last executing test programs: 12.553481696s ago: executing program 2 (id=648): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card1/oss_mixer\x00', 0x800, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x9, 0x2, 0x10, 0x8, 0x2, 0x0, {0x0, r4, r5}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(r6, &(0x7f0000000100)='d', 0x1) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$USBDEVFS_SETINTERFACE(r6, 0x80085504, &(0x7f00000000c0)={0x65a, 0x8}) read$FUSE(r7, &(0x7f0000002100)={0x2020}, 0x2020) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) chmod(&(0x7f0000000140)='./cgroup\x00', 0x42) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c000000020603000000000000000000020000001c0007800800064000000001050015000200000008001240000040000500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000009e7569f2e6122c30820699471faa123fc574414033583562bef03c5b01b30ecffcdb110bd751d861d1fe850e7c16a1b5ab7bff45b37b8da766b9bffd130f6759c693bafbf02a9459e0dd3533435ef1ceed055fa4413b22a983aa3b293c32c01d83bd"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a310001010a421b211f6cdffaa7c8ec2255bab001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 8.815065385s ago: executing program 2 (id=651): openat$nvram(0xffffffffffffff9c, 0x0, 0x131e81, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = userfaultfd(0x80801) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x2000000000000014}) close(0x3) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000280)) close_range(r1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_pidfd_open(r0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x1100, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}}) socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e760", 0x22}], 0x2}, 0x0) 8.374086372s ago: executing program 2 (id=654): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) r0 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000"], 0x50) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01005ffc"], 0x0, 0xfc5f}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) (async) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r2, 0x0, 0x30, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) (async, rerun: 64) r8 = openat$cgroup_ro(r3, &(0x7f0000000600)='blkio.throttle.io_serviced_recursive\x00', 0x7a05, 0x1700) (rerun: 64) write$cgroup_int(r8, &(0x7f0000000200), 0x806000) (async) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) (async) r10 = accept4(r9, 0x0, 0x0, 0x0) setsockopt$sock_int(r10, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) (async) sendmmsg$alg(r10, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) (async, rerun: 32) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (rerun: 32) 7.872015553s ago: executing program 2 (id=659): r0 = syz_usb_connect(0x2, 0xab, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e00100000000000000000060090015160500011516050009040101010e02000007058105000401"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0x20, 0x81, 0x1a, '\x00'/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FICLONE(r2, 0x40049409, 0xffffffffffffffff) ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f0000000200)={0x1, @pix={0x280, 0x1e0, 0x56595559, 0x1}}) 6.465118355s ago: executing program 0 (id=663): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$rds(0x15, 0x5, 0x0) syz_open_pts(0xffffffffffffffff, 0x81) syz_open_dev$sg(0x0, 0x0, 0x8002) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0xf0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) iopl(0x3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'lo\x00'}) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000280)=ANY=[], &(0x7f0000000380)=0xdb) 5.871515357s ago: executing program 1 (id=666): r0 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) sendmsg$nl_generic(r0, &(0x7f0000004f00)={0x0, 0x0, &(0x7f0000004ec0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000002600030328bd7000fedbdf251f"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x24000844) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000e400004a00000000000400020000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYRES64=r1], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) sendmsg$NL80211_CMD_TESTMODE(r0, 0x0, 0x20000841) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000020) r3 = creat(0x0, 0x104) r4 = open$dir(0x0, 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x80000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RVERSION(r3, 0x0, 0x13) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={r6, &(0x7f00000000c0)="444038071ef96a6ccec1cd581b772ef55f0aedf6b92a6c899fe7edbf13e88300"/54, 0x0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, 0x0) 5.760935396s ago: executing program 0 (id=668): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0980, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000840)={0x6, 0x0, @pic={0x4, 0x3, 0x1, 0x1, 0x8, 0x6, 0x9, 0x1, 0x7, 0x8, 0x2, 0x4, 0x5, 0x64, 0x76, 0x9}}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) close(0x3) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x9c2) ioctl$BLKFINISHZONE(r3, 0x40101288, &(0x7f00000001c0)={0xffffffffffffff22, 0x6}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x8000000, 0x9, 0x1}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000140)={0x2, 0x388b}) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCGETS2(r6, 0x802c542a, &(0x7f0000000040)) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r5, 0x4020565b, &(0x7f0000000000)={0x2, 0x8003, 0x3}) r7 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x8000) ioctl$MEMREADOOB64(r7, 0xc0184d16, &(0x7f0000001640)={0x9, 0x0, 0x6, &(0x7f0000001540)="4967fb5726f8"}) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000080)={0x0, 0x37, &(0x7f0000006640)={&(0x7f00000003c0)=ANY=[], 0x60}}, 0x40000) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000300)={r4, r4, 0x4, 0xfd, &(0x7f0000000200)="a91f46180824eab6053a16fddeac12849f74154e617e696c6727ba07d5c722fc5780524b3ffc5e82c04ca8e6a5c64ffd20015a3a896f367a24d54795af82ccbca3259d7270b6b74be383ab18717c9e4fe4c8cd76927cf4d811b97fa4216080cbf4f542fb1f2b19ec3cddcb0f9bfdbfe6989300a75b82d437fa77c5828873bdd0d87d8b7ba8214cb6f70e0b80b125c2df354ea45466c5d8a22e212c1e712ccb9a4583166c45df5bea4b5174bc84a18261ba9184e8b90a99406238af1cfa520b84e16cb702ef72e9d3a7e94a694a0eb2ba0ab81fb7046a518571d29bcc2e3c5c5aa5c17f590c329d8cb4bf59de136a52f7cc2ead4aa172427d351b498931", 0x6, 0x2, 0x200, 0x6, 0x7ff, 0x3, 0x3, 'syz0\x00'}) 5.689467243s ago: executing program 1 (id=669): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x60}, 0x1, 0x0, 0x14050000, 0x40000}, 0x20008000) 5.687005361s ago: executing program 3 (id=670): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r1}, &(0x7f00000007c0)=ANY=[], 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setregid(0xee00, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) ioctl$TCXONC(r5, 0x540a, 0x2) ioctl$TIOCSERGETLSR(r5, 0x5459, 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x922bac8556bdad8e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x88d0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000ffff26be7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="791001002b0000000a000100aaaaaaaaaa2d0000140012800b000100627269646765000004000280"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 5.542059482s ago: executing program 1 (id=671): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000000480)=""/62, 0x3e}], 0x2}, 0x81}], 0x1, 0x120, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_open_dev$media(&(0x7f0000000100), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000400)={{0x3, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000040)={0x6, 0x9, 0x80, 0x0, 0x8}) readv(r4, &(0x7f0000002740), 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x161, 0x1b, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r3, 0xc0000) r5 = socket(0x16, 0x6, 0x3fffffd) sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008081}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000c80)) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x100000000000000c, 0x204000) set_mempolicy(0x4005, 0x0, 0x7) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES8=r6], 0x1c}, 0x1, 0x0, 0x0, 0x20000002}, 0x24008002) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, 0x0, 0x20000) 5.447957497s ago: executing program 4 (id=672): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000b40)=[{&(0x7f0000000f00)=""/46, 0x2e}, {&(0x7f0000000940)=""/175, 0xaf}], 0x2, 0x4, 0x10003ff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 5.344956864s ago: executing program 4 (id=673): writev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000440)="49624b0f326e61c3bd189e3df5bd054b59e3fbda38885dd0d27c8daca3c43638be6fd01e93115b1b46b458420b9303d3d29f9f83d293a8fe28eeeca197903741ef88246f5286f9ab050c77d5aeb221a12a9313ca14d9fa0dbe2bdcaf731de0d873889326205d95e39556076e071204882c7142f199dd8883", 0x78}, {&(0x7f0000000740)="b7fdf0fb312dc88ca2de9ac95a8a609056f263cb632317867c8a19706d76bfd405ffa56d32f4b191fdaadaafc0683fb7c6e7ddf82cfcd7f7632a4e5749907f0ac789e2b76fbaa0e1fe65d2b2ddc7c26d290e378fce8ef5eebce7679aa98478b943aa03e970ff9509c0a7b3c238e400de1d626a548901", 0x76}, {&(0x7f00000007c0)="87b4516cc86069c0536122290fdbb2fcf9b6f2f429d201be958630d75a113a45b54b1eb156f4", 0x26}, {&(0x7f0000000880)="efd63900ec7021e8eef2dc7493c970a72b1a57e0268e1911468059a1a00fdbba05cb2f7d761652f6eea1719b07055671b71492b021e022e62a6270b1f25e62b9cab8dd4be957048e19fab8e4cd6091fa2f09e64b675332cdbf9bc53d2398d115adcb041c96274f57bbae4433737447b05b879e88114d169884b6e4770ac8f2406c2be17d5010688f347e62315d3170dab5082f1f09460fc0daf723b17d3ed62347b4f38dbdf751aeac64f04b1799db011f3522d201ea", 0xb6}, {&(0x7f0000000940)="cc019a8517cbb00f0a4843c0d65452c3edd69488ee08f492e83cceacc098da14682d88f3da85bfe85bee87e1c7c470ad48464921462729f07486ecdab8940142bd3ae5e85f3fb0e9be69743c05594825104b4947a326e32c1a69e9398a7d5f4dca128445a8eb13750ce7bb03", 0x6c}, {&(0x7f00000009c0)="c0e6f5ebd02570ba3607da7404c73e159e074cd49fac8e09622f5ef4fc30139148ee1f89502f5320bf1512c047c4908debeacd34727903563167c7561c86e64329dbe1799565a36518819ea4bb1af9e2ffbad7331f150bd7e79d7726ad809f9c912fbcf1efdf77a4610e", 0x6a}, {&(0x7f0000000a40)="1a25418a413d8d0e0ca58eba8e7cb8b230666c55be8d79b9ec45e828d0e165cfaf902e372f505ac1cf96ccfd5162ea5ea3c88ef2c757612adb092e7b722d60ca3d606ec2316396688deeae61c5ddee60aa6a7389d5d06d40bac162b71557c57e45f112c7f7d9c553e9d009e05f2e27cdd91d66b32084fc52116d773fb84d5e62f8ecc1e2cf95c4038b4d29cc9d1afff3", 0x90}], 0x7) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x10) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./proc_mnt\x00', 0x0) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/net/rpc/auth.unix.ip/flush\x00', 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x62) close_range(r2, r1, 0x0) close_range(r1, r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./proc_mnt\x00', 0x940, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r2, 0x1f, &(0x7f0000000100)={0x28, 0x54, 0x0, r3, &(0x7f0000000340)="23fc8a2d6fa4234ed2a73c1f34", 0x1, 0x8, 0x1, 0x0, {0x0, 0x0, r0, 0x5}}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) fsopen(&(0x7f0000000280)='ufs\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) poll(&(0x7f0000000100), 0x0, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x88282, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x1ff, 0x7a, 0x0, 0x8000, 0x6, 0x3}, 0x0, 0x0, 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x1d, r6, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffe, r6, 0x0) syz_clone3(&(0x7f0000000680)={0x28020000, 0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000400), {0x27}, &(0x7f0000000500)=""/135, 0x87, &(0x7f00000005c0)=""/106, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x6}, 0x58) ptrace$ARCH_GET_GS(0x1e, r7, &(0x7f0000000700), 0x1004) 4.604544655s ago: executing program 1 (id=674): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0xf, "0f03000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$media(&(0x7f0000000000), 0xa, 0x41) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[{}, {}]}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0xf, "0f03000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0xf, "0f03000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0xf, "0f03000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0xf, "0f03000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 4.121287955s ago: executing program 4 (id=675): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='connect aa:aa:aa:aa:aa:10 0', 0x1b) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000956c2833b4cfaa2ecda2c09fdc743fbf0d59dee2343fc32c8f38279dbc8ed51b83eb9903b449655ce810bee490e111e7fbaf67990a9313e149ebce6277", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000100"/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)=[0x0], &(0x7f00000003c0), 0x0, 0x6, &(0x7f0000000400)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0xffa2, 0x74, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x6, [@enum64={0x10, 0x2, 0x0, 0x13, 0x1, 0x0, [{0xe, 0xff, 0x80000001}, {0xc, 0x8, 0x8}]}, @union={0xd, 0x4, 0x0, 0x5, 0x1, 0x4, [{0x5, 0x4, 0x2}, {0xd, 0x2, 0x6}, {0x0, 0x2, 0x8}, {0x8, 0x0, 0x7}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x4}}, @var={0x4, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x61, 0x0, 0x0, 0x0]}}, &(0x7f0000000780)=""/126, 0xa6, 0x7e, 0x1, 0x5, 0x10000}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000840)}, 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x181c01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) r4 = openat$mice(0xffffffffffffff9c, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(0x0, r4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/sockstat\x00') socket$rds(0x15, 0x5, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x10, 0x1000000, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xacd, 0x20000, 0x10000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x81f70, 0x80, 0x1, 0x12c, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x1000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r8, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000ffffffffffffffff0100010002800000", @ANYRES32=r3, @ANYBLOB="0600"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0500000005000000000000000b00000000000000", @ANYRES32=r2, @ANYBLOB="90ca2b9a"], 0x50) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 3.721914221s ago: executing program 2 (id=676): write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='/dev/loop0,65', 0xd) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) 3.705663146s ago: executing program 3 (id=677): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') openat$binderfs(0xffffffffffffff9c, 0x0, 0x6, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x51, &(0x7f0000000180), 0x0) r3 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f00)=ANY=[@ANYBLOB="840100001a000100feffffff00010000ac1e01010000000000000000000000000001000107174e2300050a0000203a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x184}}, 0x20000844) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000000300)=""/120, &(0x7f00000003c0)=0x78) write(r5, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000400", 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) ioctl$FICLONE(r5, 0x40049409, r1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.136102216s ago: executing program 0 (id=678): socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) io_cancel(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$fscrypt_v1(&(0x7f00000002c0), 0x0, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) unshare(0x2c020400) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44050) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x58, 0x10, 0x401, 0x400800, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5a4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 3.029954264s ago: executing program 4 (id=679): socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2.861502011s ago: executing program 2 (id=680): r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.393906418s ago: executing program 3 (id=681): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0x40, 0x1, 0x2}, 0x30, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpgid(0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000002c0)=0xfffffffffffffffa) fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x2, r3}) close(r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r4) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f0000000100)={0x1, 0x6}, 0x2) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x1d) write$USERIO_CMD_REGISTER(r6, &(0x7f0000000040)={0x0, 0x3}, 0x2) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f0000000780)={0x1, 0x7}, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r15, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000008c0)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0xc0c0) 2.341876788s ago: executing program 4 (id=682): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08004500001cfffe0000a02f94"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3886dd2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) write(r4, &(0x7f00000000c0)='jiffies', 0xfdef) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r4, 0x1e, &(0x7f00000000c0)={r0, 0x2, 0x533, 0xffff, 0x7fffffff}, 0x1) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x4, 0x4, 0x5}}, 0x14) 2.257180128s ago: executing program 4 (id=683): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101175129205705092006c70102010109022400010200100009045819028ab53800090506020001000006090582020002"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x324, 0x88, 0x7fffffffffffffff}) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000008000000000800001008510000006000000180000000200000000000000060000003c080100000000001800000000000000000000000000000095000000000010009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 2.19486244s ago: executing program 0 (id=684): socket$kcm(0x11, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x5, 0x1, 0x103, 0x0, 0x200}, 0x20) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x6e37b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004c80)=ANY=[@ANYBLOB="730860cc976a5afbabafe1581a4afd13548e83e3b525ef68ae2502881eb5ac473363e1910c45377d65bf4ae70fd2b70e18ff0a51bae798e3c53c82b921929ec20789ddc43e5f14389877bcb96dc6eb97c67a7e2f05b9d7bb556dea0180758e30c77c08b4837fbd320d8e54709ae6647880e987a75ca74a47e150ebeeee8b5e37aacc5a54bba6fa53b40a5fe9e3535baa9b6182a82c653e80b0af011a778c08857d966554e2433fc35d53ff281c50be5460e62d67ac3e9addfb614dddb64e45a5006b34b20f6b08dcd43e27e4d255ce3c4ada", @ANYRES16=r7, @ANYBLOB="030300000000fddbdf253d000000"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0x302}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @loopback}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041891}, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)={@fallback=r10, r10, 0x2f, 0x44}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x7ff, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@fallback=r10, r10, 0x3b, 0x2030, 0x4, @void, @void, @value=r11}, 0x20) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r9, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r12, 0x0, 0x0, 0x0, 0x210000, 0x0, 0x334e8b, 0x200000a00000}) r13 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$TIOCCBRK(r13, 0x5428) 1.393785223s ago: executing program 3 (id=685): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0f0000001209000003000000070000008a2a0200", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000010000000400000000000000000000000000800000000000"], 0x50) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x12c}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r4, &(0x7f0000000300)="12345678", 0x8, 0x0, &(0x7f0000000400)={0x2, 0x1234, @loopback}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x7, 0xffffffff, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00c8c32079000000e6f248e98baf4cb9979b7fff3a9ce01cd4c592597fec9bd967450ebb226d85cc5d30dd92b54da2b1d957be65cf2c844249000000000000c0aa613b9317529f170c4bc1524602b9cb8f5b954940395d99de7168fbb8f35cfdf38a", @ANYRES32=r0, @ANYBLOB="0400"/20, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="050000000100"/28], 0x50) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000980)=@IORING_OP_WRITE_FIXED={0x5, 0x40, 0x4007, @fd_index=0x1, 0x2, 0xfffffffffffffffd, 0x10000, 0x8, 0x1, {0x1}}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)=""/152, 0x98}], 0x2) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r11 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0xd) read$msr(r11, &(0x7f0000019680)=""/102392, 0x18ff8) r12 = inotify_init() socket$nl_generic(0x10, 0x3, 0x10) inotify_add_watch(r12, &(0x7f0000000340)='.\x00', 0xa50003d1) close(0x3) 1.089266064s ago: executing program 0 (id=686): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES8], 0xfc}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r1, 0x4bfa, 0xb74) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x224e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x22020600) fallocate(r2, 0x11, 0x40, 0x4000000007c000) r3 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000c9f000/0x2000)=nil, 0x4, 0x0, 0x0, 0x1, 0x26, 0x0, 0x8, 0x6e}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x2b, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000804) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x1a, 0x3, 0x100) r5 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@local}) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d0c, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@delqdisc={0x60, 0x25, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9d2d8fd4fd1ad672}, {0xffe6, 0xc}, {0x2, 0xb}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_RATE={0x6, 0x5, {0x0, 0x6}}, @TCA_RATE={0x6, 0x5, {0xfd, 0xd}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x60}, 0x1, 0x0, 0x0, 0x488d4}, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000010000000000000000000001800000004000000000000000700000085100000fbffffff186400000300000000000000020000009500000000000000ce39c063026b3615bd4a0ee7cc"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x72, &(0x7f0000000000)=""/114, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 829.348797ms ago: executing program 1 (id=687): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="100000002b000106626f1b7bc1e1b200"], 0x10}], 0x1}, 0x0) (async) r0 = syz_io_uring_setup(0x7463, &(0x7f0000000540)={0x0, 0xd127, 0x800, 0x3, 0x2083, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/73, 0x49}], 0x1) (async) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f00000002c0)={0x38, &(0x7f0000000040)=[{0x3d, '\x00', @data=0x3, 0x4db6}]}) (async) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x23, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c20000000000000000000800450000380000000000019078ac1e0001ac1414bb030490781200183f25000005004edb41000000000100007f000001ac14141800186371ae"], 0x0) (async) recvmsg$can_j1939(r4, &(0x7f0000002980)={&(0x7f0000000300)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002880)=[{&(0x7f0000000380)=""/7, 0x7}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/211, 0xd3}, {&(0x7f00000026c0)=""/47, 0x2f}, {&(0x7f0000002700)=""/79, 0x4f}, {&(0x7f0000002780)=""/203, 0xcb}], 0x7, &(0x7f0000002900)=""/126, 0x7e}, 0x40012003) (async) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x9) mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000008, 0x11, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_SETXATTR={0x2a, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0}}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10) (async) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x3, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x7}, {0x0, 0x0, 0x400000000, 0xcd6}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xb7, 0x8, 0x7}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c) (async) syz_emit_ethernet(0x0, 0x0, &(0x7f00000004c0)={0x1, 0x3, [0xa72, 0x49d, 0xbb9, 0x4fe]}) socket$nl_route(0x10, 0x3, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x88}, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) socket$inet_mptcp(0x2, 0x1, 0x106) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 461.77586ms ago: executing program 3 (id=688): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES8], 0xfc}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r1, 0x4bfa, 0xb74) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x224e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x22020600) fallocate(r2, 0x11, 0x40, 0x4000000007c000) r3 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000c9f000/0x2000)=nil, 0x4, 0x0, 0x0, 0x1, 0x26, 0x0, 0x8, 0x6e}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x2b, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000804) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x1a, 0x3, 0x100) r5 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@local}) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d0c, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@delqdisc={0x60, 0x25, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9d2d8fd4fd1ad672}, {0xffe6, 0xc}, {0x2, 0xb}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_RATE={0x6, 0x5, {0x0, 0x6}}, @TCA_RATE={0x6, 0x5, {0xfd, 0xd}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x60}, 0x1, 0x0, 0x0, 0x488d4}, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000010000000000000000000001800000004000000000000000700000085100000fbffffff186400000300000000000000020000009500000000000000ce39c063026b3615bd4a0ee7cc"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x72, &(0x7f0000000000)=""/114, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 87.472353ms ago: executing program 1 (id=689): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='connect aa:aa:aa:aa:aa:10 0', 0x1b) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000956c2833b4cfaa2ecda2c09fdc743fbf0d59dee2343fc32c8f38279dbc8ed51b83eb9903b449655ce810bee490e111e7fbaf67990a9313e149ebce6277", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000100"/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)=[0x0], &(0x7f00000003c0), 0x0, 0x6, &(0x7f0000000400)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0xffa2, 0x74, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x6, [@enum64={0x10, 0x2, 0x0, 0x13, 0x1, 0x0, [{0xe, 0xff, 0x80000001}, {0xc, 0x8, 0x8}]}, @union={0xd, 0x4, 0x0, 0x5, 0x1, 0x4, [{0x5, 0x4, 0x2}, {0xd, 0x2, 0x6}, {0x0, 0x2, 0x8}, {0x8, 0x0, 0x7}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x4}}, @var={0x4, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x61, 0x0, 0x0, 0x0]}}, &(0x7f0000000780)=""/126, 0xa6, 0x7e, 0x1, 0x5, 0x10000}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000840)}, 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x181c01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) r4 = openat$mice(0xffffffffffffff9c, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(0x0, r4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/sockstat\x00') socket$rds(0x15, 0x5, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x10, 0x1000000, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xacd, 0x20000, 0x10000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x81f70, 0x80, 0x1, 0x12c, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x1000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r8, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000ffffffffffffffff0100010002800000", @ANYRES32=r3, @ANYBLOB="0600"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0500000005000000000000000b00000000000000", @ANYRES32=r2, @ANYBLOB="90ca2b9a"], 0x50) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 65.358752ms ago: executing program 3 (id=690): mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)='\x00', 0x1}, {&(0x7f0000000000)="d4", 0x1}], 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) modify_ldt$read_default(0x2, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setrlimit(0x1, &(0x7f0000000080)={0x3, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x0, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2, 0x7}}, {{0xa, 0x0, 0x6df, @empty, 0x5}}}, 0x108) getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x1) fstat(0xffffffffffffffff, 0x0) close(r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c0001800600060088470000140002"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 0s ago: executing program 0 (id=691): socket$rds(0x15, 0x5, 0x0) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) epoll_create1(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) removexattr(0x0, &(0x7f0000000000)=@known='security.apparmor\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x448101, 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$getflags(r2, 0x401) read$msr(r1, &(0x7f0000019300)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x2000000, 0x4, 0x0, &(0x7f0000000600)="c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r7, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x8, 0x1, 0x4, 0xc08}}, 0xfffffdf0) r8 = syz_io_uring_setup(0xf03, &(0x7f0000002000)={0x0, 0x958a, 0x10000, 0x0, 0x50}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r8, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) write$UHID_DESTROY(r7, &(0x7f0000000180), 0x4) kernel console output (not intermixed with test programs): ferent from the descriptor's value: 11 [ 113.739099][ T5708] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 113.761540][ T5685] usb 3-1: USB disconnect, device number 4 [ 113.767487][ T5708] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 113.798491][ T5708] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 113.809081][ T5723] usb 1-1: device descriptor read/64, error -71 [ 113.829920][ T5708] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 113.833951][ T5328] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 113.848270][ T5708] usb 4-1: config 1 interface 0 has no altsetting 0 [ 113.858774][ T5685] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 113.868679][ T5708] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 113.885399][ T5708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.923452][ T5708] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 113.932806][ T5723] usb usb1-port1: attempt power cycle [ 114.026292][ T5328] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 114.042510][ T5328] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 114.062486][ T5328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.075350][ T5328] usb 5-1: config 0 descriptor?? [ 114.083458][ T6437] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 114.138528][ T5708] scsi host1: usb-storage 4-1:1.0 [ 114.191121][ T6445] kAFS: No cell specified [ 114.196726][ T6445] afs: Unknown parameter '†±Žs ƒ{E±–' %Û%﫺¶Š#S«·Ü5÷óWc¢ò ;_#aèàp0LÁ8˜w­ÝîÑ­Š1è¢%t‘`%|u¸XçýíbW³Z;jICìq&[Quš]ÒyP4ÅïƒWÚ&ýáK²b_©ošóó¨8÷#XeÿÚ\' [ 114.287005][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.184'. [ 114.298298][ T5723] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 114.326659][ T5723] usb 1-1: device descriptor read/8, error -71 [ 114.511732][ T6461] netlink: 49 bytes leftover after parsing attributes in process `syz.1.187'. [ 114.522150][ T5328] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 114.532013][ T6461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.187'. [ 114.544784][ T5328] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 114.559353][ T5328] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 114.569317][ T5328] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 114.582036][ T5328] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 114.589507][ T5328] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 114.592473][ T5723] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 114.596975][ T5328] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 114.617304][ T5328] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 114.624640][ T5328] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 114.631484][ T5328] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 114.933301][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 114.933313][ T30] audit: type=1400 audit(1786080840.968:373): avc: denied { append } for pid=6436 comm="syz.4.181" name="loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.933370][ T5328] asus 0003:0B05:1ABE.0001: reserved main item tag 0xe [ 114.978100][ T5708] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 114.987294][ T5723] usb 1-1: device descriptor read/8, error -71 [ 115.006347][ T30] audit: type=1400 audit(1786080841.038:374): avc: denied { unmount } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 115.064810][ T5328] asus 0003:0B05:1ABE.0001: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.4-1/input0 [ 115.133293][ T5723] usb usb1-port1: unable to enumerate USB device [ 115.204672][ T5708] usb 2-1: Using ep0 maxpacket: 32 [ 115.450573][ T13] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 115.463641][ T5708] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 115.480569][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.496888][ T5708] usb 2-1: Product: syz [ 115.501224][ T5708] usb 2-1: Manufacturer: syz [ 115.509885][ T5708] usb 2-1: SerialNumber: syz [ 115.525558][ T5708] usb 2-1: config 0 descriptor?? [ 115.638923][ T13] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 115.786876][ T6477] kAFS: No cell specified [ 115.812284][ T6477] afs: Unknown parameter '†±Žs ƒ{E±–' %Û%﫺¶Š#S«·Ü5÷óWc¢ò ;_#aèàp0LÁ8˜w­ÝîÑ­Š1è¢%t‘`%|u¸XçýíbW³Z;jICìq&[Quš]ÒyP4ÅïƒWÚ&ýáK²b_©ošóó¨8÷#XeÿÚ\' [ 115.871577][ T5328] usb 4-1: USB disconnect, device number 4 [ 115.877544][ T6443] sddr09: could not read card info [ 115.933427][ T48] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 115.954809][ T48] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 115.963466][ T48] sd 1:0:0:0: [sdb] Write Protect is off [ 115.971997][ T48] sd 1:0:0:0: [sdb] Asking for cache data failed [ 115.981744][ T48] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 116.048023][ T48] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 116.242554][ T5843] udevd[5843]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 116.418735][ T30] audit: type=1400 audit(1786080842.448:375): avc: denied { mount } for pid=6484 comm="syz.2.193" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 116.452681][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 116.526413][ T30] audit: type=1400 audit(1786080842.478:376): avc: denied { search } for pid=6484 comm="syz.2.193" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 116.579707][ T30] audit: type=1400 audit(1786080842.478:377): avc: denied { write } for pid=6484 comm="syz.2.193" name="trace_marker" dev="tracefs" ino=1688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 116.646264][ T30] audit: type=1400 audit(1786080842.478:378): avc: denied { open } for pid=6484 comm="syz.2.193" path="/38/dir0/trace_marker" dev="tracefs" ino=1688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 116.676641][ T5708] snd-usb-6fire 2-1:0.0: unable to receive device firmware state. [ 116.697292][ T5708] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -110 [ 116.732046][ T30] audit: type=1400 audit(1786080842.478:379): avc: denied { search } for pid=6484 comm="syz.2.193" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 116.765458][ T6497] kAFS: No cell specified [ 116.780661][ T6497] afs: Unknown parameter '†±Žs ƒ{E±–' %Û%﫺¶Š#S«·Ü5÷óWc¢ò ;_#aèàp0LÁ8˜w­ÝîÑ­Š1è¢%t‘`%|u¸XçýíbW³Z;jICìq&[Quš]ÒyP4ÅïƒWÚ&ýáK²b_©ošóó¨8÷#XeÿÚ\' [ 116.816058][ T30] audit: type=1400 audit(1786080842.478:380): avc: denied { search } for pid=6484 comm="syz.2.193" name="per_cpu" dev="tracefs" ino=1674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 116.909706][ T30] audit: type=1400 audit(1786080842.478:381): avc: denied { search } for pid=6484 comm="syz.2.193" name="cpu0" dev="tracefs" ino=1675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 116.932522][ T30] audit: type=1400 audit(1786080842.478:382): avc: denied { read } for pid=6484 comm="syz.2.193" name="trace_pipe" dev="tracefs" ino=1676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 116.993234][ T6502] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 117.028863][ T6502] exFAT-fs (nullb0): invalid boot record signature [ 117.051816][ T6502] exFAT-fs (nullb0): failed to read boot sector [ 117.069651][ T6502] exFAT-fs (nullb0): failed to recognize exfat type [ 117.072500][ T5784] usb 5-1: USB disconnect, device number 2 [ 118.039549][ T6510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6510 comm=syz.3.199 [ 118.068078][ T6515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.201'. [ 118.101319][ T6511] binder: 6509:6511 ioctl c028660f 200000000180 returned -22 [ 118.888463][ T5328] usb 2-1: USB disconnect, device number 3 [ 119.158024][ T6528] ve: renamed from veth0_vlan (while UP) [ 119.844228][ T6538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.208'. [ 119.879030][ T6538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.208'. [ 120.400138][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 120.400199][ T30] audit: type=1400 audit(1786080846.428:401): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 120.422523][ T5784] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 120.485561][ T6560] kAFS: No cell specified [ 120.505142][ T6560] afs: Unknown parameter '†±Žs ƒ{E±–' %Û%﫺¶Š#S«·Ü5÷óWc¢ò ;_#aèàp0LÁ8˜w­ÝîÑ­Š1è¢%t‘`%|u¸XçýíbW³Z;jICìq&[Quš]ÒyP4ÅïƒWÚ&ýáK²b_©ošóó¨8÷#XeÿÚ\' [ 120.541941][ T30] audit: type=1400 audit(1786080846.568:402): avc: denied { mount } for pid=6563 comm="syz.1.212" name="/" dev="autofs" ino=13325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 121.613126][ T5708] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 121.953213][ T5784] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 121.965282][ T5784] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 122.558636][ T5784] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 122.568710][ T5784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.578874][ T5784] usb 4-1: Product: syz [ 122.590063][ T5784] usb 4-1: Manufacturer: syz [ 122.599862][ T5784] usb 4-1: SerialNumber: syz [ 122.661046][ T5784] usb 4-1: config 0 descriptor?? [ 122.678856][ T6538] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 122.699209][ T6538] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 122.712721][ T5708] usb 5-1: config 255 has an invalid interface number: 97 but max is 0 [ 122.723218][ T5708] usb 5-1: config 255 has no interface number 0 [ 122.733840][ T5708] usb 5-1: config 255 interface 97 has no altsetting 0 [ 122.755838][ T5708] usb 5-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 122.765147][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.777278][ T5708] usb 5-1: Product: syz [ 122.781905][ T5708] usb 5-1: Manufacturer: syz [ 122.786834][ T5708] usb 5-1: SerialNumber: syz [ 123.022458][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 123.140560][ T5784] dm9601 4-1:0.0: probe with driver dm9601 failed with error -71 [ 123.724248][ T5784] usb 4-1: USB disconnect, device number 5 [ 123.775545][ T30] audit: type=1400 audit(1786080849.798:403): avc: denied { create } for pid=6585 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 123.827480][ T30] audit: type=1400 audit(1786080849.798:404): avc: denied { remount } for pid=6585 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 123.969492][ T5708] rndis_host 5-1:255.97: ACM capabilities 01, not really RNDIS? [ 124.484268][ T5708] usb 5-1: USB disconnect, device number 3 [ 124.799535][ T6607] kAFS: No cell specified [ 124.805460][ T5595] block nbd0: Receive control failed (result -32) [ 124.997820][ T6614] ip6erspan0: entered allmulticast mode [ 125.095233][ T6616] afs: Unknown parameter '†±Žs ƒ{E±–' %Û%﫺¶Š#S«·Ü5÷óWc¢ò ;_#aèàp0LÁ8˜w­ÝîÑ­Š1è¢%t‘`%|u¸XçýíbW³Z;jICìq&[Quš]ÒyP4ÅïƒWÚ&ýáK²b_©ošóó¨8÷#XeÿÚ\' [ 126.580221][ T6632] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 126.806081][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.228'. [ 127.235812][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.254548][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.433952][ T189] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 127.710089][ T6631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.743813][ T6631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.769544][ T6631] netlink: 16 bytes leftover after parsing attributes in process `syz.0.230'. [ 127.805611][ T189] usb 1-1: unable to get BOS descriptor or descriptor too short [ 127.828819][ T189] usb 1-1: no configurations [ 127.843888][ T189] usb 1-1: can't read configurations, error -22 [ 127.910744][ T30] audit: type=1400 audit(1786080853.938:405): avc: denied { ioctl } for pid=6654 comm="syz.2.236" path="socket:[13734]" dev="sockfs" ino=13734 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.054119][ T6660] netlink: 24 bytes leftover after parsing attributes in process `syz.4.237'. [ 128.063570][ T6660] openvswitch: netlink: Flow key attr not present in new flow. [ 128.133087][ T6660] netlink: 'syz.4.237': attribute type 7 has an invalid length. [ 128.133617][ T6662] netlink: 472 bytes leftover after parsing attributes in process `syz.1.238'. [ 128.149768][ T6660] netlink: 'syz.4.237': attribute type 5 has an invalid length. [ 128.157644][ T6660] netlink: 17 bytes leftover after parsing attributes in process `syz.4.237'. [ 128.166626][ T30] audit: type=1400 audit(1786080853.938:406): avc: denied { bind } for pid=6654 comm="syz.2.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.878160][ T30] audit: type=1400 audit(1786080853.968:407): avc: denied { setopt } for pid=6654 comm="syz.2.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.898141][ T30] audit: type=1400 audit(1786080853.968:408): avc: denied { write } for pid=6654 comm="syz.2.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.954636][ T30] audit: type=1400 audit(1786080853.978:409): avc: denied { read } for pid=6654 comm="syz.2.236" path="socket:[13734]" dev="sockfs" ino=13734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 129.032225][ T30] audit: type=1400 audit(1786080855.058:410): avc: denied { write } for pid=6667 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 130.182344][ T6682] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 130.352831][ T6682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.245'. [ 130.810963][ T30] audit: type=1400 audit(1786080856.838:411): avc: denied { connect } for pid=6679 comm="syz.3.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 131.271352][ T6685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.244'. [ 131.298387][ T6685] netlink: 75 bytes leftover after parsing attributes in process `syz.3.244'. [ 131.362503][ T6696] kAFS: No cell specified [ 131.367502][ T6696] afs: Unknown parameter '†±Žs ƒ{E±–' %Û%﫺¶Š#S«·Ü5÷óWc¢ò ;_#aèàp0LÁ8˜w­ÝîÑ­Š1è¢%t‘`%|u¸XçýíbW³Z;jICìq&[Quš]ÒyP4ÅïƒWÚ&ýáK²b_©ošóó¨8÷#XeÿÚ\' [ 131.901745][ T6698] ip6gre1: entered promiscuous mode [ 131.907391][ T6698] ip6gre1: entered allmulticast mode [ 133.498781][ T6728] pim6reg: entered allmulticast mode [ 135.054672][ T6741] netlink: 60 bytes leftover after parsing attributes in process `syz.2.262'. [ 135.189280][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.500211][ T6730] syz.0.258 (6730): drop_caches: 2 [ 135.663934][ T30] audit: type=1400 audit(1786080861.698:412): avc: denied { nlmsg_read } for pid=6755 comm="syz.1.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 136.188731][ T6766] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 136.217694][ T6766] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.270'. [ 136.272347][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'. [ 136.874633][ T6774] syzkaller0: entered promiscuous mode [ 136.901099][ T6774] syzkaller0: entered allmulticast mode [ 136.920384][ T30] audit: type=1400 audit(1786080862.928:413): avc: denied { read write } for pid=6777 comm="syz.3.275" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 136.979294][ T30] audit: type=1400 audit(1786080862.928:414): avc: denied { open } for pid=6777 comm="syz.3.275" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 137.311854][ T30] audit: type=1400 audit(1786080862.928:415): avc: denied { read } for pid=6777 comm="syz.3.275" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 137.568775][ T30] audit: type=1400 audit(1786080862.928:416): avc: denied { open } for pid=6777 comm="syz.3.275" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 137.842562][ T30] audit: type=1400 audit(1786080862.928:417): avc: denied { ioctl } for pid=6777 comm="syz.3.275" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x6e83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 137.935419][ T30] audit: type=1400 audit(1786080862.948:418): avc: denied { create } for pid=6782 comm="syz.4.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 137.955033][ T5708] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 137.966910][ T30] audit: type=1400 audit(1786080862.948:419): avc: denied { bind } for pid=6782 comm="syz.4.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 137.986302][ T30] audit: type=1400 audit(1786080862.978:420): avc: denied { setopt } for pid=6782 comm="syz.4.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 138.112463][ T5708] usb 3-1: Using ep0 maxpacket: 32 [ 138.126025][ T5708] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 138.142261][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.145469][ T6802] netlink: 'syz.0.282': attribute type 2 has an invalid length. [ 138.162783][ T5708] usb 3-1: Product: syz [ 138.176517][ T5708] usb 3-1: Manufacturer: syz [ 138.194881][ T5708] usb 3-1: SerialNumber: syz [ 138.196073][ T6802] : entered promiscuous mode [ 138.219998][ T30] audit: type=1400 audit(1786080864.248:421): avc: denied { create } for pid=6801 comm="syz.0.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 138.343205][ T4167] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 138.432950][ T6807] netlink: 16 bytes leftover after parsing attributes in process `syz.0.282'. [ 138.442399][ T6807] netlink: 90 bytes leftover after parsing attributes in process `syz.0.282'. [ 138.482489][ T6807] netlink: 90 bytes leftover after parsing attributes in process `syz.0.282'. [ 138.545887][ T4167] usb 5-1: Using ep0 maxpacket: 8 [ 138.560697][ T4167] usb 5-1: too many configurations: 96, using maximum allowed: 8 [ 138.662609][ T4167] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 138.666954][ T5708] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 138.704766][ T4167] usb 5-1: can't read configurations, error -61 [ 138.742695][ T6810] FAULT_INJECTION: forcing a failure. [ 138.742695][ T6810] name failslab, interval 1, probability 0, space 0, times 1 [ 138.765667][ T6814] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 138.770527][ T6810] CPU: 0 UID: 0 PID: 6810 Comm: syz.1.286 Not tainted syzkaller #0 PREEMPT(full) [ 138.770548][ T6810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 138.770557][ T6810] Call Trace: [ 138.770563][ T6810] [ 138.770568][ T6810] dump_stack_lvl+0x100/0x190 [ 138.770593][ T6810] should_fail_ex.cold+0x5/0xa [ 138.770612][ T6810] should_failslab+0xc2/0x120 [ 138.770632][ T6810] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 138.770649][ T6810] ? __alloc_skb+0x5b7/0x710 [ 138.770664][ T6810] ? __alloc_skb+0x140/0x710 [ 138.770682][ T6810] __alloc_skb+0x140/0x710 [ 138.770695][ T6810] ? __alloc_skb+0x5b7/0x710 [ 138.770709][ T6810] ? __pfx___alloc_skb+0x10/0x10 [ 138.770730][ T6810] netlink_alloc_large_skb+0x69/0x150 [ 138.770753][ T6810] netlink_sendmsg+0x680/0xda0 [ 138.770778][ T6810] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.770801][ T6810] ? selinux_socket_sendmsg+0x198/0x2f0 [ 138.770824][ T6810] ____sys_sendmsg+0xa4d/0xbe0 [ 138.770843][ T6810] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.770866][ T6810] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.770895][ T6810] ___sys_sendmsg+0x190/0x1e0 [ 138.770917][ T6810] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.770936][ T6810] ? __lock_acquire+0x49f/0x1a40 [ 138.770955][ T6810] ? get_pid_task+0x106/0x250 [ 138.771003][ T6810] __sys_sendmsg+0x160/0x210 [ 138.771020][ T6810] ? __pfx___sys_sendmsg+0x10/0x10 [ 138.771047][ T6810] do_syscall_64+0x115/0x870 [ 138.771062][ T6810] ? clear_bhb_loop+0x40/0x90 [ 138.771080][ T6810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.771096][ T6810] RIP: 0033:0x7f6c1ff9e0d9 [ 138.771109][ T6810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.771122][ T6810] RSP: 002b:00007f6c20dcc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.771139][ T6810] RAX: ffffffffffffffda RBX: 00007f6c20225fa0 RCX: 00007f6c1ff9e0d9 [ 138.771148][ T6810] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000004 [ 138.771157][ T6810] RBP: 00007f6c20dcc090 R08: 0000000000000000 R09: 0000000000000000 [ 138.771166][ T6810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.771174][ T6810] R13: 00007f6c20226038 R14: 00007f6c20225fa0 R15: 00007ffec538b558 [ 138.771194][ T6810] [ 138.923742][ T5708] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 138.930115][ T6814] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 138.961997][ T5708] usb 3-1: USB disconnect, device number 5 [ 138.982491][ T4167] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 139.056552][ T5606] udevd[5606]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.179945][ T6822] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 139.212102][ T6822] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.289'. [ 139.314490][ T6822] ip6erspan0: entered allmulticast mode [ 139.327112][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.289'. [ 139.617827][ T4167] usb 5-1: Using ep0 maxpacket: 8 [ 139.996951][ T4167] usb 5-1: too many configurations: 96, using maximum allowed: 8 [ 140.008525][ T4167] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 140.017030][ T4167] usb 5-1: can't read configurations, error -61 [ 140.019320][ T6829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6829 comm=syz.1.290 [ 140.025122][ T4167] usb usb5-port1: attempt power cycle [ 140.308377][ T6838] CIFS: Attempting to mount //::1/share [ 140.367257][ T4167] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 140.393008][ T4167] usb 5-1: Using ep0 maxpacket: 8 [ 140.398734][ T4167] usb 5-1: too many configurations: 96, using maximum allowed: 8 [ 140.409495][ T4167] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 140.418899][ T4167] usb 5-1: can't read configurations, error -61 [ 140.428352][ T6842] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 140.553905][ T4167] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 140.605991][ T4167] usb 5-1: Using ep0 maxpacket: 8 [ 140.614137][ T4167] usb 5-1: too many configurations: 96, using maximum allowed: 8 [ 140.625406][ T4167] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 140.633723][ T4167] usb 5-1: can't read configurations, error -61 [ 140.640449][ T4167] usb usb5-port1: unable to enumerate USB device [ 140.738586][ T6859] nvme_fabrics: missing parameter 'transport=%s' [ 140.745904][ T6859] nvme_fabrics: missing parameter 'nqn=%s' [ 140.761951][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 140.761983][ T30] audit: type=1400 audit(1786080866.788:426): avc: denied { node_bind } for pid=6858 comm="syz.3.299" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 140.862584][ T5708] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 141.032622][ T6865] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 141.044665][ T6865] exFAT-fs (nullb0): invalid boot record signature [ 141.051188][ T6865] exFAT-fs (nullb0): failed to read boot sector [ 141.052481][ T5708] usb 2-1: Using ep0 maxpacket: 16 [ 141.057832][ T6865] exFAT-fs (nullb0): failed to recognize exfat type [ 141.067204][ T5708] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 141.077805][ T5708] usb 2-1: config 1 has no interface number 0 [ 141.096441][ T5708] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 141.114011][ T5708] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 141.132022][ T6838] CIFS: VFS: cifs_mount failed w/return code = -512 [ 141.135270][ T5708] usb 2-1: config 1 interface 105 has no altsetting 0 [ 141.149493][ T5708] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 141.161436][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 141.170498][ T5708] usb 2-1: Product: syz [ 141.177533][ T5708] usb 2-1: Manufacturer: syz [ 141.182227][ T5708] usb 2-1: SerialNumber: syz [ 141.193598][ T6857] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 141.200915][ T6867] Illegal XDP return value 6867 on prog (id 45) dev N/A, expect packet loss! [ 141.212632][ T6857] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 141.290525][ T30] audit: type=1400 audit(1786080867.318:427): avc: denied { setattr } for pid=6870 comm="syz.0.304" name="seq" dev="devtmpfs" ino=1282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 141.361165][ T30] audit: type=1400 audit(1786080867.348:428): avc: denied { ioctl } for pid=6870 comm="syz.0.304" path="socket:[14381]" dev="sockfs" ino=14381 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 141.391463][ T6878] fuse: Unknown parameter '³ØF@ŸE®åÆ [ 141.391463][ T6878] Ðtvkí·`0x0000000000000003' [ 141.571614][ T30] audit: type=1400 audit(1786080867.598:429): avc: denied { create } for pid=6877 comm="syz.2.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 141.572159][ T6883] netlink: 36 bytes leftover after parsing attributes in process `syz.2.306'. [ 141.684275][ T6854] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 141.709269][ T30] audit: type=1400 audit(1786080867.598:430): avc: denied { ioctl } for pid=6877 comm="syz.2.306" path="socket:[15362]" dev="sockfs" ino=15362 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 141.739118][ T6854] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 142.426918][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.309'. [ 142.490442][ T6857] netlink: 16 bytes leftover after parsing attributes in process `syz.1.297'. [ 143.002113][ T5708] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 143.809115][ T5708] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 143.845950][ T5708] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 143.910857][ T5708] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, ee:c9:01:44:da:b0 [ 143.961588][ T5708] usb 2-1: USB disconnect, device number 4 [ 143.986944][ T5708] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 144.011711][ T30] audit: type=1400 audit(1786080870.038:431): avc: denied { ioctl } for pid=6902 comm="syz.4.313" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 144.163414][ T5708] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 144.194581][ T5708] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 144.221478][ T5708] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 144.271988][ T6911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.452822][ T5789] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 144.493995][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.319'. [ 144.503143][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.319'. [ 145.002576][ T5789] usb 1-1: Using ep0 maxpacket: 8 [ 145.400284][ T5789] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 145.408680][ T5789] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.418577][ T5789] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.428387][ T5789] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.439308][ T5789] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.453958][ T5789] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 145.463031][ T5789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.529520][ T6925] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.545965][ T30] audit: type=1400 audit(1786080871.578:432): avc: denied { ioctl } for pid=6922 comm="syz.4.321" path="socket:[14473]" dev="sockfs" ino=14473 ioctlcmd=0x9410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 145.638724][ T30] audit: type=1400 audit(1786080871.668:433): avc: denied { read } for pid=6931 comm="syz.3.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 145.782805][ T6936] CacheFiles: No cache directory specified [ 146.238130][ T6937] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6937 comm=syz.3.324 [ 146.347159][ T30] audit: type=1400 audit(1786080871.808:434): avc: denied { read write } for pid=6909 comm="syz.0.317" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 146.529674][ T30] audit: type=1400 audit(1786080871.808:435): avc: denied { open } for pid=6909 comm="syz.0.317" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 146.752146][ T30] audit: type=1400 audit(1786080871.828:436): avc: denied { ioctl } for pid=6909 comm="syz.0.317" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x500a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 147.040646][ T30] audit: type=1400 audit(1786080872.428:437): avc: denied { setopt } for pid=6939 comm="syz.4.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 147.354600][ T30] audit: type=1400 audit(1786080872.468:438): avc: denied { accept } for pid=6931 comm="syz.3.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 147.406801][ T6948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.327'. [ 147.458846][ T6947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.327'. [ 147.500582][ T5789] usb 1-1: usb_control_msg returned -71 [ 147.521011][ T5789] usbtmc 1-1:16.0: can't read capabilities [ 147.600824][ T5789] usb 1-1: USB disconnect, device number 9 [ 147.762159][ T6956] xt_hashlimit: size too large, truncated to 1048576 [ 147.839001][ T6960] netlink: 'syz.4.330': attribute type 27 has an invalid length. [ 147.883947][ T6960] bond0: (slave bond_slave_1): Releasing backup interface [ 147.902560][ T4167] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 148.082500][ T4167] usb 4-1: Using ep0 maxpacket: 32 [ 148.091506][ T4167] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 148.102649][ T5789] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 148.112947][ T4167] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.123308][ T4167] usb 4-1: Product: syz [ 148.127577][ T4167] usb 4-1: Manufacturer: syz [ 148.132234][ T4167] usb 4-1: SerialNumber: syz [ 148.150722][ T4167] usb 4-1: config 0 descriptor?? [ 148.161928][ T4167] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 148.170257][ T4167] dvb-usb: bulk message failed: -22 (4/0) [ 148.177613][ T4167] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 148.196450][ T4167] dvb-usb: bulk message failed: -22 (5/0) [ 148.202825][ T4167] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 148.228354][ T4167] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 148.238574][ T4167] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 148.246932][ T4167] usb 4-1: media controller created [ 148.273823][ T5789] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 148.286765][ T4167] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.295350][ T5789] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.316311][ T5789] usb 1-1: config 0 has no interface number 0 [ 148.322877][ T5789] usb 1-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 148.344662][ T5789] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 148.360789][ T5789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.375660][ T4167] usb 4-1: selecting invalid altsetting 3 [ 148.392739][ T5789] usb 1-1: Product: syz [ 148.396990][ T4167] ttusb2: set interface to alts=3 failed [ 148.410200][ T5789] usb 1-1: Manufacturer: syz [ 148.430062][ T5789] usb 1-1: SerialNumber: syz [ 148.753940][ T5789] usb 1-1: config 0 descriptor?? [ 148.768208][ T5789] yurex 1-1:0.50: Could not find endpoints [ 148.776807][ T6950] ttusb2: i2c wr len=193 too high [ 148.858187][ T4167] DVB: Unable to find symbol tda10086_attach() [ 148.870662][ T4167] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 148.899569][ T4167] dvb-usb: bulk message failed: -22 (4/0) [ 148.905458][ T4167] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 148.929031][ T4167] dvb-usb: bulk message failed: -22 (5/0) [ 148.939650][ T4167] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 148.954336][ T4167] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 148.979979][ T30] audit: type=1400 audit(1786080875.008:439): avc: denied { open } for pid=6957 comm="syz.0.331" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 148.980725][ T5789] usb 1-1: USB disconnect, device number 10 [ 149.021988][ T4167] usb 4-1: USB disconnect, device number 6 [ 149.071834][ T30] audit: type=1400 audit(1786080875.008:440): avc: denied { ioctl } for pid=6957 comm="syz.0.331" path="/dev/ptyq4" dev="devtmpfs" ino=123 ioctlcmd=0x542a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 149.176330][ T6979] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 149.253347][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.337'. [ 149.323843][ T4167] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 149.941753][ T30] audit: type=1400 audit(1786080875.008:441): avc: denied { read } for pid=6957 comm="syz.0.331" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 149.965956][ T30] audit: type=1400 audit(1786080875.008:442): avc: denied { open } for pid=6957 comm="syz.0.331" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 149.990865][ T30] audit: type=1400 audit(1786080875.008:443): avc: denied { ioctl } for pid=6957 comm="syz.0.331" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x4d16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 151.031542][ T6992] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 151.038134][ T6992] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 151.046554][ T6992] vhci_hcd vhci_hcd.0: Device attached [ 151.056859][ T6992] netlink: 40 bytes leftover after parsing attributes in process `syz.1.341'. [ 151.067326][ T6992] netlink: 'syz.1.341': attribute type 12 has an invalid length. [ 151.086486][ T6996] vhci_hcd: connection closed [ 151.090668][ T6556] vhci_hcd vhci_hcd.1: stop threads [ 151.144663][ T6556] vhci_hcd vhci_hcd.1: release socket [ 151.177860][ T6556] vhci_hcd vhci_hcd.1: disconnect device [ 151.267027][ T7014] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 151.395691][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.344'. [ 152.432335][ T7032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.352'. [ 152.579451][ T7042] dummy0: entered promiscuous mode [ 152.587027][ T5708] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 152.622622][ T5685] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 152.960858][ T5708] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 152.969784][ T5685] usb 5-1: Using ep0 maxpacket: 32 [ 152.985635][ T5685] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 152.997451][ T5708] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.012449][ T5685] usb 5-1: config 0 has no interface number 0 [ 153.028345][ T5685] usb 5-1: config 0 interface 184 has no altsetting 0 [ 153.029996][ T7035] syzkaller0: entered promiscuous mode [ 153.036749][ T5708] usb 2-1: config 0 has no interface number 0 [ 153.063836][ T7035] syzkaller0: entered allmulticast mode [ 153.075294][ T5708] usb 2-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 153.089526][ T5685] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 153.107072][ T5685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.122850][ T5685] usb 5-1: Product: syz [ 153.128719][ T5708] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 153.139522][ T5685] usb 5-1: Manufacturer: syz [ 153.144389][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.155078][ T5685] usb 5-1: SerialNumber: syz [ 153.165408][ T5708] usb 2-1: Product: syz [ 153.170779][ T5708] usb 2-1: Manufacturer: syz [ 153.176121][ T5685] usb 5-1: config 0 descriptor?? [ 153.202839][ T5708] usb 2-1: SerialNumber: syz [ 153.210198][ T5708] usb 2-1: config 0 descriptor?? [ 153.227023][ T5708] yurex 2-1:0.50: Could not find endpoints [ 153.311009][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 153.311024][ T30] audit: type=1400 audit(1786080879.338:445): avc: denied { write } for pid=7054 comm="syz.0.359" path="socket:[14751]" dev="sockfs" ino=14751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 153.343928][ T7057] netlink: 5 bytes leftover after parsing attributes in process `syz.3.358'. [ 153.356852][ T7057] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 153.363487][ T30] audit: type=1400 audit(1786080879.338:446): avc: denied { setopt } for pid=7054 comm="syz.0.359" lport=48966 faddr=::ffff:100.1.1.2 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 153.391328][ T7057] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 154.032568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 154.399189][ T30] audit: type=1400 audit(1786080879.588:447): avc: denied { read } for pid=7023 comm="syz.1.348" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 154.444426][ T30] audit: type=1400 audit(1786080879.588:448): avc: denied { open } for pid=7023 comm="syz.1.348" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 154.561610][ T30] audit: type=1400 audit(1786080879.588:449): avc: denied { ioctl } for pid=7023 comm="syz.1.348" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x4d16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 154.565053][ T24] usb 2-1: USB disconnect, device number 5 [ 154.806680][ T5595] Bluetooth: hci4: unexpected event for opcode 0x2024 [ 154.843574][ T30] audit: type=1400 audit(1786080880.828:450): avc: denied { mount } for pid=7064 comm="syz.2.361" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 155.027582][ T30] audit: type=1807 audit(1786080880.858:451): action=measure func=FILE_CHECK obj_type=unconfined_t res=1 [ 155.177033][ T30] audit: type=1400 audit(1786080880.898:452): avc: denied { getopt } for pid=7027 comm="syz.4.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 155.572760][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 155.804532][ T5685] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 155.878846][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 155.933353][ T5685] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 156.003594][ T10] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 156.134632][ T5685] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 156.158751][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.259007][ T5685] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 156.271451][ T10] usb 4-1: config 0 has no interface number 0 [ 156.399304][ T5685] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 156.412842][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 156.511519][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.531860][ T5685] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 156.619057][ T10] usb 4-1: Product: syz [ 156.671298][ T10] usb 4-1: Manufacturer: syz [ 156.688367][ T5685] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 156.751988][ T10] usb 4-1: SerialNumber: syz [ 156.832024][ T7064] ima: policy update completed [ 156.847710][ T7076] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 156.848817][ T10] usb 4-1: config 0 descriptor?? [ 156.876732][ T5685] usb 5-1: USB disconnect, device number 8 [ 156.900616][ T7076] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 156.955434][ T30] audit: type=1802 audit(1786080882.918:453): pid=7064 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=completed comm="syz.2.361" res=1 errno=0 [ 156.978116][ T30] audit: type=1400 audit(1786080882.928:454): avc: denied { mounton } for pid=7075 comm="syz.0.366" path="/syzcgroup/cpu/syz0/test/memory.limit_in_bytes" dev="cgroup" ino=424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 157.022371][ T7076] socket: no more sockets [ 157.031524][ T7076] socket: no more sockets [ 157.071158][ T10] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 157.078851][ T10] uvcvideo 4-1:0.105: No valid video chain found. [ 157.387913][ T10] usb 4-1: USB disconnect, device number 7 [ 158.292485][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 158.375883][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 158.376148][ T30] audit: type=1400 audit(1786080884.408:457): avc: denied { setopt } for pid=7104 comm="syz.4.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 158.379516][ T7112] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.414902][ T7112] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 158.426946][ T7112] overlayfs: missing 'lowerdir' [ 158.467149][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 158.476356][ T10] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 158.528936][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.864072][ T10] usb 4-1: config 0 has no interface number 0 [ 158.900791][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 158.939504][ T10] usb 4-1: string descriptor 0 read error: -71 [ 158.957262][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 159.252283][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.305993][ T10] usb 4-1: config 0 descriptor?? [ 159.341496][ T10] usb 4-1: can't set config #0, error -71 [ 159.660902][ T10] usb 4-1: USB disconnect, device number 8 [ 162.233157][ T7160] syz_tun: entered allmulticast mode [ 162.288787][ T30] audit: type=1400 audit(1786080888.318:458): avc: denied { bind } for pid=7165 comm="syz.3.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 162.544123][ T7159] syz_tun: left allmulticast mode [ 162.620797][ T7173] CUSE: info not properly terminated [ 163.593056][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 163.857356][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 164.052698][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 164.063978][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 164.105388][ T10] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 164.161452][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.203729][ T10] usb 2-1: config 0 descriptor?? [ 164.231418][ T7180] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 164.530403][ T10] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 164.612854][ T10] usb 2-1: USB disconnect, device number 6 [ 164.807050][ T7194] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5605] was attempted by ""[7194] [ 164.858061][ T30] audit: type=1400 audit(1786080890.888:459): avc: denied { read write } for pid=7165 comm="syz.3.389" name="sg0" dev="devtmpfs" ino=775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 164.937004][ T30] audit: type=1400 audit(1786080890.968:460): avc: denied { open } for pid=7165 comm="syz.3.389" path="/dev/sg0" dev="devtmpfs" ino=775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 165.013219][ T30] audit: type=1400 audit(1786080890.998:461): avc: denied { ioctl } for pid=7165 comm="syz.3.389" path="socket:[15930]" dev="sockfs" ino=15930 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 166.217105][ T30] audit: type=1400 audit(1786080891.998:462): avc: denied { bind } for pid=7212 comm="syz.2.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 166.379525][ T30] audit: type=1400 audit(1786080892.248:463): avc: denied { accept } for pid=7218 comm="syz.0.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 166.537806][ T7224] comedi comedi3: comedi_config --init_data is deprecated [ 167.047911][ T7233] use of bytesused == 0 is deprecated and will be removed in the future, [ 167.056779][ T7233] use the actual size instead. [ 167.071745][ T7228] netlink: 48 bytes leftover after parsing attributes in process `syz.4.406'. [ 167.100993][ T7228] faux_driver vgem: [drm] Unknown color mode 5; guessing buffer size. [ 167.165626][ T30] audit: type=1400 audit(1786080893.118:464): avc: denied { append } for pid=7223 comm="syz.4.406" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 167.275880][ T30] audit: type=1400 audit(1786080893.128:465): avc: denied { ioctl } for pid=7223 comm="syz.4.406" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 167.362644][ T30] audit: type=1400 audit(1786080893.148:466): avc: denied { map } for pid=7223 comm="syz.4.406" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 167.467668][ T30] audit: type=1400 audit(1786080893.148:467): avc: denied { write execute } for pid=7223 comm="syz.4.406" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 168.432782][ T7246] gadgetfs: bound to dummy_udc driver [ 168.958656][ T7250] jffs2: notice: (7250) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 169.270539][ T7262] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 169.316650][ T7262] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 170.449600][ T7278] CIFS: Attempting to mount //::1/share [ 170.878861][ T30] audit: type=1400 audit(1786080896.908:468): avc: denied { mount } for pid=7281 comm="syz.2.421" name="/" dev="ramfs" ino=16127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 170.962320][ T30] audit: type=1400 audit(1786080896.978:469): avc: denied { read } for pid=7286 comm="syz.1.423" name="event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 171.075928][ T30] audit: type=1400 audit(1786080896.978:470): avc: denied { open } for pid=7286 comm="syz.1.423" path="/dev/input/event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 171.197412][ T30] audit: type=1400 audit(1786080896.978:471): avc: denied { ioctl } for pid=7286 comm="syz.1.423" path="/dev/input/event2" dev="devtmpfs" ino=921 ioctlcmd=0x4584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 171.236700][ T7278] CIFS: VFS: Error connecting to socket. Aborting operation. [ 171.273819][ T7278] CIFS: VFS: cifs_mount failed w/return code = -4 [ 171.287350][ T30] audit: type=1400 audit(1786080896.978:472): avc: denied { read write } for pid=7286 comm="syz.1.423" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 171.401885][ T30] audit: type=1400 audit(1786080896.978:473): avc: denied { open } for pid=7286 comm="syz.1.423" path="/74/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 172.031983][ T30] audit: type=1400 audit(1786080896.988:474): avc: denied { ioctl } for pid=7286 comm="syz.1.423" path="/74/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 172.188943][ T7304] netlink: 24 bytes leftover after parsing attributes in process `syz.3.427'. [ 173.214594][ T30] audit: type=1400 audit(1786080899.238:475): avc: denied { connect } for pid=7322 comm="syz.4.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 173.553749][ T30] audit: type=1400 audit(1786080899.248:476): avc: denied { write } for pid=7322 comm="syz.4.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 174.081885][ T7332] overlayfs: failed to resolve './bus': -2 [ 174.174637][ T30] audit: type=1400 audit(1786080900.208:477): avc: denied { mount } for pid=7328 comm="syz.3.433" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 174.283142][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 174.566026][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 174.694788][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.901335][ T10] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 175.335601][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.348584][ T10] usb 1-1: config 0 descriptor?? [ 175.854504][ T10] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 175.979104][ T7351] netlink: 24 bytes leftover after parsing attributes in process `syz.1.440'. [ 176.591671][ T24] usb 1-1: USB disconnect, device number 12 [ 177.442236][ T7366] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.444'. [ 177.466871][ T7366] openvswitch: netlink: Message has 4 unknown bytes. [ 177.478289][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 177.478304][ T30] audit: type=1400 audit(1786080903.508:481): avc: denied { read } for pid=7371 comm="syz.0.447" path="socket:[16492]" dev="sockfs" ino=16492 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 177.589863][ T7378] No source specified [ 177.684921][ T7380] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.707663][ T30] audit: type=1400 audit(1786080903.738:482): avc: denied { ioctl } for pid=7383 comm="syz.1.449" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 177.710287][ T7380] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.778398][ T7386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.451'. [ 177.880492][ T7389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.451'. [ 177.932617][ T5685] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 178.215200][ T7386] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.240074][ T7397] bond1 (unregistering): Released all slaves [ 178.303894][ T5685] usb 5-1: Using ep0 maxpacket: 8 [ 178.358293][ T5685] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 178.406801][ T5685] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 178.462137][ T5685] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 178.552551][ T5685] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 178.590323][ T7407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.602721][ T5685] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 178.626623][ T5685] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 178.635292][ T5685] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 178.656691][ T5685] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 178.678341][ T5685] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 178.705169][ T7411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.458'. [ 178.714944][ T5685] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 178.728979][ T5685] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 178.737901][ T5685] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 178.749756][ T5685] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 178.774743][ T30] audit: type=1400 audit(1786080904.808:483): avc: denied { write } for pid=7412 comm="syz.0.459" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 178.816294][ T5685] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 178.837783][ T5685] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 178.859392][ T5685] usb 5-1: string descriptor 0 read error: -22 [ 178.866707][ T5685] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 178.876255][ T5685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.905575][ T5685] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 179.084227][ T189] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 179.230674][ T189] usb 1-1: device descriptor read/64, error -71 [ 179.303629][ T5685] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 179.434810][ T10] usb 5-1: USB disconnect, device number 9 [ 179.523194][ T189] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 179.535845][ T5685] usb 4-1: Using ep0 maxpacket: 32 [ 179.627531][ T5685] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 179.742567][ T189] usb 1-1: device descriptor read/64, error -71 [ 179.758164][ T5685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.873124][ T5685] usb 4-1: Product: syz [ 179.919725][ T5685] usb 4-1: Manufacturer: syz [ 179.981493][ T189] usb usb1-port1: attempt power cycle [ 180.005487][ T5685] usb 4-1: SerialNumber: syz [ 180.130971][ T5685] usb 4-1: config 0 descriptor?? [ 180.146304][ T30] audit: type=1326 audit(1786080906.178:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.2.464" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18dd9e0d9 code=0x7ffc0000 [ 180.157489][ T5685] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 180.202902][ T30] audit: type=1326 audit(1786080906.208:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.2.464" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18dd9e0d9 code=0x7ffc0000 [ 180.211626][ T5685] dvb-usb: bulk message failed: -22 (4/0) [ 180.242476][ T30] audit: type=1326 audit(1786080906.208:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.2.464" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7ff18dd9e0d9 code=0x7ffc0000 [ 180.354362][ T5685] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 180.383709][ T5685] dvb-usb: bulk message failed: -22 (5/0) [ 180.390701][ T5685] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 180.488461][ T5685] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 180.501056][ T5685] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 180.506483][ T30] audit: type=1326 audit(1786080906.228:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.2.464" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18dd9e0d9 code=0x7ffc0000 [ 180.542801][ T189] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 180.547448][ T30] audit: type=1326 audit(1786080906.228:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.2.464" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18dd9e0d9 code=0x7ffc0000 [ 180.577465][ T5685] usb 4-1: media controller created [ 180.592993][ T189] usb 1-1: device descriptor read/8, error -71 [ 180.628874][ T5685] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 180.649249][ T30] audit: type=1326 audit(1786080906.228:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.2.464" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff18dd9e0d9 code=0x7ffc0000 [ 180.742477][ T5784] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 180.848912][ T30] audit: type=1326 audit(1786080906.228:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.2.464" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18dd9e0d9 code=0x7ffc0000 [ 180.903550][ T5685] usb 4-1: selecting invalid altsetting 3 [ 180.923625][ T5685] ttusb2: set interface to alts=3 failed [ 180.982895][ T189] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 181.145632][ T189] usb 1-1: device descriptor read/8, error -71 [ 181.173168][ T5685] DVB: Unable to find symbol tda10086_attach() [ 181.208797][ T5685] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 181.231341][ T5685] dvb-usb: bulk message failed: -22 (4/0) [ 181.248741][ T5685] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 181.302563][ T5784] usb 3-1: Using ep0 maxpacket: 16 [ 181.302829][ T5685] dvb-usb: bulk message failed: -22 (5/0) [ 181.607605][ T189] usb usb1-port1: unable to enumerate USB device [ 181.623095][ T5685] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 181.711346][ T5685] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 181.806065][ T5784] usb 3-1: unable to get BOS descriptor or descriptor too short [ 181.827850][ T5685] usb 4-1: USB disconnect, device number 9 [ 182.213188][ T5784] usb 3-1: config 5 has an invalid interface number: 225 but max is 0 [ 182.239120][ T5784] usb 3-1: config 5 has no interface number 0 [ 182.253088][ T5784] usb 3-1: config 5 interface 225 altsetting 4 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 182.266382][ T5784] usb 3-1: config 5 interface 225 has no altsetting 0 [ 182.276856][ T5685] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 182.462949][ T189] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 182.623930][ T5784] usb 3-1: New USB device found, idVendor=12d1, idProduct=ddb1, bcdDevice= 1.2c [ 182.633140][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 182.633155][ T30] audit: type=1326 audit(1786080908.338:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.2.464" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff18dd9dd6b code=0x7ffc0000 [ 182.671601][ T5784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.888817][ T30] audit: type=1326 audit(1786080908.658:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.2.464" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff18dd9dd6b code=0x7ffc0000 [ 182.916124][ T5784] usb 3-1: Product: syz [ 182.922692][ T5784] usb 3-1: Manufacturer: 쿿걈鷴쫱騖囲æ´ã¸à¤œíŠ¡É˜ï„“⚉⬮僴헯⽿㠓㑇묫å«ãƒ¿å´´æŒ©Ú†çº¬ê²¯ê£†ïœ¥â¹æ¹ê—€î¦„駩ä½å°–䇀਺淂瑩렬躻絭ꚲ㱗乶ᇫ뇔槪漎䷢䮧뢨ஶç›ã›¼å©¦â’¡çµïœ´å™á»¹ä·‚㒙賂⽥å·è¢â±¥å¡ƒä¥®ã«†ã‚§æ¯ºè»¾å£¬î‚¸æ²é“´á’—æ¨ã®ˆä©®ã€¯ï¢‰ï¯–è±³î¢é¾³ë¦µã´”퟈ì„á»ì¦°ë«¯ê¸‰ïƒçº•â‘›Ã¨â¯ƒï¤—栨㚜㼃멉èŠíˆ¾ë›“籨䡌〧 [ 182.964592][ T5784] usb 3-1: SerialNumber: syz [ 182.973621][ T189] usb 1-1: config 105 has an invalid interface number: 207 but max is 0 [ 183.008525][ T189] usb 1-1: config 105 has no interface number 0 [ 183.044987][ T189] usb 1-1: config 105 interface 207 has no altsetting 0 [ 183.199121][ T189] usb 1-1: New USB device found, idVendor=0df7, idProduct=0620, bcdDevice=34.7b [ 183.215944][ T7469] Failed to initialize the IGMP autojoin socket (err -2) [ 183.317004][ T189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.523842][ T189] usb 1-1: Product: syz [ 183.555485][ T189] usb 1-1: Manufacturer: syz [ 183.571864][ T189] usb 1-1: SerialNumber: syz [ 183.781817][ T5784] usb 3-1: can't set config #5, error -71 [ 183.856865][ T5685] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 183.880451][ T7486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.471'. [ 183.887488][ T5784] usb 3-1: USB disconnect, device number 6 [ 184.044180][ T5685] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 184.076090][ T5685] usb 5-1: config 0 has no interface number 0 [ 184.085559][ T5685] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 184.128791][ T5685] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 184.155409][ T5685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.178913][ T5685] usb 5-1: Product: syz [ 184.191144][ T5685] usb 5-1: Manufacturer: syz [ 184.199478][ T5685] usb 5-1: SerialNumber: syz [ 184.212833][ T5685] usb 5-1: config 0 descriptor?? [ 184.225890][ T5685] yurex 5-1:0.50: Could not find endpoints [ 184.229226][ T7489] syzkaller0: entered promiscuous mode [ 184.262496][ T5784] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 184.271499][ T7489] syzkaller0: entered allmulticast mode [ 184.434076][ T5784] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 184.447722][ T5784] usb 3-1: config 0 has no interface number 0 [ 184.473116][ T5784] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 184.488137][ T5784] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 184.511107][ T5784] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 184.530647][ T5784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.546218][ T24] usb 5-1: USB disconnect, device number 10 [ 184.569584][ T5784] usb 3-1: Product: syz [ 184.579034][ T5784] usb 3-1: Manufacturer: syz [ 184.588321][ T5784] usb 3-1: SerialNumber: syz [ 184.603790][ T5784] usb 3-1: config 0 descriptor?? [ 184.615648][ T5784] yurex 3-1:0.50: Could not submitting URB [ 184.625971][ T5784] yurex 3-1:0.50: probe with driver yurex failed with error -5 [ 185.248418][ T189] pl2303 1-1:105.207: required endpoints missing [ 185.258815][ T189] usb 1-1: USB disconnect, device number 17 [ 185.319516][ T30] audit: type=1400 audit(1786080911.348:553): avc: denied { read } for pid=7497 comm="syz.1.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 185.421814][ T5784] usb 3-1: USB disconnect, device number 7 [ 185.512501][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 185.655256][ T24] usb 4-1: device descriptor read/64, error -71 [ 185.912495][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 186.062789][ T24] usb 4-1: device descriptor read/64, error -71 [ 186.183498][ T24] usb usb4-port1: attempt power cycle [ 186.392532][ T5685] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 186.468752][ T30] audit: type=1400 audit(1786080912.498:554): avc: denied { bind } for pid=7524 comm="syz.4.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 186.506263][ T5789] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 186.572878][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 186.580776][ T7529] ip6gretap0: entered allmulticast mode [ 186.586823][ T5685] usb 1-1: Using ep0 maxpacket: 32 [ 186.594707][ T24] usb 4-1: device descriptor read/8, error -71 [ 186.595997][ T5685] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 186.622077][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.493'. [ 186.633463][ T5685] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 186.654148][ T5685] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 186.668231][ T5789] usb 3-1: Using ep0 maxpacket: 32 [ 186.669896][ T5685] usb 1-1: Product: syz [ 186.677255][ T5789] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 186.696262][ T5685] usb 1-1: Manufacturer: syz [ 186.701547][ T5685] usb 1-1: SerialNumber: syz [ 186.711907][ T5789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.724468][ T5789] usb 3-1: Product: syz [ 186.724673][ T5685] usb 1-1: config 0 descriptor?? [ 186.728696][ T5789] usb 3-1: Manufacturer: syz [ 186.742380][ T5789] usb 3-1: SerialNumber: syz [ 186.754909][ T7520] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 186.771761][ T5789] usb 3-1: config 0 descriptor?? [ 186.774895][ T5685] hub 1-1:0.0: bad descriptor, ignoring hub [ 186.790927][ T5789] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 186.792311][ T7529] ip6gretap0 (unregistering): left allmulticast mode [ 186.804166][ T5789] dvb-usb: bulk message failed: -22 (4/0) [ 186.806392][ T5685] hub 1-1:0.0: probe with driver hub failed with error -5 [ 186.817205][ T5789] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 186.830640][ T5789] dvb-usb: bulk message failed: -22 (5/0) [ 186.839090][ T5789] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 186.853919][ T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 186.869120][ T5789] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 186.880137][ T5789] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 186.897006][ T24] usb 4-1: device descriptor read/8, error -71 [ 186.907811][ T5789] usb 3-1: media controller created [ 186.926750][ T5789] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.946738][ T5789] usb 3-1: selecting invalid altsetting 3 [ 186.952592][ T5789] ttusb2: set interface to alts=3 failed [ 186.991772][ T7519] ttusb2: i2c wr len=193 too high [ 187.013161][ T24] usb usb4-port1: unable to enumerate USB device [ 187.031790][ T5789] DVB: Unable to find symbol tda10086_attach() [ 187.053151][ T5789] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 187.071663][ T5789] dvb-usb: bulk message failed: -22 (4/0) [ 187.085497][ T5789] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 187.112964][ T5789] dvb-usb: bulk message failed: -22 (5/0) [ 187.131374][ T5789] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 187.148222][ T5789] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 187.174126][ T5789] usb 3-1: USB disconnect, device number 8 [ 187.230378][ T5789] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 187.561910][ T7541] netlink: 84 bytes leftover after parsing attributes in process `syz.1.499'. [ 187.917167][ T7554] netlink: 224 bytes leftover after parsing attributes in process `syz.2.505'. [ 187.962507][ T189] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 187.987365][ T5595] Bluetooth: hci4: link tx timeout [ 187.996477][ T5595] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.007736][ T4911] Bluetooth: hci4: link tx timeout [ 188.013291][ T4911] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.048985][ T7559] netlink: 'syz.2.506': attribute type 39 has an invalid length. [ 188.119633][ T7560] macsec1: entered promiscuous mode [ 188.134419][ T189] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 188.147798][ T189] usb 2-1: config 0 has no interface number 0 [ 188.162997][ T189] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 188.177111][ T189] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 188.189255][ T189] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 188.199039][ T189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.207460][ T189] usb 2-1: Product: syz [ 188.211719][ T189] usb 2-1: Manufacturer: syz [ 188.216636][ T189] usb 2-1: SerialNumber: syz [ 188.224173][ T189] usb 2-1: config 0 descriptor?? [ 188.232022][ T189] yurex 2-1:0.50: Could not submitting URB [ 188.239278][ T189] yurex 2-1:0.50: probe with driver yurex failed with error -5 [ 188.263885][ T30] audit: type=1400 audit(1786080914.288:555): avc: denied { shutdown } for pid=7557 comm="syz.2.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 188.450004][ T30] audit: type=1400 audit(1786080914.478:556): avc: denied { view } for pid=7566 comm="syz.3.509" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 188.626406][ T30] audit: type=1326 audit(1786080914.658:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7566 comm="syz.3.509" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b799e0d9 code=0x7fc00000 [ 188.670011][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.676498][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.589324][ T30] audit: type=1400 audit(1786080915.618:558): avc: denied { bind } for pid=7580 comm="syz.2.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 190.093789][ T7576] Bluetooth: hci4: command 0x0405 tx timeout [ 190.638011][ T4167] usb 1-1: USB disconnect, device number 18 [ 190.812779][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 190.812790][ T7576] Bluetooth: hci1: command 0x0406 tx timeout [ 190.812820][ T7576] Bluetooth: hci2: command 0x0406 tx timeout [ 190.818887][ T5595] Bluetooth: hci3: command 0x0406 tx timeout [ 191.169223][ T5784] usb 2-1: USB disconnect, device number 7 [ 191.446379][ T30] audit: type=1326 audit(1786080917.468:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7566 comm="syz.3.509" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f21b793f459 code=0x7fc00000 [ 191.578220][ T7592] netlink: 'syz.2.516': attribute type 10 has an invalid length. [ 191.659547][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.516'. [ 191.848842][ T7592] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 191.972311][ T7593] bridge_slave_1: left promiscuous mode [ 192.102531][ T30] audit: type=1400 audit(1786080918.008:560): avc: denied { write } for pid=7596 comm="syz.0.517" name="fib_triestat" dev="proc" ino=4026533261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 192.126502][ T7593] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.574262][ T7593] bridge_slave_0: left allmulticast mode [ 192.592681][ T7593] bridge_slave_0: left promiscuous mode [ 192.600780][ T7593] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.630219][ T7593] bond0: (slave bridge0): Releasing backup interface [ 192.671908][ T5685] libceph: mon0 (1)[c::]:6789 connect error [ 192.698202][ T5685] libceph: mon0 (1)[c::]:6789 connect error [ 193.154373][ T5685] libceph: mon0 (1)[c::]:6789 connect error [ 193.215102][ T7620] cgroup: Bad value for 'name' [ 193.592621][ T7603] ceph: No mds server is up or the cluster is laggy [ 193.705742][ T5685] libceph: mon0 (1)[c::]:6789 connect error [ 193.837387][ T30] audit: type=1400 audit(1786080919.858:561): avc: denied { ioctl } for pid=7628 comm="syz.2.527" path="socket:[17020]" dev="sockfs" ino=17020 ioctlcmd=0x8b34 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 193.882903][ T7635] netlink: 'syz.2.527': attribute type 64 has an invalid length. [ 193.891409][ T7635] netlink: 5 bytes leftover after parsing attributes in process `syz.2.527'. [ 193.992431][ T30] audit: type=1400 audit(1786080920.018:562): avc: denied { mount } for pid=7640 comm="syz.0.530" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 194.095000][ T7633] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.104531][ T7633] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.134438][ T30] audit: type=1400 audit(1786080920.168:563): avc: denied { unmount } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 194.203148][ T5685] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 194.295519][ T7633] bridge_slave_0: left allmulticast mode [ 194.325271][ T7633] bridge_slave_0: left promiscuous mode [ 194.338969][ T7633] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.354151][ T5685] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 194.374515][ T5685] usb 4-1: config 0 has no interface number 0 [ 194.388557][ T5685] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 194.403968][ T5685] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 194.415699][ T5685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.424243][ T5685] usb 4-1: Product: syz [ 194.438204][ T5685] usb 4-1: Manufacturer: syz [ 194.443173][ T5685] usb 4-1: SerialNumber: syz [ 194.475291][ T7633] bridge_slave_1: left allmulticast mode [ 194.489192][ T7633] bridge_slave_1: left promiscuous mode [ 194.500877][ T7633] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.530879][ T5685] usb 4-1: config 0 descriptor?? [ 195.243531][ T5685] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 195.277260][ T7633] bond0: (slave bond_slave_0): Releasing backup interface [ 195.322769][ T189] usb 4-1: USB disconnect, device number 14 [ 195.341248][ T7633] bond0: (slave bond_slave_1): Releasing backup interface [ 195.349520][ T189] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 195.395604][ T7633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.407996][ T7633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.418927][ T7633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.440280][ T7633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.490861][ T7633] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 195.535071][ T7630] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 195.561048][ T7626] Failed to initialize the IGMP autojoin socket (err -2) [ 195.649180][ T7653] netlink: 44 bytes leftover after parsing attributes in process `syz.1.534'. [ 195.671641][ T7653] netlink: 32 bytes leftover after parsing attributes in process `syz.1.534'. [ 196.045196][ T7657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.072521][ T7657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.154825][ T7657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.222617][ T7657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.751778][ T30] audit: type=1400 audit(1786080922.778:564): avc: denied { bind } for pid=7668 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 197.002337][ T7675] netlink: 104 bytes leftover after parsing attributes in process `syz.3.541'. [ 197.023242][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 197.154141][ T30] audit: type=1400 audit(1786080923.148:565): avc: denied { read } for pid=7674 comm="syz.3.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 197.307379][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 197.349813][ T30] audit: type=1400 audit(1786080923.308:566): avc: denied { connect } for pid=7674 comm="syz.3.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 197.400611][ T24] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 197.471904][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.542207][ T24] usb 2-1: Product: syz [ 197.585956][ T24] usb 2-1: Manufacturer: syz [ 197.638960][ T24] usb 2-1: SerialNumber: syz [ 197.737486][ T24] usb 2-1: config 0 descriptor?? [ 197.772259][ T24] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 197.810325][ T24] pctv452e: pctv452e_power_ctrl: 1 [ 197.810325][ T24] [ 197.838629][ T24] usb 2-1: selecting invalid altsetting 3 [ 197.854837][ T24] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 197.854837][ T24] [ 197.884590][ T7686] syzkaller0: entered promiscuous mode [ 197.896950][ T7686] syzkaller0: entered allmulticast mode [ 197.906183][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 198.776755][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 198.797998][ T24] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 198.817042][ T24] usb 2-1: media controller created [ 198.826133][ T24] dvb-usb: bulk message failed: -22 (8/0) [ 198.832029][ T24] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 198.841253][ T24] dvb-usb: MAC address reading failed. [ 198.867461][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 198.939948][ T24] DVB: Unable to find symbol stb0899_attach() [ 198.947276][ T24] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 198.993099][ T7695] ip6erspan0: entered allmulticast mode [ 199.043809][ T189] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 199.052609][ T24] rc_core: IR keymap rc-tt-1500 not found [ 199.068721][ T24] Registered IR keymap rc-empty [ 199.090202][ T24] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 199.144961][ T24] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input6 [ 199.214216][ T189] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 199.226876][ T7677] syz.4.542 (7677): drop_caches: 2 [ 199.240157][ T189] usb 1-1: config 0 has no interface number 0 [ 199.270604][ T189] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 199.285091][ T189] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 199.295170][ T189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.304382][ T189] usb 1-1: Product: syz [ 199.314171][ T24] dvb-usb: schedule remote query interval to 100 msecs. [ 199.328081][ T189] usb 1-1: Manufacturer: syz [ 199.337919][ T24] pctv452e: pctv452e_power_ctrl: 0 [ 199.337919][ T24] [ 199.345386][ T24] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 199.390338][ T189] usb 1-1: SerialNumber: syz [ 199.406496][ T189] usb 1-1: config 0 descriptor?? [ 199.418702][ T24] usb 2-1: USB disconnect, device number 8 [ 199.461515][ T189] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 199.475036][ T5328] dvb-usb: bulk message failed: -22 (4/0) [ 199.480972][ T5328] dvb-usb: error -22 while querying for an remote control event. [ 199.565028][ T7706] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 199.577457][ T7713] kAFS: No cell specified [ 199.606858][ T30] audit: type=1400 audit(1786080925.638:567): avc: denied { append } for pid=7712 comm="syz.4.552" name="sg0" dev="devtmpfs" ino=775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 199.649565][ T7713] Failed to initialize the IGMP autojoin socket (err -2) [ 199.663671][ T30] audit: type=1400 audit(1786080925.658:568): avc: denied { ioctl } for pid=7712 comm="syz.4.552" path="/dev/sg0" dev="devtmpfs" ino=775 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 199.699508][ T24] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 199.751063][ T189] usb 1-1: USB disconnect, device number 19 [ 199.828608][ T189] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 200.322021][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.550'. [ 200.712696][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 200.982506][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 201.028243][ T24] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 201.081309][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.109680][ T30] audit: type=1400 audit(1786080927.128:569): avc: denied { create } for pid=7733 comm="syz.3.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 201.226181][ T24] usb 5-1: Product: syz [ 201.298759][ T24] usb 5-1: Manufacturer: syz [ 201.387419][ T24] usb 5-1: SerialNumber: syz [ 201.559994][ T24] usb 5-1: config 0 descriptor?? [ 201.574681][ T24] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 201.587938][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 201.599311][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 201.610020][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 201.615965][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 201.630951][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 201.631823][ T7750] kAFS: No cell specified [ 201.640868][ T24] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 201.654597][ T7750] Failed to initialize the IGMP autojoin socket (err -2) [ 201.663496][ T24] usb 5-1: media controller created [ 201.757996][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.775157][ T5599] Bluetooth: hci4: command 0x0405 tx timeout [ 201.776515][ T24] usb 5-1: selecting invalid altsetting 3 [ 201.787692][ T24] ttusb2: set interface to alts=3 failed [ 201.795478][ T7725] ttusb2: i2c wr len=193 too high [ 201.845815][ T7756] netlink: 'syz.3.566': attribute type 3 has an invalid length. [ 201.898208][ T24] DVB: Unable to find symbol tda10086_attach() [ 201.914948][ T24] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 201.936185][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 201.947751][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 203.159046][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 203.164904][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 203.176492][ T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 203.193826][ T24] usb 5-1: USB disconnect, device number 11 [ 203.230859][ T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 203.849369][ T7774] Failed to initialize the IGMP autojoin socket (err -2) [ 203.875159][ T7776] virtio-fs: tag not found [ 204.292092][ T7773] netlink: 56 bytes leftover after parsing attributes in process `syz.4.572'. [ 204.301809][ T7773] netlink: 24 bytes leftover after parsing attributes in process `syz.4.572'. [ 204.760745][ T30] audit: type=1400 audit(1786080930.788:570): avc: denied { write } for pid=7780 comm="syz.3.573" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 204.810433][ T30] audit: type=1400 audit(1786080930.788:571): avc: denied { set_context_mgr } for pid=7780 comm="syz.3.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 205.042515][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 205.057481][ T7796] kAFS: No cell specified [ 205.121322][ T7786] Failed to initialize the IGMP autojoin socket (err -2) [ 205.152077][ T7798] Failed to initialize the IGMP autojoin socket (err -2) [ 206.098564][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 206.223908][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 206.232282][ T24] usb 4-1: config 0 has no interface number 0 [ 206.238975][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 207.205748][ T24] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 207.216246][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.227137][ T24] usb 4-1: config 0 descriptor?? [ 207.243386][ T24] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 207.668763][ T30] audit: type=1400 audit(1786080933.698:572): avc: denied { associate } for pid=7780 comm="syz.3.573" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 207.750687][ T7802] 0x000000000007-0x000000020000 : "" [ 207.771775][ T30] audit: type=1400 audit(1786080933.738:573): avc: denied { write } for pid=7801 comm="syz.2.580" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 207.816719][ T7812] binder: 7780:7812 ioctl 8010661b 0 returned -22 [ 207.823242][ T30] audit: type=1400 audit(1786080933.848:574): avc: denied { map } for pid=7780 comm="syz.3.573" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 207.871086][ T7809] netlink: 60 bytes leftover after parsing attributes in process `syz.4.582'. [ 207.906271][ T7809] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.938258][ T30] audit: type=1400 audit(1786080933.898:575): avc: denied { call } for pid=7780 comm="syz.3.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 207.979508][ T30] audit: type=1400 audit(1786080933.898:576): avc: denied { transfer } for pid=7780 comm="syz.3.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 208.010561][ T7806] netlink: 'syz.2.580': attribute type 4 has an invalid length. [ 208.046231][ T7802] ftl_cs: FTL header corrupt! [ 208.310225][ T7814] Failed to initialize the IGMP autojoin socket (err -2) [ 208.871137][ T24] usb 4-1: USB disconnect, device number 15 [ 209.189073][ T7826] Failed to initialize the IGMP autojoin socket (err -2) [ 209.446543][ T30] audit: type=1400 audit(1786080935.478:577): avc: denied { setopt } for pid=7840 comm="syz.3.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 209.581653][ T7844] comedi comedi0: Minor 3 could not be opened [ 210.112494][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 210.264234][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 210.273418][ T24] usb 4-1: config 0 has no interface number 0 [ 210.279521][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.290799][ T24] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 210.305497][ T24] usb 4-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 210.315201][ T24] usb 4-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 210.324618][ T24] usb 4-1: Product: syz [ 210.329589][ T7852] kAFS: No cell specified [ 210.343870][ T24] usb 4-1: config 0 descriptor?? [ 210.345572][ T7852] Failed to initialize the IGMP autojoin socket (err -2) [ 210.645476][ T7858] Failed to initialize the IGMP autojoin socket (err -2) [ 211.691878][ T24] chicony 0003:04F2:1421.0002: collection stack underflow [ 211.699217][ T24] chicony 0003:04F2:1421.0002: item 0 1 0 12 parsing failed [ 211.707128][ T24] chicony 0003:04F2:1421.0002: Chicony hid parse failed: -22 [ 211.714997][ T24] chicony 0003:04F2:1421.0002: probe with driver chicony failed with error -22 [ 211.908606][ T30] audit: type=1400 audit(1786080937.938:578): avc: denied { ioctl } for pid=7861 comm="syz.0.594" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 212.187874][ T7833] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 212.296562][ T30] audit: type=1400 audit(1786080938.328:579): avc: denied { write } for pid=7869 comm="syz.2.596" name="midi2.0" dev="configfs" ino=11991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 212.322808][ T30] audit: type=1400 audit(1786080938.328:580): avc: denied { create } for pid=7869 comm="syz.2.596" name="ep.1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 212.357318][ T30] audit: type=1400 audit(1786080938.358:581): avc: denied { write } for pid=7869 comm="syz.2.596" name="ep.1" dev="configfs" ino=19669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 212.380736][ T30] audit: type=1400 audit(1786080938.378:582): avc: denied { map } for pid=7869 comm="syz.2.596" path="/114/config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction" dev="configfs" ino=19667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 212.506421][ T7875] netlink: 24 bytes leftover after parsing attributes in process `syz.2.598'. [ 212.529047][ T7875] netlink: 24 bytes leftover after parsing attributes in process `syz.2.598'. [ 212.541033][ T30] audit: type=1400 audit(1786080938.568:583): avc: denied { write } for pid=7873 comm="syz.2.598" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 212.585012][ T30] audit: type=1400 audit(1786080938.568:584): avc: denied { open } for pid=7873 comm="syz.2.598" path="/dev/input/mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 212.718376][ T5784] usb 4-1: USB disconnect, device number 16 [ 212.778526][ T7884] CUSE: info not properly terminated [ 212.796160][ T7864] syz.0.594 (7864) used greatest stack depth: 19832 bytes left [ 212.922552][ T24] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 213.986771][ T5328] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 213.999529][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 214.009026][ T24] usb 3-1: config 1 has no interface number 0 [ 214.016051][ T24] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 214.028712][ T24] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 214.050831][ T24] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 214.066364][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 214.079390][ T7894] kAFS: No cell specified [ 214.096437][ T7894] Failed to initialize the IGMP autojoin socket (err -2) [ 214.106314][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 214.122085][ T24] usb 3-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.140525][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 214.152294][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.160930][ T24] usb 3-1: Product: syz [ 214.165372][ T5328] usb 2-1: Using ep0 maxpacket: 32 [ 214.195762][ T5328] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 214.213949][ T24] usb 3-1: Manufacturer: syz [ 214.225566][ T5328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.236488][ T24] usb 3-1: SerialNumber: syz [ 214.246794][ T5328] usb 2-1: Product: syz [ 214.251988][ T5328] usb 2-1: Manufacturer: syz [ 214.260088][ T5328] usb 2-1: SerialNumber: syz [ 214.260476][ T7882] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 214.297827][ T5328] usb 2-1: config 0 descriptor?? [ 214.320577][ T5328] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 214.337620][ T5328] dvb-usb: bulk message failed: -22 (4/0) [ 214.344865][ T5328] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 214.372153][ T5328] dvb-usb: bulk message failed: -22 (5/0) [ 214.386929][ T5328] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 214.532404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 214.552397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 214.612399][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 215.472435][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 215.696128][ T5328] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 215.832399][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 216.042399][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 216.814861][ T5328] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 217.773564][ T5328] usb 2-1: media controller created [ 217.778989][ T24] cdc_ncm 3-1:1.1: bind() failure [ 217.793353][ T5328] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 217.816605][ T24] usb 3-1: USB disconnect, device number 9 [ 217.829370][ T7905] Failed to initialize the IGMP autojoin socket (err -2) [ 218.071436][ T5328] usb 2-1: selecting invalid altsetting 3 [ 218.082937][ T5328] ttusb2: set interface to alts=3 failed [ 218.129311][ T5328] DVB: Unable to find symbol tda10086_attach() [ 218.159657][ T5328] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 218.295737][ T5328] dvb-usb: bulk message failed: -22 (4/0) [ 218.301508][ T5328] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 218.312042][ T5328] dvb-usb: bulk message failed: -22 (5/0) [ 218.319979][ T5328] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 218.330386][ T5328] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 218.349122][ T5328] usb 2-1: USB disconnect, device number 9 [ 218.416699][ T5328] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 218.528812][ T7902] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 218.548614][ T7902] block device autoloading is deprecated and will be removed. [ 218.662997][ T5699] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 218.833323][ T5328] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 218.843966][ T5699] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 218.855074][ T5699] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 218.868578][ T5699] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 218.881918][ T5699] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 218.891550][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.899715][ T5699] usb 5-1: Product: syz [ 218.904502][ T5699] usb 5-1: Manufacturer: syz [ 218.909513][ T5699] usb 5-1: SerialNumber: syz [ 218.922516][ T5699] usb 5-1: config 0 descriptor?? [ 218.933193][ T7919] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 218.941164][ T7919] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 218.955569][ T5699] usb 5-1: ucan: probing device on interface #0 [ 218.992491][ T189] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 219.002601][ T5328] usb 2-1: Using ep0 maxpacket: 16 [ 219.012883][ T5328] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 219.021560][ T5328] usb 2-1: config 0 has no interface number 0 [ 219.028086][ T5328] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 219.038502][ T5328] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 219.053777][ T5328] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 219.065307][ T5328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.076591][ T5328] usb 2-1: Product: syz [ 219.080882][ T5328] usb 2-1: Manufacturer: syz [ 219.086343][ T5328] usb 2-1: SerialNumber: syz [ 219.094871][ T5328] usb 2-1: config 0 descriptor?? [ 219.112806][ T7921] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 219.120289][ T7921] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 219.142593][ T189] usb 1-1: Using ep0 maxpacket: 32 [ 219.156864][ T189] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 219.167086][ T189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.175837][ T189] usb 1-1: Product: syz [ 219.180264][ T189] usb 1-1: Manufacturer: syz [ 219.187910][ T189] usb 1-1: SerialNumber: syz [ 219.196450][ T189] usb 1-1: config 0 descriptor?? [ 219.208529][ T189] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 219.216462][ T189] dvb-usb: bulk message failed: -22 (4/0) [ 219.232481][ T189] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 219.246784][ T189] dvb-usb: bulk message failed: -22 (5/0) [ 219.270021][ T189] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 219.288849][ T189] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 219.305551][ T189] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 219.314049][ T189] usb 1-1: media controller created [ 219.352364][ T189] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 219.364754][ T7929] kAFS: No cell specified [ 219.391459][ T189] usb 1-1: selecting invalid altsetting 3 [ 219.397670][ T189] ttusb2: set interface to alts=3 failed [ 219.407899][ T7929] Failed to initialize the IGMP autojoin socket (err -2) [ 219.417845][ T7926] ttusb2: i2c wr len=193 too high [ 219.465262][ T189] DVB: Unable to find symbol tda10086_attach() [ 219.474097][ T189] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 219.485294][ T189] dvb-usb: bulk message failed: -22 (4/0) [ 219.491685][ T189] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 219.504121][ T189] dvb-usb: bulk message failed: -22 (5/0) [ 219.510288][ T189] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 219.523474][ T189] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 219.545820][ T7921] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 219.585663][ T7921] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 219.606077][ T5699] ucan 5-1:0.0 can0: registered device [ 219.676636][ T189] usb 1-1: USB disconnect, device number 20 [ 219.865966][ T5699] ucan 5-1:0.0 can0: firmware string: unknown [ 220.085260][ T5699] usb 5-1: USB disconnect, device number 12 [ 220.101110][ T189] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 220.200214][ T30] audit: type=1400 audit(1786080945.227:585): avc: denied { read } for pid=5257 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 220.244511][ T5328] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 220.270392][ T5328] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 220.281202][ T5328] asix 2-1:0.251: probe with driver asix failed with error -5 [ 220.317848][ T5328] usb 2-1: USB disconnect, device number 10 [ 220.370634][ T7938] block nbd1: server does not support multiple connections per device. [ 220.552967][ T7938] block nbd1: shutting down sockets [ 220.783926][ T5784] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 221.714690][ T7945] Failed to initialize the IGMP autojoin socket (err -2) [ 223.705220][ T7938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.398033][ T5784] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.416239][ T5784] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 225.427287][ T5784] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 225.430376][ T7938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.438069][ T5784] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.600484][ T5784] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 225.695286][ T5784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.696448][ T30] audit: type=1400 audit(1786080950.717:586): avc: denied { read } for pid=7957 comm="syz.2.625" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 225.803277][ T5784] usb 4-1: can't set config #1, error -71 [ 225.827734][ T30] audit: type=1400 audit(1786080950.717:587): avc: denied { ioctl } for pid=7957 comm="syz.2.625" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 225.895000][ T5784] usb 4-1: USB disconnect, device number 17 [ 225.915607][ T7966] kAFS: No cell specified [ 225.971042][ T7966] Failed to initialize the IGMP autojoin socket (err -2) [ 226.437880][ T7969] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.512564][ T5784] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 226.549196][ T7969] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.661881][ T7969] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.678950][ T7978] netlink: 36 bytes leftover after parsing attributes in process `syz.4.633'. [ 226.728436][ T5784] usb 3-1: Using ep0 maxpacket: 32 [ 226.729152][ T7969] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.750858][ T5784] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 226.759823][ T5784] usb 3-1: config 0 has no interface number 0 [ 226.768545][ T5784] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 226.778514][ T5784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.787770][ T7984] openvswitch: netlink: IP tunnel dst address not specified [ 226.823389][ T5784] usb 3-1: Product: syz [ 226.839735][ T5784] usb 3-1: Manufacturer: syz [ 226.861883][ T5784] usb 3-1: SerialNumber: syz [ 226.866596][ T30] audit: type=1400 audit(1786080951.897:588): avc: denied { read append } for pid=7979 comm="syz.1.634" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 226.891445][ T30] audit: type=1400 audit(1786080951.897:589): avc: denied { open } for pid=7979 comm="syz.1.634" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 226.898486][ T5784] usb 3-1: config 0 descriptor?? [ 226.915192][ T30] audit: type=1400 audit(1786080951.897:590): avc: denied { ioctl } for pid=7979 comm="syz.1.634" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 226.970466][ T5784] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 227.163334][ T1037] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.189367][ T1037] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.205125][ T1037] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.220848][ T1037] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.244719][ T5784] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 227.665875][ T5784] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 227.903524][ T7995] Failed to initialize the IGMP autojoin socket (err -2) [ 228.912456][ T5723] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 229.016798][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 229.024822][ T5328] usb 3-1: USB disconnect, device number 10 [ 229.036340][ T5328] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 229.055347][ T5328] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 229.067785][ T5328] quatech2 3-1:0.51: device disconnected [ 229.083578][ T5723] usb 4-1: Using ep0 maxpacket: 32 [ 229.092357][ T5723] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 229.101655][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.110492][ T5723] usb 4-1: Product: syz [ 229.114767][ T5723] usb 4-1: Manufacturer: syz [ 229.119380][ T5723] usb 4-1: SerialNumber: syz [ 229.125672][ T5723] usb 4-1: config 0 descriptor?? [ 229.133609][ T5723] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 229.141280][ T5723] dvb-usb: bulk message failed: -22 (4/0) [ 229.147960][ T5723] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 229.158185][ T5723] dvb-usb: bulk message failed: -22 (5/0) [ 229.163955][ T5723] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 229.175875][ T5723] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 229.185661][ T5723] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 229.194988][ T5723] usb 4-1: media controller created [ 229.205408][ T5723] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 229.220608][ T5723] usb 4-1: selecting invalid altsetting 3 [ 229.226425][ T5723] ttusb2: set interface to alts=3 failed [ 229.247903][ T5723] DVB: Unable to find symbol tda10086_attach() [ 229.254154][ T5723] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 229.263009][ T5723] dvb-usb: bulk message failed: -22 (4/0) [ 229.268743][ T5723] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 229.280529][ T5723] dvb-usb: bulk message failed: -22 (5/0) [ 229.286340][ T5723] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 229.297409][ T5723] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 229.338779][ T7992] ttusb2: i2c wr len=193 too high [ 229.384021][ T5723] usb 4-1: USB disconnect, device number 18 [ 229.406731][ T5723] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 229.584959][ T7978] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 229.686874][ T8006] netlink: 164 bytes leftover after parsing attributes in process `syz.1.641'. [ 229.758492][ T30] audit: type=1400 audit(1786080954.787:591): avc: denied { setopt } for pid=8008 comm="syz.2.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 229.879853][ T8006] 9p: Bad value for 'rfdno' [ 229.913036][ T5723] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 229.999504][ T30] audit: type=1400 audit(1786080955.027:592): avc: denied { write } for pid=8017 comm="syz.2.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 230.125048][ T5723] usb 1-1: unable to get BOS descriptor or descriptor too short [ 230.139138][ T5723] usb 1-1: config 1 has an invalid interface number: 97 but max is 0 [ 230.149038][ T8027] netlink: 'syz.3.645': attribute type 10 has an invalid length. [ 230.157142][ T5723] usb 1-1: config 1 has no interface number 0 [ 230.167878][ T5723] usb 1-1: config 1 interface 97 has no altsetting 0 [ 230.185483][ T8027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.192795][ T30] audit: type=1400 audit(1786080955.207:593): avc: denied { override_creds } for pid=8024 comm="syz.2.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 230.219135][ T8027] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 230.228697][ T5723] usb 1-1: New USB device found, idVendor=07d1, idProduct=3c09, bcdDevice=a7.d2 [ 230.238220][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.259779][ T5723] usb 1-1: Product: syz [ 230.270583][ T5723] usb 1-1: Manufacturer: syz [ 230.285694][ T5723] usb 1-1: SerialNumber: syz [ 230.351356][ T8031] Failed to initialize the IGMP autojoin socket (err -2) [ 231.367669][ T5723] usb 1-1: USB disconnect, device number 21 [ 233.543760][ T8026] zswap: compressor not available [ 234.242493][ T5723] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 234.425108][ T5723] usb 4-1: Using ep0 maxpacket: 16 [ 234.441133][ T5723] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.461772][ T5723] usb 4-1: config 0 interface 0 has no altsetting 0 [ 234.480876][ T5723] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 234.500442][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.512452][ T5723] usb 4-1: Product: syz [ 234.528733][ T5723] usb 4-1: Manufacturer: syz [ 234.538447][ T5723] usb 4-1: SerialNumber: syz [ 234.553767][ T5723] usb 4-1: config 0 descriptor?? [ 234.571895][ T5723] hub 4-1:0.0: bad descriptor, ignoring hub [ 234.579269][ T5723] hub 4-1:0.0: probe with driver hub failed with error -5 [ 234.596699][ T5723] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 234.622581][ T5788] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 234.631227][ T6548] usb 4-1: Failed to submit usb control message: -71 [ 234.661800][ T6548] usb 4-1: unable to send the bmi data to the device: -71 [ 234.681529][ T6548] usb 4-1: unable to get target info from device [ 234.690752][ T8071] netlink: 'syz.1.658': attribute type 1 has an invalid length. [ 234.692805][ T6548] usb 4-1: could not get target info (-71) [ 234.706182][ T6548] usb 4-1: could not probe fw (-71) [ 234.766831][ T8071] 8021q: adding VLAN 0 to HW filter on device bond2 [ 234.792475][ T5788] usb 1-1: Using ep0 maxpacket: 32 [ 234.810820][ T5788] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 234.839985][ T5788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.867279][ T5788] usb 1-1: Product: syz [ 234.884574][ T5788] usb 1-1: Manufacturer: syz [ 234.890740][ T5788] usb 1-1: SerialNumber: syz [ 234.916736][ T5788] usb 1-1: config 0 descriptor?? [ 234.935787][ T5788] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 234.955956][ T5788] dvb-usb: bulk message failed: -22 (4/0) [ 234.974541][ T5788] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 234.992812][ T5715] usb 4-1: USB disconnect, device number 19 [ 235.018881][ T5788] dvb-usb: bulk message failed: -22 (5/0) [ 235.024821][ T5784] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 235.049383][ T5788] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 235.077122][ T5788] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 235.098522][ T5788] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 235.107022][ T5788] usb 1-1: media controller created [ 235.136408][ T8053] ttusb2: i2c wr len=193 too high [ 235.160639][ T5788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 235.194427][ T5788] usb 1-1: selecting invalid altsetting 3 [ 235.206588][ T5788] ttusb2: set interface to alts=3 failed [ 235.215213][ T5784] usb 3-1: not running at top speed; connect to a high speed hub [ 236.514156][ T5784] usb 3-1: config index 0 descriptor too short (expected 161, got 153) [ 236.524123][ T5784] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 236.534339][ T5784] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 236.559269][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.664'. [ 236.562447][ T5784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.607589][ T5784] gspca_main: spca501-2.14.0 probing 0000:0000 [ 236.680282][ T5788] DVB: Unable to find symbol tda10086_attach() [ 236.710608][ T5788] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 236.742245][ T5788] dvb-usb: bulk message failed: -22 (4/0) [ 236.761029][ T5788] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 236.779693][ T5788] dvb-usb: bulk message failed: -22 (5/0) [ 236.810856][ T5788] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 236.829525][ T30] audit: type=1400 audit(1786080961.857:594): avc: denied { connect } for pid=8094 comm="syz.1.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 236.837039][ T5788] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 236.927063][ T5788] usb 1-1: USB disconnect, device number 22 [ 236.987259][ T8102] netlink: 84 bytes leftover after parsing attributes in process `syz.1.669'. [ 237.024754][ T5788] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 237.115183][ T8106] netlink: 27 bytes leftover after parsing attributes in process `syz.3.670'. [ 237.342936][ T5784] gspca_spca501: reg write: error -110 [ 237.349210][ T5784] spca501 3-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 237.359796][ T5788] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 237.377126][ T5784] spca501 3-1:1.0: probe with driver spca501 failed with error -22 [ 237.425156][ T5784] uvcvideo 3-1:1.0: Found UVC 1.00 device (0000:0000) [ 237.447654][ T5784] uvcvideo 3-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 237.460636][ T5784] uvcvideo 3-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 237.476680][ T5784] uvcvideo 3-1:1.1: Failed to initialize the device (-5). [ 237.501943][ T5784] uvcvideo 3-1:1.0: probe with driver uvcvideo failed with error -5 [ 237.545388][ T5788] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 237.583507][ T5788] usb 1-1: config 0 has no interface number 0 [ 237.648610][ T5788] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 237.761344][ T5788] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 237.772304][ T5788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.850208][ T5788] usb 1-1: Product: syz [ 237.873693][ T5788] usb 1-1: Manufacturer: syz [ 237.896094][ T5788] usb 1-1: SerialNumber: syz [ 237.995017][ T5788] usb 1-1: config 0 descriptor?? [ 238.207490][ T5788] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 238.349684][ T5784] usb 3-1: USB disconnect, device number 11 [ 238.556982][ T5788] usb 1-1: USB disconnect, device number 23 [ 238.568387][ T5788] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 238.672474][ T189] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 238.834975][ T189] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 238.876434][ T189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.929704][ T189] usb 2-1: probing VID:PID(0424:012C) [ 238.957456][ T189] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 238.969058][ T189] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 238.978125][ T189] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 238.986738][ T189] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04 [ 239.004121][ T189] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 239.067752][ T8125] ftl_cs: FTL header not found. [ 239.508266][ T189] usb 2-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 239.559852][ T8125] block2mtd: mtd2: [/dev/loop0] erase_size = 0KiB [65] [ 239.710078][ T189] usb 2-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 240.327432][ T8149] misc userio: Can't change port type on an already running userio instance [ 240.482461][ T5723] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 241.103725][ T5723] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.120031][ T5723] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 241.131661][ T5723] usb 3-1: config 1 has no interface number 0 [ 241.145168][ T5699] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 241.155966][ T5723] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 241.168986][ T5723] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 241.181835][ T5723] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 241.193912][ T5723] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 241.203914][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.212257][ T5723] usb 3-1: Product: syz [ 241.218088][ T5723] usb 3-1: Manufacturer: syz [ 241.223125][ T5723] usb 3-1: SerialNumber: syz [ 241.374545][ T5699] usb 5-1: Using ep0 maxpacket: 32 [ 241.414636][ T5699] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 241.424090][ T5699] usb 5-1: config 2 has no interface number 0 [ 241.430464][ T5699] usb 5-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 241.431076][ T8145] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 241.441113][ T5699] usb 5-1: config 2 interface 88 has no altsetting 0 [ 241.736319][ T5699] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 241.750638][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 241.763333][ T5685] usb 2-1: USB disconnect, device number 11 [ 241.780525][ T5699] usb 5-1: Product: syz [ 241.787942][ T5699] usb 5-1: Manufacturer: syz [ 242.078878][ T5699] usb 5-1: SerialNumber: syz [ 242.080165][ T8168] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 242.121039][ T8156] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 242.151278][ T5685] USB vub300 remote SDIO host controller[0] now disconnected [ 242.325746][ T5723] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 242.342242][ T8156] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 242.479960][ T5723] cdc_ncm 3-1:1.1: bind() failure [ 242.520080][ T5723] usb 3-1: USB disconnect, device number 12 [ 242.814378][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:4487 [ 242.824858][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 8181, name: syz.0.691 [ 242.833959][ C0] preempt_count: 100, expected: 0 [ 242.839064][ C0] RCU nest depth: 0, expected: 0 [ 242.844097][ C0] 1 lock held by syz.0.691/8181: [ 242.849092][ C0] #0: ffffc90007877bd8 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0x11f/0x610 [ 242.859783][ C0] Preemption disabled at: [ 242.859808][ C0] [] handle_softirqs+0xf0/0x9b0 [ 242.870705][ C0] CPU: 0 UID: 0 PID: 8181 Comm: syz.0.691 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.870733][ C0] Tainted: [L]=SOFTLOCKUP [ 242.870737][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 242.870744][ C0] Call Trace: [ 242.870748][ C0] [ 242.870753][ C0] dump_stack_lvl+0x100/0x190 [ 242.870770][ C0] __might_resched.cold+0x1ec/0x232 [ 242.870786][ C0] ? __pfx___might_resched+0x10/0x10 [ 242.870800][ C0] ? kfree_const+0x5f/0x70 [ 242.870813][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 242.870829][ C0] cancel_delayed_work_sync+0xb8/0xf0 [ 242.870845][ C0] mmc_free_host+0x19/0x30 [ 242.870859][ C0] vub300_inactivity_timer_expired+0x42f/0x550 [ 242.870875][ C0] call_timer_fn+0x19a/0x610 [ 242.870889][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 242.870902][ C0] ? __run_timers+0x747/0xb00 [ 242.870914][ C0] ? rcu_is_watching+0x12/0xc0 [ 242.870936][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 242.870951][ C0] __run_timers+0x757/0xb00 [ 242.870966][ C0] ? __pfx___run_timers+0x10/0x10 [ 242.870982][ C0] ? ktime_get+0x9f/0x320 [ 242.870995][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 242.871014][ C0] run_timer_base+0x114/0x190 [ 242.871026][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 242.871040][ C0] run_timer_softirq+0x1a/0x50 [ 242.871052][ C0] handle_softirqs+0x1ea/0x9b0 [ 242.871068][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 242.871081][ C0] ? _raw_spin_unlock+0x3e/0x50 [ 242.871096][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 242.871115][ C0] __irq_exit_rcu+0x162/0x210 [ 242.871128][ C0] irq_exit_rcu+0x9/0x30 [ 242.871143][ C0] sysvec_apic_timer_interrupt+0x56/0xc0 [ 242.871160][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 242.871173][ C0] RIP: 0033:0x7f54d3e7264d [ 242.871184][ C0] Code: 7c 24 08 85 c0 0f 84 19 01 00 00 66 90 48 8b 3c 24 49 8b 54 24 40 4c 89 f0 4a 03 14 ef 80 3d 61 57 3b 00 00 49 89 d6 48 89 d3 <74> 28 25 ff 0f 00 00 83 f0 3d 8d 04 c0 89 c3 c1 eb 04 31 c3 69 db [ 242.871194][ C0] RSP: 002b:00007ffc2de9dd00 EFLAGS: 00000202 [ 242.871204][ C0] RAX: ffffffff8ba92e8b RBX: ffffffff8ba928e0 RCX: ffffffff8ba92edc [ 242.871211][ C0] RDX: ffffffff8ba928e0 RSI: ffffffff8ba92edc RDI: 00007f54d35fd008 [ 242.871217][ C0] RBP: 00000000000003df R08: 00007f54d4210000 R09: 00007f54d4212000 [ 242.871224][ C0] R10: 000000008ba92ee0 R11: 0000000000000015 R12: 00007f54d4226128 [ 242.871230][ C0] R13: 0000000000007eb0 R14: ffffffff8ba928e0 R15: 00007f54d4d55720 [ 242.871237][ C0] ? mptcp_diag_dump+0x710/0x1290 [ 242.871250][ C0] ? mptcp_diag_dump+0x710/0x1290 [ 242.871261][ C0] ? mptcp_diag_dump+0xcbb/0x1290 [ 242.871271][ C0] ? mptcp_diag_dump+0xd0c/0x1290 [ 242.871281][ C0] ? mptcp_diag_dump+0x710/0x1290 [ 242.871291][ C0] ? mptcp_diag_dump+0xd0c/0x1290 [ 242.871304][ C0] [ 243.148530][ C0] BUG: scheduling while atomic: syz.0.691/8181/0x00000101 [ 243.155748][ C0] 1 lock held by syz.0.691/8181: [ 243.160762][ C0] #0: ffffc90007877bd8 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0x11f/0x610 [ 243.171486][ C0] Modules linked in: [ 243.177047][ C0] Preemption disabled at: [ 243.177059][ C0] [] handle_softirqs+0xf0/0x9b0 [ 243.187990][ C0] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 243.196753][ C0] CPU: 0 UID: 0 PID: 8181 Comm: syz.0.691 Tainted: G W L syzkaller #0 PREEMPT(full) [ 243.207497][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 243.212664][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 243.222701][ C0] Call Trace: [ 243.225970][ C0] [ 243.228879][ C0] dump_stack_lvl+0x100/0x190 [ 243.233539][ C0] vpanic+0x552/0x970 [ 243.237513][ C0] ? __pfx_vpanic+0x10/0x10 [ 243.241989][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 243.247006][ C0] panic+0xd1/0xe0 [ 243.250704][ C0] ? __pfx_panic+0x10/0x10 [ 243.255095][ C0] ? __pfx_print_modules+0x10/0x10 [ 243.260191][ C0] ? call_timer_fn+0x11f/0x610 [ 243.264940][ C0] ? check_panic_on_warn+0x1f/0x90 [ 243.270027][ C0] ? handle_softirqs+0xf0/0x9b0 [ 243.274862][ C0] check_panic_on_warn.cold+0x19/0x34 [ 243.280222][ C0] ? handle_softirqs+0xf0/0x9b0 [ 243.285048][ C0] __schedule_bug.cold+0xca/0xfa [ 243.289972][ C0] __schedule+0x3e2e/0x6730 [ 243.294456][ C0] ? __lock_acquire+0x49f/0x1a40 [ 243.299377][ C0] ? lock_acquire+0x1b9/0x370 [ 243.304029][ C0] ? __pfx___schedule+0x10/0x10 [ 243.308858][ C0] ? find_held_lock+0x2b/0x80 [ 243.313522][ C0] ? schedule+0x225/0x2c0 [ 243.317840][ C0] schedule+0xdd/0x2c0 [ 243.321897][ C0] schedule_timeout+0x1b2/0x280 [ 243.326732][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 243.332090][ C0] __wait_for_common+0x2e7/0x4c0 [ 243.337001][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 243.342354][ C0] ? __pfx___wait_for_common+0x10/0x10 [ 243.347798][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 243.353161][ C0] __synchronize_srcu+0x216/0x300 [ 243.358173][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 243.363696][ C0] ? __pfx_wakeme_after_rcu+0x10/0x10 [ 243.369055][ C0] wakeup_source_unregister.part.0+0x12c/0x540 [ 243.375195][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 243.381329][ C0] wakeup_source_unregister+0x1f/0x30 [ 243.386685][ C0] mmc_host_classdev_release+0x42/0x120 [ 243.392221][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 243.398353][ C0] device_release+0xd2/0x270 [ 243.402937][ C0] kobject_put+0x1f7/0x640 [ 243.407343][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 243.413995][ C0] put_device+0x1f/0x30 [ 243.418130][ C0] vub300_inactivity_timer_expired+0x42f/0x550 [ 243.424261][ C0] call_timer_fn+0x19a/0x610 [ 243.428839][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 243.433928][ C0] ? __run_timers+0x747/0xb00 [ 243.438580][ C0] ? rcu_is_watching+0x12/0xc0 [ 243.443335][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 243.449997][ C0] __run_timers+0x757/0xb00 [ 243.454478][ C0] ? __pfx___run_timers+0x10/0x10 [ 243.459494][ C0] ? ktime_get+0x9f/0x320 [ 243.463819][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 243.468839][ C0] run_timer_base+0x114/0x190 [ 243.473496][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 243.478682][ C0] run_timer_softirq+0x1a/0x50 [ 243.483424][ C0] handle_softirqs+0x1ea/0x9b0 [ 243.488175][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 243.493440][ C0] ? _raw_spin_unlock+0x3e/0x50 [ 243.498277][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 243.503889][ C0] __irq_exit_rcu+0x162/0x210 [ 243.508543][ C0] irq_exit_rcu+0x9/0x30 [ 243.512761][ C0] sysvec_apic_timer_interrupt+0x56/0xc0 [ 243.518388][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 243.524342][ C0] RIP: 0033:0x7f54d3e7264d [ 243.528732][ C0] Code: 7c 24 08 85 c0 0f 84 19 01 00 00 66 90 48 8b 3c 24 49 8b 54 24 40 4c 89 f0 4a 03 14 ef 80 3d 61 57 3b 00 00 49 89 d6 48 89 d3 <74> 28 25 ff 0f 00 00 83 f0 3d 8d 04 c0 89 c3 c1 eb 04 31 c3 69 db [ 243.548318][ C0] RSP: 002b:00007ffc2de9dd00 EFLAGS: 00000202 [ 243.554364][ C0] RAX: ffffffff8ba92e8b RBX: ffffffff8ba928e0 RCX: ffffffff8ba92edc [ 243.562309][ C0] RDX: ffffffff8ba928e0 RSI: ffffffff8ba92edc RDI: 00007f54d35fd008 [ 243.570264][ C0] RBP: 00000000000003df R08: 00007f54d4210000 R09: 00007f54d4212000 [ 243.578219][ C0] R10: 000000008ba92ee0 R11: 0000000000000015 R12: 00007f54d4226128 [ 243.586178][ C0] R13: 0000000000007eb0 R14: ffffffff8ba928e0 R15: 00007f54d4d55720 [ 243.594138][ C0] ? mptcp_diag_dump+0x710/0x1290 [ 243.599155][ C0] ? mptcp_diag_dump+0x710/0x1290 [ 243.604154][ C0] ? mptcp_diag_dump+0xcbb/0x1290 [ 243.609162][ C0] ? mptcp_diag_dump+0xd0c/0x1290 [ 243.614159][ C0] ? mptcp_diag_dump+0x710/0x1290 [ 243.619156][ C0] ? mptcp_diag_dump+0xd0c/0x1290 [ 243.624156][ C0] [ 243.627374][ C0] Kernel Offset: disabled [ 243.631676][ C0] Rebooting in 86400 seconds..