last executing test programs: 2.88845981s ago: executing program 1 (id=13): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x400000b4, 0x0, 0x9d}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x8}, {0x6}]}) 2.816202342s ago: executing program 1 (id=14): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080)={0x6, 0x4, '\x00', [@hao={0xc9, 0x10, @private2}, @ra={0x5, 0x2, 0x2}, @jumbo={0xc2, 0x4, 0x2}, @jumbo={0xc2, 0x4, 0x7}]}, 0x30) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0) (async) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5202) (async) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000040)) (async) getsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, &(0x7f0000000040)=0xffffffffffffff65) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) (async) ptrace$setregs(0xd, r6, 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000140)=0x18, 0x4) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="2000278855907b97bddd76000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000814}, 0x20000000) (async) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000ac0)=""/4096, &(0x7f0000001ac0)=0x1000) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ff010000000000c20000000000000001140000002b00000000000000000000000000000000000000030040000000000001000000000000000200000000000000030000000000000000000010000000000100000000000000feffffffffffffff0000000000000000000000000000000000002000000000000700000000000000ffffffffffffffff0000040002000000e80a000027bd7000070000000a0000fe340000000000000014000e00fe"], 0x128}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) syz_usb_connect$uac2(0x6, 0xa3, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0) 2.446715161s ago: executing program 0 (id=15): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x20, 0x3, 0x3, 0x7, @local, @rand_addr=' \x01\x00', 0x7849, 0x10, 0x2, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r3 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000300)=0x60) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000340), &(0x7f0000000380), 0x2, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r4, &(0x7f0000000400)={0x14}, 0x14) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x44) getdents(r5, &(0x7f0000000480)=""/202, 0xca) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@private}}, &(0x7f0000000740)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) mount$fuseblk(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x20, &(0x7f0000000840)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@default_permissions}], [{@pcr={'pcr', 0x3d, 0x16}}]}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000980)={0x0, @dev, @initdev}, &(0x7f00000009c0)=0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000b00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xa8, r10, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x40090) sendto$packet(r5, &(0x7f0000000b40)="d9c53a51b079ba605ada6380afd7e812913cffcf9f1389a6bfda7a056c920f212ec4f95b684f4a5b3fd2ba91881e7cb048af62080f58172b5f1233a48f7ba184580d88d8729c83c85bde5e0e7cd3a735367eec0ce469cf69c0d01ecf28bf1ee7280592987cf4e64f5e1201208e5af376b9f648f38a590072cc46a6da03e8a7bd092d9cb9baa209b2de7ee80bf66405bd93ec7708bbc9c4863b49160c2923d242fbc2703c2b4bbddcef32be284ce6ccf9bafee301293ea8a005f41e067c7ac4b803638ab04c48ad", 0xc7, 0x10, &(0x7f0000000c40)={0x11, 0x8, r1, 0x1, 0xfd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) fspick(r5, &(0x7f0000000c80)='./file0\x00', 0x0) r12 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r12, 0x65, 0x4, &(0x7f0000000cc0), 0x4) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r9) sendmsg$NL80211_CMD_STOP_AP(r9, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x20, r13, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) r14 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000e40)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72d0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x10, 0x5, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0xb, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0xc07}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0xa, 0xf}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x7, 0x6, 0x8c}}]}}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000e80)={0xa, 0x6, 0x300, 0xfa, 0x1, 0x2, 0x40, 0x5}, 0x15f, &(0x7f0000000ec0)={0x5, 0xf, 0x15f, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "5afafb297affc5e915b260d642240e64"}, @ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x7, 0xf0f, 0xfffa, [0xff0180, 0xf, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0x1, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x48, 0xc, 0x6, 0x8a, 0xc}, @generic={0xce, 0x10, 0xb, "0aae319222c10ee9d8e7aa6279e9682d56da9b44156f530ce0490d4d541c1c72f551b3538e1589ded7a97581e4068007e12d5ec1cdfdd12ce884a15e6066858a192c3e97b12f17a993969a5428d5dc3dbaf9501b0a42a48b3fd31fe187a374e3788213c413d4268a48556259c32b2dd88937d674398ca0372d9921709c267e4eafa7d7362d1272d76d1ba730aa432f8ee807166f9fddacf2a2d2cc6431b50e0925ed182352fb20eb860b98774e4317c76c0b1cc767f4251588b22cf777c8af4e9e1468f8a0b782b28bc7c6"}, @generic={0x4e, 0x10, 0xa, "3bec32026b441c4d4d84d7c6de5f600cd68fd1739c78142519d00264b19319d9e7a353506890926709d1edbbaff95e195b887bbaa8fea2392d16df44354b2a77cda73c6b7c78e8cf08bfdf"}]}, 0x1, [{0x8d, &(0x7f0000001040)=@string={0x8d, 0x3, "4d736a12c69b0a5f2852c5cc1c4752179b85d99b0215972a2e4be5548e22cd97bc330ceafbe6211b8fc8da7da862acdc325ff42dfb6c4e527a8fba71fc36f55de1f12f16f734876aa811838f0bcd078aed04da9fa7dcf7f76d175ad02feb8d28e413a74cd8f1bf01cdf6423e804d9db80159b89f8cf7fd8c79a95d4ddd955614e1eae520c8eab5046d6ca8"}}]}) syz_usb_control_io$hid(r14, &(0x7f0000001300)={0x24, &(0x7f0000001140)={0x40, 0x9, 0xea, {0xea, 0x8, "6eb0a76d598628d32cb4bc54cdb3c7b485d4ea882869d4cbdee6c1c1f8cdc62bc72b37e6122f5711d06efc656a1c7c28044a7fac28090a5ad916606d630bb84780dcff7450f4f3fd3b4bde4f4b886cf1f8af2001e612f94b55dcb46a8faf14e9192c626bc8ce89ba7983993cbe2acd07914eb20959811cc3b5fddcab79d5238800847e45448742f2a20c76920f1b783a1a329f5078b84cf8b4fa4d2837299c8856943efff46edd06e316b1cb63f8e7c8d6d2397251443bf74142d5bec42df5855c805b19028db876505179dc739761b25d4a4ff5e2e4d3345c921e62337ccc58ad8b346930706132"}}, &(0x7f0000001240)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000001280)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0x7, "609b"}]}}, &(0x7f00000012c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0x919}}}}, &(0x7f0000001580)={0x2c, &(0x7f0000001340)={0x20, 0x15, 0x5c, "566c4e24587a4b01765b5d0a189b9a4142e786166b05285bae32dd9bd6c3be22f9e39cd32d1b7825a2151c6ed2a848f59065718dafb17ad324529ca36669750a7bb067425517fbd70b0561a7c1b869c584121bab0631f68d2a6e9f67"}, &(0x7f00000013c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001400)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001440)={0x20, 0x1, 0xc5, "cd1e95d7db17adaedd87b7a1da6b219994f0d3850a164780cbcb7299338e28cc33604b9aed2764087b5fe8b3cd61e63b5fea55eeb31f70aa6fbc578be41faddd630bd701a16a278491493dd7731ce0f39e90ce0e7a7fc5c1c8268380f4068301cce0b9567822e73cb1242f048abe945d5e6ccd80750ce26fc082d1fd33c7634e3a86a5e806b1a70ea0ec59c85adfdd1f2c44e2c50bc0272bb41025e17829388846d1af166e1b1b9bb9cc4e14145f64d03a27394073ffc0c85205f10547be85bce4870caee7"}, &(0x7f0000001540)={0x20, 0x3, 0x1, 0x2}}) r15 = openat$tun(0xffffffffffffff9c, &(0x7f00000015c0), 0x331100, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000001600)={'batadv_slave_1\x00', 0x0}) ioctl$TUNSETIFINDEX(r15, 0x400454da, &(0x7f0000001640)=r16) sendmmsg(r12, &(0x7f0000002d40)=[{{&(0x7f0000001680)=@phonet={0x23, 0x78, 0x7, 0x6}, 0x80, &(0x7f0000002740)=[{&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000002700)="666e76a3140b070aec23aa394884f7897f2abdcb87b853c412f90faea667f00379", 0x21}], 0x2, &(0x7f0000002780)=[{0xe8, 0x118, 0x5, "1dd1af1063ce08e1ce59bcc462ee7050bbaa41829e6f1ef6d2813f975b0b7b4a072afdd7d7ed6d21dd957a5d51737d4b7defdb8bef18db076d870fe0c156e1b26154ef0117e34b017d22cfbaf859358c8431d1bc3c5cfbf42992ee924454999770189f3153e53793afb44a1fae5b3903279015d98aa65fd6b96e490c61e10b00debc6db397304e660326b3c06340c13ecb0aeb42ed6e377c3e7df61108bfa9fe9e429923b351ffb61bf5e1a85e90ea6ba9b670613fec6003a84698fdb08ddc87bdae997c9b3f09e70350ff0bfbb19629da2ac91032590b"}, {0x38, 0x116, 0x5, "ec09cd71da91f3b5d7fa6cc178bfe107f9f8c11ce90e5a4cd885bd4155a30dfec21d498b7c"}, {0x60, 0x111, 0x3, "49f28c43d69e0f66e4a99309653b9fd328dc0c86044e18b59ec633d4467659e38ddd08eec931ddc133d766d36fad89e71f559b834376205b07caa5fbc4206a74dd370cdc2e97f1bc148e8ecb"}], 0x180}}, {{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000002900)="c02d950d4f016bd17694eeaee5e725f90b2294682b55e37cfc3ad0162e768a9aa0c44ea29f0ee4c3a156b44969b97ceeb9f9651d58569d971082557cb8d1d34ec09466712b523d2f3c835d13580be9c6b65eb9dde01c6d620975010f66570f3ddcfcdf0545754d9c6a81313063283a4a7e", 0x71}, {&(0x7f0000002980)="542e3d05", 0x4}, {&(0x7f00000029c0)="cf0587249a4e66eaa5c7ab78523f3b616e34edfae4345de014748c1781e999d10438abd2c512cf9b986b1cceb85a5f7d1b157b8dfca5ce84c31aa85787949cf328c763ba25f558558ea7eee28269822bf95d06429f7f21920b5804d849007c583d00d80d4aa890a71df6efba43850c3b60b102d04a634039b10b7fc7b82145d3e2f21a85400514befcf1ae80767cff1b7553da1e45e1de23678e8f98c7ddf2def6d8e2befde7794371fda5b335ef79854e060a0279b37ccbbb29aeefa6198308169e59ba93d104fae33f", 0xca}, {&(0x7f0000002ac0)="f0450fdaae898e10abbc898f0319e58184d51ace2bf73c3caceef168922a3c1bbd4278299f7b319ae33cd299738e82af7d758210ecd1dbd17bccb6712a08eea146f2e595d9f1ca120886e32822bebd8012e83900b0ce10ae353313fb0956357512d4057abba90d11b173d344de041a7e4636e63acaaef7293cafb5871319b352392ac6cd529074ec7f01e31f37be082af305db50e667", 0x96}], 0x4, &(0x7f0000002bc0)=[{0x70, 0xff, 0x5, "6037f99a2a33b7eaf3f57badfc9828193922ce4c5bc76197a68ca806ac3f6bb7832e3b0d1184dcb3cd62d5581480e13bbb497cb72bcce52c3b1d2d56cc9b236838d966c0c7ebb1ab2033317c19085f270f3525609efcf6f2ec17317994"}, {0x100, 0xff, 0x400, "9f53b69f61aaefa87655fb4e3d41c9d9916feb5b167283ffb551f1475f40561cbe76a638568e59a7a02a15d25e31de72a85851240532bfebc968bf95cae0e90ec7c89ffe249c6f9e67ad408aa76ff70e7b5feef9036ffb910b9a95c60cef10f41877b83fea13e46bd2cbe6e90d917818b92ba0840077674a6204f97579a9b309b5511fe5f903f9cb55772bc35369a6aacbb01147665573103de04b07115a2589d4fbd45a3393c4960c09beacf9cf4f5610c434075b15442fb4b0cbf22a4b24b14fe32f9b4832937ee7e860026ad96b5abb4457c296abdb98c18b1b374d5ef1853ff5765648f4616911e6b069"}], 0x170}}], 0x2, 0x24040010) sendmsg$NL80211_CMD_GET_STATION(r9, &(0x7f0000002ec0)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e00)={0x4c, r13, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x50c}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.245609196s ago: executing program 1 (id=16): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x8, 0x6, 0x4, 0x2, 0x4d, 0x8000000000000001}, {0x9, 0x9, 0x7fffffffffffffff, 0x5b, 0x0, 0xffffffffffff7fff}], ['\x00']}) (async) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x0, 0x9, [@empty, @private=0xa010100, @remote, @local, @rand_addr=0x64010100, @rand_addr=0x64010101, @loopback, @broadcast, @multicast1]}, 0x34) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0xe51e4c84d4fbcc29) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000200)=0x9}) (async) r2 = accept$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000300)=0x2) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) r4 = socket$inet(0x2, 0x2, 0x776) sendto$inet(r4, &(0x7f0000000380)="415d982427447e3c3da3a2a76a97645cdfa9fe289a7b8c36e512bfc3ba8d1a254c8f8f062336654d2ffad4a252de71b64559bf3b6e2aa69895dd738cbb7c6f6bbb0debb7713a85245f", 0x49, 0x10, &(0x7f0000000400)={0x2, 0x4e22, @private=0xa010101}, 0x10) (async) ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f0000000540)={&(0x7f0000000440)=[{0xfffffffffffffffe, 0xfff, 0x2}, {0x6, 0x800, 0x4, 0x2}, {0x2, 0x400, 0x0, 0x1ff}, {0x4, 0x8dc, 0x200, 0x8}, {0xc, 0xcf3a, 0xaf2e, 0x6}, {0xfffffffffffffffb, 0x7b81, 0x4, 0x5}, {0x200, 0x4, 0x9c, 0x5}, {0x926c, 0x400, 0x0, 0x5}], 0x8, 0x20, 0x8, 0x3}) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000600)={0x1, 0x1, 0x1000, 0x26, &(0x7f0000000580)="5b596f46880b1d51fcdac0100900d37c6afd7aac937c6fb6a096e2fa403a6d5f9c523659cfb8", 0x17, 0x0, &(0x7f00000005c0)="1374784f9c62b57426c756d70ac620254e4fea4f00588f"}) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f00000006c0)=@attr_other={0x0, 0x3ff, 0x5, &(0x7f0000000680)=0x1}) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000700)={0x0, 0x3, 0x100000000, 0xffff}) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x10000, 0x74, 0x26}, 0x18) unlinkat(r6, &(0x7f00000007c0)='./file0\x00', 0x200) openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x101040, 0x0) (async) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r1, 0x4068aea3, &(0x7f0000000840)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000900)) (async) r7 = open$dir(&(0x7f0000000940)='./file0/file0\x00', 0x40800, 0x191) r8 = openat(r7, &(0x7f0000000980)='./file0/../file0\x00', 0x101000, 0x118) ioctl$LOOP_SET_STATUS(r8, 0x4c02, &(0x7f00000009c0)={0x0, {}, 0x0, {}, 0xfffffff7, 0x1, 0x1a, 0x18, "3a7508b78a36a2922f98fdaa9013668fc487bd5b2c9ebd52ab1984856e6489a73221f7fd4223b2f74b5bf06e1f8ec9f73deef6fd77b14fe1677d96ec239991d1", "7e5637be96d2b223ec18b58e71958d240def28b6fa5871fd5ae293cf0f69d638", [0x6, 0x5]}) (async) ioctl$KVM_S390_VCPU_FAULT(r7, 0x4008ae52, &(0x7f0000000a80)) (async) symlinkat(&(0x7f0000000ac0)='./file0\x00', r1, &(0x7f0000000b00)='./file0/../file0\x00') r9 = openat$cgroup_type(r1, &(0x7f0000000b40), 0x2, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r9, 0x80047210, &(0x7f0000000b80)) openat$tun(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2040, 0x0) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628) 2.243757026s ago: executing program 1 (id=17): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000500)={0x0, 0x1fffd, 0x0, 0x3, 0x2000000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x33e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x10, 0x2, 0xe3, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r8, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x2d, {0x9, 0x0, 0x200001, 0x0, 0x0, 0x400}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) fcntl$setsig(r12, 0xa, 0x3e) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup(r14) syz_ublk_setup_queues(r15, r13, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r15}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfffc, 0x5, 0x0, 0x0}}, 0x0) r16 = socket(0x2, 0x1, 0x0) setsockopt$inet_opts(r16, 0x0, 0x19, 0x0, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) 2.102858559s ago: executing program 3 (id=19): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r2, 0x2) close(0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe800000000100000000000000000037000004d232000000fc020000000000000000000000000000050000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000030000800000000043050000000000000400000000000000ffffffffffffff7f000100000000000001000000000000000000000000000000000000002cbd70000535004002000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r5, @ANYRES16=r3], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00b3f00180c2000000aaaaaaaaaaaa86dd694fd2cd01683afffe80000000000000000000000000000fff020000000000000000000000000001860090780104ff010500000254000000191f8666000005dc13128e21be0ca3631c139c476e64ddd58715f9515609f30f02dcc39e129ed698ffa44d6548a012f7004e0ab9dcb95580c0b6d48fc1a50000c8896cf496271da94eb0b9f1499f1bcb2cfe350875803587770312bd1d83e9a99408855797b33e14534c04acafd2d7eb6380b19eff8edf4e40f9661c77a5fba9af8147db0788"], 0x1a2) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYRESHEX=r6], 0x6c}}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) (async) flock(r1, 0x2) (async) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) flock(r2, 0x2) (async) close(0x3) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'netdevsim0\x00'}) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r5, @ANYRES16=r3], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00b3f00180c2000000aaaaaaaaaaaa86dd694fd2cd01683afffe80000000000000000000000000000fff020000000000000000000000000001860090780104ff010500000254000000191f8666000005dc13128e21be0ca3631c139c476e64ddd58715f9515609f30f02dcc39e129ed698ffa44d6548a012f7004e0ab9dcb95580c0b6d48fc1a50000c8896cf496271da94eb0b9f1499f1bcb2cfe350875803587770312bd1d83e9a99408855797b33e14534c04acafd2d7eb6380b19eff8edf4e40f9661c77a5fba9af8147db0788"], 0x1a2) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYRESHEX=r6], 0x6c}}, 0x41) (async) 2.049508451s ago: executing program 1 (id=20): syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e293610ef171e7206de90f60070090212000100000000090400000002"], 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000100)={0x28a, {{0x2, 0x4e23, @loopback}}}, 0x88) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfffc, 0x7, @empty, 0x200}, 0x1c) setsockopt(r1, 0x1, 0x9, &(0x7f0000000040), 0x29) keyctl$set_reqkey_keyring(0xe, 0x0) request_key(&(0x7f00000022c0)='user\x00', &(0x7f0000002300)={'syz', 0x1}, &(0x7f0000002340)='\\\x00', 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x1, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x100081, 0x20000006, 0xd3, 0x6, 0x10000, 0x80005, 0x3, 0xffff2d34, 0xffffff01, 0x6, 0x4, 0x10003, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x7, 0x7, 0x6, 0x0, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0xc, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0xb, 0x6c7, 0x9, 0xfffffffc, 0x1000, 0x0, 0x0, 0x205, 0x442f, 0x200000e, 0x6, 0x78, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4402, 0x401, 0x6, 0x1, 0xfc, 0x6, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x7, 0x4, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffc01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0x9, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xb42a, 0x5, 0x7fff, 0x80000000, 0x5, 0xf, 0x4, 0x6, 0x805, 0x5, 0x1008, 0x5, 0xffffffff, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x1ff, 0x2, 0x2, 0x2, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800006, 0x5b9, 0x1006a, 0x40000001, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x8, 0xa9, 0x20000005, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x9db, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x7ff, 0x7fff, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x0, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0x9, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000650101010100000000000000"], 0x10) syz_clone3(&(0x7f0000000340)={0x98009280, &(0x7f00000000c0), 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.046301441s ago: executing program 3 (id=21): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000003000)={0x1, 0x0, [{0x4d0, 0x0, 0x1ff}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = socket$inet6(0xa, 0x2, 0x10000000) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000001700)={0x0, 0x0, 0x0}, &(0x7f0000001740)=0xc) r8 = syz_usb_connect$midi(0x5, 0x24, &(0x7f0000002100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x2466, 0x8010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x40, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x9f}}}}}]}}, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r8, &(0x7f0000002600)={0x14, 0x0, &(0x7f00000025c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}}, &(0x7f0000002880)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000027c0)={0x20, 0x83, 0x2, "f7d0"}, 0x0, 0x0}) syz_usb_control_io$uac3(r8, 0x0, 0x0) keyctl$chown(0x4, 0x0, r6, r7) (async) r9 = socket(0x10, 0x6, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x0, 0x0, 0x1}, 0x10) (async) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_SECURITY(r10, 0x112, 0x4, 0x0, 0x0) (async) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/address_bits', 0x40e02, 0x78) (async) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000b00000000030005000000000002000000ac1414aa0000000000000000010015000000000001001400000000000100", @ANYRESOCT], 0x68}, 0x1, 0x7}, 0x0) statx(r11, &(0x7f0000000000)='./file0\x00', 0x400, 0x2, &(0x7f0000000080)) (async) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES64=r3, @ANYRES64=r4], 0x20}}, 0x40856) 1.929950623s ago: executing program 0 (id=22): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getgroups(0x2, &(0x7f0000000140)=[0x0, 0xee00]) setregid(0x0, r1) setresgid(r1, r0, r1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) setpgid(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r2, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r10 = open(0x0, 0x10507e, 0xa6) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x7, 0x1ffffffffffe, 0x7, 0x8, 0x3}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r10, r11, &(0x7f0000000180)={0x0, 0x8427, 0x0, 0x3, 0x3b2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x2000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x1, 0x3, 0x19a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x400, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xea83, 0x8, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.081643934s ago: executing program 0 (id=23): r0 = inotify_init() (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x449) r3 = inotify_init1(0x0) r4 = inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x40000f9f) inotify_rm_watch(r0, r4) 953.225397ms ago: executing program 0 (id=24): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)={0x1e8, r2, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x1c0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x38, 0x3, "21778c934d4cedeadc1ee32b23a476db1d00e6a07b72ba0169ac7101dd62b9a7de02959faa650819e65a5d8f14c166764881dba5"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb3, 0x3, "f4e503363dd3543a600718315a31dcd4a2c26b1e68a471e015ce4f889fbb1f266a5b6c826240789055f73055e92b604d5393bff3e2a1d0c4960cd2bac60420d65e32e049a3a01b8ab1dc32b0076ce42360b597c900b56275bf28a51435b5e81f5df955bb9b12458a33dcd6ff83704a5288dd6a6a685224efe0b23fd3f384b0713c5829059b504f44a85b13a4b7f761482c06d836eff951310aa4199722528a45c4d833f09c0589e6e4695370bf9463"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x57, 0x3, "f50fb904ef8094398affea2c0261729596e9126e49113fa80708c5ba6105bc30403e49a5ed7e7f7a0a2475ae0b91e21f931c4efd4be1fb425de88628e82c1d505db91d779f6ea620a69b1ee34f7d4996a3d499"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x75, 0x3, "0e0e2af3ad2d4487f08cb49ce39e1d59f3b4c70836bbd35c775b75c0f647b9fe1acf90a3d5341d012e4f4a80332a5df5adc76de3ecee36b638cc001fe74a7eaf45d319867a3a4499e265f78eda53e4a3402b53de29d201fd8f1223f21234166e04ac45cf3702f6df6eda5b1064e9010466"}]}]]}, 0x1e8}, 0x1, 0x0, 0x0, 0x8810}, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x5cf6, 0x20, 0x3}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb5a5, 0x8, 0x2, 0x8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd061, 0x2, 0x0, 0x126}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc6a3, 0x82, 0x2, 0x14a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x69e3, 0x8, 0x3, 0x309}, 0xffffffffffffffff}], 0x4, &(0x7f0000001b40)={0x2e, 0x1b, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xffff}, 0x0, 0x0, '\x00', {0x2, 0x430, 0x0, &(0x7f0000000b40)=@buf_512="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"}}, &(0x7f0000001bc0)) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x20, 0x2, 0x15a, 0x0, r4}, &(0x7f00000001c0), &(0x7f0000000000), 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) (async) sendmmsg$inet6(r6, &(0x7f0000001e40)=[{{&(0x7f0000002180)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, 0x8}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000100)='S', 0x1}], 0x1}}], 0x1, 0x240880d1) (async) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) (async) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r7, &(0x7f0000000600)=[{&(0x7f0000000080)='0{', 0x2}], 0x1) (async) getsockopt$inet6_tcp_buf(r6, 0x6, 0xb, 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x80000000) (async, rerun: 32) dup3(r0, r5, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x8cc, 0x1, 0x4010, r3, 0x20000000) 820.70964ms ago: executing program 0 (id=25): r0 = syz_usb_connect$midi(0x5, 0xd5, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x194f, 0x10c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc3, 0x1, 0x1, 0x0, 0x40, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x30, 0x9f, [@midi_out_jack={0x1b, 0x24, 0x3, 0x2, 0x9, 0xa, [{0xaf, 0x8}, {0x81, 0xd}, {0x9, 0x80}, {0xa}, {0xb, 0x1}, {0x95, 0xc}, {0x2}, {0x5, 0x3b}, {0x0, 0xff}, {0x4, 0xc}], 0xcd}, @midi_out_jack={0x15, 0x24, 0x3, 0x3, 0x7, 0x7, [{0x3, 0xfe}, {0xa0, 0x8}, {0xf, 0x8}, {0x43, 0x8}, {0xf9, 0x7}, {0x3, 0x40}, {0x84, 0x83}], 0x81}, @ms_header={0x7, 0x24, 0x1, 0x6, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x8e, 0x4}, @ms_header={0x7, 0x24, 0x1, 0x6, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x7, 0x9}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x8, 0xc}], [{{0x9, 0x5, 0x8, 0x10, 0x10, 0xd, 0x9, 0x3, {0xe, 0x25, 0x1, 0xa, "d708000000000200009d"}}}, {{0x9, 0x5, 0x4, 0xc, 0x200, 0x8, 0x3, 0x5, {0xc, 0x25, 0x1, 0x8, "39b852abffa5c1ca"}}}, {{0x9, 0x5, 0x10, 0x10, 0x200, 0x7b, 0x1, 0xe0, {0x12, 0x25, 0x1, 0xe, "0918cd5802786fe71841a6cf08ed"}}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x4, 0x7, 0x9, {0x11, 0x25, 0x1, 0xd, "55d94ce8897091619a47c31bbf"}}}]}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x6, [{0xee, &(0x7f00000005c0)=@string={0x130, 0x3, "c9bc4687a3926f5991c41b0a3f6e2ec9cbb087f515f5d9c4fa0c5f531b97d7964d924b6d45d09ec19ae8ed7eab20fd4d6875c0d262d4e087bdcf16105aa9825d1f0237ed5b35eab6f298c99fa620c22e4dda53ce6a9ddbe8821ece0f8b604f931bb38c0de7dc99566abedbe1e3797387ed2411233845632cea23c903bdffc1dcf2346e2ce6cdf60350205ea5d7413f3d40b88a846aac4cc681cfafa347c96eb62abcb7c785e47d075c068cbd7f72c25e554b060988627118a7d78e267b52acde908cdc290cc0cd15cd57a37684b20f93eed69f533391edea30ffa0c430d38063716cc591babd24502e065696"}}, {0x72, &(0x7f0000000200)=@string={0x72, 0x3, "8bb5b72aea6708e030e9bc2b7f4e25980c78d3354ba520e6ebfa0fd0acdce408504116a124bc1cf9f3abeed4d88e16e2765d8ee6df5180d242c527a5b3a51ff63cd958a69dbd45d1e72abf599cf437170bbabc912434c680f1803f5ba4b5f3f8fbdc54722fbe109e17f74b2279ab613c"}}, {0xc6, &(0x7f0000000280)=@string={0xc6, 0x3, "a879670b555721651a440568ca2e893133887f58c44f61ec24c933723b4420fe20811d8cdc3accc873c46f1ec66e7e94b409422784dca6295b0a3f88ca96dac524c7297aca8cadefb25cc32f83d0570f34710f52b63b91f62653eb71e21764232cd24f7c9ca1f17957fe42a4a5511c97a1065c328815add482b234bf0a5a9173505b3bf621ac26b43eb0dbfaf8082242134f28ea7c5c7d2397b385a4a486c7a94a7b7b479b96d8ef84cf2ccc6f7b26f474062c8b17552dde648dab35214ecb2bd11aee60"}}, {0x6b, &(0x7f0000000380)=@string={0x6b, 0x3, "76c08b1af54b6bb8f82bc2327300fc0f5b31bd35a330610832b2ec23e4ac61a628a9cc09035677495b0d457c9237d0667faf3f8380e6e1884fd5ba2136ba50437711c42e431e452da285c75e71eef9fb67d650d50fff28f2ce716dd770705e398c3ef3449e180086de"}}, {0xd3, &(0x7f0000000400)=@string={0xd3, 0x3, "4e2592c6a60b21a4684ba7a10bc62afd6857a9e493573534b6aea6e5f78a56edfc83ce10503d6aacf1669e30ea339ab4047e1477fc951a5dc84f17f5197f5aa0b3554a32b1d08b1f129bf127bbd76057ed11c36bbf447407de39d22aeb9a6975956a696c93c27dec9f4a6f55b5a7fcce4082edff8bad2ce838c2f252096d17e884cd155b08f57c3bf30a425ecf019c073d7253634a8855dfb915021a8e24a3c3c063abe2851dd4b26fbce6ff82584b8eb46334e6e775608d9869e9629ca94f64fa873f34219f3e4ffb98304608554c3e13"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x42b}}]}) syz_usb_control_io$printer(r0, &(0x7f0000000740)={0x14, &(0x7f0000000100)={0x40, 0x22, 0xb2, {0xb2, 0x6, "f9b0d5c34dc706d0d273f8db9a411e8ea3fb7d516379e9be9957e9a3a8ca94e212bbc39fdc2f15b13b4eabbb08408836da7ec79ce07ae6f6f43a9587d8cdb187b341b5197d496da4d2534b221477c468f81f4f1fd41cdd19ab977d89b2f8504c36561e3a2ca5634cf578475828f12e99f0631a8d201159c10cf038f2f5936d5ee1a31250150b116eefab5f90408210b9015a1214ddfa6674e6e5af708af0a6126da519c8301451f83b3b4b5702703fa6"}}, &(0x7f00000006c0)={0x0, 0x3, 0x57, @string={0x57, 0x3, "bfe4d17bded66f2667e9d98a6d3c09d813e530fe32813ee9cab30ba49cc633c302c4bb5e5e832ba3a060a3f23f214f76bdece2b66fe8f648bf27b007649e81da68f2c217bfef0134ee4aafd952d9ddb6ee20b0d97f"}}}, &(0x7f00000009c0)={0x34, &(0x7f0000000780)={0x40, 0x31, 0x4, "4c4c64ab"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000840)={0x20, 0x0, 0xec, {0xea, "d01239e71fdc581155da09cc7fb5dd10ad3ca4b66f16d80ce97def8faeeb54ce64aaf3c0640ca5cb515ab59f5c9ba14109389a47a63d6b741ac4b76b7bbee9e0d694e6e15bdce3a36c8ad4e8d38b5bd74b6544dbf6017ed65b100bf3be4144f5a7a43d70090a6af3fc00daa02c002bed494c12e68ab5c18a8c7a25afcf21214c463c9d814d5c6657e2adf802023f3c92a5b0e0c26bddd3685879de613514997977ad16f113677487b75675cbca65ee9e151b060bfe26bc0120d8b93d066093bdfa66c19df604ab2c471fda6578d77b075933a95af3a2accedb170d3dc167741a634ea36469d5312439e0"}}, &(0x7f0000000940)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000980)={0x20, 0x0, 0x1, 0x7f}}) (async) syz_usb_control_io$uac1(r0, &(0x7f0000002600)={0x14, 0x0, &(0x7f00000025c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}}, &(0x7f0000002880)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="200000f7d0000000"], 0x0, 0x0}) (async) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000000) (async) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000000)=@sr0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 816.35127ms ago: executing program 1 (id=26): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d22a6640da0320283c52000000010902440001000000000904000000ef040100052406000105240000000d240f0100000000060000000006241a050000152412"], 0x0) 500.722968ms ago: executing program 2 (id=29): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000440)={0x0, &(0x7f00000003c0)=[@in_dx={0x69, 0x20, {0xc6ec, 0x2}}], 0x20}) ioctl$KVM_PRE_FAULT_MEMORY(r1, 0xc040aed5, &(0x7f0000000480)={0xc000, 0xc000}) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setlease(r4, 0x400, 0x2) sendto$packet(0xffffffffffffffff, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195e", 0x2a, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r3, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) read(0xffffffffffffffff, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000007c0)="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", 0xfffffffffffffdbe, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UI_GET_SYSNAME(r5, 0x8040552c, &(0x7f00000001c0)) r6 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r6, &(0x7f0000000200)='0\x00', 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c010000100033062abd700000000000fc020000000000000000000000000006e000000200000000000000000000000000000000000000000200002004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000002000000000000000032000000ac1414bb000000000000000000000000fdffffffffffffff00000000000400000200000000000000cd2d000000000000000000003b00000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000010000000000002dbd7000000000000a00040000000000000000004a000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000c9050000"], 0x13c}, 0x1, 0x0, 0x0, 0x24000884}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x1c166, 0x0) ioctl$TIOCMSET(r7, 0x5418, &(0x7f0000000400)=0x6) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000280)="8fc978d10e0f7833b9800000c00f3235001000000f300f01c40f20c035000000400f22c00f20e035000010000f22e00f01f70f01c267642e26660f3881ba0800260f01c2", 0x44}], 0x1, 0x53, &(0x7f0000000380)=[@vmwrite={0x8, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1}], 0x1) 383.839481ms ago: executing program 2 (id=30): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000014f8000000200002000a00000000000000ff020000000000002000000000000001000000000d0001007564703a73"], 0x6c}}, 0x8810) 383.595721ms ago: executing program 2 (id=31): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000040000000000000000000114000400000000f7000000000000ffffac1e00010800074000000001"], 0x94}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80, r3}) (async, rerun: 64) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r3}) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, 0x0, 0x0) (async, rerun: 64) bind$netlink(r5, &(0x7f0000000000), 0xc) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="ac0000000001050500000000000000000a0000003c0002802c00018014000300fe800000000000000000000000a9b6bb14000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040020010000000000000000000000000001080007400000000018000d8014000400ff010000000000000000000000000001"], 0xac}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x23, &(0x7f0000000100)=0xc0, 0x4) 313.557723ms ago: executing program 2 (id=32): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000000)={0x1, 0x7, '\x00', 0x5a, 0x80}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20a41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x2}) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000040)) (async) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe28, 0x4, @mcast2, 0x7}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000600)={0x2, 0x4e20, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x32}, 0x2}, 0x1c) (async) open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x61) 278.727993ms ago: executing program 3 (id=33): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'nr0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x8) connect$inet6(r4, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000540)="a9", 0x1}], 0x2}}], 0x1, 0x4400c800) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r3, @ANYRESHEX=r3], 0xfdef) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000580)={0x3a, 0x223, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0x4, [0x6, 0x1, 0x1]}}, @ra={0x5, 0x2, 0x6}, @jumbo={0xc2, 0x4, 0x80000000}, @generic={0x0, 0x1000, "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"}, @generic={0x7f, 0xe5, "ee21871eb126ceffa5bf0a0dbdbdce2b309c005be8433645657db1528f3ab1324d091ea590ed84fc6fbac4fd0a93486b58592ca418eaf4dc65136d47a244eda62d0dcfe22a8d898ea9b236a01ddb2c40a8304a3d5c1a44cce56ff86ef3f34bd5a3db9a96b5587503d128978f29b23e212ee95c79b65406908680c8284a7f2ed05a83d7b35b8c2419af25a38e16ce5255d07862b375654811bb52a05f6cb9890bde37b374c1ebf72ac5a648d947fc27cc89a92eb17b884d3062a5b88b17fa43f8c6efd096c93b80402bbc844a7db63ae777c6cba0c914bfd661cfc5027230da6ede89439f4b"}, @pad1]}, 0x1120) 105.521158ms ago: executing program 2 (id=34): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x9000, &(0x7f0000000000)={0x100002, 0x1000f7, 0x40000}, 0x21) (async) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) (async) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000100)) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) (rerun: 64) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000100)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) (async) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000140)=""/4140, 0x102c}], 0x1, 0x4800, 0x0) (async) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0xb7e, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000040)=""/224) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$unix(0x1, 0x5, 0x0) (async) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) (async) bind$tipc(r5, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x0) (async) r6 = creat(&(0x7f0000001180)='./file0\x00', 0x83) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async, rerun: 64) ioctl$XFS_IOC_FSGEOMETRY_V4(r5, 0x8070587c, &(0x7f0000000000)) (async, rerun: 64) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f00000012c0)) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000001600)='ip6gre0\x00') (async) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x2b73, 0x13, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xb, 0x20, 0x40, {0x8, 0xb, 0x0, 0x1, 0x1, 0x4, 0x20, 0x81}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0xb, 0x9, 0xc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5, 0x5, 0x9, {0x8, 0x25, 0x1, 0x80, 0xc, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xd, 0x3, 0x40, {0x8, 0x25, 0x1, 0x83, 0x6c, 0x4, 0xb6}}}}}}}}]}}, 0x0) 105.254088ms ago: executing program 2 (id=35): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x98}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000340)=""/232) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x6, 0x14f882) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000005c0)={r5, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) ioctl$LOOP_CLR_FD(r4, 0x4c01) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 104.483958ms ago: executing program 3 (id=36): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netfilter\x00') fchdir(r0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') 102.386638ms ago: executing program 3 (id=37): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fsopen(&(0x7f00000000c0)='tmpfs\x00', 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x4283cafe) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x9c2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x1c) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='rootcontext', &(0x7f0000000080)='^\x00', 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, &(0x7f0000000040)) 54.712108ms ago: executing program 3 (id=38): mkdir(&(0x7f0000000100)='./config\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./config/usb_gadget/g2\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsm_list_modules(0x0, 0x0, 0x18) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x9b) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) connect$vsock_stream(r2, &(0x7f0000000240), 0x10) listen(r2, 0x4) rename(&(0x7f0000000080)='none\x00', &(0x7f00000000c0)='./config\x00') rmdir(&(0x7f0000000600)='./config/usb_gadget/g2\x00') 0s ago: executing program 0 (id=39): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0xffffffff, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000340), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@ccm_128={{0x304}, "6dad45c0b4e357f3", "453f7ef36b413f23e75fd306283c3d00", 'OI^\x00', "11b4039998e2c1e9"}, 0x28) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) r3 = dup(r2) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @multicast2}, 0x3, 0x3, 0x3}}, 0x2e) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.62' (ED25519) to the list of known hosts. [ 30.713162][ T36] audit: type=1400 audit(1785527640.550:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.716797][ T286] cgroup: Unknown subsys name 'net' [ 30.736235][ T36] audit: type=1400 audit(1785527640.560:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.764123][ T36] audit: type=1400 audit(1785527640.590:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.764623][ T286] cgroup: Unknown subsys name 'devices' [ 30.886184][ T286] cgroup: Unknown subsys name 'hugetlb' [ 30.891901][ T286] cgroup: Unknown subsys name 'rlimit' [ 30.987562][ T36] audit: type=1400 audit(1785527640.830:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.010880][ T36] audit: type=1400 audit(1785527640.830:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 31.035780][ T36] audit: type=1400 audit(1785527640.830:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 31.062700][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 31.071588][ T36] audit: type=1400 audit(1785527640.910:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.097196][ T36] audit: type=1400 audit(1785527640.910:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.120256][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.123531][ T36] audit: type=1400 audit(1785527640.950:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.157286][ T36] audit: type=1400 audit(1785527640.950:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 32.007154][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.014437][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.021583][ T296] bridge_slave_0: entered allmulticast mode [ 32.028304][ T296] bridge_slave_0: entered promiscuous mode [ 32.036222][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.043312][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.050779][ T296] bridge_slave_1: entered allmulticast mode [ 32.057153][ T296] bridge_slave_1: entered promiscuous mode [ 32.063280][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.070449][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.077595][ T293] bridge_slave_0: entered allmulticast mode [ 32.084137][ T293] bridge_slave_0: entered promiscuous mode [ 32.092184][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.099336][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.106471][ T293] bridge_slave_1: entered allmulticast mode [ 32.112835][ T293] bridge_slave_1: entered promiscuous mode [ 32.158479][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.165744][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.172856][ T294] bridge_slave_0: entered allmulticast mode [ 32.179344][ T294] bridge_slave_0: entered promiscuous mode [ 32.186070][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.193151][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.200512][ T294] bridge_slave_1: entered allmulticast mode [ 32.206920][ T294] bridge_slave_1: entered promiscuous mode [ 32.274704][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.281901][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.289134][ T295] bridge_slave_0: entered allmulticast mode [ 32.295461][ T295] bridge_slave_0: entered promiscuous mode [ 32.302458][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.309675][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.316955][ T295] bridge_slave_1: entered allmulticast mode [ 32.323262][ T295] bridge_slave_1: entered promiscuous mode [ 32.447824][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.454958][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.462344][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.469464][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.487849][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.494980][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.502286][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.509368][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.518073][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.525171][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.532468][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.539543][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.552415][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.559556][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.566868][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.573955][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.606875][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.614318][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.621644][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.629405][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.636924][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.644277][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.651493][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.658954][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.690114][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.697358][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.705609][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.712735][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.720892][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.728676][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.736504][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.743577][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.764253][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.771331][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.784847][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.792018][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.822878][ T296] veth0_vlan: entered promiscuous mode [ 32.832744][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.839886][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.857466][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.864579][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.888418][ T296] veth1_macvtap: entered promiscuous mode [ 32.898968][ T295] veth0_vlan: entered promiscuous mode [ 32.915389][ T294] veth0_vlan: entered promiscuous mode [ 32.933727][ T294] veth1_macvtap: entered promiscuous mode [ 32.959588][ T293] veth0_vlan: entered promiscuous mode [ 32.972425][ T295] veth1_macvtap: entered promiscuous mode [ 32.979804][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.018426][ T293] veth1_macvtap: entered promiscuous mode [ 33.029200][ T312] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 33.147392][ T317] netlink: 'syz.2.3': attribute type 15 has an invalid length. [ 33.340129][ T332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=332 comm=syz.2.7 [ 33.361026][ T332] kernel read not supported for file /policy (pid: 332 comm: syz.2.7) [ 33.391035][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.416054][ T339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 33.431234][ T339] Zero length message leads to an empty skb [ 33.543858][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 33.550870][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.562297][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.572901][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 33.585969][ T31] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 33.595060][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.605485][ T31] usb 1-1: config 0 descriptor?? [ 33.663799][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 33.693782][ T313] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 33.813721][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 33.820251][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.831490][ T313] usb 3-1: device descriptor read/64, error -71 [ 33.837873][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.847902][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 33.860763][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 33.869878][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.879977][ T9] usb 4-1: config 0 descriptor?? [ 34.022435][ T319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.031212][ T319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.045056][ T31] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 34.068507][ T31] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 34.075954][ T31] microsoft 0003:045E:07DA.0001: item fetching failed at offset 33/34 [ 34.084847][ T31] microsoft 0003:045E:07DA.0001: parse failed [ 34.093716][ T313] usb 3-1: device descriptor read/64, error -71 [ 34.094346][ T31] microsoft 0003:045E:07DA.0001: probe with driver microsoft failed with error -22 [ 34.264437][ T46] usb 1-1: USB disconnect, device number 2 [ 34.318245][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0002/input/input4 [ 34.332260][ T9] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 34.344661][ T313] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 34.493784][ T313] usb 3-1: device descriptor read/64, error -71 [ 34.513374][ T9] usb 4-1: USB disconnect, device number 2 [ 34.733884][ T313] usb 3-1: device descriptor read/64, error -71 [ 34.844121][ T313] usb usb3-port1: attempt power cycle [ 35.183757][ T313] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 35.215019][ T313] usb 3-1: device descriptor read/8, error -71 [ 35.345012][ T313] usb 3-1: device descriptor read/8, error -71 [ 35.373756][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 35.413871][ T340] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 35.533761][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 35.539558][ T31] usb 2-1: too many configurations: 112, using maximum allowed: 8 [ 35.556431][ T31] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 35.563839][ T340] usb 4-1: Using ep0 maxpacket: 8 [ 35.565707][ T31] usb 2-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 35.573366][ T340] usb 4-1: unable to get BOS descriptor or descriptor too short [ 35.579927][ T31] usb 2-1: Product: syz [ 35.587897][ T313] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 35.591671][ T31] usb 2-1: Manufacturer: syz [ 35.602884][ T340] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 35.612931][ T340] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.619964][ T31] r8152-cfgselector 2-1: Unknown version 0x0000 [ 35.622126][ T340] usb 4-1: Product: syz [ 35.627983][ T31] r8152-cfgselector 2-1: config 0 descriptor?? [ 35.632618][ T340] usb 4-1: Manufacturer: syz [ 35.643139][ T340] usb 4-1: SerialNumber: syz [ 35.647944][ T313] usb 3-1: device descriptor read/8, error -71 [ 35.784859][ T313] usb 3-1: device descriptor read/8, error -71 [ 35.847122][ T36] kauditd_printk_skb: 68 callbacks suppressed [ 35.847140][ T36] audit: type=1400 audit(1785527645.690:142): avc: denied { write } for pid=390 comm="syz.1.20" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 35.867518][ T31] r8152-cfgselector 2-1: USB disconnect, device number 2 [ 35.893857][ T313] usb usb3-port1: unable to enumerate USB device [ 36.146029][ T36] audit: type=1400 audit(1785527645.990:143): avc: denied { watch watch_reads } for pid=409 comm="syz.0.23" path="/3" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 36.216176][ T36] audit: type=1400 audit(1785527646.060:144): avc: denied { read } for pid=411 comm="syz.0.24" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 36.240839][ T36] audit: type=1400 audit(1785527646.060:145): avc: denied { open } for pid=411 comm="syz.0.24" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 36.265256][ T36] audit: type=1400 audit(1785527646.090:146): avc: denied { map } for pid=411 comm="syz.0.24" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 36.290901][ T36] audit: type=1400 audit(1785527646.110:147): avc: denied { ioctl } for pid=411 comm="syz.0.24" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 36.317017][ T36] audit: type=1400 audit(1785527646.140:148): avc: denied { setopt } for pid=403 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.336683][ T36] audit: type=1400 audit(1785527646.170:149): avc: denied { create } for pid=403 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 36.365306][ T36] audit: type=1400 audit(1785527646.170:150): avc: denied { write } for pid=403 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 36.374857][ T340] usb 4-1: MIDIStreaming interface descriptor not found [ 36.416323][ T340] usb 4-1: USB disconnect, device number 3 [ 36.428214][ T36] audit: type=1400 audit(1785527646.270:151): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 36.446047][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.472242][ T422] netlink: 165 bytes leftover after parsing attributes in process `syz.2.27'. [ 36.519444][ T424] netlink: 20 bytes leftover after parsing attributes in process `syz.2.28'. [ 36.528910][ T424] netlink: 'syz.2.28': attribute type 27 has an invalid length. [ 36.541122][ T424] loop7: detected capacity change from 0 to 7 [ 36.548269][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 36.557612][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 36.565690][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 36.574940][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 36.582838][ T424] loop7: unable to read partition table [ 36.588675][ T424] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`4FLQk݊5) failed (rc=-5) [ 36.601667][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 36.610978][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 36.619794][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 36.629253][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 36.637631][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 36.644004][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 36.646983][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 36.662272][ T313] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 36.663391][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 36.679056][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 36.687234][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 36.696514][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 36.709723][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 36.719655][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 36.728992][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 36.736897][ C1] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 36.746092][ C1] Buffer I/O error on dev loop7, logical block 1, async page read [ 36.753988][ C1] Buffer I/O error on dev loop7, logical block 2, async page read [ 36.789951][ T430] tipc: Started in network mode [ 36.795051][ T430] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 36.804588][ T430] tipc: Enabled bearer , priority 10 [ 36.824823][ T313] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 36.834526][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.844373][ T313] usb 2-1: config 0 descriptor?? [ 36.847016][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 36.858487][ T313] usb 2-1: bad CDC descriptors [ 36.859110][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 36.874070][ T31] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 36.886481][ T31] usb 1-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 36.895649][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.903698][ T31] usb 1-1: Product: 禨୧坕攡䐚栅⻊ㆉ蠳塿俄줤爳䐻︠脠谝㫜죌쑳ṯ滆鑾঴❂⦦ਜ਼蠿雊엚윤稩賊岲⿃킃བྷ焴刏㮶匦燫២⍤투籏ꆜ秱﹗ꑂ冥霜ڡ㉜ᖈ풭늂뼴娊玑子갡됦뀾﫛ࣸ䈢伓屼⍽뎗ꒅ蚤꧇筊䝻際쾄찬筯ٴ謬唗赤㖫両⯋᫑惮 [ 36.946231][ T31] usb 1-1: Manufacturer: 떋⪷柪⮼乿頥砌㗓ꕋ﫫퀏ࣤ䅐ꄖ밤卵꯳퓮軘嵶凟튀앂ꔧꖳꙘ붝텅⫧妿᜷먋醼㐤胆胱嬿떤牔븯鸐≋ꭹ㱡 [ 36.957386][ T437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33'. [ 36.973773][ T31] usb 1-1: SerialNumber: 쁶᪋䯵롫⯸㋂s࿼ㅛ㖽ィࡡ눲⏬곤ꙡꤨৌ嘃䥷൛籅㞒曐꽿茿裡핏↺먶䍐ᅷ⻄ṃⵅ薢廇ﯹ홧핐/燎흭灰㥞㺌䓳ᢞ蘀 [ 37.050980][ T46] usb 2-1: USB disconnect, device number 3 [ 37.127842][ T460] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 37.143950][ T460] SELinux: security_context_str_to_sid (^) failed with errno=-22 [ 37.210766][ T31] usb 1-1: MIDIStreaming interface descriptor not found [ 37.224892][ T31] usb 1-1: USB disconnect, device number 3 [ 37.240456][ T468] BUG: scheduling while atomic: syz.3.38/468/0x00000002 [ 37.247520][ T468] Modules linked in: [ 37.251525][ T468] CPU: 0 UID: 0 PID: 468 Comm: syz.3.38 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 37.251564][ T468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.251582][ T468] Call Trace: [ 37.251588][ T468] [ 37.251595][ T468] __dump_stack+0x21/0x30 [ 37.251627][ T468] dump_stack_lvl+0x140/0x1c0 [ 37.251651][ T468] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.251675][ T468] ? is_bpf_text_address+0x17b/0x1a0 [ 37.251702][ T468] dump_stack+0x19/0x20 [ 37.251727][ T468] __schedule_bug+0x12b/0x200 [ 37.251745][ T468] ? find_proxy_task+0x2460/0x2460 [ 37.251764][ T468] __schedule+0xb85/0x20b0 [ 37.251786][ T468] ? is_bpf_text_address+0x17b/0x1a0 [ 37.251811][ T468] ? kernel_text_address+0xa9/0xe0 [ 37.251835][ T468] ? __sched_text_start+0x10/0x10 [ 37.251855][ T468] ? unwind_get_return_address+0x51/0x90 [ 37.251891][ T468] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 37.251920][ T468] ? arch_stack_walk+0x10a/0x170 [ 37.251943][ T468] ? __kasan_check_write+0x18/0x20 [ 37.251971][ T468] ? _raw_spin_lock_irq+0x93/0x120 [ 37.252007][ T468] ? rwsem_set_nonspinnable+0x140/0x140 [ 37.252051][ T468] schedule+0xc5/0x240 [ 37.252071][ T468] schedule_preempt_disabled+0x14/0x30 [ 37.252093][ T468] rwsem_down_read_slowpath+0x88c/0x14c0 [ 37.252121][ T468] ? down_write_killable+0x2d0/0x2d0 [ 37.252151][ T468] ? __kasan_check_write+0x18/0x20 [ 37.252168][ T468] ? downgrade_write+0x470/0x470 [ 37.252194][ T468] ? call_rcu_nocb+0x694/0xc60 [ 37.252232][ T468] down_read+0x95/0xe0 [ 37.252256][ T468] ? __cfi_down_read+0x10/0x10 [ 37.252282][ T468] kernfs_find_and_get_ns+0x76/0x130 [ 37.252305][ T468] sysfs_unmerge_group+0x66/0x130 [ 37.252325][ T468] dpm_sysfs_remove+0x64/0xd0 [ 37.252347][ T468] device_del+0x241/0xcf0 [ 37.252371][ T468] ? __cfi_class_find_device+0x10/0x10 [ 37.252388][ T468] ? __cfi_device_del+0x10/0x10 [ 37.252411][ T468] ? __kasan_check_write+0x18/0x20 [ 37.252427][ T468] ? kobject_put+0x1cc/0x2a0 [ 37.252445][ T468] device_destroy+0xb0/0x100 [ 37.252470][ T468] ? __cfi_device_destroy+0x10/0x10 [ 37.252495][ T468] ? __kasan_check_write+0x18/0x20 [ 37.252512][ T468] android_device_destroy+0x118/0x180 [ 37.252536][ T468] gadgets_drop+0x1d/0x30 [ 37.252550][ T468] ? __cfi_gadgets_drop+0x10/0x10 [ 37.252565][ T468] configfs_rmdir+0x8b7/0x9b0 [ 37.252588][ T468] vfs_rmdir+0x3de/0x560 [ 37.252612][ T468] do_rmdir+0x29a/0x590 [ 37.252635][ T468] ? __cfi_do_rmdir+0x10/0x10 [ 37.252659][ T468] ? __kasan_check_write+0x18/0x20 [ 37.252676][ T468] __x64_sys_rmdir+0x4b/0x60 [ 37.252699][ T468] x64_sys_call+0xaf7/0x2ee0 [ 37.252715][ T468] do_syscall_64+0x57/0xf0 [ 37.252736][ T468] ? clear_bhb_loop+0x50/0xa0 [ 37.252759][ T468] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.252781][ T468] RIP: 0033:0x7f2de559e019 [ 37.252795][ T468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.252808][ T468] RSP: 002b:00007f2de63ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 37.252828][ T468] RAX: ffffffffffffffda RBX: 00007f2de5826090 RCX: 00007f2de559e019 [ 37.252840][ T468] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000600 [ 37.252851][ T468] RBP: 00007f2de563500c R08: 0000000000000000 R09: 0000000000000000 [ 37.252862][ T468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.252871][ T468] R13: 00007f2de5826128 R14: 00007f2de5826090 R15: 00007fff208d5238 [ 37.252886][ T468] [ 37.313084][ T468] ------------[ cut here ]------------ [ 37.321468][ T416] udevd[416]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.333214][ T468] WARNING: CPU: 1 PID: 468 at lib/stackdepot.c:635 stack_depot_save_flags+0x266/0x800 [ 37.637339][ T468] Modules linked in: [ 37.641272][ T468] CPU: 1 UID: 0 PID: 468 Comm: syz.3.38 Tainted: G W syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 37.654312][ T468] Tainted: [W]=WARN [ 37.658247][ T468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.668398][ T468] RIP: 0010:stack_depot_save_flags+0x266/0x800 [ 37.674646][ T468] Code: 48 83 3d f4 f2 db 05 00 0f 84 00 04 00 00 48 c7 45 c0 00 00 00 00 48 89 d3 65 8b 05 0c a4 1e 7d 4d 89 d7 a9 00 00 f0 00 74 2d <0f> 0b 48 c7 45 c8 00 00 00 00 9c 8f 45 c8 4c 8b 6d c8 fa 48 c7 c7 [ 37.694337][ T468] RSP: 0018:ffffc9000d3a7980 EFLAGS: 00010206 [ 37.700462][ T468] RAX: 000000007fffffff RBX: ffff8881f5e690a0 RCX: 0000000000c690a0 [ 37.708519][ T468] RDX: ffff8881f5e690a0 RSI: 0000000000000001 RDI: 0000000020423465 [ 37.716887][ T468] RBP: ffffc9000d3a79e0 R08: 00000000ffd63c09 R09: 00000000ba511339 [ 37.725194][ T468] R10: 000000000000000d R11: ffffffff81759ed0 R12: 00000000114c690a [ 37.733215][ T468] R13: 0000000000000000 R14: ffffc9000d3a79f0 R15: 000000000000000d [ 37.741260][ T468] FS: 00007f2de63ee6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 37.750286][ T468] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.757050][ T468] CR2: 000000110c30de9f CR3: 0000000115e66000 CR4: 00000000003526b0 [ 37.765115][ T468] Call Trace: [ 37.768433][ T468] [ 37.771485][ T468] ? do_syscall_64+0x57/0xf0 [ 37.776174][ T468] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.782316][ T468] kasan_save_track+0x4f/0x80 [ 37.787089][ T468] ? kasan_save_track+0x3e/0x80 [ 37.792021][ T468] ? kasan_save_free_info+0x44/0x50 [ 37.797290][ T468] ? __kasan_slab_free+0x5f/0x80 [ 37.802307][ T468] ? kfree+0x158/0x440 [ 37.806442][ T468] ? gadget_info_attr_release+0xcb/0x130 [ 37.812207][ T468] ? config_item_put+0x178/0x240 [ 37.817302][ T468] ? configfs_rmdir+0x8e8/0x9b0 [ 37.822216][ T468] ? vfs_rmdir+0x3de/0x560 [ 37.826699][ T468] ? do_rmdir+0x29a/0x590 [ 37.831082][ T468] ? __x64_sys_rmdir+0x4b/0x60 [ 37.835947][ T468] ? x64_sys_call+0xaf7/0x2ee0 [ 37.840745][ T468] ? do_syscall_64+0x57/0xf0 [ 37.845399][ T468] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.851555][ T468] kasan_save_free_info+0x44/0x50 [ 37.856701][ T468] __kasan_slab_free+0x5f/0x80 [ 37.861530][ T468] kfree+0x158/0x440 [ 37.865490][ T468] ? gadget_info_attr_release+0xcb/0x130 [ 37.871182][ T468] ? __cfi_gadget_info_attr_release+0x10/0x10 [ 37.877742][ T468] gadget_info_attr_release+0xcb/0x130 [ 37.883239][ T468] config_item_put+0x178/0x240 [ 37.888282][ T468] ? __cfi_gadgets_drop+0x10/0x10 [ 37.893361][ T468] configfs_rmdir+0x8e8/0x9b0 [ 37.898127][ T468] vfs_rmdir+0x3de/0x560 [ 37.902434][ T468] do_rmdir+0x29a/0x590 [ 37.906718][ T468] ? __cfi_do_rmdir+0x10/0x10 [ 37.911453][ T468] ? __kasan_check_write+0x18/0x20 [ 37.916642][ T468] __x64_sys_rmdir+0x4b/0x60 [ 37.921283][ T468] x64_sys_call+0xaf7/0x2ee0 [ 37.923851][ T340] tipc: Node number set to 4269801492 [ 37.926027][ T468] do_syscall_64+0x57/0xf0 [ 37.936001][ T468] ? clear_bhb_loop+0x50/0xa0 [ 37.940753][ T468] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.946730][ T468] RIP: 0033:0x7f2de559e019 [ 37.951186][ T468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.971403][ T468] RSP: 002b:00007f2de63ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 37.980394][ T468] RAX: ffffffffffffffda RBX: 00007f2de5826090 RCX: 00007f2de559e019 [ 37.988476][ T468] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000600 [ 37.996530][ T468] RBP: 00007f2de563500c R08: 0000000000000000 R09: 0000000000000000 [ 38.004601][ T468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.012612][ T468] R13: 00007f2de5826128 R14: 00007f2de5826090 R15: 00007fff208d5238 [ 38.020681][ T468] [ 38.023817][ T468] ---[ end trace 0000000000000000 ]--- [ 38.044312][ T468] BUG: scheduling while atomic: syz.3.38/468/0x00000000 [ 38.051403][ T468] Modules linked in: [ 38.061052][ T468] CPU: 0 UID: 0 PID: 468 Comm: syz.3.38 Tainted: G W syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 38.061086][ T468] Tainted: [W]=WARN [ 38.061092][ T468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.061102][ T468] Call Trace: [ 38.061107][ T468] [ 38.061113][ T468] __dump_stack+0x21/0x30 [ 38.061143][ T468] dump_stack_lvl+0x140/0x1c0 [ 38.061166][ T468] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.061190][ T468] ? kernel_text_address+0xa9/0xe0 [ 38.061214][ T468] dump_stack+0x19/0x20 [ 38.061237][ T468] __schedule_bug+0x12b/0x200 [ 38.061255][ T468] ? find_proxy_task+0x2460/0x2460 [ 38.061273][ T468] ? is_bpf_text_address+0x17b/0x1a0 [ 38.061299][ T468] __schedule+0xb85/0x20b0 [ 38.061320][ T468] ? __kernel_text_address+0x11/0x40 [ 38.061343][ T468] ? plist_check_list+0x2a1/0x2c0 [ 38.061363][ T468] ? __sched_text_start+0x10/0x10 [ 38.061383][ T468] ? plist_add+0x4d4/0x570 [ 38.061401][ T468] ? __futex_queue+0x19f/0x350 [ 38.061424][ T468] ? __cfi___futex_queue+0x10/0x10 [ 38.061446][ T468] schedule+0xc5/0x240 [ 38.061465][ T468] futex_wait_queue+0xfc/0x240 [ 38.061483][ T468] __futex_wait+0x15b/0x3d0 [ 38.061499][ T468] ? __cfi___futex_wait+0x10/0x10 [ 38.061514][ T468] ? __cfi_futex_wake_mark+0x10/0x10 [ 38.061540][ T468] ? __kasan_check_read+0x15/0x20 [ 38.061583][ T468] ? futex_wake+0x627/0x950 [ 38.061604][ T468] ? futex_setup_timer+0xb4/0xd0 [ 38.061633][ T468] futex_wait+0x128/0x7c0 [ 38.061658][ T468] ? __cfi_futex_wait+0x10/0x10 [ 38.061676][ T468] do_futex+0x32a/0x510 [ 38.061698][ T468] ? __cfi_do_futex+0x10/0x10 [ 38.061720][ T468] ? __kasan_slab_free+0x6a/0x80 [ 38.061740][ T468] ? kmem_cache_free+0x1bd/0x4f0 [ 38.061758][ T468] __se_sys_futex+0x13c/0x320 [ 38.061780][ T468] ? putname+0x113/0x150 [ 38.061799][ T468] ? __x64_sys_futex+0x110/0x110 [ 38.061823][ T468] __x64_sys_futex+0xe9/0x110 [ 38.061845][ T468] x64_sys_call+0x227f/0x2ee0 [ 38.061861][ T468] do_syscall_64+0x57/0xf0 [ 38.061879][ T468] ? clear_bhb_loop+0x50/0xa0 [ 38.061902][ T468] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.061923][ T468] RIP: 0033:0x7f2de559e019 [ 38.061938][ T468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.061951][ T468] RSP: 002b:00007f2de63ee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 38.061968][ T468] RAX: ffffffffffffffda RBX: 00007f2de5826098 RCX: 00007f2de559e019 [ 38.061981][ T468] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2de5826098 [ 38.061991][ T468] RBP: 00007f2de5826090 R08: 0000000000000000 R09: 0000000000000000 [ 38.062002][ T468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.062011][ T468] R13: 00007f2de5826128 R14: 00007fff208d5150 R15: 00007fff208d5238 [ 38.062025][ T468]