last executing test programs: 10.727963908s ago: executing program 4 (id=1158): io_submit(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x1, 0x31c}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x8a) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x10, 0x803, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r9) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)) r11 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r11, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000030000000000000100000004000480080002000100000008000100000000000400088018000c8014000b8008000a008fee0000080009000089"], 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 9.077636027s ago: executing program 4 (id=1168): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x0, 0x10000040, 0x0, 0x9, 0x8, 0x1, 0x2, 0xfffffff7, 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x1, 0x25dfdbfe, {0xa, 0x10, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_EXPIRES={0x8, 0x17, 0xfffffffd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) pipe(&(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000004, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) clock_adjtime(0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd27, 0x8000, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x3}}, 0x1c}}, 0xc000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x70) r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000440)='./file0\x00', 0x20009a2) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) ioctl$UI_SET_RELBIT(r8, 0x40045566, 0xa) write$binfmt_elf32(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200018"], 0x69) 7.873052885s ago: executing program 4 (id=1171): r0 = socket$rxrpc(0x21, 0x2, 0xa) poll(&(0x7f0000000a40)=[{r0, 0x2}], 0x1, 0x7f) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0xfffffffc, 0x4) 7.634593584s ago: executing program 4 (id=1173): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d06, &(0x7f0000000a00)="0000020000000000000002") socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r1 = fsopen(0x0, 0x0) pwritev2(r1, 0x0, 0x0, 0x1, 0x7, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, 0x0, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r7 = dup2(r6, r6) read$char_usb(r7, &(0x7f00000000c0)=""/192, 0xc0) 6.553629778s ago: executing program 4 (id=1176): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) r1 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0xc}}}, 0x1e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x20001a, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x9, 0x221100, 0x240, 0x806, 0x40, 0x548c, 0x0, 0x0, 0x40, 0x7f}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x24c01, 0x0) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(r4, 0xc008644e, 0x0) r5 = getpgrp(0xffffffffffffffff) sched_setaffinity(r5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listns(0x0, &(0x7f0000000040)=[0x0], 0x1, 0x0) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=0x0, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x6000010) 5.985353431s ago: executing program 2 (id=1183): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101e02, 0x955d817884a843ee) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000030000000090a010400000000000000000700000008000a4000000000090002007379054000000006300000001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000004000380140000001000010000000000000000000084000a"], 0xa8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x102, 0x166) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000f40)={0x1000008, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000100)={"4cf36a628ca84ddd2961bd42a3b25f1e2273a95c6ff8aa046bd8aca774d0a64b", r4}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xf, 0xb, 0xff}, 0x3d, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x5, 0x4, 0x10007e, 0x20000002, 0x53, 0x6, 0x10001, 0x80005, 0x102, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x2, 0x2, 0x7, 0x4, 0x200ffff, 0x40000026, 0xd, 0x53b7, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x201, 0x0, 0x4, 0x5, 0x8, 0x800080eb, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x2, 0x4, 0x9, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0xd, 0x9, 0x80000130, 0x8004, 0x8001, 0xfffffff3, 0x2, 0xfffffff7, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x4, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x9, 0x1, 0x2, 0xffff, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f2f, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x7, 0x6, 0x8, 0x9, 0x5, 0x47, 0x8020, 0x4, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x200, 0x101, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x9, 0x9], [0x7, 0xa, 0x0, 0x7, 0xfffffffe, 0x100, 0x8d2, 0x0, 0x5, 0x5a, 0x0, 0x5, 0xf, 0x14, 0x6, 0x5, 0x5, 0x8, 0x6, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xf, 0x5, 0x2, 0x2, 0x3, 0x20000808, 0x2, 0x6d03, 0x5, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x1, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x3, 0x128, 0x4, 0x2000001, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x1000, 0x80aaed, 0x4, 0x24], [0x9, 0x8409b33, 0x7ffffffd, 0xb, 0x4, 0x100093a, 0x7, 0x1000006, 0x1, 0x10000, 0xce7, 0x41ff, 0x2, 0x57, 0x4, 0x3, 0x80101, 0x10003, 0x2, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x8, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x4, 0x1000, 0x7, 0xaf, 0x8, 0x400, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0x1000a1f, 0xffffffff, 0x7, 0x8d5, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc2, 0x200, 0xffff2441, 0x100f7f]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r2, r3, 0x0) poll(&(0x7f0000000200)=[{r2, 0xe270}], 0x1, 0x1ff7) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) accept4(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0017"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x30, 0x9, 0xfd, 0x5ae9}, {0x6, 0x40, 0x7, 0x2002}]}, 0x10) sendmmsg$inet(r7, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002680)={0xffffffffffffffff, r9, 0x2b, 0x0, @val=@netkit}, 0x1c) 5.891202221s ago: executing program 1 (id=1184): r0 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') socket$nl_route(0x10, 0x3, 0x0) syz_clone3(0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) syz_open_dev$radio(&(0x7f0000000400), 0x3, 0x2) syz_ublk_setup_io_uring(0x22cf, &(0x7f0000000440)={0x0, 0x4015, 0x10, 0x0, 0x8b}, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000040)='1', 0x1) close_range(r3, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x23, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000ad80000000000000ff00000018110000", @ANYRES32=0x1, @ANYBLOB="0000000040000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000006d88e0ff0100000018410000fdffffff000000000000000085100000fdffffff85100000fdffffff186b00000d0000000000000000000000851000000600000085100000faffffff18260000", @ANYBLOB="0000000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0x8001, 0x59, &(0x7f0000000680)=""/89, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x2, 0x2322, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000780)=[0xffffffffffffffff, 0x1, r0, r2], &(0x7f00000007c0)=[{0x0, 0x3, 0xf, 0x1}], 0x10, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000940)={r4, r3, 0x18, 0x0, @val=@perf_event}, 0x18) io_submit(0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r6 = syz_open_dev$loop(&(0x7f0000001900), 0xfc, 0xca000) socket$packet(0x11, 0x3, 0x300) setresuid(0x0, 0xee01, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x6d) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000019080)={r5, 0x800, {0x0, 0x0, 0x0, 0x1, 0x1ffffe, 0x0, 0x0, 0x2, 0x4, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "a9103939c787a16c1ca43f80026d1a855458ecec67ded147e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd2bf35239d2", "4f000000dd9d9ac2f63a7ad700", [0x5, 0x800000]}}) dup(r6) 4.913196418s ago: executing program 0 (id=1185): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101e02, 0x955d817884a843ee) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000030000000090a010400000000000000000700000008000a4000000000090002007379054000000006300000001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000004000380140000001000010000000000000000000084"], 0xa8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x102, 0x166) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000f40)={0x1000008, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000100)={"4cf36a628ca84ddd2961bd42a3b25f1e2273a95c6ff8aa046bd8aca774d0a64b", r4}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xf, 0xb, 0xff}, 0x3d, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x5, 0x4, 0x10007e, 0x20000002, 0x53, 0x6, 0x10001, 0x80005, 0x102, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x2, 0x2, 0x7, 0x4, 0x200ffff, 0x40000026, 0xd, 0x53b7, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x201, 0x0, 0x4, 0x5, 0x8, 0x800080eb, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x2, 0x4, 0x9, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0xd, 0x9, 0x80000130, 0x8004, 0x8001, 0xfffffff3, 0x2, 0xfffffff7, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x4, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x9, 0x1, 0x2, 0xffff, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f2f, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x7, 0x6, 0x8, 0x9, 0x5, 0x47, 0x8020, 0x4, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x200, 0x101, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x9, 0x9], [0x7, 0xa, 0x0, 0x7, 0xfffffffe, 0x100, 0x8d2, 0x0, 0x5, 0x5a, 0x0, 0x5, 0xf, 0x14, 0x6, 0x5, 0x5, 0x8, 0x6, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xf, 0x5, 0x2, 0x2, 0x3, 0x20000808, 0x2, 0x6d03, 0x5, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x1, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x3, 0x128, 0x4, 0x2000001, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x1000, 0x80aaed, 0x4, 0x24], [0x9, 0x8409b33, 0x7ffffffd, 0xb, 0x4, 0x100093a, 0x7, 0x1000006, 0x1, 0x10000, 0xce7, 0x41ff, 0x2, 0x57, 0x4, 0x3, 0x80101, 0x10003, 0x2, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x8, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x4, 0x1000, 0x7, 0xaf, 0x8, 0x400, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0x1000a1f, 0xffffffff, 0x7, 0x8d5, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc2, 0x200, 0xffff2441, 0x100f7f]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r2, r3, 0x0) poll(&(0x7f0000000200)=[{r2, 0xe270}], 0x1, 0x1ff7) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) accept4(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0017"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x30, 0x9, 0xfd, 0x5ae9}, {0x30, 0x7f, 0x4, 0xfefff00c}, {0x6, 0x40, 0x7, 0x2002}]}, 0x10) sendmmsg$inet(r7, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002680)={0xffffffffffffffff, r9, 0x2b, 0x0, @val=@netkit}, 0x1c) 4.755894295s ago: executing program 1 (id=1186): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003740)=[{{&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="3facf96588ce41988ec17ac5e595fa2214b23c14073eb75fb7e9fe0b7b73b4b5de81", 0x22}, {&(0x7f0000000080)="8d1c54e48aaf9ea976d0282737ddb41dc5331898787dd82e69db2164934f10fd8b78f14525826fcd78058c2911c3684e8c1e3aa5203a72b2f69c25ab7badad6a7845a3149a763b24d7b51f289ee10056b77f41161e30eb95f6e42d4db15d6fe8c84b691296731d351b3ed079f5889563ab360a6bb6b0360709a88e7b7564beff40b69c1430c8fb7c90b6e20d824506a8f4b76e803a6e84ca5e5be256682beca5a15024e94d261dcb9ff2b51c10483b736af4d31801b6c3", 0xb7}], 0x2, &(0x7f0000000200)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xfc}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x30}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4b}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)="491e0763140395a1fa23c46ef41e7fc25c8e4afbc3564894db12ec952d8211f76fe8993032c7205ad4ab633defcc535862ce36baa0b2bdb4d83b03abc9a7cbc55532d2bff7a462c63a56d94fb1c4c151a42d0f4c11a6aaabf4d3a5c112a28a1644e9343e8e98d3bd01178eaf6803cad4765940c88dd3f06bfed10bf64b2f0efa1c89d90f0bccd11af04795dc7aee0d52c036ad8379310b9121703aa4a10c5f01f18d74936a4772a4f626b0341abae2dc004018e216ff847bc7f4c101805cfc1a2d0ac08f7bd188348bddb9d09ecb8835d34e4e9ecfa9bb2d5bd52b3c7c7dccd9c57f35", 0xe3}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000700)="abcefc2d795d296b140845edd3746bee5b81602b87c18b45def0c8495d1b156c0badb83ed4f2a2d16d340dbfa53090405b35ca9e364c2a7f2c3e84918ca7809966a8f8fa66895a5ba0a5305b6861a7427fa3376f495f0d09308def", 0x5b}], 0x1, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @rand_addr=0x64010102}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@generic={0x116, 0xf, "f10025d055652f2ed8a1f0dbdd"}, @timestamp_addr={0x44, 0xc, 0x78, 0x1, 0x0, [{@local, 0xc43}]}, @rr={0x7, 0xf, 0x9d, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0xe}, @local]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x78}}, {{&(0x7f0000000840)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000880)="3797b0a854c7dfb5ad74914af6c3753fe3e32057e362225b29ed55a3a5a1ff80bf332a55e8171141c6e6f06615d120a39f9b935ed01fa1a39594062fcee3177585673d1dced9c2d6629b9f9a2120742fe0dd6faf66027eb5a487c651b8f325e2012a88ad94fff3ab193314c9ca833f80c875a9fdac3d7d6a9a357ce3afc134e31c40bd63ed5576ad73109ed28712dcf909fb0e6503e95c065111a630f319d3e927a03b7305e6e4e74f83c9a72bf8bc817a989e36bbe5fce4f0b08b88042c04d09afc30f5", 0xc4}, {&(0x7f0000000980)="b0d38284755830a771de7e6d681a57281de791e4fc01af25e040dc9a2d35a2c4277d0b11262f0610e07c33d317d6964eefdd3c424134b4f1967f4b14fe6b4b4e235da9346a3bee37253f26a502698b74622fde80236b66fe1ae1f043224971d6b5c67060f999cc51339a7915", 0x6c}, {&(0x7f0000000a00)="0a922223fb98ad8bdadf311e661c3bbbac9ce81451f072f01c2761a60b57cdf6f74bb0ac5ea94874e63876749f", 0x2d}, {&(0x7f0000000a40)="340838bb39fb7742fba1ca5089d0025192fd28dc7344a52b269ba6d6af3ec2d182359fd178c21e8e751702f25200671ce52df26515a9c7a3d7dbffd8bf46b4f09949632a", 0x44}, {&(0x7f0000000ac0)="123b330f66", 0x5}, {&(0x7f0000000b00)="39b8a03c1ae1409731226e57409155bbe36c8eab13199f6864cd6a80b9030f738de34685018125c87a25e5e37b83a8ebe455a9430abb729879ecbf7fcfca635f7f7391dc2c5b8ceadd01e64cbeb1", 0x4e}, {&(0x7f0000000b80)}, {&(0x7f0000000bc0)="fbae7aec9f5c262b450bc60e385d1bf2d1559dcf1c3a615f9c81eb5ca38b94372af8e1fbb2316049f32e9f4e7bcbe1813cddda52147d7899452dfc4d51cd3eae28274a5a229f2b", 0x47}], 0x8, &(0x7f0000000cc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@noop, @cipso={0x86, 0x24, 0xffffffffffffffff, [{0x6, 0xa, "2f93cdb58daa9742"}, {0x2, 0x5, "b4c86b"}, {0x6, 0xf, "b041f0e5d372369cc46fd215c5"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x0, [@local, @remote, @remote]}, @noop, @timestamp_prespec={0x44, 0xc, 0x20, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10}]}, @timestamp_prespec={0x44, 0x1c, 0x53, 0x3, 0x7, [{@rand_addr=0x6, 0x2}, {@multicast2, 0x9}, {@broadcast, 0x3c71}]}, @ra={0x94, 0x4, 0x1}, @end, @ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xcb0}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfc}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x134}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000000e00)="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", 0x1000}, {&(0x7f0000001e00)="fb006829b24b5cba32c721c753669ed602a5720085be0ac258cc9fa710a09b3ce82786109cc5219c3a12e951aa83bc20df4ea8bcdae9d5488d9b0b6459dc806dbada72d9fa7b9bb03cb9f746014f7a07d702b858f858f0dffb337097638f8f7c1b36a65a656550794c2460876a20ad03be23034697c0659f9ad192f6d5b71fd79fe3f023b5d60b7aa952a350b5bf4ae8c1ab4236703c4493ef878636c9724f1138a30c0e36c6f2cb88ecddea6f4b70e2f6cffffc4b9b013b9b46677c361a70b1fa194753a7a99331dc033375a2838b582d37285d006e2658c4e36bfe36c626af7fc04f20cee7876aa0a9", 0xea}, {&(0x7f0000001f00)="e36b61bebd9d624e8ba3952d9c2b32c0267e440c82e51ac42121487b61a47e438c3686631d0e4305ac904af7f4e7ecb149534dd6aba76c239e6ce005b3285bc983d311bdc561ee215baa6f39b3cc4772e70a3fd4e904dfc18ba5de5555b5d863098eb88afb4cd89dfed6df52d386b1cf05853ea95a14e885438c008a6dac8703ef0ca29e2fafaa32f90466c7181fc5af", 0x90}, {&(0x7f0000001fc0)="491a21ad53c63b48ebbc5ea948c2649ccb39f943b35bba3ca494e874ba932ffbf7d5505aaddaea55e48d743dbda24bdd7ec3505f759f4bc153776f83f8f0b0a458b9009b7d48a85349829937810025a036faab4e4bbd27ccb36466e5aa4ac51910671731e6f82e984be03816f9c40e70d451ea4b103d2e0a72", 0x79}, {0x0}, {&(0x7f0000002180)="37d01e56b41ca4f43286c4539e886e2b8b1d20d217018949d64613e16021110308b6f6501a4c427672a8bbda95b428221932bd", 0x33}], 0x6}}], 0x6, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 4.704217799s ago: executing program 2 (id=1187): unshare(0x2060000) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f00000000c0)=@md0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r4, &(0x7f0000000100), 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r5, 0x1) bind$inet6(r5, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast2, 0xfa}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000300)="7b9a564d8351a42916085db0645f0aa6d5e1b0405c3214a15b1e076fce244f68291b5472bfff30d5b440c9d8b8250df567c6280969d6094768abe55c04f507189402b75fd0a60ff21515be02fd72a47aa4b7b723f752119c917adf5ea49ed8866b54508d32e6c2d6746da6ba2a09cf1ad034a8d1387802062b49c75dd144f9184e6c34cfb060539865ee06dfc2cdc573c5a0efa44b73539ccb26afa645d1d82cbb88778feb1b4de1669a18e4c064341c201f4b1984e929da67e282615df8be6f5087591939d4c56f85b78fe20626f25a79299815d60eeb", 0xd7}], 0x1, &(0x7f0000000580)=[@rthdr={{0x28, 0x29, 0x39, {0x71, 0x2, 0x0, 0x8, 0x0, [@mcast2]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2f, 0x8, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @local}, @mcast1, @private0, @local]}}}], 0x80}}, {{&(0x7f0000000600)={0xa, 0x4e21, 0x4, @remote, 0x400}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000640)="ecfcc8f0f85ad08769088eb3afcbc4f31c3fa1c03893e36e5bf540fcd6c010d2a6dccc7412fb8f7a1132c578006547d742e2e0fd4737faaf3284bc16caaf7414cd549886e69b117f5109b35e88765ff0291075014187de25a6888c5c665203d98422d748b5b4e5cfb66b29862bc2d079e77478ce57bc8c89994eb97ffc65eed4ae5a3c3e458a", 0x86}], 0x1, &(0x7f0000000740)=[@rthdr={{0x28, 0x29, 0x39, {0x17, 0x2, 0x0, 0x5, 0x0, [@private0]}}}], 0x28}}, {{&(0x7f0000000780)={0xa, 0x4e24, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}, 0x1c, &(0x7f0000000980)=[{&(0x7f00000007c0)}, {&(0x7f0000000800)="85778be69c2f8afd4ed9093da005aad6dd8f47c62efe61ede65fadc3f4907cd3351554fab62641c62429be6028c2c04c6cb1397c4d62e3e43ff3f23951c9aa40bb67c523aa8709912b0c4c91f41090531538ec0e9b6fb696ee448a370c846352f16036cab6a7888c0cd1440f31d6303a344725b5b0005d3652bc4768cf64734d95ceefbd6a7b947ca2f0bca459e8fcef10627d7d77852cc7d4d2e796d13abc468f59d9f77d7d3cdafa4007c58260304b882bca9a56e53cc406013e7f62fd06f574a9063509a4e2030d77bd8d099dea3be426e8880cba52f12063c4b1b92b2cf6666ce8a9029eca9b6de46b674ffb1ebc475a57a8d04710d6091a01d1", 0xfc}, {&(0x7f0000000900)="b3982c8223668d641a3963cb18843cd41b5ee36f4a55edb6e31687aeceac25bc39b8e3b63a21a828fa02bc6d98262d07711c8f6b6b333d1678c4d633bfc2ec0d2b77ddaf4d8f0d5ace4fafd55bb33f1887c77aa93bde80cdddba777ffc3355d80d5dd38e41b1ef05843d9c37d64ad0e122b74f2a", 0x74}], 0x3, &(0x7f0000000c80)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x8, 0x4, 0x1, 0x80, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private0]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x29, 0x6, 0x3, 0x7f, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x32, 0x3, '\x00', [@ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @local}, @enc_lim={0x4, 0x1, 0x3}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x400}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3c, 0x4, 0x0, 0x3, 0x0, [@loopback, @ipv4={'\x00', '\xff\xff', @local}]}}}, @tclass={{0x14, 0x29, 0x43, 0xfffff3df}}], 0x138}}], 0x3, 0x20080058) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'wlan0\x00', 0x4001}) r7 = socket$inet(0x2, 0x800, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9", 0x31}], 0x1}], 0x1, 0x40800) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) 4.657741451s ago: executing program 1 (id=1188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x1}, {}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffc00}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffa, 0x2, 0x10000000, 0x8, 0x3}}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xfc, 0x2f, 0x62, 0x40, 0x9c4, 0x11, 0x638, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x72, 0x6, 0x10, 0x6, "", [{{0x9, 0x4, 0xf0, 0xe8, 0x2, 0xb5, 0x1c, 0x80, 0x3, [], [{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xff, 0x10, 0x3}}, {{0x9, 0x5, 0xeb3925d0f91dd4ca, 0x2, 0x10, 0x10, 0x2, 0x81}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)=@hci, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/189, 0xbd}], 0x1, &(0x7f0000000500)=""/111, 0x6f}, 0x120) 3.861639552s ago: executing program 0 (id=1189): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r1 = syz_io_uring_setup(0x100, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x6) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000400)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x800, @rand_addr=0x64010101}, 0x0, 0x0, 0x0, {0x0, r6}}) (async) io_uring_enter(r1, 0x5, 0x0, 0x0, 0x0, 0x0) (async) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r7, &(0x7f0000000240)=""/164, 0x131, 0x131) (async) ioctl$SNDRV_PCM_IOCTL_UNLINK(r7, 0x4161, 0x0) 3.758386745s ago: executing program 0 (id=1190): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000040)=0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000000c0)={0x2, 0x42}, 0x2) poll(&(0x7f0000000140)=[{r2, 0x8008}], 0x1, 0xa) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private=0xa010101, @in=@empty, 0x4e22, 0x28, 0xfffe, 0x0, 0x2}, {0x4, 0x400000000001, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000}, {0x43, 0x0, 0x80, 0x2}, 0x7, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x4, 0x0, 0x0, 0xe000000}}, 0xe8) listen(r3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x100}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r1, 0x3c8e, 0x10}, 0xc) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x19}}, 0x1c) 3.717172758s ago: executing program 2 (id=1191): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'ip6gre0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000200)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r3, 0x6, &(0x7f0000000080)) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f00000000c0)) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0xa8240, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000140)={0x48}) syz_usb_connect$midi(0x3, 0x31, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x2a39, 0x3fd4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x7, 0x80, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0xa, [], [{{0x9, 0x5, 0x828f68345dc74cce, 0x8, 0x3e7, 0x3, 0x85, 0x3, {0x4}}}]}}}}}]}}, 0x0) write$ppp(r3, &(0x7f00000002c0)="03c277d359e5", 0x6) 3.294503975s ago: executing program 3 (id=1192): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) sendto$inet6(r3, &(0x7f0000000000)="826bb66f", 0x18, 0x0, 0x0, 0xfffffffffffffec8) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000080)={0x400000ca}) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mysys/bus/pci/devices/0000:00:01.0/power/control\x00', 0x1, 0x0) write(r6, &(0x7f0000000500)='auto', 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) read(r9, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050027bd7000000000000f00000008000300", @ANYRES32=r8, @ANYBLOB="08000000000000020000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4084000}, 0x0) 3.15730828s ago: executing program 3 (id=1193): r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, 0x0, 0x0, &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) fsopen(0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r2, 0x540b, 0x1) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) 3.070935885s ago: executing program 4 (id=1194): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe23}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, &(0x7f0000000380)=ANY=[]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001d00)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x2, 0xfffffffe, 0xb84, 0x9, 0x5, 0x0, 0x200000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xcf5, 0x0, 0x0, 0xc74, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x9755, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x1000, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x800, 0xffffffff, 0x0, 0xffff18e5, 0x0, 0x0, 0xfffff003, 0x0, 0x0, 0x2000400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3, 0x6, 0x0, 0x5, 0x0, 0x3, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x201, 0x3, 0x0, 0x0, 0x8000, 0x8, 0x0, 0x4000, 0x20000000, 0x40000, 0x0, 0xa2b1, 0x6, 0x0, 0x0, 0xffffffff, 0xf, 0xf, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2000005, 0x1000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xfffffffc, 0x200, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x1, 0xfffffffd, 0x0, 0xdffffffc, 0x0, 0x7, 0xfffffffd, 0xfffffffc, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xdc, 0xffffffffffffffff, 0x7fffffff, 0x97, 0xfffffffd, {0x6, 0x2, 0x1, 0x401, 0x1, 0x22}, {0x9a, 0x0, 0x40, 0x5, 0x400}, 0x5, 0x2, 0x81}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffe}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x490}}, 0xc0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000540)=0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000021c0)={r3, 0x4}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000d85177e03125e6ec3edd7274410a67462446694651d086207f25b7cecfcce906d4bd88cf366dd8ade6b3f54fdd7351eda1c2ae9cc4face57c5b9c20aecc7630acb0db42c23cdae21108c64211a1376572bd46168f18f216289e35ad659a4c20dcb4df494baa82d1a6a801e13729d3a6c6751b1175b910f42bc6f7a57ed5d52bee6194a2d1028831118a86e1effc"], 0x48) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000600)={0x0, @remote, @initdev}, &(0x7f0000000640)=0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'veth1_to_hsr\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000006c0)) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e406b596bff08ebacbf3d677eda53682d4eaff000000000000000000", @ANYRES16=r11, @ANYRES8=r4, @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$VT_ACTIVATE(r0, 0x4bfa, 0x2000000000000b74) 2.127925919s ago: executing program 0 (id=1195): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='tmpfs\x00', 0xa145cf, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=0,size=0']) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000300)={r0, &(0x7f0000000000)='fuse\x00', 0x8c083, &(0x7f0000000040)={@_ha_fsid={[0xfff, 0x9]}, {0xffff, 0x4, 0x3, 0x1}}, 0x2, &(0x7f0000000080), &(0x7f00000002c0)=0x5}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x168, 0x6c, 0x0, 0x0, 0x0, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @local, [0xff, 0xffffff00, 0x1000000fe], [0xff000000], 'macvlan0\x00', 'rose0\x00', {}, {0xff}, 0x2f, 0xf2, 0x0, 0x20}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@srh={{0x30}, {0x5e, 0x2, 0x8, 0x4, 0x6, 0x208, 0x858}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x5, '\x00', 'syz1\x00', {0x1}}}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4000, 0x0, 0x4}, {}, {0x0, 0x4}, 0x0, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x3a0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000004c0)={0x6b3cfc1a, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e20, @private=0xa010102}}}, 0x108) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000dc0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0886411000500ff840283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84553bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e4a83765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10500b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d80762ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c7dcd6b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f4f1fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x3d, 0x10000000000d08, 0x4, 0x2, 0x4, 0xc, 0x7, 0x7fffffff, 0x122, 0x6000, 0x10, r7, r8, 0x982}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c000480280001800a0001006d61746368000000180002800800010065636e000400030008000240000000000900010073797a3000"], 0xc8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000001bc6500850000008600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f00000000c0)=r13, 0x4) 2.088558002s ago: executing program 3 (id=1196): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FGETXATTR={0x2b, 0x51, 0x0, 0xffffffffffffffff, &(0x7f0000001780), 0x0, 0x0, 0x0, 0x1}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/4080, 0xff0}], 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x2}, [@NFTA_COMPAT_NAME={0x7, 0x1, '(\x00\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x90) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a0", 0xca}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtaction={0x44, 0x30, 0x48b, 0x0, 0x0, {}, [{0x30, 0x1, [@m_nat={0x2c, 0x21, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x20000050) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x50, 0xfffffffffffffffe, &(0x7f0000000340)) 1.82197441s ago: executing program 3 (id=1197): fsopen(&(0x7f0000000000)='jfs\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="e5501fcfeecf2b103737e59758ceb8d1", 0x10) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={@remote, @ipv4={'\x00', '\xff\xff', @remote}, @empty, 0x1, 0x40, 0x8, 0x100, 0x6, 0x808082}) r1 = epoll_create1(0x80000) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001d}) read$char_usb(r2, &(0x7f0000000100)=""/156, 0xfffffe8d) io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f0000000040)={0x400, 0x5, 0x1, '\x00', 0xb}, 0x1) 1.726015868s ago: executing program 1 (id=1198): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x12}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x40104d06, &(0x7f0000000a00)="0000020000000000000002") socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r0 = fsopen(0x0, 0x0) pwritev2(r0, 0x0, 0x0, 0x1, 0x7, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04225506"], 0x58) connect$inet(r4, 0x0, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) read$char_usb(r5, &(0x7f00000000c0)=""/192, 0xc0) 1.719116132s ago: executing program 3 (id=1199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x1}, {}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffc00}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffa, 0x2, 0x10000000, 0x8, 0x3}}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') recvmsg$kcm(r5, &(0x7f00000005c0)={&(0x7f0000000080)=@hci, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/189, 0xbd}], 0x1, &(0x7f0000000500)=""/111, 0x6f}, 0x120) 821.41098ms ago: executing program 2 (id=1200): r0 = socket$inet(0x2, 0x4000000000000001, 0x100) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x0, 0x187}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0xff0f) 804.298523ms ago: executing program 0 (id=1201): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x700}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000040)={0x0, 0xffff, 0x0, 0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0xdcc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x0, 0x1100000000000000}) 687.008888ms ago: executing program 1 (id=1202): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x0, 0x17, 0x5, 0x5, 0xffffffffffffff9f, 0x81, 0x0}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = dup2(r1, r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x41, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r7, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0x4, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10004, 0x10000, 0x0, 0x4, 0x9, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x6, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0xd8, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0xb2db, 0x401, 0xb, 0xfffffff8, 0x7, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x100000, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x40009, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0xfffffffc, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffe7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x2, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x7ffe, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0x8, 0x2, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8c, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x3, 0xf, 0x21, 0x200, 0xa, 0x6, 0x1, 0x1ff, 0xfe, 0x2, 0x66608000, 0x1, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x4, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) ioctl$KVM_SET_CLOCK(r6, 0xc048aec8, &(0x7f00000000c0)={0x5, 0xc, 0x1ff, 0x20004, 0x4}) r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) ioctl$OCFS2_IOC_GROUP_ADD64(r3, 0x40186f03, &(0x7f00000001c0)={0x9, 0x1, 0x4, 0x1ff}) clock_adjtime(0xd, &(0x7f0000000200)={0x1, 0x4, 0x7fffffff, 0x5, 0x4, 0x200, 0xfffffff7, 0x0, 0xfffff2a3, 0xf9, 0x0, 0x47, 0x80000001, 0x5, 0x6, 0x0, 0x0, 0x1, 0x2, 0x9, 0x6, 0x10, 0xfc, 0x1, 0xeb, 0xffffff62}) syz_ublk_setup_queues(r4, r12, &(0x7f0000000540)={0x0, 0x1aa5, 0x80, 0x2, 0x20000}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x0, 0x4, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x40000, 0x800001, 0x69, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x10000, 0x77, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6251, 0x8000, 0x3, 0x0, 0x0, r4}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) 630.506684ms ago: executing program 2 (id=1203): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) sendto$inet6(r3, &(0x7f0000000000)="826bb66f", 0x18, 0x0, 0x0, 0xfffffffffffffec8) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000080)={0x400000ca}) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mysys/bus/pci/devices/0000:00:01.0/power/control\x00', 0x1, 0x0) write(r6, &(0x7f0000000500)='auto', 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) read(r9, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050027bd7000000000000f00000008000300", @ANYRES32=r8, @ANYBLOB="08000000000000020000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4084000}, 0x0) 550.907337ms ago: executing program 3 (id=1204): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="780000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1e00010c000280050001000000000008000740000000010b0016"], 0x78}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f06b5c01000000090401001186eeea000905821704"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000240)={0x1c, 0x0, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x3}, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r5, &(0x7f0000000400)="0000000009022300010100803209fcff00e8ffee0000070581024000000902190001020000000000000001000000000745810200d33442ecfb55", 0x3a) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x200000000000000) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xfffffffffffffea8, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r6, @ANYBLOB="a42d1e69f32ba5d6002164b268de558577d16ab6ef298981688d079cce93b1d8013f81cd66e119c123118597add8e6951db20277b74d1afb865d5f7ba2ac84f78ea8c08090f3e38d79d7d6130a47b188b6a48261d6277ea8a0d8f539241d09cc129052a5bedbde3303db89ec643fdf584610e0fcd5600c9f48bf755994aeee3dcc7077dd0c199f91d576579ad2dd081884e1ddf1d4a802ede48411355a02671a2f1a1904913de06878b1cb0a7abacc68587126a6c83b1f2faf4e8637aa19a9273fbf3442977cc5a3cc81e95228fe5d919c04fae21d66de40a75caf78865d7fbf4467ed90d7a2", @ANYRES32=0x0, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYBLOB="b63a201bd393116a2278ae91c6e6329b399fc729297089e05764eb558752b63868192af7b988e03ede09e9d416a9f4cffcc3861fa68030c25ba404a3069928a39049db7956e8182471306031892091", @ANYBLOB="778a6d0c0e8ad18e1158b432492f27702e20caa1ce30155ca0ab400037de0ee6434075e5148cbd395378a05ddd48d6a5f69ffcfc30bc06f330bdd3cbb94b05ac4446db47fda4b7e9d6aa4871fac3d7a1f96dfebc543f7ed2f09ff79032eea580acf0b676f5152c29677750514c88617f4e6f331495479299c2426db8cf0a23e335d731b2ba3b10535450d154f3d1a5d4a5e130a8902fe9a3b1c6540072f4938fd27b2d56ee982b3f39ca80f27f9af0aad22d2e33bf7249fa6b6ac757", @ANYRES8=r7]) syz_usb_control_io$uac3(r4, &(0x7f0000000180)={0x14, &(0x7f0000000100)={0x0, 0x1, 0x1c, {0x1c, 0x4, "faec42ed4b55f1d21e1fbd6e1e511970f9282bf4381ac32642e8"}}, &(0x7f0000000140)={0x0, 0x3, 0x1d, @string={0x1d, 0x3, "3a40edc187cef476703b4ccffc1906d82496019c830a9dc73db562"}}}, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)={0x0, 0x1, 0x38, "3aea9bbc7ac75faaee1fc2f8c854b582e545c8c45f73d45490c78bcbf89fee20c70adcef464e50b93124ae25006f8da78e50b3f010adcf04"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x81, 0x2, "53ab"}, &(0x7f00000003c0)={0x20, 0x82, 0x1, "f7"}, &(0x7f0000000400)={0x20, 0x83, 0x3, "6e51e9"}, &(0x7f0000000440)={0x20, 0x84, 0x1, 'K'}, &(0x7f0000000480)={0x20, 0x85, 0x3, "049730"}}) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$video4linux(&(0x7f00000000c0), 0x6, 0x481) 387.993029ms ago: executing program 1 (id=1205): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f80aad40c50f2712d82d0102030109021b00f3db80f0bc0904"], 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000360, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000900000009050a", @ANYRES8], 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/hibernate_compression_threads', 0x60a02, 0x0) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) semop(0x0, &(0x7f0000000200), 0x53) unshare(0x4020400) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r8) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="05040000000000000000060000f808000300", @ANYRES32=r6], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x98, r5, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x59, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x8, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @val={0x5, 0x3, {0x7, 0xc9, 0x6}}, @void, @void, @void, @val={0x2d, 0x1a, {0x2ff, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x8, 0xf, [@supported_rates={0x1, 0x2, [{0x0, 0x1}, {0x18, 0x1}]}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x98}}, 0x20000014) acct(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00') r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r10}, @IFLA_ADDRESS={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x810) unshare(0x2c020400) r11 = socket$inet_tcp(0x2, 0x1, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getneightbl={0x14, 0x42, 0x100, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 333.478541ms ago: executing program 2 (id=1206): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0xb7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0xd45, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x42}, 0x2810) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r2}, &(0x7f0000001a40), &(0x7f0000001bc0)=r1}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x4000000) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r2, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x13, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x8, "", [{{0x9, 0x4, 0x0, 0xfc, 0xdf, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0xc1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000380)={0x2c, &(0x7f0000000040)={0x20, 0x8, 0x2b, {0x2b, 0x21, "c263138526792c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a52973661d67a0c554438db1787"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f00000003c0)={0x0, {0x100, 0x52}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0xffffffff, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@private=0xa010100, 0x4e23, 0x4, 0xc24, 0x9, 0xfffffffc}}, 0x44) 292.453176ms ago: executing program 0 (id=1207): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) dup2(r0, r0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x194, 0x10, 0x1, 0x70bd2d, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0xfffe, 0xecdf, 0x0, 0x0, 0xa}, {@in=@private=0xa010101, 0xffffffff, 0x32}, @in=@broadcast, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x9}, {0xfffffffffffffffd, 0x400804, 0x9, 0x292}, {0x1cb00000, 0x5}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(camellia)\x00'}, 0x80, "3ae0bd000b000000366a6a849a739045"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x194}}, 0x44050) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000550001002bbd70000200000007000000", @ANYRES32=r2, @ANYBLOB="20e70100cc6041f02b9ed509d3989743eed4797fb58ed0065bbc70069e9ff316366507426cbed7689edec79da6955d05ecd3b5d07b0b6afe00eb95021f3827656023aeab0cdeefb943701c2b6e775b354d89ec6c82d41afe8b5b7b25fd4d5b00418ac56c6673861b198631811608bef93b6ea2f9b6821632611a0105b5e6926cb1e7d24ae0f9f26cee88740e2ed28a22b02f71ff5285f24d5248c5bb6ce17b3f", @ANYRES32=r2, @ANYBLOB="010200007f000001000000000000000000000000dd860000"], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) (async) r3 = socket$rxrpc(0x21, 0x2, 0xa) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) (async) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r5, &(0x7f0000000000)=ANY=[], 0x9) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f00000000c0)=0x4) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x8ac02) (async) syz_usb_disconnect(r7) close_range(r6, 0xffffffffffffffff, 0x0) (async) connect$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @private=0xa010102}}, 0x24) (async) r8 = socket$kcm(0xf, 0x3, 0x2) (async) prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x8, 0x910d}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8feffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000280)={r10, 0x0, 0x0}, 0x10) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) sendmsg$inet(r8, &(0x7f0000003780)={0x0, 0x34000, &(0x7f0000000080)=[{&(0x7f00000000c0)="020a000302000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 0s ago: executing program 32 (id=1207): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) dup2(r0, r0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x194, 0x10, 0x1, 0x70bd2d, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0xfffe, 0xecdf, 0x0, 0x0, 0xa}, {@in=@private=0xa010101, 0xffffffff, 0x32}, @in=@broadcast, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x9}, {0xfffffffffffffffd, 0x400804, 0x9, 0x292}, {0x1cb00000, 0x5}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(camellia)\x00'}, 0x80, "3ae0bd000b000000366a6a849a739045"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x194}}, 0x44050) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000550001002bbd70000200000007000000", @ANYRES32=r2, @ANYBLOB="20e70100cc6041f02b9ed509d3989743eed4797fb58ed0065bbc70069e9ff316366507426cbed7689edec79da6955d05ecd3b5d07b0b6afe00eb95021f3827656023aeab0cdeefb943701c2b6e775b354d89ec6c82d41afe8b5b7b25fd4d5b00418ac56c6673861b198631811608bef93b6ea2f9b6821632611a0105b5e6926cb1e7d24ae0f9f26cee88740e2ed28a22b02f71ff5285f24d5248c5bb6ce17b3f", @ANYRES32=r2, @ANYBLOB="010200007f000001000000000000000000000000dd860000"], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) (async) r3 = socket$rxrpc(0x21, 0x2, 0xa) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) (async) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r5, &(0x7f0000000000)=ANY=[], 0x9) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f00000000c0)=0x4) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x8ac02) (async) syz_usb_disconnect(r7) close_range(r6, 0xffffffffffffffff, 0x0) (async) connect$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @private=0xa010102}}, 0x24) (async) r8 = socket$kcm(0xf, 0x3, 0x2) (async) prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x8, 0x910d}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8feffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000280)={r10, 0x0, 0x0}, 0x10) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) sendmsg$inet(r8, &(0x7f0000003780)={0x0, 0x34000, &(0x7f0000000080)=[{&(0x7f00000000c0)="020a000302000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) kernel console output (not intermixed with test programs): : avc: denied { watch_reads } for pid=8099 comm="syz.4.725" path="/141/file1" dev="tmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 219.534414][ T8092] netlink: 'syz.2.721': attribute type 4 has an invalid length. [ 219.696096][ T5699] usb 3-1: USB disconnect, device number 42 [ 219.737860][ T8124] FAULT_INJECTION: forcing a failure. [ 219.737860][ T8124] name failslab, interval 1, probability 0, space 0, times 0 [ 219.758001][ T1659] usb 5-1: USB disconnect, device number 16 [ 219.802050][ T8124] CPU: 0 UID: 0 PID: 8124 Comm: syz.1.733 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.802069][ T8124] Tainted: [L]=SOFTLOCKUP [ 219.802073][ T8124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 219.802080][ T8124] Call Trace: [ 219.802084][ T8124] [ 219.802088][ T8124] dump_stack_lvl+0x100/0x190 [ 219.802107][ T8124] should_fail_ex.cold+0x5/0xa [ 219.802120][ T8124] should_failslab+0xc2/0x120 [ 219.802135][ T8124] __kmalloc_noprof+0xfc/0x820 [ 219.802148][ T8124] ? io_cache_alloc_new+0x45/0xe0 [ 219.802164][ T8124] io_cache_alloc_new+0x45/0xe0 [ 219.802177][ T8124] __io_prep_rw+0x21d/0xfb0 [ 219.802192][ T8124] ? __pfx___io_prep_rw+0x10/0x10 [ 219.802207][ T8124] ? __io_alloc_req_refill+0x2e1/0x330 [ 219.802226][ T8124] io_prep_rw+0x76/0x2c0 [ 219.802240][ T8124] ? __pfx_io_prep_rw+0x10/0x10 [ 219.802257][ T8124] io_submit_sqes+0xa03/0x2480 [ 219.802280][ T8124] __do_sys_io_uring_enter+0xa88/0x1b10 [ 219.802298][ T8124] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 219.802312][ T8124] ? __fget_files+0x21f/0x3d0 [ 219.802323][ T8124] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 219.802342][ T8124] ? fput+0x79/0x100 [ 219.802354][ T8124] ? ksys_write+0x1ac/0x250 [ 219.802364][ T8124] ? __pfx_ksys_write+0x10/0x10 [ 219.802377][ T8124] do_syscall_64+0x115/0x870 [ 219.802388][ T8124] ? clear_bhb_loop+0x70/0xc0 [ 219.802403][ T8124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.802414][ T8124] RIP: 0033:0x7f2dbcd9e0d9 [ 219.802424][ T8124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.802434][ T8124] RSP: 002b:00007f2dbdb9d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 219.802445][ T8124] RAX: ffffffffffffffda RBX: 00007f2dbd026090 RCX: 00007f2dbcd9e0d9 [ 219.802452][ T8124] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000000000e [ 219.802458][ T8124] RBP: 00007f2dbdb9d090 R08: 0000000000000000 R09: 0000000000000000 [ 219.802464][ T8124] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 219.802470][ T8124] R13: 00007f2dbd026128 R14: 00007f2dbd026090 R15: 00007ffec0d07ff8 [ 219.802483][ T8124] [ 220.133530][ T8127] fuse: Bad value for 'rootmode' [ 220.181352][ T8131] tipc: Started in network mode [ 220.186232][ T8131] tipc: Node identity 7f000001, cluster identity 4711 [ 220.193242][ T8131] tipc: Enabling of bearer rejected, failed to enable media [ 220.395079][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.737'. [ 220.720431][ T1659] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 220.739577][ T30] audit: type=1400 audit(1787015637.070:605): avc: denied { ioctl } for pid=8139 comm="syz.3.739" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 220.772082][ T8138] loop9: detected capacity change from 0 to 8 [ 220.779953][ T8138] Dev loop9: unable to read RDB block 8 [ 220.785511][ T8138] loop9: unable to read partition table [ 220.791248][ T8138] loop9: partition table beyond EOD, truncated [ 220.797375][ T8138] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 220.881969][ T1659] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 220.940533][ T1659] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.992432][ T30] audit: type=1400 audit(1787015637.270:606): avc: denied { getopt } for pid=8146 comm="syz.0.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 221.016209][ T1659] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.118160][ T8156] fuse: Bad value for 'rootmode' [ 221.148833][ T30] audit: type=1400 audit(1787015637.370:607): avc: denied { getopt } for pid=8153 comm="syz.4.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 221.310956][ T30] audit: type=1400 audit(1787015637.420:608): avc: denied { mounton } for pid=8149 comm="syz.2.743" path="/syzcgroup/cpu/syz2/memory.force_empty" dev="cgroup" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 221.344611][ T8163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.437145][ T8163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.500669][ T1659] wacom 0003:056A:033B.0005: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 221.530404][ T30] audit: type=1400 audit(1787015637.440:609): avc: denied { bind } for pid=8149 comm="syz.2.743" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 221.577658][ T1659] wacom 0003:056A:033B.0005: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0 [ 221.639294][ T1659] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:056A:033B.0005/input/input18 [ 221.654980][ T30] audit: type=1400 audit(1787015637.440:610): avc: denied { getopt } for pid=8149 comm="syz.2.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 221.809447][ T5699] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 221.980790][ T5699] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 222.055825][ T1659] usb 2-1: USB disconnect, device number 22 [ 222.067816][ T5699] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 222.097573][ T5699] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 222.147892][ T8174] overlayfs: failed to resolve 'proc_dir/scsi/scsi': -2 [ 222.161962][ T5699] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 222.222864][ T5699] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 222.289999][ T8176] loop9: detected capacity change from 0 to 8 [ 222.296582][ T8176] Dev loop9: unable to read RDB block 8 [ 222.302216][ T8176] loop9: unable to read partition table [ 222.307928][ T8176] loop9: partition table beyond EOD, truncated [ 222.314189][ T8176] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 222.361472][ T5699] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 222.432391][ T5699] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 222.458941][ T30] audit: type=1326 audit(1787015638.780:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8179 comm="syz.0.755" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8da79e0d9 code=0x0 [ 222.503043][ T5699] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 222.528687][ T8182] netlink: 4560 bytes leftover after parsing attributes in process `syz.3.756'. [ 222.548116][ T5699] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 222.570834][ T8182] netlink: 4560 bytes leftover after parsing attributes in process `syz.3.756'. [ 222.604018][ T5699] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 222.637034][ T8182] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.661882][ T8183] netlink: 332 bytes leftover after parsing attributes in process `syz.0.755'. [ 222.687443][ T5699] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 222.740508][ T5699] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 222.758381][ T5699] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 222.792731][ T5699] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 222.835839][ T5699] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 222.868075][ T8182] block2mtd: error: cannot open device [ 222.879390][ T5699] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 222.915556][ T5699] usb 5-1: string descriptor 0 read error: -22 [ 222.927898][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.949423][ T1659] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 222.976820][ T5699] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 223.090235][ T1659] usb 2-1: device descriptor read/64, error -71 [ 223.179826][ T8166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.206739][ T8166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.236533][ T8166] netlink: 'syz.4.750': attribute type 4 has an invalid length. [ 223.268127][ T5699] usb 5-1: USB disconnect, device number 17 [ 223.364224][ T1659] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 223.975828][ T1659] usb 2-1: device descriptor read/64, error -71 [ 224.359418][ T1659] usb usb2-port1: attempt power cycle [ 224.453706][ T8202] bridge0: port 3(syz_tun) entered blocking state [ 224.516118][ T8202] bridge0: port 3(syz_tun) entered disabled state [ 224.537659][ T8202] syz_tun: entered allmulticast mode [ 224.581541][ T8202] syz_tun: entered promiscuous mode [ 224.607474][ T8202] bridge0: port 3(syz_tun) entered blocking state [ 224.615047][ T8202] bridge0: port 3(syz_tun) entered forwarding state [ 224.626714][ T8205] netlink: 20 bytes leftover after parsing attributes in process `syz.4.761'. [ 224.722556][ T1659] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 224.775658][ T1659] usb 2-1: device descriptor read/8, error -71 [ 225.214616][ T1659] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 225.917572][ T30] audit: type=1400 audit(1787015642.250:612): avc: denied { write } for pid=8221 comm="syz.2.764" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 226.354733][ T1659] usb 2-1: device not accepting address 26, error -71 [ 226.736647][ T6341] udevd[6341]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 226.846607][ T1659] usb usb2-port1: unable to enumerate USB device [ 226.964576][ T30] audit: type=1400 audit(1787015642.280:613): avc: denied { setattr } for pid=8221 comm="syz.2.764" name="dynamic_events" dev="tracefs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 227.856233][ T30] audit: type=1400 audit(1787015644.020:614): avc: denied { write } for pid=8231 comm="syz.3.767" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 227.956439][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.770'. [ 228.239982][ T30] audit: type=1400 audit(1787015644.250:615): avc: denied { mount } for pid=8238 comm="syz.0.769" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 228.291571][ T5808] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 228.459645][ T30] audit: type=1400 audit(1787015644.600:616): avc: denied { ioctl } for pid=8238 comm="syz.0.769" path="socket:[20588]" dev="sockfs" ino=20588 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 228.649001][ T5699] IPVS: starting estimator thread 0... [ 228.655854][ T30] audit: type=1400 audit(1787015644.600:617): avc: denied { ioctl } for pid=8238 comm="syz.0.769" path="socket:[20492]" dev="sockfs" ino=20492 ioctlcmd=0x9403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 228.683989][ T5808] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 228.716469][ T5808] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 228.740104][ T5808] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 228.776881][ T5808] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 228.788731][ T8259] IPVS: using max 78 ests per chain, 187200 per kthread [ 228.891079][ T8261] FAULT_INJECTION: forcing a failure. [ 228.891079][ T8261] name failslab, interval 1, probability 0, space 0, times 0 [ 228.908215][ T5808] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 228.933651][ T5808] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 228.954469][ T8261] CPU: 0 UID: 0 PID: 8261 Comm: syz.2.776 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.954487][ T8261] Tainted: [L]=SOFTLOCKUP [ 228.954491][ T8261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 228.954497][ T8261] Call Trace: [ 228.954502][ T8261] [ 228.954506][ T8261] dump_stack_lvl+0x100/0x190 [ 228.954524][ T8261] should_fail_ex.cold+0x5/0xa [ 228.954538][ T8261] should_failslab+0xc2/0x120 [ 228.954553][ T8261] __kmalloc_cache_noprof+0x91/0x6c0 [ 228.954564][ T8261] ? snd_pcm_oss_change_params_locked+0x247/0x39f0 [ 228.954586][ T8261] snd_pcm_oss_change_params_locked+0x247/0x39f0 [ 228.954605][ T8261] ? trace_contention_end+0x126/0x160 [ 228.954621][ T8261] ? __mutex_lock+0x26d/0x1bd0 [ 228.954640][ T8261] ? snd_pcm_oss_write+0x49a/0xa30 [ 228.954652][ T8261] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 228.954671][ T8261] ? __pfx___mutex_lock+0x10/0x10 [ 228.954688][ T8261] ? get_pid_task+0xfc/0x250 [ 228.954697][ T8261] ? get_pid_task+0xfc/0x250 [ 228.954708][ T8261] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 228.954727][ T8261] snd_pcm_oss_write+0x4bb/0xa30 [ 228.954738][ T8261] ? bpf_lsm_file_permission+0x9/0x10 [ 228.954755][ T8261] ? security_file_permission+0x76/0x210 [ 228.954776][ T8261] vfs_write+0x2aa/0x1050 [ 228.954786][ T8261] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 228.954798][ T8261] ? __pfx_vfs_write+0x10/0x10 [ 228.954806][ T8261] ? find_held_lock+0x2b/0x80 [ 228.954816][ T8261] ? __fget_files+0x215/0x3d0 [ 228.954826][ T8261] ? __fget_files+0x215/0x3d0 [ 228.954839][ T8261] ? __fget_files+0x21f/0x3d0 [ 228.954854][ T8261] ksys_write+0x12a/0x250 [ 228.954863][ T8261] ? __pfx_ksys_write+0x10/0x10 [ 228.954876][ T8261] do_syscall_64+0x115/0x870 [ 228.954888][ T8261] ? clear_bhb_loop+0x70/0xc0 [ 228.954901][ T8261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.954911][ T8261] RIP: 0033:0x7f9ccd99e0d9 [ 228.954921][ T8261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.954931][ T8261] RSP: 002b:00007f9cce948028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 228.954942][ T8261] RAX: ffffffffffffffda RBX: 00007f9ccdc25fa0 RCX: 00007f9ccd99e0d9 [ 228.954948][ T8261] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000004 [ 228.954954][ T8261] RBP: 00007f9cce948090 R08: 0000000000000000 R09: 0000000000000000 [ 228.954962][ T8261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.954968][ T8261] R13: 00007f9ccdc26038 R14: 00007f9ccdc25fa0 R15: 00007ffd4fa94638 [ 228.954982][ T8261] [ 228.959107][ T30] audit: type=1400 audit(1787015645.290:618): avc: denied { unmount } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 229.376068][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.778'. [ 229.395212][ T5808] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 229.416276][ T5808] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 229.604036][ T5808] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 230.033937][ T5699] IPVS: starting estimator thread 0... [ 230.310130][ T8270] IPVS: using max 77 ests per chain, 184800 per kthread [ 230.456096][ T5808] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 230.581675][ T5808] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 231.422208][ T5808] usb 5-1: unable to read config index 2 descriptor/start: -71 [ 231.473991][ T5808] usb 5-1: can't read configurations, error -71 [ 231.560901][ T8291] 9pnet_virtio: no channels available for device syz [ 231.622693][ T8281] autofs: Unknown parameter '0x0000000000000000' [ 231.679592][ T8297] netlink: 'syz.0.785': attribute type 23 has an invalid length. [ 232.081868][ T1659] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 232.110509][ T8309] loop7: detected capacity change from 0 to 7 [ 232.125829][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 232.135568][ C0] buffer_io_error: 24 callbacks suppressed [ 232.135578][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 232.163036][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 232.172681][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 232.181070][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 232.190664][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 232.201227][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 232.210868][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 232.225666][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 232.235407][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 232.244197][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 232.253795][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 232.264338][ T1659] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 232.723849][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 232.733478][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 232.746362][ T1659] usb 3-1: config 0 interface 0 has no altsetting 0 [ 233.028678][ T8309] ldm_validate_partition_table(): Disk read failed. [ 233.196463][ T1659] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.831175][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 233.840816][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 233.849722][ T8318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.870865][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 233.880484][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 233.889951][ T1659] usb 3-1: config 0 descriptor?? [ 233.939994][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 233.949663][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 233.959699][ T8316] overlayfs: overlapping lowerdir path [ 233.981143][ T8309] Dev loop7: unable to read RDB block 0 [ 233.991858][ T8318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.017972][ T30] audit: type=1400 audit(1787015647.691:619): avc: denied { ioctl } for pid=8282 comm="syz.4.783" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 234.064525][ T8318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.088071][ T8309] loop7: unable to read partition table [ 234.104866][ T8318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.119827][ T8309] loop7: partition table beyond EOD, truncated [ 234.142345][ T8318] netlink: 'syz.0.793': attribute type 4 has an invalid length. [ 234.163861][ T8309] loop_reread_partitions: partition scan of loop7 (úùƒå¡™jÌ–ãßÔ 8½?ã}X‹%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQýŠ5) failed (rc=-5) [ 234.200373][ T30] audit: type=1400 audit(1787015648.432:620): avc: denied { listen } for pid=8305 comm="syz.4.791" lport=59795 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 234.393492][ T1659] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x1 [ 234.419438][ T1659] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x5 [ 234.452916][ T30] audit: type=1400 audit(1787015650.783:621): avc: denied { watch } for pid=8325 comm="syz.4.795" path="/155/net_prio.prioidx" dev="tmpfs" ino=855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 234.487872][ T1659] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x6 [ 234.519735][ T1659] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 234.553851][ T1659] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 234.601641][ T30] audit: type=1400 audit(1787015650.813:622): avc: denied { watch_sb } for pid=8325 comm="syz.4.795" path="/155/net_prio.prioidx" dev="tmpfs" ino=855 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 234.628107][ T1659] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 234.650932][ T1659] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 234.673346][ T1659] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 234.704512][ T1659] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 234.732202][ T1659] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 234.746368][ T5699] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 234.907034][ T5699] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 234.966211][ T5808] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 235.642387][ T1659] usb 3-1: USB disconnect, device number 43 [ 235.676085][ T5699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.732813][ T5699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.795796][ T5808] usb 5-1: Using ep0 maxpacket: 16 [ 236.485343][ T5699] usb 4-1: config 0 descriptor?? [ 236.597795][ T5808] usb 5-1: unable to get BOS descriptor or descriptor too short [ 236.606162][ T30] audit: type=1400 audit(1787015652.944:623): avc: denied { setattr } for pid=8345 comm="syz.0.802" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 236.706582][ T5808] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 236.805195][ T5808] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.874099][ T5808] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 236.965735][ T5808] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 237.002689][ T5808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.022040][ T5808] usb 5-1: Product: syz [ 237.039783][ T5808] usb 5-1: Manufacturer: syz [ 237.061594][ T5808] usb 5-1: SerialNumber: syz [ 237.101695][ T5699] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 237.117612][ T30] audit: type=1400 audit(1787015653.454:624): avc: denied { lock } for pid=8356 comm="syz.2.805" path="socket:[20928]" dev="sockfs" ino=20928 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 237.163686][ T5699] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0007/input/input22 [ 237.331048][ T8330] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 237.348126][ T5808] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 238.151672][ T5808] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 238.184356][ T5699] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 238.341739][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.807'. [ 238.356549][ T5699] usb 4-1: USB disconnect, device number 17 [ 238.438983][ T8367] fido_id[8367]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 238.483543][ T5808] usb 5-1: 2:1 : can't get Cluster Descriptor [ 238.772059][ T30] audit: type=1400 audit(1787015655.105:625): avc: denied { write } for pid=8377 comm="syz.0.811" name="usb_gadget" dev="configfs" ino=449 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 238.817927][ T8380] netlink: 20 bytes leftover after parsing attributes in process `syz.3.812'. [ 238.830733][ T5808] usb 5-1: USB disconnect, device number 20 [ 238.857302][ T1659] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 238.898340][ T30] audit: type=1400 audit(1787015655.135:626): avc: denied { create } for pid=8377 comm="syz.0.811" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 238.993308][ T8385] netlink: 24 bytes leftover after parsing attributes in process `syz.3.813'. [ 239.012904][ T30] audit: type=1400 audit(1787015655.255:627): avc: denied { write } for pid=8377 comm="syz.0.811" name="strings" dev="configfs" ino=21002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 239.059518][ T1659] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 239.096631][ T1659] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 239.115019][ T30] audit: type=1400 audit(1787015655.255:628): avc: denied { write } for pid=8377 comm="syz.0.811" name="functions" dev="configfs" ino=21000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 239.154371][ T1659] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 239.191461][ T1659] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 239.219444][ T30] audit: type=1400 audit(1787015655.285:629): avc: denied { write } for pid=8377 comm="syz.0.811" name="configs" dev="configfs" ino=21001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 239.249472][ T1659] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 239.286544][ T1659] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 239.314825][ T30] audit: type=1400 audit(1787015655.295:630): avc: denied { write } for pid=8377 comm="syz.0.811" name="strings" dev="configfs" ino=21021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 239.354024][ T1659] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 239.382753][ T1659] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 239.433223][ T1659] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 239.450691][ T30] audit: type=1400 audit(1787015655.305:631): avc: denied { write } for pid=8377 comm="syz.0.811" name="c.1" dev="configfs" ino=21020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 240.309699][ T1659] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 240.390914][ T1659] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 240.406860][ T30] audit: type=1400 audit(1787015655.305:632): avc: denied { write } for pid=8377 comm="syz.0.811" name="c.1" dev="configfs" ino=21020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 240.564091][ T1659] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 241.247587][ T8400] tmpfs: Unknown parameter 'usrquotaÈìg˜c\EùðþÍ·T?¡Ì°Sjû¼‚‰‹ª"x&À÷8„ÙÚqK¦îÄe˜ŸØþKWr¸>±“?ñè€Xÿtmi)PéŸÞIŽýßé\'' [ 241.280576][ T1659] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 241.294222][ T5808] libceph: connect (1)[c::]:6789 error -101 [ 241.316149][ T5808] libceph: mon0 (1)[c::]:6789 connect error [ 241.406849][ T30] audit: type=1400 audit(1787015655.305:633): avc: denied { ioctl } for pid=8377 comm="syz.0.811" path="/207/config/usb_gadget/g1/idProduct" dev="configfs" ino=21008 ioctlcmd=0x540f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 241.437387][ T8400] ceph: No mds server is up or the cluster is laggy [ 242.145764][ T1659] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 242.341277][ T1659] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 242.841312][ T8417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.070350][ T30] audit: type=1400 audit(1787015655.375:634): avc: denied { write } for pid=8377 comm="syz.0.811" name="c.1" dev="configfs" ino=21020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 243.254484][ T1659] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 243.411323][ T1659] usb 2-1: string descriptor 0 read error: -71 [ 243.446954][ T8417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.455354][ T1659] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.472919][ T30] audit: type=1400 audit(1787015655.385:635): avc: denied { remove_name } for pid=8377 comm="syz.0.811" name="ecm.usb0" dev="configfs" ino=21023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 243.543968][ T1659] usb 2-1: can't set config #168, error -71 [ 243.599192][ T1659] usb 2-1: USB disconnect, device number 27 [ 244.444295][ T30] audit: type=1400 audit(1787015655.385:636): avc: denied { unlink } for pid=8377 comm="syz.0.811" name="ecm.usb0" dev="configfs" ino=21023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=lnk_file permissive=1 [ 244.547001][ T8428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.824'. [ 244.637290][ T30] audit: type=1400 audit(1787015656.716:637): avc: denied { create } for pid=8393 comm="syz.0.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 244.804151][ T8444] netlink: 76 bytes leftover after parsing attributes in process `syz.4.827'. [ 246.160809][ T1659] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 246.962350][ T8467] process 'syz.4.835' launched './file0' with NULL argv: empty string added [ 246.980203][ T30] audit: type=1400 audit(1787015663.319:638): avc: denied { execute_no_trans } for pid=8465 comm="syz.4.835" path="/165/file0" dev="tmpfs" ino=908 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 247.049485][ T8472] IPv6: addrconf: prefix option has invalid lifetime [ 247.119797][ T1659] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 247.163924][ T1659] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 247.204291][ T1659] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 247.271222][ T1659] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 247.394780][ T1659] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 247.567400][ T1659] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 247.611929][ T1659] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 247.625008][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.841'. [ 247.636028][ T1659] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 247.666998][ T1659] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 247.714793][ T1659] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 247.753605][ T1659] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 247.800660][ T1659] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 247.894336][ T1659] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 247.917115][ T1659] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 248.697491][ T1659] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 248.823887][ T1659] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 248.907682][ T1659] usb 3-1: string descriptor 0 read error: -22 [ 248.930022][ T1659] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.975240][ T1659] usb 3-1: can't set config #168, error -71 [ 249.014203][ T1659] usb 3-1: USB disconnect, device number 44 [ 249.083841][ T8508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.099398][ T5699] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 249.114875][ T8508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.171051][ T8508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.187642][ T5597] Bluetooth: Unexpected continuation frame (len 16) [ 249.202232][ T8508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.269532][ T5699] usb 4-1: Using ep0 maxpacket: 16 [ 249.276229][ T5699] usb 4-1: unable to get BOS descriptor or descriptor too short [ 249.325416][ T5699] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 249.334599][ T1659] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 249.353030][ T5699] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.367128][ T8513] loop9: detected capacity change from 0 to 8 [ 249.373736][ T8513] Dev loop9: unable to read RDB block 8 [ 249.379332][ T8513] loop9: unable to read partition table [ 249.385039][ T8513] loop9: partition table beyond EOD, truncated [ 249.391211][ T8513] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 249.408537][ T5699] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 249.450999][ T5699] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 249.493471][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.502813][ T1659] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 249.512689][ T5699] usb 4-1: Product: syz [ 249.521877][ T5699] usb 4-1: Manufacturer: syz [ 249.527145][ T1659] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 249.548959][ T5699] usb 4-1: SerialNumber: syz [ 249.561561][ T1659] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 249.589883][ T1659] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.650778][ T8503] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 249.672652][ T1659] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 249.685767][ T8517] loop9: detected capacity change from 0 to 8 [ 249.692497][ T8517] Dev loop9: unable to read RDB block 8 [ 249.698049][ T8517] loop9: unable to read partition table [ 249.703792][ T8517] loop9: partition table beyond EOD, truncated [ 249.709966][ T8517] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 249.735850][ T4962] Dev loop9: unable to read RDB block 8 [ 249.763642][ T4962] loop9: unable to read partition table [ 249.789789][ T4962] loop9: partition table beyond EOD, truncated [ 249.819551][ T5699] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 249.856580][ T5699] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 250.116824][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.857'. [ 250.873569][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.879939][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.925310][ T1659] usb 3-1: USB disconnect, device number 45 [ 250.962293][ T5699] usb 4-1: USB disconnect, device number 18 [ 251.123971][ T8532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.196295][ T8532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.214806][ T8474] Process accounting resumed [ 251.234905][ T8532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.271908][ T8532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.606659][ T8539] CIFS: Attempting to mount //127.0.0.1/share [ 251.620892][ T8539] CIFS: VFS: Error connecting to socket. Aborting operation. [ 251.636547][ T8539] CIFS: VFS: cifs_mount failed w/return code = -101 [ 251.717646][ T5597] Bluetooth: Unexpected continuation frame (len 16) [ 252.081122][ T8555] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 252.182122][ T8555] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 252.238609][ T5699] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 252.448757][ T5699] usb 4-1: Using ep0 maxpacket: 16 [ 253.078492][ T5699] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 253.131224][ T8555] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 253.144478][ T8562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'. [ 253.184428][ T5699] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 253.209945][ T8562] netlink: 'syz.1.867': attribute type 21 has an invalid length. [ 253.377822][ T5699] usb 4-1: config 0 has no interface number 0 [ 253.410010][ T8569] 9pnet_virtio: no channels available for device syz [ 253.434189][ T5699] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 253.460840][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.867'. [ 253.510872][ T5699] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 253.534489][ T8555] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 253.556027][ T8569] netlink: 'syz.2.869': attribute type 23 has an invalid length. [ 253.575678][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.599805][ T8562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'. [ 253.609092][ T57] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.626313][ T5699] usb 4-1: Product: syz [ 253.674598][ T57] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.703979][ T5699] usb 4-1: Manufacturer: syz [ 253.726877][ T8562] netlink: 'syz.1.867': attribute type 21 has an invalid length. [ 253.759004][ T5699] usb 4-1: SerialNumber: syz [ 253.774048][ T8555] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 253.803607][ T57] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.851495][ T5699] usb 4-1: config 0 descriptor?? [ 253.860305][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.867'. [ 253.950709][ T8553] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 253.961791][ T57] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.001465][ T8553] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 254.261057][ T8553] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 254.278878][ T8553] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 254.365383][ T5890] smbdirect: ib_dev[syz2] removed [ 254.397010][ T5808] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 254.476974][ T1659] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 254.504682][ T5699] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 254.534986][ T5699] asix 4-1:0.34: probe with driver asix failed with error -61 [ 254.569032][ T5808] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 254.610377][ T5808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.625147][ T8604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.643365][ T5808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.656531][ T1659] usb 5-1: Using ep0 maxpacket: 16 [ 254.661874][ T8604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.686163][ T1659] usb 5-1: unable to get BOS descriptor or descriptor too short [ 254.700928][ T5808] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 254.714260][ T1659] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 254.760499][ T5808] usb 2-1: Manufacturer: syz [ 254.772133][ T5808] usb 2-1: config 0 descriptor?? [ 254.781467][ T1659] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.802036][ T1659] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 254.818810][ T8606] loop9: detected capacity change from 0 to 8 [ 254.825338][ T8606] Dev loop9: unable to read RDB block 8 [ 254.830948][ T8606] loop9: unable to read partition table [ 254.836666][ T8606] loop9: partition table beyond EOD, truncated [ 254.842806][ T8606] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 254.875323][ T1659] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 254.919928][ T1659] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.937354][ T1659] usb 5-1: Product: syz [ 254.946081][ T1659] usb 5-1: Manufacturer: syz [ 254.950969][ T1659] usb 5-1: SerialNumber: syz [ 255.166995][ T1659] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 255.175476][ T1659] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 255.184654][ T5699] usb 3-1: new low-speed USB device number 46 using dummy_hcd [ 255.638776][ T5699] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 255.914172][ T30] audit: type=1400 audit(1787015672.053:639): avc: denied { execute } for pid=8595 comm="syz.1.871" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=21787 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 256.151249][ T5699] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 256.254894][ T5699] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 256.308946][ T10] usb 4-1: USB disconnect, device number 19 [ 256.326466][ T1659] usb 5-1: USB disconnect, device number 21 [ 256.347762][ T5808] uclogic 0003:256C:006D.0008: failed retrieving string descriptor #200: -71 [ 256.365276][ T8616] ALSA: mixer_oss: invalid OSS volume '' [ 256.402528][ T30] audit: type=1400 audit(1787015672.454:640): avc: denied { connect } for pid=8595 comm="syz.1.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 256.422522][ T6591] udevd[6591]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 256.432705][ T5699] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 256.458607][ T5808] uclogic 0003:256C:006D.0008: failed retrieving pen parameters: -71 [ 256.468494][ T8616] ALSA: mixer_oss: invalid OSS volume '' [ 256.504005][ T6591] udevd[6591]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 256.520493][ T5808] uclogic 0003:256C:006D.0008: failed probing pen v2 parameters: -71 [ 256.537775][ T5699] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 256.551816][ T8616] ALSA: mixer_oss: invalid OSS volume '' [ 256.578270][ T30] audit: type=1400 audit(1787015672.454:641): avc: denied { bind } for pid=8595 comm="syz.1.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 256.597730][ T5808] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 256.625526][ T5699] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 256.654473][ T5808] uclogic 0003:256C:006D.0008: probe with driver uclogic failed with error -71 [ 256.673424][ T8621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.683993][ T8616] ALSA: mixer_oss: invalid OSS volume '' [ 256.707512][ T5699] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 256.720283][ T8621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.735592][ T5808] usb 2-1: USB disconnect, device number 28 [ 256.744819][ T30] audit: type=1400 audit(1787015672.454:642): avc: denied { read } for pid=8595 comm="syz.1.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 256.777891][ T5699] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 256.807239][ T8616] ALSA: mixer_oss: invalid OSS volume '' [ 256.815642][ T8621] netlink: Unknown NAT attribute (type=11105, max=9) [ 256.834222][ T5699] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 256.849619][ T8621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.865274][ T30] audit: type=1400 audit(1787015672.554:643): avc: denied { write } for pid=8595 comm="syz.1.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 256.912328][ T5699] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 256.941432][ T8616] ALSA: mixer_oss: invalid OSS volume '' [ 256.988719][ T5699] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 257.005825][ T30] audit: type=1400 audit(1787015673.054:644): avc: denied { read } for pid=8622 comm="syz.4.880" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 257.027376][ T8630] 9pnet_virtio: no channels available for device syz [ 257.088921][ T5699] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 257.113286][ T5699] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 257.124976][ T8632] netlink: 'syz.1.881': attribute type 23 has an invalid length. [ 257.140342][ T30] audit: type=1400 audit(1787015673.254:645): avc: denied { create } for pid=8620 comm="syz.0.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 257.188700][ T5699] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 257.257023][ T5699] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 257.299405][ T5699] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 257.343302][ T5699] usb 3-1: string descriptor 0 read error: -22 [ 257.361351][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.405244][ T5699] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 257.415651][ T5808] libceph: connect (1)[c::]:6789 error -101 [ 257.433048][ T5808] libceph: mon0 (1)[c::]:6789 connect error [ 257.544461][ T8637] ceph: No mds server is up or the cluster is laggy [ 257.560850][ T30] audit: type=1326 audit(1787015673.904:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.3.883" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f59b459e0d9 code=0x0 [ 257.615534][ T8608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.667559][ T8608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.717104][ T5699] usb 3-1: USB disconnect, device number 46 [ 258.088945][ T8656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.111548][ T8656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.136612][ T5699] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 258.296699][ T5699] usb 2-1: Using ep0 maxpacket: 16 [ 258.321227][ T5699] usb 2-1: unable to get BOS descriptor or descriptor too short [ 258.346042][ T5699] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 258.385631][ T5699] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.420036][ T5699] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 258.458941][ T5699] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 258.508681][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.530770][ T8669] lo speed is unknown, defaulting to 1000 [ 258.540702][ T5699] usb 2-1: Product: syz [ 258.551214][ T5699] usb 2-1: Manufacturer: syz [ 258.556268][ T8669] lo speed is unknown, defaulting to 1000 [ 258.566542][ T5699] usb 2-1: SerialNumber: syz [ 258.572951][ T8669] lo speed is unknown, defaulting to 1000 [ 258.591293][ T8669] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 258.613246][ T1659] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 258.632563][ T8669] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 258.655567][ T30] audit: type=1400 audit(1787015675.005:647): avc: denied { create } for pid=8670 comm="syz.4.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 258.712406][ T8669] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 258.746254][ T30] audit: type=1400 audit(1787015675.025:648): avc: denied { write } for pid=8670 comm="syz.4.892" path="socket:[22077]" dev="sockfs" ino=22077 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 258.793959][ T8669] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 258.801244][ T1659] usb 3-1: Using ep0 maxpacket: 16 [ 258.821226][ T1659] usb 3-1: unable to get BOS descriptor or descriptor too short [ 258.830247][ T5699] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 258.847790][ T1659] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 258.865459][ T5699] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 258.896549][ T1659] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.922477][ T8669] lo speed is unknown, defaulting to 1000 [ 258.941588][ T1659] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 258.958855][ T8669] lo speed is unknown, defaulting to 1000 [ 258.980760][ T8669] lo speed is unknown, defaulting to 1000 [ 258.993221][ T1659] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 259.006525][ T5890] Bluetooth: (null): Invalid header checksum [ 259.038887][ T8669] lo speed is unknown, defaulting to 1000 [ 259.067122][ T1659] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.076182][ T8669] lo speed is unknown, defaulting to 1000 [ 259.101114][ T1659] usb 3-1: Product: syz [ 259.116227][ T5699] usb 2-1: USB disconnect, device number 29 [ 259.138798][ T1659] usb 3-1: Manufacturer: syz [ 259.178658][ T1659] usb 3-1: SerialNumber: syz [ 259.243020][ T5600] udevd[5600]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.463739][ T1659] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 259.653750][ T1659] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 259.860191][ T8686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.908654][ T8686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.990627][ T8686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.075796][ T8686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.110473][ T1659] usb 3-1: USB disconnect, device number 47 [ 261.090631][ T1659] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 261.326558][ T1659] usb 2-1: Using ep0 maxpacket: 16 [ 261.365892][ T1659] usb 2-1: unable to get BOS descriptor or descriptor too short [ 261.500633][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.908'. [ 261.527821][ T1659] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 261.587916][ T1659] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.734113][ T1659] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 261.788323][ T1659] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 261.843786][ T1659] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.871526][ T1659] usb 2-1: Product: syz [ 261.892398][ T1659] usb 2-1: Manufacturer: syz [ 261.920071][ T1659] usb 2-1: SerialNumber: syz [ 261.973065][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.913'. [ 262.151553][ T1659] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 262.168053][ T8727] 9pnet_virtio: no channels available for device syz [ 263.041386][ T1659] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 263.098743][ T1659] usb 2-1: 2:1 : can't get High Capability descriptor [ 263.109387][ T8729] netlink: 'syz.0.915': attribute type 23 has an invalid length. [ 263.245791][ T8731] loop9: detected capacity change from 0 to 8 [ 263.252672][ T8731] Dev loop9: unable to read RDB block 8 [ 263.258260][ T8731] loop9: unable to read partition table [ 263.264121][ T8731] loop9: partition table beyond EOD, truncated [ 263.270296][ T8731] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 263.319171][ T1659] usb 2-1: USB disconnect, device number 30 [ 263.396900][ T6341] udevd[6341]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.635426][ T8737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.706859][ T8737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.747814][ T8735] loop9: detected capacity change from 0 to 8 [ 263.754409][ T8735] Dev loop9: unable to read RDB block 8 [ 263.759963][ T8735] loop9: unable to read partition table [ 263.765690][ T8735] loop9: partition table beyond EOD, truncated [ 263.771855][ T8735] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 263.790363][ T8737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.847077][ T8737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.974408][ T8740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.920'. [ 264.002152][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 264.002163][ T30] audit: type=1400 audit(1787015680.357:650): avc: denied { ioctl } for pid=8738 comm="syz.3.919" path="socket:[22469]" dev="sockfs" ino=22469 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 264.041309][ T8743] 9pnet_virtio: no channels available for device syz [ 264.081585][ T8743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.921'. [ 264.231698][ T8751] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.922'. [ 264.268921][ T8745] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.922'. [ 264.314047][ T30] audit: type=1400 audit(1787015680.668:651): avc: denied { setopt } for pid=8744 comm="syz.2.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 264.341701][ T8751] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.368653][ T8750] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.922'. [ 264.546189][ T8756] 9pnet_virtio: no channels available for device syz [ 264.568072][ T8754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'. [ 264.589922][ T8756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.925'. [ 264.626498][ T8748] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 264.666788][ T8748] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2527804186 (323558935808 ns) > initial count (117850194176 ns). Using initial count to start timer. [ 264.704253][ T8758] netlink: 44 bytes leftover after parsing attributes in process `syz.0.925'. [ 264.950693][ T8768] SELinux: Context system_u:object_r:fuse_device_t:s0 is not valid (left unmapped). [ 264.963360][ T30] audit: type=1400 audit(1787015681.298:652): avc: denied { relabelfrom } for pid=8766 comm="syz.2.927" name="UDPv6" dev="sockfs" ino=22904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 265.034168][ T8773] syz.2.927 (8773): /proc/8766/oom_adj is deprecated, please use /proc/8766/oom_score_adj instead. [ 265.129284][ T30] audit: type=1400 audit(1787015681.478:653): avc: denied { relabelto } for pid=8766 comm="syz.2.927" name="UDPv6" dev="sockfs" ino=22904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=udp_socket permissive=1 trawcon="system_u:object_r:fuse_device_t:s0" [ 266.070691][ T30] audit: type=1400 audit(1787015681.598:654): avc: denied { read } for pid=8776 comm="syz.3.929" dev="nsfs" ino=4026532951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 266.188975][ T8786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.217062][ T30] audit: type=1400 audit(1787015681.598:655): avc: denied { open } for pid=8776 comm="syz.3.929" path="net:[4026532951]" dev="nsfs" ino=4026532951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 266.252039][ T8786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.483002][ T5699] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 266.650433][ T5699] usb 2-1: Using ep0 maxpacket: 8 [ 266.660295][ T5699] usb 2-1: unable to get BOS descriptor or descriptor too short [ 266.670619][ T5699] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 266.694489][ T5699] usb 2-1: config 1 has an invalid interface number: 217 but max is 2 [ 266.709386][ T5699] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 266.738517][ T5699] usb 2-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 266.761723][ T5699] usb 2-1: config 1 has no interface number 3 [ 266.777050][ T5699] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 266.810071][ T5699] usb 2-1: config 1 interface 2 has no altsetting 0 [ 266.820701][ T1659] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 266.838786][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.849930][ T5699] usb 2-1: Product: syz [ 266.854227][ T5808] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 266.868456][ T5699] usb 2-1: Manufacturer: syz [ 266.880301][ T5699] usb 2-1: SerialNumber: syz [ 266.980766][ T1659] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 266.998573][ T1659] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 267.012789][ T5808] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 267.030257][ T1659] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 267.050389][ T5808] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 267.068189][ T5808] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 267.096704][ T1659] usb 3-1: config 0 interface 0 has no altsetting 0 [ 267.110158][ T5808] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 267.135412][ T1659] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 267.153595][ T1659] usb 3-1: Product: syz [ 267.168595][ T5808] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 267.196222][ T1659] usb 3-1: Manufacturer: syz [ 267.216169][ T1659] usb 3-1: SerialNumber: syz [ 267.236257][ T5808] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 267.253613][ T1659] usb 3-1: config 0 descriptor?? [ 267.295740][ T1659] usb 3-1: selecting invalid altsetting 0 [ 267.310368][ T5808] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 267.344971][ T5808] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 267.405157][ T5808] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 267.472684][ T5808] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 267.580708][ T5808] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 267.654459][ T5808] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 267.682850][ T30] audit: type=1326 audit(1787015684.029:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="syz.0.936" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8da79e0d9 code=0x0 [ 267.719317][ T5808] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 267.751255][ T5808] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 267.789235][ T5808] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 267.812250][ T5808] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 267.843431][ T5808] usb 4-1: string descriptor 0 read error: -22 [ 267.849942][ T5808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.879603][ T5808] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 268.081055][ T8796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.103823][ T8796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.122604][ T8805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.937'. [ 268.139111][ T5808] usb 4-1: USB disconnect, device number 20 [ 269.850400][ T5808] usb 3-1: USB disconnect, device number 48 [ 270.058913][ T1659] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 271.237170][ T1659] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 271.879462][ T5699] usb 2-1: USB disconnect, device number 31 [ 271.928295][ T1659] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.000290][ T1659] usb 4-1: Product: syz [ 272.042528][ T1659] usb 4-1: Manufacturer: syz [ 272.068391][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.949'. [ 272.103378][ T1659] usb 4-1: SerialNumber: syz [ 272.163856][ T1659] usb 4-1: config 0 descriptor?? [ 272.209889][ T1659] usb 4-1: can't set config #0, error -71 [ 272.275521][ T1659] usb 4-1: USB disconnect, device number 21 [ 272.301035][ T30] audit: type=1400 audit(1787015688.652:657): avc: denied { lock } for pid=8834 comm="syz.1.948" path="socket:[23514]" dev="sockfs" ino=23514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 272.416644][ T8844] 8021q: adding VLAN 0 to HW filter on device bond1 [ 272.430397][ T8838] sg_write: process 511 (syz.1.948) changed security contexts after opening file descriptor, this is not allowed. [ 272.494701][ T8848] bond1: (slave ip6erspan0): making interface the new active one [ 272.556375][ T8848] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 272.717396][ T5699] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 273.136043][ T1659] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 273.157551][ T5699] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 273.179720][ T5699] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 273.938087][ T5699] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 273.974687][ T8864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.983348][ T8864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.991630][ T1659] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 274.099065][ T8864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.107829][ T8864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.199992][ T5699] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 274.226091][ T1659] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 274.360655][ T30] audit: type=1400 audit(1787015690.713:658): avc: denied { connect } for pid=8863 comm="syz.0.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 274.396358][ T5699] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 274.503281][ T1659] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 274.526578][ T5699] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 274.545264][ T1659] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.249392][ T1659] usb 2-1: Product: syz [ 275.257406][ T5699] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 275.271425][ T1659] usb 2-1: Manufacturer: syz [ 275.278194][ T5699] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 275.290966][ T1659] usb 2-1: SerialNumber: syz [ 275.302546][ T1659] usb 2-1: config 0 descriptor?? [ 275.314771][ T5699] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 275.330848][ T8855] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 275.423453][ T8855] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 275.444169][ T5699] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 276.389472][ T5699] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 276.404426][ T1659] usb 2-1: can't set config #0, error -71 [ 276.443508][ T1659] usb 2-1: USB disconnect, device number 32 [ 276.489893][ T5699] usb 3-1: unable to read config index 2 descriptor/start: -71 [ 276.594777][ T5699] usb 3-1: can't read configurations, error -71 [ 277.412928][ T30] audit: type=1400 audit(1787015693.744:659): avc: denied { append } for pid=8893 comm="syz.3.968" name="sg0" dev="devtmpfs" ino=793 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 277.510078][ T30] audit: type=1400 audit(1787015693.854:660): avc: denied { getopt } for pid=8890 comm="syz.0.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 277.876699][ T30] audit: type=1400 audit(1787015694.234:661): avc: denied { listen } for pid=8904 comm="syz.2.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 278.791717][ T30] audit: type=1400 audit(1787015694.975:662): avc: denied { accept } for pid=8904 comm="syz.2.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 279.712972][ T30] audit: type=1400 audit(1787015696.065:663): avc: denied { read } for pid=5257 comm="dhcpcd" name="n35" dev="tmpfs" ino=6784 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 279.800356][ T5699] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 279.922253][ T30] audit: type=1400 audit(1787015696.095:664): avc: denied { name_bind } for pid=8917 comm="syz.3.975" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 279.994620][ T5699] usb 3-1: Using ep0 maxpacket: 16 [ 280.039504][ T5699] usb 3-1: unable to get BOS descriptor or descriptor too short [ 280.065167][ T5699] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 280.088624][ T30] audit: type=1400 audit(1787015696.095:665): avc: denied { open } for pid=5257 comm="dhcpcd" path="/run/udev/data/n35" dev="tmpfs" ino=6784 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 280.166682][ T5699] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.179609][ T8930] tmpfs: Unknown parameter '18446744073709551615…G? ÓÕ†.èBJþõ\ª ÷ȇ¡½m¬ÉZ¡:Í'Ð^eï#~åêÕ$„“㤵š3VKa<ƒÈå„„i{n øíÄðÞ«;‚durFÒ?såPÉŸ ¯k~8¿ƒ„çÌNuÁ—>É&¼ö°ÆµS¦åŽ(·4…Ó%Œ®q#QOPç [ 280.179609][ T8930] ƒÃsm„ÄoÛØkÖŽj' [ 280.250250][ T5699] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 280.298486][ T30] audit: type=1400 audit(1787015696.095:666): avc: denied { getattr } for pid=5257 comm="dhcpcd" path="/run/udev/data/n35" dev="tmpfs" ino=6784 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 280.341404][ T5699] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 280.432502][ T8940] binder: BINDER_SET_CONTEXT_MGR already set [ 280.445225][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.481870][ T8938] overlay: ./file0 is not a directory [ 280.487437][ T5699] usb 3-1: Product: syz [ 280.495157][ T30] audit: type=1400 audit(1787015696.826:667): avc: denied { mounton } for pid=8936 comm="syz.3.981" path="/199/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 280.518294][ T8940] binder: 8939:8940 ioctl 4018620d 200000004a80 returned -16 [ 280.539193][ T5699] usb 3-1: Manufacturer: syz [ 280.636598][ T5699] usb 3-1: SerialNumber: syz [ 281.435433][ T5699] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 281.495996][ T5699] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 281.639656][ T30] audit: type=1400 audit(1787015697.996:668): avc: denied { write } for pid=8923 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 281.665123][ T8952] Process accounting paused [ 282.685618][ T5699] usb 3-1: USB disconnect, device number 51 [ 282.736113][ T30] audit: type=1400 audit(1787015697.996:669): avc: denied { create } for pid=8923 comm="dhcpcd-run-hook" name="resolv.conf.syzkaller0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 283.651160][ T6341] udevd[6341]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.676560][ T8970] xt_connbytes: Forcing CT accounting to be enabled [ 283.709943][ T8977] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 283.729341][ T8970] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 283.760668][ T30] audit: type=1400 audit(1787015697.996:670): avc: denied { write } for pid=8923 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.syzkaller0.link" dev="tmpfs" ino=6831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 283.917551][ T8982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.988558][ T30] audit: type=1400 audit(1787015697.996:671): avc: denied { append } for pid=8923 comm="dhcpcd-run-hook" name="resolv.conf.syzkaller0.link" dev="tmpfs" ino=6831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 284.036728][ T8982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.059095][ T8985] fuse: Unknown parameter 'fd0x0000000000000003' [ 284.141727][ T8982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.197578][ T30] audit: type=1400 audit(1787015700.057:672): avc: denied { write } for pid=8967 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.230378][ T8982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.321620][ T5699] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 284.338055][ T30] audit: type=1400 audit(1787015700.057:673): avc: denied { unlink } for pid=8967 comm="rm" name="resolv.conf.syzkaller0.link" dev="tmpfs" ino=6831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 284.404566][ T8994] o2cb: This node has not been configured. [ 284.441808][ T8994] o2cb: Cluster check failed. Fix errors before retrying. [ 284.473252][ T30] audit: type=1400 audit(1787015700.277:674): avc: denied { relabelfrom } for pid=8981 comm="syz.0.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 284.503234][ T8994] (syz.2.995,8994,0):user_dlm_register:674 ERROR: status = -22 [ 284.524160][ T5699] usb 4-1: Using ep0 maxpacket: 8 [ 284.546499][ T5699] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 284.557564][ T8999] netlink: 68 bytes leftover after parsing attributes in process `syz.2.995'. [ 284.592658][ T30] audit: type=1400 audit(1787015700.277:675): avc: denied { relabelto } for pid=8981 comm="syz.0.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 284.624891][ T5699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 284.642860][ T8994] (syz.2.995,8994,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydev" [ 284.680283][ T5699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.691646][ T9003] sctp: [Deprecated]: syz.2.995 (pid 9003) Use of struct sctp_assoc_value in delayed_ack socket option. [ 284.691646][ T9003] Use struct sctp_sack_info instead [ 284.745134][ T30] audit: type=1400 audit(1787015700.758:676): avc: denied { write } for pid=8991 comm="syz.2.995" name="/" dev="ocfs2_dlmfs" ino=24053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 284.776234][ T5699] usb 4-1: config 0 descriptor?? [ 284.897131][ T30] audit: type=1400 audit(1787015700.758:677): avc: denied { add_name } for pid=8991 comm="syz.2.995" name="mydev" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 285.077135][ T5699] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 285.800412][ T30] audit: type=1400 audit(1787015700.768:678): avc: denied { create } for pid=8991 comm="syz.2.995" name="mydev" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 286.091475][ T8987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.147094][ T8987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.205669][ T8987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.262715][ T8987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.295247][ T8987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.312064][ T9029] hsr0: entered promiscuous mode [ 286.322539][ T8987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.349232][ T9029] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 286.402788][ T9031] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 286.430492][ T5699] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 286.447793][ T9031] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 286.461537][ T5597] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 286.534359][ T10] usb 4-1: USB disconnect, device number 22 [ 286.684484][ T5699] usb 3-1: Using ep0 maxpacket: 16 [ 286.694990][ T5699] usb 3-1: unable to get BOS descriptor or descriptor too short [ 286.708443][ T5699] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 286.727921][ T5699] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.722262][ T5699] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 289.532779][ T5699] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 289.569909][ T9039] fuse: Unknown parameter 'fd0x0000000000000003' [ 289.690809][ T5699] usb 3-1: string descriptor 0 read error: -71 [ 289.818872][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.972717][ T9049] CUSE: unknown device info "" [ 289.977570][ T9049] CUSE: unknown device info "" [ 289.982446][ T9049] CUSE: unknown device info "" [ 289.987265][ T9049] CUSE: unknown device info "" [ 289.992112][ T9049] CUSE: unknown device info "ÿ" [ 289.997308][ T9049] CUSE: zero length info key specified [ 290.014911][ T5699] usb 3-1: can't set config #1, error -71 [ 290.170568][ T5699] usb 3-1: USB disconnect, device number 52 [ 293.361856][ T9068] 9pnet_virtio: no channels available for device syz [ 293.457277][ T9068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1012'. [ 293.868392][ T9068] netlink: 'syz.4.1012': attribute type 23 has an invalid length. [ 294.112142][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1019'. [ 294.289206][ T9089] fuse: Unknown parameter 'fd0x0000000000000003' [ 294.311505][ T9086] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 294.695968][ T9093] loop9: detected capacity change from 0 to 8 [ 294.703008][ T9093] Dev loop9: unable to read RDB block 8 [ 294.708797][ T9093] loop9: unable to read partition table [ 294.714508][ T9093] loop9: partition table beyond EOD, truncated [ 294.720690][ T9093] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 295.679192][ T9114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.702018][ T9114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.735470][ T9114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.745427][ T5699] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 295.761905][ T9114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.815129][ T9116] 9pnet_virtio: no channels available for device syz [ 295.823508][ T9116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1030'. [ 295.832953][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 295.894909][ T9117] netlink: 'syz.2.1030': attribute type 23 has an invalid length. [ 295.925923][ T5699] usb 4-1: Using ep0 maxpacket: 16 [ 295.935153][ T5699] usb 4-1: unable to get BOS descriptor or descriptor too short [ 295.943158][ T5699] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 295.953330][ T5699] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.963667][ T5699] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 295.974862][ T5699] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 295.985908][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 295.993988][ T10] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 296.004787][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.013045][ T5699] usb 4-1: Product: syz [ 296.017621][ T5699] usb 4-1: Manufacturer: syz [ 296.022410][ T5699] usb 4-1: SerialNumber: syz [ 296.028412][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.041187][ T10] usb 5-1: Product: syz [ 296.045411][ T10] usb 5-1: Manufacturer: syz [ 296.050412][ T10] usb 5-1: SerialNumber: syz [ 296.058521][ T10] usb 5-1: config 0 descriptor?? [ 296.066639][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 296.246477][ T5699] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 296.254906][ T5699] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 296.331679][ T9119] comedi comedi3: comedi_config --init_data is deprecated [ 296.671210][ T9111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.828676][ T10] gspca_se401: Wrong descriptor type [ 297.189949][ T9111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.258014][ T9121] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1032'. [ 298.066357][ T5699] usb 4-1: USB disconnect, device number 23 [ 298.129085][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 298.129102][ T30] audit: type=1400 audit(1787015714.495:684): avc: denied { listen } for pid=9118 comm="syz.0.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 298.412522][ T30] audit: type=1400 audit(1787015714.525:685): avc: denied { ioctl } for pid=9118 comm="syz.0.1031" path="socket:[24493]" dev="sockfs" ino=24493 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 298.704972][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 298.771936][ T9152] SET target dimension over the limit! [ 298.874386][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 298.898316][ T10] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 298.953430][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.088740][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 299.318257][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 299.347880][ T5699] usb 5-1: USB disconnect, device number 22 [ 299.465037][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 299.553045][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 299.630084][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 299.668580][ T10] usb 2-1: Product: syz [ 299.687383][ T10] usb 2-1: Manufacturer: syz [ 299.702652][ T10] usb 2-1: SerialNumber: syz [ 299.733102][ T10] usb 2-1: config 0 descriptor?? [ 299.813777][ T5699] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 299.974237][ T9195] FAULT_INJECTION: forcing a failure. [ 299.974237][ T9195] name failslab, interval 1, probability 0, space 0, times 0 [ 300.030117][ T9138] gadgetfs: bound to dummy_udc driver [ 300.040624][ T5699] usb 5-1: Using ep0 maxpacket: 16 [ 300.056906][ T9195] CPU: 0 UID: 0 PID: 9195 Comm: syz.0.1045 Tainted: G L syzkaller #0 PREEMPT(full) [ 300.056926][ T9195] Tainted: [L]=SOFTLOCKUP [ 300.056930][ T9195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 300.056936][ T9195] Call Trace: [ 300.056940][ T9195] [ 300.056944][ T9195] dump_stack_lvl+0x100/0x190 [ 300.056962][ T9195] should_fail_ex.cold+0x5/0xa [ 300.056975][ T9195] should_failslab+0xc2/0x120 [ 300.056990][ T9195] kmem_cache_alloc_noprof+0x91/0x6a0 [ 300.057002][ T9195] ? stack_trace_save+0x8e/0xc0 [ 300.057019][ T9195] ? alloc_empty_file+0x5b/0x1c0 [ 300.057035][ T9195] alloc_empty_file+0x5b/0x1c0 [ 300.057049][ T9195] path_openat+0xe7/0x4280 [ 300.057060][ T9195] ? kasan_save_track+0x14/0x30 [ 300.057072][ T9195] ? __kasan_slab_alloc+0x89/0x90 [ 300.057085][ T9195] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 300.057097][ T9195] ? do_getname+0x35/0x390 [ 300.057110][ T9195] ? do_sys_openat2+0xc7/0x1e0 [ 300.057122][ T9195] ? __x64_sys_open+0xfe/0x1d0 [ 300.057134][ T9195] ? do_syscall_64+0x115/0x870 [ 300.057150][ T9195] ? __pfx_path_openat+0x10/0x10 [ 300.057165][ T9195] do_file_open+0x20e/0x430 [ 300.057176][ T9195] ? __lock_acquire+0x49f/0x1a40 [ 300.057190][ T9195] ? __pfx_do_file_open+0x10/0x10 [ 300.057210][ T9195] ? _raw_spin_unlock+0x28/0x50 [ 300.057221][ T9195] ? alloc_fd+0x471/0x7a0 [ 300.057236][ T9195] do_sys_openat2+0x10f/0x1e0 [ 300.057249][ T9195] ? __pfx_do_sys_openat2+0x10/0x10 [ 300.057264][ T9195] ? __fget_files+0x21f/0x3d0 [ 300.057277][ T9195] __x64_sys_open+0xfe/0x1d0 [ 300.057291][ T9195] ? __pfx___x64_sys_open+0x10/0x10 [ 300.057303][ T9195] ? ksys_write+0x1ac/0x250 [ 300.057317][ T9195] do_syscall_64+0x115/0x870 [ 300.057329][ T9195] ? clear_bhb_loop+0x70/0xc0 [ 300.057342][ T9195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.057353][ T9195] RIP: 0033:0x7fc8da79e0d9 [ 300.057362][ T9195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.057373][ T9195] RSP: 002b:00007fc8db6cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 300.057383][ T9195] RAX: ffffffffffffffda RBX: 00007fc8daa25fa0 RCX: 00007fc8da79e0d9 [ 300.057389][ T9195] RDX: 0000000000000190 RSI: 0000000000108843 RDI: 00002000000000c0 [ 300.057396][ T9195] RBP: 00007fc8db6cc090 R08: 0000000000000000 R09: 0000000000000000 [ 300.057401][ T9195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.057407][ T9195] R13: 00007fc8daa26038 R14: 00007fc8daa25fa0 R15: 00007fff9738b5b8 [ 300.057420][ T9195] [ 300.674813][ T9138] trusted_key: syz.1.1035 sent an empty control message without MSG_MORE. [ 300.719802][ T10] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 300.745612][ T10] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 300.760518][ T5699] usb 5-1: unable to get BOS descriptor or descriptor too short [ 300.870858][ T5699] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 301.657011][ T5699] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.689956][ T5699] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 301.715258][ T5699] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 301.784344][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.804939][ T5699] usb 5-1: Product: syz [ 301.812756][ T5699] usb 5-1: Manufacturer: syz [ 301.820290][ T5699] usb 5-1: SerialNumber: syz [ 301.978137][ T10] usb 2-1: USB disconnect, device number 33 [ 302.086236][ T5699] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 302.094918][ T5699] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 302.121731][ T30] audit: type=1400 audit(1787015718.487:686): avc: denied { mount } for pid=9196 comm="syz.3.1046" name="/" dev="ramfs" ino=24668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 302.210450][ T9204] loop9: detected capacity change from 0 to 8 [ 302.220157][ T9204] Dev loop9: unable to read RDB block 8 [ 302.225791][ T9204] loop9: unable to read partition table [ 302.231496][ T9204] loop9: partition table beyond EOD, truncated [ 302.237689][ T9204] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 302.401030][ T9210] 9pnet_virtio: no channels available for device syz [ 302.430020][ T30] audit: type=1400 audit(1787015718.797:687): avc: denied { bind } for pid=9211 comm="syz.3.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 302.458697][ T9210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1051'. [ 302.557531][ T30] audit: type=1400 audit(1787015718.837:688): avc: denied { map } for pid=9211 comm="syz.3.1052" path="socket:[24701]" dev="sockfs" ino=24701 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 302.595043][ T9215] netlink: 'syz.0.1051': attribute type 23 has an invalid length. [ 302.641682][ T5699] usb 5-1: USB disconnect, device number 23 [ 303.969284][ T30] audit: type=1400 audit(1787015720.337:689): avc: denied { kexec_image_load } for pid=9231 comm="syz.4.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 305.039251][ T9232] kexec: Could not allocate control_code_buffer [ 305.992187][ T9250] FAULT_INJECTION: forcing a failure. [ 305.992187][ T9250] name failslab, interval 1, probability 0, space 0, times 0 [ 306.004929][ T9250] CPU: 0 UID: 0 PID: 9250 Comm: syz.1.1062 Tainted: G L syzkaller #0 PREEMPT(full) [ 306.004946][ T9250] Tainted: [L]=SOFTLOCKUP [ 306.004950][ T9250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 306.004957][ T9250] Call Trace: [ 306.004961][ T9250] [ 306.004965][ T9250] dump_stack_lvl+0x100/0x190 [ 306.004982][ T9250] should_fail_ex.cold+0x5/0xa [ 306.004997][ T9250] should_failslab+0xc2/0x120 [ 306.005011][ T9250] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 306.005025][ T9250] ? __alloc_skb+0x5b7/0x710 [ 306.005037][ T9250] ? __alloc_skb+0x140/0x710 [ 306.005052][ T9250] __alloc_skb+0x140/0x710 [ 306.005064][ T9250] ? __alloc_skb+0x5b7/0x710 [ 306.005076][ T9250] ? __pfx___alloc_skb+0x10/0x10 [ 306.005097][ T9250] alloc_skb_with_frags+0xdd/0x760 [ 306.005113][ T9250] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 306.005125][ T9250] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 306.005139][ T9250] sock_alloc_send_pskb+0x801/0x980 [ 306.005157][ T9250] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 306.005169][ T9250] ? selinux_socket_getpeersec_dgram+0x1a4/0x380 [ 306.005184][ T9250] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 306.005198][ T9250] ? is_bpf_text_address+0x94/0x1a0 [ 306.005213][ T9250] ? kernel_text_address+0x8d/0x100 [ 306.005229][ T9250] unix_stream_sendmsg+0x3f4/0x1310 [ 306.005246][ T9250] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 306.005261][ T9250] ? selinux_socket_sendmsg+0x198/0x2f0 [ 306.005279][ T9250] ____sys_sendmsg+0xa4d/0xbe0 [ 306.005288][ T9250] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 306.005301][ T9250] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.005317][ T9250] ___sys_sendmsg+0x190/0x1e0 [ 306.005329][ T9250] ? __pfx____sys_sendmsg+0x10/0x10 [ 306.005339][ T9250] ? __lock_acquire+0x49f/0x1a40 [ 306.005352][ T9250] ? get_pid_task+0x106/0x250 [ 306.005376][ T9250] __sys_sendmsg+0x160/0x210 [ 306.005391][ T9250] ? __pfx___sys_sendmsg+0x10/0x10 [ 306.005412][ T9250] do_syscall_64+0x115/0x870 [ 306.005424][ T9250] ? clear_bhb_loop+0x70/0xc0 [ 306.005437][ T9250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.005447][ T9250] RIP: 0033:0x7f2dbcd9e0d9 [ 306.005457][ T9250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.005467][ T9250] RSP: 002b:00007f2dbdb9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.005478][ T9250] RAX: ffffffffffffffda RBX: 00007f2dbd026090 RCX: 00007f2dbcd9e0d9 [ 306.005485][ T9250] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000004 [ 306.005491][ T9250] RBP: 00007f2dbdb9d090 R08: 0000000000000000 R09: 0000000000000000 [ 306.005497][ T9250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.005503][ T9250] R13: 00007f2dbd026128 R14: 00007f2dbd026090 R15: 00007ffec0d07ff8 [ 306.005516][ T9250] [ 306.335194][ T9247] binder: BINDER_SET_CONTEXT_MGR already set [ 306.341237][ T9247] binder: 9245:9247 ioctl 4018620d 200000004a80 returned -16 [ 306.368407][ T9247] binder: 9245:9247 ioctl 7001 0 returned -22 [ 306.395171][ T9238] loop9: detected capacity change from 0 to 8 [ 306.465570][ T9238] Dev loop9: unable to read RDB block 8 [ 306.471185][ T9238] loop9: unable to read partition table [ 306.477113][ T9238] loop9: partition table beyond EOD, truncated [ 306.483282][ T9238] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 307.088128][ T9270] SELinux: policydb string SE LiÓux does not match my string SE Linux [ 307.096681][ T9270] SELinux: failed to load policy [ 307.154186][ T30] audit: type=1400 audit(1787015723.459:690): avc: denied { load_policy } for pid=9259 comm="syz.3.1065" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 307.185709][ T5714] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 307.631181][ T5714] usb 2-1: Using ep0 maxpacket: 16 [ 307.639476][ T5714] usb 2-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 307.661116][ T5714] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 308.432098][ T5714] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 308.643587][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.431021][ T5714] usb 2-1: Product: syz [ 309.463346][ T5714] usb 2-1: Manufacturer: syz [ 309.512100][ T5714] usb 2-1: SerialNumber: syz [ 310.537029][ T5714] snd-usb-us122l 2-1:1.1: usb_set_interface error [ 310.600763][ T5714] snd-usb-us122l 2-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 310.659422][ T9303] ALSA: mixer_oss: invalid OSS volume '' [ 310.679768][ T9303] ALSA: mixer_oss: invalid OSS volume '' [ 310.696396][ T5714] usb 2-1: USB disconnect, device number 34 [ 310.739898][ T9303] ALSA: mixer_oss: invalid OSS volume '' [ 310.762555][ T6591] udevd[6591]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 310.804051][ T9303] ALSA: mixer_oss: invalid OSS volume '' [ 310.829313][ T6341] udevd[6341]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 310.850803][ T30] audit: type=1400 audit(1787015727.221:691): avc: denied { setopt } for pid=9320 comm="syz.0.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 310.881433][ T9303] ALSA: mixer_oss: invalid OSS volume '' [ 310.922312][ T9303] ALSA: mixer_oss: invalid OSS volume '' [ 310.985854][ T9334] FAULT_INJECTION: forcing a failure. [ 310.985854][ T9334] name failslab, interval 1, probability 0, space 0, times 0 [ 311.020999][ T30] audit: type=1400 audit(1787015727.381:692): avc: denied { read write } for pid=9286 comm="syz.4.1071" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 311.243528][ T9334] CPU: 0 UID: 0 PID: 9334 Comm: syz.3.1083 Tainted: G L syzkaller #0 PREEMPT(full) [ 311.243547][ T9334] Tainted: [L]=SOFTLOCKUP [ 311.243551][ T9334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 311.243557][ T9334] Call Trace: [ 311.243560][ T9334] [ 311.243565][ T9334] dump_stack_lvl+0x100/0x190 [ 311.243583][ T9334] should_fail_ex.cold+0x5/0xa [ 311.243597][ T9334] should_failslab+0xc2/0x120 [ 311.243614][ T9334] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 311.243628][ T9334] ? __pfx_selinux_inode_permission+0x10/0x10 [ 311.243640][ T9334] ? __d_alloc+0x35/0xa50 [ 311.243656][ T9334] __d_alloc+0x35/0xa50 [ 311.243670][ T9334] d_alloc_parallel+0x105/0x14b0 [ 311.243691][ T9334] ? __pfx_d_alloc_parallel+0x10/0x10 [ 311.243708][ T9334] ? __pfx___might_resched+0x10/0x10 [ 311.243721][ T9334] ? try_to_unlazy+0x296/0x910 [ 311.243738][ T9334] ? down_read+0x13b/0x4c0 [ 311.243752][ T9334] ? __pfx_down_read+0x10/0x10 [ 311.243767][ T9334] __lookup_slow+0x98/0x320 [ 311.243782][ T9334] lookup_slow+0x50/0x70 [ 311.243797][ T9334] path_lookupat+0x5e8/0xc40 [ 311.243816][ T9334] filename_lookup+0x202/0x590 [ 311.243828][ T9334] ? __pfx_filename_lookup+0x10/0x10 [ 311.243848][ T9334] ? strncpy_from_user+0x19d/0x2d0 [ 311.243866][ T9334] do_fchownat+0xe6/0x1f0 [ 311.243879][ T9334] ? __pfx_do_fchownat+0x10/0x10 [ 311.243890][ T9334] ? ksys_write+0x1ac/0x250 [ 311.243900][ T9334] ? __pfx_ksys_write+0x10/0x10 [ 311.243917][ T9334] __x64_sys_chown+0x7b/0xc0 [ 311.243929][ T9334] ? lockdep_hardirqs_on+0x78/0x100 [ 311.243941][ T9334] do_syscall_64+0x115/0x870 [ 311.243953][ T9334] ? clear_bhb_loop+0x70/0xc0 [ 311.243965][ T9334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.243976][ T9334] RIP: 0033:0x7f59b459e0d9 [ 311.243985][ T9334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.243995][ T9334] RSP: 002b:00007f59b54d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 311.244006][ T9334] RAX: ffffffffffffffda RBX: 00007f59b4826090 RCX: 00007f59b459e0d9 [ 311.244013][ T9334] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 311.244019][ T9334] RBP: 00007f59b54d3090 R08: 0000000000000000 R09: 0000000000000000 [ 311.244024][ T9334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.244030][ T9334] R13: 00007f59b4826128 R14: 00007f59b4826090 R15: 00007ffc2bb1d378 [ 311.244044][ T9334] [ 311.619952][ T9340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.628768][ T9340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.721807][ T30] audit: type=1400 audit(1787015727.381:693): avc: denied { open } for pid=9286 comm="syz.4.1071" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 311.756431][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.763785][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.918390][ T1659] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 312.939435][ T9354] loop9: detected capacity change from 0 to 8 [ 312.945942][ T9354] Dev loop9: unable to read RDB block 8 [ 312.951557][ T9354] loop9: unable to read partition table [ 312.957287][ T9354] loop9: partition table beyond EOD, truncated [ 312.963423][ T9354] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 313.014177][ T9358] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 313.027962][ T5714] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 313.037846][ T9353] Process accounting resumed [ 313.063156][ T30] audit: type=1400 audit(1787015729.432:694): avc: denied { setopt } for pid=9357 comm="syz.0.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 313.129390][ T1659] usb 2-1: Using ep0 maxpacket: 16 [ 313.149956][ T9360] 9pnet_virtio: no channels available for device syz [ 313.163048][ T1659] usb 2-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 313.185582][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1093'. [ 313.212571][ T5714] usb 3-1: unable to get BOS descriptor or descriptor too short [ 313.223680][ T1659] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 313.239713][ T5714] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 313.277299][ T1659] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 313.297522][ T5714] usb 3-1: config 114 has an invalid interface number: 240 but max is 0 [ 313.313272][ T9360] netlink: 'syz.4.1093': attribute type 23 has an invalid length. [ 313.325784][ T5714] usb 3-1: config 114 has no interface number 0 [ 313.344860][ T1659] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.360024][ T9364] hsr0: left promiscuous mode [ 313.368423][ T5714] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 313.384270][ T1659] usb 2-1: Product: syz [ 313.403888][ T1659] usb 2-1: Manufacturer: syz [ 313.418666][ T5714] usb 3-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 313.433753][ T1659] usb 2-1: SerialNumber: syz [ 313.469847][ T5714] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 313.509284][ T5714] usb 3-1: config 114 interface 240 has no altsetting 0 [ 313.530310][ T9364] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 313.537916][ T5714] usb 3-1: string descriptor 0 read error: -22 [ 313.546444][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.576285][ T9364] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 313.594391][ T9347] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 313.602497][ T9347] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 313.615296][ T5714] ir_usb 3-1:114.240: IR Dongle converter detected [ 313.657631][ T5888] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.693931][ T5888] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.732564][ T5888] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.769072][ T1659] snd-usb-us122l 2-1:1.1: usb_set_interface error [ 313.786112][ T5888] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.803502][ T1659] snd-usb-us122l 2-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 313.835701][ T5714] usb 3-1: IRDA class descriptor not found, device not bound [ 313.879977][ T1659] usb 2-1: USB disconnect, device number 35 [ 313.901895][ T5714] usb 3-1: USB disconnect, device number 54 [ 314.264629][ T9382] comedi comedi1: comedi_parport: I/O base address not correctly aligned [ 314.344207][ T9386] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1103'. [ 314.477054][ T9386] team0 (unregistering): Port device team_slave_0 removed [ 314.523188][ T9386] team0 (unregistering): Port device team_slave_1 removed [ 314.707985][ T30] audit: type=1400 audit(1787015731.083:695): avc: denied { write } for pid=9394 comm="syz.4.1107" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 314.833696][ T9399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9399 comm=syz.0.1108 [ 314.875495][ T30] audit: type=1400 audit(1787015731.243:696): avc: denied { mount } for pid=9398 comm="syz.0.1108" name="/" dev="hugetlbfs" ino=25480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 314.930993][ T9399] bridge1: entered promiscuous mode [ 314.977796][ T1659] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 314.994804][ T30] audit: type=1400 audit(1787015731.363:697): avc: denied { unmount } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 315.166608][ T1659] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 315.210470][ T1659] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.230681][ T5602] Bluetooth: hci4: Malformed Event: 0x2f [ 315.251936][ T1659] usb 5-1: Product: syz [ 315.275272][ T1659] usb 5-1: Manufacturer: syz [ 315.307650][ T1659] usb 5-1: SerialNumber: syz [ 315.344099][ T1659] usb 5-1: config 0 descriptor?? [ 315.399589][ T1659] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 024 [ 315.467836][ T9411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1113'. [ 316.135382][ T1659] (null): failure reading functionality [ 316.426640][ T9417] FAULT_INJECTION: forcing a failure. [ 316.426640][ T9417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.521883][ T1659] i2c i2c-1: connected i2c-tiny-usb device [ 316.559052][ T9417] CPU: 0 UID: 0 PID: 9417 Comm: syz.1.1115 Tainted: G L syzkaller #0 PREEMPT(full) [ 316.559070][ T9417] Tainted: [L]=SOFTLOCKUP [ 316.559074][ T9417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 316.559080][ T9417] Call Trace: [ 316.559084][ T9417] [ 316.559088][ T9417] dump_stack_lvl+0x100/0x190 [ 316.559107][ T9417] should_fail_ex.cold+0x5/0xa [ 316.559121][ T9417] _copy_from_user+0x2e/0xd0 [ 316.559137][ T9417] sk_setsockopt+0x2f2/0x5d80 [ 316.559155][ T9417] ? __pfx_sk_setsockopt+0x10/0x10 [ 316.559170][ T9417] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 316.559188][ T9417] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 316.559208][ T9417] ? find_held_lock+0x2b/0x80 [ 316.559218][ T9417] ? __fget_files+0x215/0x3d0 [ 316.559232][ T9417] ? selinux_socket_setsockopt+0x6a/0x80 [ 316.559248][ T9417] do_sock_setsockopt+0x193/0x1d0 [ 316.559266][ T9417] __sys_setsockopt+0x195/0x220 [ 316.559282][ T9417] __x64_sys_setsockopt+0xbd/0x160 [ 316.559294][ T9417] ? do_syscall_64+0x90/0x870 [ 316.559307][ T9417] ? lockdep_hardirqs_on+0x78/0x100 [ 316.559319][ T9417] do_syscall_64+0x115/0x870 [ 316.559330][ T9417] ? clear_bhb_loop+0x70/0xc0 [ 316.559342][ T9417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.559353][ T9417] RIP: 0033:0x7f2dbcd9e0d9 [ 316.559362][ T9417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.559372][ T9417] RSP: 002b:00007f2dbdbbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 316.559383][ T9417] RAX: ffffffffffffffda RBX: 00007f2dbd025fa0 RCX: 00007f2dbcd9e0d9 [ 316.559390][ T9417] RDX: 0000000000000050 RSI: 0000000000000001 RDI: 0000000000000003 [ 316.559396][ T9417] RBP: 00007f2dbdbbe090 R08: 0000000000000004 R09: 0000000000000000 [ 316.559402][ T9417] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 316.559408][ T9417] R13: 00007f2dbd026038 R14: 00007f2dbd025fa0 R15: 00007ffec0d07ff8 [ 316.559421][ T9417] [ 316.927884][ T9427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.936474][ T9427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.059714][ T1659] usb 5-1: USB disconnect, device number 24 [ 317.228015][ T9436] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1117'. [ 318.166652][ T9450] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 319.460662][ T9462] unsupported nla_type 97 [ 319.663690][ T30] audit: type=1400 audit(1787015736.035:698): avc: denied { read } for pid=9467 comm="syz.3.1132" name="cpu_dma_latency" dev="devtmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 319.724154][ T30] audit: type=1400 audit(1787015736.065:699): avc: denied { open } for pid=9467 comm="syz.3.1132" path="/228/dev/cpu_dma_latency" dev="devtmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 319.938092][ T1659] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 320.021072][ T9477] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1135'. [ 320.044537][ T9478] ip_tables: iptables: counters copy to user failed while replacing table [ 320.154226][ T1659] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 320.197532][ T1659] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 320.221472][ T1659] usb 2-1: config 0 has no interface number 0 [ 320.255925][ T1659] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.292759][ T1659] usb 2-1: Product: syz [ 320.321579][ T1659] usb 2-1: Manufacturer: syz [ 320.353763][ T1659] usb 2-1: SerialNumber: syz [ 320.382360][ T1659] usb 2-1: config 0 descriptor?? [ 320.389759][ T9485] kvm: pic: non byte write [ 320.439076][ T9492] use of bytesused == 0 is deprecated and will be removed in the future, [ 320.488308][ T9492] use the actual size instead. [ 321.378356][ T9470] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1133'. [ 321.423755][ T9492] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1140'. [ 321.506653][ T1659] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 321.525854][ T30] audit: type=1400 audit(1787015737.906:700): avc: denied { read } for pid=9491 comm="syz.2.1140" lport=37227 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 321.560956][ T1659] uvcvideo 2-1:0.31: Entity type for entity Output 32774 was not initialized! [ 321.601275][ T9507] FAULT_INJECTION: forcing a failure. [ 321.601275][ T9507] name failslab, interval 1, probability 0, space 0, times 0 [ 321.645306][ T1659] usb 2-1: USB disconnect, device number 36 [ 321.674229][ T9506] Unknown status report in ack skb [ 321.691542][ T9507] CPU: 0 UID: 0 PID: 9507 Comm: syz.3.1144 Tainted: G L syzkaller #0 PREEMPT(full) [ 321.691561][ T9507] Tainted: [L]=SOFTLOCKUP [ 321.691565][ T9507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 321.691571][ T9507] Call Trace: [ 321.691575][ T9507] [ 321.691579][ T9507] dump_stack_lvl+0x100/0x190 [ 321.691598][ T9507] should_fail_ex.cold+0x5/0xa [ 321.691613][ T9507] should_failslab+0xc2/0x120 [ 321.691627][ T9507] __kmalloc_cache_noprof+0x91/0x6c0 [ 321.691638][ T9507] ? find_held_lock+0x2b/0x80 [ 321.691648][ T9507] ? __pollwait+0x2c3/0x490 [ 321.691660][ T9507] ? __pfx___pollwait+0x10/0x10 [ 321.691669][ T9507] __pollwait+0x2c3/0x490 [ 321.691680][ T9507] ? __pfx___pollwait+0x10/0x10 [ 321.691689][ T9507] pipe_poll+0x195/0x6e0 [ 321.691700][ T9507] ? __pfx_pipe_poll+0x10/0x10 [ 321.691711][ T9507] do_sys_poll+0x6e5/0xe90 [ 321.691726][ T9507] ? __pfx_do_sys_poll+0x10/0x10 [ 321.691736][ T9507] ? arch_stack_walk+0xa6/0xf0 [ 321.691757][ T9507] ? __pfx___pollwait+0x10/0x10 [ 321.691768][ T9507] ? __pfx_pollwake+0x10/0x10 [ 321.691779][ T9507] ? __pfx_pollwake+0x10/0x10 [ 321.691790][ T9507] ? __pfx_pollwake+0x10/0x10 [ 321.691801][ T9507] ? __pfx_pollwake+0x10/0x10 [ 321.691811][ T9507] ? __pfx_pollwake+0x10/0x10 [ 321.691822][ T9507] ? __pfx_pollwake+0x10/0x10 [ 321.691838][ T9507] ? __pfx_pollwake+0x10/0x10 [ 321.691849][ T9507] ? __pfx_pollwake+0x10/0x10 [ 321.691859][ T9507] ? __pfx_pollwake+0x10/0x10 [ 321.691871][ T9507] ? __mutex_unlock_slowpath+0x35d/0x930 [ 321.691883][ T9507] ? set_user_sigmask+0x1e1/0x270 [ 321.691896][ T9507] ? __pfx_set_user_sigmask+0x10/0x10 [ 321.691909][ T9507] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 321.691925][ T9507] __x64_sys_ppoll+0x2b5/0x350 [ 321.691937][ T9507] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 321.691948][ T9507] ? ksys_write+0x1ac/0x250 [ 321.691957][ T9507] ? __pfx_ksys_write+0x10/0x10 [ 321.691970][ T9507] do_syscall_64+0x115/0x870 [ 321.691982][ T9507] ? clear_bhb_loop+0x70/0xc0 [ 321.691994][ T9507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.692006][ T9507] RIP: 0033:0x7f59b459e0d9 [ 321.692017][ T9507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.692027][ T9507] RSP: 002b:00007f59b54f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 321.692038][ T9507] RAX: ffffffffffffffda RBX: 00007f59b4825fa0 RCX: 00007f59b459e0d9 [ 321.692044][ T9507] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 321.692051][ T9507] RBP: 00007f59b54f4090 R08: 0000000000000000 R09: 0000000000000000 [ 321.692057][ T9507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.692063][ T9507] R13: 00007f59b4826038 R14: 00007f59b4825fa0 R15: 00007ffc2bb1d378 [ 321.692076][ T9507] [ 322.306213][ T30] audit: type=1400 audit(1787015738.637:701): avc: denied { ioctl } for pid=9519 comm="syz.2.1150" path="socket:[26164]" dev="sockfs" ino=26164 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 322.415376][ T9531] 9pnet_virtio: no channels available for device syz [ 322.425008][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1154'. [ 322.487386][ T9532] netlink: 'syz.2.1154': attribute type 23 has an invalid length. [ 322.522535][ T5714] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 322.692330][ T5714] usb 4-1: Using ep0 maxpacket: 32 [ 322.698053][ T5714] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 322.708253][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.718294][ T5714] usb 4-1: config 0 descriptor?? [ 322.733402][ T5714] gspca_main: sq930x-2.14.0 probing 041e:403c [ 322.872674][ T1659] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 323.032579][ T1659] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 323.049574][ T1659] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 323.065021][ T1659] usb 2-1: config 0 has no interface number 0 [ 323.079873][ T1659] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.090121][ T1659] usb 2-1: Product: syz [ 323.098998][ T1659] usb 2-1: Manufacturer: syz [ 323.108855][ T1659] usb 2-1: SerialNumber: syz [ 323.123265][ T1659] usb 2-1: config 0 descriptor?? [ 323.255139][ T5699] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 323.333499][ T5699] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 323.382746][ T5714] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 323.408259][ T5714] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 323.477491][ T5714] usb 4-1: USB disconnect, device number 24 [ 324.497163][ T30] audit: type=1400 audit(1787015740.878:702): avc: denied { connect } for pid=9564 comm="syz.3.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 325.540128][ T30] audit: type=1400 audit(1787015741.918:703): avc: denied { mounton } for pid=9573 comm="syz.3.1169" path="/235/mnt" dev="tmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 325.571500][ T9579] 9pnet_virtio: no channels available for device syz [ 325.593612][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1170'. [ 325.750593][ T1659] uvcvideo 2-1:0.31: probe with driver uvcvideo failed with error -22 [ 325.789415][ T9579] netlink: 'syz.0.1170': attribute type 23 has an invalid length. [ 325.820796][ T1659] usb 2-1: USB disconnect, device number 37 [ 325.946400][ T9574] ftl_cs: FTL header not found. [ 325.977633][ T9589] IPVS: Error connecting to the multicast addr [ 327.079010][ T9598] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 327.105349][ T9574] block2mtd: mtd1: [/dev/loop0] erase_size = 0KiB [1] [ 327.149266][ T9600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1175'. [ 327.189288][ T9600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1175'. [ 327.284919][ T9609] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.292022][ T9609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.508347][ T30] audit: type=1400 audit(1787015743.889:704): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 327.629282][ T30] audit: type=1400 audit(1787015743.989:705): avc: denied { setopt } for pid=9622 comm="syz.1.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 327.650807][ T5714] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 327.682736][ T9628] 9pnet_virtio: no channels available for device syz [ 327.719552][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1183'. [ 327.839729][ T5714] usb 4-1: Using ep0 maxpacket: 32 [ 328.559113][ T5714] usb 4-1: unable to get BOS descriptor or descriptor too short [ 328.580715][ T5714] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 0.00 [ 328.612814][ T5714] usb 4-1: no configurations [ 328.626675][ T9631] netlink: 'syz.2.1183': attribute type 23 has an invalid length. [ 328.636480][ T5714] usb 4-1: can't read configurations, error -22 [ 328.700959][ T9634] 9pnet_virtio: no channels available for device syz [ 328.715575][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1185'. [ 328.779330][ T5714] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 328.794163][ T9636] netlink: 'syz.0.1185': attribute type 23 has an invalid length. [ 328.939603][ T5714] usb 4-1: Using ep0 maxpacket: 32 [ 328.951321][ T5714] usb 4-1: unable to get BOS descriptor or descriptor too short [ 328.969271][ T5714] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 0.00 [ 329.689586][ T5714] usb 4-1: no configurations [ 329.705994][ T5714] usb 4-1: can't read configurations, error -22 [ 329.739523][ T5714] usb usb4-port1: attempt power cycle [ 329.766075][ T30] audit: type=1400 audit(1787015746.140:706): avc: denied { override_creds } for pid=9649 comm="syz.0.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 329.918729][ T1659] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 330.070672][ T1659] usb 2-1: unable to get BOS descriptor or descriptor too short [ 330.078923][ T1659] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 330.088873][ T1659] usb 2-1: config 114 has an invalid interface number: 240 but max is 0 [ 330.097508][ T1659] usb 2-1: config 114 has no interface number 0 [ 330.104167][ T1659] usb 2-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 330.114761][ T5714] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 330.124725][ T1659] usb 2-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 330.137562][ T5699] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 330.145701][ T1659] usb 2-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 330.156716][ T1659] usb 2-1: config 114 interface 240 has no altsetting 0 [ 330.164077][ T5714] usb 4-1: Using ep0 maxpacket: 32 [ 330.170996][ T5714] usb 4-1: unable to get BOS descriptor or descriptor too short [ 330.179219][ T5714] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 0.00 [ 330.188437][ T5714] usb 4-1: no configurations [ 330.193155][ T1659] usb 2-1: string descriptor 0 read error: -22 [ 330.199676][ T5714] usb 4-1: can't read configurations, error -22 [ 330.205998][ T1659] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.216283][ T9643] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 330.231873][ T9643] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 330.242271][ T1659] ir_usb 2-1:114.240: IR Dongle converter detected [ 330.299607][ T5699] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 330.312442][ T5699] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 330.328212][ T5699] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 999, setting to 64 [ 330.350093][ T9658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1192'. [ 330.365497][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.375677][ T5699] usb 3-1: Product: syz [ 330.390159][ T5699] usb 3-1: Manufacturer: syz [ 330.394854][ T5699] usb 3-1: SerialNumber: syz [ 330.442844][ T1659] usb 2-1: IRDA class descriptor not found, device not bound [ 330.502122][ T1659] usb 2-1: USB disconnect, device number 38 [ 331.403013][ T5699] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 331.456057][ T5699] usb 3-1: MIDIStreaming interface descriptor not found [ 331.541487][ T30] audit: type=1400 audit(1787015747.921:707): avc: denied { mounton } for pid=9664 comm="syz.0.1195" path="/303/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 331.569160][ T9665] No such timeout policy "syz1" [ 331.596197][ T5699] usb 3-1: USB disconnect, device number 55 [ 331.615836][ T9665] ip_tables: iptables: counters copy to user failed while replacing table [ 331.668393][ T5617] udevd[5617]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 331.702698][ T30] audit: type=1400 audit(1787015747.951:708): avc: denied { remount } for pid=9664 comm="syz.0.1195" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 331.722481][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 331.807001][ T30] audit: type=1400 audit(1787015747.951:709): avc: denied { ioctl } for pid=9664 comm="syz.0.1195" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 331.910430][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 332.012941][ T10] usb 5-1: config index 0 descriptor too short (expected 65059, got 72) [ 332.044772][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.747450][ T10] usb 5-1: Product: syz [ 332.772275][ T10] usb 5-1: Manufacturer: syz [ 332.789481][ T10] usb 5-1: SerialNumber: syz [ 333.056984][ T1659] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 333.104816][ T9688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1203'. [ 333.120448][ T9690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1204'. [ 333.146652][ T9690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1204'. [ 333.394998][ T5888] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.427608][ T5888] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.457085][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 333.490086][ T30] audit: type=1400 audit(1787015749.872:710): avc: denied { getopt } for pid=9662 comm="syz.4.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 333.519935][ T5699] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 333.577352][ T5714] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 333.606318][ T5888] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.636990][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 333.642665][ T10] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 333.704030][ T5699] usb 2-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=2d.d8 [ 334.685121][ T1659] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 337.486965][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 340.052096][ C0] sched: DL replenish lagged too much [ 354.234890][ T5888] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.054741][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.061867][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.434168][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 459.224427][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 459.231375][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9690/1:b..l P9694/1:b..l P9697/1:b..l [ 459.241879][ C0] rcu: (detected by 0, t=10502 jiffies, g=62789, q=963 ncpus=1) [ 459.249561][ C0] task:syz-executor state:R running task stack:26152 pid:9697 tgid:9697 ppid:5580 task_flags:0x400000 flags:0x00080000 [ 459.263368][ C0] Call Trace: [ 459.266624][ C0] [ 459.269538][ C0] __schedule+0x125c/0x6730 [ 459.274018][ C0] ? __lock_acquire+0x49f/0x1a40 [ 459.278926][ C0] ? __pfx___schedule+0x10/0x10 [ 459.283743][ C0] ? mark_held_locks+0x40/0x70 [ 459.288475][ C0] preempt_schedule_irq+0x50/0x90 [ 459.293466][ C0] irqentry_exit+0x205/0xa10 [ 459.298037][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 459.303987][ C0] RIP: 0010:lock_release+0x19e/0x310 [ 459.309240][ C0] Code: ff 65 0f c1 05 a3 5b 9e 12 83 f8 01 0f 85 27 01 00 00 9c 58 f6 c4 02 0f 85 12 01 00 00 41 f7 c6 00 02 00 00 0f 85 c8 00 00 00 <48> 8b 44 24 10 65 48 2b 05 ad 14 9e 12 0f 85 4d 01 00 00 48 83 c4 [ 459.328814][ C0] RSP: 0018:ffffc9000596f660 EFLAGS: 00000206 [ 459.334848][ C0] RAX: 0000000000000046 RBX: ffffffff8ede8240 RCX: ffffc9000596f66c [ 459.342786][ C0] RDX: 0000000000000002 RSI: ffffffff8e3870a4 RDI: ffffffff8c600380 [ 459.350731][ C0] RBP: ffffffff81b876be R08: 0000000000000001 R09: 0000000000000007 [ 459.358669][ C0] R10: 0000000000000200 R11: 000000000000af82 R12: ffff88807ec6a540 [ 459.366613][ C0] R13: ffffc9000596f768 R14: 0000000000000202 R15: 0000000000000003 [ 459.374562][ C0] ? unwind_next_frame+0x3be/0x2090 [ 459.379735][ C0] unwind_next_frame+0x3c3/0x2090 [ 459.384725][ C0] ? arch_stack_walk+0x73/0xf0 [ 459.389459][ C0] __unwind_start+0x3cd/0x7e0 [ 459.394102][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 459.400224][ C0] arch_stack_walk+0x73/0xf0 [ 459.404791][ C0] ? stack_trace_save+0x8e/0xc0 [ 459.409614][ C0] stack_trace_save+0x8e/0xc0 [ 459.414258][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 459.419598][ C0] ? __lock_acquire+0x49f/0x1a40 [ 459.424515][ C0] ? __lock_acquire+0x49f/0x1a40 [ 459.429428][ C0] save_stack+0x162/0x1e0 [ 459.433728][ C0] ? __pfx_save_stack+0x10/0x10 [ 459.438552][ C0] ? page_ext_put+0x3e/0xd0 [ 459.443027][ C0] __reset_page_owner+0x84/0x190 [ 459.447937][ C0] __free_frozen_pages+0x79f/0x1090 [ 459.453110][ C0] qlist_free_all+0x47/0xf0 [ 459.457584][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 459.463015][ C0] __kasan_kmalloc+0x8a/0xb0 [ 459.467573][ C0] __kmalloc_noprof+0x322/0x820 [ 459.472392][ C0] ? rcu_is_watching+0x12/0xc0 [ 459.477126][ C0] ? tomoyo_encode2+0xfb/0x3c0 [ 459.481867][ C0] tomoyo_encode2+0xfb/0x3c0 [ 459.486427][ C0] tomoyo_encode+0x29/0x50 [ 459.490818][ C0] tomoyo_realpath_from_path+0x18c/0x690 [ 459.496421][ C0] tomoyo_path_number_perm+0x23c/0x580 [ 459.501848][ C0] ? tomoyo_path_number_perm+0x22e/0x580 [ 459.507452][ C0] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 459.513414][ C0] ? hook_file_ioctl_common+0x140/0x440 [ 459.518931][ C0] ? fput_close_sync+0x11d/0x250 [ 459.523840][ C0] security_file_ioctl+0xd3/0x230 [ 459.528843][ C0] __x64_sys_ioctl+0xb7/0x210 [ 459.533491][ C0] do_syscall_64+0x115/0x870 [ 459.538049][ C0] ? clear_bhb_loop+0x70/0xc0 [ 459.542699][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.548560][ C0] RIP: 0033:0x7fcf2959dd6b [ 459.552941][ C0] RSP: 002b:00007fffdc6b0b20 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 459.561317][ C0] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007fcf2959dd6b [ 459.569256][ C0] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000db [ 459.577193][ C0] RBP: 00007fcf29826308 R08: 0000000000000000 R09: 0000000000000000 [ 459.585136][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.593073][ C0] R13: 0000000000000003 R14: 00007fffdc6b0dd8 R15: 0000000000000000 [ 459.601024][ C0] [ 459.604024][ C0] task:syz.2.1206 state:R running task stack:25832 pid:9694 tgid:9693 ppid:5598 task_flags:0x40054c flags:0x00080003 [ 459.617460][ C0] Call Trace: [ 459.620707][ C0] [ 459.623621][ C0] __schedule+0x125c/0x6730 [ 459.628092][ C0] ? do_exit+0x951/0x2ae0 [ 459.632387][ C0] ? __kernel_text_address+0xd/0x30 [ 459.637558][ C0] ? do_exit+0x951/0x2ae0 [ 459.641862][ C0] ? __pfx___schedule+0x10/0x10 [ 459.646679][ C0] ? mark_held_locks+0x40/0x70 [ 459.651414][ C0] preempt_schedule_irq+0x50/0x90 [ 459.656405][ C0] irqentry_exit+0x205/0xa10 [ 459.660972][ C0] asm_common_interrupt+0x26/0x40 [ 459.665970][ C0] RIP: 0010:write_comp_data+0x18/0x90 [ 459.671310][ C0] Code: 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 8b 05 d9 b3 79 12 49 89 f8 49 89 f1 49 89 d2 65 48 8b 3d b0 b3 79 12 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 c3 cc cc [ 459.690883][ C0] RSP: 0018:ffffc900040e76d8 EFLAGS: 00000202 [ 459.696916][ C0] RAX: 0000000080000000 RBX: 0000000000000003 RCX: ffffffff828740f8 [ 459.704859][ C0] RDX: 0000000000000008 RSI: 0000000000000000 RDI: ffff888035c18000 [ 459.712797][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 459.720739][ C0] R10: 0000000000000008 R11: 0000000000000000 R12: 0000000000000000 [ 459.728677][ C0] R13: 0000000000000008 R14: ffffea0001aa6400 R15: ffffea0001aa6400 [ 459.736622][ C0] ? __page_table_check_zero+0xd8/0x410 [ 459.742138][ C0] __page_table_check_zero+0xd8/0x410 [ 459.747479][ C0] ? __reset_page_owner+0x144/0x190 [ 459.752647][ C0] __free_frozen_pages+0x790/0x1090 [ 459.757818][ C0] qlist_free_all+0x47/0xf0 [ 459.762290][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 459.767717][ C0] __kasan_slab_alloc+0x69/0x90 [ 459.772552][ C0] __kmalloc_cache_noprof+0x265/0x6c0 [ 459.777890][ C0] ? kobject_uevent_env+0x263/0x18b0 [ 459.783148][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 459.788836][ C0] kobject_uevent_env+0x263/0x18b0 [ 459.793927][ C0] ? gadget_unbind_driver+0x371/0x4f0 [ 459.799276][ C0] ? __pfx_dummy_udc_async_callbacks+0x10/0x10 [ 459.805405][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 459.811090][ C0] device_remove+0xcb/0x180 [ 459.815561][ C0] device_release_driver_internal+0x44e/0x620 [ 459.821608][ C0] driver_detach+0xd8/0x1b0 [ 459.826084][ C0] bus_remove_driver+0x13b/0x2e0 [ 459.830990][ C0] driver_unregister+0x76/0xb0 [ 459.835728][ C0] usb_gadget_unregister_driver+0x49/0x70 [ 459.841416][ C0] raw_release+0x19b/0x260 [ 459.845805][ C0] ? __pfx_raw_release+0x10/0x10 [ 459.850719][ C0] __fput+0x3ff/0xb50 [ 459.854682][ C0] task_work_run+0x150/0x240 [ 459.859240][ C0] ? __pfx_task_work_run+0x10/0x10 [ 459.864320][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 459.869491][ C0] do_exit+0x951/0x2ae0 [ 459.873616][ C0] ? __pfx_do_exit+0x10/0x10 [ 459.878171][ C0] ? do_raw_spin_lock+0x128/0x260 [ 459.883164][ C0] ? find_held_lock+0x2b/0x80 [ 459.887814][ C0] ? get_signal+0x7e0/0x21e0 [ 459.892375][ C0] do_group_exit+0xd5/0x2a0 [ 459.896845][ C0] get_signal+0x1ec7/0x21e0 [ 459.901327][ C0] ? __down_common+0x6c5/0x8b0 [ 459.906062][ C0] ? __pfx_get_signal+0x10/0x10 [ 459.910882][ C0] ? down_interruptible+0x66/0xa0 [ 459.915876][ C0] ? rcu_is_watching+0x12/0xc0 [ 459.920616][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 459.926129][ C0] ? down_interruptible+0x66/0xa0 [ 459.931121][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 459.937246][ C0] ? __pfx_raw_ioctl+0x10/0x10 [ 459.941990][ C0] exit_to_user_mode_loop+0x139/0x700 [ 459.947331][ C0] ? rcu_is_watching+0x12/0xc0 [ 459.952065][ C0] do_syscall_64+0x666/0x870 [ 459.956627][ C0] ? clear_bhb_loop+0x70/0xc0 [ 459.961272][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.967131][ C0] RIP: 0033:0x7f9ccd99dd6b [ 459.971520][ C0] RSP: 002b:00007f9cce945f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 459.979903][ C0] RAX: fffffffffffffffc RBX: 0000000000000007 RCX: 00007f9ccd99dd6b [ 459.987841][ C0] RDX: 00007f9cce946fd0 RSI: 0000000080085502 RDI: 0000000000000007 [ 459.995780][ C0] RBP: 00007f9cce946fd0 R08: 0000000000000040 R09: 00007f9cce945fc8 [ 460.003717][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 460.011655][ C0] R13: 0000000800000000 R14: 0000000000000012 R15: 00007f9ccda538e2 [ 460.019605][ C0] [ 460.022595][ C0] task:syz.3.1204 state:R running task stack:25328 pid:9690 tgid:9689 ppid:5591 task_flags:0x40054c flags:0x00080003 [ 460.036038][ C0] Call Trace: [ 460.039285][ C0] [ 460.042188][ C0] __schedule+0x125c/0x6730 [ 460.046659][ C0] ? __lock_acquire+0x49f/0x1a40 [ 460.051571][ C0] ? __pfx___schedule+0x10/0x10 [ 460.056391][ C0] ? mark_held_locks+0x40/0x70 [ 460.061125][ C0] preempt_schedule_irq+0x50/0x90 [ 460.066118][ C0] irqentry_exit+0x205/0xa10 [ 460.070677][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 460.076631][ C0] RIP: 0010:lock_release+0x19e/0x310 [ 460.081891][ C0] Code: ff 65 0f c1 05 a3 5b 9e 12 83 f8 01 0f 85 27 01 00 00 9c 58 f6 c4 02 0f 85 12 01 00 00 41 f7 c6 00 02 00 00 0f 85 c8 00 00 00 <48> 8b 44 24 10 65 48 2b 05 ad 14 9e 12 0f 85 4d 01 00 00 48 83 c4 [ 460.101465][ C0] RSP: 0018:ffffc9000593f398 EFLAGS: 00000206 [ 460.107498][ C0] RAX: 0000000000000046 RBX: ffffffff8ede8240 RCX: ffffc9000593f3a4 [ 460.115441][ C0] RDX: 0000000000000002 RSI: ffffffff8e3870a4 RDI: ffffffff8c600380 [ 460.123391][ C0] RBP: ffffffff81b876be R08: 0000000000000001 R09: 0000000000000007 [ 460.131328][ C0] R10: 0000000000000200 R11: 0000000000016c2e R12: ffff888034412540 [ 460.139265][ C0] R13: ffffc9000593f450 R14: 0000000000000202 R15: 0000000000000003 [ 460.147204][ C0] ? unwind_next_frame+0x3be/0x2090 [ 460.152377][ C0] unwind_next_frame+0x3c3/0x2090 [ 460.157366][ C0] ? __free_frozen_pages+0x79f/0x1090 [ 460.162710][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 460.168830][ C0] arch_stack_walk+0x94/0xf0 [ 460.173392][ C0] ? qlist_free_all+0x47/0xf0 [ 460.178040][ C0] stack_trace_save+0x8e/0xc0 [ 460.182683][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 460.188022][ C0] ? __lock_acquire+0x49f/0x1a40 [ 460.192927][ C0] ? __lock_acquire+0x49f/0x1a40 [ 460.197834][ C0] save_stack+0x162/0x1e0 [ 460.202131][ C0] ? __pfx_save_stack+0x10/0x10 [ 460.206949][ C0] ? __free_frozen_pages+0x79f/0x1090 [ 460.212303][ C0] ? page_ext_put+0x3e/0xd0 [ 460.216778][ C0] __reset_page_owner+0x84/0x190 [ 460.221689][ C0] __free_frozen_pages+0x79f/0x1090 [ 460.226869][ C0] qlist_free_all+0x47/0xf0 [ 460.231341][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 460.236768][ C0] __kasan_kmalloc+0x8a/0xb0 [ 460.241327][ C0] __kmalloc_noprof+0x322/0x820 [ 460.246149][ C0] ? kobject_get_path+0xcf/0x2c0 [ 460.251059][ C0] kobject_get_path+0xcf/0x2c0 [ 460.255793][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 460.261481][ C0] kobject_uevent_env+0x287/0x18b0 [ 460.266564][ C0] ? gadget_unbind_driver+0x371/0x4f0 [ 460.271902][ C0] ? __pfx_dummy_udc_async_callbacks+0x10/0x10 [ 460.278031][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 460.283717][ C0] device_remove+0xcb/0x180 [ 460.288191][ C0] device_release_driver_internal+0x44e/0x620 [ 460.294227][ C0] driver_detach+0xd8/0x1b0 [ 460.298706][ C0] bus_remove_driver+0x13b/0x2e0 [ 460.303615][ C0] driver_unregister+0x76/0xb0 [ 460.308358][ C0] usb_gadget_unregister_driver+0x49/0x70 [ 460.314045][ C0] raw_release+0x19b/0x260 [ 460.318433][ C0] ? __pfx_raw_release+0x10/0x10 [ 460.323350][ C0] __fput+0x3ff/0xb50 [ 460.327304][ C0] task_work_run+0x150/0x240 [ 460.331863][ C0] ? __pfx_task_work_run+0x10/0x10 [ 460.336948][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 460.342125][ C0] do_exit+0x951/0x2ae0 [ 460.346249][ C0] ? __pfx_do_exit+0x10/0x10 [ 460.350805][ C0] ? do_raw_spin_lock+0x128/0x260 [ 460.355805][ C0] ? find_held_lock+0x2b/0x80 [ 460.360450][ C0] ? get_signal+0x7e0/0x21e0 [ 460.365010][ C0] do_group_exit+0xd5/0x2a0 [ 460.369481][ C0] get_signal+0x1ec7/0x21e0 [ 460.373952][ C0] ? __down_common+0x6c5/0x8b0 [ 460.378686][ C0] ? __pfx_get_signal+0x10/0x10 [ 460.383511][ C0] ? down_interruptible+0x66/0xa0 [ 460.388504][ C0] ? rcu_is_watching+0x12/0xc0 [ 460.393239][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 460.398753][ C0] ? down_interruptible+0x66/0xa0 [ 460.403746][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 460.409869][ C0] ? __pfx_raw_ioctl+0x10/0x10 [ 460.414610][ C0] exit_to_user_mode_loop+0x139/0x700 [ 460.419950][ C0] ? rcu_is_watching+0x12/0xc0 [ 460.424685][ C0] do_syscall_64+0x666/0x870 [ 460.429250][ C0] ? clear_bhb_loop+0x70/0xc0 [ 460.433894][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.439753][ C0] RIP: 0033:0x7f59b459dd6b [ 460.444135][ C0] RSP: 002b:00007f59b54f1f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 460.452517][ C0] RAX: fffffffffffffffc RBX: 0000000000000007 RCX: 00007f59b459dd6b [ 460.460456][ C0] RDX: 00007f59b54f2fd0 RSI: 0000000080085502 RDI: 0000000000000007 [ 460.468403][ C0] RBP: 00007f59b54f2fd0 R08: 0000000000000012 R09: 00007f59b54f1fc8 [ 460.476350][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 460.484287][ C0] R13: 0000000800000000 R14: 0000000000000012 R15: 00007f59b46538e2 [ 460.492233][ C0]