last executing test programs: 11m45.843489869s ago: executing program 4 (id=3204): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) 11m45.579107831s ago: executing program 4 (id=3207): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) accept$inet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x2000) signalfd4(r1, &(0x7f0000000380)={[0x40]}, 0x8, 0x80c00) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x2, 0x197, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000340)={0x78d, 0x5}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000200000000000000e26310840200640598a6086bce719acc0093a2e6de394c9ea1c1", @ANYRES32=0x1, @ANYBLOB="1e0700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000500"/28], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000e56000/0x4000)=nil, 0x4000, 0x11) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x4c, 0x3, 0x0, 0x1, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYRESHEX], 0x18}}, 0x200048c0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xe000, &(0x7f0000000200)=[{&(0x7f0000000240)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a0006000140020203600e41b0000900ac00060311000000a4000500000080200004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d3a6823a45f28fcb1d", 0xd8}], 0x1}, 0x40) sendmmsg(r4, &(0x7f0000000000), 0x4000078, 0x40040) socketpair(0x21, 0x80000, 0x3, &(0x7f0000000000)) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x5, @pix_mp={0x8, 0x3fffffc, 0x55595659, 0x0, 0x3, [{0x1, 0x7}, {0x6}, {0x2, 0x6}, {0x101, 0x80007fff}, {0xffffff80, 0x9}, {0x2, 0x100003}, {0x6, 0xfff}, {0xfff, 0x3ff}], 0xce, 0x1, 0x6, 0x3}}) 11m45.275345697s ago: executing program 4 (id=3208): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x80010b, 0xc00c0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/freeze_filesystems', 0x82801, 0x8e) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) close(0x3) close(r5) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) ioctl$USBDEVFS_GET_SPEED(r3, 0x551f) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) 11m45.123362798s ago: executing program 4 (id=3210): socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x264}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x3c, 0x2c, 0xca7, 0x70bd25, 0x400000, {0x0, 0x0, 0x0, r6, {0x7, 0x4}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x5}}]}}]}, 0x3c}}, 0x20040054) close(r1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) getrlimit(0x4, &(0x7f0000000100)) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) 11m43.996431782s ago: executing program 4 (id=3213): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x942, 0xfb, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xf5, 0x7d, 0xbb}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000480)={0x0, 0xe, 0x46, {0x67, 0xd, "883433ce478fa22a61a5039a47e7a9b81178737c17aa92526221c10acc05000000000000008ce628f8a2d76bf4ba0000000000054d82e05154626da1551f60d346ae86c5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8864000000000000) 11m40.844892153s ago: executing program 4 (id=3227): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212"], 0x0) syz_open_dev$I2C(0x0, 0x1, 0x2003) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0x8, 0xffffffff}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r3, 0x60) socket$inet_mptcp(0x2, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000c00)='./file0/usb_gadget/g1/UDC\x00', 0x2, 0x0) shutdown(r3, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) syz_open_procfs(r4, &(0x7f0000000140)='uid_map\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003c80)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r5}, 0x38) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20008855, 0x0, 0x0) r7 = dup(r6) sendto$packet(r7, &(0x7f0000000400), 0xfffffd23, 0x24005010, 0x0, 0x0) connect$unix(r7, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) fstat(r2, &(0x7f0000000000)) 11m25.285993231s ago: executing program 32 (id=3227): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212"], 0x0) syz_open_dev$I2C(0x0, 0x1, 0x2003) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0x8, 0xffffffff}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r3, 0x60) socket$inet_mptcp(0x2, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000c00)='./file0/usb_gadget/g1/UDC\x00', 0x2, 0x0) shutdown(r3, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) syz_open_procfs(r4, &(0x7f0000000140)='uid_map\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003c80)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r5}, 0x38) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20008855, 0x0, 0x0) r7 = dup(r6) sendto$packet(r7, &(0x7f0000000400), 0xfffffd23, 0x24005010, 0x0, 0x0) connect$unix(r7, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) fstat(r2, &(0x7f0000000000)) 9m55.336776819s ago: executing program 5 (id=3461): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x64020000, 0x4}}, 0x2e) 9m52.00480633s ago: executing program 5 (id=3468): r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2f0000001c"], 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40008c0}, 0x9080) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000340)={0x6, @capture={0x1000, 0x0, {0x70b6, 0xfffff9f2}, 0xea, 0x4}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) setresuid(0xee00, 0xee00, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00'}) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) clock_nanosleep(0x1, 0x1, &(0x7f00000001c0)={0x77359400}, 0xfffffffffffffffe) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) setsockopt$packet_buf(r4, 0x107, 0x5, &(0x7f0000000000)='Qe', 0x2) openat$cgroup_ro(r4, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000002c0)) 9m50.122289731s ago: executing program 5 (id=3471): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000000)="4c4c5d094a4c4c4c4c4c4c4c4c4c4c4c4c4cecd5d1c949264c4c4c4c4c4c4c", 0x1f, 0x8000000000000002}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x0, 0x1b3d}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x2e, 0x7, r2, r1, 0x1c, 0x6, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, r2, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r1, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) close(r3) 9m49.740327314s ago: executing program 5 (id=3472): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 9m46.647944832s ago: executing program 5 (id=3477): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x22000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) mmap(&(0x7f000002b000/0x3000)=nil, 0x3000, 0x8, 0x20010, r0, 0x340ec000) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000540)=ANY=[@ANYBLOB="60000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f00000000000000000000000000000900020073797a31000000000800410073697700140033006e657464657673696d30000000000000f11dddfe8ec1f0e45ee3638d86ca6246791634dd2d11"], 0x60}, 0x1, 0x0, 0x0, 0x20000854}, 0x4000) sched_setattr(r1, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0xfb69, 0x0, 0x7, 0xd8, 0x5, 0x101}, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000500)=ANY=[], 0x31c}, 0x1, 0x0, 0x0, 0x54}, 0x4044005) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000340)={{0x2, 0x4e24, @rand_addr=0x64010100}, {0x306}, 0x2, {0x2, 0x4e23, @multicast1}, 'gre0\x00'}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.threads\x00', 0x2, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x2, &(0x7f0000000280)=[{0x29, '\x00', @buffer={"0000000000003acd90d11555827d3ac01c0075e71885aa05a1f7a01e8300", 0x20}, 0x1c}]}) socket$inet_mptcp(0x2, 0x1, 0x106) 9m44.838624626s ago: executing program 5 (id=3479): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280)="b7f2", 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x14, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00') r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000100)={0x7}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_init() close(0x3) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00)) sync() socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac00000000000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x1) socket$kcm(0x10, 0x3, 0x10) 9m29.779651936s ago: executing program 33 (id=3479): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280)="b7f2", 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x14, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00') r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000100)={0x7}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_init() close(0x3) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00)) sync() socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac00000000000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x1) socket$kcm(0x10, 0x3, 0x10) 4m44.807671418s ago: executing program 1 (id=4544): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x8000, 0x2) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x28, 0x3, 0x5c}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0xd, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008002000fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) 4m44.571354868s ago: executing program 1 (id=4546): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000800), 0xa00000, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="41e151d5ac071fb375243a350f13"]) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x3002a8d, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x84) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004300)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x26, 0x6caff54c, 0xfffffffff323ca46, 0x0, 0xfffc, 0x1, 0x1ff, 0x0, 0x0, 0x1, 0x10000}}, 0x50) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="2900000000000000000000000001000000000000000400000100000000000000"], 0x29) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0xa) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) io_setup(0x482, &(0x7f0000000600)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x1e}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getpgid(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$kcm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000440)="3c85acbacd8ae66f184d558da4d6694beec20312d7ba348da06f4de689eefe477371697420c52b10420ce10a8ec310f64f7757c0179f836f8199aeee78106feee835430dfb884f88cbb05d", 0x4b}, {&(0x7f0000000640)="0cfb53c9a51774780524fbcf4720ddbb624496f0e23060529b338da2f40fcb7ed1ce9ce78bb71358d5552eb63ce5ea9afe4c9796c2a7972276b0a81bdd2d842865fa7c28f9c65fd1af5cc1f99f7abb3957702202b9fc95416178ed25671cb1580308553f4e137b7b718b4482ac659e41873b45", 0x73}], 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x100}, 0x4000020) 4m44.461587903s ago: executing program 1 (id=4547): socket$kcm(0x11, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x6}, 0x10) listen(r4, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) accept4$x25(r4, 0x0, 0x0, 0x80800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_int(r8, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r8, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x3b9, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r7], 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x8c, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x60, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_SEL={0x54, 0x5, {0x4, 0x8, 0x4, 0x4, 0x2, 0x4, 0x6, 0x769, [{0x40, 0x2, 0x80000000, 0x401}, {0xfffffff9, 0x9, 0x2, 0x8}, {0x7, 0x7, 0x101, 0x2}, {0x1, 0x6, 0xfffffffc, 0xffff}]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) 4m40.896986639s ago: executing program 1 (id=4558): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x8a, 0x7fffffffffffe, 0x81, 0x105, 0xfffffffffbfffffd, 0x4002004c4, 0x1003, 0x3, 0x10001, 0x1000000000000010, 0x2, 0x4, 0x0, 0x2, 0x4000000000000000], 0x0, 0x2200}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x1ffffff, 0x4, 0xc4, 0x53, 0x3e, 0x2, 0x80, 0x41, 0x6b, 0x45, 0x6, 0x0, 0x800000001}, {0xb, 0xa7f2, 0x8, 0x8, 0x8, 0xfd, 0x6, 0x3, 0xe, 0x7, 0x7, 0x6, 0x40000000000001}, {0x0, 0x7, 0xd, 0x10, 0x21, 0x10, 0x7, 0xb3, 0x4, 0x15, 0x0, 0x2, 0xfffffffffffffb97}], 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000100)) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m40.869144052s ago: executing program 1 (id=4559): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r3 = socket$inet6(0xa, 0x80802, 0x0) io_uring_setup(0x653, &(0x7f0000000000)={0x0, 0x804, 0x1c2, 0x3, 0x34e}) fcntl$setstatus(r3, 0x4, 0x2000) sendmmsg$inet6(r3, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) 4m40.595396808s ago: executing program 1 (id=4562): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x2, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4044) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x230a00) ioctl$NBD_DISCONNECT(r3, 0xab08) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r6, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x4840) r7 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UBLK_U_CMD_START_USER_RECOVERY(0xffffffffffffffff, 0xc0207510, &(0x7f0000000300)={0x0}) syz_clone3(&(0x7f0000000540)={0x0, &(0x7f0000000380), &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, {0x32}, &(0x7f0000000440)=""/53, 0x35, &(0x7f0000000480)=""/97, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3}, 0x58) ioctl$UBLK_U_CMD_START_DEV(r7, 0xc0207506, &(0x7f00000005c0)={r8, 0xffff, 0x0, 0x0, r9}) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000640), 0x22080) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r11, 0x40106e80, &(0x7f0000000680)={0x80000, 0x1}) r12 = syz_io_uring_setup(0x47d9, &(0x7f00000006c0)={0x0, 0x584f, 0x80000, 0x3, 0x20b}, &(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f00000007c0)) r14 = mmap$IORING_OFF_CQ_RING(0x0, 0x4, 0x1000000, 0x4e36375d8b5b1519, 0xffffffffffffffff, 0x8000000) r15 = memfd_secret(0x80000) syz_io_uring_submit$UBLK(r13, r14, 0x0, &(0x7f0000001800)=@ublk_io_commit_and_fetch_sqe={0x2e, 0x6a, 0x0, r15, 0xc0107521, 0x0, 0x0, 0x0, 0x0, {0x7fff}, 0x0, 0x0, '\x00', {0x2, 0x2b8, 0x5, &(0x7f0000000800)=@buf_512="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"}}) sendmsg$BATADV_CMD_SET_VLAN(r15, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x54, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r15, 0x84, 0x13, &(0x7f00000019c0)={0x0, 0x3ff}, &(0x7f0000001a00)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r15, 0x84, 0x6f, &(0x7f0000001b40)={r16, 0xd0, &(0x7f0000001a40)=[@in6={0xa, 0x4e24, 0x0, @private1, 0xc}, @in6={0xa, 0x4e23, 0x1, @local}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e24, 0x5bd, @remote, 0xd50e}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x606a}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e22, @multicast1}]}, &(0x7f0000001b80)=0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001bc0)={'team_slave_0\x00'}) ioctl$USBDEVFS_RELEASE_PORT(r15, 0x80045519, &(0x7f0000001c00)=0x3) sched_setscheduler(r10, 0x1, &(0x7f0000001c40)=0x2) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000001e00)={{r12, &(0x7f0000001c80)='-#&,.{)^!\x00', 0x40880, &(0x7f0000001cc0)={@_ha_fsid={[0x0, 0x401]}, {0x7, 0xd735, 0x7f, 0xe}}, 0x4, &(0x7f0000001d00), &(0x7f0000001d40)=0x401}, {[0xa0f1, 0x9, 0x7f, 0x5]}, 0x0, 0x67, &(0x7f0000001d80)=""/103}) ioctl$DRM_IOCTL_GEM_FLINK(r17, 0xc008640a, &(0x7f0000001e80)) write$FUSE_NOTIFY_RESEND(r17, &(0x7f0000001ec0)={0x14}, 0x14) 4m40.485125574s ago: executing program 34 (id=4562): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x2, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4044) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x230a00) ioctl$NBD_DISCONNECT(r3, 0xab08) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r6, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x4840) r7 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UBLK_U_CMD_START_USER_RECOVERY(0xffffffffffffffff, 0xc0207510, &(0x7f0000000300)={0x0}) syz_clone3(&(0x7f0000000540)={0x0, &(0x7f0000000380), &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, {0x32}, &(0x7f0000000440)=""/53, 0x35, &(0x7f0000000480)=""/97, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3}, 0x58) ioctl$UBLK_U_CMD_START_DEV(r7, 0xc0207506, &(0x7f00000005c0)={r8, 0xffff, 0x0, 0x0, r9}) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000640), 0x22080) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r11, 0x40106e80, &(0x7f0000000680)={0x80000, 0x1}) r12 = syz_io_uring_setup(0x47d9, &(0x7f00000006c0)={0x0, 0x584f, 0x80000, 0x3, 0x20b}, &(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f00000007c0)) r14 = mmap$IORING_OFF_CQ_RING(0x0, 0x4, 0x1000000, 0x4e36375d8b5b1519, 0xffffffffffffffff, 0x8000000) r15 = memfd_secret(0x80000) syz_io_uring_submit$UBLK(r13, r14, 0x0, &(0x7f0000001800)=@ublk_io_commit_and_fetch_sqe={0x2e, 0x6a, 0x0, r15, 0xc0107521, 0x0, 0x0, 0x0, 0x0, {0x7fff}, 0x0, 0x0, '\x00', {0x2, 0x2b8, 0x5, &(0x7f0000000800)=@buf_512="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"}}) sendmsg$BATADV_CMD_SET_VLAN(r15, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x54, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r15, 0x84, 0x13, &(0x7f00000019c0)={0x0, 0x3ff}, &(0x7f0000001a00)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r15, 0x84, 0x6f, &(0x7f0000001b40)={r16, 0xd0, &(0x7f0000001a40)=[@in6={0xa, 0x4e24, 0x0, @private1, 0xc}, @in6={0xa, 0x4e23, 0x1, @local}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e24, 0x5bd, @remote, 0xd50e}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x606a}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e22, @multicast1}]}, &(0x7f0000001b80)=0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001bc0)={'team_slave_0\x00'}) ioctl$USBDEVFS_RELEASE_PORT(r15, 0x80045519, &(0x7f0000001c00)=0x3) sched_setscheduler(r10, 0x1, &(0x7f0000001c40)=0x2) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000001e00)={{r12, &(0x7f0000001c80)='-#&,.{)^!\x00', 0x40880, &(0x7f0000001cc0)={@_ha_fsid={[0x0, 0x401]}, {0x7, 0xd735, 0x7f, 0xe}}, 0x4, &(0x7f0000001d00), &(0x7f0000001d40)=0x401}, {[0xa0f1, 0x9, 0x7f, 0x5]}, 0x0, 0x67, &(0x7f0000001d80)=""/103}) ioctl$DRM_IOCTL_GEM_FLINK(r17, 0xc008640a, &(0x7f0000001e80)) write$FUSE_NOTIFY_RESEND(r17, &(0x7f0000001ec0)={0x14}, 0x14) 47.207574022s ago: executing program 2 (id=5420): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 47.187892482s ago: executing program 2 (id=5421): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r0, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0xffff9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x28) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0xe309b000) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mount(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180)='openpromfs\x00', 0xb2, 0x0) lseek(0xffffffffffffffff, 0x289e0cb5, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000000240), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mq_notify(r0, &(0x7f0000000100)={0x0, 0x16, 0x2, @tid=r1}) socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r4, 0x5) accept(r4, &(0x7f0000000080)=@can, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r5, &(0x7f0000000000)="16", 0xfdef, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffff1269, 0x4}, 0xfffffffffffffecf) 43.673185937s ago: executing program 2 (id=5425): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0xf5, 0x0, 0x1}, 0x20000080) 43.566082989s ago: executing program 2 (id=5429): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) socket(0x10, 0x80002, 0x0) socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x44010) prlimit64(0x0, 0x6, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = fsopen(&(0x7f0000000240)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x4) openat$cgroup_ro(r5, &(0x7f0000001100)='cpu.stat\x00', 0x5000000, 0x0) pread64(r2, &(0x7f0000000440)=""/220, 0xdc, 0x8000) connect$inet6(r2, 0x0, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x2c}, 0x44004) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r7 = dup2(r6, r6) ioctl$BLKTRACETEARDOWN(r7, 0x127b, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000004000f0a118000a000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) accept4(r0, 0x0, 0x0, 0x0) 41.828109104s ago: executing program 2 (id=5435): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x2, 0x0, &(0x7f0000000480)) timer_create(0x2, 0x0, &(0x7f0000000480)) r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000180)='net/if_inet6\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/104, 0x68}], 0x1, 0x44, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f00000000c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000000)={0x1, 0x2}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r6, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0xffffffffffffffff}) close_range(r3, 0xffffffffffffffff, 0x0) 41.536724853s ago: executing program 2 (id=5439): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000100)={0x7}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = inotify_init() close(r1) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00)) sync() socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x230}, 0x1) socket$kcm(0x10, 0x1, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x22}, 0x40004) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf25010000000000000009410000004c0018000001ff7564700000000000000000000000000000000000000000000000000000000000000000000000000000180000af36776cb6e00000000040b9aabe00"/104], 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x14) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000480)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x4, 0xcc7, 0xfff, 0x0, 0x5, 0x3fe, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xa1cc, 0x12d, 0x4, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0xa, 0x4, 0xffffffff, 0xdffffffa]}) ioctl$int_in(r2, 0x5421, &(0x7f0000000240)=0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) 25.54511145s ago: executing program 35 (id=5439): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000100)={0x7}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = inotify_init() close(r1) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00)) sync() socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x230}, 0x1) socket$kcm(0x10, 0x1, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x22}, 0x40004) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf25010000000000000009410000004c0018000001ff7564700000000000000000000000000000000000000000000000000000000000000000000000000000180000af36776cb6e00000000040b9aabe00"/104], 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x14) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000480)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x4, 0xcc7, 0xfff, 0x0, 0x5, 0x3fe, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xa1cc, 0x12d, 0x4, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0xa, 0x4, 0xffffffff, 0xdffffffa]}) ioctl$int_in(r2, 0x5421, &(0x7f0000000240)=0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) 15.776443259s ago: executing program 3 (id=5524): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) prlimit64(0x0, 0xe, &(0x7f0000001080)={0x8, 0x100000000}, 0x0) setrlimit(0x4, &(0x7f0000000000)={0xd8, 0x2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000002c0)="b8001800000f23d00f21f8353000000e0f23f83e0fae8d001000000fd8e866baf80cb84a8cce8cef66bafc0cec26640f23dbc7442400b30d45d5c744240204000000c744240600000000c4c11167600066baf80cb8dc759680ef66bafc0c66b8134266ef66ba4300ec0f0f49e4b70fbaa70a0000000d", 0x76}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4) signalfd(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = add_key(0x0, &(0x7f0000000180), &(0x7f0000000080)="b48fbdeac4c39e5d4708562f752428dc623ffcdf47255191096330823ad848fb2a0d4e0594ca8599d066ef65fac23c91358e957780e81dea1a5e1e6e113026c096b18f9a38e7c94acd", 0x49, 0xfffffffffffffffe) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000041000100fcff07000400000001000000040048800c00018008000f00e000000108"], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$dsp(r0, 0x0, 0xfffffe59) 12.326828757s ago: executing program 3 (id=5529): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) socket$rxrpc(0x21, 0x2, 0xa) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) socket$igmp(0x2, 0x3, 0x2) fcntl$dupfd(r1, 0x406, r0) socket$inet6_sctp(0xa, 0x5, 0x84) pipe2(&(0x7f0000000040), 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000002000010025bd700100000000020000002000098008001300090000000800ea00", @ANYRES32=r2, @ANYBLOB='\f\x00', @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x40940}, 0x40044) 11.354320159s ago: executing program 6 (id=5536): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001600)='streaming/header/h\x00', &(0x7f0000001700)='streaming/class/fs/h\x00') symlink(&(0x7f0000001800)='streaming/header/h\x00', &(0x7f0000001900)='streaming/class/hs/h\x00') fchdir(r0) symlink(&(0x7f0000001c00)='functions/uvc.usb0\x00', &(0x7f0000001d00)='configs/c.1/uvc.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x100) write(r1, &(0x7f0000001f00)='usbip-vudc.0', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2004402, &(0x7f00000000c0)) syz_usb_connect(0x0, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) chdir(&(0x7f0000000000)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 10.965494426s ago: executing program 3 (id=5537): ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000100)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private2}}, &(0x7f0000000440)=0xe8) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000202, r0, &(0x7f0000000480)='./file0\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4048043) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x70bd28, 0x25dfdbfd, {0x2, 0x0, 0x4, 0x0, r6}, [@IFA_FLAGS={0x8, 0x8, 0x718}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) write$selinux_load(r7, &(0x7f0000000000)=ANY=[], 0xfea8) rmdir(&(0x7f0000000180)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00') 8.21221228s ago: executing program 6 (id=5546): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) socket(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000000140)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000340)="b92014c222ee", 0x6}], 0x1}}], 0x1, 0x20000840) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000180)={0x2, 0x3, 0x40}) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x898, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x7, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x86c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x7f}, @TCA_TBF_RTAB={0x404, 0x2, [0x4, 0xce2b, 0x6, 0x77, 0x7, 0x81, 0xe, 0x800, 0x1, 0x3, 0xfffffffc, 0x0, 0xd, 0x1, 0x6, 0x2, 0x81, 0x4c, 0x9, 0x5, 0x425, 0x2, 0x9c8, 0x8, 0xfffffeff, 0x6c, 0x1, 0xffff, 0x4, 0x4, 0xf, 0x0, 0xff, 0x3, 0x8, 0x6, 0x7, 0x6, 0x800, 0x7, 0x7, 0x6, 0x6, 0x8001, 0x7, 0xfffffffa, 0xfff, 0x1ff80, 0x5, 0x3b, 0x9, 0x80, 0x8, 0x2b9, 0x9, 0x0, 0x3, 0x6, 0x2, 0x8, 0x6, 0x7, 0x1, 0x8, 0x8, 0x7, 0x2, 0x5, 0x80, 0xb, 0x0, 0x80000001, 0xcaa3, 0xb8, 0x8, 0x4, 0x2, 0x1566, 0xf41, 0x8, 0x3, 0x2, 0x9, 0x401, 0x3, 0x6, 0x2, 0x8, 0xffffffff, 0x2, 0x3, 0x84, 0x1, 0x760, 0xa, 0x5, 0x0, 0x100, 0x81, 0x3, 0x800000, 0x9e, 0x2, 0x1, 0x400, 0xc1fa, 0x6, 0xfd75, 0x2, 0xc95, 0xfffffff4, 0xb, 0x80, 0x6b23, 0xa, 0x30, 0xf7, 0x5, 0x2, 0x9, 0x5, 0x1, 0x3, 0xfffeffff, 0xfffffffb, 0xffffffff, 0x0, 0xfffff35b, 0x0, 0x7, 0x5, 0x8, 0xbc5, 0x5, 0x401, 0x6b6, 0x0, 0x200, 0x7, 0x2, 0x6, 0x0, 0x6, 0x7f, 0xc1e, 0x2, 0x5, 0x0, 0x9, 0x4, 0x3, 0x0, 0x2, 0x0, 0x3, 0x5, 0x8001, 0x8, 0x8001, 0x7, 0x7, 0xfffffffd, 0x4, 0x401, 0x6, 0x9, 0x1a, 0x91, 0x1, 0x1, 0x80000000, 0x3, 0x2, 0x4, 0x5, 0x7, 0x2, 0xfffffffb, 0x5a744901, 0x80, 0x1, 0x0, 0x400, 0x1, 0x5, 0x80000, 0x6, 0xb, 0x9, 0x0, 0x6, 0xa, 0x9, 0x80000000, 0xffff8001, 0x1020, 0x4, 0x7, 0x6, 0x0, 0x6, 0x4, 0x1, 0xb7c0, 0x34, 0x80000001, 0x1, 0x1000, 0x3, 0x0, 0x9, 0x1, 0x8, 0x8, 0x1, 0xfff, 0x0, 0x6, 0x7, 0x100, 0x4, 0xd, 0x7, 0x2, 0x1, 0xd, 0x6, 0x8, 0x8, 0x7, 0x101, 0x80, 0x8, 0x26, 0x3, 0xb, 0x1, 0x8, 0x400, 0x7, 0x5, 0x4, 0x3, 0x0, 0x1, 0x8, 0x8, 0x7, 0x7f0, 0x2, 0x2, 0x1, 0x2cd, 0x4, 0x3, 0x6c]}, @TCA_TBF_PBURST={0x8, 0x7, 0x2115}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5c, 0x2, 0x40, 0x0, 0x4, 0x10001}, {0xa5, 0x2, 0x0, 0x6, 0x8001, 0x2}, 0x2, 0x0, 0x10be}}, @TCA_TBF_RTAB={0x404, 0x2, [0xffffffff, 0xa, 0xf, 0x8, 0xc3, 0x8, 0xfffff86c, 0x4, 0x9, 0x8, 0x1, 0x401, 0x6, 0x7f, 0xe241, 0x0, 0xa8e0, 0xb3, 0x4b, 0x1fffc, 0x0, 0x0, 0x6, 0x7c224050, 0x2, 0xe27, 0x5, 0x2, 0x7e, 0x7ff, 0x8ac4, 0x9, 0x6, 0x5, 0xfffffa3b, 0x8, 0x0, 0xffffffff, 0x6, 0x9, 0x8, 0x0, 0xc47d3d9f, 0xffffff2c, 0xfffffbff, 0xffffffff, 0x200, 0x7, 0x7, 0x40000000, 0x2, 0x9, 0x2, 0x93ce, 0x7f, 0x9, 0xfffffffc, 0xfffffffe, 0x1, 0x7, 0x273a, 0x1, 0xd0, 0x80000000, 0x915, 0x3090, 0x4, 0x2a5, 0xb, 0x1, 0x6, 0x8001, 0x2, 0xe7, 0xdb3, 0x6, 0x6, 0x5dba, 0x7, 0x10001, 0xe31f, 0x4, 0x8, 0x1, 0xec, 0x4, 0xfffffffb, 0x10000, 0x7, 0xa, 0xfffff47c, 0x4, 0x2, 0x2, 0x3, 0xfffffffa, 0xadcb, 0x1, 0x3ff, 0x88, 0x5, 0x3, 0x1, 0x1, 0x7, 0x0, 0x4bc6b517, 0x9, 0x3, 0x48000, 0x3, 0x5, 0x5, 0x4f76, 0xd6, 0x8, 0x4, 0x9, 0x9, 0x19, 0x1000, 0x1, 0x6, 0x7, 0x7fff, 0x100, 0x1, 0x2, 0x800, 0xfffffff8, 0x8, 0x1, 0x8, 0x8, 0xfffffffa, 0x2, 0x6, 0x6, 0x4, 0xff8a, 0x3, 0x7, 0x538c897, 0xbc, 0xff, 0x7, 0x755, 0x0, 0x1000, 0x0, 0x10, 0x7, 0x4, 0x0, 0xbc5, 0x4c1, 0x7, 0xc8, 0x3ff, 0x3, 0x2020000, 0x0, 0x9, 0x0, 0x6177, 0x7, 0x2, 0x8f17, 0x4c6, 0x8, 0x5, 0x7, 0x2, 0x1, 0xe2efd06, 0x4, 0x2ea5, 0xffffffff, 0x400, 0x1, 0x2, 0x7da, 0x4, 0xedf8, 0xf9, 0x200, 0x5, 0x6, 0x7, 0x142, 0x4, 0x0, 0x1, 0x6, 0xe, 0x4, 0x8, 0x2, 0x6, 0xfffffffe, 0x2, 0x7, 0x5, 0x9, 0x0, 0x3, 0x1, 0x1ff, 0x9, 0xffffffff, 0xedfa, 0x401, 0x3, 0x1, 0x200, 0xffffffc0, 0x3, 0x7fff, 0x9, 0x2, 0x6, 0x0, 0x9, 0x7d, 0xe0, 0x6, 0x5, 0x3, 0x1, 0x7fffffff, 0x13, 0xffff1646, 0x4, 0xb, 0xa33, 0x0, 0x2, 0x8001, 0x400, 0x26c, 0xffffbda1, 0x200, 0x6, 0x7fff, 0x8, 0x501b, 0x10, 0x116b0c8b, 0x3, 0x4, 0x66, 0xfffffff8, 0x8, 0x8, 0x0, 0x9]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x3, 0x81, 0x3, 0xffffffff}, {0x4, 0x2, 0x2, 0x283f, 0x100}, 0xcd4b, 0x1f, 0xe74}}]}}]}, 0x898}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@getchain={0x34, 0x66, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xffe0, 0xffe0}, {0xffff, 0xfff3}, {0xfff1, 0x2}}, [{0x8, 0xb, 0xfffffff7}, {0x8, 0xb, 0x65}]}, 0x34}, 0x1, 0x0, 0x0, 0x80c0}, 0xd0) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) pipe(0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) socket$inet6(0xa, 0x3, 0x6) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) 7.459686235s ago: executing program 8 (id=5550): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, 0x0, 0xfffffedb) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x400001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffb) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$tipc(0x1e, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x400c050) select(0x46, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x2}, &(0x7f0000000440)={0x0, 0x2710}) connect$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x7, 0x0, 0x1, 0x3, 0x6, @multicast}, 0x14) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f0000000000)={0x4, 0x3, 0xcfcd4592ae3d59aa, {0x10001, 0x3, 0x6, 0x9}}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000400)=@ethtool_rxfh={0x51, 0x7}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() 7.119078629s ago: executing program 6 (id=5552): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESHEX=r3], 0x15) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x49bb, &(0x7f0000000400)={0x0, 0x5de4, 0x10000, 0x4, 0x246}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r8 = epoll_create1(0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x40, 0x0, r8, 0xffffffffffffffff, &(0x7f0000000040)={0x2000}, 0x1, 0x0, 0x1}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x50}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x41, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r13 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r13, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r13, 0xda90) 6.943170332s ago: executing program 8 (id=5554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000200)=""/73}, 0x20) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000003b80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003c00)={0x60, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x3}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8000, 0x2, 0x5, 0x0, {0x100000004, 0xc, 0x0, 0x39e, 0x0, 0x1, 0x1}, 0x1, 0x5, 0x8}}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_PBSS={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0x0) pipe2(&(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = open(&(0x7f0000001780)='./file0\x00', 0x200400, 0x100) r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r6 = getpgrp(0x0) lstat(&(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getgid() getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001880)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8) r11 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r12) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000019c0)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001a00), &(0x7f0000001a40)=0xc) r14 = getuid() setreuid(r14, r14) read$FUSE(0xffffffffffffffff, &(0x7f0000001a80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$unix(r1, &(0x7f0000003bc0)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000280)="c748659384b46ef8a845995d0de8022ce38c2aeee465cf2f6a23f7b5691d3ff65900ef597792fff4ec93e76a1e18e7ffc42ecba88f66204ecb99fb3b20c478f27c0e14854be817702da66d252ffa65a551c1f2b4913d27dff86506d5805497cf057ed7e7dd404ed8f7c78b7814d45aa441ea0fcb0728247a5881bc654830d8ffa2455d7f2db646e1cdd3287e05f1106a73e1e9a30bf452a29623090ffb97805ae68e047ddf8a7867ddfb5739de2013513d5fc7dad68a35b697ed9ddcd9070fcbc7c22453aebadf61658b559483c432e59994c8cadc2b66bf59b85cf60553a3733bd08bb0c6f20dcffeb62a1765206ce7", 0xf0}, {&(0x7f0000000380)="88e8d5fff4b5a8be53553def4bf673a278db2727073d4f49af1e0da2a72c81f873a6434a7f8916bd7d1269a03c834f0ce41f31aced29b316363a8c23f78e0de429b1a7226a6574f41102d36523adb4895b", 0x51}, {&(0x7f0000000400)="b6bec61480df06227d09d391ea46d76be90de6312a95556670bb8976d40ee961e45a94a207b2abf19d762c8b8f4901f3b36955f778bdba78e00cc58bd2dc65c0cda715e704960c42aada4c262add7b9deb3c1dff007452a49f59ad3298edd7ca625ea6da05804cae0da07f5ce2800c95c21d5705e6f89f8ccd23e1a919892cfa3e68b2daf11e26562b2b56ac5a14d0819e8ddcdd387bda5449", 0x99}, {&(0x7f00000004c0)="f3e445e33138", 0x6}, {&(0x7f0000000500)="57570d5c13c7be87c89fe69376e5b524cdb9f1e26ff5807df4c5ff0711191a9e607082b7cebf329c5c24df0d1bc19123c0a0e0ae6d0d0a3a5bd46b65a86d5f0a7bb0bcc7848a0ac7f78bbccfc47c0b34b3d2abf2aa16de347ee26d9044a6732a4b63cbb858ad381ca283bfc6e6d114727804f6eac66e66169fb4d0132fa6433e12988149fce5775b39dd18cb08524a0c25f2a14b9d6686032248f6e04651c01591a4b93c0ed76d1a39fdb48b67a25107c80efebfb9eed17112f5ecca92a9422efadaf8f5614b62c4d515b7c3c7647b5a5a171bb48c77663a22cfe48d8aa9d01aba5344ceb732acb041ada653bf25182322f626f87189", 0xf6}, {&(0x7f0000000600)="5ab14f71b55ae3298b45c82b92a111e736", 0x11}, {&(0x7f0000000640)="4237848dd8b2f4eb18459e124007c48ece1f9345e00a2e4137d057072a7c96f5aef6f3a6703c4979f212e0573c854599715514e8f386794236d8e666c294c51d0464645d1f24f8970f3bd1ba045abb86ee937054", 0x54}, {&(0x7f00000006c0)="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", 0x1000}], 0x8, &(0x7f0000004000)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES64, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r12, @ANYBLOB="001700001c000000000000000100000002000000c46bcb93d6e0d798f885f0a12712b15d2e687abab2309b77f01ea863dec119fe76708788b0d4e2363ea7a00a2220290011d8aaf1527a05ed5fecdcdb31b3843795ecec9ccf77f0f3941149e79c1b52382a565c12cb7fb5c0478372de4527d0704ca9397a373f494862f205cdc829c9027735ecf86991aa7a655e840e4fa02dd11e684d5b0de8fcbd2e812369039b33f2164719577f943188625163574a8e19ee8a2ccc09b0fd60a8ed63e79d9b45615a75caccfa29bf48b416e53f7de7b948b1fb3a130e9ff0cc6429d81d973a0b733e48e8837a73d3827773d2d66259a3b1029c34d85f7079ca7d3a2db25f98", @ANYRES32, @ANYRES32=r13, @ANYRES64=r9, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x100, 0x10}, 0x884) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e2409570c0eeb87eddb94c3a9e35597e1307b091a891073f3512a2a8ad663c8412ed7ec85f6"], 0x27) r16 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r16, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 6.725027514s ago: executing program 0 (id=5556): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) syz_usb_connect(0x1, 0x59f, &(0x7f0000000a40)=ANY=[@ANYBLOB="120100021631a7086311000232e10000000109028d0501000400000904"], 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "be45f415d19a877b", "53a8e8ba641839da93589ef68e3aace9", "d6c25a50", "12b78d5d9ab7ce57"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) write$UHID_INPUT(r5, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r9, 0xc0045006, &(0x7f0000000180)=0x6e) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r9, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r8, &(0x7f0000000080)='I', 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvmmsg(r8, &(0x7f0000008340)=[{{0x0, 0x0, 0x0}, 0x82}], 0x1, 0x40008141, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 6.647817234s ago: executing program 3 (id=5557): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001600)='streaming/header/h\x00', &(0x7f0000001700)='streaming/class/fs/h\x00') symlink(&(0x7f0000001800)='streaming/header/h\x00', &(0x7f0000001900)='streaming/class/hs/h\x00') fchdir(r0) symlink(&(0x7f0000001c00)='functions/uvc.usb0\x00', &(0x7f0000001d00)='configs/c.1/uvc.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x100) write(r1, &(0x7f0000001f00)='usbip-vudc.0', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2004402, &(0x7f00000000c0)) syz_usb_connect(0x0, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) chdir(&(0x7f0000000000)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 6.45931785s ago: executing program 8 (id=5558): socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x24) statx(r2, &(0x7f00000000c0)='./file0\x00', 0x4000, 0x100, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e22, 0x8, 0x4e22, 0xdb, 0x2, 0xc0, 0x20, 0x2b, 0x0, r4}, {0x6, 0x7fffffff, 0x11, 0x9, 0xfffffffffffffff9, 0xd, 0x9, 0xd9e}, {0x4, 0xd2b, 0x10001, 0x8000}, 0x100, 0x0, 0x2, 0x1, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x1}, 0x2, @in=@multicast1, 0x3505, 0x1, 0x3, 0x3, 0x0, 0xfffffff7}}, 0xe8) r6 = socket(0x10, 0x800, 0x7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40040c4) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f00000000c0)="8907040400", 0x5) connect$inet(r8, &(0x7f00000002c0)={0x2, 0x4c21, @empty}, 0x10) ioctl$FE_SET_PROPERTY(r7, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f00000005c0)=[{0x17, '\x00', @st={0x4, [{0x3, @svalue=0x9}, {0x2, @svalue=0x7}, {0x1, @svalue=0x3}, {0x1, @svalue=0xfffffffffffffffe}]}, 0x4}, {0x2, '\x00', @buffer={"556074847dff3ec92fd15c5a5ab6e820b94f2a1ade3e311b88351c3481518fff", 0x20}, 0x9c10}, {0x2b, '\x00', @st={0x4, [{0x2, @svalue=0x787a9145}, {0x0, @svalue=0x939}, {0x3, @svalue=0x5}, {0x0, @svalue=0x50}]}, 0xe6}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r9 = userfaultfd(0x1) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_UNREGISTER(r9, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 5.823952207s ago: executing program 6 (id=5559): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000200)="ac", 0x1, 0x4008005, &(0x7f00000004c0)={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\v\x00\x00\x00\x00\x00\x00\x00\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x82, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) 5.554719589s ago: executing program 8 (id=5560): fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'trusted.', '/%[#\xeb\x00'}, &(0x7f0000000100)=""/142, 0x8e) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[@ANYBLOB="545a9a", @ANYBLOB="4f0cff66dac50e65f4944faabbeb020c8e57572456bec593e0d2ecf32e6dddf38e8aff27f9a893cb516339027ad68134cc76951dd7b7ef951b95e92f41e5a68772e12edfe4c5eeb8cd72677beed3d4ff11"]) 5.290795093s ago: executing program 7 (id=5562): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000019240)='net/dev_mcast\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="060000001000"}) socket$packet(0x11, 0x3, 0x300) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x38, 0x0, &(0x7f0000001000)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000180)=[@reply={0x400c6313, {0x7, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4.805813085s ago: executing program 0 (id=5563): r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f0100000000000000000009058103400000000009058202"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) r2 = syz_usb_connect$midi(0x1, 0x32, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x4244, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x1, 0x4, 0x60, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x2, [@ms_header={0x7, 0x24, 0x1, 0xfff, 0x7}, @ms_header={0x7, 0x24, 0x1, 0xfffa, 0x7}]}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x56, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f56000514100403e7e91bc92f5e89fe4f1ebbd8c70cf5a4f193890007000000000000006bc000002bff00001310010840000c000200080b10010c040008107f686bd95dbbdefe8d4db7348df4e5766eb3c3c119106a203a1cc8740bdd9c753fc938e0b313012ae51b70306d4036b3"], 0x3, [{0x9, &(0x7f0000000440)=@string={0x9, 0x3, "28951cdb19f455"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x425}}]}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f0000000140)=0x4, 0x8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002a00)={0xd, {"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", 0x1000}}, 0x1006) syz_emit_ethernet(0x6a, &(0x7f0000000900)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c5819c", 0x34, 0x3a, 0x0, @dev, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "5ad10a", 0x0, 0x2b, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [], "aaa12ba2"}}}}}}}, 0x0) syz_usb_control_io$printer(r2, &(0x7f0000000680)={0x14, &(0x7f0000000580)={0x0, 0x31, 0x46, {0x46, 0xc, "ab0e23828d4a3e8ffaa5dd7829399eb23cafc945dd352d4cba57f89d22f3912ab8b6d61083374c141ff2ac512b4f128b6b1c69f596dab02885ac1df06cd1c4138b68a98e"}}, &(0x7f0000000600)={0x0, 0x3, 0x3d, @string={0x3d, 0x3, "21ba324df62323571a8241c8b9c2de9fb0685bd08a64dc0928fb098b0ef2ab5ab978938ae2db2dbd098b21b20017b85c56d02675ecfbf96b024427"}}}, &(0x7f0000000a40)={0x34, &(0x7f00000006c0)={0x40, 0x1a, 0xff, "cd5fa2c8086662bd2afbb4b37e5acb81ab312874444cf5d9352e78985ca8e3ee37f6b5886c4a2d240a62433a3d2416fe5980215764b437be83a9d6e7cd3540aa5b3abb0e9780ae8841142660171bc3eef0475973eff942da7ba1bf32fe6dbd84ddb6e3b77bd248d08ac1dbba50f696c0d40aff6dfcd530d18e9531842267c7d6323927be2b1a255f09d1e2d4658c918182435a5eb94b43e1e3ccefcc1ad7b88076b46338c9549dcd4056a3a3b4aa9bf4d2d460e64bbecbdb9c2aa306f3a72f6be3f7e4725903a1b71fc95bc8199b323d122c44dc7adc95bf324fcafbf4d8752abcdab94277e32fd46fb7fb4eafe3e01189ba7aa5affe1144eb4af3341a01c1"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000880)={0x20, 0x0, 0xf5, {0xf3, "aa9e19a9adb74bc153afb24d6f74e124f39ef82e77998ffa9d94f2de5594b7f5e4b1dbe4e58a8e81a9646608bbbfab3c2f927a4f5df77a37b1b48dce57002a3330f914eab4115e960a681a7290f117d12830b28c23fb0d6cc66d2ea599e5200219616966af6825cd16b5ee24127c2db401c2068a9d4a2487daaa6cb0fc85bc663ad1a8e4d551057edbefce1e2eb1fd66c38e026d135fe1e05fbcfcc044dfb68561061024de602897c718108e71978ca2becb7b797945b8220e86ab4d25933ee6be6589d45c9b92a153f4ce92a1a64fc87ff76925e1fe6e6ec077e926db7e2b248949ae870b6ec7f5ba3f8b21f0e58a94099736"}}, &(0x7f00000009c0)={0x20, 0x1, 0x1, 0x72}, &(0x7f0000000a00)={0x20, 0x0, 0x1, 0x8}}) recvmmsg(r1, &(0x7f0000000100)=[{{&(0x7f0000000240)=@alg, 0x80, 0x0}, 0x1000}], 0x1, 0x140, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0xfffffffffffffea4}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x8, 0x5, 0x7, 0x7ffc0001}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000001680)='.\x00', &(0x7f0000000040), 0x58) 4.695443283s ago: executing program 6 (id=5564): socket(0x11, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x3, 0x100008b}, 0x0) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f023}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'veth0_to_team\x00'}) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0xd) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000080)={0x4, 0x9, 0x4, 0xbfc0000, 0x7, "66d616afb88713a0cd91eefeadc78b38d66461", 0x2, 0xa}) syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010900000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d10300000800034000000001140000001100010000000000000000000100000a"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 4.379813359s ago: executing program 7 (id=5565): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x900, 0x81, 0x28}, 0x50) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x18) getdents(0xffffffffffffffff, &(0x7f0000001000)=""/4085, 0xff5) r3 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) mq_notify(r4, &(0x7f0000000540)={0x0, 0x16, 0x4, @thr={&(0x7f00000003c0)="d61aaf68f887161fa7119f29448b7028ee21c424039ec9f68e5e3c780e67b93251d8c40758b9a54b10637ec9b1bd4e07887b38e1144b99b0e8735f5f4eada0bf4f86fa416ec7d7da39491026238a443a84dca24e2fd74d1e7338572ecb476ef2b54d76eabe0dd5baab4e9087238b7864dce1ea2f3a14b2db209c2e3c32301c1b6e9166ce1bcf85f91dd60e662395b034d6b6117cd84ec548d428ac08ec0270768b81159e755d84f0a5d09abaae56aaeae5f05f75233a32fc83d89503d293037cb75ae31f638724cffb4b273082e144628bc410030393ab8bdb251617f486bfd8fd146be9c3c56cd7ea2387b819a15974b2e557e680", &(0x7f0000000500)="c274054ddc2f2cf85dbd49c0b76a78ed6e7c6fab6f2ddc3f6cd4fc7bc6b21d342381aaf9"}}) r5 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0x1000f1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x0, 0x8, 0x400b, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) ioctl$COMEDI_DEVINFO(r5, 0x80b06401, &(0x7f0000000000)) 4.353383157s ago: executing program 3 (id=5566): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1/baSourceID\x00', 0x1, 0x0) write(r1, &(0x7f0000000740)="54ee", 0x2) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000400)=[{&(0x7f0000002380)="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", 0x23f}], 0x1}, 0x9cdc2384056f0939) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0xa, @none}}}, 0xa) 3.223593139s ago: executing program 7 (id=5567): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000001680)='.\x00', &(0x7f0000000040), 0x58) (fail_nth: 3) 3.195895998s ago: executing program 7 (id=5568): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x6, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f0000000600)={0x4, 0x0, @ioapic={0x8000000, 0x200009fc, 0x4, 0x0, 0x0, [{0x6, 0x7, 0xc5, '\x00', 0x81}, {0x4, 0x14, 0x8, '\x00', 0xc}, {0x0, 0xc, 0xfc, '\x00', 0x13}, {0xa, 0x10, 0x1d, '\x00', 0x6}, {0xf, 0xfb, 0x2, '\x00', 0x3}, {0x0, 0x23, 0x6, '\x00', 0x78}, {0x4b, 0x90, 0x7, '\x00', 0x4e}, {0x3, 0x9, 0x6, '\x00', 0x1}, {0x0, 0x18, 0x3e, '\x00', 0x4}, {0xd, 0x1, 0x1, '\x00', 0x2}, {0x7f, 0xc, 0x3, '\x00', 0x9d}, {0x9, 0x1, 0x2, '\x00', 0x77}, {0x5, 0xa, 0x3b, '\x00', 0x2}, {0x7, 0x1, 0x8c, '\x00', 0x9}, {0xfe, 0xb, 0x1, '\x00', 0x44}, {0xe, 0x1, 0x4}, {0x8, 0x42, 0x7, '\x00', 0x8}, {0x6, 0x0, 0x2, '\x00', 0x42}, {0xeb, 0x6, 0x8e, '\x00', 0x7f}, {0x81, 0x0, 0x10, '\x00', 0x7}, {0x2, 0x8, 0x97, '\x00', 0x83}, {0x8, 0x29, 0x9b, '\x00', 0x4}, {0x6c, 0x4, 0x3, '\x00', 0x57}, {0x0, 0xa, 0x3a, '\x00', 0x5}]}}) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1001, 0xffffffffffffffff) keyctl$get_security(0x11, r5, &(0x7f00000010c0)=""/142, 0x8e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socket$inet6(0xa, 0x4c69a7429377052, 0x1) r6 = socket$inet(0x2, 0x3, 0x2) getsockopt(r6, 0xff, 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000480)={0x0, 0x9a2a, 0x10}, &(0x7f00000005c0)=0xc) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000840)={0x0, 0xde29, 0x8, 0x5, 0xe6, 0x10, 0x80, 0x9, {r7, @in={{0x2, 0x4e24, @remote}}, 0x2, 0x401, 0xa742, 0xfffffffe, 0x80000000}}, &(0x7f0000000900)=0xb0) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000150a05001f00000000000006000000020900010073797a31000000000900010073bd66a1ba1b2bb04545a5797a31000000003ada628772d5c79b69e2b12b386ef82f"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x200088d0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x20000080) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r9, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0xc, 0xe, 0x3, 0x7, 0x0, 0x81, 0x6, 0x4, 0x100fff}) sendmsg$TIPC_NL_LINK_SET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a8a743ce5f05a46bf85de0a87b2d13854f262445a1330af20f81e0f1c9e6285e4c4800268db6ec85657d7992ee75aec7032cb161e231ff144e5fb9e620f6fdde7122ba3fe36626379770d0f88cf6f85153a557b8e46a442c255e92a4d2fcb4c84100d516af524811fce3cc0758c9e1cc", @ANYRESDEC=r9, @ANYRES64=r2, @ANYRES32=r8, @ANYRES8], 0x50}, 0x1, 0x0, 0x0, 0x4005}, 0x0) r10 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x12, r10, 0x82000000) r11 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r11, 0xaf01, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) 2.553842248s ago: executing program 3 (id=5569): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="180008000001"}, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@empty, @broadcast, @val={@val={0x88a8, 0x1, 0x0, 0x2}, {0x8100, 0x2, 0x1}}, {@ipv4={0x800, @generic={{0xf, 0x4, 0x3, 0x3c, 0x3c, 0x64, 0x0, 0x45, 0x5c, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@timestamp_addr={0x44, 0x24, 0xa2, 0x1, 0x9, [{@empty, 0x8001}, {@private=0xa010102, 0x8d5d}, {@rand_addr=0x64010101, 0x2}, {@multicast2, 0x42b}]}, @ra={0x94, 0x4, 0x1}]}}}}}}, &(0x7f0000000440)={0x1, 0x3, [0x668, 0xcb2, 0x817, 0x804]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$xdp(0x2c, 0x3, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x23a000, 0x1000, 0x1f, 0x3}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80a00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(0xffffffffffffffff, 0x80705864, &(0x7f00000003c0)) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) 1.351424148s ago: executing program 6 (id=5570): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='omfs\x00', 0x208000, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0xc0, 0x15, 0x62d2, "2de7dde79a9e897d80ccb3496466ac6744f56b7acbd55251b1b688f5505da0200f3e910cd8190c0a66927875de0698471816cdf5f3ff1b7ce73436ef5385d5b06d8ecfc6c73609a6a3c25a8b06de6937781bed11464a396a40ff4795d98a0bbdd76f8a136807c755a45811dff2f5a4f748f39f2717a6309620d18d9eae9ffe12e6b14bec4865d06e4d74af1aef4910bdc41f8e0436850ff7257c4960bd6d5060ab15c24ee088c5190b"}, {0x18, 0x116, 0x10, "2eaa86"}], 0xd8}}], 0x1, 0x1) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x100, 0x70bd29, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x62e2855c44ce06be}, 0x44000) syz_emit_ethernet(0x32, &(0x7f0000000580)={@local, @multicast, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0xf, 0x24, 0x65, 0x0, 0x3c, 0x21, 0x0, @broadcast, @loopback}, {{0x4e23, 0x4e23, 0x4, 0x1, 0x9, 0x0, 0x0, 0x5, 0x1, "1bdfcc", 0x0, "f431a8"}}}}}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r2) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x7d, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.351057359s ago: executing program 8 (id=5571): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) socket(0x2, 0x80805, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x2, 0x11, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @dev}, [], "17c11d58674e624c1a146558aab57fff"}}}}}}}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0xf, &(0x7f00000000c0), 0x4) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r7 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r6, 0x280000b, 0x11, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000080)="fb0149dd033be3ac4e37c4005a9614fbff67521ce16f8f09449a7a836b73312954000000000000000000000000000000000000000000000000000000dc6900", 0x0, 0x2e) setsockopt$sock_attach_bpf(r2, 0x1, 0x31, &(0x7f0000000640)=r1, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x31, &(0x7f00000001c0)=r1, 0x4) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0xb1}, @l2cap_cid_signaling={{0xad}, [@l2cap_info_rsp={{0xb, 0xd, 0x5e}, {0xfff7, 0x5, "fc28222d4fa8beab430df4881098cb34bf0b14786af8a3cea5dfcb85465e98781debf8b8d17312a051d882c681c1a1b448df3e77e3ce6e8d13b22289c350d334405b4371c1a22a6c81b8d4dfbbc6a46382711cc8fa8fe2a63551"}}, @l2cap_cmd_rej_unk={{0x1, 0x3, 0x2}, {0x7}}, @l2cap_move_chan_req={{0xe, 0x7, 0x3}, {0x7f, 0x4}}, @l2cap_conn_req={{0x2, 0x3, 0x4}, {0x0, 0x5}}, @l2cap_conf_rsp={{0x5, 0x0, 0x32}, {0xffc0, 0x5, 0x0, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x2, 0x1, 0x4, 0x1, 0xc62}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x3, 0x9, 0xff, 0xfc00}}, @l2cap_conf_flushto={0x2, 0x2, 0x7}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x0, 0xd, 0x0, 0x7, 0x8001}}]}}]}}, 0xb6) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="180800001200000000000000fbffffff18110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000001200007b2af0ff00000000d609080001000080db9af0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000015000000760000007b987600000000005608000002000000a500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) mount$bpf(0x0, 0x0, 0x0, 0x200020, 0x0) 1.346960595s ago: executing program 0 (id=5572): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32, @ANYBLOB="00000000000000deffffffffffffff0000000000b0e589a8b261e99961652f5efbcc1b99569f0a300680a18d9839b1cf58e5b26bd6c68436ed969f5618c3e34db7632be8ee7327f28fba8df2146ffd615e22b36ee7665b65f3b8e0aa4c16ab4728d0e99b3f9e235e712e051e60543f8b8f9efbb97b9f20e6789f617dee24036956881b18843acecf05b1fa9b4a66a8d116a64e44f793a79c27510785d233784261854dc118d80dad", @ANYBLOB="38648e3d2b78a4fed3f1796c813991bca703a894abd04ed96580c56e441a40168a1bf7cea6bbcea04cbcc0b6", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) write(r1, &(0x7f0000000000)="f9", 0x1) read$FUSE(r1, &(0x7f0000003480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r3, 0xc0106441, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffe00}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="70000000000901010000000a0c00048008000140000002bd080005400000000f0900010073797a31000000003c0002000c00028005000100060000002c00018014000300fe880000000000b1c0af5a7b00000000000000000114000400ff02000000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x8008890}, 0x40000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r7, 0x5000940b, &(0x7f0000000a80)={{r5}, "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"}) open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x20) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f00000004c0)=@vmx={0x4, 0x0, 0x2080, {0x5000, 0xffffffffffffffff, {0x2}, 0x0, 0xff}, {"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", "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"}}) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x2004) r9 = getpid() syz_pidfd_open(r9, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x2, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r11 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x8693, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r11, r12, r13, r14, &(0x7f0000000200)={0x2e, 0x18, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x3, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000340)) 1.243681611s ago: executing program 7 (id=5573): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000240), &(0x7f0000000380)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0x55}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x12, 0x1, {0x2, 0x100, 0x0, 0x401, 0x9, 0x80, 0xef, 0x2, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) close(0x3) 1.121651365s ago: executing program 8 (id=5574): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) syz_usb_connect(0x1, 0x59f, &(0x7f0000000a40)=ANY=[@ANYBLOB="120100021631a7086311000232e10000000109028d0501000400000904"], 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "be45f415d19a877b", "53a8e8ba641839da93589ef68e3aace9", "d6c25a50", "12b78d5d9ab7ce57"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) write$UHID_INPUT(r5, &(0x7f0000000d00)={0x8, {"7894e6e62ce0f10fcdce74f21ad5b47c923d4dec90cefd599912070f341d59a8802e33af9869738f25b2f72093dd0ffa688e8e417c6e0e09b99649818d7caca39e142ef69d9101397854c3f51bde013686a626b2120c03d98c0ad981069188fbbddb88bf41a6b29ed43d1244e6025e1e4a2f40577619ccee39385bfc86461023a7906e5c07d16415140f4ab26db004362c885ef2c9ee82d3dd7e2ac42ca05d81ccea87dc0ec4a8f222013d6d4d0b0c828f3d2e3151dce87bfb335c1ad67bb3323564022ab23a6ba54ca117ca592c8d4227922347ea6f7c9d3dbdbc8d235f2d03e688d5ca7718d60e911534f964bf20359a0057847e7d7fd2cc463784aab2b06ba95512cfc427da44aa73634b0797b9baab391aa176d259c047ee9d346e63903860ab3c571d064509a715c5c4c6edffce9e1701e8291c2d937e3ff18691fe9a665b1a3b717a40205f8efa239b37e6b33f5c8ac28e616f788d0294c8d39ff4a63aaca7d4c578a935dd84850432201081bc1b00c5797847eaff8cecf8af8a60f075b5ff1c3dc9e62f9a3cfc4333a7501dd8badfdc691a9d35d3fc2c0e8f1b21a2c619201004a0d82bace1738ba9ca93e6fbf8ebaa78b5423efb19d3337ad050a7a1a634737a0169921911b277ab235f8b186efd60c3eff58e974a856ba460c5fbd91c1b5c999a7f6b4474560e0c5698085e1ff96381999bf7338dddab4499c6ae315245ecc98d3ca2ebc11214a4115e9205e7d1705591be4029a5e92ae06c02ba39ac70cf1ba082ccee070bf2feafa55ac6e863adb6f89a7475c2dc073058b0f8a52151d8c3ced025463656942bfd257ace6c54bd57985a44cef1c20777db47d12bd34371ef6f537e455b7787e3a853713877fa9465937602ceef8b9439507ab802ea4eaf5ee2ecd710b1840d8b8c995b5904434198abd8f0e830857ed1af53f3bcede9d57afb1cd7ad27bf222a6d1c58286c40d22211a3b2b7b7bbf5923a528fa4d781aaec1f67e013392b17197d2f6ff2d0e68bea94ce57cc516daffdf2348333a8dc596894540aa2a79437d95465fc27627b0e26871d5248c39e1a3badb319d449a7d67145418e1a35cb4bf950a5483d6e80763ea676b89d1f1e2cea20c590c76ae9fb228ffd638ccabdb3830cf944e1cccfb7ba8b1d1f0aabc498155ddda8404ebe2e25cfcfa9058af7d66bef79e592a579d556404ea3f28d6ddb3fdead9123247e23827f729eee41540d0f0e94027d65eee4e7c1c913c634f9abf546388cd2e4b351b16bd97faae3b54f5b2750495619ec36d97a1080564fa30a9f8a2700b77340b5bbd9cc377ee35420b5b762935047af7837e973a9da42ef93c11f145704d041054bcc4680363cbbee16a2bc0eaaa49cfa23330a666dff32daa17a6ea425f1ed2354d0c36893c895a0564e100d3e1385467405ca2706cfb62453faf72b1648727faeffb3c934bc4e48e4ce93af11bff3208cb3843da7ed68451b4af747ef72e2fb78a73990c95097c9504aacddffc5caadeb171e95ad113561144907d361fd28695239f6619360b9d0eead653cc83ab13fc7c0c60237e3363b6f319daa38d792426393e2396404a112ed9e70b378f494d4b540bf9b44d76b347a12c8cdaeed350a85698eb71bd126f75b9aa0ff7435926a4a4ce04e4187eae5a80b1ff56aa7f1b005a9a057b6ace4cf08c404f66c0b31974d151e9a2840ebcbfbfd898e6694b89fe78a68b90551c9d33c14914dceff64a699c1cf1570c2d1f53e905abef9f954fbdd100b1b18f10dbd673bd6c7a9693286cf2dc0ab9919466750aa42ccfa27e9ff4190dd784ec6f2e19270521f98561a959152b16a80f0b1e183375d3886936ae03ff4949777d30481c24bbae918d5fdcc8f46ff05e2370095bc85cde086dc1e32423f21c13c42490fb679462f35dd0c4ef06f8c3f24327af47ea2c73a856f112385094fe138022e308c157adb19b94ed0e8d94b805883318b33b22f371d62f0b764b2a44b65018bef417357aa997ea4ef95a2899963e06a3c553943e14d3364b73919f5e6d8395d56d522f1b19ae37d48f1534d92e4248824adb555281aea2fb317bfb30cdc7d4efada900006f45578a061b19e2eeefffdbf1974a1633182501611724079f926122c1c8fd9b1d8e6302d76ed90616abcfcac478e3b8d3be91eee5f9c653f8fed3afc1eb33d9314aaa021e8b53ab7ba3e59b301a6c757efd95c6661d7d3e8a73cdec7833f4608dc238d8e144a5b0196a9aea6fb30efdfdb05f9529c52af93cd78d857e3cc920bf30b2292380c662890f3679c09aea55c77a75dbb4da338c0fb737a5fc31252d9fa798f9dd70947f6cfa0474a7a835c694dfbb5c678216915d1f04c81d5df8f2efde80fdbce8248525d9b639f394847b9a8c2e7f7288b031df91db059eabb750c1bfe732b78001c2cca0f74cd8873cc2a892d26e1dbd48db297853775c21d68ce1daebee4f4d65bf8e448b1c80da35eaff3295ffe0aef68baff15f7585aba741699c3ed9a62f2c18200e40cbb383b844459ca9636d61645470d4f8b04704b84a7986d816c037d368d807ab936faa842a427cc4987ab506f3f08841195c893f39656547ff62730ec43aa78311d57defe4002301f6b9e1f6573f3a46715e2d1f899480e8bc97f5dfe48ad14df280126998d32dc0a63231584b5ee82d5f90d5ccd3eb3923cee0dfe0eb9b1ac54fd97214ad86c6459cf916ba0bfc9d4210a95346d753f4bc7440d78274c4cd1850907a2bf150a1c1b511bf0438494a6aa1a197f787c96b410d866b4cb284f74122ffbb2f5fa7c2c22f935c7e1542ff83f01e3024ee6e3d7fd0fba2754e635c8116a27f15586300d6522979822c1f97038f33c644ef82e9818f4a09388cb9a69514c929e9bc149fd7a26b458d89abb5e3ae1de29ed1f28d613878a24a9296c967339b9c6749f92c720982cb78a120bcf7593c6fbae36f9a06caa384a7e5d3f05442b0a69f72518a76a916968aae56abda54dac318fd726335e95592f80d030ef51aea41d5e348267fcea65e49d8e36e711fedb3fb9ad37d3fdf2185dcc3ff44736d6a0d4b4bd1810f89ec6e0e6b6f58f74d73ddd2a27fcfaf36d1aec6c3769787a1d3b8514487a399e6497bd0bf4c4242868d599aeb2202cae535e8118d478fc43b4c8bfdcf024f36f5d7c9f75c69bc9d4d5414e8bef740bcaf9027dbdb0f47643b984406c9ce1999d7631243c26d6824ae74ab71f536e40e934a5dfea7f5c5d10713c831df6ba168f4080a4b082e94bc23c0807aab7c0bc29f327d185a2a9302cc255aa54764c4eb8ef5b17d640afa30b36572294914d51ac146f87af6f5abd97823724aba25f589e769aa1047e72365e9ee67e7f90e80542cc842aebabc97679dd893075e8a1bd6934ac9e768e20bcf4c2fa29c5f7a103d3ff689c721e08ef1d0ca61ee3e07a815aa943879dd5c406dcff6a946b0a12980620cfb224912e27accbb63b1e2d571c65918c806060dcd08d5cef341e5c5705021ec19605b809a44d2a8f6f27e18f2b8fd268e23706564df5501096fd8f8261e27d5c8b582673f0c76bf78b27f754cddb5b64a33c87841681d8eef2b5abe8a8deabee587189f75b8b518909cd2a6f89910425e8647f25077829f1b400b3abcaeff6f54ccc00f6fb7abeeefe0226e4e2b55fba0925b49be8310fc5a490384e4a5e7216b0fd0c09c00e3327ada8c59eb37443ac9148a9df92b0d4e6851cd93b784d3e0a236d9fe7c483f03d813fc98e632cf6255dc4a70a0458570776509ebfb545f35956c7e32493f6ad886ec858bfc29bffb7f2ae7eed7d83e3075554dd81e72c93f4c2e4dcdb0832e76861b983b17c2a6f887a988e4fd47459fd45134560b5b1bec10c50914f2d7f327a4e68a0c453f067035f243ca01aa22969481d5fb48d1da82f35222c4e8d249625c454159f7b00a85d43414eb5e7c8044922b323f2473af648d1dba5ffff34bd5e023a2fe4860d7568fa4d35ad20c461eb38bced561edcef853dbcdd7b69bb40e9cda525a71a286c956a1268cacad0bc0c79ed7632aedbb8dc78ba1a2adea2b650314072d1ebc08f9753d6d38e53a758ea4700160588e819239711a506f004ec57037cd6efcbb9cee3bba556eaaa008bf8e8390085b85653c7aa006dd836c7ad025bed9dec77a4a00b309776862fca4dd01dff16aa6bd70a876662093b85ffbb07b2f8b4361f5dc635f940571239a71865e8f1a289f449ae9a74266205c8b1fe8a732db502c9ea5e5c379b704d43ef795b40450aa498535803767d2c2cbd2749474d2997e00f37612fcc0ae7322b8c8e2a90cf66ada69bd05b82d5707562b37e40674f0a3f58d9c776a931b8768d5c23f17c5f9135e7a4ce0c6eb356d9fb4a53d112194c19e6f045d2bd44132a70b9ccd7e65d2787899785f7ee9185589136c847347142440e0a405c18ff3f31acb791a805dd281aaf97aee708dcce2f1aa53161b7716fa0978c0d02871637ad7e1af5a158b727a1dfc2ae1aafbb9c516469ee89fa0f1de23a17115ded5e9c560a468c5192943be74aeaba51083ca0379563f1fa78e29eca1eaf849cd00f419ceb59e640248c332c845e68e9a398281b962ae59aa5b18006b6ea6e0c5f1b30665e1fb975da11ed6a47bd44b4241bbf0443f178e8249805cc3f980a4bb2f46baab0a12e9e9b2aaa7e0ca22b2314a9e5ef6412f4efe31381e3d716244af3112444eabbb0c353acafc0f1179ad4c63b81e5f5bfd771591d24e5254fa72e30aa53717c24b49cee71cdd9368e207af5e992a04f06de912cfcfca38732f5c8393d466d209680ebfa5764897f04531138beff3f65691593e334c2ae2825ffa9353e8aeef37b90691ea5c78d7c86124abf6491a068bf03c3467e5e42ca4b58192d17856722207568777141ccbef3f3891708897af9c196be92056527a8da820d28dccaf4dfed4d38fb8fe826b238d31bad751631a0d8b1eabdfa7bffe65241238ff982d21b2222cdd3a536385d0ab2180ccdf4672d0b21156377fe640ee8c8744b9ba1efce91c295e83a4271a34a1f70adbc2ff0aa6ba9e1965061cadcd3d824636bbc1f977c78dde1859d752c86b099705616edf6e94523f108af79ab5073d26f3788c4d56f1b17b764c1bc387e531dab5dd71198c56b02c68552dc1098beec85dc1bbe2dde316e6093a9a33f578d789da9b2a9209ed6e73a0597bc62467afc42f0348c9b885b92f37569a953f6316d5c8b188539474da3836abeae7ec259cf8fd28f02593597e9206e05e8da4f4346aab36f179deb68a9dab9b550d6fe4f0c88563935328a699b9cbb2015be57c28beaf60be499114f04a96a2f7fb3bf3b5b31e422954c96790aa1e49c5bc1946df0df2b4be63c0aac1ddcf187714f6e67a076a823feaeba5db4a99e5f494ec939d1b0ecd23752c08c3b788704612127e7f080ef581b4990accd6dca7ce52844bc7bbc8c8752497c171d8e628c53609a920fb5a1bc740cb05e2035de72f636ef0498ed2f3cccb64d5740afbc30015442ca0511160787b2c763072c70035f7f3bbbd3966bcc80d021ce1482e27681b963a28189c2ee9d64d0622a94eac689d3fc1a4137c4d62a4c73fab4b0175a8ff8fa256118affd94aaeee33b155043f53d9e3d4eb82173df0938c6c3e51c118c1acf187c84f12090ad1dd663013e433455290f87ca88959f9f481e4dd05e6a483abe00f7c974e5ff602a7a6eaa71f8ac06c50afac0c2858b554f59bf88002766a619ae9b0864926d07b273238e1ebd456543f77ea800231dbf4479f0b90fc607", 0x1000}}, 0x1006) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r9, 0xc0045006, &(0x7f0000000180)=0x6e) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r9, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r8, &(0x7f0000000080)='I', 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvmmsg(r8, &(0x7f0000008340)=[{{0x0, 0x0, 0x0}, 0x82}], 0x1, 0x40008141, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 1.120936979s ago: executing program 0 (id=5584): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040), 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x18) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="28f80100", @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c000000080003000400000034000280080001001e0000000800030005000000080001001c0000000800"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.043929462s ago: executing program 0 (id=5575): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000180)={0xc}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x100, 0x0, 0x2, 0x3}, {0x0, 0x3, 0x200000000000, 0xfffffffffffffffe}, 0x7, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@broadcast, 0x2, 0x2b}, 0x0, @in6=@remote, 0x3503, 0x1, 0x0, 0x0, 0x0, 0xffffffff}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x2000c}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fbffffff18110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000019b7040000000000008500000033000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 142.681936ms ago: executing program 0 (id=5576): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x3, 0x0, &(0x7f0000000040)=0x42) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) fsopen(&(0x7f00000001c0)='sockfs\x00', 0x1) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e00000004000000080000000400000000000000", @ANYRES32, @ANYBLOB="000040000092a3968ed75d46bde6d3b9389e0e2991a6ee3cf70df01abd1a79cc9d1c00"/49, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r4, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r5}, 0x20) r7 = fsmount(r6, 0x1, 0x81) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) getpeername$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r6, &(0x7f0000000040), 0x0}, 0x20) r10 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) dup(r10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x2, 0x1, 0x80008000, 0x3ff}) r11 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000000)=0x15) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) close(0xffffffffffffffff) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x0, 0xc) lseek(r12, 0xc, 0x4) 0s ago: executing program 7 (id=5577): mkdir(&(0x7f0000000100)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe"], 0x34c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r2) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r2, @ANYRES32=r1, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x18881}, 0x0) mkdir(&(0x7f0000000d00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x1, 0x0) write(r3, &(0x7f0000000f00)='f', 0x1) kernel console output (not intermixed with test programs): g a failure. [ 1405.024496][T23767] name failslab, interval 1, probability 0, space 0, times 0 [ 1405.040200][T23767] CPU: 0 UID: 0 PID: 23767 Comm: syz.7.4983 Tainted: G L syzkaller #0 PREEMPT(full) [ 1405.040219][T23767] Tainted: [L]=SOFTLOCKUP [ 1405.040223][T23767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1405.040230][T23767] Call Trace: [ 1405.040234][T23767] [ 1405.040239][T23767] dump_stack_lvl+0x100/0x190 [ 1405.040257][T23767] should_fail_ex.cold+0x5/0xa [ 1405.040272][T23767] should_failslab+0xc2/0x120 [ 1405.040287][T23767] __kmalloc_cache_noprof+0x91/0x6c0 [ 1405.040303][T23767] ? net_generic+0xea/0x2a0 [ 1405.040317][T23767] ? ip_set_create+0x342/0x14f0 [ 1405.040334][T23767] ip_set_create+0x342/0x14f0 [ 1405.040349][T23767] ? rcu_is_watching+0x12/0xc0 [ 1405.040365][T23767] ? trace_contention_end+0x126/0x160 [ 1405.040380][T23767] ? __pfx_ip_set_create+0x10/0x10 [ 1405.040404][T23767] ? find_held_lock+0x2b/0x80 [ 1405.040425][T23767] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 1405.040444][T23767] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1405.040456][T23767] ? skb_release_data+0x6ca/0x8e0 [ 1405.040471][T23767] ? __lock_acquire+0x49f/0x1a40 [ 1405.040495][T23767] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1405.040512][T23767] netlink_rcv_skb+0x159/0x420 [ 1405.040523][T23767] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1405.040537][T23767] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1405.040554][T23767] ? ns_capable+0xd2/0xf0 [ 1405.040569][T23767] nfnetlink_rcv+0x1b3/0x440 [ 1405.040582][T23767] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1405.040595][T23767] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1405.040615][T23767] netlink_unicast+0x585/0x850 [ 1405.040627][T23767] ? __pfx_netlink_unicast+0x10/0x10 [ 1405.040641][T23767] netlink_sendmsg+0x8b0/0xda0 [ 1405.040654][T23767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1405.040665][T23767] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1405.040683][T23767] ____sys_sendmsg+0xa4d/0xbe0 [ 1405.040699][T23767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1405.040710][T23767] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1405.040733][T23767] ___sys_sendmsg+0x190/0x1e0 [ 1405.040750][T23767] ? __pfx____sys_sendmsg+0x10/0x10 [ 1405.040766][T23767] ? __lock_acquire+0x49f/0x1a40 [ 1405.040778][T23767] ? get_pid_task+0x106/0x250 [ 1405.040810][T23767] __sys_sendmsg+0x160/0x210 [ 1405.040823][T23767] ? __pfx___sys_sendmsg+0x10/0x10 [ 1405.040844][T23767] do_syscall_64+0x115/0x870 [ 1405.040856][T23767] ? clear_bhb_loop+0x40/0x90 [ 1405.040869][T23767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1405.040880][T23767] RIP: 0033:0x7f66f7b9de99 [ 1405.040890][T23767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1405.040902][T23767] RSP: 002b:00007f66f8a9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1405.040913][T23767] RAX: ffffffffffffffda RBX: 00007f66f7e25fa0 RCX: 00007f66f7b9de99 [ 1405.040920][T23767] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1405.040927][T23767] RBP: 00007f66f8a9c090 R08: 0000000000000000 R09: 0000000000000000 [ 1405.040933][T23767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1405.040939][T23767] R13: 00007f66f7e26038 R14: 00007f66f7e25fa0 R15: 00007ffe3fa07998 [ 1405.040953][T23767] [ 1405.706124][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1405.706137][ T30] audit: type=1400 audit(2000000858.539:3577): avc: denied { ioctl } for pid=23770 comm="syz.2.4986" path="socket:[101796]" dev="sockfs" ino=101796 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1406.004438][ T5728] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1406.112027][T23783] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4984'. [ 1406.122999][ T30] audit: type=1400 audit(2000000858.959:3578): avc: denied { getopt } for pid=23782 comm="syz.3.4984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1406.144289][ T30] audit: type=1400 audit(2000000858.979:3579): avc: denied { mount } for pid=23782 comm="syz.3.4984" name="/" dev="configfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1406.175626][ T30] audit: type=1400 audit(2000000858.979:3580): avc: denied { search } for pid=23782 comm="syz.3.4984" name="/" dev="configfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1406.201492][ T5728] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1406.212015][ T30] audit: type=1400 audit(2000000858.979:3581): avc: denied { search } for pid=23782 comm="syz.3.4984" name="usb_gadget" dev="configfs" ino=3587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1406.235239][ T5728] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1406.246536][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.257791][ T5728] usb 1-1: config 0 descriptor?? [ 1406.265372][ T30] audit: type=1400 audit(2000000858.979:3582): avc: denied { read } for pid=23782 comm="syz.3.4984" name="g1" dev="configfs" ino=17079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1406.301577][ T5728] pwc: Askey VC010 type 2 USB webcam detected. [ 1406.318839][ T30] audit: type=1400 audit(2000000858.979:3583): avc: denied { read open } for pid=23782 comm="syz.3.4984" path="/249/config/usb_gadget/g1" dev="configfs" ino=17079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1406.385591][ T30] audit: type=1400 audit(2000000859.009:3584): avc: denied { search } for pid=23782 comm="syz.3.4984" name="/" dev="configfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1406.446612][ T30] audit: type=1400 audit(2000000859.009:3585): avc: denied { search } for pid=23782 comm="syz.3.4984" name="usb_gadget" dev="configfs" ino=3587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1406.480323][ T30] audit: type=1400 audit(2000000859.009:3586): avc: denied { write search } for pid=23782 comm="syz.3.4984" name="usb_gadget" dev="configfs" ino=3587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1406.673614][T15390] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1406.709716][ T5728] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1406.731984][ T5728] pwc: recv_control_msg error -32 req 02 val 2700 [ 1406.751852][ T5728] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1406.759786][ T5728] pwc: recv_control_msg error -32 req 04 val 1000 [ 1406.767109][ T5728] pwc: recv_control_msg error -32 req 04 val 1300 [ 1406.822785][T15390] usb 3-1: Using ep0 maxpacket: 32 [ 1406.829729][T15390] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1406.839520][T15390] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 1406.849747][T15390] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 1406.859997][T15390] usb 3-1: config 14 has no interface number 0 [ 1406.868325][T15390] usb 3-1: config 14 has no interface number 1 [ 1406.876674][T15390] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1406.890981][T15390] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1406.905812][T15390] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1406.958825][T15390] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1406.974259][T23796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1406.983381][T23796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.993216][ T5728] pwc: recv_control_msg error -71 req 02 val 2000 [ 1407.003607][T15390] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 1407.017704][ T5728] pwc: recv_control_msg error -71 req 02 val 2100 [ 1407.024670][ T5728] pwc: recv_control_msg error -71 req 04 val 1500 [ 1407.031228][T15390] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1407.045203][ T5728] pwc: recv_control_msg error -71 req 02 val 2500 [ 1407.051942][ T5728] pwc: recv_control_msg error -71 req 02 val 2400 [ 1407.058682][T15390] usb 3-1: config 14 interface 57 has no altsetting 0 [ 1407.066912][ T5728] pwc: recv_control_msg error -71 req 02 val 2600 [ 1407.075739][T15390] usb 3-1: config 14 interface 228 has no altsetting 0 [ 1407.084007][ T5728] pwc: recv_control_msg error -71 req 02 val 2900 [ 1407.091214][ T5728] pwc: recv_control_msg error -71 req 02 val 2800 [ 1407.098018][T15390] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1407.108176][T15390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.116308][ T5728] pwc: recv_control_msg error -71 req 04 val 1100 [ 1407.123397][T15390] usb 3-1: Product: syz [ 1407.127608][ T5728] pwc: recv_control_msg error -71 req 04 val 1200 [ 1407.134174][T15390] usb 3-1: Manufacturer: syz [ 1407.139662][T15390] usb 3-1: SerialNumber: syz [ 1407.144650][ T5728] pwc: Registered as video103. [ 1407.163577][ T5728] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input224 [ 1407.214728][ T5728] usb 1-1: USB disconnect, device number 45 [ 1407.590059][T15390] legousbtower 3-1:14.57: interrupt endpoints not found [ 1407.646048][T23802] snd_dummy snd_dummy.0: control 4:57412:0:syz0:0 is already present [ 1407.674465][T23801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1407.688433][T23801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1407.708432][T23801] gfs2: gfs2 mount does not exist [ 1408.000920][T15390] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1408.011921][T15390] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1409.109922][T23805] qrtr: Invalid version 89 [ 1409.280833][T23812] syzkaller0: entered promiscuous mode [ 1409.297423][T23812] syzkaller0: entered allmulticast mode [ 1409.323241][T23811] tipc: Started in network mode [ 1409.336669][T23811] tipc: Node identity ca677df5aac3, cluster identity 4711 [ 1409.359537][T23811] tipc: Enabled bearer , priority 0 [ 1409.578298][T23810] tipc: Resetting bearer [ 1409.600131][T23810] tipc: Disabling bearer [ 1411.666153][ T5728] usb 3-1: USB disconnect, device number 72 [ 1411.739769][ T5728] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 1411.779396][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1411.779407][ T30] audit: type=1400 audit(2000000864.609:3598): avc: denied { read } for pid=23821 comm="syz.2.5003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1411.826440][T23822] netlink: 'syz.7.5002': attribute type 2 has an invalid length. [ 1411.870926][T23822] netlink: 80 bytes leftover after parsing attributes in process `syz.7.5002'. [ 1411.927318][ T30] audit: type=1400 audit(2000000864.659:3599): avc: denied { ioctl } for pid=23821 comm="syz.2.5003" path="socket:[102054]" dev="sockfs" ino=102054 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1411.982128][ T30] audit: type=1400 audit(2000000864.739:3600): avc: denied { unlink } for pid=18563 comm="syz-executor" name="file0" dev="tmpfs" ino=1453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1412.078819][ T30] audit: type=1400 audit(2000000864.799:3601): avc: denied { mount } for pid=23821 comm="syz.2.5003" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1412.162074][T15390] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1412.184283][ T30] audit: type=1400 audit(2000000864.899:3602): avc: denied { map } for pid=23830 comm="syz.7.5006" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1412.342277][T15390] usb 1-1: Using ep0 maxpacket: 16 [ 1412.359722][T15390] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1412.386331][T15390] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1412.514244][T15390] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.530112][T15390] usb 1-1: Product: syz [ 1412.535613][T15390] usb 1-1: Manufacturer: syz [ 1412.540746][T15390] usb 1-1: SerialNumber: syz [ 1413.312823][T15390] usb 1-1: config 0 descriptor?? [ 1413.330285][T15390] sr9700 1-1:0.0: probe with driver sr9700 failed with error -22 [ 1413.430836][T23849] netlink: 'syz.2.5013': attribute type 1 has an invalid length. [ 1413.441513][T23849] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5013'. [ 1413.452809][T23849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5013'. [ 1414.310784][ T30] audit: type=1400 audit(2000000867.139:3603): avc: denied { bind } for pid=23851 comm="syz.7.5014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1415.084130][T20911] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1415.103610][ T30] audit: type=1400 audit(2000000867.909:3604): avc: denied { watch } for pid=23855 comm="syz.2.5015" path="pipe:[102245]" dev="pipefs" ino=102245 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1415.169125][ T5615] usb 1-1: USB disconnect, device number 46 [ 1415.299811][ T30] audit: type=1400 audit(2000000868.129:3605): avc: denied { read } for pid=23861 comm="syz.2.5018" name="usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1415.445201][ T30] audit: type=1400 audit(2000000868.159:3606): avc: denied { open } for pid=23861 comm="syz.2.5018" path="/dev/usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1415.474106][T23863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5018'. [ 1415.590329][ T30] audit: type=1326 audit(2000000868.359:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23860 comm="syz.6.5017" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5bb459de99 code=0x0 [ 1416.955778][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1417.190100][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1417.190114][ T30] audit: type=1400 audit(2000000869.939:3611): avc: denied { getopt } for pid=23901 comm="syz.0.5024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1418.249776][T23910] SET target dimension over the limit! [ 1418.331705][ T5615] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1418.524175][ T5615] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1418.557973][ T5615] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1418.588774][ T5615] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1418.598997][ T5728] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1418.619165][ T5615] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1418.648633][ T5615] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1418.690885][ T5615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.732743][ T5615] usb 3-1: config 0 descriptor?? [ 1418.761322][ T30] audit: type=1400 audit(2000000871.589:3612): avc: denied { create } for pid=23923 comm="syz.6.5029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1418.841356][ T5728] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1418.879431][ T5728] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1418.915097][ T30] audit: type=1400 audit(2000000871.749:3613): avc: denied { write } for pid=23923 comm="syz.6.5029" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1418.937771][ T5728] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1418.964682][T23927] netlink: 'syz.7.5030': attribute type 1 has an invalid length. [ 1418.977445][ T5728] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1419.101346][ T30] audit: type=1400 audit(2000000871.769:3614): avc: denied { ioctl } for pid=23923 comm="syz.6.5029" path="socket:[102908]" dev="sockfs" ino=102908 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 1419.142858][T23927] bond1: entered promiscuous mode [ 1419.290543][ T5728] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1419.305304][T23927] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1419.324571][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1419.371760][ T5728] usb 1-1: Product: syz [ 1419.376710][ T30] audit: type=1400 audit(2000000871.839:3615): avc: denied { setopt } for pid=23907 comm="syz.2.5025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1419.408385][ T5728] usb 1-1: Manufacturer: syz [ 1419.888667][T22888] Bluetooth: hci6: unexpected event for opcode 0x2060 [ 1420.303161][ T5728] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1420.367650][T23932] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1420.401336][T23932] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1420.415225][ T30] audit: type=1400 audit(2000000871.929:3616): avc: denied { append } for pid=23907 comm="syz.2.5025" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1420.468600][T23932] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1420.517856][T23939] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5028'. [ 1420.528841][T23932] bond1: (slave ip6gre1): making interface the new active one [ 1420.539592][ T30] audit: type=1400 audit(2000000873.229:3617): avc: denied { map } for pid=23914 comm="syz.0.5028" path="socket:[102936]" dev="sockfs" ino=102936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1420.588008][T23932] ip6gre1: entered promiscuous mode [ 1420.619052][T23932] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 1421.020356][ T30] audit: type=1400 audit(2000000873.849:3618): avc: denied { read } for pid=23942 comm="syz.7.5034" path="socket:[102982]" dev="sockfs" ino=102982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1421.125099][ T5728] usb 1-1: USB disconnect, device number 47 [ 1421.308046][ T30] audit: type=1400 audit(2000000874.140:3619): avc: denied { mounton } for pid=23953 comm="syz.3.5036" path="/261/file0" dev="tmpfs" ino=1498 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1421.721164][ T5615] hdpvr 3-1:0.0: unexpected answer of status request, len -71 [ 1421.765240][ T5615] hdpvr 3-1:0.0: device init failed [ 1421.794714][ T5615] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 1421.865295][ T5615] usb 3-1: USB disconnect, device number 73 [ 1424.526072][T23978] input: syz1 as /devices/virtual/input/input227 [ 1424.557517][ T30] audit: type=1400 audit(2000000877.390:3620): avc: denied { getopt } for pid=23985 comm="syz.6.5045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1424.788039][ T30] audit: type=1400 audit(2000000877.620:3621): avc: denied { create } for pid=23983 comm="syz.0.5044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1426.714324][T24018] lo speed is unknown, defaulting to 1000 [ 1428.126801][T24026] input: syz1 as /devices/virtual/input/input230 [ 1428.343689][T24029] netlink: 'syz.3.5054': attribute type 10 has an invalid length. [ 1428.541196][ T30] audit: type=1400 audit(2000000881.370:3622): avc: denied { create } for pid=24035 comm="syz.0.5057" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 1428.702336][T24029] team0: Device ipvlan0 failed to register rx_handler [ 1428.713283][ T30] audit: type=1400 audit(2000000881.370:3623): avc: denied { create } for pid=24035 comm="syz.0.5057" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 1429.260006][ T30] audit: type=1400 audit(2000000882.090:3624): avc: denied { write } for pid=24042 comm="syz.2.5058" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1429.307626][T24043] SELinux: failed to load policy [ 1429.455925][ T30] audit: type=1400 audit(2000000882.090:3625): avc: denied { open } for pid=24042 comm="syz.2.5058" path="/dev/mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1429.576357][T22888] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1429.616725][ T30] audit: type=1400 audit(2000000882.130:3626): avc: denied { ioctl } for pid=24042 comm="syz.2.5058" path="/dev/mtd0" dev="devtmpfs" ino=704 ioctlcmd=0x4d18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1429.771295][ T30] audit: type=1400 audit(2000000882.140:3627): avc: denied { load_policy } for pid=24042 comm="syz.2.5058" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1430.086733][T24065] snd_dummy snd_dummy.0: control 4:57412:0:syz0:0 is already present [ 1430.168676][T24067] FAULT_INJECTION: forcing a failure. [ 1430.168676][T24067] name failslab, interval 1, probability 0, space 0, times 0 [ 1430.273959][T24071] snd_dummy snd_dummy.0: control 4:57412:0:syz0:0 is already present [ 1430.381300][T24067] CPU: 0 UID: 0 PID: 24067 Comm: syz.3.5064 Tainted: G L syzkaller #0 PREEMPT(full) [ 1430.381320][T24067] Tainted: [L]=SOFTLOCKUP [ 1430.381323][T24067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1430.381330][T24067] Call Trace: [ 1430.381334][T24067] [ 1430.381339][T24067] dump_stack_lvl+0x100/0x190 [ 1430.381358][T24067] should_fail_ex.cold+0x5/0xa [ 1430.381372][T24067] should_failslab+0xc2/0x120 [ 1430.381386][T24067] __kmalloc_noprof+0xfc/0x820 [ 1430.381399][T24067] ? rcu_is_watching+0x12/0xc0 [ 1430.381415][T24067] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1430.381430][T24067] tomoyo_realpath_from_path+0xb6/0x690 [ 1430.381443][T24067] tomoyo_path_number_perm+0x23c/0x580 [ 1430.381459][T24067] ? tomoyo_path_number_perm+0x22e/0x580 [ 1430.381475][T24067] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1430.381503][T24067] ? find_held_lock+0x2b/0x80 [ 1430.381520][T24067] ? __fget_files+0x215/0x3d0 [ 1430.381532][T24067] ? hook_file_ioctl_common+0x140/0x440 [ 1430.381544][T24067] ? __fget_files+0x215/0x3d0 [ 1430.381557][T24067] ? __fget_files+0x21f/0x3d0 [ 1430.381570][T24067] security_file_ioctl+0xd3/0x230 [ 1430.381587][T24067] __x64_sys_ioctl+0xb7/0x210 [ 1430.381604][T24067] do_syscall_64+0x115/0x870 [ 1430.381615][T24067] ? clear_bhb_loop+0x40/0x90 [ 1430.381629][T24067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.381640][T24067] RIP: 0033:0x7fcf35b9de99 [ 1430.381649][T24067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1430.381660][T24067] RSP: 002b:00007fcf36b14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1430.381671][T24067] RAX: ffffffffffffffda RBX: 00007fcf35e25fa0 RCX: 00007fcf35b9de99 [ 1430.381678][T24067] RDX: 0000200000000000 RSI: 0000000000008b19 RDI: 0000000000000003 [ 1430.381685][T24067] RBP: 00007fcf36b14090 R08: 0000000000000000 R09: 0000000000000000 [ 1430.381691][T24067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1430.381697][T24067] R13: 00007fcf35e26038 R14: 00007fcf35e25fa0 R15: 00007ffe36304de8 [ 1430.381711][T24067] [ 1430.604023][T24067] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1430.742509][ T30] audit: type=1400 audit(2000000883.490:3628): avc: denied { block_suspend } for pid=24074 comm="syz.2.5067" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1430.964040][T24080] Bluetooth: MGMT ver 1.23 [ 1431.561452][ T30] audit: type=1400 audit(2000000883.800:3629): avc: denied { bind } for pid=24076 comm="syz.3.5068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1432.570792][ T30] audit: type=1400 audit(2000000883.800:3630): avc: denied { write } for pid=24076 comm="syz.3.5068" path="socket:[103802]" dev="sockfs" ino=103802 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1434.023272][ T30] audit: type=1400 audit(2000000884.700:3631): avc: denied { sqpoll } for pid=24074 comm="syz.2.5067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1434.209150][T24098] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5074'. [ 1434.243031][T22888] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1434.251041][ T5615] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1434.403979][ T5615] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1434.423895][ T30] audit: type=1400 audit(2000000887.260:3632): avc: denied { read } for pid=24100 comm="syz.7.5075" name="vhost-net" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1434.452828][ T5615] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1434.596681][ T5615] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1434.789073][ T5615] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1434.803190][ T30] audit: type=1400 audit(2000000887.260:3633): avc: denied { open } for pid=24100 comm="syz.7.5075" path="/dev/vhost-net" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1434.982056][ T5615] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1435.001295][ T5615] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1435.155838][ T30] audit: type=1400 audit(2000000887.300:3634): avc: denied { ioctl } for pid=24100 comm="syz.7.5075" path="/dev/vhost-net" dev="devtmpfs" ino=1273 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1435.184555][ T5615] usb 1-1: Product: syz [ 1435.191654][ T5615] usb 1-1: Manufacturer: syz [ 1435.203142][ T5615] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1435.235796][ T30] audit: type=1400 audit(2000000887.580:3635): avc: denied { append } for pid=24100 comm="syz.7.5075" name="sg0" dev="devtmpfs" ino=816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1435.377502][ T30] audit: type=1400 audit(2000000888.030:3636): avc: denied { connect } for pid=24113 comm="syz.2.5078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1435.492922][ T30] audit: type=1400 audit(2000000888.030:3637): avc: denied { write } for pid=24113 comm="syz.2.5078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1435.520235][T24087] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5069'. [ 1435.602143][T24124] snd_dummy snd_dummy.0: control 4:57412:0:syz0:0 is already present [ 1435.747587][T24128] syzkaller0: entered promiscuous mode [ 1435.768955][T24128] syzkaller0: entered allmulticast mode [ 1436.044406][T24130] syzkaller0: entered promiscuous mode [ 1436.073295][T14086] usb 1-1: USB disconnect, device number 48 [ 1436.205497][T24130] syzkaller0: entered allmulticast mode [ 1436.946557][ T30] audit: type=1400 audit(2000000889.780:3638): avc: denied { bind } for pid=24137 comm="syz.6.5085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1437.134376][T22888] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1437.262548][ T30] audit: type=1400 audit(2000000890.090:3639): avc: denied { create } for pid=24145 comm="syz.7.5088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1437.364362][T24148] SELinux: syz.7.5088 (24148) wrote to user. This is no longer supported. [ 1437.378744][ T30] audit: type=1400 audit(2000000890.140:3640): avc: denied { read } for pid=24145 comm="syz.7.5088" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1437.590022][ T30] audit: type=1400 audit(2000000890.140:3641): avc: denied { open } for pid=24145 comm="syz.7.5088" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1437.686828][ T30] audit: type=1400 audit(2000000890.140:3642): avc: denied { ioctl } for pid=24145 comm="syz.7.5088" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x460f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1438.077425][T24146] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1438.095083][T24146] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1438.132712][T24146] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1438.196967][T24159] nicvf0: entered promiscuous mode [ 1439.425094][T24188] snd_dummy snd_dummy.0: control 4:57412:0:syz0:0 is already present [ 1439.502652][T24158] snd_dummy snd_dummy.0: control 4:57412:0:syz0:0 is already present [ 1439.750936][T22888] Bluetooth: hci6: command 0x0406 tx timeout [ 1440.152067][T16129] Bluetooth: hci7: command 0x0405 tx timeout [ 1440.158562][T22888] Bluetooth: hci0: command 0x0c1a tx timeout [ 1440.353410][T24213] netlink: 'syz.0.5105': attribute type 10 has an invalid length. [ 1440.385084][T24213] team0: Device ipvlan0 failed to register rx_handler [ 1443.077229][T22888] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 1443.514046][ T30] audit: type=1400 audit(2000000896.351:3643): avc: denied { write } for pid=24232 comm="syz.7.5114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1443.677058][T24238] /dev/nullb0: Can't open blockdev [ 1443.814187][T14086] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1443.852922][ T30] audit: type=1400 audit(2000000896.691:3644): avc: denied { ioctl } for pid=24232 comm="syz.7.5114" path="socket:[104930]" dev="sockfs" ino=104930 ioctlcmd=0x5410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1444.031189][T14086] usb 3-1: Using ep0 maxpacket: 16 [ 1444.051498][T14086] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1444.072877][T14086] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1444.082756][T14086] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.102428][T14086] usb 3-1: Product: syz [ 1444.111939][T14086] usb 3-1: Manufacturer: syz [ 1444.121706][T14086] usb 3-1: SerialNumber: syz [ 1444.138240][T14086] usb 3-1: config 0 descriptor?? [ 1444.156685][T14086] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1444.174943][T14086] usb 3-1: Detected FT232R [ 1444.290529][ T5728] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1444.378294][T14086] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1444.439634][ T30] audit: type=1400 audit(2000000897.271:3645): avc: denied { nlmsg_read } for pid=24250 comm="syz.7.5117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1444.466613][ T5728] usb 1-1: Using ep0 maxpacket: 32 [ 1444.499418][ T5728] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1444.522020][T14086] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1444.542244][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.563690][T14086] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 1444.721362][ T5728] usb 1-1: Product: syz [ 1444.904491][T14086] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1444.922237][ T5728] usb 1-1: Manufacturer: syz [ 1444.927486][T24258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5118'. [ 1444.942269][ T5728] usb 1-1: SerialNumber: syz [ 1444.965974][T14086] usb 3-1: USB disconnect, device number 74 [ 1444.979282][T24258] netlink: 300 bytes leftover after parsing attributes in process `syz.2.5118'. [ 1444.989504][ T5728] usb 1-1: config 0 descriptor?? [ 1445.054674][T24261] fuse: Unknown parameter 'ÿÿÿÿ0x0000000000000005' [ 1445.068871][ T5728] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1445.095709][T14086] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1445.145310][T14086] ftdi_sio 3-1:0.0: device disconnected [ 1446.276997][ T5728] gspca_topro: reg_w err -110 [ 1446.320508][ T5728] gspca_topro: Sensor soi763a [ 1447.285111][ T9858] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1447.373407][T14086] usb 1-1: USB disconnect, device number 49 [ 1447.465558][T24270] netlink: 'syz.6.5122': attribute type 10 has an invalid length. [ 1447.587283][T24270] team0: Device ipvlan0 failed to register rx_handler [ 1447.625340][ T30] audit: type=1400 audit(2000000900.461:3646): avc: denied { lock } for pid=24274 comm="syz.7.5123" path="socket:[105169]" dev="sockfs" ino=105169 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1447.697399][T24271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5119'. [ 1447.848183][ T30] audit: type=1400 audit(2000000900.661:3647): avc: denied { lock } for pid=24274 comm="syz.7.5123" path="socket:[105188]" dev="sockfs" ino=105188 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1447.905609][T24278] binder: 24265:24278 ioctl 5437 0 returned -22 [ 1448.025518][ T30] audit: type=1400 audit(2000000900.741:3648): avc: denied { ioctl } for pid=24265 comm="syz.3.5119" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1448.089258][T24296] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5128'. [ 1448.142516][ T5721] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1448.286003][ T30] audit: type=1400 audit(2000000901.121:3649): avc: denied { write } for pid=24265 comm="syz.3.5119" name="sg0" dev="devtmpfs" ino=816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1448.353460][ T5721] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1448.379690][T24302] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5128'. [ 1448.436815][ T5721] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1448.478684][ T30] audit: type=1400 audit(2000000901.251:3650): avc: denied { read } for pid=5272 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1448.512735][ T5721] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1449.326752][ T5721] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1449.812167][ T30] audit: type=1400 audit(2000000901.251:3651): avc: denied { search } for pid=5272 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1449.858511][ T5721] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1449.924507][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1449.960220][ T5721] usb 3-1: Product: syz [ 1449.966830][ T30] audit: type=1400 audit(2000000901.251:3652): avc: denied { search } for pid=5272 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1449.997297][ T5721] usb 3-1: Manufacturer: syz [ 1450.034731][ T5721] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1450.069387][ T30] audit: type=1400 audit(2000000901.251:3653): avc: denied { search } for pid=5272 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1450.132121][ T30] audit: type=1400 audit(2000000901.251:3654): avc: denied { read } for pid=5272 comm="dhcpcd" name="n67" dev="tmpfs" ino=19440 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1450.181711][ T30] audit: type=1400 audit(2000000901.251:3655): avc: denied { open } for pid=5272 comm="dhcpcd" path="/run/udev/data/n67" dev="tmpfs" ino=19440 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1450.242100][ T30] audit: type=1400 audit(2000000901.251:3656): avc: denied { getattr } for pid=5272 comm="dhcpcd" path="/run/udev/data/n67" dev="tmpfs" ino=19440 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1450.311780][T24311] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5124'. [ 1450.350188][ T187] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1450.497136][T22888] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1450.513201][ T187] usb 1-1: Using ep0 maxpacket: 16 [ 1450.530153][ T187] usb 1-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1450.607622][ T187] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1450.632388][ T30] audit: type=1400 audit(2000000903.461:3657): avc: denied { set_context_mgr } for pid=24320 comm="syz.6.5135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1450.664577][ T187] usb 1-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00 [ 1450.697527][ T5721] usb 3-1: USB disconnect, device number 75 [ 1450.712817][ T187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.736263][T24321] netlink: 'syz.6.5135': attribute type 5 has an invalid length. [ 1450.745219][ T30] audit: type=1400 audit(2000000903.521:3658): avc: denied { map } for pid=24320 comm="syz.6.5135" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1450.774047][ T187] usb 1-1: config 0 descriptor?? [ 1450.840407][ T30] audit: type=1326 audit(2000000903.561:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24322 comm="syz.7.5136" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f66f7b9de99 code=0x0 [ 1450.933222][ T30] audit: type=1400 audit(2000000903.571:3660): avc: denied { call } for pid=24320 comm="syz.6.5135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1451.019545][T24309] snd_dummy snd_dummy.0: control 4:57412:0:syz0:0 is already present [ 1451.201922][ T187] asus 0003:0B05:1807.005A: unknown main item tag 0x2 [ 1451.215407][ T187] asus 0003:0B05:1807.005A: unknown main item tag 0x6 [ 1451.226231][ T187] asus 0003:0B05:1807.005A: unknown main item tag 0x0 [ 1451.242919][ T187] asus 0003:0B05:1807.005A: unknown main item tag 0x1 [ 1451.274431][ T187] asus 0003:0B05:1807.005A: unknown main item tag 0x0 [ 1451.294692][ T187] asus 0003:0B05:1807.005A: unknown main item tag 0x0 [ 1451.310370][ T187] asus 0003:0B05:1807.005A: unknown main item tag 0x3 [ 1451.331943][ T187] asus 0003:0B05:1807.005A: hidraw0: USB HID v0.09 Device [HID 0b05:1807] on usb-dummy_hcd.0-1/input0 [ 1452.028690][T24347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.062317][T24347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.141928][ T187] usb 1-1: USB disconnect, device number 50 [ 1452.193180][T24349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.270748][T24349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.572153][T24355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5144'. [ 1452.584432][T24355] netlink: 'syz.2.5144': attribute type 10 has an invalid length. [ 1452.595480][T24355] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5144'. [ 1452.605392][T24355] dummy0: entered promiscuous mode [ 1452.711144][T24357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5145'. [ 1452.733568][T24357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5145'. [ 1452.774574][T16129] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1453.039510][T24366] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1454.070124][T16129] Bluetooth: hci0: command 0x0c1a tx timeout [ 1454.910620][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1454.910631][ T30] audit: type=1400 audit(2000000907.751:3669): avc: denied { bind } for pid=24374 comm="syz.6.5153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1455.469269][ T30] audit: type=1400 audit(2000000908.241:3670): avc: denied { setopt } for pid=24374 comm="syz.6.5153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1455.863565][T16129] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1456.268765][ T30] audit: type=1400 audit(2000000909.101:3671): avc: denied { read write } for pid=24394 comm="syz.0.5160" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1456.409897][ T30] audit: type=1400 audit(2000000909.131:3672): avc: denied { open } for pid=24394 comm="syz.0.5160" path="/255/file0/file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1456.460110][T24411] hpfs: Bad magic ... probably not HPFS [ 1456.631568][ T5721] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1456.773225][ T5721] usb 3-1: device descriptor read/64, error -71 [ 1457.020772][ T5721] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1457.232043][ T5721] usb 3-1: device descriptor read/64, error -71 [ 1457.243469][T24415] snd_dummy snd_dummy.0: control 4:57412:0:syz0:0 is already present [ 1457.276729][T16129] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1457.432186][ T5721] usb usb3-port1: attempt power cycle [ 1457.505297][T24445] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000006' [ 1457.521619][ T30] audit: type=1326 audit(2000000910.362:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24444 comm="syz.0.5170" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f801039de99 code=0x0 [ 1457.581526][ T30] audit: type=1400 audit(2000000910.422:3674): avc: denied { execute } for pid=24444 comm="syz.0.5170" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1457.779474][ T5721] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1458.699837][ T5721] usb 3-1: device descriptor read/8, error -71 [ 1459.129430][ T5721] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1459.649612][T24450] input: syz1 as /devices/virtual/input/input234 [ 1459.685970][T24452] netlink: 'syz.0.5175': attribute type 10 has an invalid length. [ 1459.698676][ T30] audit: type=1400 audit(2000000912.532:3675): avc: denied { listen } for pid=24451 comm="syz.0.5175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1460.006552][ T5721] usb 3-1: device not accepting address 79, error -71 [ 1460.946797][ T5721] usb usb3-port1: unable to enumerate USB device [ 1461.076313][ T30] audit: type=1400 audit(2000000913.912:3676): avc: denied { mount } for pid=24465 comm="syz.0.5179" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1462.020832][T24479] can0: slcan on ttyS3. [ 1462.039817][T24479] can0 (unregistered): slcan off ttyS3. [ 1462.297118][T16129] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1462.782730][T24497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1462.985768][T24501] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5186'. [ 1463.024042][ T30] audit: type=1400 audit(2000000915.862:3677): avc: denied { create } for pid=24500 comm="syz.6.5186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1463.945424][T24507] snd_dummy snd_dummy.0: control 4:57412:0:syz0:0 is already present [ 1464.005030][T24467] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1464.113125][ T30] audit: type=1400 audit(2000000916.952:3678): avc: denied { unmount } for pid=18902 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1464.233027][T24517] lo speed is unknown, defaulting to 1000 [ 1464.440844][T16129] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1464.963073][T24530] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1464.981588][ T30] audit: type=1400 audit(2000000917.802:3679): avc: denied { mounton } for pid=24528 comm="syz.2.5195" path="/424/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1465.180333][ T30] audit: type=1400 audit(2000000918.022:3680): avc: denied { write } for pid=24533 comm="syz.3.5197" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1466.339326][T24539] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1467.557145][T24548] netlink: 'syz.6.5203': attribute type 10 has an invalid length. [ 1467.569104][T24540] 9pnet_virtio: no channels available for device syz [ 1467.607976][T24548] team0: Device ipvlan0 failed to register rx_handler [ 1468.734374][T24565] netlink: 124 bytes leftover after parsing attributes in process `syz.6.5210'. [ 1469.608036][T24568] input: syz1 as /devices/virtual/input/input238 [ 1469.683109][T24556] netlink: 'syz.0.5206': attribute type 1 has an invalid length. [ 1469.691863][ T30] audit: type=1400 audit(2000000922.522:3681): avc: denied { getopt } for pid=24555 comm="syz.0.5206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1469.904191][ T30] audit: type=1400 audit(2000000922.742:3682): avc: denied { bind } for pid=24564 comm="syz.6.5210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1469.958831][ T5728] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1469.990205][ T30] audit: type=1800 audit(2000000922.822:3683): pid=24570 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.5210" name="file0" dev="overlay" ino=1684 res=0 errno=0 [ 1470.200154][ T5728] usb 1-1: Using ep0 maxpacket: 8 [ 1470.208458][ T5728] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1470.223679][ T5721] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1470.248494][ T5728] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1470.289139][ T5728] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 40992, setting to 1024 [ 1470.310931][ T5728] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1470.344947][ T5728] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1470.382074][ T30] audit: type=1326 audit(2000000923.222:3684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24581 comm="syz.6.5215" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5bb459de99 code=0x0 [ 1470.408682][ T5728] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1470.418940][ T5721] usb 3-1: Using ep0 maxpacket: 32 [ 1470.424178][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.435469][ T5721] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1470.575556][ T5721] usb 3-1: config 0 has no interface number 0 [ 1470.613941][ T5721] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1470.630167][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.657754][ T5721] usb 3-1: Product: syz [ 1470.674898][ T5721] usb 3-1: Manufacturer: syz [ 1470.690309][ T5721] usb 3-1: SerialNumber: syz [ 1470.707723][ T5721] usb 3-1: config 0 descriptor?? [ 1470.747028][ T5721] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1470.762695][ T5728] usb 1-1: usb_control_msg returned -71 [ 1470.792168][ T5728] usbtmc 1-1:16.0: can't read capabilities [ 1470.835024][ T5728] usb 1-1: USB disconnect, device number 51 [ 1470.960130][ T5721] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1471.001885][ T5721] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1471.236863][ T30] audit: type=1800 audit(2000000924.002:3685): pid=24596 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.5219" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1472.124467][ T30] audit: type=1400 audit(2000000924.922:3686): avc: denied { read } for pid=24572 comm="syz.2.5212" path="socket:[107468]" dev="sockfs" ino=107468 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1472.312023][ T30] audit: type=1400 audit(2000000925.072:3687): avc: denied { map } for pid=24594 comm="syz.0.5219" path="/proc/856/task/857/oom_adj" dev="proc" ino=107504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1472.375247][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1472.383768][ T5728] usb 3-1: USB disconnect, device number 80 [ 1472.408927][ T5728] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1472.436949][ T30] audit: type=1400 audit(2000000925.072:3688): avc: denied { execute } for pid=24594 comm="syz.0.5219" path="/proc/856/task/857/oom_adj" dev="proc" ino=107504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1472.513551][ T5728] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1472.570685][ T5728] quatech2 3-1:0.51: device disconnected [ 1472.885237][ T30] audit: type=1400 audit(2000000925.722:3689): avc: denied { create } for pid=24621 comm="syz.0.5228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1473.924157][T24627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1473.936781][ T30] audit: type=1400 audit(2000000926.762:3690): avc: denied { append } for pid=24625 comm="syz.3.5224" name="cec3" dev="devtmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1474.037012][T24633] netlink: 'syz.2.5230': attribute type 1 has an invalid length. [ 1474.934307][T24641] input: syz1 as /devices/virtual/input/input241 [ 1474.962408][T24641] input: failed to attach handler leds to device input241, error: -6 [ 1474.988400][T24633] bond3: entered promiscuous mode [ 1475.026240][T24633] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1476.055454][T24651] input: syz1 as /devices/virtual/input/input242 [ 1477.443053][T24664] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5238'. [ 1478.417863][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1478.526193][T24674] netlink: 'syz.2.5243': attribute type 10 has an invalid length. [ 1479.177352][T24674] team0: Device ipvlan0 failed to register rx_handler [ 1479.431877][T24676] input: syz1 as /devices/virtual/input/input244 [ 1479.736534][T24695] snd_dummy snd_dummy.0: control 4:57412:0:syz0:0 is already present [ 1479.760506][T24685] input: syz0 as /devices/virtual/input/input245 [ 1479.818857][ T5615] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 1479.939996][T24701] lo speed is unknown, defaulting to 1000 [ 1479.980625][ T5615] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1479.997096][ T5615] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 96, setting to 64 [ 1480.011050][ T5615] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1480.028917][ T5615] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1480.039473][ T5615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1480.049739][ T5615] usb 3-1: SerialNumber: syz [ 1480.061576][T24686] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1480.068855][ T5721] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1480.084877][ T5615] hub 3-1:1.0: bad descriptor, ignoring hub [ 1480.101314][ T5615] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1480.238813][ T5721] usb 1-1: Using ep0 maxpacket: 32 [ 1480.247111][ T5721] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1480.256118][ T5721] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 1480.265146][ T5721] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 1480.273991][ T5721] usb 1-1: config 14 has no interface number 0 [ 1480.286034][ T5721] usb 1-1: config 14 has no interface number 1 [ 1480.295861][T24686] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1480.306382][ T5721] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1480.318402][T23888] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1480.353561][ T5721] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1480.405922][ T5721] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1480.435380][ T5721] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1480.457568][ T5721] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 1480.481795][ T5721] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1480.507893][ T5721] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1480.551979][ T5721] usb 1-1: config 14 interface 57 has no altsetting 0 [ 1480.560387][ T30] audit: type=1326 audit(2000000933.373:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24707 comm="syz.6.5251" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5bb459de99 code=0x0 [ 1480.591814][ T5721] usb 1-1: config 14 interface 228 has no altsetting 0 [ 1480.612592][ T5721] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1480.638307][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.664959][ T5721] usb 1-1: Product: syz [ 1480.679892][ T5721] usb 1-1: Manufacturer: syz [ 1480.690219][ T5721] usb 1-1: SerialNumber: syz [ 1480.809852][ T5615] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1480.890575][T24714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1481.001274][T24714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1481.009923][ T30] audit: type=1400 audit(2000000933.853:3692): avc: denied { read } for pid=24717 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1481.051529][ T30] audit: type=1400 audit(2000000933.873:3693): avc: denied { read open } for pid=24717 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1481.079478][ T5615] usb 3-1: USB disconnect, device number 81 [ 1481.104092][ T5615] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 1481.144545][ T5721] legousbtower 1-1:14.57: interrupt endpoints not found [ 1481.160357][ T30] audit: type=1400 audit(2000000933.873:3694): avc: denied { getattr } for pid=24717 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1481.449945][ T30] audit: type=1400 audit(2000000934.293:3695): avc: denied { write } for pid=24716 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1481.505401][T24728] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5252'. [ 1481.555225][ T30] audit: type=1400 audit(2000000934.313:3696): avc: denied { add_name } for pid=24716 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1481.583377][ T5721] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1482.386514][ T5721] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1482.415418][ T30] audit: type=1400 audit(2000000934.313:3697): avc: denied { create } for pid=24716 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1482.558688][ T30] audit: type=1400 audit(2000000934.313:3698): avc: denied { write } for pid=24716 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.usb0.link" dev="tmpfs" ino=19821 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1483.464197][T24743] input: syz1 as /devices/virtual/input/input246 [ 1483.502198][ T5721] usb 1-1: USB disconnect, device number 52 [ 1483.553417][ T30] audit: type=1400 audit(2000000934.313:3699): avc: denied { append } for pid=24716 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" dev="tmpfs" ino=19821 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1483.622921][ T5721] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 1483.743040][ T30] audit: type=1400 audit(2000000935.253:3700): avc: denied { write } for pid=24733 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1483.813231][T24759] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5258'. [ 1484.356667][T24786] netlink: 'syz.6.5265': attribute type 11 has an invalid length. [ 1484.616992][T24790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1487.402486][T24799] input: syz1 as /devices/virtual/input/input247 [ 1487.473852][T24809] syzkaller0: entered promiscuous mode [ 1487.546612][T24809] syzkaller0: entered allmulticast mode [ 1487.587634][T24790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1487.883995][T24816] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5273'. [ 1488.110495][T24828] Bluetooth: hci1: Frame reassembly failed (-84) [ 1489.174335][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1489.174346][ T30] audit: type=1400 audit(2000000942.013:3708): avc: denied { cmd } for pid=24838 comm="syz.6.5281" path="/dev/ublk-control" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 1489.523090][T24847] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5282'. [ 1489.586163][T24844] netlink: 260 bytes leftover after parsing attributes in process `syz.6.5282'. [ 1489.628222][T14086] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1489.734184][T24859] comedi comedi2: das16m1: I/O base address not correctly aligned [ 1489.788695][T14086] usb 3-1: Using ep0 maxpacket: 16 [ 1489.799607][T14086] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1489.807900][T14086] usb 3-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 1489.821533][T14086] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.834750][T14086] usb 3-1: config 0 descriptor?? [ 1490.012748][T24866] comedi comedi2: das16m1: I/O base address not correctly aligned [ 1490.027568][T24866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=24866 comm=syz.3.5290 [ 1490.151631][T22888] Bluetooth: hci1: command 0xfc11 tx timeout [ 1490.160443][T16129] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1490.235025][ T30] audit: type=1400 audit(2000000943.073:3709): avc: denied { name_connect } for pid=24869 comm="syz.0.5292" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1490.264367][T14086] logitech 0003:046D:C295.005B: unknown main item tag 0x0 [ 1490.276250][T14086] logitech 0003:046D:C295.005B: unknown main item tag 0x0 [ 1490.288291][T14086] logitech 0003:046D:C295.005B: unknown main item tag 0x0 [ 1490.297421][T14086] logitech 0003:046D:C295.005B: unknown main item tag 0x0 [ 1490.305831][T14086] logitech 0003:046D:C295.005B: unknown main item tag 0x0 [ 1490.337189][T14086] logitech 0003:046D:C295.005B: unknown main item tag 0x0 [ 1490.347774][T14086] logitech 0003:046D:C295.005B: unknown main item tag 0x0 [ 1490.356655][T14086] logitech 0003:046D:C295.005B: unknown main item tag 0x0 [ 1490.365747][T14086] logitech 0003:046D:C295.005B: unknown main item tag 0x0 [ 1490.376487][T14086] logitech 0003:046D:C295.005B: unknown main item tag 0x0 [ 1490.390521][T14086] logitech 0003:046D:C295.005B: hidraw0: USB HID v0.83 Device [HID 046d:c295] on usb-dummy_hcd.2-1/input0 [ 1490.413400][T14086] logitech 0003:046D:C295.005B: no inputs found [ 1490.451460][T24874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1490.469699][T14086] usb 3-1: USB disconnect, device number 82 [ 1490.510185][T24874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1490.618658][ T30] audit: type=1400 audit(2000000943.463:3710): avc: denied { remount } for pid=24877 comm="syz.7.5294" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1491.146595][T24893] FAULT_INJECTION: forcing a failure. [ 1491.146595][T24893] name failslab, interval 1, probability 0, space 0, times 0 [ 1491.160056][T24893] CPU: 0 UID: 0 PID: 24893 Comm: syz.0.5299 Tainted: G L syzkaller #0 PREEMPT(full) [ 1491.160075][T24893] Tainted: [L]=SOFTLOCKUP [ 1491.160079][T24893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1491.160086][T24893] Call Trace: [ 1491.160090][T24893] [ 1491.160095][T24893] dump_stack_lvl+0x100/0x190 [ 1491.160112][T24893] should_fail_ex.cold+0x5/0xa [ 1491.160126][T24893] should_failslab+0xc2/0x120 [ 1491.160141][T24893] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1491.160153][T24893] ? touch_atime+0xa5/0x760 [ 1491.160168][T24893] ? vm_area_alloc+0x1f/0x160 [ 1491.160186][T24893] vm_area_alloc+0x1f/0x160 [ 1491.160202][T24893] __mmap_region+0x1033/0x2db0 [ 1491.160215][T24893] ? __pfx___mmap_region+0x10/0x10 [ 1491.160225][T24893] ? __pfx___might_resched+0x10/0x10 [ 1491.160241][T24893] ? down_write+0x146/0x1f0 [ 1491.160258][T24893] ? process_measurement+0x1f4/0x2350 [ 1491.160272][T24893] ? find_held_lock+0x2b/0x80 [ 1491.160288][T24893] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1491.160306][T24893] ? __lock_acquire+0x49f/0x1a40 [ 1491.160326][T24893] ? find_held_lock+0x2b/0x80 [ 1491.160341][T24893] ? is_bpf_text_address+0x8a/0x1a0 [ 1491.160376][T24893] mmap_region+0x35d/0x620 [ 1491.160389][T24893] ? __pfx_mmap_region+0x10/0x10 [ 1491.160400][T24893] ? cap_capable+0x107/0x430 [ 1491.160414][T24893] ? bpf_lsm_capable+0x9/0x10 [ 1491.160425][T24893] ? security_capable+0x80/0x260 [ 1491.160440][T24893] do_mmap+0xc63/0x12f0 [ 1491.160457][T24893] ? __pfx_do_mmap+0x10/0x10 [ 1491.160471][T24893] ? __pfx_down_write_killable+0x10/0x10 [ 1491.160487][T24893] vm_mmap_pgoff+0x29e/0x470 [ 1491.160503][T24893] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1491.160515][T24893] ? __fget_files+0x215/0x3d0 [ 1491.160529][T24893] ? __fget_files+0x21f/0x3d0 [ 1491.160542][T24893] ksys_mmap_pgoff+0x3cb/0x610 [ 1491.160557][T24893] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1491.160569][T24893] ? fput+0x79/0x100 [ 1491.160582][T24893] ? ksys_write+0x1ac/0x250 [ 1491.160598][T24893] ? __pfx_ksys_write+0x10/0x10 [ 1491.160615][T24893] __x64_sys_mmap+0x125/0x190 [ 1491.160632][T24893] do_syscall_64+0x115/0x870 [ 1491.160643][T24893] ? clear_bhb_loop+0x40/0x90 [ 1491.160657][T24893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1491.160668][T24893] RIP: 0033:0x7f801039de99 [ 1491.160678][T24893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1491.160689][T24893] RSP: 002b:00007f80111c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1491.160700][T24893] RAX: ffffffffffffffda RBX: 00007f8010625fa0 RCX: 00007f801039de99 [ 1491.160707][T24893] RDX: 000000000000000b RSI: 0000000000400000 RDI: 0000200000200000 [ 1491.160713][T24893] RBP: 00007f80111c1090 R08: 0000000000000008 R09: 0000000000000000 [ 1491.160720][T24893] R10: 0000000000002012 R11: 0000000000000246 R12: 0000000000000001 [ 1491.160726][T24893] R13: 00007f8010626038 R14: 00007f8010625fa0 R15: 00007fff521ab238 [ 1491.160740][T24893] [ 1491.532495][T24895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5300'. [ 1491.567760][T24902] netlink: 'syz.3.5302': attribute type 4 has an invalid length. [ 1491.581048][ T30] audit: type=1400 audit(2000000944.403:3711): avc: denied { accept } for pid=24896 comm="syz.3.5302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1492.469070][ T5615] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1493.591862][ T5615] usb 1-1: Using ep0 maxpacket: 8 [ 1493.602520][ T5615] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1493.613132][ T5615] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1494.554762][ T5615] usb 1-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 1494.731170][ T5615] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.778881][T24910] FAULT_INJECTION: forcing a failure. [ 1494.778881][T24910] name failslab, interval 1, probability 0, space 0, times 0 [ 1494.804809][ T5615] usb 1-1: Product: syz [ 1494.898589][ T30] audit: type=1400 audit(2000000947.734:3712): avc: denied { setattr } for pid=24911 comm="syz.0.5307" name="cuse" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 1494.926355][ T5615] usb 1-1: Manufacturer: syz [ 1495.725608][ T5615] usb 1-1: SerialNumber: syz [ 1495.740713][T24910] CPU: 0 UID: 0 PID: 24910 Comm: syz.2.5305 Tainted: G L syzkaller #0 PREEMPT(full) [ 1495.740732][T24910] Tainted: [L]=SOFTLOCKUP [ 1495.740736][T24910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1495.740743][T24910] Call Trace: [ 1495.740747][T24910] [ 1495.740752][T24910] dump_stack_lvl+0x100/0x190 [ 1495.740770][T24910] should_fail_ex.cold+0x5/0xa [ 1495.740784][T24910] should_failslab+0xc2/0x120 [ 1495.740799][T24910] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1495.740812][T24910] ? __alloc_skb+0x140/0x710 [ 1495.740827][T24910] __alloc_skb+0x140/0x710 [ 1495.740839][T24910] ? __alloc_skb+0x5b7/0x710 [ 1495.740850][T24910] ? __pfx___alloc_skb+0x10/0x10 [ 1495.740863][T24910] ? __nla_parse+0x40/0x60 [ 1495.740876][T24910] nldev_stat_set_doit+0x3b3/0x10f0 [ 1495.740894][T24910] ? __lock_acquire+0x49f/0x1a40 [ 1495.740909][T24910] ? __pfx_nldev_stat_set_doit+0x10/0x10 [ 1495.740962][T24910] ? rcu_is_watching+0x12/0xc0 [ 1495.740978][T24910] ? cap_capable+0x107/0x430 [ 1495.740999][T24910] ? bpf_lsm_capable+0x9/0x10 [ 1495.741011][T24910] ? security_capable+0x80/0x260 [ 1495.741025][T24910] ? ns_capable+0xd2/0xf0 [ 1495.741037][T24910] ? __pfx_nldev_stat_set_doit+0x10/0x10 [ 1495.741054][T24910] rdma_nl_rcv_msg+0x392/0x6f0 [ 1495.741070][T24910] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 1495.741087][T24910] ? __lock_acquire+0x49f/0x1a40 [ 1495.741102][T24910] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 1495.741122][T24910] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 1495.741146][T24910] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1495.741165][T24910] netlink_unicast+0x585/0x850 [ 1495.741178][T24910] ? __pfx_netlink_unicast+0x10/0x10 [ 1495.741192][T24910] netlink_sendmsg+0x8b0/0xda0 [ 1495.741205][T24910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1495.741217][T24910] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1495.741235][T24910] ____sys_sendmsg+0xa4d/0xbe0 [ 1495.741250][T24910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1495.741262][T24910] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1495.741284][T24910] ___sys_sendmsg+0x190/0x1e0 [ 1495.741302][T24910] ? __pfx____sys_sendmsg+0x10/0x10 [ 1495.741317][T24910] ? __lock_acquire+0x49f/0x1a40 [ 1495.741330][T24910] ? get_pid_task+0x106/0x250 [ 1495.741361][T24910] __sys_sendmsg+0x160/0x210 [ 1495.741375][T24910] ? __pfx___sys_sendmsg+0x10/0x10 [ 1495.741395][T24910] do_syscall_64+0x115/0x870 [ 1495.741407][T24910] ? clear_bhb_loop+0x40/0x90 [ 1495.741420][T24910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.741431][T24910] RIP: 0033:0x7f9f5a99de99 [ 1495.741442][T24910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1495.741452][T24910] RSP: 002b:00007f9f5b8c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1495.741463][T24910] RAX: ffffffffffffffda RBX: 00007f9f5ac25fa0 RCX: 00007f9f5a99de99 [ 1495.741470][T24910] RDX: 00000000000000c0 RSI: 0000200000000280 RDI: 0000000000000003 [ 1495.741477][T24910] RBP: 00007f9f5b8c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1495.741483][T24910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1495.741489][T24910] R13: 00007f9f5ac26038 R14: 00007f9f5ac25fa0 R15: 00007ffd98380c88 [ 1495.741506][T24910] [ 1496.126193][ T5615] usb 1-1: can't set config #1, error -71 [ 1496.145585][T24913] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 1496.152357][T24913] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1496.160590][T24913] vhci_hcd vhci_hcd.0: Device attached [ 1496.171590][ T5615] usb 1-1: USB disconnect, device number 53 [ 1496.180459][T24917] vhci_hcd: connection closed [ 1496.189834][T14714] vhci_hcd vhci_hcd.0: stop threads [ 1496.200736][T14714] vhci_hcd vhci_hcd.0: release socket [ 1496.206515][T14714] vhci_hcd vhci_hcd.0: disconnect device [ 1496.818643][ T30] audit: type=1400 audit(2000000949.654:3713): avc: denied { write } for pid=24935 comm="syz.6.5313" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1496.884471][T14086] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1497.047289][T14086] usb 3-1: Using ep0 maxpacket: 8 [ 1497.053558][T14086] usb 3-1: config 2 has an invalid interface number: 56 but max is 0 [ 1497.062503][T14086] usb 3-1: config 2 has an invalid descriptor of length 130, skipping remainder of the config [ 1497.073946][T14086] usb 3-1: config 2 has no interface number 0 [ 1497.088265][T14086] usb 3-1: too many endpoints for config 2 interface 56 altsetting 206: 160, using maximum allowed: 30 [ 1497.119097][T14086] usb 3-1: config 2 interface 56 altsetting 206 has 0 endpoint descriptors, different from the interface descriptor's value: 160 [ 1497.141586][T14086] usb 3-1: config 2 interface 56 has no altsetting 0 [ 1497.151867][T14086] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1497.204658][T14086] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.223160][T14086] usb 3-1: Product: syz [ 1497.233250][T14086] usb 3-1: Manufacturer: syz [ 1497.243334][T14086] usb 3-1: SerialNumber: syz [ 1498.465408][T14086] ch9200 3-1:2.56: probe with driver ch9200 failed with error -22 [ 1498.491817][T24953] input: syz1 as /devices/virtual/input/input250 [ 1498.514612][T14086] usb 3-1: USB disconnect, device number 83 [ 1498.649214][T24959] Cannot find add_set index 0 as target [ 1498.698830][T22888] Bluetooth: hci7: unexpected subevent 0x06 length: 18 > 10 [ 1498.726427][T24961] fuse: Bad value for 'fd' [ 1498.902819][T24963] ipvlan1: entered promiscuous mode [ 1498.910323][T24963] ipvlan1: entered allmulticast mode [ 1498.953219][T24965] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5323'. [ 1498.964701][ T30] audit: type=1400 audit(2000000951.804:3714): avc: denied { mounton } for pid=24964 comm="syz.3.5323" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 1498.989990][ T5615] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1498.998732][T24965] 9p: Bad value for 'port' [ 1499.147557][ T5615] usb 1-1: Using ep0 maxpacket: 8 [ 1499.294277][ T5615] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1499.308768][ T5615] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1499.328420][ T5615] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1499.343599][ T5615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.577367][ T187] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 1499.756398][ T187] usb 3-1: device descriptor read/64, error -71 [ 1499.841586][ T30] audit: type=1400 audit(2000000952.684:3715): avc: denied { checkpoint_restore } for pid=24977 comm="syz.6.5329" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1499.884218][ T30] audit: type=1400 audit(2000000952.724:3716): avc: denied { bind } for pid=24977 comm="syz.6.5329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1500.027252][ T187] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 1500.157107][ T187] usb 3-1: device descriptor read/64, error -71 [ 1500.267293][ T187] usb usb3-port1: attempt power cycle [ 1500.707297][T22888] Bluetooth: hci7: command 0x0405 tx timeout [ 1501.197044][ T187] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 1501.268559][ T187] usb 3-1: device descriptor read/8, error -71 [ 1501.517264][ T187] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 1501.537678][ T187] usb 3-1: device descriptor read/8, error -71 [ 1501.647224][ T187] usb usb3-port1: unable to enumerate USB device [ 1501.737077][ T187] usb 1-1: USB disconnect, device number 54 [ 1501.779142][T24991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5334'. [ 1503.042084][T25003] xt_hashlimit: size too large, truncated to 1048576 [ 1503.053990][ T30] audit: type=1400 audit(2000000955.894:3717): avc: denied { ioctl } for pid=24999 comm="syz.6.5338" path="socket:[109685]" dev="sockfs" ino=109685 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1503.132754][ T30] audit: type=1400 audit(2000000955.894:3718): avc: denied { ioctl } for pid=24999 comm="syz.6.5338" path="socket:[109703]" dev="sockfs" ino=109703 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1503.688221][ T30] audit: type=1400 audit(2000000956.534:3719): avc: denied { connect } for pid=25000 comm="syz.0.5340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1503.903074][ T30] audit: type=1400 audit(2000000956.634:3720): avc: denied { write } for pid=25000 comm="syz.0.5340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1504.312362][ T30] audit: type=1400 audit(2000000957.154:3721): avc: denied { append } for pid=25027 comm="syz.3.5342" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1504.378677][ T30] audit: type=1400 audit(2000000957.204:3722): avc: denied { setopt } for pid=25035 comm="syz.2.5347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1504.405591][T25031] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1504.449386][ T30] audit: type=1400 audit(2000000957.204:3723): avc: denied { connect } for pid=25035 comm="syz.2.5347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1504.529685][T25031] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1504.768876][T25031] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1504.831187][ T30] audit: type=1400 audit(2000000957.674:3724): avc: denied { bind } for pid=25035 comm="syz.2.5347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1505.127351][ T187] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1505.289820][ T187] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1505.309133][ T187] usb 1-1: config 0 has no interface number 0 [ 1505.336403][ T187] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1505.359103][ T187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.386849][ T187] usb 1-1: Product: syz [ 1505.405814][ T187] usb 1-1: Manufacturer: syz [ 1505.424755][ T187] usb 1-1: SerialNumber: syz [ 1505.441464][ T187] usb 1-1: config 0 descriptor?? [ 1505.499555][T25061] tipc: Started in network mode [ 1505.591944][T25061] tipc: Node identity 4a4d7f2668dd, cluster identity 4711 [ 1505.979942][T25061] tipc: Enabled bearer , priority 0 [ 1506.160257][T25075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5357'. [ 1506.173370][T25062] syzkaller0: entered promiscuous mode [ 1506.179781][T25062] syzkaller0: entered allmulticast mode [ 1506.190957][T25075] hsr_slave_0 (unregistering): left promiscuous mode [ 1506.245064][T25060] tipc: Resetting bearer [ 1506.269430][T25060] tipc: Disabling bearer [ 1506.290161][T25067] lo speed is unknown, defaulting to 1000 [ 1506.296139][T25077] loop5: detected capacity change from 0 to 7 [ 1506.315510][T25077] Dev loop5: unable to read RDB block 7 [ 1506.334910][T25075] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5357'. [ 1506.347178][T25077] loop5: unable to read partition table [ 1506.361384][T25077] loop5: partition table beyond EOD, truncated [ 1506.377157][T25077] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1506.469507][T22888] Bluetooth: hci6: command 0x0406 tx timeout [ 1506.536263][T25081] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1506.553479][T22888] Bluetooth: hci7: command 0x0405 tx timeout [ 1506.567451][ T187] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 1506.610656][T25048] lo speed is unknown, defaulting to 1000 [ 1506.711550][ T30] audit: type=1400 audit(2000000959.554:3725): avc: denied { getopt } for pid=25083 comm="syz.2.5359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1506.756130][T25084] team0: No ports can be present during mode change [ 1506.772667][T25084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5359'. [ 1506.787793][T16129] Bluetooth: hci0: command 0x0c1a tx timeout [ 1506.811504][ T30] audit: type=1400 audit(2000000959.584:3726): avc: denied { write } for pid=25083 comm="syz.2.5359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1506.982031][T25084] team0 (unregistering): Port device team_slave_0 removed [ 1507.006221][T25084] team0 (unregistering): Port device team_slave_1 removed [ 1507.029235][T25084] team0 (unregistering): Port device geneve1 removed [ 1507.888664][ T187] usb 1-1: USB disconnect, device number 55 [ 1508.208237][T25116] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1508.214750][T25116] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1508.249678][T25116] vhci_hcd vhci_hcd.0: Device attached [ 1509.033554][T25117] vhci_hcd: connection closed [ 1509.033799][T14714] vhci_hcd vhci_hcd.2: stop threads [ 1509.059187][ T5615] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 1509.096389][T14714] vhci_hcd vhci_hcd.2: release socket [ 1509.193464][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1509.193475][ T30] audit: type=1400 audit(2000000962.024:3728): avc: denied { ioctl } for pid=25122 comm="syz.0.5371" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1509.233140][T14714] vhci_hcd vhci_hcd.2: disconnect device [ 1510.015883][ T30] audit: type=1804 audit(2000000962.834:3729): pid=25129 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.5373" name="file0" dev="ramfs" ino=110543 res=1 errno=0 [ 1510.140980][T25132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5374'. [ 1510.202072][T25136] 9pnet_virtio: no channels available for device syz [ 1510.222308][ T30] audit: type=1400 audit(2000000963.064:3730): avc: denied { mount } for pid=25135 comm="syz.7.5376" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1510.271081][T25134] nbd0: detected capacity change from 0 to 63 [ 1510.350351][ T30] audit: type=1400 audit(2000000963.094:3731): avc: denied { unmount } for pid=22334 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1512.124046][T25143] input: syz1 as /devices/virtual/input/input251 [ 1512.135679][T16129] block nbd0: Receive control failed (result -104) [ 1512.232469][T25145] input: syz1 as /devices/virtual/input/input252 [ 1512.290882][T25154] FAULT_INJECTION: forcing a failure. [ 1512.290882][T25154] name failslab, interval 1, probability 0, space 0, times 0 [ 1512.306873][T23899] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1512.332521][ T30] audit: type=1400 audit(2000000965.165:3732): avc: denied { setopt } for pid=25155 comm="syz.0.5380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1512.388991][T25154] CPU: 0 UID: 0 PID: 25154 Comm: syz.7.5379 Tainted: G L syzkaller #0 PREEMPT(full) [ 1512.389011][T25154] Tainted: [L]=SOFTLOCKUP [ 1512.389015][T25154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1512.389022][T25154] Call Trace: [ 1512.389026][T25154] [ 1512.389030][T25154] dump_stack_lvl+0x100/0x190 [ 1512.389048][T25154] should_fail_ex.cold+0x5/0xa [ 1512.389062][T25154] should_failslab+0xc2/0x120 [ 1512.389076][T25154] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1512.389090][T25154] ? __alloc_skb+0x5b7/0x710 [ 1512.389101][T25154] ? __alloc_skb+0x140/0x710 [ 1512.389115][T25154] __alloc_skb+0x140/0x710 [ 1512.389125][T25154] ? __alloc_skb+0x5b7/0x710 [ 1512.389137][T25154] ? __pfx___alloc_skb+0x10/0x10 [ 1512.389152][T25154] netlink_alloc_large_skb+0x69/0x150 [ 1512.389165][T25154] netlink_sendmsg+0x680/0xda0 [ 1512.389177][T25154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1512.389189][T25154] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1512.389208][T25154] ____sys_sendmsg+0xa4d/0xbe0 [ 1512.389223][T25154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1512.389234][T25154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1512.389256][T25154] ___sys_sendmsg+0x190/0x1e0 [ 1512.389274][T25154] ? __pfx____sys_sendmsg+0x10/0x10 [ 1512.389290][T25154] ? __lock_acquire+0x49f/0x1a40 [ 1512.389303][T25154] ? get_pid_task+0x106/0x250 [ 1512.389335][T25154] __sys_sendmsg+0x160/0x210 [ 1512.389348][T25154] ? __pfx___sys_sendmsg+0x10/0x10 [ 1512.389369][T25154] do_syscall_64+0x115/0x870 [ 1512.389381][T25154] ? clear_bhb_loop+0x40/0x90 [ 1512.389394][T25154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1512.389405][T25154] RIP: 0033:0x7f66f7b9de99 [ 1512.389415][T25154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1512.389426][T25154] RSP: 002b:00007f66f8a9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1512.389438][T25154] RAX: ffffffffffffffda RBX: 00007f66f7e25fa0 RCX: 00007f66f7b9de99 [ 1512.389447][T25154] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1512.389454][T25154] RBP: 00007f66f8a9c090 R08: 0000000000000000 R09: 0000000000000000 [ 1512.389461][T25154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1512.389467][T25154] R13: 00007f66f7e26038 R14: 00007f66f7e25fa0 R15: 00007ffe3fa07998 [ 1512.389481][T25154] [ 1513.115589][T25161] syz_tun: entered allmulticast mode [ 1513.162436][T25159] syz_tun: left allmulticast mode [ 1513.285436][T25174] vlan0: entered promiscuous mode [ 1513.337191][T25179] fuse: Bad value for 'fd' [ 1513.382374][T16129] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1514.491657][ T187] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1514.627801][ T5615] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1514.711309][ T187] usb 3-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=c4.36 [ 1515.625938][ T187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.639739][T25184] input: syz1 as /devices/virtual/input/input253 [ 1515.793442][ T187] usb 3-1: Product: syz [ 1515.822448][ T187] usb 3-1: Manufacturer: syz [ 1515.988853][ T187] usb 3-1: SerialNumber: syz [ 1516.311868][ T187] mdc800 3-1:39.0: probe fails -> wrong Number of Configuration [ 1516.368761][ T187] usb 3-1: USB disconnect, device number 88 [ 1516.702589][ T30] audit: type=1400 audit(2000000969.535:3733): avc: denied { read } for pid=25208 comm="syz.7.5398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1516.754988][ T30] audit: type=1400 audit(2000000969.585:3734): avc: denied { setopt } for pid=25208 comm="syz.7.5398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1516.801551][ T187] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1516.986363][ T187] usb 3-1: Using ep0 maxpacket: 32 [ 1516.992703][ T187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1517.005560][ T187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1517.017466][ T187] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1517.029735][ T187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.041189][ T187] usb 3-1: config 0 descriptor?? [ 1517.538813][ T187] hid_parser_main: 30 callbacks suppressed [ 1517.538827][ T187] koneplus 0003:1E7D:2D51.005C: unknown main item tag 0x0 [ 1517.560797][ T187] koneplus 0003:1E7D:2D51.005C: unknown main item tag 0x0 [ 1517.578881][ T187] koneplus 0003:1E7D:2D51.005C: item fetching failed at offset 2/5 [ 1517.600439][ T187] koneplus 0003:1E7D:2D51.005C: parse failed [ 1517.614310][ T187] koneplus 0003:1E7D:2D51.005C: probe with driver koneplus failed with error -22 [ 1517.769995][ T187] usb 3-1: USB disconnect, device number 89 [ 1518.222263][ T30] audit: type=1400 audit(2000000971.055:3735): avc: denied { getopt } for pid=25228 comm="syz.3.5405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1518.933210][T25233] snd_dummy snd_dummy.0: control 9:9:195:ÿÿ :53367 is already present [ 1519.284834][ T30] audit: type=1400 audit(2000000972.115:3736): avc: denied { append } for pid=25238 comm="syz.2.5408" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1519.697708][T25251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5409'. [ 1519.710542][T25251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1519.721023][T25251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1519.732906][T25251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1519.742448][T25251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1520.418858][T25263] netlink: 'syz.0.5417': attribute type 1 has an invalid length. [ 1520.544395][T25263] bridge1: entered promiscuous mode [ 1520.564015][T25263] bond1: (slave bridge1): making interface the new active one [ 1520.588779][T25263] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1520.709501][T25271] netlink: 'syz.0.5419': attribute type 1 has an invalid length. [ 1520.948829][ T30] audit: type=1400 audit(2000000973.785:3737): avc: denied { setopt } for pid=25279 comm="syz.7.5422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1522.933066][T25287] fuse: Invalid rootmode [ 1522.937627][T25275] tmpfs: Bad value for 'mpol' [ 1523.942970][T25271] bridge2: entered promiscuous mode [ 1524.077095][T16129] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 1524.131441][T25271] bond3: (slave bridge2): making interface the new active one [ 1524.154666][T25271] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 1525.131768][T25298] netlink: 'syz.6.5424': attribute type 4 has an invalid length. [ 1525.505358][ T30] audit: type=1400 audit(2000000978.335:3738): avc: denied { write } for pid=25303 comm="syz.2.5429" name="file0" dev="tmpfs" ino=2615 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1525.564513][T25319] netlink: 'syz.7.5432': attribute type 10 has an invalid length. [ 1525.621290][T25319] team0: Port device vlan0 added [ 1525.634541][ T30] audit: type=1400 audit(2000000978.335:3739): avc: denied { open } for pid=25303 comm="syz.2.5429" path="/475/file0" dev="tmpfs" ino=2615 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1525.671456][T25304] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5429'. [ 1525.865557][T25321] fuse: Bad value for 'fd' [ 1525.871002][ T30] audit: type=1400 audit(2000000978.375:3740): avc: denied { mount } for pid=25303 comm="syz.2.5429" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1526.193566][T25331] fuse: Invalid rootmode [ 1526.204222][ T30] audit: type=1400 audit(2000000978.455:3741): avc: denied { ioctl } for pid=25303 comm="syz.2.5429" path="/475/file0" dev="tmpfs" ino=2615 ioctlcmd=0x127b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1526.294685][T16129] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1526.661137][T25346] bond0: entered promiscuous mode [ 1526.694310][T25346] bond_slave_0: entered promiscuous mode [ 1526.721556][T25346] bond_slave_1: entered promiscuous mode [ 1526.742142][T25346] veth0_to_bond: entered promiscuous mode [ 1526.787502][ T30] audit: type=1400 audit(2000000979.615:3742): avc: denied { ioctl } for pid=25348 comm="syz.7.5441" path="/dev/ptyr2" dev="devtmpfs" ino=137 ioctlcmd=0x5438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1526.813678][ T5615] syz1: Port: 1 Link DOWN [ 1527.632702][T25357] dlm: no locking on control device [ 1528.084580][T25343] Set syz1 is full, maxelem 65536 reached [ 1528.182311][T25361] overlay: Unknown parameter 'mask' [ 1529.020638][T25368] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 1529.033328][ T30] audit: type=1400 audit(2000000981.856:3743): avc: denied { bind } for pid=25367 comm="syz.3.5448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1529.055371][ T30] audit: type=1400 audit(2000000981.896:3744): avc: denied { write } for pid=25367 comm="syz.3.5448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1529.081970][ T30] audit: type=1400 audit(2000000981.916:3745): avc: denied { listen } for pid=25367 comm="syz.3.5448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1529.110079][ T30] audit: type=1400 audit(2000000981.946:3746): avc: denied { relabelfrom } for pid=25367 comm="syz.3.5448" name="NETLINK" dev="sockfs" ino=112044 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1529.138877][ T30] audit: type=1400 audit(2000000981.946:3747): avc: denied { relabelto } for pid=25367 comm="syz.3.5448" name="NETLINK" dev="sockfs" ino=112044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_netfilter_socket permissive=1 trawcon="system_u:object_r:tmpfs_t:s0" [ 1529.223468][T25370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1529.234258][T25370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1529.246269][T25371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1529.256543][T25371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1531.834512][ T30] audit: type=1400 audit(2000000984.526:3748): avc: denied { read write } for pid=25385 comm="syz.3.5453" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1531.834552][ T30] audit: type=1400 audit(2000000984.526:3749): avc: denied { open } for pid=25385 comm="syz.3.5453" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1532.269885][ T30] audit: type=1400 audit(2000000985.106:3750): avc: denied { firmware_load } for pid=25403 comm="syz.0.5460" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1532.314353][T16129] Bluetooth: hci7: unexpected event for opcode 0x1005 [ 1532.323749][T25412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1532.333700][T25412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1533.569880][ T30] audit: type=1400 audit(2000000986.406:3751): avc: denied { getopt } for pid=25419 comm="syz.0.5464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1533.601678][T25420] lo speed is unknown, defaulting to 1000 [ 1534.179489][T25429] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1536.537770][ T30] audit: type=1800 audit(2000000989.366:3752): pid=25454 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.5475" name="file0" dev="overlay" ino=1886 res=0 errno=0 [ 1537.760379][T25460] input: syz1 as /devices/virtual/input/input255 [ 1538.299466][T25477] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5482'. [ 1538.321327][T25474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1538.333688][T25477] team0 (unregistering): Port device team_slave_0 removed [ 1538.471172][T25477] team0 (unregistering): Port device team_slave_1 removed [ 1538.491718][T25477] team0 (unregistering): Port device vlan0 removed [ 1538.518740][T25474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1538.789380][T15390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1539.169265][ T30] audit: type=1400 audit(2000000992.006:3753): avc: denied { ioctl } for pid=25488 comm="syz.0.5486" path="socket:[112626]" dev="sockfs" ino=112626 ioctlcmd=0xaf84 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1539.217123][T25492] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5486'. [ 1539.641513][T25501] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1539.694776][T25501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5490'. [ 1539.703979][T25501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5490'. [ 1539.727280][T25501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5490'. [ 1539.736327][T25501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5490'. [ 1539.831700][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1539.898492][T15390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1540.703318][ T6021] block nbd0: Possible stuck request ffff8880289cab80: control (read@0,1024B). Runtime 30 seconds [ 1540.719894][ T6021] block nbd0: Possible stuck request ffff8880289cad40: control (read@1024,1024B). Runtime 30 seconds [ 1540.730925][ T6021] block nbd0: Possible stuck request ffff8880289caf00: control (read@2048,1024B). Runtime 30 seconds [ 1540.745312][ T6021] block nbd0: Possible stuck request ffff8880289cb0c0: control (read@3072,1024B). Runtime 30 seconds [ 1540.757632][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1540.821409][T25504] netlink: 'syz.3.5491': attribute type 1 has an invalid length. [ 1540.947618][T15390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1541.201289][T25473] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1541.935879][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 1541.986845][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1542.830033][T25506] input: syz1 as /devices/virtual/input/input256 [ 1543.502638][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1543.825133][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1543.950121][T22888] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1543.964911][T22888] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1543.983718][T22888] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1543.993020][T22888] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1544.013485][T22888] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1544.063814][ T30] audit: type=1400 audit(2000000996.876:3754): avc: denied { mounton } for pid=25520 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1544.104534][T25516] input: syz1 as /devices/virtual/input/input257 [ 1544.946563][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1545.162089][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1545.309375][ T30] audit: type=1400 audit(2000000998.146:3755): avc: denied { accept } for pid=25535 comm="syz.0.5497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1545.470912][T25520] lo speed is unknown, defaulting to 1000 [ 1546.065858][T22888] Bluetooth: hci1: command tx timeout [ 1546.189093][T25520] bridge0: port 1(bridge_slave_0) entered blocking state [ 1546.216255][T25520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1546.225642][T23899] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1546.245342][T15390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.278289][T25520] bridge_slave_0: entered allmulticast mode [ 1546.314029][T25520] bridge_slave_0: entered promiscuous mode [ 1546.376931][T25520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1546.428591][T25520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.472726][T25520] bridge_slave_1: entered allmulticast mode [ 1546.510251][T25520] bridge_slave_1: entered promiscuous mode [ 1546.603252][T25520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1546.654928][T25520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1546.766312][T25520] team0: Port device team_slave_0 added [ 1546.791499][T25520] team0: Port device team_slave_1 added [ 1546.865638][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.919063][T25520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1546.958594][T25520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1547.055503][T25520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1547.097333][T25520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1547.124717][T25520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1547.826204][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1547.835040][T15390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1547.855794][T25520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1548.050099][T25520] hsr_slave_0: entered promiscuous mode [ 1548.065323][T25520] hsr_slave_1: entered promiscuous mode [ 1548.079429][T25520] debugfs: 'hsr0' already exists in 'hsr' [ 1548.097621][T25520] Cannot create hsr debugfs directory [ 1548.144843][T22888] Bluetooth: hci1: command tx timeout [ 1548.286771][T25580] dlm: no locking on control device [ 1548.866875][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.216064][T25580] siw: device registration error -23 [ 1549.340895][T25583] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1549.624636][T25589] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5510'. [ 1549.687230][T25592] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5510'. [ 1549.938002][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.946224][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.979717][T25520] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1550.107753][T25598] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1550.116378][T25598] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5517'. [ 1550.125259][T25598] IPv6: NLM_F_CREATE should be specified when creating new route [ 1550.160351][T25520] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1550.181863][T25520] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1550.205307][T25520] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1550.222171][T25520] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1550.229310][T22888] Bluetooth: hci1: command tx timeout [ 1550.258869][T25520] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1550.278813][T25520] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1550.296091][T25520] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1550.410687][T25606] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5518'. [ 1550.456254][T25520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1550.503330][T25520] 8021q: adding VLAN 0 to HW filter on device team0 [ 1550.515304][T25608] fuse: fd is not a fuse device [ 1550.525592][ T7021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1550.532686][ T7021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1550.574237][ T7021] bridge0: port 2(bridge_slave_1) entered blocking state [ 1550.581351][ T7021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1550.940216][T25520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1550.953572][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.153402][T25520] veth0_vlan: entered promiscuous mode [ 1551.170668][T25520] veth1_vlan: entered promiscuous mode [ 1551.200711][T25520] veth0_macvtap: entered promiscuous mode [ 1551.212149][T25520] veth1_macvtap: entered promiscuous mode [ 1551.228277][T25520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1551.245140][T25520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1551.259259][T20909] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.289011][T20909] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.334693][T20909] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.393041][T20909] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.446783][T20909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1551.463913][T20909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1551.488544][T20909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1551.500653][T20909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1551.518561][ T30] audit: type=1400 audit(2000001004.357:3756): avc: denied { mounton } for pid=25520 comm="syz-executor" path="/root/syzkaller.CGPRzM/syz-tmp" dev="sda1" ino=2065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1551.569194][ T30] audit: type=1400 audit(2000001004.387:3757): avc: denied { mounton } for pid=25520 comm="syz-executor" path="/root/syzkaller.CGPRzM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1551.641492][ T30] audit: type=1400 audit(2000001004.387:3758): avc: denied { mounton } for pid=25520 comm="syz-executor" path="/root/syzkaller.CGPRzM/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=113759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1551.713952][ T30] audit: type=1400 audit(2000001004.387:3759): avc: denied { mounton } for pid=25520 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1551.773707][T25637] xt_hashlimit: size too large, truncated to 1048576 [ 1551.797668][ T30] audit: type=1400 audit(2000001004.387:3760): avc: denied { mount } for pid=25520 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1551.902570][ T30] audit: type=1400 audit(2000001004.387:3761): avc: denied { mounton } for pid=25520 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1551.986560][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1552.054797][T25636] infiniband syz0: set down [ 1552.060677][T25636] infiniband syz0: added ipvlan1 [ 1552.082540][T25636] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1552.117090][T25636] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1552.142622][T25636] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1552.181821][T25636] RDS/IB: syz0: added [ 1552.193970][T25636] smc: adding ib device syz0 with port count 1 [ 1552.203124][T25636] smc: ib device syz0 port 1 has pnetid SYZ2 (user defined) [ 1552.304531][T22888] Bluetooth: hci1: command tx timeout [ 1552.443988][ T30] audit: type=1400 audit(2000001005.277:3762): avc: denied { read } for pid=25646 comm="syz.0.5525" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1553.423639][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1553.457480][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1554.470755][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.444646][T15390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.579548][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.633701][T25655] fuse: Unknown parameter 'use0000000000000000000000000000000000000000' [ 1555.886228][T22888] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 1556.359370][ T30] audit: type=1400 audit(2000001009.197:3763): avc: denied { write } for pid=25673 comm="syz.6.5535" name="functions" dev="configfs" ino=17080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1556.564953][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.624156][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.659624][ T30] audit: type=1400 audit(2000001009.247:3764): avc: denied { add_name } for pid=25673 comm="syz.6.5535" name="SourceSink.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1556.799054][ T30] audit: type=1400 audit(2000001009.247:3765): avc: denied { create } for pid=25673 comm="syz.6.5535" name="SourceSink.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 1556.969391][ T30] audit: type=1400 audit(2000001009.247:3766): avc: denied { write } for pid=25673 comm="syz.6.5535" name="c.1" dev="configfs" ino=31560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1557.083028][ T30] audit: type=1400 audit(2000001009.247:3767): avc: denied { create } for pid=25673 comm="syz.6.5535" name="SourceSink.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 1557.252274][ T30] audit: type=1400 audit(2000001009.247:3768): avc: denied { write } for pid=25673 comm="syz.6.5535" name="c.1" dev="configfs" ino=31560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1557.339261][T25685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1557.426134][ T30] audit: type=1400 audit(2000001009.347:3769): avc: denied { mounton } for pid=25673 comm="syz.6.5535" path="/390/file0" dev="tmpfs" ino=2127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1557.576044][ T30] audit: type=1400 audit(2000001009.437:3770): avc: denied { read write } for pid=25660 comm="syz.3.5529" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1557.664813][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1557.700676][T25685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1557.805101][ T30] audit: type=1400 audit(2000001009.437:3771): avc: denied { open } for pid=25660 comm="syz.3.5529" path="/dev/rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1557.952475][ T30] audit: type=1400 audit(2000001009.537:3772): avc: denied { write } for pid=25675 comm="syz.6.5536" name="functions" dev="configfs" ino=17080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1558.085468][ T30] audit: type=1400 audit(2000001009.687:3773): avc: denied { write } for pid=25675 comm="syz.6.5536" name="header" dev="configfs" ino=114248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1558.705098][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1559.585263][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1559.818369][T25719] SELinux: ebitmap: truncated map [ 1559.823478][T25719] SELinux: invalid class [ 1559.845339][T25719] SELinux: failed to load policy [ 1559.868497][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.396661][T25731] FAULT_INJECTION: forcing a failure. [ 1560.396661][T25731] name failslab, interval 1, probability 0, space 0, times 0 [ 1560.396703][T25731] CPU: 0 UID: 0 PID: 25731 Comm: syz.8.5549 Tainted: G L syzkaller #0 PREEMPT(full) [ 1560.396718][T25731] Tainted: [L]=SOFTLOCKUP [ 1560.396722][T25731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1560.396728][T25731] Call Trace: [ 1560.396732][T25731] [ 1560.396737][T25731] dump_stack_lvl+0x100/0x190 [ 1560.396754][T25731] should_fail_ex.cold+0x5/0xa [ 1560.396768][T25731] should_failslab+0xc2/0x120 [ 1560.396782][T25731] __kmalloc_noprof+0xfc/0x820 [ 1560.396795][T25731] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 1560.396813][T25731] kernfs_fop_write_iter+0x26a/0x5f0 [ 1560.396829][T25731] vfs_write+0x6ac/0x1050 [ 1560.396846][T25731] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1560.396861][T25731] ? __pfx_vfs_write+0x10/0x10 [ 1560.396886][T25731] ksys_write+0x12a/0x250 [ 1560.396904][T25731] ? __pfx_ksys_write+0x10/0x10 [ 1560.396925][T25731] do_syscall_64+0x115/0x870 [ 1560.396937][T25731] ? clear_bhb_loop+0x40/0x90 [ 1560.396950][T25731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.396961][T25731] RIP: 0033:0x7fe73eb9de99 [ 1560.396970][T25731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1560.396982][T25731] RSP: 002b:00007fe73fa27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1560.396992][T25731] RAX: ffffffffffffffda RBX: 00007fe73ee25fa0 RCX: 00007fe73eb9de99 [ 1560.397000][T25731] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000003 [ 1560.397006][T25731] RBP: 00007fe73fa27090 R08: 0000000000000000 R09: 0000000000000000 [ 1560.397013][T25731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1560.397019][T25731] R13: 00007fe73ee26038 R14: 00007fe73ee25fa0 R15: 00007fff480d3968 [ 1560.397033][T25731] [ 1560.686846][T25730] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5548'. [ 1560.945230][T14086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.968766][T25740] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 1561.330784][T25752] snd_dummy snd_dummy.0: control 4:57412:0:syz0:0 is already present [ 1561.487854][T25753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1561.525741][T25753] 8021q: adding VLAN 0 to HW filter on device team0 [ 1561.536307][T25753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1561.591073][T25753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1561.612766][T25753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1561.644702][T25753] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1561.666051][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1561.666062][ T30] audit: type=1326 audit(2000001014.507:3791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25756 comm="syz.8.5558" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73eb9de99 code=0x7ffc0000 [ 1561.709049][T25753] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1561.732544][T25753] veth1_vlan: left promiscuous mode [ 1561.740872][T25753] veth1_vlan: entered promiscuous mode [ 1561.757065][ T30] audit: type=1400 audit(2000001014.567:3792): avc: denied { write } for pid=25759 comm="syz.3.5557" name="hs" dev="configfs" ino=114256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1561.780736][T25753] veth1_macvtap: left promiscuous mode [ 1561.788305][T25753] veth0_macvtap: left promiscuous mode [ 1561.794675][T25753] veth0_macvtap: entered promiscuous mode [ 1561.805430][T25753] veth1_macvtap: entered promiscuous mode [ 1561.817017][ T30] audit: type=1400 audit(2000001014.567:3793): avc: denied { write } for pid=25759 comm="syz.3.5557" name="hs" dev="configfs" ino=114256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1561.853530][T25753] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1561.864865][T25753] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1561.875250][T25753] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1561.885065][ T30] audit: type=1400 audit(2000001014.587:3794): avc: denied { write } for pid=25759 comm="syz.3.5557" name="fs" dev="configfs" ino=114255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1561.917681][T25753] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1561.952620][T25753] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1561.959527][ T30] audit: type=1400 audit(2000001014.637:3795): avc: denied { write } for pid=25759 comm="syz.3.5557" name="c.1" dev="configfs" ino=31560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1561.992431][T15390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1562.004145][T25753] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1562.020854][T25753] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1562.047665][ T30] audit: type=1400 audit(2000001014.637:3796): avc: denied { write } for pid=25759 comm="syz.3.5557" name="c.1" dev="configfs" ino=31560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1562.073002][T25753] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1562.094408][T25753] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1562.176251][T25755] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode [ 1562.191720][ T30] audit: type=1400 audit(2000001014.757:3797): avc: denied { write } for pid=25759 comm="syz.3.5557" name="g1" dev="configfs" ino=17079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1562.217066][T25755] mac80211_hwsim hwsim32 wlan0: entered allmulticast mode [ 1562.241407][T25760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1562.258337][ T30] audit: type=1400 audit(2000001015.027:3798): avc: denied { write } for pid=25759 comm="syz.3.5557" name="g1" dev="configfs" ino=17079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1562.284420][T14714] bridge0: port 1(bridge_slave_0) entered blocking state [ 1562.291495][T14714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1562.301663][T14714] bridge0: port 2(bridge_slave_1) entered blocking state [ 1562.308766][T14714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1562.361741][T15390] libceph: connect (1)[c::]:6789 error -101 [ 1562.396114][T15390] libceph: mon0 (1)[c::]:6789 connect error [ 1562.432919][T15390] libceph: connect (1)[c::]:6789 error -101 [ 1562.450159][T15390] libceph: mon0 (1)[c::]:6789 connect error [ 1562.459739][T25760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1562.472013][T23891] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1562.491131][T23891] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1562.511759][T23891] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1562.527247][T23891] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1562.581194][ T30] audit: type=1326 audit(2000001015.417:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25780 comm="syz.7.5561" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f7b9de99 code=0x7ffc0000 [ 1562.626216][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1562.648386][ T30] audit: type=1326 audit(2000001015.457:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25780 comm="syz.7.5561" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f7b9de99 code=0x7ffc0000 [ 1562.776799][T14086] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1562.788273][ T5728] libceph: connect (1)[c::]:6789 error -101 [ 1562.800111][ T5728] libceph: mon0 (1)[c::]:6789 connect error [ 1562.806596][ T5615] libceph: connect (1)[c::]:6789 error -101 [ 1562.812761][ T5615] libceph: mon0 (1)[c::]:6789 connect error [ 1562.967228][T25784] binder: 25782:25784 ioctl c0306201 200000000940 returned -22 [ 1562.996719][T25771] ceph: No mds server is up or the cluster is laggy [ 1563.004681][T25774] ceph: No mds server is up or the cluster is laggy [ 1563.036524][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1563.053762][T14086] usb 9-1: Using ep0 maxpacket: 16 [ 1563.080200][T14086] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1563.105529][T14086] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1563.160181][T14086] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1563.209522][T14086] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1563.259661][T14086] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1563.362836][T14086] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1563.390514][T14086] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1563.421909][T14086] usb 9-1: Manufacturer: syz [ 1563.448230][T14086] usb 9-1: config 0 descriptor?? [ 1564.317137][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1564.540701][ T5721] kernel write not supported for file /sequencer (pid: 5721 comm: kworker/0:5) [ 1564.633583][T14086] rc_core: IR keymap rc-hauppauge not found [ 1564.649539][T14086] Registered IR keymap rc-empty [ 1564.670922][T14086] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1564.715040][T14086] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1564.755370][T14086] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1564.784962][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1564.801237][T14086] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input259 [ 1564.841154][T14086] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1564.898563][T14086] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1564.944070][T14086] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1564.993729][T14086] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1565.035793][T14086] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1565.073617][T14086] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1565.117375][T14086] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1565.163451][T14086] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1565.193628][T14086] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1565.223433][T14086] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1565.255391][T14086] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 1565.278288][T14086] mceusb 9-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 1565.313648][T14086] usb 9-1: USB disconnect, device number 2 [ 1565.348978][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.426143][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.866949][T14086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.489255][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.642670][T25811] fuse: Unknown parameter 'user_id0000000000000000000000000000000000000000' [ 1566.665510][T25813] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5572'. [ 1567.545601][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1567.965377][T25828] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25828 comm=syz.7.5577 [ 1568.009663][T25828] [ 1568.012010][T25828] ====================================================== [ 1568.019010][T25828] WARNING: possible circular locking dependency detected [ 1568.026018][T25828] syzkaller #0 Tainted: G L [ 1568.031971][T25828] ------------------------------------------------------ [ 1568.038965][T25828] syz.7.5577/25828 is trying to acquire lock: [ 1568.044998][T25828] ffff888080b9a450 (sb_writers#6){.+.+}-{0:0}, at: path_openat+0xad9/0x4280 [ 1568.053680][T25828] [ 1568.053680][T25828] but task is already holding lock: [ 1568.061036][T25828] ffff8880426e1920 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 1568.070272][T25828] [ 1568.070272][T25828] which lock already depends on the new lock. [ 1568.070272][T25828] [ 1568.080660][T25828] [ 1568.080660][T25828] the existing dependency chain (in reverse order) is: [ 1568.089830][T25828] [ 1568.089830][T25828] -> #6 (&common->filesem){++++}-{4:4}: [ 1568.097560][T25828] lock_acquire+0x1b9/0x370 [ 1568.102591][T25828] down_read+0x99/0x4c0 [ 1568.107255][T25828] fsg_show_file+0x20/0x180 [ 1568.112278][T25828] configfs_read_iter+0x426/0x6f0 [ 1568.117891][T25828] __kernel_read+0x397/0xad0 [ 1568.122981][T25828] integrity_kernel_read+0x7e/0xb0 [ 1568.128599][T25828] ima_calc_file_hash_tfm+0x25e/0x350 [ 1568.134474][T25828] ima_calc_file_hash+0x1e3/0x380 [ 1568.139991][T25828] ima_collect_measurement+0x94f/0xb30 [ 1568.145952][T25828] process_measurement+0xdfe/0x2350 [ 1568.151648][T25828] ima_file_check+0xc3/0x110 [ 1568.156735][T25828] security_file_post_open+0xc4/0x210 [ 1568.162625][T25828] path_openat+0x985/0x4280 [ 1568.167632][T25828] do_file_open+0x20e/0x430 [ 1568.172650][T25828] do_sys_openat2+0x10f/0x1e0 [ 1568.177829][T25828] __x64_sys_openat+0x12d/0x210 [ 1568.183194][T25828] do_syscall_64+0x115/0x870 [ 1568.188307][T25828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.194724][T25828] [ 1568.194724][T25828] -> #5 (&p->frag_sem){++++}-{4:4}: [ 1568.202092][T25828] lock_acquire+0x1b9/0x370 [ 1568.207120][T25828] down_read+0x99/0x4c0 [ 1568.211789][T25828] configfs_write_iter+0x218/0x4e0 [ 1568.217407][T25828] vfs_write+0x6ac/0x1050 [ 1568.222240][T25828] ksys_write+0x12a/0x250 [ 1568.227078][T25828] do_syscall_64+0x115/0x870 [ 1568.232162][T25828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.238577][T25828] [ 1568.238577][T25828] -> #4 (&buffer->mutex){+.+.}-{4:4}: [ 1568.246132][T25828] lock_acquire+0x1b9/0x370 [ 1568.251168][T25828] __mutex_lock+0x1a4/0x1bd0 [ 1568.256253][T25828] configfs_read_iter+0x79/0x6f0 [ 1568.261692][T25828] __kernel_read+0x397/0xad0 [ 1568.266778][T25828] integrity_kernel_read+0x7e/0xb0 [ 1568.272385][T25828] ima_calc_file_hash_tfm+0x25e/0x350 [ 1568.278260][T25828] ima_calc_file_hash+0x1e3/0x380 [ 1568.283787][T25828] ima_collect_measurement+0x94f/0xb30 [ 1568.290090][T25828] process_measurement+0xdfe/0x2350 [ 1568.295778][T25828] ima_file_check+0xc3/0x110 [ 1568.300867][T25828] security_file_post_open+0xc4/0x210 [ 1568.306741][T25828] path_openat+0x985/0x4280 [ 1568.311836][T25828] do_file_open+0x20e/0x430 [ 1568.316869][T25828] do_sys_openat2+0x10f/0x1e0 [ 1568.322067][T25828] __x64_sys_openat+0x12d/0x210 [ 1568.327447][T25828] do_syscall_64+0x115/0x870 [ 1568.332541][T25828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.338941][T25828] [ 1568.338941][T25828] -> #3 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 1568.347508][T25828] lock_acquire+0x1b9/0x370 [ 1568.352513][T25828] __mutex_lock+0x1a4/0x1bd0 [ 1568.357606][T25828] process_measurement+0x5ab/0x2350 [ 1568.363305][T25828] ima_file_check+0xc3/0x110 [ 1568.368397][T25828] security_file_post_open+0xc4/0x210 [ 1568.374267][T25828] path_openat+0x985/0x4280 [ 1568.379352][T25828] do_file_open_root+0x2f6/0x5a0 [ 1568.384802][T25828] file_open_root+0x1c6/0x3f0 [ 1568.390318][T25828] kernel_read_file_from_path_initns+0x189/0x260 [ 1568.397147][T25828] _request_firmware+0x733/0x13c0 [ 1568.402670][T25828] request_firmware+0x35/0x50 [ 1568.407835][T25828] reg_reload_regdb+0x85/0x460 [ 1568.413101][T25828] genl_family_rcv_msg_doit+0x214/0x300 [ 1568.419136][T25828] genl_rcv_msg+0x560/0x800 [ 1568.424138][T25828] netlink_rcv_skb+0x159/0x420 [ 1568.429397][T25828] genl_rcv+0x28/0x40 [ 1568.433869][T25828] netlink_unicast+0x585/0x850 [ 1568.439126][T25828] netlink_sendmsg+0x8b0/0xda0 [ 1568.444393][T25828] ____sys_sendmsg+0xa4d/0xbe0 [ 1568.449665][T25828] ___sys_sendmsg+0x190/0x1e0 [ 1568.454842][T25828] __sys_sendmsg+0x160/0x210 [ 1568.459924][T25828] do_syscall_64+0x115/0x870 [ 1568.465004][T25828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.471384][T25828] [ 1568.471384][T25828] -> #2 (cb_lock){++++}-{4:4}: [ 1568.478303][T25828] lock_acquire+0x1b9/0x370 [ 1568.483297][T25828] down_read+0x99/0x4c0 [ 1568.487942][T25828] genl_rcv+0x19/0x40 [ 1568.492411][T25828] netlink_unicast+0x585/0x850 [ 1568.497674][T25828] netlink_sendmsg+0x8b0/0xda0 [ 1568.502927][T25828] sock_sendmsg+0x394/0x410 [ 1568.507928][T25828] splice_to_socket+0xb3c/0x11a0 [ 1568.513357][T25828] do_splice+0x109c/0x1f90 [ 1568.518264][T25828] __do_splice+0x33b/0x370 [ 1568.523190][T25828] __x64_sys_splice+0x187/0x250 [ 1568.528547][T25828] do_syscall_64+0x115/0x870 [ 1568.533644][T25828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.540116][T25828] [ 1568.540116][T25828] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 1568.547476][T25828] lock_acquire+0x1b9/0x370 [ 1568.552478][T25828] __mutex_lock+0x1a4/0x1bd0 [ 1568.557557][T25828] pipe_lock+0x69/0x80 [ 1568.562125][T25828] iter_file_splice_write+0x1fd/0x10b0 [ 1568.568090][T25828] do_splice+0x109c/0x1f90 [ 1568.573005][T25828] __do_splice+0x33b/0x370 [ 1568.577913][T25828] __x64_sys_splice+0x187/0x250 [ 1568.583256][T25828] do_syscall_64+0x115/0x870 [ 1568.588341][T25828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.594732][T25828] [ 1568.594732][T25828] -> #0 (sb_writers#6){.+.+}-{0:0}: [ 1568.602097][T25828] check_prev_add+0xeb/0xe60 [ 1568.607178][T25828] __lock_acquire+0x136c/0x1a40 [ 1568.612526][T25828] lock_acquire+0x1b9/0x370 [ 1568.617518][T25828] mnt_want_write+0x6f/0x410 [ 1568.622637][T25828] path_openat+0xad9/0x4280 [ 1568.627627][T25828] do_file_open+0x20e/0x430 [ 1568.632622][T25828] file_open_name+0x1c3/0x3e0 [ 1568.637794][T25828] filp_open+0x2e/0x50 [ 1568.642351][T25828] fsg_lun_open+0x6b/0x7b0 [ 1568.647280][T25828] fsg_store_file+0x1e7/0x450 [ 1568.652454][T25828] configfs_write_iter+0x302/0x4e0 [ 1568.658053][T25828] vfs_write+0x6ac/0x1050 [ 1568.662875][T25828] ksys_write+0x12a/0x250 [ 1568.667699][T25828] do_syscall_64+0x115/0x870 [ 1568.672778][T25828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.679161][T25828] [ 1568.679161][T25828] other info that might help us debug this: [ 1568.679161][T25828] [ 1568.689362][T25828] Chain exists of: [ 1568.689362][T25828] sb_writers#6 --> &p->frag_sem --> &common->filesem [ 1568.689362][T25828] [ 1568.701934][T25828] Possible unsafe locking scenario: [ 1568.701934][T25828] [ 1568.709358][T25828] CPU0 CPU1 [ 1568.714691][T25828] ---- ---- [ 1568.720024][T25828] lock(&common->filesem); [ 1568.724503][T25828] lock(&p->frag_sem); [ 1568.731412][T25828] lock(&common->filesem); [ 1568.738488][T25828] rlock(sb_writers#6); [ 1568.742704][T25828] [ 1568.742704][T25828] *** DEADLOCK *** [ 1568.742704][T25828] [ 1568.750814][T25828] 5 locks held by syz.7.5577/25828: [ 1568.755984][T25828] #0: ffff88807e235430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1568.764996][T25828] #1: ffff88801e3a4450 (sb_writers#14){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1568.774019][T25828] #2: ffff888075931480 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 1568.783809][T25828] #3: ffff888027add470 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 1568.793512][T25828] #4: ffff8880426e1920 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 1568.803128][T25828] [ 1568.803128][T25828] stack backtrace: [ 1568.808989][T25828] CPU: 0 UID: 0 PID: 25828 Comm: syz.7.5577 Tainted: G L syzkaller #0 PREEMPT(full) [ 1568.809006][T25828] Tainted: [L]=SOFTLOCKUP [ 1568.809010][T25828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1568.809017][T25828] Call Trace: [ 1568.809023][T25828] [ 1568.809029][T25828] dump_stack_lvl+0x100/0x190 [ 1568.809042][T25828] print_circular_bug.cold+0x178/0x1c7 [ 1568.809059][T25828] check_noncircular+0x146/0x160 [ 1568.809071][T25828] ? __lock_acquire+0xd5b/0x1a40 [ 1568.809085][T25828] check_prev_add+0xeb/0xe60 [ 1568.809098][T25828] __lock_acquire+0x136c/0x1a40 [ 1568.809111][T25828] ? try_to_unlazy+0x296/0x910 [ 1568.809127][T25828] lock_acquire+0x1b9/0x370 [ 1568.809139][T25828] ? path_openat+0xad9/0x4280 [ 1568.809158][T25828] ? __pfx___might_resched+0x10/0x10 [ 1568.809172][T25828] mnt_want_write+0x6f/0x410 [ 1568.809181][T25828] ? path_openat+0xad9/0x4280 [ 1568.809192][T25828] path_openat+0xad9/0x4280 [ 1568.809205][T25828] ? __pfx_path_openat+0x10/0x10 [ 1568.809215][T25828] ? kasan_save_stack+0x30/0x50 [ 1568.809227][T25828] ? kasan_save_track+0x14/0x30 [ 1568.809239][T25828] ? __kasan_slab_alloc+0x89/0x90 [ 1568.809251][T25828] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 1568.809263][T25828] ? do_getname_kernel+0x5d/0x250 [ 1568.809274][T25828] ? filp_open+0x1d/0x50 [ 1568.809286][T25828] ? fsg_lun_open+0x6b/0x7b0 [ 1568.809296][T25828] ? fsg_store_file+0x1e7/0x450 [ 1568.809308][T25828] do_file_open+0x20e/0x430 [ 1568.809319][T25828] ? __pfx_do_file_open+0x10/0x10 [ 1568.809335][T25828] ? rcu_is_watching+0x12/0xc0 [ 1568.809352][T25828] file_open_name+0x1c3/0x3e0 [ 1568.809365][T25828] ? __pfx_file_open_name+0x10/0x10 [ 1568.809377][T25828] ? do_getname_kernel+0x5d/0x250 [ 1568.809390][T25828] ? __asan_memcpy+0x3c/0x60 [ 1568.809400][T25828] ? do_getname_kernel+0x1be/0x250 [ 1568.809412][T25828] filp_open+0x2e/0x50 [ 1568.809424][T25828] fsg_lun_open+0x6b/0x7b0 [ 1568.809435][T25828] ? __pfx_down_read+0x10/0x10 [ 1568.809449][T25828] fsg_store_file+0x1e7/0x450 [ 1568.809462][T25828] configfs_write_iter+0x302/0x4e0 [ 1568.809474][T25828] vfs_write+0x6ac/0x1050 [ 1568.809489][T25828] ? __pfx_configfs_write_iter+0x10/0x10 [ 1568.809502][T25828] ? __pfx_vfs_write+0x10/0x10 [ 1568.809521][T25828] ksys_write+0x12a/0x250 [ 1568.809537][T25828] ? __pfx_ksys_write+0x10/0x10 [ 1568.809554][T25828] do_syscall_64+0x115/0x870 [ 1568.809565][T25828] ? clear_bhb_loop+0x40/0x90 [ 1568.809577][T25828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.809588][T25828] RIP: 0033:0x7f66f7b9de99 [ 1568.809598][T25828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1568.809609][T25828] RSP: 002b:00007f66f8a9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1568.809619][T25828] RAX: ffffffffffffffda RBX: 00007f66f7e25fa0 RCX: 00007f66f7b9de99 [ 1568.809626][T25828] RDX: 0000000000000001 RSI: 0000200000000f00 RDI: 0000000000000005 [ 1568.809633][T25828] RBP: 00007f66f7c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1568.809639][T25828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1568.809645][T25828] R13: 00007f66f7e26038 R14: 00007f66f7e25fa0 R15: 00007ffe3fa07998 [ 1568.809655][T25828] [ 1569.237377][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1569.245750][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1569.262773][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1569.262809][ T30] audit: type=1400 audit(2000001022.098:3824): avc: denied { getopt } for pid=25829 comm="syz.0.5576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1569.296618][ T187] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 1569.312263][T25828] mass_storage.usb0/lun.0: unable to open backing file: f [ 1569.456330][ T187] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.467000][ T187] usb 9-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 1569.476407][ T187] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.489009][ T187] usb 9-1: config 0 descriptor?? [ 1569.724006][T25820] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 1569.741343][ T5721] syz0: Port: 1 Link ACTIVE [ 1569.788412][T25820] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode [ 1569.795861][T25820] mac80211_hwsim hwsim37 wlan0: entered allmulticast mode [ 1569.918184][ T187] usb 9-1: string descriptor 0 read error: -71 [ 1569.927613][ T187] cypress_m8 9-1:0.0: DeLorme Earthmate USB converter detected [ 1569.937271][ T187] earthmate ttyUSB0: required endpoint is missing [ 1569.948425][ T187] usb 9-1: USB disconnect, device number 3 [ 1569.955378][ T187] cypress_m8 9-1:0.0: device disconnected [ 1570.305954][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.547210][T14086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1571.183711][ T6021] block nbd0: Possible stuck request ffff8880289cab80: control (read@0,1024B). Runtime 60 seconds [ 1571.194378][ T6021] block nbd0: Possible stuck request ffff8880289cad40: control (read@1024,1024B). Runtime 60 seconds [ 1571.205528][ T6021] block nbd0: Possible stuck request ffff8880289caf00: control (read@2048,1024B). Runtime 60 seconds [ 1571.216479][ T6021] block nbd0: Possible stuck request ffff8880289cb0c0: control (read@3072,1024B). Runtime 60 seconds [ 1571.345931][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1572.385848][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1573.424480][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1573.453427][ T4977] udevd[4977]: worker [23660] /devices/virtual/block/nbd0 is taking a long time [ 1573.583102][T15390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1574.465439][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.024159][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.504120][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.664310][T15390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.544275][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.624816][T15390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1577.588028][T14086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog