last executing test programs: 5m16.808965082s ago: executing program 2 (id=1975): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4f9309", 0x14, 0x6, 0x1, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x3, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}]}, 0x70}}, 0x8044080) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = userfaultfd(0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) socket$inet6(0xa, 0x805, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r4, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) 5m9.27638391s ago: executing program 2 (id=1994): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) listen(0xffffffffffffffff, 0x0) socket(0x10, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r4, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/159, 0x9f}, {&(0x7f00000027c0)=""/4133, 0x1025}, {&(0x7f0000000040)=""/185, 0xb9}, {&(0x7f0000000640)=""/122, 0x7a}, {&(0x7f0000004500)=""/4093, 0xffd}, {&(0x7f0000000280)=""/82, 0x52}, {&(0x7f0000000240)=""/27, 0x1b}], 0x7}, 0xd}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x402}, {{0x0, 0x0, 0x0}}], 0x4, 0x40000100, 0x0) socket$igmp(0x2, 0x3, 0x2) r5 = socket(0x10, 0x3, 0x0) recvmmsg(r5, &(0x7f00000021c0), 0x5b, 0x40, 0x0) syz_clone(0x40180, &(0x7f00000003c0), 0x0, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000500)="5334295bc4b52bd2ba1b78830f66e6745bc116a23f6871327787d3e508d22880ab684a2218788a3260e1b20ab0b0ec4eaf723c643cc2d9d243abdae6d0cfa98bdfeaed1156fa813f166154") r6 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r6, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x10, @remote}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000240)="a905000000007464000100000000000000e5c064", 0x14}, {&(0x7f0000000640)="5c58a76da4e75148671dbb61a4c7d51f", 0x10}], 0x2}}], 0x1, 0x0) 5m8.331705839s ago: executing program 2 (id=1996): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x10b) write(r2, &(0x7f0000000000)='7', 0x1) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, 0x0, 0x0) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="000103000f0b07"], 0x103) 5m8.08125475s ago: executing program 2 (id=1998): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="10000000040000000800000002000000f7"], 0x50) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20004008, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x69ba, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r3) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x3c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmmsg(r2, &(0x7f0000003900), 0x0, 0x200088d1) 5m6.390828009s ago: executing program 2 (id=2001): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003200)={0xffffffffffffffff, 0x2f00020b, 0x0, 0x0, 0x0, 0x0, 0x1c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_usbip_server_init(0x3) 5m4.34975061s ago: executing program 2 (id=2006): getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000040)=0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000540), 0x1003, r0}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a310000000005000100070000000500"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r0, 0x0, 0x0}, 0x20) 4m48.804974288s ago: executing program 32 (id=2006): getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000040)=0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000540), 0x1003, r0}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a310000000005000100070000000500"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r0, 0x0, 0x0}, 0x20) 2m42.408057934s ago: executing program 1 (id=2480): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r0, &(0x7f00000007c0)='na@', 0x3) 2m42.00377931s ago: executing program 4 (id=2482): mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x8081, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r0, 0x40480923, &(0x7f0000000380)="0000004a0000000004000002000000020000000000000001000000007c") ioctl(r0, 0x40140921, &(0x7f0000000420)="0100000001") ioctl(r0, 0x400c0930, 0x0) 2m41.848198634s ago: executing program 4 (id=2483): r0 = openat$incfs(0xffffffffffffffff, 0x0, 0x440, 0x53) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="44009f54fe99000000000000000000", @ANYRES32=r3, @ANYRES64=r2], 0x44}, 0x1, 0x0, 0x0, 0x404c800}, 0x891) r4 = socket(0x1, 0x803, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0x17, 0x3, "4d5ac8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000800) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) r7 = syz_open_dev$dmmidi(&(0x7f00000000c0), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r7, 0xc0245720, &(0x7f0000000040)={0x1}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r8, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r9}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2f00020b, 0x822, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r11 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}}, 0x0) 2m40.949439593s ago: executing program 1 (id=2485): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0400000004000000"], 0x48) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000102010200"], 0x58}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0xba, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000140)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d2e3b", 0xfe2b, 0x10000485, 0x0, 0xfffffffffffffe91) 2m39.891240343s ago: executing program 1 (id=2490): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2', 0x5) 2m39.727103675s ago: executing program 1 (id=2492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x4, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x30, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e24, 0x4e20, 0x1c, 0x0, @gue={{0x1, 0x0, 0x0, 0x2, 0x100, @void}, "b68ed34f131c03e57e518e4d08000000"}}}}, 0x3e) 2m39.713658134s ago: executing program 4 (id=2493): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) r1 = geteuid() r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ftruncate(0xffffffffffffffff, 0x62432550) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='ecryptfs\x00', 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x80, {0xc, 0x40200, 0x0, {0x7ffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x6, 0x5, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r4, 0x1, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1010000, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=r1, @ANYBLOB="b72a6c08f974da438fa5653dbc40d1c55b7dedbff9e024abcb", @ANYRESDEC=r4, @ANYBLOB="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", @ANYRESDEC=r8, @ANYBLOB=',\x00']) write$FUSE_ATTR(r0, 0x0, 0xfc92) 2m38.906029536s ago: executing program 4 (id=2494): r0 = userfaultfd(0x80001) r1 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) write(r1, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./lower1/file1\x00', 0x42, 0x1ff) mount(0x0, &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000340)='overlay\x00', 0x0, &(0x7f0000000380)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt/file1\x00', &(0x7f0000000200), 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x43, 0x0, 0x0) 2m38.783827448s ago: executing program 1 (id=2495): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r0, &(0x7f00000007c0)='na@', 0x3) 2m37.456548579s ago: executing program 1 (id=2498): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) 2m36.427175876s ago: executing program 4 (id=2502): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2', 0x5) 2m34.888608683s ago: executing program 4 (id=2505): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[], 0x68}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @local}, 0x14) 2m21.747074494s ago: executing program 33 (id=2498): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) 2m19.750274938s ago: executing program 34 (id=2505): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[], 0x68}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @local}, 0x14) 2m11.666586766s ago: executing program 6 (id=2542): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000f01000/0x3000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x3000}) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) lchown(&(0x7f0000000040)='my_tracefs/events/task/task_rename/filter\x00', 0x0, 0x0) 2m10.826084449s ago: executing program 6 (id=2573): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) 1m54.773087221s ago: executing program 35 (id=2573): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) 22.952228752s ago: executing program 0 (id=2890): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x8}}, 0x20) ioctl(0xffffffffffffffff, 0x76a6, &(0x7f0000002c40)="721dc9b4b6e9b96a9a153486a331f057363e8c712c014dc556d9e402e9b00e8e1f7bfe290e2ee1db9759bb86cd4741bb78191ad209a52eb273d50fdadee1831f758ea580af28f2e9dce57246d909983a5bb52dc9b4199114d2d2e919c66cccc83f25f098a52ec13077da38d3338779e7f2f7c524999768c98fa31c078df38d119e8bf5646e51825eb26e428335e1da743fed4f12cb9d5300084cb172c4b4569190ec1ab5e88b06aaba87f4a4448563991ba999cc56329ee3bf1ecb0123a351ec0ac46acef40db783068f79f7ae322888d444fedccecc66a8be4cef69ea820cea769b0ec6d8aec381168ede") r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r1}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x3, 0xd00}}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x0, 0x9d70, 0xc00, 0x1, 0x2a9}, 0x0, 0x4, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x9a08, 0x20, 0x0, 0x3a9}, &(0x7f0000002d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb2c4, 0x18621, 0x1, 0x2c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb1d3, 0x800, 0x1, 0x228}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x26fe, 0x4a2d618fc825f785, 0x3, 0x100038c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x72b8, 0x4000, 0x40003, 0x290}}], 0x4, &(0x7f0000001980)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x101, 0x77e, 0x0, 0x0}}, &(0x7f0000002c00)) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f0000000080)={0x10}) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {&(0x7f0000000340)="2009f5", 0x3}], 0x2) r6 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff0000000705810200020007050102000200070582020002000705020200020007"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="010000000300"/28], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x4}, 0x38) syz_usb_control_io(r6, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x1, 0x0) 18.169742386s ago: executing program 0 (id=2906): listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000280)="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", 0x1a6, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b)<', @ANYRES32=0x0, @ANYBLOB="0c009900fdffffff6b000000"], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) 16.85463694s ago: executing program 5 (id=2912): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) syz_genetlink_get_family_id$ipvs(0x0, r0) socket$packet(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd030000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4}, &(0x7f0000000380), &(0x7f0000000480)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 15.977417541s ago: executing program 5 (id=2918): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004800003400000000000690", @ANYRES32=0x41424344, @ANYBLOB="5000000041ca74169b1edc90780000"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x48000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) open_by_handle_at(r2, &(0x7f0000001300)=ANY=[@ANYBLOB="10"], 0x4000) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000031401002abd8b00fedbdf210900020073797a3500000000080041007369770014003300626f6e64300000000000000000000000bbcf5c95a3c4564b63f8f91b58626f5c99203922eab33a4227032a1cfe4fa32c8aec084039497ea44df8711ec2b4c13fc4afbcacab1ba91078836c77c34c5ce296e5e86508e94aa3c00f27d88a680d55cdea2f3c779611605b96d97d0e162d9873b41b0c6200e0a6feafe2730ded340c08b42300e0ca"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x82001, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) 15.824104345s ago: executing program 8 (id=2919): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='md0', 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r0, 0x932, 0x0) 14.856935145s ago: executing program 5 (id=2921): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)="47f201", 0x3}], 0x1}], 0x1, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000400)={0x3, 0x3, "0eb62d"}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffff"], 0x6f4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000200012800b0001006272696467650000100002800c0020000000000000000000"], 0x40}}, 0x0) 14.762798182s ago: executing program 8 (id=2922): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='usbip-vudc.0', 0xc) write(r0, &(0x7f00000004c0)='\n', 0x1) 14.628774686s ago: executing program 8 (id=2924): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004800003400000000000690", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000041ca74169b1edc907800"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x48000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) open_by_handle_at(r2, &(0x7f0000001300)=ANY=[@ANYBLOB="10"], 0x4000) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000031401002abd8b00fedbdf210900020073797a3500000000080041007369770014003300626f6e64300000000000000000000000bbcf5c95a3c4564b63f8f91b58626f5c99203922eab33a4227032a1cfe4fa32c8aec084039497ea44df8711ec2b4c13fc4afbcacab1ba91078836c77c34c5ce296e5e86508e94aa3c00f27d88a680d55cdea2f3c779611605b96d97d0e162d9873b41b0c6200e0a6feafe2730ded340c08b42300e0ca"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x82001, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) 13.637416555s ago: executing program 5 (id=2926): getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000040)=0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004000000003"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000540), 0x1003, r0}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r0, 0x0, 0x0}, 0x20) 13.636004543s ago: executing program 8 (id=2927): getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000040)=0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000540), 0x1003, r0}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r0, 0x0, 0x0}, 0x20) 7.523902972s ago: executing program 7 (id=2940): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xa, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) listen(0xffffffffffffffff, 0x0) socket(0x10, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400"], 0x18}}, 0x0) recvmmsg(r4, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/159, 0x9f}, {&(0x7f00000027c0)=""/4133, 0x1025}, {&(0x7f0000000040)=""/185, 0xb9}, {&(0x7f0000000640)=""/122, 0x7a}, {&(0x7f0000004500)=""/4093, 0xffd}, {&(0x7f0000000280)=""/82, 0x52}, {&(0x7f0000000240)=""/27, 0x1b}], 0x7}, 0xd}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x402}, {{0x0, 0x0, 0x0}}], 0x4, 0x40000100, 0x0) socket$igmp(0x2, 0x3, 0x2) r5 = socket(0x10, 0x3, 0x0) recvmmsg(r5, &(0x7f00000021c0), 0x5b, 0x40, 0x0) syz_clone(0x40180, &(0x7f00000003c0), 0x0, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000500)="5334295bc4b52bd2ba1b78830f66e6745bc116a23f6871327787d3e508d22880ab684a2218788a3260e1b20ab0b0ec4eaf723c643cc2d9d243abdae6d0cfa98bdfeaed1156fa813f166154") r6 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r6, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x10, @remote}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000240)="a905000000007464000100000000000000e5c064", 0x14}, {&(0x7f0000000640)="5c58a76da4e75148671dbb61a4c7d51f", 0x10}], 0x2}}], 0x1, 0x0) 6.590343617s ago: executing program 7 (id=2942): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020"], 0x80}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x1, 0xb}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500fc020000000000000000000000000000008004d52b0000000a00000000000000000000000000000000000000000000000200"/180], 0x108}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x10040003}, 0x8008880) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20004000) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.90718689s ago: executing program 3 (id=2945): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2}, &(0x7f0000000540), &(0x7f0000000740)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 5.740386592s ago: executing program 3 (id=2946): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x40140921, &(0x7f0000000420)="01000000010000000100000001") ioctl(r1, 0x400c0930, 0x0) ioctl(r1, 0x932, 0x0) 5.381654277s ago: executing program 3 (id=2947): r0 = openat$incfs(0xffffffffffffffff, 0x0, 0x440, 0x53) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="44009f54fe99000000000000000000", @ANYRES32=r3, @ANYRES64=r2], 0x44}, 0x1, 0x0, 0x0, 0x404c800}, 0x891) r4 = socket(0x1, 0x803, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0x17, 0x3, "4d5ac8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000800) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) r7 = syz_open_dev$dmmidi(&(0x7f00000000c0), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r7, 0xc0245720, &(0x7f0000000040)={0x1}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r8, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r9}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2f00020b, 0x822, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r11 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}}, 0x0) 4.130626197s ago: executing program 0 (id=2914): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x40080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x317e, 0x4) 3.722418379s ago: executing program 3 (id=2948): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000480)='usbip-vudc.0', 0xc) write(r0, &(0x7f00000004c0)='\n', 0x1) 3.571934532s ago: executing program 3 (id=2949): r0 = userfaultfd(0x80001) r1 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x1002}}) write(r1, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./lower1/file1\x00', 0x42, 0x1ff) mount(0x0, &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000340)='overlay\x00', 0x0, &(0x7f0000000380)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt/file1\x00', &(0x7f0000000200), 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x43, 0x0, 0x0) 3.216977124s ago: executing program 0 (id=2950): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x10040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, &(0x7f0000000240)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x21, 0x0, 0x80000000, 0x0, 0x20410, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000000)=r2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = getuid() quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x34, 0x0, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x80) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x9}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7b, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x7d, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@ifindex=r9, 0xa, 0x0, 0x9ebf, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0], 0x0}, 0x40) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r6, r9, 0x2d, 0x0, @val=@tcx={@void, @value=r6, @void, @void, r10}}, 0x1c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r11, 0x4000, 0x0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8002}]}) sysinfo(&(0x7f00000001c0)=""/86) 3.110366485s ago: executing program 5 (id=2951): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) r1 = geteuid() mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ftruncate(0xffffffffffffffff, 0x62432550) mount(0x0, 0x0, &(0x7f0000000080)='ecryptfs\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x80, {0xc, 0x40200, 0x0, {0x7ffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x6, 0x5, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1010000, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=r1, @ANYBLOB="b72a6c08f974da438fa5653dbc40d1c55b7dedbff9e024abcb", @ANYRESDEC, @ANYBLOB="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", @ANYRESDEC=r6, @ANYBLOB=',\x00']) write$FUSE_ATTR(r0, 0x0, 0xfc92) 2.268272074s ago: executing program 5 (id=2952): openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa14c31ed56ad59300", 0x23}, 0x48, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd62f}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xc3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3f, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0xc) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0) keyctl$clear(0x7, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, &(0x7f00000005c0)="cf893a27cf870237524bb6a98b187b682889534afc06078db0d8444d4a947c2ec298409ee8aa9a304db506b368c45120cec349dabd0e2e91a35e14dad2723a2004d68e6ec19ebfa9dae82b3d733c77a82605442afaf5a70ac7977bef8a91f8dc1811d0806ee44e5179c41e5d1e6a6739f5f26abfbcc7faf677bf40df316e9ba3bdcb6d9824f3523789e15b1faeedaeb5fa947caab3c4e25f04b40567df5669851f3f65f153770c933440cf4b05de2a8b2aa2abfc0909b7071300e50307bfea8c8d78", &(0x7f00000006c0)="b3ff0cb1dbb27555fd1685962fb6243ae4af8ca28b13982cde21e67f00983937b668399084eb57212c56a8a82a3295b05edb3eadf87e2f") socket$inet6(0xa, 0x2, 0x3a) socket$unix(0x1, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = fanotify_init(0x2, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x4) read$FUSE(r6, &(0x7f0000000b00)={0x2020}, 0x2020) 2.176231041s ago: executing program 0 (id=2953): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000100)={0x40, 0xa, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)='- 1 0 0', 0x7) 1.435740908s ago: executing program 3 (id=2954): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = syz_usb_connect(0x3, 0x51, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0x0, 0x0, 0x40, 0x6b9, 0x4061, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x3, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x81, 0x3, 0x10, 0x10}}]}}, {{0x9, 0x4, 0x1, 0x0, 0x0, 0xff}}, {{0x9, 0x4, 0x1, 0x1, 0x2, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x87, 0x2, 0x200}}, {{0x9, 0x5, 0x7, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x40, 0x12, 0x1, '\x00'}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1e8, &(0x7f0000000440)={[{0x12, 0x4e00, "776caa2998d5d96719d990106e59b6e935a6"}, {0x5a, 0x4e00, "6697dbf68174c5b5d096ffa3a635a2290d57ef8c70d785cbdc902236a6d7d5828b6332110bef53b6531956cfe983d359c6e76d4ed071f001b1d39b37489400dd7e337b845314533a864048708ff2d8409512700bb90717634410"}, {0xc2, 0x4e00, "4346dc432946fde39d7f076be692b2cd1fd538989e4033d6452edf7975a142188889c74b4d34c3cefe81caaa6a34ce1042840aac955dbdfd1e920f21503b010c5432dabb70d0703125c51827ff2eb65851592716160c4cc0ab2cfe9150d843da9942fb13058a607bc1f4f454986dbb31483f6072c8ec0daffc0f81e3857ccef9b1bfaa9e3626d043d0e1d18605bb2d0ac469c736e7f6d990777f4a249800dcf20b2d8479fe8f56de09298caaacb156b4a7a1a79b8fdf7a0c8d63ebe08688923b69a8"}, {0x43, 0x4e00, "a14b4e95e1494fbbf6dfaaf8757ce7848fb5c6c9c5b1434f0dfd96fb926f5138a1d58f996ba13294d866689f415d88eec1212e2fbf1f882e6e53828ceac1497001425d"}, {0x5a, 0x4e00, "30a0c50c2baafd8ca3dcebb506d573a43ab3b3ac0bea370c88a7de4dd219b3b0ac25b86c62856940252a452b9fbaae20aad9fbe97d0e0c2b70aeb8ee859c17b0a485d458c56ef628c28deb57c7f1ceced74bef15f221ab17e175"}]}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3c, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x800, 0xc9) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x4000001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x28, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_FAMILY={0xfffffffffffffed6, 0x5, 0xb05f601865bd5936}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x2008080) write(r2, &(0x7f0000000000)='3', 0x4e) r6 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r6, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) syz_usb_connect(0x4, 0x53f, &(0x7f0000000740)={{0x12, 0x1, 0x201, 0x7a, 0x9e, 0x1a, 0x8, 0x19d2, 0x1251, 0xee4d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x52d, 0x4, 0x5, 0x6, 0x90, 0x81, "", [{{0x9, 0x4, 0x3f, 0x1, 0x4, 0xff, 0xff, 0xff, 0xb5, [@hid_hid={0x9, 0x21, 0x4, 0xa2, 0x1, {0x22, 0x51c}}, @uac_control={{0xa, 0x24, 0x1, 0x1, 0x2b}, [@feature_unit={0xd, 0x24, 0x6, 0x4, 0x5, 0x3, [0x2, 0x7, 0x2], 0x5}, @selector_unit={0x8, 0x24, 0x5, 0x3, 0x71, "24dc70"}, @extension_unit={0xc, 0x24, 0x8, 0x2, 0x8001, 0xa6, "70dd58b4a8"}]}], [{{0x9, 0x5, 0xd, 0x3, 0x40c, 0x1, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0xfa, 0x6, 0x2, [@generic={0x69, 0xf, "6e81d945d99c9105dfe34e3dbddc1a6216bac162ccd312d02daaa2c87216ccd6591c8fc0ea2b14e17b5387cd87f9d462412e06419098b7bce3d900267043a2751f326270852a892428cf6d23ed36ac2e55888b13de641ff547f2ba51cfd5d63b6ecef938eb3d7d"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x6}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x7f, 0x17, 0x4}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x3, 0x5, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x31, 0xffff}]}}]}}, {{0x9, 0x4, 0xe5, 0x5, 0xa, 0x27, 0xb7, 0x72, 0x20, [], [{{0x9, 0x5, 0x80, 0x10, 0x20, 0x1, 0x93, 0x6, [@generic={0xa4, 0x23, "2c8a1a39400303ae6dcb23cb0d6b798685ac1546dd0c138aca24268baa8e2f9cb8dfb7f27b5a40cd9c853a4bc52920f2a6385b7980844c870a3b975359f0c23272cbb3cafcfa773dc538338c7f97a61971b811a21ec446f1d5e00be0ce89a0943779d9c2b505a1b21ac45abd0e6886834a8c7b421e0800b8ea474e9025225b9ada729ad19b1a40b9f4536032dcb4dc2029cae8d79b50eb76648c17ada33fd68b9beb"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x54, 0x3}]}}, {{0x9, 0x5, 0x7, 0x3, 0x10, 0x91, 0x0, 0x7}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x3, 0x5, 0xc}}, {{0x9, 0x5, 0x1, 0x1, 0x40, 0x7, 0x80, 0x1, [@generic={0x9b, 0x24, "f7951d63b1e15c6316eb86aca5208b2ab02803895881f23f92d582a27c8b874580c89750bff6f32534cccdc414be4660e565f98650fcb9d0280b1315ddb73ccfb1cf31cca563b5330f791293747affb9b2f38024f80a208e67e6ebc41cc65e7052dcef7c77686d852d948767b130f99a1763d45eaec9ebe4fe29c9e4adf0e393afd5dcffa25cd052ac0f440cdddb4d64cb40080afdc070a0ee"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x100}]}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0x0, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x2}, @generic={0x58, 0x1, "fd2f0d6fa1e432186da04eaae5d28821f934edf15efd399a6c02febb14c825914f1518c6e85def45ccd825d4f9910af392337bec68a23f20c277fc31b0627015abd33f22c8899dbaed6f32a0f8050858905d1a05a8a0"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x8, 0x3, 0x9, 0x7d}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x2, 0x9d, 0x40, [@generic={0x2f, 0x22, "acce7fc91ea49a3e9c0ad0bb61bc25de79abb624ff9fc9eb31c2d6e2941e2064c23b9dd724348282d2e48c8613"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x5, 0xff, 0xcb, [@generic={0x2, 0x21}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x6, 0x4, 0x98}}, {{0x9, 0x5, 0xe, 0x1, 0x20, 0x8, 0xe, 0xe6}}]}}, {{0x9, 0x4, 0x10, 0x9, 0x3, 0xad, 0x9f, 0x37, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x1a}, [@extension_unit={0xa, 0x24, 0x8, 0x5, 0x5, 0x1, "86550f"}, @mixer_unit={0x6, 0x24, 0x4, 0x2, 0x4, '_'}]}], [{{0x9, 0x5, 0x80, 0x1, 0x218, 0xc, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x1ff}, @generic={0x16, 0x23, "e1b2b1a5af36c29c5441a260d87dc326ca961231"}]}}, {{0x9, 0x5, 0x83, 0x10, 0x10, 0x4, 0xba, 0x68, [@generic={0x80, 0x30, "b7ca5cb07fca7fd17a0f3d7487050a62af535633dc7bd2f1c0e897b13abedd7482410c9c0f33b5e20934286b9a36c515c53ba30ea03e3463f7e6ba6f7522745d0ef0a9f1400e37b937023305a14b50c34381f21b489535b16f2305335279f294f39d14cf6a86d31700540fc0fcc78b15f6f6628090083c226710e9c21d88"}, @generic={0x12, 0x1, "5032477c1d21ecf6522f1c2334f81b8c"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x3df, 0xbc, 0x9, 0x99, [@generic={0x2a, 0xd, "1517156ceaceed8d0d3bd840b7b4a4e0fabdeddb5a00b577342be33906fadb284bbacb5a1345a7f1"}]}}]}}, {{0x9, 0x4, 0xab, 0x45, 0x6, 0xa2, 0x20, 0xec, 0x4, [], [{{0x9, 0x5, 0xf, 0x0, 0x400, 0x78, 0xfe, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xec, 0xec63}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x1}]}}, {{0x9, 0x5, 0xb, 0x4, 0x200, 0x2c, 0x4, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf4, 0xf99}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x6}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x81, 0xfd, 0x1, [@generic={0x37, 0xe, "fdb77d97096ecc615eed2f9c96e9e01bb4e8b88ce543148d8693ab639c111c9c09b9d68bbcb6c920a5bf5eeb9f728ecb8e4f2b8d85"}, @generic={0x63, 0x30, "11d80d5f05363f92031cd0e6769f9f6f8d804a040697e6618cabc67af0786e9e4366bb2434f3bb77afc82e5da7586f0c4b429a480b7c113b01d4ae8885f21912860b7a4d60928cc297ae231b179d28a25097892d6ed544084b34721b250a86fabc"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x6, 0x5, 0x9}}, {{0x9, 0x5, 0x7, 0x1, 0x8, 0xf, 0x7f, 0x6}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x9, 0x2, 0x8}}]}}]}}]}}, &(0x7f0000001340)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x110, 0x4, 0x4, 0x5, 0x40, 0x3}, 0x92, &(0x7f0000000e80)={0x5, 0xf, 0x92, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "67260642f7d8a61f489c86027806ba4e"}, @ssp_cap={0xc, 0x10, 0xa, 0xc7, 0x0, 0xd, 0x0, 0x400}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "fe4090f72d53e9172b1dd86428df3e1f"}, @generic={0x53, 0x10, 0x2, "e49649ccd0cb1700d7e4e77ec2dd11ad333d8b51f1155b55c1a3d2e5cfdd980b0ba4e6cea83b0e003e599d534af22e911a1c22397944839582ad0520a0777082cee6c3e200633a2d00482cc87140d9f0"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x446}}, {0xbf, &(0x7f0000001140)=@string={0xbf, 0x3, "b2a3b71f6b9c7a65e63b0297c6dcd4e38c9230b0d9041225121d8183899b98c874010e17dc918b8b77279f5250448eec4388595cbc4075f32ee93b17a3bcc10d4ee7669c2189d9fe9c5c67e4febf7dc967fe9e0f5bfd6ad23eadfb7e4bc42f40f50ee7cb864c324f98d5b48698cfb970554263b3232a1a5651d7afb9fcd666fd3b2b5605af69f3e818e51d9f41d59874d3fec243cfac58c08fd70f3d83e70cb466e26217da2b36028d4a872391002dd54c70eac98021742cdd91b9c880"}}, {0x57, &(0x7f0000001200)=@string={0x57, 0x3, "18d1ec00dce2acb6eac3050632036e05340da8be41c4fd3f3ec34b2d0759b48232f4ff891fa1ab1a1d219bb638941432c35de15196499e933d1feda0b2aacbc9865f38d1bd4bc495bae519c3aed8e5cf8922845732"}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000001300)=@lang_id={0x4}}]}) connect$rxrpc(r6, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) r7 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) write$selinux_load(r7, &(0x7f0000000000)=ANY=[], 0xffaf) lremovexattr(0x0, 0x0) 1.004027619s ago: executing program 0 (id=2955): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x10040003}, 0x8008880) r0 = socket$netlink(0x10, 0x3, 0xc) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 975.990644ms ago: executing program 7 (id=2956): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c696661"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000706"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000280)=""/34, 0x22}, {&(0x7f00000001c0)=""/112, 0x70}, {&(0x7f0000000500)=""/145, 0x91}, {&(0x7f0000001880)=""/4101, 0x1005}, {&(0x7f0000001780)=""/69, 0x45}], 0x5}, 0x20) 296.099567ms ago: executing program 8 (id=2957): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x8081, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r0, 0x40480923, &(0x7f0000000380)="0000004a0000000004000002000000020000000000000001000000007c") ioctl(r0, 0x40140921, &(0x7f0000000420)="0100000001") 210.862935ms ago: executing program 7 (id=2958): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) 123.47291ms ago: executing program 8 (id=2959): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r5 = epoll_create(0x3ba) epoll_wait(r5, &(0x7f0000000080), 0x0, 0xfffffffc) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x10000001}) epoll_pwait2(r5, &(0x7f0000000300)=[{}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r4) fchdir(0xffffffffffffffff) r6 = gettid() r7 = getpgid(r6) tgkill(r6, r7, 0x9) 112.573474ms ago: executing program 7 (id=2960): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4004) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 0s ago: executing program 7 (id=2961): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x8000, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000102010200"], 0x58}}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r1, &(0x7f0000001f00)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a37349907a9629c8e7ed11c31f288d48baed9dfb44bd33dba6bd292aad455d53d0c6f09126918f54e663d71c3506756e3eca40c1c7d2", 0xc5) sendto$inet(r1, &(0x7f0000000140)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d2e3b", 0xfe2b, 0x10000485, 0x0, 0xfffffffffffffe91) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) kernel console output (not intermixed with test programs): 26/2026 [ 367.587266][T12054] Call Trace: [ 367.587269][T12054] [ 367.587275][T12054] dump_stack_lvl+0x100/0x190 [ 367.587294][T12054] should_fail_ex.cold+0x5/0xa [ 367.587309][T12054] should_failslab+0xc2/0x120 [ 367.587324][T12054] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 367.587338][T12054] ? sock_alloc_inode+0x26/0x2c0 [ 367.587354][T12054] ? __pfx_sock_alloc_inode+0x10/0x10 [ 367.587370][T12054] sock_alloc_inode+0x26/0x2c0 [ 367.587384][T12054] ? __pfx_sock_alloc_inode+0x10/0x10 [ 367.587398][T12054] alloc_inode+0x68/0x250 [ 367.587409][T12054] sock_alloc+0x44/0x280 [ 367.587422][T12054] ? security_socket_create+0x7f/0x250 [ 367.587441][T12054] __sock_create+0xc2/0x860 [ 367.587459][T12054] __sys_socket+0x14d/0x260 [ 367.587469][T12054] ? __pfx___sys_socket+0x10/0x10 [ 367.587483][T12054] __x64_sys_socket+0x72/0xb0 [ 367.587492][T12054] ? lockdep_hardirqs_on+0x7d/0x110 [ 367.587514][T12054] do_syscall_64+0x123/0x790 [ 367.587531][T12054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.587543][T12054] RIP: 0033:0x7f897ab9e159 [ 367.587553][T12054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.587564][T12054] RSP: 002b:00007f897bb52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 367.587576][T12054] RAX: ffffffffffffffda RBX: 00007f897ae25fa0 RCX: 00007f897ab9e159 [ 367.587584][T12054] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 367.587591][T12054] RBP: 00007f897ac3503b R08: 0000000000000000 R09: 0000000000000000 [ 367.587598][T12054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.587604][T12054] R13: 00007f897ae26038 R14: 00007f897ae25fa0 R15: 00007ffcc5b47f98 [ 367.587617][T12054] [ 367.587623][T12054] socket: no more sockets [ 370.106534][ T4916] Bluetooth: hci5: connection err: -111 [ 371.843650][T12090] siw: device registration error -23 [ 372.599930][T12096] Device name cannot be null; rc = [-22] [ 372.944807][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.944836][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 374.535938][T12114] FAULT_INJECTION: forcing a failure. [ 374.535938][T12114] name failslab, interval 1, probability 0, space 0, times 0 [ 374.535958][T12114] CPU: 0 UID: 0 PID: 12114 Comm: syz.5.2267 Tainted: G L syzkaller #0 PREEMPT(full) [ 374.535973][T12114] Tainted: [L]=SOFTLOCKUP [ 374.535977][T12114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 374.535984][T12114] Call Trace: [ 374.535988][T12114] [ 374.535992][T12114] dump_stack_lvl+0x100/0x190 [ 374.536012][T12114] should_fail_ex.cold+0x5/0xa [ 374.536027][T12114] should_failslab+0xc2/0x120 [ 374.536044][T12114] __kmalloc_noprof+0xfc/0x840 [ 374.536056][T12114] ? blk_rq_map_user_iov+0x2a5/0x1440 [ 374.536071][T12114] blk_rq_map_user_iov+0x2a5/0x1440 [ 374.536082][T12114] ? blk_mq_rq_ctx_init.isra.0+0x67c/0x820 [ 374.536103][T12114] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 374.536115][T12114] ? rcu_is_watching+0x13/0xc0 [ 374.536130][T12114] ? trace_contention_end+0x126/0x160 [ 374.536143][T12114] ? __mutex_lock+0x26c/0x1bd0 [ 374.536158][T12114] ? sg_common_write.isra.0+0xb79/0x1b90 [ 374.536171][T12114] ? find_held_lock+0x2b/0x80 [ 374.536186][T12114] ? sg_common_write.isra.0+0xe26/0x1b90 [ 374.536198][T12114] ? import_ubuf+0x1b6/0x220 [ 374.536210][T12114] blk_rq_map_user_io+0x1ff/0x230 [ 374.536222][T12114] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 374.536240][T12114] sg_common_write.isra.0+0xf74/0x1b90 [ 374.536258][T12114] ? __pfx_sg_common_write.isra.0+0x10/0x10 [ 374.536277][T12114] sg_write+0x7eb/0xdb0 [ 374.536290][T12114] ? __pfx_sg_write+0x10/0x10 [ 374.536303][T12114] ? __pfx___futex_wait+0x10/0x10 [ 374.536327][T12114] ? bpf_lsm_file_permission+0x9/0x10 [ 374.536341][T12114] ? security_file_permission+0x76/0x210 [ 374.536355][T12114] ? rw_verify_area+0xce/0x6d0 [ 374.536372][T12114] vfs_write+0x2aa/0x1050 [ 374.536383][T12114] ? __pfx_sg_write+0x10/0x10 [ 374.536395][T12114] ? lock_acquire+0x1d1/0x380 [ 374.536406][T12114] ? __fget_files+0x34/0x3d0 [ 374.536425][T12114] ? __pfx_vfs_write+0x10/0x10 [ 374.536435][T12114] ? find_held_lock+0x2b/0x80 [ 374.536449][T12114] ? __fget_files+0x215/0x3d0 [ 374.536463][T12114] ? __fget_files+0x215/0x3d0 [ 374.536479][T12114] ? __fget_files+0x21f/0x3d0 [ 374.536496][T12114] ksys_write+0x12a/0x250 [ 374.536508][T12114] ? __pfx_ksys_write+0x10/0x10 [ 374.536523][T12114] do_syscall_64+0x123/0x790 [ 374.536540][T12114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.536551][T12114] RIP: 0033:0x7fd50519e159 [ 374.536561][T12114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.536571][T12114] RSP: 002b:00007fd5060b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 374.536583][T12114] RAX: ffffffffffffffda RBX: 00007fd505425fa0 RCX: 00007fd50519e159 [ 374.536590][T12114] RDX: 0000000000000103 RSI: 0000200000000040 RDI: 0000000000000004 [ 374.536596][T12114] RBP: 00007fd50523503b R08: 0000000000000000 R09: 0000000000000000 [ 374.536603][T12114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.536609][T12114] R13: 00007fd505426038 R14: 00007fd505425fa0 R15: 00007ffe98ff3b48 [ 374.536622][T12114] [ 375.739680][T12116] siw: device registration error -23 [ 376.023186][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 376.620588][T12123] Device name cannot be null; rc = [-22] [ 376.743281][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 376.745934][ T9] usb 6-1: config 0 descriptor has 1 excess byte, ignoring [ 376.745958][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 376.745970][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 376.750757][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.750771][ T9] usb 6-1: Product: syz [ 376.750779][ T9] usb 6-1: Manufacturer: syz [ 376.750788][ T9] usb 6-1: SerialNumber: syz [ 376.752039][ T9] usb 6-1: config 0 descriptor?? [ 377.045522][T12119] program syz.5.2270 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 377.068573][ T9] usb 6-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 8, bSynchAddress 00 [ 378.019276][ T9] usb 6-1: USB disconnect, device number 2 [ 378.852642][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 381.085006][T12170] gadgetfs: bound to dummy_udc driver [ 381.218812][ T31] audit: type=1800 audit(1789382847.429:671): pid=12175 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2289" name="ep1in-bulk" dev="gadgetfs" ino=31000 res=0 errno=0 [ 381.322814][ T190] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 381.322992][ C0] gadgetfs: connected [ 381.323156][ T190] gadgetfs: disconnected [ 381.432644][T12181] siw: device registration error -23 [ 381.450869][ T31] audit: type=1400 audit(1789382847.659:672): avc: denied { ioctl } for pid=12169 comm="syz.1.2289" path="socket:[31036]" dev="sockfs" ino=31036 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 381.493108][ C0] gadgetfs: connected [ 381.495174][ T190] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 381.495403][ T190] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 381.495422][ T190] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.497536][ C0] gadgetfs: configuration #1 [ 381.759891][T12169] gadgetfs: suspended from state 3 [ 381.759953][T12169] gadgetfs: disconnected [ 381.761173][ T190] usb 1-1: can't set config #1, error -71 [ 381.797604][ T190] usb 1-1: USB disconnect, device number 24 [ 381.953231][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 382.648439][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 382.655174][ T9] usb 4-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 382.658694][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.658708][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 382.701602][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.701616][ T9] usb 4-1: Product: syz [ 382.701624][ T9] usb 4-1: Manufacturer: syz [ 382.701632][ T9] usb 4-1: SerialNumber: syz [ 382.959965][ T9] usb 4-1: unit 6 not found! [ 383.157056][ T9] usb 4-1: USB disconnect, device number 10 [ 383.220795][ T6406] udevd[6406]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 384.756769][ T31] audit: type=1400 audit(1789382850.969:673): avc: denied { write } for pid=12208 comm="syz.0.2305" name="strings" dev="configfs" ino=7982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 387.145171][T12226] sg_write: data in/out 2795/217 bytes for SCSI command 0x0-- guessing data in; [ 387.145171][T12226] program syz.4.2301 not setting count and/or reply_len properly [ 387.327443][T12229] syzkaller0: entered promiscuous mode [ 387.327457][T12229] syzkaller0: entered allmulticast mode [ 388.416418][T12244] NFSD: Failed to start, no listeners configured. [ 388.611447][T12246] md0: Warning: Device ram0 is misaligned [ 388.611477][T12246] md/raid0:md0: too few disks (1 of 124) - aborting! [ 388.611499][T12246] md: pers->run() failed ... [ 391.269183][T12263] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2321'. [ 391.269273][ T31] audit: type=1400 audit(1789382857.479:674): avc: denied { nlmsg_read } for pid=12260 comm="syz.3.2321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 392.405598][ T31] audit: type=1400 audit(1789382858.619:675): avc: denied { append } for pid=12269 comm="syz.4.2320" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 393.871461][ T31] audit: type=1400 audit(1789382860.079:676): avc: denied { read } for pid=12277 comm="syz.0.2325" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 393.871632][ T31] audit: type=1400 audit(1789382860.079:677): avc: denied { open } for pid=12277 comm="syz.0.2325" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 393.933101][ T31] audit: type=1400 audit(1789382860.149:678): avc: denied { ioctl } for pid=12277 comm="syz.0.2325" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 393.938941][T12278] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 394.081978][T12281] xt_HMARK: spi-set and port-set can't be combined [ 394.455113][ T5611] Bluetooth: hci3: connection err: -111 [ 394.753088][T12270] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 394.753225][T12270] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 394.753268][T12270] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 394.755725][T12270] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 394.755815][T12270] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 394.755902][T12270] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 394.755944][T12270] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 394.760462][T12270] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 395.107130][T12296] siw: device registration error -23 [ 396.213407][T12310] siw: device registration error -23 [ 396.417923][T12315] gadgetfs: bound to dummy_udc driver [ 396.554634][ T31] audit: type=1800 audit(1789382862.769:679): pid=12317 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2337" name="ep1in-bulk" dev="gadgetfs" ino=31527 res=0 errno=0 [ 396.654123][ T9] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 396.654303][ C0] gadgetfs: connected [ 396.654380][ T9] gadgetfs: disconnected [ 396.726013][T12314] gadgetfs: suspended from state 2 [ 396.783141][ T5611] Bluetooth: hci5: command 0x0c1a tx timeout [ 396.783164][ T5611] Bluetooth: hci4: command 0x0c1a tx timeout [ 396.783178][ T5611] Bluetooth: hci3: command 0x0c1a tx timeout [ 396.783196][ T5611] Bluetooth: hci2: command 0x0c1a tx timeout [ 396.783208][ T5611] Bluetooth: hci0: command 0x0c1a tx timeout [ 397.007535][ T9] usb 1-1: device not accepting address 25, error -71 [ 397.976954][T12321] syzkaller0: entered promiscuous mode [ 397.976970][T12321] syzkaller0: entered allmulticast mode [ 398.370364][T12328] overlayfs: failed to resolve 'lower1': -2 [ 398.371279][ T31] audit: type=1400 audit(1789382864.579:680): avc: denied { setopt } for pid=12322 comm="syz.4.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 399.233294][ T4916] Bluetooth: hci2: command 0x0c1a tx timeout [ 399.233317][ T4916] Bluetooth: hci5: command 0x0c1a tx timeout [ 399.976181][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 400.124816][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 400.125712][ T9] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 400.129178][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.129201][ T9] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.129215][ T9] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.129227][ T9] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 400.129243][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 400.129259][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.130447][ T9] usb 4-1: config 0 descriptor?? [ 401.218175][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 401.218228][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 401.219422][ T9] usb 4-1: USB disconnect, device number 11 [ 401.263726][ T5611] Bluetooth: hci5: command 0x0c1a tx timeout [ 403.631758][T12377] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2355'. [ 403.806246][T12384] FAULT_INJECTION: forcing a failure. [ 403.806246][T12384] name failslab, interval 1, probability 0, space 0, times 0 [ 403.806267][T12384] CPU: 0 UID: 0 PID: 12384 Comm: syz.1.2358 Tainted: G L syzkaller #0 PREEMPT(full) [ 403.806283][T12384] Tainted: [L]=SOFTLOCKUP [ 403.806287][T12384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 403.806294][T12384] Call Trace: [ 403.806298][T12384] [ 403.806303][T12384] dump_stack_lvl+0x100/0x190 [ 403.806324][T12384] should_fail_ex.cold+0x5/0xa [ 403.806340][T12384] should_failslab+0xc2/0x120 [ 403.806355][T12384] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 403.806370][T12384] ? sock_alloc_inode+0x26/0x2c0 [ 403.806389][T12384] ? __pfx_sock_alloc_inode+0x10/0x10 [ 403.806404][T12384] sock_alloc_inode+0x26/0x2c0 [ 403.806419][T12384] ? __pfx_sock_alloc_inode+0x10/0x10 [ 403.806433][T12384] alloc_inode+0x68/0x250 [ 403.806444][T12384] sock_alloc+0x44/0x280 [ 403.806457][T12384] ? security_socket_create+0x7f/0x250 [ 403.806474][T12384] __sock_create+0xc2/0x860 [ 403.806493][T12384] __sys_socketpair+0x1e4/0x5b0 [ 403.806504][T12384] ? __pfx___sys_socketpair+0x10/0x10 [ 403.806515][T12384] ? xfd_validate_state+0x129/0x190 [ 403.806531][T12384] __x64_sys_socketpair+0x96/0x100 [ 403.806541][T12384] ? lockdep_hardirqs_on+0x7d/0x110 [ 403.806556][T12384] do_syscall_64+0x123/0x790 [ 403.806572][T12384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.806584][T12384] RIP: 0033:0x7fb91cb9f9fa [ 403.806594][T12384] Code: 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.806604][T12384] RSP: 002b:00007fb91dad3f68 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 403.806616][T12384] RAX: ffffffffffffffda RBX: 00007fb91ce25f00 RCX: 00007fb91cb9f9fa [ 403.806623][T12384] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 403.806629][T12384] RBP: 00007fb91cc3503b R08: 0000000000000000 R09: 0000000000000000 [ 403.806636][T12384] R10: 00007fb91dad3f88 R11: 0000000000000246 R12: 0000000000000003 [ 403.806642][T12384] R13: 00007fb91ce26038 R14: 00007fb91ce25fa0 R15: 00007ffd9cdc9ba8 [ 403.806656][T12384] [ 403.806690][T12384] socket: no more sockets [ 405.043923][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 406.008194][ T9] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 406.009176][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.009200][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 406.009215][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 406.009235][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.076809][ T5712] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 406.903712][ T5712] usb 4-1: Using ep0 maxpacket: 32 [ 406.904170][ T5712] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 406.904915][ T5712] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.904936][ T5712] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.904950][ T5712] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.904962][ T5712] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 406.904977][ T5712] usb 4-1: config 0 interface 0 has no altsetting 0 [ 406.904992][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.906372][ T5712] usb 4-1: config 0 descriptor?? [ 407.057377][ T9] cxacru 1-1:1.0: send of cm 0x91 failed (-71) [ 407.057393][ T9] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 407.057400][ T9] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 407.058805][ T9] cxacru 1-1:1.0: probe with driver cxacru failed with error -71 [ 407.114890][ T9] usb 1-1: USB disconnect, device number 27 [ 407.355776][ T5712] usbhid 4-1:0.0: can't add hid device: -71 [ 407.355825][ T5712] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 407.358915][ T5712] usb 4-1: USB disconnect, device number 12 [ 407.618836][T11335] svc: failed to register nfsdv3 RPC service (errno 111). [ 407.631357][T11335] svc: failed to register nfsaclv3 RPC service (errno 111). [ 407.631368][T11335] failed to unregister tcp with rpcbind [ 407.650756][T11335] svc: failed to register nfsdv3 RPC service (errno 97). [ 407.650767][T11335] svc: failed to register nfsaclv3 RPC service (errno 97). [ 407.650774][T11335] failed to unregister tcp with rpcbind [ 408.191150][ T31] audit: type=1800 audit(1789382874.399:681): pid=12428 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2366" name="file1" dev="tmpfs" ino=2390 res=0 errno=0 [ 409.169575][ T5611] Bluetooth: hci0: connection err: -111 [ 409.181308][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2380'. [ 409.483894][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 409.979234][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 409.981461][ T9] usb 4-1: config index 0 descriptor too short (expected 10586, got 58) [ 409.981476][ T9] usb 4-1: config 1 has too many interfaces: 48, using maximum allowed: 32 [ 409.981486][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.981496][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 48 [ 409.981515][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 409.981535][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.046746][ T9] ims_pcu 4-1:1.0: probe with driver ims_pcu failed with error -22 [ 410.095785][T12447] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2381'. [ 410.334775][ T9] usb 4-1: USB disconnect, device number 13 [ 411.081100][T12415] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 412.038917][T12495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2397'. [ 412.112702][ T5720] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 412.263149][ T5720] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 412.263957][ T5720] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 412.263972][ T5720] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 412.263989][ T5720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.268497][ T5720] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 412.285041][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 412.333940][ T5720] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 412.434385][T12497] md0: Warning: Device ram0 is misaligned [ 412.434414][T12497] md/raid0:md0: too few disks (1 of 124) - aborting! [ 412.434435][T12497] md: pers->run() failed ... [ 412.473364][ T9] usb 6-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 412.475299][ T9] usb 6-1: config index 0 descriptor too short (expected 10586, got 58) [ 412.475314][ T9] usb 6-1: config 1 has too many interfaces: 48, using maximum allowed: 32 [ 412.475325][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.475335][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 48 [ 412.475359][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 412.475379][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.615342][ T9] ims_pcu 6-1:1.0: probe with driver ims_pcu failed with error -22 [ 412.752428][T12500] svc: failed to register lockdv1 RPC service (errno 111). [ 412.803884][ T5712] usb 6-1: USB disconnect, device number 3 [ 412.833640][T12485] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 412.833851][T12485] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 412.834047][T12485] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 412.867491][T12500] svc: failed to register nfsdv3 RPC service (errno 111). [ 412.872359][T12500] svc: failed to register nfsaclv3 RPC service (errno 111). [ 412.872370][T12500] failed to unregister tcp with rpcbind [ 412.897031][T12500] svc: failed to register nfsdv3 RPC service (errno 97). [ 412.897045][T12500] svc: failed to register nfsaclv3 RPC service (errno 97). [ 412.897052][T12500] failed to unregister tcp with rpcbind [ 412.938169][T12485] SPCP8x5 ttyUSB0: Set UART format 0x1 failed (error = -32) [ 414.452702][ T5720] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 414.604580][ T5720] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 414.605312][ T5720] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 414.605326][ T5720] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 414.605345][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.653226][ T5720] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 414.656558][ T5720] usb 4-1: SPCP8x5 converter now attached to ttyUSB1 [ 414.877612][ T5712] usb 5-1: USB disconnect, device number 15 [ 414.908073][ T5712] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 414.908339][ T5712] spcp8x5 5-1:1.0: device disconnected [ 415.053810][T12487] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 416.382900][T12546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2415'. [ 416.463281][ T5712] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 416.533676][T12546] syz.0.2415 (12546) used greatest stack depth: 18864 bytes left [ 416.994524][T12550] Device name cannot be null; rc = [-22] [ 417.034713][ T5712] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 417.035441][ T5712] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 417.035455][ T5712] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 417.035473][ T5712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.041939][ T5712] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 417.486886][ T5712] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 417.551072][ T5712] usb 4-1: USB disconnect, device number 14 [ 417.591348][ T5712] SPCP8x5 ttyUSB1: SPCP8x5 converter now disconnected from ttyUSB1 [ 417.611882][ T5712] spcp8x5 4-1:1.0: device disconnected [ 417.785477][ T9] usb 5-1: USB disconnect, device number 16 [ 417.836218][ T9] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 417.836480][ T9] spcp8x5 5-1:1.0: device disconnected [ 417.900432][T12553] xt_HMARK: spi-set and port-set can't be combined [ 418.785059][ T31] audit: type=1400 audit(1789382884.939:682): avc: denied { read } for pid=12565 comm="syz.5.2422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 418.938006][T12579] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 419.382784][ T190] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 419.544369][ T190] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 419.545092][ T190] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 419.545793][ T190] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 419.548981][ T190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.548995][ T190] usb 2-1: Product: syz [ 419.549004][ T190] usb 2-1: Manufacturer: syz [ 419.549012][ T190] usb 2-1: SerialNumber: syz [ 419.589035][ T190] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 419.629008][ T190] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 419.642263][ T190] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 421.083212][T12607] md: array md0 already has disks! [ 421.113593][T12607] md: could not open device unknown-block(1,0). [ 421.113619][T12607] md: error, md_import_device() returned -16 [ 421.203865][T12607] md0: Warning: Device ram0 is misaligned [ 421.203915][T12607] md/raid0:md0: too few disks (1 of 124) - aborting! [ 421.203952][T12607] md: pers->run() failed ... [ 421.529369][T12621] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2436'. [ 421.530264][T12611] xt_HMARK: spi-set and port-set can't be combined [ 421.838259][T12572] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 422.053993][ T190] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 422.113409][T12647] netlink: 'syz.0.2446': attribute type 1 has an invalid length. [ 422.162238][T12647] 8021q: adding VLAN 0 to HW filter on device bond1 [ 422.190277][ T5712] usb 2-1: USB disconnect, device number 9 [ 422.275772][ T190] usb 4-1: Using ep0 maxpacket: 16 [ 422.276177][ T190] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 0.40 [ 422.276885][ T190] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.276909][ T190] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 422.279700][ T190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.279713][ T190] usb 4-1: Product: syz [ 422.279721][ T190] usb 4-1: Manufacturer: syz [ 422.279729][ T190] usb 4-1: SerialNumber: syz [ 422.450963][ T31] audit: type=1326 audit(1789382888.659:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12645 comm="syz.0.2446" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f30efd9e159 code=0x0 [ 422.505639][ T5712] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 422.526915][ T5712] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 422.547080][ T5712] ti_usb_3410_5052 2-1:2.0: device disconnected [ 422.662051][T12654] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2448'. [ 422.662064][T12654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2448'. [ 422.814809][T12637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2441'. [ 422.933294][T12666] md: array md0 already has disks! [ 422.953167][T12666] md: could not open device unknown-block(1,0). [ 422.953202][T12666] md: error, md_import_device() returned -16 [ 423.102003][T12666] md0: Warning: Device ram0 is misaligned [ 423.102047][T12666] md/raid0:md0: too few disks (1 of 124) - aborting! [ 423.102069][T12666] md: pers->run() failed ... [ 423.365894][ T190] usb 4-1: USB disconnect, device number 15 [ 423.439127][ T6406] udevd[6406]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 423.633605][T12678] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 423.917859][T12680] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 423.924169][ T5711] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 424.093162][ T5711] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 424.093995][ T5711] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 424.094755][ T5711] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 424.096332][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.096344][ T5711] usb 2-1: Product: syz [ 424.096351][ T5711] usb 2-1: Manufacturer: syz [ 424.096360][ T5711] usb 2-1: SerialNumber: syz [ 424.102223][ T5711] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 424.171170][ T5711] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 424.181637][ T5711] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 424.182804][ T190] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 424.346353][ T190] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 424.347173][ T190] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 424.347933][ T190] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 424.349771][ T190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.349783][ T190] usb 1-1: Product: syz [ 424.349792][ T190] usb 1-1: Manufacturer: syz [ 424.349800][ T190] usb 1-1: SerialNumber: syz [ 424.414518][ T190] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 424.417555][ T190] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB2 [ 424.422392][ T190] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB3 [ 424.569553][T12687] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2462'. [ 424.569567][T12687] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2462'. [ 427.000964][ T31] audit: type=1400 audit(1789382893.169:684): avc: denied { ioctl } for pid=12711 comm="syz.4.2471" path="socket:[33127]" dev="sockfs" ino=33127 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 427.391798][ T190] usb 2-1: USB disconnect, device number 10 [ 427.410934][ T5711] usb 1-1: USB disconnect, device number 28 [ 427.429341][ T190] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 427.469070][ T5711] ti_usb_3410_5052_2 ttyUSB2: TI USB 5052 2 port adapter converter now disconnected from ttyUSB2 [ 427.500645][ T5711] ti_usb_3410_5052_2 ttyUSB3: TI USB 5052 2 port adapter converter now disconnected from ttyUSB3 [ 427.501053][ T5711] ti_usb_3410_5052 1-1:2.0: device disconnected [ 427.526817][ T190] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 427.527211][ T190] ti_usb_3410_5052 2-1:2.0: device disconnected [ 428.942820][T12743] md: array md0 already has disks! [ 428.966197][T12743] md: could not open device unknown-block(1,0). [ 428.966227][T12743] md: error, md_import_device() returned -16 [ 429.012204][T12743] md: personality for level ra is not loaded! [ 430.883251][T12763] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2488'. [ 431.099663][T12771] gadgetfs: bound to dummy_udc driver [ 431.224113][T12750] netlink: 'syz.3.2484': attribute type 10 has an invalid length. [ 431.242448][ T31] audit: type=1800 audit(1789382897.449:685): pid=12779 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2491" name="ep1in-bulk" dev="gadgetfs" ino=33338 res=0 errno=0 [ 431.287639][T12776] syzkaller1: entered promiscuous mode [ 431.287652][T12776] syzkaller1: entered allmulticast mode [ 431.866249][T12778] Device name cannot be null; rc = [-22] [ 431.974850][ T5711] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 431.975028][ C0] gadgetfs: connected [ 431.975200][ T5711] gadgetfs: disconnected [ 432.122936][ C0] gadgetfs: connected [ 432.128377][ T5711] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 432.128600][ T5711] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 432.128620][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.171545][ C0] gadgetfs: configuration #1 [ 432.193964][T12769] gadgetfs: suspended from state 3 [ 432.194089][ T5711] usb 1-1: can't set config #1, error -71 [ 432.195190][T12769] gadgetfs: disconnected [ 432.200586][ T5711] usb 1-1: USB disconnect, device number 29 [ 434.256493][T12791] overlayfs: failed to resolve 'lower1': -2 [ 434.387057][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.387087][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 437.101920][T12814] gadgetfs: bound to dummy_udc driver [ 437.216468][ T31] audit: type=1800 audit(1789382903.429:686): pid=12818 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2506" name="ep1in-bulk" dev="gadgetfs" ino=33515 res=0 errno=0 [ 437.332736][ T9] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 437.332923][ C0] gadgetfs: connected [ 437.333054][ T9] gadgetfs: disconnected [ 438.133371][T12823] Device name cannot be null; rc = [-22] [ 438.557638][T12828] netlink: 'syz.3.2511': attribute type 10 has an invalid length. [ 439.521379][ T5611] Bluetooth: hci5: connection err: -111 [ 440.403383][T12843] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2515'. [ 441.221846][T12848] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 441.806785][ T5711] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 442.044752][T12853] gadgetfs: bound to dummy_udc driver [ 442.153631][ T5711] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 442.154382][ T5711] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 442.155087][ T5711] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 442.156469][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.156482][ T5711] usb 4-1: Product: syz [ 442.156489][ T5711] usb 4-1: Manufacturer: syz [ 442.156497][ T5711] usb 4-1: SerialNumber: syz [ 442.161606][ T5711] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 442.231847][ T31] audit: type=1800 audit(1789382908.439:687): pid=12855 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2519" name="ep1in-bulk" dev="gadgetfs" ino=33667 res=0 errno=0 [ 442.258308][ T5711] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 442.261270][ T5711] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 442.282956][ T9] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 442.283130][ C0] gadgetfs: connected [ 442.283357][ T9] gadgetfs: disconnected [ 442.457972][ C0] gadgetfs: connected [ 442.475186][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 442.511293][ T9] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 442.511316][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.904479][ C0] gadgetfs: configuration #1 [ 444.416453][T12861] Device name cannot be null; rc = [-22] [ 444.500357][ T5720] usb 4-1: USB disconnect, device number 16 [ 444.535471][ T5720] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 444.553991][ T5720] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 444.554414][ T5720] ti_usb_3410_5052 4-1:2.0: device disconnected [ 445.096242][T12837] Bluetooth: hci4: connection err: -111 [ 445.161179][T12852] gadgetfs: suspended from state 3 [ 445.161248][T12852] gadgetfs: disconnected [ 445.162481][ T9] usb 1-1: can't set config #1, error -71 [ 445.179848][ T9] usb 1-1: USB disconnect, device number 31 [ 445.437165][T12876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2526'. [ 446.135999][T12878] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2527'. [ 446.742791][T12891] md: array md0 already has disks! [ 446.763035][T12891] md: could not open device unknown-block(1,0). [ 446.763061][T12891] md: error, md_import_device() returned -16 [ 447.264081][T12891] md: personality for level ra is not loaded! [ 448.019130][T12900] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 449.046062][T12912] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 449.195016][T12915] gadgetfs: bound to dummy_udc driver [ 449.223185][T12918] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2543'. [ 449.308237][ T31] audit: type=1800 audit(1789382915.519:688): pid=12922 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2535" name="ep1in-bulk" dev="gadgetfs" ino=33927 res=0 errno=0 [ 449.831690][T12927] fuse: Bad value for 'fd' [ 449.862757][ T5720] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 449.863870][ C0] gadgetfs: connected [ 449.863956][ T5720] gadgetfs: disconnected [ 449.900058][ T4916] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 449.914062][ T4916] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 449.914556][ T4916] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 449.914908][ T4916] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 449.915803][ T4916] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 450.013468][ C0] gadgetfs: connected [ 450.016622][ T5720] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 450.017014][ T5720] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 450.017034][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.018500][ C0] gadgetfs: configuration #1 [ 450.921219][T12943] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 450.921237][T12943] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 450.921976][T12943] vhci_hcd vhci_hcd.0: Device attached [ 450.941284][T12945] vhci_hcd: connection closed [ 450.950935][T11803] vhci_hcd vhci_hcd.3: stop threads [ 450.950950][T11803] vhci_hcd vhci_hcd.3: release socket [ 450.950959][T11803] vhci_hcd vhci_hcd.3: disconnect device [ 451.030194][T12922] gadgetfs: suspended from state 3 [ 451.030278][T12922] gadgetfs: disconnected [ 451.031416][ T5720] usb 1-1: can't set config #1, error -71 [ 451.064539][ T5720] usb 1-1: USB disconnect, device number 32 [ 451.290594][T11843] nvmet: Created nvm controller 13 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:cc90a696-1e0a-4405-a155-5c893c8c2d34. [ 451.292423][T12951] nvme nvme12: creating 1 I/O queues. [ 451.314456][T12951] nvme nvme12: new ctrl: "testnqn" [ 451.409074][T12928] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.409114][T12928] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.409258][T12928] bridge_slave_0: entered allmulticast mode [ 451.421158][T12837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 451.433218][T12837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 451.458941][T12837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 451.459302][T12837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 451.459532][T12837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 451.462885][T12928] bridge_slave_0: entered promiscuous mode [ 451.463925][T12928] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.463964][T12928] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.464014][T12928] bridge_slave_1: entered allmulticast mode [ 451.540473][T12928] bridge_slave_1: entered promiscuous mode [ 451.610072][T12960] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2551'. [ 451.631099][T12928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.647660][T12928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.691017][T12928] team0: Port device team_slave_0 added [ 451.716294][T12928] team0: Port device team_slave_1 added [ 451.762877][T12928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.762886][T12928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.762899][T12928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.767022][T12928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.767030][T12928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.767043][T12928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.011354][T12837] Bluetooth: hci1: command tx timeout [ 452.314639][ T5720] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 452.561479][ T5720] usb 6-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 452.603678][ T5720] usb 6-1: config index 0 descriptor too short (expected 10586, got 58) [ 452.603694][ T5720] usb 6-1: config 1 has too many interfaces: 48, using maximum allowed: 32 [ 452.603706][ T5720] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.603716][ T5720] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 48 [ 452.603743][ T5720] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 452.603764][ T5720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.715087][ T5720] ims_pcu 6-1:1.0: probe with driver ims_pcu failed with error -22 [ 452.801247][T12928] hsr_slave_0: entered promiscuous mode [ 452.802464][T12928] hsr_slave_1: entered promiscuous mode [ 452.817432][T12928] debugfs: 'hsr0' already exists in 'hsr' [ 452.817444][T12928] Cannot create hsr debugfs directory [ 452.890268][T12971] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2554'. [ 453.035202][ T5711] usb 6-1: USB disconnect, device number 4 [ 453.618545][T12837] Bluetooth: hci6: command tx timeout [ 454.023755][T12928] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 454.028580][T12928] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 454.057678][T12928] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 454.062118][T12928] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 454.063124][T12837] Bluetooth: hci1: command tx timeout [ 454.092329][T12928] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 454.107993][T12928] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 454.154182][T12928] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 454.161533][T12928] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 454.443031][T12928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.542419][T12837] Bluetooth: hci5: connection err: -111 [ 454.639347][T12928] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.732771][T12956] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.732813][T12956] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.732865][T12956] bridge_slave_0: entered allmulticast mode [ 454.737227][T12956] bridge_slave_0: entered promiscuous mode [ 454.770789][T11803] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.770833][T11803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.806866][T12956] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.806905][T12956] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.806966][T12956] bridge_slave_1: entered allmulticast mode [ 454.807652][T12956] bridge_slave_1: entered promiscuous mode [ 454.887447][T11843] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.887491][T11843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.960288][T12956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.985575][T12956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.074790][T12956] team0: Port device team_slave_0 added [ 455.080412][T12956] team0: Port device team_slave_1 added [ 455.220161][T12956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.220171][T12956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.220183][T12956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.221710][T12956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.221717][T12956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.221730][T12956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.933946][T12837] Bluetooth: hci6: command tx timeout [ 456.143527][T12837] Bluetooth: hci1: command tx timeout [ 456.186284][T12956] hsr_slave_0: entered promiscuous mode [ 456.191669][T12956] hsr_slave_1: entered promiscuous mode [ 456.191944][T12956] debugfs: 'hsr0' already exists in 'hsr' [ 456.191954][T12956] Cannot create hsr debugfs directory [ 456.421097][T13029] overlayfs: failed to resolve 'lower1': -2 [ 456.493077][ T5720] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 456.643026][ T5720] usb 4-1: Using ep0 maxpacket: 16 [ 456.643823][ T5720] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 0.40 [ 456.645482][ T5720] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 456.645495][ T5720] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 456.647569][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.647583][ T5720] usb 4-1: Product: syz [ 456.647591][ T5720] usb 4-1: Manufacturer: syz [ 456.647599][ T5720] usb 4-1: SerialNumber: syz [ 456.881188][T12956] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 456.897116][T12956] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 456.899143][T12956] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 456.902273][T12956] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 456.927045][T12956] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 456.945832][T12956] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 456.947060][T12956] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 456.951926][T13039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2564'. [ 456.952152][T12956] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 457.051705][T12928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.100856][T12956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.163105][ T5711] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 457.226683][T12956] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.232513][T11803] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.232555][T11803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.272017][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.272059][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.333276][ T5711] usb 6-1: Using ep0 maxpacket: 8 [ 457.333813][ T5711] usb 6-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 457.334816][ T5711] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 457.334829][ T5711] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 457.336687][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.336701][ T5711] usb 6-1: Product: syz [ 457.336710][ T5711] usb 6-1: Manufacturer: syz [ 457.336718][ T5711] usb 6-1: SerialNumber: syz [ 457.520608][ T5720] usb 4-1: USB disconnect, device number 17 [ 458.245565][T12837] Bluetooth: hci6: command tx timeout [ 458.245588][T12837] Bluetooth: hci1: command tx timeout [ 458.321309][ T5711] usb 6-1: unit 6 not found! [ 458.321325][ T5711] usb 6-1: unit 4 not found! [ 458.351354][ T6406] udevd[6406]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 458.426642][ T5711] usb 6-1: USB disconnect, device number 5 [ 458.485460][ T6406] udevd[6406]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 458.601888][T12928] veth0_vlan: entered promiscuous mode [ 458.620642][T12928] veth1_vlan: entered promiscuous mode [ 458.664400][T12928] veth0_macvtap: entered promiscuous mode [ 458.671500][T12928] veth1_macvtap: entered promiscuous mode [ 458.715371][T12928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.731653][T12928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.773307][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.773368][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.773386][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.773403][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.976415][T11843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.976427][T11843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.086569][T11843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.086580][T11843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.272475][T12956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.830481][ T31] audit: type=1400 audit(1789382926.039:689): avc: denied { write } for pid=13084 comm="syz.0.2569" name="c.1" dev="configfs" ino=7985 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 459.830510][ T31] audit: type=1400 audit(1789382926.039:690): avc: denied { create } for pid=13084 comm="syz.0.2569" name="uac2.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 459.830536][ T31] audit: type=1400 audit(1789382926.039:691): avc: denied { write } for pid=13084 comm="syz.0.2569" name="c.1" dev="configfs" ino=7985 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 460.234671][T12956] veth0_vlan: entered promiscuous mode [ 460.261592][T12956] veth1_vlan: entered promiscuous mode [ 460.287174][T13092] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 460.302878][ T4916] Bluetooth: hci6: command tx timeout [ 460.327935][T12956] veth0_macvtap: entered promiscuous mode [ 460.332586][T12956] veth1_macvtap: entered promiscuous mode [ 460.376540][T12956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.408796][T12956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.443805][T11843] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.444029][T11843] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.444048][T11843] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.444065][T11843] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.687388][T13097] siw: device registration error -23 [ 460.738343][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.738367][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.869939][ T6121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.869952][ T6121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.087553][T13108] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 462.087642][T13108] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 462.087709][T13108] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 462.087769][T13108] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 462.087844][T13108] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 462.087904][T13108] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 462.087931][T13108] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 462.141783][T13108] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 462.163164][T13108] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 462.165791][T13108] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 462.201787][T13108] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 462.502741][ T5602] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 462.753240][ T5602] usb 8-1: Using ep0 maxpacket: 16 [ 463.090172][ T5602] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 0.40 [ 463.129830][ T5602] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.129845][ T5602] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 463.153173][ T5602] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.153188][ T5602] usb 8-1: Product: syz [ 463.153196][ T5602] usb 8-1: Manufacturer: syz [ 463.153204][ T5602] usb 8-1: SerialNumber: syz [ 463.309590][T13121] syzkaller0: entered promiscuous mode [ 463.309606][T13121] syzkaller0: entered allmulticast mode [ 463.449779][T13112] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2579'. [ 463.993674][ T5602] usb 8-1: USB disconnect, device number 2 [ 464.038755][ T6406] udevd[6406]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 464.069329][ T4916] Bluetooth: hci0: command 0x0c1a tx timeout [ 464.144316][ T5611] Bluetooth: hci1: command 0x0c1a tx timeout [ 464.144343][ T5611] Bluetooth: hci5: command 0x0c1a tx timeout [ 464.144356][ T5611] Bluetooth: hci4: command 0x0c1a tx timeout [ 464.144370][ T5611] Bluetooth: hci3: command 0x0c1a tx timeout [ 464.144411][ T4916] Bluetooth: hci2: command 0x0c1a tx timeout [ 464.225759][ T4916] Bluetooth: hci6: command 0x0c1a tx timeout [ 464.831492][T13136] FAULT_INJECTION: forcing a failure. [ 464.831492][T13136] name failslab, interval 1, probability 0, space 0, times 0 [ 464.831517][T13136] CPU: 0 UID: 0 PID: 13136 Comm: syz.7.2584 Tainted: G L syzkaller #0 PREEMPT(full) [ 464.831534][T13136] Tainted: [L]=SOFTLOCKUP [ 464.831538][T13136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 464.831545][T13136] Call Trace: [ 464.831550][T13136] [ 464.831554][T13136] dump_stack_lvl+0x100/0x190 [ 464.831578][T13136] should_fail_ex.cold+0x5/0xa [ 464.831595][T13136] should_failslab+0xc2/0x120 [ 464.831609][T13136] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 464.831629][T13136] ? __kthread_create_on_node+0x186/0x3f0 [ 464.831646][T13136] kvasprintf+0xbc/0x150 [ 464.831659][T13136] ? __pfx_kvasprintf+0x10/0x10 [ 464.831671][T13136] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 464.831687][T13136] ? __kthread_create_on_node+0xce/0x3f0 [ 464.831703][T13136] ? __pfx_cryptomgr_probe+0x10/0x10 [ 464.831719][T13136] __kthread_create_on_node+0x186/0x3f0 [ 464.831734][T13136] ? __pfx___kthread_create_on_node+0x10/0x10 [ 464.831756][T13136] ? __pfx_cryptomgr_probe+0x10/0x10 [ 464.831774][T13136] kthread_create_on_node+0xc7/0x100 [ 464.831788][T13136] ? __pfx_kthread_create_on_node+0x10/0x10 [ 464.831803][T13136] ? __kasan_kmalloc+0xaa/0xb0 [ 464.831816][T13136] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 464.831832][T13136] ? cryptomgr_notify+0xa4/0xb40 [ 464.831851][T13136] cryptomgr_notify+0x953/0xb40 [ 464.831868][T13136] ? __kasan_kmalloc+0xaa/0xb0 [ 464.831881][T13136] notifier_call_chain+0x99/0x3f0 [ 464.831899][T13136] blocking_notifier_call_chain+0x69/0xa0 [ 464.831916][T13136] crypto_alg_mod_lookup+0x1e2/0x5d0 [ 464.831933][T13136] crypto_alloc_tfm_node+0xd3/0x260 [ 464.831949][T13136] tls_set_sw_offload+0xd4d/0x1670 [ 464.831966][T13136] ? tls_set_device_offload_rx+0x117/0x500 [ 464.831982][T13136] tls_setsockopt+0x1833/0x21e0 [ 464.831996][T13136] ? __pfx_tls_setsockopt+0x10/0x10 [ 464.832013][T13136] ? selinux_socket_setsockopt+0x6a/0x80 [ 464.832025][T13136] ? sock_common_setsockopt+0x2e/0xf0 [ 464.832041][T13136] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 464.832059][T13136] do_sock_setsockopt+0xf3/0x1d0 [ 464.832076][T13136] __sys_setsockopt+0x195/0x220 [ 464.832091][T13136] __x64_sys_setsockopt+0xbd/0x160 [ 464.832103][T13136] ? do_syscall_64+0xae/0x790 [ 464.832118][T13136] ? lockdep_hardirqs_on+0x7d/0x110 [ 464.832134][T13136] do_syscall_64+0x123/0x790 [ 464.832150][T13136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.832161][T13136] RIP: 0033:0x7f053039e159 [ 464.832171][T13136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.832181][T13136] RSP: 002b:00007f053129a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 464.832192][T13136] RAX: ffffffffffffffda RBX: 00007f0530625fa0 RCX: 00007f053039e159 [ 464.832199][T13136] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000005 [ 464.832205][T13136] RBP: 00007f053043503b R08: 0000000000000028 R09: 0000000000000000 [ 464.832212][T13136] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 464.832218][T13136] R13: 00007f0530626038 R14: 00007f0530625fa0 R15: 00007ffd05c8d978 [ 464.832232][T13136] [ 465.306597][T13141] siw: device registration error -23 [ 466.244236][ T4916] Bluetooth: hci1: command 0x0c1a tx timeout [ 466.303452][ T4916] Bluetooth: hci6: command 0x0c1a tx timeout [ 467.364412][T13150] siw: device registration error -23 [ 468.296872][T12837] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 468.304811][T12837] Bluetooth: hci1: command 0x0c1a tx timeout [ 468.320113][T12837] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 468.320565][T12837] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 468.320930][T12837] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 468.321181][T12837] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 468.383286][T12837] Bluetooth: hci6: command 0x0c1a tx timeout [ 469.354219][T13170] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2593'. [ 469.481355][ T6121] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.815707][ T6121] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.837849][T13096] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 469.976324][ T6121] team0: Port device netdevsim1 removed [ 469.982079][ T6121] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.003344][T13096] usb 6-1: Using ep0 maxpacket: 16 [ 470.004205][T13096] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 0.40 [ 470.005264][T13096] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 470.005277][T13096] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 470.008286][T13096] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.008299][T13096] usb 6-1: Product: syz [ 470.008307][T13096] usb 6-1: Manufacturer: syz [ 470.008315][T13096] usb 6-1: SerialNumber: syz [ 470.201482][ T6121] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.383015][T12837] Bluetooth: hci7: command tx timeout [ 471.203342][T13174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2594'. [ 471.316288][T13096] usb 6-1: USB disconnect, device number 6 [ 471.357578][ T6406] udevd[6406]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 472.350485][ T31] audit: type=1400 audit(1789382938.559:692): avc: denied { append } for pid=13196 comm="syz.0.2599" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 472.392226][ T6121] bridge_slave_0: left allmulticast mode [ 472.392253][ T6121] bridge_slave_0: left promiscuous mode [ 472.393529][ T6121] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.464015][T12837] Bluetooth: hci7: command tx timeout [ 473.702500][ T31] audit: type=1400 audit(1789382939.909:693): avc: denied { write } for pid=13198 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.741521][ T6121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.755880][ T6121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.776164][ T6121] bond0 (unregistering): Released all slaves [ 473.801102][ T6121] bond1 (unregistering): Released all slaves [ 473.928314][ T31] audit: type=1400 audit(1789382940.139:694): avc: denied { write } for pid=13220 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.995559][ T6121] IPVS: stopping backup sync thread 12912 ... [ 474.159368][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 474.543293][T12837] Bluetooth: hci7: command tx timeout [ 474.670485][ T6121] hsr_slave_0: left promiscuous mode [ 474.671009][ T6121] hsr_slave_1: left promiscuous mode [ 474.684682][ T6121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.684701][ T6121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.685976][ T6121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.685986][ T6121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.742029][ T6121] veth1_macvtap: left promiscuous mode [ 474.742060][ T6121] veth0_macvtap: left promiscuous mode [ 474.742107][ T6121] veth1_vlan: left promiscuous mode [ 474.742148][ T6121] veth0_vlan: left promiscuous mode [ 474.885985][T13096] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 474.980572][ T31] audit: type=1400 audit(1789382941.189:695): avc: denied { write } for pid=13229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 475.042988][T13096] usb 8-1: Using ep0 maxpacket: 8 [ 475.044377][T13096] usb 8-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 475.046569][T13096] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 475.046581][T13096] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 475.047989][T13096] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.048002][T13096] usb 8-1: Product: syz [ 475.048010][T13096] usb 8-1: Manufacturer: syz [ 475.048018][T13096] usb 8-1: SerialNumber: syz [ 476.076544][T13096] usb 8-1: unit 6 not found! [ 476.076558][T13096] usb 8-1: unit 4 not found! [ 476.100687][T13250] siw: device registration error -23 [ 476.138740][ T31] audit: type=1400 audit(1789382942.349:696): avc: denied { write } for pid=13249 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.220630][T13096] usb 8-1: USB disconnect, device number 3 [ 476.435341][ T6406] udevd[6406]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 476.485807][ T6121] team0 (unregistering): Port device team_slave_1 removed [ 476.529432][ T6121] team0 (unregistering): Port device team_slave_0 removed [ 476.569181][ T4916] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 476.582311][ T4916] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 476.589921][ T4916] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 476.591658][ T4916] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 476.591900][ T4916] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 476.623086][ T4916] Bluetooth: hci7: command tx timeout [ 476.851806][ T1034] nvmet: Created nvm controller 14 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:cc90a696-1e0a-4405-a155-5c893c8c2d34. [ 476.921016][T13263] nvme nvme13: creating 1 I/O queues. [ 476.937647][T13263] nvme nvme13: new ctrl: "testnqn" [ 477.116558][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 477.142837][T13159] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.142878][T13159] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.142930][T13159] bridge_slave_0: entered allmulticast mode [ 477.143619][T13159] bridge_slave_0: entered promiscuous mode [ 477.182237][T13159] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.182288][T13159] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.182340][T13159] bridge_slave_1: entered allmulticast mode [ 477.208463][T13159] bridge_slave_1: entered promiscuous mode [ 477.411152][T13159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.506129][T13159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.399786][T13159] team0: Port device team_slave_0 added [ 478.418509][T13159] team0: Port device team_slave_1 added [ 478.509745][T13159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.509757][T13159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.509769][T13159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.512505][T13159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.512514][T13159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.512526][T13159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.703187][ T4916] Bluetooth: hci4: command tx timeout [ 480.244032][ T6121] IPVS: stop unused estimator thread 0... [ 480.350471][T13159] hsr_slave_0: entered promiscuous mode [ 480.350862][T13159] hsr_slave_1: entered promiscuous mode [ 480.351168][T13159] debugfs: 'hsr0' already exists in 'hsr' [ 480.351178][T13159] Cannot create hsr debugfs directory [ 480.782969][ T4916] Bluetooth: hci4: command tx timeout [ 481.505583][ T31] audit: type=1400 audit(1789382947.709:697): avc: denied { write } for pid=13288 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 481.804067][ T31] audit: type=1400 audit(1789382948.019:698): avc: denied { write } for pid=13332 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 482.863231][ T4916] Bluetooth: hci4: command tx timeout [ 483.054367][T13096] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 483.204269][T13096] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 483.208383][T13096] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 483.232375][T13096] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.232389][T13096] usb 6-1: Product: syz [ 483.232397][T13096] usb 6-1: Manufacturer: syz [ 483.232405][T13096] usb 6-1: SerialNumber: syz [ 483.327436][T13259] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.327493][T13259] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.327547][T13259] bridge_slave_0: entered allmulticast mode [ 483.328312][T13259] bridge_slave_0: entered promiscuous mode [ 483.370874][T13259] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.370915][T13259] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.371076][T13259] bridge_slave_1: entered allmulticast mode [ 483.395820][T13259] bridge_slave_1: entered promiscuous mode [ 483.545730][T13096] speedtch 6-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 483.545763][T13096] speedtch 6-1:1.0: usbatm_usb_probe: bind failed: -71! [ 483.545785][T13096] speedtch 6-1:1.0: probe with driver speedtch failed with error -71 [ 484.321560][T13096] speedtch 6-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 484.321788][T13096] speedtch 6-1:1.1: usbatm_usb_probe: bind failed: -71! [ 484.321811][T13096] speedtch 6-1:1.1: probe with driver speedtch failed with error -71 [ 484.379001][T13259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.379517][T13096] usb 6-1: USB disconnect, device number 7 [ 484.468242][T13259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.943792][ T4916] Bluetooth: hci4: command tx timeout [ 486.186180][T13370] siw: device registration error -23 [ 486.268346][T13259] team0: Port device team_slave_0 added [ 486.271146][T13259] team0: Port device team_slave_1 added [ 486.309793][ T31] audit: type=1400 audit(1789382952.519:699): avc: denied { write } for pid=13351 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 486.367552][T13259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.367561][T13259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.367573][T13259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.369055][T13259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.369063][T13259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.369076][T13259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.552593][ T31] audit: type=1400 audit(1789382952.759:700): avc: denied { write } for pid=13379 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 486.587316][T13259] hsr_slave_0: entered promiscuous mode [ 486.589191][T13259] hsr_slave_1: entered promiscuous mode [ 486.591067][T13259] debugfs: 'hsr0' already exists in 'hsr' [ 486.591078][T13259] Cannot create hsr debugfs directory [ 486.591158][T13159] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 487.229147][T13159] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 487.229892][T13159] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 487.260991][T13159] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 487.316945][T13159] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 487.352180][T13159] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 487.367125][T13159] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 487.386418][T13159] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 488.474517][T13405] siw: device registration error -23 [ 489.420358][T13159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.274696][T13159] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.294655][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.294707][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.322392][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.322448][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.483611][ T31] audit: type=1400 audit(1789382956.699:701): avc: denied { write } for pid=13394 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.506503][ T31] audit: type=1400 audit(1789382957.719:702): avc: denied { write } for pid=13426 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.609664][T13259] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 491.625738][T13259] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 491.626671][T13259] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 491.631059][T13259] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 491.670279][T13259] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 491.684938][T13259] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 491.688229][T13259] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 491.712952][T13259] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 491.963277][T13259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.347520][T13259] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.841261][ T1034] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.841307][ T1034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.880226][T13447] siw: device registration error -23 [ 492.896931][ T1034] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.896976][ T1034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.327216][T13159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.354238][ T31] audit: type=1400 audit(1789382959.559:703): avc: denied { write } for pid=13439 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 493.549631][T13159] veth0_vlan: entered promiscuous mode [ 493.576861][T13159] veth1_vlan: entered promiscuous mode [ 493.670122][T13159] veth0_macvtap: entered promiscuous mode [ 493.697313][T13159] veth1_macvtap: entered promiscuous mode [ 493.871359][T13159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.715965][T13159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.749446][ T31] audit: type=1400 audit(1789382960.959:704): avc: denied { write } for pid=13478 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 494.914199][ T6122] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.933145][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.973760][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.034261][T11843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.254672][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.254685][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.831154][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.831185][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.235621][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.235636][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.351294][T13259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.278907][ T31] audit: type=1400 audit(1789382964.489:705): avc: denied { write } for pid=13494 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.553827][ T31] audit: type=1400 audit(1789382964.759:706): avc: denied { write } for pid=13542 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 499.318183][T13548] syzkaller0: entered promiscuous mode [ 499.318198][T13548] syzkaller0: entered allmulticast mode [ 501.055771][T13564] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 501.075072][T13564] udc dummy_udc.0: failed to start g1: -19 [ 501.075395][T13564] UDC core: g1: couldn't find an available UDC or it's busy [ 501.717000][ T4916] Bluetooth: hci3: connection err: -111 [ 502.928639][T13587] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2666'. [ 503.805185][T13593] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 503.863990][ T667] nvmet: Created nvm controller 15 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:cc90a696-1e0a-4405-a155-5c893c8c2d34. [ 503.870762][T13593] nvme nvme14: creating 1 I/O queues. [ 503.871412][T13593] nvme nvme14: new ctrl: "testnqn" [ 504.062285][T13259] veth0_vlan: entered promiscuous mode [ 504.113134][T13259] veth1_vlan: entered promiscuous mode [ 505.174212][T13259] veth0_macvtap: entered promiscuous mode [ 505.200463][T13259] veth1_macvtap: entered promiscuous mode [ 505.242425][T13259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.270484][T13259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.292200][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.292274][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.292300][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.292317][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.555658][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.555671][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.713792][ T1144] nvmet: Created nvm controller 16 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:cc90a696-1e0a-4405-a155-5c893c8c2d34. [ 505.753439][T13613] nvme nvme15: creating 1 I/O queues. [ 505.769232][T13613] nvme nvme15: new ctrl: "testnqn" [ 505.785247][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.785259][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.142743][ T190] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 507.218108][T13630] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 507.293451][ T190] usb 1-1: Using ep0 maxpacket: 16 [ 507.298867][ T190] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 0.40 [ 507.299970][ T190] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.299983][ T190] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 507.314844][ T190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.314858][ T190] usb 1-1: Product: syz [ 507.314866][ T190] usb 1-1: Manufacturer: syz [ 507.314874][ T190] usb 1-1: SerialNumber: syz [ 507.437300][ T12] nvmet: Created nvm controller 17 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:cc90a696-1e0a-4405-a155-5c893c8c2d34. [ 507.438056][T13630] nvme nvme16: creating 1 I/O queues. [ 507.441873][T13630] nvme nvme16: new ctrl: "testnqn" [ 507.589048][T13637] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 507.671211][T13626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2678'. [ 507.865036][T13641] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 507.916754][T13096] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 507.980871][ T667] nvmet: Created nvm controller 18 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:cc90a696-1e0a-4405-a155-5c893c8c2d34. [ 508.005426][T13641] nvme nvme17: creating 1 I/O queues. [ 508.021755][T13641] nvme nvme17: new ctrl: "testnqn" [ 508.075194][T13096] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 508.077794][T13096] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 508.079541][T13096] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 508.118992][T13096] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.119005][T13096] usb 6-1: Product: syz [ 508.119013][T13096] usb 6-1: Manufacturer: syz [ 508.119020][T13096] usb 6-1: SerialNumber: syz [ 508.175668][T13096] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 508.207820][T13096] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 508.210513][T13096] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 508.314304][ T190] usb 1-1: USB disconnect, device number 33 [ 508.380111][ T6406] udevd[6406]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 511.610038][ T5711] usb 6-1: USB disconnect, device number 8 [ 511.654575][ T5711] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 511.660363][ T5711] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 511.690649][ T5711] ti_usb_3410_5052 6-1:2.0: device disconnected [ 511.990687][T13673] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 512.632179][T11803] nvmet: Created nvm controller 19 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:cc90a696-1e0a-4405-a155-5c893c8c2d34. [ 512.655128][T13673] nvme nvme18: creating 1 I/O queues. [ 512.656951][T13673] nvme nvme18: new ctrl: "testnqn" [ 513.664871][T13683] siw: device registration error -23 [ 513.783296][T13691] netlink: 'syz.3.2701': attribute type 1 has an invalid length. [ 513.932751][ T31] audit: type=1326 audit(1789382980.139:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13690 comm="syz.3.2701" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f4359e159 code=0x0 [ 514.985505][T13704] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 515.156496][ T6122] nvmet: Created nvm controller 20 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:cc90a696-1e0a-4405-a155-5c893c8c2d34. [ 515.159335][T13704] nvme nvme19: creating 1 I/O queues. [ 515.259905][T13704] nvme nvme19: new ctrl: "testnqn" [ 515.832763][ T190] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 516.013227][ T190] usb 6-1: Using ep0 maxpacket: 8 [ 516.013749][ T190] usb 6-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 516.032915][ T190] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 516.032928][ T190] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 516.038008][ T190] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.038022][ T190] usb 6-1: Product: syz [ 516.038031][ T190] usb 6-1: Manufacturer: syz [ 516.038039][ T190] usb 6-1: SerialNumber: syz [ 516.135851][T13720] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 516.706833][ T190] usb 6-1: unit 6 not found! [ 516.706849][ T190] usb 6-1: unit 4 not found! [ 516.812884][ T190] usb 6-1: USB disconnect, device number 9 [ 516.834432][T13720] md: personality for level ra is not loaded! [ 516.840841][T13724] md: md0 stopped. [ 516.891960][ T6406] udevd[6406]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 518.606769][T13736] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2717'. [ 524.841420][T13769] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 524.841549][T13769] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 524.841615][T13769] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 524.841677][T13769] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 524.841737][T13769] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 524.841798][T13769] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 524.841865][T13769] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 524.841892][T13769] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 524.903043][T13769] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 524.923102][T13769] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 524.923150][T13769] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 524.951559][T13769] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 526.422900][ T5720] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 526.492869][T13096] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 526.574002][ T5720] usb 9-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 526.574772][ T5720] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 526.574795][ T5720] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 526.574809][ T5720] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 526.574827][ T5720] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.654067][T13096] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 526.654782][T13096] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 526.654804][T13096] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 526.654832][T13096] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 526.654857][T13096] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.711508][T12837] Bluetooth: hci0: command 0x0c1a tx timeout [ 527.337669][ T4916] Bluetooth: hci6: command 0x0c1a tx timeout [ 527.337697][ T4916] Bluetooth: hci1: command 0x0c1a tx timeout [ 527.337712][ T4916] Bluetooth: hci5: command 0x0c1a tx timeout [ 527.337726][ T4916] Bluetooth: hci3: command 0x0c1a tx timeout [ 527.337740][ T4916] Bluetooth: hci2: command 0x0c1a tx timeout [ 527.337754][ T4916] Bluetooth: hci4: command 0x0c1a tx timeout [ 527.337837][T12837] Bluetooth: hci7: command 0x0c1a tx timeout [ 527.442130][ T5720] cxacru 9-1:1.0: invalid response length to cm 0x90: 60 [ 527.455253][T13803] cxacru 9-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 527.455268][T13803] cxacru 9-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 527.686520][T13096] cxacru 6-1:1.0: send of cm 0x91 failed (-71) [ 527.686536][T13096] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 527.686544][T13096] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 527.687366][T13096] cxacru 6-1:1.0: probe with driver cxacru failed with error -71 [ 527.745175][T13096] usb 6-1: USB disconnect, device number 10 [ 528.351239][ T5720] usb 9-1: USB disconnect, device number 2 [ 529.343615][T12837] Bluetooth: hci7: command 0x0c1a tx timeout [ 529.343640][T12837] Bluetooth: hci4: command 0x0c1a tx timeout [ 531.006233][T13824] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 531.247041][ T667] nvmet: Created nvm controller 21 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:cc90a696-1e0a-4405-a155-5c893c8c2d34. [ 531.250920][T13824] nvme nvme20: creating 1 I/O queues. [ 531.252232][T13824] nvme nvme20: new ctrl: "testnqn" [ 531.404422][T13829] overlayfs: failed to resolve 'lower1': -2 [ 531.422835][T12837] Bluetooth: hci7: command 0x0c1a tx timeout [ 531.422862][ T5611] Bluetooth: hci4: command 0x0c1a tx timeout [ 532.733114][ T5711] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 532.886473][ T5711] usb 4-1: unable to get BOS descriptor or descriptor too short [ 532.886500][ T5711] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 532.890266][ T5711] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.890280][ T5711] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 532.891752][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.891772][ T5711] usb 4-1: Product: syz [ 532.891781][ T5711] usb 4-1: Manufacturer: syz [ 532.891789][ T5711] usb 4-1: SerialNumber: syz [ 532.981040][ T5711] usb 4-1: selecting invalid altsetting 1 [ 532.983188][ T5711] usb 4-1: unit 255 not found! [ 533.060947][T13849] syz_tun: entered allmulticast mode [ 533.069514][T13849] lo: entered allmulticast mode [ 533.266550][T13847] syz_tun: left allmulticast mode [ 533.266598][T13847] lo: left allmulticast mode [ 533.301547][ T5711] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 533.406804][ T6406] udevd[6406]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 533.605349][T13864] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 533.788029][T13866] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 533.893661][ T5711] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 533.915598][ T1034] nvmet: Created nvm controller 22 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:cc90a696-1e0a-4405-a155-5c893c8c2d34. [ 533.918833][T13866] nvme nvme21: creating 1 I/O queues. [ 533.919917][T13866] nvme nvme21: new ctrl: "testnqn" [ 533.998964][T13870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2755'. [ 534.013787][T13870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.013981][T13870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.066728][ T5711] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 534.069716][ T5711] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 534.071303][ T5711] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 534.113254][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.113270][ T5711] usb 6-1: Product: syz [ 534.113278][ T5711] usb 6-1: Manufacturer: syz [ 534.113286][ T5711] usb 6-1: SerialNumber: syz [ 534.154037][ T5711] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 534.185158][ T5711] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 534.200971][ T5711] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 534.304929][T13872] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 535.100440][T13877] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 535.210492][T13872] md/raid10:md0: not enough operational mirrors. [ 535.222365][T13872] md: pers->run() failed ... [ 535.222394][T13875] md: md0 stopped. [ 536.078593][T13881] xt_HMARK: spi-set and port-set can't be combined [ 536.151350][ T10] usb 4-1: USB disconnect, device number 18 [ 536.369640][T13889] syzkaller0: entered promiscuous mode [ 536.369654][T13889] syzkaller0: entered allmulticast mode [ 536.618336][T13894] lo: entered allmulticast mode [ 536.633334][T13893] lo: left allmulticast mode [ 537.795614][T13096] usb 6-1: USB disconnect, device number 11 [ 538.470649][T13906] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 538.489440][T13096] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 538.661624][T13096] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 538.662017][T13096] ti_usb_3410_5052 6-1:2.0: device disconnected [ 539.855483][ T190] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 540.488006][T13927] xt_HMARK: spi-set and port-set can't be combined [ 540.549551][ T190] usb 1-1: unable to get BOS descriptor or descriptor too short [ 540.549574][ T190] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 540.552485][ T190] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 540.552499][ T190] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 540.599609][ T190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.599623][ T190] usb 1-1: Product: syz [ 540.599631][ T190] usb 1-1: Manufacturer: syz [ 540.599639][ T190] usb 1-1: SerialNumber: syz [ 540.629358][ T190] usb 1-1: selecting invalid altsetting 1 [ 540.642034][ T190] usb 1-1: unit 255 not found! [ 540.658924][T13931] syzkaller0: entered promiscuous mode [ 540.658935][T13931] syzkaller0: entered allmulticast mode [ 540.756789][ T190] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 540.838259][ T6406] udevd[6406]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 541.277920][T13947] syz_tun: entered allmulticast mode [ 541.299138][T13947] lo: entered allmulticast mode [ 541.342166][T13946] syz_tun: left allmulticast mode [ 541.342211][T13946] lo: left allmulticast mode [ 542.329200][T13957] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 542.431597][ T190] usb 1-1: USB disconnect, device number 34 [ 543.346746][T13968] Device name cannot be null; rc = [-22] [ 544.141563][T13974] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 544.452891][T13096] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 544.477252][T13979] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 544.646713][T13096] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 544.661784][T13096] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 544.662487][T13096] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 544.702286][T13096] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.702300][T13096] usb 1-1: Product: syz [ 544.702308][T13096] usb 1-1: Manufacturer: syz [ 544.702315][T13096] usb 1-1: SerialNumber: syz [ 544.730588][T13096] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 544.751087][T13096] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 544.774520][T13096] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 545.063427][T13985] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 545.282682][T13096] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 545.334164][T11803] nvmet: Created nvm controller 23 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:cc90a696-1e0a-4405-a155-5c893c8c2d34. [ 545.357155][T13985] nvme nvme22: creating 1 I/O queues. [ 545.371362][T13985] nvme nvme22: new ctrl: "testnqn" [ 545.441974][T13096] usb 4-1: unable to get BOS descriptor or descriptor too short [ 545.441997][T13096] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 545.460031][T13096] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.460045][T13096] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 545.494677][T13096] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.494691][T13096] usb 4-1: Product: syz [ 545.494699][T13096] usb 4-1: Manufacturer: syz [ 545.494707][T13096] usb 4-1: SerialNumber: syz [ 545.535260][T13096] usb 4-1: selecting invalid altsetting 1 [ 545.552561][T13096] usb 4-1: unit 255 not found! [ 545.674031][T13096] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 545.755254][ T6406] udevd[6406]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 545.759464][T13999] syzkaller0: entered promiscuous mode [ 545.759475][T13999] syzkaller0: entered allmulticast mode [ 546.606103][T14007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.613098][T14007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.662123][T14006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2802'. [ 546.898136][T14011] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 548.585078][ T190] usb 1-1: USB disconnect, device number 35 [ 548.611229][ T190] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 548.653120][ T190] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 548.653522][ T190] ti_usb_3410_5052 1-1:2.0: device disconnected [ 548.741861][ T10] usb 4-1: USB disconnect, device number 19 [ 549.795310][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 550.612696][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 550.613092][ T10] usb 8-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 550.613819][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.613831][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 550.615556][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.615569][ T10] usb 8-1: Product: syz [ 550.615577][ T10] usb 8-1: Manufacturer: syz [ 550.615590][ T10] usb 8-1: SerialNumber: syz [ 551.546376][ T10] usb 8-1: unit 6 not found! [ 551.546393][ T10] usb 8-1: unit 4 not found! [ 551.619982][ T10] usb 8-1: USB disconnect, device number 4 [ 551.706872][ T6406] udevd[6406]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 551.710732][T14055] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 551.881028][ T50] nvmet: Created nvm controller 24 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:cc90a696-1e0a-4405-a155-5c893c8c2d34. [ 551.901892][T14055] nvme nvme23: creating 1 I/O queues. [ 551.909300][T14055] nvme nvme23: new ctrl: "testnqn" [ 553.119383][T14078] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 554.102904][ T190] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 554.877561][ T190] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 554.880899][ T190] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 554.910908][ T190] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 554.924528][ T190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.924548][ T190] usb 4-1: Product: syz [ 554.924556][ T190] usb 4-1: Manufacturer: syz [ 554.924564][ T190] usb 4-1: SerialNumber: syz [ 554.967116][ T190] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 554.993237][ T190] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 555.016286][ T190] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 555.737593][T14108] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2840'. [ 555.898402][T14116] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2835'. [ 555.919598][T14113] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2841'. [ 555.919746][T14116] lo: entered allmulticast mode [ 555.946771][T14114] lo: left allmulticast mode [ 556.057216][ T31] audit: type=1400 audit(1789383022.269:708): avc: denied { write } for pid=14099 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 556.151163][ T31] audit: type=1400 audit(1789383022.359:709): avc: denied { write } for pid=14127 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 557.469824][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.469853][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.587495][ T190] usb 4-1: USB disconnect, device number 20 [ 557.599058][T14143] netlink: 'syz.0.2846': attribute type 1 has an invalid length. [ 557.629020][ T190] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 557.652251][ T190] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 557.668792][ T190] ti_usb_3410_5052 4-1:2.0: device disconnected [ 557.722298][T14143] 8021q: adding VLAN 0 to HW filter on device bond2 [ 557.794733][ T31] audit: type=1326 audit(1789383024.009:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14141 comm="syz.0.2846" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f30efd9e159 code=0x0 [ 558.026192][ T31] audit: type=1400 audit(1789383024.239:711): avc: denied { write } for pid=14131 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 558.244062][ T31] audit: type=1400 audit(1789383024.459:712): avc: denied { write } for pid=14162 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 558.558015][T14167] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2853'. [ 558.858087][ T31] audit: type=1400 audit(1789383025.069:713): avc: denied { bind } for pid=14170 comm="syz.7.2848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 558.858553][ T31] audit: type=1400 audit(1789383025.069:714): avc: denied { write } for pid=14170 comm="syz.7.2848" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 559.082805][ T190] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 559.854109][ T190] usb 1-1: Using ep0 maxpacket: 8 [ 559.855119][ T190] usb 1-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 559.857051][ T190] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 559.857063][ T190] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 559.859441][ T190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.859455][ T190] usb 1-1: Product: syz [ 559.859463][ T190] usb 1-1: Manufacturer: syz [ 559.859471][ T190] usb 1-1: SerialNumber: syz [ 560.112152][ T190] usb 1-1: unit 6 not found! [ 560.112168][ T190] usb 1-1: unit 0 not found! [ 560.213245][ T6122] nvmet: connect request for invalid subsystem testnq! [ 560.214330][T14186] nvme nvme24: Connect Invalid Data Parameter, subsysnqn "testnq" [ 560.241047][ T190] usb 1-1: USB disconnect, device number 36 [ 560.950626][T14193] Device name cannot be null; rc = [-22] [ 561.095222][ T6406] udevd[6406]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 563.377554][ T12] nvmet: connect request for invalid subsystem testnq! [ 563.377619][T14216] nvme nvme24: Connect Invalid Data Parameter, subsysnqn "testnq" [ 563.486930][T14219] syzkaller0: entered promiscuous mode [ 563.486943][T14219] syzkaller0: entered allmulticast mode [ 564.544212][T14221] netlink: 'syz.7.2866': attribute type 10 has an invalid length. [ 564.927130][T14221] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 564.927968][T14221] team0: Port device netdevsim1 added [ 565.417998][ T190] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 566.274425][ T190] usb 6-1: Using ep0 maxpacket: 8 [ 566.274817][ T190] usb 6-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 566.276267][ T190] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.276281][ T190] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 566.279932][ T190] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.279946][ T190] usb 6-1: Product: syz [ 566.279954][ T190] usb 6-1: Manufacturer: syz [ 566.279962][ T190] usb 6-1: SerialNumber: syz [ 566.361369][T14253] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.361497][T14253] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.519590][ T190] usb 6-1: unit 6 not found! [ 566.519604][ T190] usb 6-1: unit 0 not found! [ 566.605954][ T31] audit: type=1400 audit(1789383032.819:715): avc: denied { write } for pid=14245 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 566.647909][ T190] usb 6-1: USB disconnect, device number 12 [ 566.741960][ T6406] udevd[6406]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 566.876933][ T31] audit: type=1400 audit(1789383033.089:716): avc: denied { write } for pid=14273 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 567.026683][T14253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.014973][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.015772][ T6122] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.015792][ T6122] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.015810][ T6122] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.024765][ T1034] netdevsim netdevsim120 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.088057][T14284] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 568.357901][T14289] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.358229][T14289] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.484383][ T5602] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 568.633052][ T5602] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 568.634594][ T5602] usb 1-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 568.635869][ T5602] usb 1-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 568.637803][ T5602] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.637816][ T5602] usb 1-1: Product: syz [ 568.637824][ T5602] usb 1-1: Manufacturer: syz [ 568.637832][ T5602] usb 1-1: SerialNumber: syz [ 568.718499][ T5602] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 568.740385][ T5602] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 568.758055][ T5602] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 568.867462][T14289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.917624][T14289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.966616][ T31] audit: type=1400 audit(1789383035.179:717): avc: denied { write } for pid=14290 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 569.195156][ T31] audit: type=1400 audit(1789383035.409:718): avc: denied { write } for pid=14309 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 569.383318][ T667] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.383346][ T667] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.383364][ T667] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.383382][ T667] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.436558][T14308] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 569.598635][T14325] netlink: 165 bytes leftover after parsing attributes in process `syz.7.2895'. [ 569.771848][T14317] netlink: 'syz.5.2894': attribute type 10 has an invalid length. [ 569.956068][ T31] audit: type=1400 audit(1789383036.169:719): avc: denied { write } for pid=14318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 570.139433][ T31] audit: type=1400 audit(1789383036.349:720): avc: denied { write } for pid=14345 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 570.429999][ T31] audit: type=1400 audit(1789383036.639:721): avc: denied { write } for pid=14347 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 570.525063][ T31] audit: type=1400 audit(1789383036.739:722): avc: denied { write } for pid=14360 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 570.721138][T14317] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 570.735813][T14317] team0: Port device netdevsim1 added [ 571.694849][T14369] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2902'. [ 572.678537][T13096] usb 1-1: USB disconnect, device number 37 [ 572.692347][T14371] siw: device registration error -23 [ 572.719208][T13096] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 572.738484][T13096] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 572.742053][T13096] ti_usb_3410_5052 1-1:2.0: device disconnected [ 574.425002][T14389] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2906'. [ 574.968349][T14402] device-mapper: ioctl: Invalid target message parameters. [ 575.866115][T12837] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 575.868008][T12837] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 575.868489][T12837] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 575.870058][T12837] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 575.870288][T12837] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 575.919003][T14408] siw: device registration error -23 [ 577.168587][T14426] siw: device registration error -23 [ 577.218733][T14429] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 577.983836][T12837] Bluetooth: hci8: command tx timeout [ 578.221921][ T1034] bridge_slave_1: left allmulticast mode [ 578.221936][ T1034] bridge_slave_1: left promiscuous mode [ 578.222028][ T1034] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.231947][ T1034] bridge_slave_0: left allmulticast mode [ 578.231960][ T1034] bridge_slave_0: left promiscuous mode [ 578.232044][ T1034] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.380345][ T31] audit: type=1400 audit(1789383044.589:723): avc: denied { write } for pid=14451 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 578.515115][ T31] audit: type=1400 audit(1789383044.729:724): avc: denied { write } for pid=14471 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 578.517670][ T1034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.521344][ T1034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 578.522515][ T1034] bond0 (unregistering): Released all slaves [ 578.588182][ T1034] bond1 (unregistering): Released all slaves [ 578.620689][ T1034] bond2 (unregistering): Released all slaves [ 578.622392][ T50] smbdirect: ib_dev[syz5] removed [ 578.671978][ T190] syz5: Port: 1 Link DOWN [ 578.702171][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 578.888324][ T1034] IPVS: stopping backup sync thread 11047 ... [ 579.078900][ T1034] hsr_slave_0: left promiscuous mode [ 579.079610][ T1034] hsr_slave_1: left promiscuous mode [ 579.079942][ T1034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.339352][ T1034] team0 (unregistering): Port device team_slave_1 removed [ 579.356340][ T31] audit: type=1400 audit(1789383045.569:725): avc: denied { write } for pid=14476 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 579.407657][ T1034] team0 (unregistering): Port device team_slave_0 removed [ 580.236032][T14493] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2931'. [ 580.237575][T12837] Bluetooth: hci8: command tx timeout [ 580.295909][ T31] audit: type=1400 audit(1789383046.509:726): avc: denied { write } for pid=14492 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 580.419926][T14493] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 580.419948][T14493] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 580.419960][T14493] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 580.548782][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 580.564489][T14407] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.564530][T14407] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.564586][T14407] bridge_slave_0: entered allmulticast mode [ 580.565351][T14407] bridge_slave_0: entered promiscuous mode [ 580.618887][T14407] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.618928][T14407] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.618981][T14407] bridge_slave_1: entered allmulticast mode [ 580.619745][T14407] bridge_slave_1: entered promiscuous mode [ 580.701116][T14407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.713834][T14407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.778364][T14407] team0: Port device team_slave_0 added [ 580.792735][T14407] team0: Port device team_slave_1 added [ 580.884777][T14407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.884789][T14407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.884801][T14407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.885586][T14407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.885593][T14407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.885605][T14407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.101696][T14407] hsr_slave_0: entered promiscuous mode [ 581.102390][T14407] hsr_slave_1: entered promiscuous mode [ 581.122396][T14407] debugfs: 'hsr0' already exists in 'hsr' [ 581.122408][T14407] Cannot create hsr debugfs directory [ 581.496460][ T31] audit: type=1400 audit(1789383047.709:727): avc: denied { write } for pid=14500 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 581.734153][ T31] audit: type=1400 audit(1789383047.949:728): avc: denied { write } for pid=14517 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.304213][T12837] Bluetooth: hci8: command tx timeout [ 582.376278][T14536] overlayfs: failed to resolve 'lower1': -2 [ 582.510737][T14531] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.510984][T14531] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.695733][ T31] audit: type=1400 audit(1789383048.909:729): avc: denied { write } for pid=14526 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.899293][T14531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.918946][ T31] audit: type=1400 audit(1789383049.129:730): avc: denied { write } for pid=14542 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.920866][T14531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.550330][ T5261] 8021q: adding VLAN 0 to HW filter on device eth5 [ 583.553037][ T50] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.553064][ T50] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.553081][ T50] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.553098][ T50] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.861985][T14550] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 583.881084][T14407] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 583.897772][T14407] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 583.899449][T14407] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 583.922704][T14407] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 583.923467][T14407] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 583.925168][T14407] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 583.925713][T14407] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 583.967709][T14407] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 584.105998][T14407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.148597][T14407] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.164269][ T1034] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.164312][ T1034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.171091][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.171132][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.383706][T12837] Bluetooth: hci8: command tx timeout [ 584.489570][ T31] audit: type=1400 audit(1789383050.699:731): avc: denied { write } for pid=14551 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 584.656342][ T31] audit: type=1400 audit(1789383050.869:732): avc: denied { write } for pid=14577 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 585.195415][T14407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.254679][T14407] veth0_vlan: entered promiscuous mode [ 585.269321][T14407] veth1_vlan: entered promiscuous mode [ 585.310893][T14599] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 585.316430][T14600] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 585.316440][T14600] block device autoloading is deprecated and will be removed. [ 585.361325][T14407] veth0_macvtap: entered promiscuous mode [ 585.375944][T14407] veth1_macvtap: entered promiscuous mode [ 585.378789][T14600] md: md0 stopped. [ 585.405127][T14599] md: invalid raid superblock magic on ram1 [ 585.405135][T14599] md: ram1 does not have a valid v0.0 superblock, not importing! [ 585.405166][T14599] md: md_import_device returned -22 [ 585.453025][T14407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.456432][T14407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.543980][ T6122] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.544006][ T6122] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.544023][ T6122] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.544040][ T6122] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.641606][ T31] audit: type=1400 audit(1789383051.849:733): avc: denied { write } for pid=14588 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 585.733733][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.733745][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.635898][ T667] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.635911][ T667] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.687919][ T31] audit: type=1400 audit(1789383052.899:734): avc: denied { write } for pid=14609 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 587.058841][ T31] audit: type=1400 audit(1789383053.269:735): avc: denied { write } for pid=14613 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 587.207990][ T31] audit: type=1400 audit(1789383053.419:736): avc: denied { write } for pid=14625 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 587.660402][T14434] Set syz1 is full, maxelem 65536 reached [ 587.736027][T14642] overlayfs: failed to resolve 'lower1': -2 [ 587.841645][ T31] audit: type=1400 audit(1789383054.049:737): avc: denied { write } for pid=14631 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 588.647841][T13803] cxacru 9-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 588.797513][ T31] audit: type=1400 audit(1789383055.009:738): avc: denied { write } for pid=14651 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 589.773093][ T5602] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 589.925605][ T5602] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 589.930945][ T5602] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 589.956661][ T5602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.956674][ T5602] usb 4-1: Product: syz [ 589.956682][ T5602] usb 4-1: Manufacturer: syz [ 589.956691][ T5602] usb 4-1: SerialNumber: syz [ 590.172334][ T5602] speedtch 4-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 590.172368][ T5602] speedtch 4-1:1.0: usbatm_usb_probe: bind failed: -71! [ 590.172390][ T5602] speedtch 4-1:1.0: probe with driver speedtch failed with error -71 [ 590.198666][ T5602] speedtch 4-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 590.198895][ T5602] speedtch 4-1:1.1: usbatm_usb_probe: bind failed: -71! [ 590.198917][ T5602] speedtch 4-1:1.1: probe with driver speedtch failed with error -71 [ 590.227382][ T5602] usb 4-1: USB disconnect, device number 21 [ 590.534076][T14435] Set syz1 is full, maxelem 65536 reached [ 591.183946][ T32] INFO: task syz-executor:5598 blocked for more than 143 seconds. [ 591.183965][ T32] Tainted: G L syzkaller #0 [ 591.183972][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 591.183976][ T32] task:syz-executor state:D stack:22904 pid:5598 tgid:5598 ppid:1 task_flags:0x400140 flags:0x00080002 [ 591.184005][ T32] Call Trace: [ 591.184010][ T32] [ 591.184016][ T32] __schedule+0x1259/0x6920 [ 591.184034][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 591.184049][ T32] ? do_raw_spin_lock+0x128/0x260 [ 591.184067][ T32] ? lock_acquire+0x1d1/0x380 [ 591.184079][ T32] ? __pfx___schedule+0x10/0x10 [ 591.184092][ T32] ? find_held_lock+0x2b/0x80 [ 591.184107][ T32] ? schedule+0x225/0x2c0 [ 591.184123][ T32] schedule+0xdd/0x2c0 [ 591.184136][ T32] schedule_preempt_disabled+0x13/0x30 [ 591.184150][ T32] __mutex_lock+0xccb/0x1bd0 [ 591.184171][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 591.184187][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 591.184205][ T32] ? net_generic+0x25/0x2a0 [ 591.184217][ T32] ? net_generic+0xea/0x2a0 [ 591.184228][ T32] ? net_generic+0xea/0x2a0 [ 591.184242][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 591.184254][ T32] nfsd_shutdown_threads+0x5b/0xf0 [ 591.184267][ T32] nfsd_umount+0x3b/0x60 [ 591.184281][ T32] deactivate_locked_super+0xbd/0x140 [ 591.184293][ T32] deactivate_super+0xea/0x110 [ 591.184305][ T32] cleanup_mnt+0x21f/0x450 [ 591.184320][ T32] task_work_run+0x150/0x240 [ 591.184338][ T32] ? __pfx_task_work_run+0x10/0x10 [ 591.184359][ T32] exit_to_user_mode_loop+0x1d8/0x700 [ 591.184373][ T32] ? rcu_is_watching+0x13/0xc0 [ 591.184390][ T32] do_syscall_64+0x661/0x790 [ 591.184406][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.184418][ T32] RIP: 0033:0x7f3b1259f397 [ 591.184427][ T32] RSP: 002b:00007ffda6ddb018 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 591.184438][ T32] RAX: 0000000000000000 RBX: 00007f3b1263448b RCX: 00007f3b1259f397 [ 591.184445][ T32] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda6ddb0d0 [ 591.184452][ T32] RBP: 00007ffda6ddb0d0 R08: 00007ffda6ddc0d0 R09: 00000000ffffffff [ 591.184458][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda6ddc160 [ 591.184465][ T32] R13: 00007f3b1263448b R14: 000000000006a1bc R15: 00007ffda6ddc1a0 [ 591.184480][ T32] [ 591.184531][ T32] [ 591.184531][ T32] Showing all locks held in the system: [ 591.184537][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 591.184545][ T32] #0: ffffffff8edec420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 591.184580][ T32] locks held by kworker/u8:4/59: 3, on CPU#0: [ 591.184588][ T32] #0: ffff8880345a2940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 591.184620][ T32] #1: ffffc9000201fd08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 591.184651][ T32] #2: ffffffff90cd2480 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360 [ 591.184696][ T32] locks held by getty/5354: 2, on CPU#1: [ 591.184704][ T32] #0: ffff8880346f40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 591.184730][ T32] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 591.184760][ T32] locks held by syz-executor/5598: 2, on CPU#0: [ 591.184768][ T32] #0: ffff8880377520e8 (&type->s_umount_key#76){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110 [ 591.184795][ T32] #1: ffffffff8f289400 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 591.184829][ T32] locks held by syz.1.2498/12794: 3, on CPU#0: [ 591.184836][ T32] #0: ffff888078a3b7b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 591.184880][ T32] #1: ffff88802d1d8460 (sb_writers#23){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 591.184908][ T32] #2: ffffffff8f289400 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x288/0x600 [ 591.184939][ T32] locks held by syz.6.2573/13090: 3, on CPU#0: [ 591.184946][ T32] #0: ffff888078877b30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 591.184975][ T32] #1: ffff88802dc30460 (sb_writers#23){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 591.185002][ T32] #2: ffffffff8f289400 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x288/0x600 [ 591.185043][ T32] locks held by syz.0.2950/14648: 2, last CPU#0: [ 591.185051][ T32] #0: ffff88802068a460 (sb_writers#6){.+.+}-{0:0}, at: get_signal+0x1f2a/0x21e0 [ 591.185081][ T32] #1: ffff8880567ce910 (&sb->s_type->i_mutex_key#15){+.+.}-{4:4}, at: shmem_file_write_iter+0x86/0x140 [ 591.185110][ T32] locks held by syz.3.2954/14658: 1, last CPU#0: [ 591.185118][ T32] #0: ffffffff8edec420 (rcu_read_lock){....}-{1:3}, at: bpf_test_timer_enter+0xc3/0x2c0 [ 591.185150][ T32] locks held by syz.5.2952/14659: 2, on CPU#0: [ 591.185161][ T32] #0: ffffffff90cd2480 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 591.185187][ T32] #1: ffffffff8edf8328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 591.185212][ T32] locks held by syz.0.2955/14668: 2, on CPU#0: [ 591.185220][ T32] #0: ffff8880380d3bc0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 591.185252][ T32] #1: ffffffff8edf8328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 591.185276][ T32] locks held by syz.7.2961/14678: 1, on CPU#0: [ 591.185284][ T32] #0: ffff88807d5ea9f8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 591.185310][ T32] locks held by syz.7.2961/14679: 1, last CPU#0: [ 591.185318][ T32] #0: ffff88807d5ea9f8 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x229/0x3a0 [ 591.186826][ T32] [ 591.186829][ T32] ============================================= [ 591.186829][ T32] [ 591.186834][ T32] NMI backtrace for cpu 0 [ 591.186843][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 591.186858][ T32] Tainted: [L]=SOFTLOCKUP [ 591.186862][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 591.186868][ T32] Call Trace: [ 591.186873][ T32] [ 591.186877][ T32] dump_stack_lvl+0x100/0x190 [ 591.186893][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 591.186911][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 591.186925][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 591.186939][ T32] sys_info+0x141/0x190 [ 591.186949][ T32] watchdog+0xcb1/0x1030 [ 591.186964][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 591.186978][ T32] ? __pfx_watchdog+0x10/0x10 [ 591.186991][ T32] ? __kthread_parkme+0x18f/0x230 [ 591.187005][ T32] ? kthread+0x13a/0x450 [ 591.187019][ T32] ? __pfx_watchdog+0x10/0x10 [ 591.187031][ T32] kthread+0x373/0x450 [ 591.187045][ T32] ? __pfx_kthread+0x10/0x10 [ 591.187061][ T32] ret_from_fork+0x730/0xd60 [ 591.187073][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 591.187086][ T32] ? __switch_to+0x800/0x10f0 [ 591.187101][ T32] ? __pfx_kthread+0x10/0x10 [ 591.187117][ T32] ret_from_fork_asm+0x1a/0x30 [ 591.187134][ T32] [ 591.187141][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 591.859415][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 591.870055][ T32] Tainted: [L]=SOFTLOCKUP [ 591.874345][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 591.884367][ T32] Call Trace: [ 591.887619][ T32] [ 591.890520][ T32] dump_stack_lvl+0x100/0x190 [ 591.895173][ T32] vpanic+0x553/0x970 [ 591.899131][ T32] ? __pfx_vpanic+0x10/0x10 [ 591.903610][ T32] panic+0xd1/0xe0 [ 591.907299][ T32] ? __pfx_panic+0x10/0x10 [ 591.911690][ T32] ? nmi_cpu_backtrace+0x79/0x200 [ 591.916693][ T32] ? nmi_trigger_cpumask_backtrace+0x206/0x2a0 [ 591.922822][ T32] ? watchdog.cold+0x1ec/0x234 [ 591.927556][ T32] watchdog.cold+0x1fd/0x234 [ 591.932118][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 591.937896][ T32] ? __pfx_watchdog+0x10/0x10 [ 591.942543][ T32] ? __kthread_parkme+0x18f/0x230 [ 591.947541][ T32] ? kthread+0x13a/0x450 [ 591.951762][ T32] ? __pfx_watchdog+0x10/0x10 [ 591.956407][ T32] kthread+0x373/0x450 [ 591.960449][ T32] ? __pfx_kthread+0x10/0x10 [ 591.965019][ T32] ret_from_fork+0x730/0xd60 [ 591.969580][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 591.974663][ T32] ? __switch_to+0x800/0x10f0 [ 591.979321][ T32] ? __pfx_kthread+0x10/0x10 [ 591.983884][ T32] ret_from_fork_asm+0x1a/0x30 [ 591.988627][ T32] [ 591.991650][ T32] Kernel Offset: disabled [ 591.995948][ T32] Rebooting in 86400 seconds..