:645): avc: denied { unmount } for pid=6490 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 272.295999][ T8857] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8857 comm=syz.2.802 [ 272.329831][ T8857] sctp_transport_update_pmtu: 47 callbacks suppressed [ 272.329845][ T8857] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 272.347563][ T8857] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 272.358152][ T8857] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 272.369346][ T8857] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 272.380561][ T8857] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 272.391027][ T8857] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 272.401436][ T8857] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 272.411878][ T8857] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 272.422750][ T8857] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 272.433141][ T8857] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 272.459610][ T192] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 272.544590][ T8877] netlink: 20 bytes leftover after parsing attributes in process `syz.7.808'. [ 272.647995][ T192] usb 6-1: Using ep0 maxpacket: 8 [ 272.684453][ T192] usb 6-1: unable to get BOS descriptor or descriptor too short [ 272.735618][ T192] usb 6-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 272.796227][ T192] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.861533][ T192] usb 6-1: too many endpoints for config 1 interface 0 altsetting 128: 70, using maximum allowed: 30 [ 272.914737][ T192] usb 6-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 70 [ 272.985656][ T192] usb 6-1: config 1 interface 0 has no altsetting 0 [ 273.021130][ T192] usb 6-1: New USB device strings: Mfr=62, Product=0, SerialNumber=3 [ 273.060735][ T192] usb 6-1: Manufacturer: syz [ 273.080928][ T192] usb 6-1: SerialNumber: syz [ 273.126864][ T5787] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 273.149674][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.7.813'. [ 273.307178][ T5787] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 273.344117][ T5787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.491394][ T5787] usb 4-1: config 0 descriptor?? [ 273.503671][ T192] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 273.713610][ T192] usb 6-1: USB disconnect, device number 18 [ 274.093082][ T5787] hackrf 4-1:0.0: usb_control_msg() failed -32 request 0f [ 274.115582][ T8884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.142448][ T5787] hackrf 4-1:0.0: Could not detect board [ 274.232036][ T8884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.244209][ T5787] hackrf 4-1:0.0: probe with driver hackrf failed with error -32 [ 274.334355][ T8905] bond1: option mode: unable to set because the bond device has slaves [ 274.356372][ T8884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.397069][ T8884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.487846][ T29] audit: type=1400 audit(1787702077.284:646): avc: denied { read } for pid=5259 comm="dhcpcd" name="n42" dev="tmpfs" ino=5801 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 274.561427][ T192] usb 4-1: USB disconnect, device number 24 [ 274.843311][ T29] audit: type=1400 audit(1787702077.284:647): avc: denied { open } for pid=5259 comm="dhcpcd" path="/run/udev/data/n42" dev="tmpfs" ino=5801 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 274.970676][ T29] audit: type=1400 audit(1787702077.284:648): avc: denied { getattr } for pid=5259 comm="dhcpcd" path="/run/udev/data/n42" dev="tmpfs" ino=5801 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 275.802024][ T8947] netlink: 20 bytes leftover after parsing attributes in process `syz.5.827'. [ 275.829023][ T8935] netlink: 52 bytes leftover after parsing attributes in process `syz.0.822'. [ 275.906845][ T29] audit: type=1400 audit(1787702078.704:649): avc: denied { write } for pid=8915 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.137795][ T8952] FAULT_INJECTION: forcing a failure. [ 276.137795][ T8952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.151011][ T8952] CPU: 0 UID: 0 PID: 8952 Comm: syz.3.828 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.151031][ T8952] Tainted: [L]=SOFTLOCKUP [ 276.151034][ T8952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 276.151041][ T8952] Call Trace: [ 276.151044][ T8952] [ 276.151048][ T8952] dump_stack_lvl+0x100/0x190 [ 276.151069][ T8952] should_fail_ex.cold+0x5/0xa [ 276.151088][ T8952] _copy_from_user+0x2e/0xd0 [ 276.151101][ T8952] copy_msghdr_from_user+0x9f/0x4c0 [ 276.151118][ T8952] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 276.151140][ T8952] ___sys_sendmsg+0x106/0x1e0 [ 276.151156][ T8952] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.151171][ T8952] ? get_pid_task+0x106/0x250 [ 276.151190][ T8952] ? find_held_lock+0x2b/0x80 [ 276.151213][ T8952] __sys_sendmsg+0x160/0x210 [ 276.151225][ T8952] ? __pfx___sys_sendmsg+0x10/0x10 [ 276.151244][ T8952] do_syscall_64+0x123/0x790 [ 276.151259][ T8952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.151270][ T8952] RIP: 0033:0x7f5968f9e0d9 [ 276.151281][ T8952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.151291][ T8952] RSP: 002b:00007f5969e1c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.151302][ T8952] RAX: ffffffffffffffda RBX: 00007f5969225fa0 RCX: 00007f5968f9e0d9 [ 276.151309][ T8952] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000004 [ 276.151315][ T8952] RBP: 00007f5969e1c090 R08: 0000000000000000 R09: 0000000000000000 [ 276.151321][ T8952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.151327][ T8952] R13: 00007f5969226038 R14: 00007f5969225fa0 R15: 00007ffe3965b4f8 [ 276.151340][ T8952] [ 276.530346][ T29] audit: type=1400 audit(1787702078.704:650): avc: denied { create } for pid=8915 comm="dhcpcd-run-hook" name="resolv.conf.ppp4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 276.581680][ T29] audit: type=1400 audit(1787702078.704:651): avc: denied { write } for pid=8915 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.ppp4.link" dev="tmpfs" ino=5834 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 276.657745][ T8942] netlink: 52 bytes leftover after parsing attributes in process `syz.7.825'. [ 276.729089][ T29] audit: type=1400 audit(1787702078.704:652): avc: denied { append } for pid=8915 comm="dhcpcd-run-hook" name="resolv.conf.ppp4.link" dev="tmpfs" ino=5834 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 276.901807][ T29] audit: type=1400 audit(1787702079.514:653): avc: denied { write } for pid=8956 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.076089][ T29] audit: type=1400 audit(1787702079.514:654): avc: denied { unlink } for pid=8956 comm="rm" name="resolv.conf.ppp4.link" dev="tmpfs" ino=5834 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 277.191640][ T8962] bond0: option arp_interval: invalid value (\A/U#]̮Ӵ&Z;-4YwԏQW8@;F$YLt1t?6teU-=FzvǵӆºU=qVܗk7N3ƟK[(Zgt';wբm\n #|[8},) [ 277.211107][ T8962] bond0: option arp_interval: allowed values 0 - 2147483647 [ 278.180544][ T8981] fuse: Bad value for 'fd' [ 278.523888][ T8987] jffs2: notice: (8987) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 278.706757][ T5787] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 279.502735][ T29] audit: type=1400 audit(1787702082.304:655): avc: denied { write } for pid=8968 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.530480][ T5787] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 279.665367][ T5787] usb 3-1: config 2 interface 0 altsetting 178 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 279.881548][ T5787] usb 3-1: config 2 interface 0 altsetting 178 endpoint 0x88 has invalid wMaxPacketSize 0 [ 279.974953][ T5787] usb 3-1: config 2 interface 0 has no altsetting 0 [ 280.004977][ T29] audit: type=1400 audit(1787702082.804:656): avc: denied { write } for pid=9006 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.043754][ T5787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.084867][ T5787] usb 3-1: Product: syz [ 280.109028][ T5787] usb 3-1: Manufacturer: syz [ 280.133779][ T5787] usb 3-1: SerialNumber: syz [ 281.063892][ T9013] siw: device registration error -23 [ 281.110702][ T5787] usb 3-1: can't set config #2, error -71 [ 281.166240][ T5787] usb 3-1: USB disconnect, device number 15 [ 281.433279][ T9023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.843'. [ 281.606369][ T9022] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 281.694395][ T9023] team0: Port device dummy0 removed [ 281.700019][ T9023] bridge4: port 1(dummy0) entered blocking state [ 281.706367][ T9023] bridge4: port 1(dummy0) entered disabled state [ 281.712824][ T9023] dummy0: entered allmulticast mode [ 281.718874][ T9023] dummy0: entered promiscuous mode [ 282.493876][ T9027] netlink: 24 bytes leftover after parsing attributes in process `syz.2.846'. [ 282.627726][ T9037] device-mapper: ioctl: Invalid target message parameters. [ 282.709753][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.851'. [ 282.810694][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.851'. [ 282.939360][ T9042] netlink: 'syz.5.851': attribute type 11 has an invalid length. [ 283.054286][ T9042] netlink: 'syz.5.851': attribute type 7 has an invalid length. [ 283.191705][ T9049] bond1: option mode: unable to set because the bond device has slaves [ 283.424061][ T29] audit: type=1400 audit(1787702086.224:657): avc: denied { map } for pid=9050 comm="syz.5.855" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 283.758205][ T9064] xt_policy: output policy not valid in PREROUTING and INPUT [ 284.193377][ T9069] openvswitch: netlink: IP tunnel TTL not specified. [ 284.372209][ T29] audit: type=1400 audit(1787702087.174:658): avc: denied { write } for pid=9055 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.659910][ T29] audit: type=1400 audit(1787702087.464:659): avc: denied { write } for pid=9078 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.807931][ T192] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 285.018214][ T192] usb 4-1: Using ep0 maxpacket: 8 [ 285.048723][ T192] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 285.095630][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.865'. [ 285.106498][ T192] usb 4-1: config 0 has no interfaces? [ 285.115599][ T9089] jffs2: notice: (9089) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 285.147848][ T192] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.244751][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.865'. [ 285.273557][ T192] usb 4-1: config 0 descriptor?? [ 285.288323][ T9097] MTD: Couldn't look up '/dev/sr0': -2 [ 285.458730][ T9095] netlink: 'syz.2.865': attribute type 11 has an invalid length. [ 285.525189][ T9095] netlink: 'syz.2.865': attribute type 7 has an invalid length. [ 285.662844][ T9077] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.859'. [ 286.402720][ T9112] netlink: 24 bytes leftover after parsing attributes in process `syz.2.867'. [ 286.414719][ T9112] xt_TPROXY: Can be used only with -p tcp or -p udp [ 286.498045][ T29] audit: type=1400 audit(1787702089.214:660): avc: denied { mount } for pid=9111 comm="syz.2.867" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 286.554107][ T192] usb 4-1: USB disconnect, device number 25 [ 286.664247][ T29] audit: type=1400 audit(1787702089.334:661): avc: denied { unmount } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 286.839264][ T29] audit: type=1400 audit(1787702089.374:662): avc: denied { write } for pid=9087 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.004324][ T9121] netlink: 40 bytes leftover after parsing attributes in process `syz.0.866'. [ 287.106190][ T29] audit: type=1400 audit(1787702089.824:663): avc: denied { write } for pid=9120 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.817569][ T9138] loop0: detected capacity change from 0 to 3904 [ 287.881298][ T9138] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 287.929368][ T9138] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 287.994995][ T9138] loop0: [ 288.317935][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.877'. [ 288.686013][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.877'. [ 288.863403][ T9151] netlink: 'syz.0.877': attribute type 11 has an invalid length. [ 288.899373][ T29] audit: type=1400 audit(1787702091.694:664): avc: denied { write } for pid=9165 comm="syz.7.883" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 288.962340][ T9151] netlink: 'syz.0.877': attribute type 7 has an invalid length. [ 289.077071][ T5787] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 289.189016][ T192] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 289.278628][ T5787] usb 4-1: Using ep0 maxpacket: 8 [ 289.297702][ T5787] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 289.326694][ T5787] usb 4-1: config 0 has no interfaces? [ 289.336897][ T5712] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 289.347539][ T5787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.358884][ T192] usb 8-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 289.382591][ T5787] usb 4-1: config 0 descriptor?? [ 289.390166][ T192] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 289.414981][ T192] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.452018][ T192] usb 8-1: config 0 descriptor?? [ 289.497029][ T5712] usb 6-1: device descriptor read/64, error -71 [ 289.616205][ T9164] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.882'. [ 289.654472][ T5787] usb 4-1: USB disconnect, device number 26 [ 289.683403][ T192] usb 8-1: USB disconnect, device number 2 [ 289.736779][ T5712] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 289.896774][ T5712] usb 6-1: device descriptor read/64, error -71 [ 290.018486][ T5712] usb usb6-port1: attempt power cycle [ 290.858848][ T30] INFO: task syz.4.228:6807 blocked for more than 144 seconds. [ 290.866666][ T5712] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 290.890377][ T30] Tainted: G L syzkaller #0 [ 290.950259][ T9180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.888'. [ 290.966632][ T5712] usb 6-1: device descriptor read/8, error -71 [ 290.983371][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 291.020444][ T30] task:syz.4.228 state:D stack:25112 pid:6807 tgid:6806 ppid:5592 task_flags:0x400140 flags:0x00080002 [ 291.060654][ T30] Call Trace: [ 291.071589][ T30] [ 291.089106][ T30] __schedule+0x1259/0x6920 [ 291.115635][ T30] ? __lock_acquire+0x4c5/0x1ec0 [ 291.140992][ T30] ? __pfx___schedule+0x10/0x10 [ 291.156045][ T30] ? find_held_lock+0x2b/0x80 [ 291.167587][ T30] ? schedule+0x225/0x2c0 [ 291.176234][ T30] schedule+0xdd/0x2c0 [ 291.185455][ T30] schedule_timeout+0x1b2/0x280 [ 291.195276][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 291.208157][ T30] ? mark_held_locks+0x40/0x70 [ 291.220059][ T30] __wait_for_common+0x2e7/0x4c0 [ 291.230467][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 291.237244][ T5712] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 291.248574][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 291.260430][ T30] ? kobject_put+0xb9/0x640 [ 291.270296][ T30] ? snd_card_disconnect.part.0+0x443/0x5b0 [ 291.279683][ T5712] usb 6-1: device descriptor read/8, error -71 [ 291.289261][ T30] trigger_card_free+0x127/0x190 [ 291.299993][ T30] ? __pfx_trigger_card_free+0x10/0x10 [ 291.312946][ T30] ? rcu_is_watching+0x13/0xc0 [ 291.323187][ T30] ? devres_log+0x9d/0x2c0 [ 291.331060][ T30] release_nodes+0xa5/0x120 [ 291.335591][ T30] devres_release_all+0x112/0x180 [ 291.340947][ T30] ? __pfx_devres_release_all+0x10/0x10 [ 291.346527][ T30] ? kernfs_remove_by_name_ns+0xbb/0x120 [ 291.352406][ T30] ? __pfx_platform_dma_cleanup+0x10/0x10 [ 291.358353][ T30] device_unbind_cleanup+0x81/0x270 [ 291.363606][ T30] device_release_driver_internal+0x4c4/0x620 [ 291.370590][ T30] unbind_store+0xf8/0x110 [ 291.375076][ T30] ? __pfx_unbind_store+0x10/0x10 [ 291.380524][ T30] drv_attr_store+0x74/0xb0 [ 291.385049][ T30] ? __pfx_drv_attr_store+0x10/0x10 [ 291.390810][ T30] sysfs_kf_write+0xf2/0x150 [ 291.395425][ T30] kernfs_fop_write_iter+0x3e0/0x5f0 [ 291.401116][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 291.406343][ T30] vfs_write+0x6af/0x1050 [ 291.410980][ T5712] usb usb6-port1: unable to enumerate USB device [ 291.419453][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 291.426024][ T30] ? __pfx_vfs_write+0x10/0x10 [ 291.431241][ T30] ? find_held_lock+0x2b/0x80 [ 291.436040][ T30] ksys_write+0x12a/0x250 [ 291.442314][ T30] ? __pfx_ksys_write+0x10/0x10 [ 291.447407][ T30] do_syscall_64+0x123/0x790 [ 291.452023][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.458279][ T30] RIP: 0033:0x7f711199e0d9 [ 291.462707][ T30] RSP: 002b:00007f710fbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 291.472023][ T30] RAX: ffffffffffffffda RBX: 00007f7111c25fa0 RCX: 00007f711199e0d9 [ 291.480477][ T30] RDX: 000000000000000b RSI: 00002000000002c0 RDI: 0000000000000006 [ 291.488778][ T30] RBP: 00007f7111a35024 R08: 0000000000000000 R09: 0000000000000000 [ 291.496959][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.505002][ T30] R13: 00007f7111c26038 R14: 00007f7111c25fa0 R15: 00007ffd1ee44378 [ 291.513170][ T30] [ 291.581462][ T30] [ 291.581462][ T30] Showing all locks held in the system: [ 291.598056][ T30] locks held by khungtaskd/30: 1, last CPU#0: [ 291.610691][ T30] #0: ffffffff8ede9de0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 291.630851][ T30] locks held by getty/5350: 2, on CPU#0: [ 291.644316][ T30] #0: ffff8880373950a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 291.664344][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 291.688519][ T30] locks held by syz-executor/5594: 1, last CPU#0: [ 291.702367][ T30] #0: ffff88802b330460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 [ 291.724038][ T30] locks held by syz.4.228/6807: 4, on CPU#0: [ 291.736237][ T30] #0: ffff88803717a470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 291.754978][ T30] #1: ffff88802a32c460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 291.774162][ T30] #2: ffff888079608480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 291.798357][ T30] #3: ffff888032dc2138 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 291.820054][ T30] [ 291.825303][ T30] ============================================= [ 291.825303][ T30] [ 291.843841][ T30] NMI backtrace for cpu 0 [ 291.843853][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 291.843869][ T30] Tainted: [L]=SOFTLOCKUP [ 291.843872][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 291.843878][ T30] Call Trace: [ 291.843882][ T30] [ 291.843886][ T30] dump_stack_lvl+0x100/0x190 [ 291.843906][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 291.843924][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 291.843942][ T30] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 291.843961][ T30] sys_info+0x141/0x190 [ 291.843976][ T30] watchdog+0xcb1/0x1030 [ 291.843989][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 291.844001][ T30] ? __pfx_watchdog+0x10/0x10 [ 291.844012][ T30] ? __kthread_parkme+0x18f/0x230 [ 291.844024][ T30] ? kthread+0x13a/0x450 [ 291.844036][ T30] ? __pfx_watchdog+0x10/0x10 [ 291.844046][ T30] kthread+0x373/0x450 [ 291.844058][ T30] ? __pfx_kthread+0x10/0x10 [ 291.844073][ T30] ret_from_fork+0x730/0xd60 [ 291.844083][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 291.844094][ T30] ? __switch_to+0x800/0x10f0 [ 291.844108][ T30] ? __pfx_kthread+0x10/0x10 [ 291.844122][ T30] ret_from_fork_asm+0x1a/0x30 [ 291.844139][ T30] [ 292.079138][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 292.086015][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 292.096681][ T30] Tainted: [L]=SOFTLOCKUP [ 292.100978][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 292.111024][ T30] Call Trace: [ 292.114303][ T30] [ 292.117269][ T30] dump_stack_lvl+0x100/0x190 [ 292.121949][ T30] vpanic+0x553/0x970 [ 292.125914][ T30] ? __pfx_vpanic+0x10/0x10 [ 292.130402][ T30] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 292.136906][ T30] panic+0xd1/0xe0 [ 292.140615][ T30] ? __pfx_panic+0x10/0x10 [ 292.145020][ T30] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 292.151176][ T30] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 292.157322][ T30] ? watchdog.cold+0x1ec/0x234 [ 292.162082][ T30] watchdog.cold+0x1fd/0x234 [ 292.166648][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 292.172433][ T30] ? __pfx_watchdog+0x10/0x10 [ 292.177081][ T30] ? __kthread_parkme+0x18f/0x230 [ 292.182083][ T30] ? kthread+0x13a/0x450 [ 292.186296][ T30] ? __pfx_watchdog+0x10/0x10 [ 292.190945][ T30] kthread+0x373/0x450 [ 292.194994][ T30] ? __pfx_kthread+0x10/0x10 [ 292.199562][ T30] ret_from_fork+0x730/0xd60 [ 292.204145][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 292.209249][ T30] ? __switch_to+0x800/0x10f0 [ 292.213925][ T30] ? __pfx_kthread+0x10/0x10 [ 292.218494][ T30] ret_from_fork_asm+0x1a/0x30 [ 292.223265][ T30] [ 292.226313][ T30] Kernel Offset: disabled [ 292.230613][ T30] Rebooting in 86400 seconds..