last executing test programs: 4m57.051361092s ago: executing program 32 (id=270): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='measure', 0x7) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) pselect6(0x40, &(0x7f0000000500)={0xfff, 0x2, 0x0, 0x1, 0xffffffffffffff80, 0x3, 0x8000000000000001, 0x5}, 0x0, &(0x7f00000005c0)={0xa, 0x5, 0x3, 0x7ffffffd, 0x9, 0x0, 0x0, 0x5}, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) syz_open_dev$usbfs(&(0x7f0000004200), 0x4, 0x200621) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="3400000010000104000000000000000000000000000000000000000000000000140012000c000100626172657564700004000200", 0x34}], 0x1}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000480)={0x0, 0x0, {0x3, 0x3, 0x0, 0x0, 0x1002}, 0xb2a1}) write$sndseq(r5, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x410, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1fd}) syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902e20002a60000000904b10403d7b5d25b09210400020122c705090500100004f40804072501832f08000905000040008103ff0905091b08000c078009042201040e010003090509000000030004090502020002f7810671300c458e9532438d4aae3ef0c9bf5c520b1aaab11a8cae9a60c3160adc1dfedebf5a6ead8834c7780c2eb777ef0caf96cd8b3b77f357f4aa1b662ab40651e6ae8cc63dd9f6e2d24afaed81a927ca2e0354281cfeffffffffffffffbf09aac591308e5c0c3c419bb288a21890e1af4af409050303ff030840040705a6c6415a9f09058503"], 0x0) ftruncate(r6, 0xff) read$FUSE(r6, &(0x7f00000021c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$cgroup_pid(r0, &(0x7f0000002180)=r7, 0x12) close(r0) 4m31.381414359s ago: executing program 33 (id=477): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), r3) sendmsg$NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf25050000e408000100b07785d7848860c8365160817a59f0bec2e3d420f7278397a23282bdeba0894cfc79341d11a14c9fd5a2639e66a8bcd48a01de3694", @ANYRES32=0x0], 0x1c}, 0x1, 0x0, 0x0, 0xdd20e1676ce9cab4}, 0x80) fsetxattr(0xffffffffffffffff, &(0x7f0000003e80)=@known='user.incfs.metadata\x00', 0x0, 0x0, 0x2) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @random="9e7eafc0e8f2", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x3, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0xf, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xff80, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r6, 0x6, 0x2a, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) io_submit(r10, 0x2000000000000390, &(0x7f0000001300)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x6, r9, 0x0}]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m36.055228278s ago: executing program 4 (id=754): r0 = io_uring_setup(0x6bd, &(0x7f00000000c0)={0x0, 0x18a9, 0x2, 0x1, 0x5e}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x212a7, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) syz_open_dev$hidraw(0x0, 0x0, 0xbb42) io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffc, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$rxrpc(0x21, 0x2, 0x2) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0xde, 0xe, 0x2, 0x7f, 0x7, 0x2, 0x81, 0x2, 0x5, 0x2, 0xe, 0xd, 0xb, 0x6}, 0xe) close_range(r0, 0xffffffffffffffff, 0x0) 3m34.961120007s ago: executing program 4 (id=761): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) migrate_pages(0x0, 0x8002, &(0x7f0000000380)=0x4, &(0x7f0000000080)=0xfffffffffffffe01) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) fsopen(&(0x7f00000002c0)='vfat\x00', 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) r3 = openat$kvm(0xffffff9c, &(0x7f0000000240), 0x2401, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000400000000000400010000000000103c586f9200000020000e0000000000c22934496c57402b6d5b0805f0287406"], 0x24, 0x2) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r6, 0x81, 0x39, &(0x7f0000000000)="67e543057f2ae17f3d7ebe315a34a70275f32b5d3d440346b5e0b62c636e4997425cb7e80e139c5b34e853cb418e61ff8b490600000035765b") preadv(r4, 0x0, 0x0, 0x9, 0x9) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="07000000000004230000020000000c0180051591dc4dbfd256dab4f56c3600020001000287c6212501f3fc365ac7c7ca64000000"], 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xda0, 0x0, 0x4000005}]}) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, &(0x7f00000000c0)) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001082abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080000000000000000001b0000000000"], 0x30}}, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) 3m32.074986511s ago: executing program 4 (id=781): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffce3, 0x7, 0x2, 0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000001200015e36bfa1000000000007000000", @ANYBLOB="feebca637e"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3m32.01616661s ago: executing program 4 (id=782): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x5c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x100}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000009dc0)={0x0, 0x0, &(0x7f0000009d80)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000002030500000000000000000000000043080005"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) epoll_create1(0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x20) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xb, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) writev(r7, &(0x7f0000000a80)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f88a8", 0x12}], 0x1) 3m31.765784842s ago: executing program 4 (id=784): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10004, 0x0, 0xfee00000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x28000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ioctl$BLKZEROOUT(r3, 0x127f, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r5, 0x8008af73, &(0x7f0000000340)={0x0, 0xcc, ""/204}) ioctl(r2, 0x400c4d06, &(0x7f0000000a00)) r6 = syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2) syz_usb_connect(0x3, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100005864e6082c105162687e010203010902120001000000000904"], 0x0) r7 = dup(r6) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000000)={0xf0f045}) ioctl$KDGKBMODE(r7, 0x4b44, &(0x7f0000000040)) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) syz_io_uring_setup(0xefc, &(0x7f0000000240)={0x0, 0x99b6, 0x10000, 0x5, 0x40055}, 0x0, 0x0, 0x0) flistxattr(r9, &(0x7f0000000000)=""/11, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x5, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x9b) 3m30.331820079s ago: executing program 4 (id=794): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x5c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x100}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000009dc0)={0x0, 0x0, &(0x7f0000009d80)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000002030500000000000000000000000043080005"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) epoll_create1(0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x20) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xb, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) writev(r7, &(0x7f0000000a80)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f88a8", 0x12}], 0x1) 3m22.500106689s ago: executing program 0 (id=833): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x103d, 0x8, 0x401, 0x483}}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000340)) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x4e21, 0x8, @remote, 0x62ef7f5f}}}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041004}, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) r3 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) r4 = syz_usb_connect$cdc_ecm(0x4, 0x6c, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5a, 0x1, 0x1, 0x6, 0xc0, 0xa, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x7, 0x24, 0x6, 0x0, 0x0, "1242"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x9e, 0x10, 0x5, 0x7}, [@network_terminal={0x7, 0x24, 0xa, 0x81, 0x26, 0x9, 0x9a}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7}, @country_functional={0x8, 0x24, 0x7, 0xa, 0x3c5, [0x1]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0x1, 0x5e}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xff, 0x8, 0x47}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xc, 0x4, 0x4}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x2, 0xed, 0x9, 0x10, 0xf}, 0x29, &(0x7f0000000200)={0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x4ac, 0x16f80, 0x5, [0xff1f7f, 0xff30, 0xff000f, 0xc0c0, 0x0, 0xff08]}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x405}}]}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000ac0)={0x44, &(0x7f0000000c00)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_subtree(r5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x2, 0x0) 3m20.09441341s ago: executing program 0 (id=845): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7f, 0x3}, 0x20) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001800050000000000000000002d000000000000010000000005000100080000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100090000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001000a0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001000b0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001000c0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001000d0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001000e0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001000f0000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100100000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100110000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100120000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100130000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100140000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100150000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100160000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100170000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100180000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100190000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001001a0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001001b0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001001c0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001001d0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001001e0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001001f0000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100200000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100210000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100220000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100230000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100240000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100250000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100260000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100270000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100280000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100290000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001002a0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001002b0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001002c0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001002d0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001002e0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001002f0000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100300000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100310000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100320000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100330000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100340000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100350000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100360000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100370000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100380000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100390000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001003a0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001003b0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001003c0000000c000500000000000a0000003000000018"], 0x1bb0}}, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000008c0)={0xfffff801, 0x6, 0x1000, 0x4, 0x6, "fc1c92867a85316d4970d64a82ffa658031299"}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff"], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x20008000) 3m20.036534168s ago: executing program 0 (id=846): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x4800, 0x119) inotify_init1(0x0) recvmsg$inet_nvme(0xffffffffffffffff, 0x0, 0x10041) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000020701020000000000000000070000090c0007ffff0001400001"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0xc4) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, 0x0, 0x0) 3m19.681117354s ago: executing program 0 (id=848): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000019300)={0x34, r1, 0x1, 0x3, 0xfffffffe, {0x3}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}]}, 0x34}}, 0x0) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000200025a729bd7000fddbdf250a1000cdfe0000010200010008000600fe7f000008000e0007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) r3 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x9) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003280)={0xdc, 0x0, &(0x7f0000003100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x10a}, @flat=@weak_handle={0x77682a85, 0x10b}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x40}, @acquire={0x40046305, 0x3}, @acquire_done={0x40106309, 0x2}, @free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000003040)={@flat=@binder={0x73622a85, 0x10a, 0x1}, @flat=@handle={0x73682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000002040)=""/4096, 0x1000, 0x0, 0x1}}, &(0x7f00000030c0)={0x0, 0x18, 0x30}}, 0x40}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x63, 0x0, &(0x7f0000003200)="f342b23b0feecb8013da6919513d56c4b86367f7cd9056ffeee43053467ca487fce336deecb6cf8830ded84bbce0b92c236ac1d0d30ed8a6418f2409feba605d9ff17264dca636d96b4bbf0b5036050d7b3c87dcb5ef0adda3f6d92bb64d5c528602b3"}) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000380)='jffs2\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) mkdirat(r4, &(0x7f0000002000)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_inodes=5,size=4']) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0xc00) close(0xffffffffffffffff) r7 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x42, 0x1ff) sendfile(r7, r6, 0x0, 0xc00) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/f3\x00', 0x42, 0x1ff) sendfile(r8, r6, 0x0, 0xc00) close(r8) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) sendfile(0xffffffffffffffff, r6, 0x0, 0xc00) close(0xffffffffffffffff) unlinkat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x0) 3m18.849360739s ago: executing program 0 (id=852): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 3m18.205759861s ago: executing program 0 (id=857): syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32=0x41424344], 0x0) syz_usb_connect$cdc_ncm(0x2, 0x75, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x5c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r3, 0x204) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001200add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000400ffffffffffffffffffffffe7ee00f0ffffffffffff020000", 0x58}], 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x3ff}], 0x3c) 3m17.895665107s ago: executing program 34 (id=857): syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32=0x41424344], 0x0) syz_usb_connect$cdc_ncm(0x2, 0x75, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x5c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r3, 0x204) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001200add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000400ffffffffffffffffffffffe7ee00f0ffffffffffff020000", 0x58}], 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x3ff}], 0x3c) 3m13.462815824s ago: executing program 35 (id=794): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x5c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x100}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000009dc0)={0x0, 0x0, &(0x7f0000009d80)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000002030500000000000000000000000043080005"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) epoll_create1(0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x20) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xb, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) writev(r7, &(0x7f0000000a80)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f88a8", 0x12}], 0x1) 2m56.015317759s ago: executing program 2 (id=969): r0 = open(&(0x7f0000000140)='./bus\x00', 0x14d27e, 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2m55.818258187s ago: executing program 2 (id=971): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x44, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x104, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@loopback={0x1000000000000}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 2m55.817754646s ago: executing program 6 (id=973): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000001040)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x37, 0x63, 0x63, 0x62, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x64, 0x30, 0x33, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x30}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x61, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f00000009c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x62, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x36, 0x32, 0x30, 0x30, 0x30, 0x66, 0x33, 0x30, 0x30, 0x30, 0x30, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) request_key(&(0x7f0000000540)='id_resolver\x00', &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000640)='logon\x00', r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x51, 0x30, 0x62, 0x30, 0x30, 0x30, 0x31, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x62, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x39, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x61, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f00000010c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x32, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x31, 0x32]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) 2m55.677216024s ago: executing program 6 (id=975): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x10000000}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f00000001c0)={0x0, 0xea60}, 0x10) write(r0, &(0x7f0000000540)="fb", 0x1) 2m55.493279801s ago: executing program 2 (id=978): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r4, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'ipvlan0\x00'}}}}}, 0x34}}, 0x4014) 2m55.381834969s ago: executing program 6 (id=979): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de979c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6ed49a1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e00008503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda940b023d190e6fba7f83060000003f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954ef19d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d80762ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70346dcc43f59300676ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x2, 0x2, 0xfd, 0x0, 0xfffffffe, 0x10000040, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, r2, 0x0, 0x902, 0x200000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x200000, 0x0, 0xffff, 0x202, 0xfffffffd, 0x5, 0x0, 0x0, 0x1, 0xfffffffe}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r3, 0x800c0910, 0x9) 2m54.8458068s ago: executing program 6 (id=985): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_LOSS={0x34, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xffff, 0x400, 0x5, 0x4e6f, 0x80000000}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x6, 0xffff8000, 0x101, 0x80000000}}]}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 2m54.823365632s ago: executing program 2 (id=986): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x40480, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x40000802, 0x3, 0x1ff, 0x4, 0x1, 0x0, 0x13, 0x800000000000012, 0x0, 0xfffffffffffffffd, 0xfffffffffffffff1, 0x40, 0x7, 0x6, 0xfa, 0x80006], 0xffff1000, 0x4fb20}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400", 0x2}], 0x1}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m54.485877766s ago: executing program 6 (id=989): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/fs/nfsd/versions\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 2m54.347367241s ago: executing program 2 (id=990): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='dummy_udc.0', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='\n', 0x1) 2m54.269906s ago: executing program 6 (id=992): getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000001100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='ra', 0x2) 2m53.909975105s ago: executing program 2 (id=994): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='tcp 2', 0x5) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, 0x0, 0x0) 2m45.979535784s ago: executing program 8 (id=1066): mount$tmpfs(0x0, 0x0, 0x0, 0x800400, &(0x7f0000000280)=ANY=[@ANYBLOB="75737271756f74612c75737271756f74615f626c2f636b5f686172646c696d69743d382c003602d0b489a86f919f1ac68bdc5cfd182efccbd9c8c256603086ae96662e2cecd09d32feb794ea7fdbe6e5c7dc6dd5462d6780829c3ceba8894f7980f3ca6cb2d138ccb857108b31a1006041ed0823cff2091e61b911e27d845e9dcecbe41757d565589ebe79f03881c1bbb08696c1b08f1ebf126e034c76310daca92daf0cc0239fa8e901e7dd8738506bf682ea87a463b72b8e419af8961a6012195e3cc7760886b62f5ce2775f2563c1dc2d75410adb1f47a51cbf0b"]) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="d0187f10ffffffffffff08021100000050505050505020000302"], 0x26) 2m45.281531059s ago: executing program 8 (id=1074): 2m45.149864875s ago: executing program 8 (id=1076): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x80) 2m45.062087976s ago: executing program 8 (id=1078): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/fs/file-max\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0', 0x1) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000380)={0x7, 0x7, 0x4, 0x1ff, 0x101, 0x1}) add_key(&(0x7f0000000080)='big_key\x00', 0x0, &(0x7f0000001980)="475a251bdb1e4c438649cdf2494dde32cd76aeabc8ca949257819f25159c532504978ed33d145658cce40a3dd867df925cbedfbd01f157cae933c958c5dfdc1e0132e03f60e3418410fe17f95bdb8090c4adb3636ea342fb8589cf4944e42579da1d2aa919fa78d9e27565fc30d2513293f3cc7d6c7d2d1fb756b0d7b352efd07bd38bedcabb8d856610db17155de5bb0409e3713b2c73464055345b98fe30949e7ee8cddc663f3d5d50881520df8da5115d6d8d81bc62e8dde2460f128365ca184efc5e1b14ff3f4ad1c1f7bad98a9435c0d757ddb9dcd577f5ae33ef675676ba7b44be538aeec0e6ec4973865dc2bb0f0847ded0a131f3b01ac48e070783564cd9031b3b9fcbeafb69dd253e8cbc2c12307f03154573a27f6f00073aae7c4c1701a3f745744c254ddd3b43988c7bbdec9c1e158fda3cdffc887206b78fb1fc943810dc473894738286878513d06aa7f074a11983261f5be648b4b76893a5f733bdafcf42427743534de2bfcf27f014923488c6476dd417344045c747c68c69e3eb5357e69d97a2cfafa44e2547aa21548dfc0739e49321684120c8bdb64448689a3412eebaca2e4b2a2ecf96690f9fec7d569087bc8561cff6012cf5cb14775230226b95a9ded9cccfedafe61c550376adf0b1b59abf9f92da6247e1061afe2eaa9d8f5a28d63db50fca875020da59426501eab6602beb74de33df143ccb60c70f950f5f53f1d5aca6371dfc8dd68cbe7ccfbe0f52e1ff238105dd93d8a3a72da45ce79824d6b091d9c91509cb290afd01f1945b118f2c1c58f17c0b59fbd872412d7d291dcecad019af039375aeee7ddcf36ede82914f64bb41281962c9b10216907c37d06aa5a5b33afe0547c6726ee169779ad6d5cfc5f373f75b234df4ac2007c6db9dc6a0fc3e7e1d2f2658e928c2a854483e6780d69908692d0166ab5334cd5ceb7a69a420803b7ca33e4609f61cfda3b631b54fb81a7473b4bbe2eabc17276f8a009668d634f332fe47fda76a1fae8fe9c3c8962f7ca7a102d5ecd1d6029abb6c422026af6ef277a4c6c21f07121cd8bcce6f1792ea6a628580b478d72b32dd50f59e893bfcf353bea1e2ddbd349c16ccc23bceb8f3b64aa16257eedabadaead30f912bd0e579c0b71e6cd86804fc39a074f94da63f0db97c5f41e38541bf441f49d2751966cc78dacd150ae0b91ffe1f5a117fe494a8b60a17ccfbc780f82f0ea96d8db842e07fb4d68edbe28119a6c2ab72ea15a5ba75ac8193dd7411d9aeece6fc23ac00370c84d7e03990ca3697a0187cc3286e4536ace023ec21389ff08cddb1e9075d1e1b3a98a95720f44e50830ad54fecd437a40f483579c7a5eb40e52e75099d9ada449ba4d0751e44de6edd5e17caa91cfb3bf88bb1e093bd76952c80669845d3cbcde8acf7415ed30ad3a0ff648968d036af2de90f2ab93b250b9386fcba42c1ba01cc951fa1f62ebbb99ad6576d803d29e81ed319350ee0a032bfab9b079ea5a29c66f665ce9ccb6b908593ae2406332c5ac7d11c9b830593576177b2af5d70c65dda56b98448862b75a54b3447534d45e0b5a52edc1a76c97f511030bd261bb1a443e1a38a78973f0781efa9910ebe207457587dbc803e68b2cb985c03c4dfbac440d58c90de66a634c07b13197b9e7d42657fb0537abe475fb56fe24cdcd771d9ac5bcea1c915a77d731d2d16a54885387e034aab6db1718521eeb07b0326d23decd5bba45b311d8617bbfd3afc10923567e8987c95260ab90ba3ff1309273a2a615174d9a33c11bfd393013c314d3df8cf4e584b752c30f54e09a38409a34cdaee74f30547b7dfdb3c48d6b4d5b7346ebcaf7fdbb91d9d45ba303e2ea2736f28301c7b8354bc6f89f58841cb844646a57153c83cd03687d8d3a6b95e93f8abd1218af123ada0de5025d18e4599c8d34cdd8ecf91af7a647c6b43d4704446a104829783ec10b68d95418ddfe8b0", 0x579, 0xfffffffffffffffb) 2m44.892029817s ago: executing program 8 (id=1081): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x9, 0x0, 0x0, 0x660}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r3, 0x0, 0x10000, 0x0, 0x1, 0x2ea473, 0x2eb80c, 0x20}) 2m44.441161333s ago: executing program 8 (id=1088): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='tcp 2', 0x5) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x8}) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) 2m38.030169258s ago: executing program 36 (id=992): getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000001100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='ra', 0x2) 2m37.503325118s ago: executing program 37 (id=994): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='tcp 2', 0x5) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, 0x0, 0x0) 2m28.1170791s ago: executing program 38 (id=1088): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='tcp 2', 0x5) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x8}) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) 15.434421447s ago: executing program 9 (id=2706): mknod$loop(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x0) r0 = open(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x11) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x6}}, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x2, 0x6, 0xfffe}) 15.317373333s ago: executing program 9 (id=2708): syz_usb_connect$cdc_ncm(0x2, 0x7e, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0xe, 0x1ccfa367b04e711b, 0xd, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0x8000, 0x7f29, 0x9}, {0x6, 0x24, 0x1a, 0xb2ef, 0x10}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8, 0xd, 0xfffe}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x3, 0x400}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0xfb, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6a, 0xd2, 0xb5}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x96, 0x2, 0x91}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x9, 0xb, 0x6, 0xff, 0x7}, 0x0, 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) 13.729445872s ago: executing program 9 (id=2729): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, &(0x7f0000000380), 0xe, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x48}}, 0x0) 13.061293979s ago: executing program 9 (id=2731): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x53ae, &(0x7f00000003c0)={0x0, 0x30b5, 0x42, 0x2, 0x157}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_clone3(&(0x7f0000000900)={0x6800, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000300)=0x0, {0x35}, &(0x7f0000000780)=""/133, 0x85, &(0x7f0000000840)=""/109, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x7, {r0}}, 0x58) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xfffffffffffffe25, &(0x7f00000004c0)=@new_dev={0x3, 0x82b, 0x0, 0x0, 0x1000, 0xffffffff, r5, 0x0, 0x4b}}}, &(0x7f0000000480)) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r6, &(0x7f00000000c0)="3f03fe7f0302140006001e", 0xb, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = socket$netlink(0x10, 0x3, 0x0) sendto(r8, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x400000000010, 0x80000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./cfg/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) write(r9, &(0x7f0000000130)='0x02', 0x4) r10 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="4000190000000c000101bb47439b3803d1ac3727340854c4cac8485f94bb9b0fa6c953404b476cdf400b43"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r10, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="2000c3000000b306afb84f913e225b8d37e6c2455ab86a8ceba258c73cce96f26dbb9a14b0c0f4a615eb0fd2baa8d7fe56e354d763b6ee77b65367596e1c11f8ee54a53b913d1a88dddd2f3735cab7f4bc51b0f7183cf988327f74df4ee503ae42aeabfb1831e5279620c195b850211c74f143791fa8d02d7d5d6e641c553deb0180802f86fd5ea5bada0e311ab4997a6c12ff15db415f9443b81482f5f86769f5d347e3317efe21960f63248d4296d9653382a7d5a2a4e187ac09332d0849e5850000000000000000"], &(0x7f0000000340)={0x0, 0xa, 0x1, 0x51}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x8}}) r11 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r11, 0x40086409, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0x1ff) 12.857529744s ago: executing program 7 (id=2732): r0 = syz_open_procfs(0x0, &(0x7f0000007a00)='net/igmp\x00') pread64(r0, &(0x7f0000000000)=""/193, 0xc1, 0x80000000000) r1 = socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x0, 0x38, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) ioctl$NILFS_IOCTL_RESIZE(r1, 0x40086e8b, &(0x7f0000000040)=0x80) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000040000000400000008"], 0x48) 10.945804853s ago: executing program 9 (id=2741): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, &(0x7f0000000380), 0xe, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x48}}, 0x0) 10.423479044s ago: executing program 9 (id=2747): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xe86c0, 0x161) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) fanotify_mark(r1, 0x451, 0x8, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r2, &(0x7f0000000a00)={0x2020}, 0x2020) 8.789664175s ago: executing program 7 (id=2754): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(des3_ede))\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0) syz_usb_control_io(r1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) 5.321206443s ago: executing program 7 (id=2778): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 5.169594209s ago: executing program 7 (id=2780): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2, 0xd}}, 0x0}, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0xe, 0x7d, "42839f7488b79c19f8b3787410c8f81e53b69784f4cb86d5fdcc909d238321051cbadb7a619b14943ebe6a913cfa10dfe2daced1a382b7801adc52f1731c7e3e8d03298c54200f13a67fe0f541f1460235bb8558fb451bc52c56c8f332e8940774b03eeeccf5e2066272c2551bdf0110d24f27cce4753d49ecd71ce7cb"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000380)={0x20, 0x81, 0x1, "e3"}, &(0x7f00000003c0)={0x20, 0x82, 0x2, "d3a2"}, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)={0x20, 0x14, 0x45}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000ac0)={0x44, &(0x7f0000000540)={0xcf9fd05f3e16ae1f, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4.831324411s ago: executing program 5 (id=2788): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(des3_ede))\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0) syz_usb_control_io(r1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) 3.228916946s ago: executing program 3 (id=2803): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xd, 0x0, &(0x7f0000000300)="88291242a03c3f98722780b605", 0x0, 0xfeff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.144308116s ago: executing program 3 (id=2804): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000011c0)='/sys/power/pm_test', 0x82, 0x10a) io_setup(0x4fe, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0xf, r0, &(0x7f0000000000), 0x0, 0x9, 0x0, 0x0, r0}]) 3.143268405s ago: executing program 5 (id=2805): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001500)=""/184, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 2.980645659s ago: executing program 3 (id=2807): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa1", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="c0fbedd8c1c20fb9b8209a08efe4", 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.834297988s ago: executing program 3 (id=2809): setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000100)='X', 0x1, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 2.678280428s ago: executing program 3 (id=2812): syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x600, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000040)=0x2) 2.347367792s ago: executing program 1 (id=2817): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000011c0)='/sys/power/pm_test', 0x82, 0x10a) io_setup(0x4fe, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0xf, r0, &(0x7f0000000000), 0x0, 0x9, 0x0, 0x0, r0}]) 2.18275698s ago: executing program 1 (id=2818): unshare(0x400) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 2.02436488s ago: executing program 5 (id=2819): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000000400000008000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 1.958297761s ago: executing program 1 (id=2820): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000800)={0x14, 0x76, 0x31f, 0x0, 0x0, "", [@nested={0x4, 0xd}]}, 0x14}], 0x1}, 0x0) 1.958111057s ago: executing program 5 (id=2821): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000005"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000030000100000000000400000850000005000000018110000", @ANYRES32=r0], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.925490736s ago: executing program 5 (id=2822): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) 1.882747788s ago: executing program 1 (id=2823): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffecc, 0xfffffffffffffffc}}, 0x10) 1.801169719s ago: executing program 1 (id=2824): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_setup_queues(r0, 0x0, &(0x7f00000007c0)={0x0, 0x6a1a, 0x2000, 0x3, 0x185}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f51, 0x8000, 0x2, 0x2d7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbfe3, 0x4, 0x1, 0x272}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa471, 0x100, 0x3, 0xd1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe0a5, 0x20, 0x0, 0xaa}}], 0x4, &(0x7f0000001d00)={0x2e, 0x30, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x2, 0x6d7, 0x0, &(0x7f0000000d00)=@buf_4k="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"}}, &(0x7f0000001d80)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) 1.801043653s ago: executing program 7 (id=2825): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) 1.799735356s ago: executing program 5 (id=2826): socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0x21, 0x56, 0x41, 0x8, 0x54c, 0x38, 0x896, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x72, 0xd0, 0x4, "", [{{0x9, 0x4, 0xf7, 0x3, 0x1, 0x1d, 0x3d, 0x9, 0xee, [@uac_as], [{{0x9, 0x5, 0x9, 0x3, 0x20, 0x8, 0x6, 0x2}}]}}]}}]}}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0}) 1.509890284s ago: executing program 7 (id=2827): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000140), 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x40440, 0x0) socket$unix(0x1, 0x2, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0xa9, 0x2e, 0xc, 0x10, 0x11ba, 0x1003, 0x14c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x7, 0xe0, 0x40, "", [{{0x9, 0x4, 0x3, 0x7, 0x0, 0x41, 0x0, 0xba, 0x4}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) 636.656033ms ago: executing program 1 (id=2828): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000011c0)='/sys/power/pm_test', 0x82, 0x10a) io_setup(0x4fe, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0xf, r0, &(0x7f0000000000), 0x0, 0x9, 0x0, 0x0, r0}]) 0s ago: executing program 3 (id=2829): ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x1, 0x4, 0x1, 0x3ff}, 0x9}) execve(0x0, 0x0, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x1, 0x6, 0x4, 0x10000, "5debca001a5fbf0900000000000000ff", 0x2, 0x3, 0x1c, 0x0, 0x0, 0x7f}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) kernel console output (not intermixed with test programs): 43084][ T9790] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.261057][ T9790] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.272166][ T9790] bridge_slave_0: entered allmulticast mode [ 279.287253][ T9790] bridge_slave_0: entered promiscuous mode [ 279.324734][ T9790] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.343725][ T9790] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.368567][ T9790] bridge_slave_1: entered allmulticast mode [ 279.391755][ T9790] bridge_slave_1: entered promiscuous mode [ 279.572105][ T9790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.590238][ T9790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.652938][ T9790] team0: Port device team_slave_0 added [ 279.679430][ T9790] team0: Port device team_slave_1 added [ 279.709981][ T9768] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 279.722161][ T9768] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 279.759651][ T9768] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 279.770395][ T9768] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 279.779003][ T9790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.792190][ T9790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.819878][ T9790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.834478][ T9768] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 279.844741][ T9768] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 279.853871][ T9790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.861789][ T9790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.893497][ T9790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.910367][ T9768] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 279.927930][ T9768] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 280.004794][ T9790] hsr_slave_0: entered promiscuous mode [ 280.011974][ T9790] hsr_slave_1: entered promiscuous mode [ 280.018104][ T9790] debugfs: 'hsr0' already exists in 'hsr' [ 280.024515][ T9790] Cannot create hsr debugfs directory [ 280.231673][ T9768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.287298][ T9790] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.330178][ T9768] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.342647][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.349831][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.366904][ T6320] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.374034][ T6320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.429080][ T9790] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.441617][ T5611] Bluetooth: hci6: command tx timeout [ 280.588793][ T9790] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.736915][ T9790] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.121013][ T9768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.127967][ T5611] Bluetooth: hci7: command tx timeout [ 281.209155][ T9790] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 281.237669][ T9790] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 281.257679][ T9790] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 281.274996][ T9790] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 281.294433][ T9790] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 281.318178][ T9790] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 281.337192][ T9790] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 281.372372][ T9790] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 281.565187][ T9768] veth0_vlan: entered promiscuous mode [ 281.594102][ T9768] veth1_vlan: entered promiscuous mode [ 281.619594][ T9790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.673256][ T9790] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.699831][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.706980][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.718419][ T9768] veth0_macvtap: entered promiscuous mode [ 281.736320][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.743529][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.762174][ T9768] veth1_macvtap: entered promiscuous mode [ 281.810053][ T9768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.842199][ T9768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.856556][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1173'. [ 281.904837][ T6312] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.927307][ T6312] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.013989][ T76] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.045726][ T76] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.070117][ T9891] tipc: Enabling of bearer rejected, already enabled [ 282.150870][ T9894] hsr_slave_0: left promiscuous mode [ 282.164574][ T9894] hsr_slave_1: left promiscuous mode [ 282.257527][ T9899] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1175'. [ 282.307262][ T9896] gretap0: entered promiscuous mode [ 282.314358][ T9896] dummy0: entered promiscuous mode [ 282.321719][ T9896] debugfs: 'hsr0' already exists in 'hsr' [ 282.327847][ T9896] Cannot create hsr debugfs directory [ 282.349922][ T9899] dummy0 (unregistering): left promiscuous mode [ 282.372703][ T9901] bridge0: port 3(syz_tun) entered blocking state [ 282.379389][ T9901] bridge0: port 3(syz_tun) entered disabled state [ 282.387297][ T9901] syz_tun: entered allmulticast mode [ 282.398527][ T9901] syz_tun: entered promiscuous mode [ 282.405089][ T9901] bridge0: port 3(syz_tun) entered blocking state [ 282.413329][ T9901] bridge0: port 3(syz_tun) entered forwarding state [ 282.447022][ T1010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.461152][ T1010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.567151][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.600566][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.697067][ T5611] Bluetooth: hci6: command tx timeout [ 282.927199][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1182'. [ 283.057899][ T9790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.144927][ T9790] veth0_vlan: entered promiscuous mode [ 283.200354][ T9790] veth1_vlan: entered promiscuous mode [ 283.299081][ T9790] veth0_macvtap: entered promiscuous mode [ 283.330226][ T9790] veth1_macvtap: entered promiscuous mode [ 283.345076][ T9931] rdma_rxe: rxe_newlink: failed to add syz_tun [ 283.367713][ T9790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.378504][ T5611] Bluetooth: hci7: command tx timeout [ 283.395458][ T9790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.532741][ T76] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.583685][ T76] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.627608][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 283.638766][ T76] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.745989][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.764296][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.781785][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.810840][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 283.819267][ T10] usb 10-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 283.841569][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.867753][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.881595][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.897405][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.929078][ T10] usb 10-1: config 0 descriptor?? [ 283.964645][ T10] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 284.059991][ T29] audit: type=1400 audit(1786299362.156:773): avc: denied { write } for pid=9935 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.237245][ T5812] usb 10-1: USB disconnect, device number 2 [ 284.343475][ T29] audit: type=1400 audit(1786299362.415:774): avc: denied { write } for pid=9955 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.937655][ T5611] Bluetooth: hci6: command tx timeout [ 285.043027][ T29] audit: type=1400 audit(1786299363.061:775): avc: denied { write } for pid=9969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.271550][ T29] audit: type=1400 audit(1786299363.255:776): avc: denied { write } for pid=10002 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.322622][T10007] ip_tables: iptables: counters copy to user failed while replacing table [ 285.622852][T10022] pim6reg: entered allmulticast mode [ 285.630127][ T5611] Bluetooth: hci7: command tx timeout [ 286.003554][ T29] audit: type=1400 audit(1786299363.947:777): avc: denied { write } for pid=10010 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.036761][ T5602] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 286.053452][ T5602] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 286.071394][ T5602] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 286.091567][T10038] lo speed is unknown, defaulting to 1000 [ 286.097465][ T5602] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 286.111929][T10038] xfrm0 speed is unknown, defaulting to 1000 [ 286.122744][ T5602] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 286.130577][ T29] audit: type=1400 audit(1786299364.058:778): avc: denied { call } for pid=10042 comm="syz.9.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 286.307021][ T29] audit: type=1400 audit(1786299364.224:779): avc: denied { write } for pid=10046 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.770781][T10065] syz.9.1225 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 286.806951][T10065] CPU: 1 UID: 0 PID: 10065 Comm: syz.9.1225 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.806988][T10065] Tainted: [L]=SOFTLOCKUP [ 286.806995][T10065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 286.807007][T10065] Call Trace: [ 286.807013][T10065] [ 286.807021][T10065] dump_stack_lvl+0x100/0x190 [ 286.807049][T10065] dump_header+0xfb/0x606 [ 286.807072][T10065] oom_kill_process.cold+0xd/0x330 [ 286.807103][T10065] out_of_memory+0x340/0x14f0 [ 286.807139][T10065] ? __pfx_out_of_memory+0x10/0x10 [ 286.807177][T10065] mem_cgroup_out_of_memory+0xc6/0x130 [ 286.807199][T10065] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 286.807219][T10065] ? find_held_lock+0x2b/0x80 [ 286.807243][T10065] ? do_raw_spin_unlock+0x145/0x1e0 [ 286.807272][T10065] ? _raw_spin_unlock+0x28/0x50 [ 286.807296][T10065] try_charge_memcg+0x6e5/0xdf0 [ 286.807326][T10065] ? __pfx_try_charge_memcg+0x10/0x10 [ 286.807352][T10065] ? find_held_lock+0x2b/0x80 [ 286.807369][T10065] ? rcu_read_unlock+0x17/0x60 [ 286.807395][T10065] ? rcu_read_unlock+0x17/0x60 [ 286.807429][T10065] __memcg_slab_post_alloc_hook+0x469/0x1160 [ 286.807461][T10065] ? kasan_unpoison+0x27/0x60 [ 286.807483][T10065] __kmalloc_cache_noprof+0x592/0x6c0 [ 286.807503][T10065] ? copy_time_ns+0xf2/0x790 [ 286.807530][T10065] copy_time_ns+0xf2/0x790 [ 286.807554][T10065] create_new_namespaces+0x48a/0xac0 [ 286.807587][T10065] unshare_nsproxy_namespaces+0xf2/0x220 [ 286.807615][T10065] ksys_unshare+0x438/0xab0 [ 286.807644][T10065] ? __pfx_ksys_unshare+0x10/0x10 [ 286.807682][T10065] __x64_sys_unshare+0x31/0x40 [ 286.807709][T10065] do_syscall_64+0x115/0x870 [ 286.807732][T10065] ? clear_bhb_loop+0x70/0xc0 [ 286.807755][T10065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.807774][T10065] RIP: 0033:0x7fe77379e0d9 [ 286.807790][T10065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.807808][T10065] RSP: 002b:00007fe7746ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 286.807826][T10065] RAX: ffffffffffffffda RBX: 00007fe773a25fa0 RCX: 00007fe77379e0d9 [ 286.807839][T10065] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000080 [ 286.807849][T10065] RBP: 00007fe773835024 R08: 0000000000000000 R09: 0000000000000000 [ 286.807860][T10065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.807871][T10065] R13: 00007fe773a26038 R14: 00007fe773a25fa0 R15: 00007ffd11c03668 [ 286.807896][T10065] [ 286.852334][T10065] memory: usage 8kB, limit 8kB, failcnt 21 [ 286.916509][T10035] lo speed is unknown, defaulting to 1000 [ 286.956627][T10065] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 287.071308][T10035] xfrm0 speed is unknown, defaulting to 1000 [ 287.083643][T10065] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 287.083663][T10065] Memory cgroup stats for /syz9/test: [ 287.084019][T10065] cache 0 [ 287.084029][T10065] rss 0 [ 287.084036][T10065] rss_huge 0 [ 287.084043][T10065] shmem 0 [ 287.084050][T10065] mapped_file 0 [ 287.084057][T10065] dirty 0 [ 287.084064][T10065] writeback 0 [ 287.084070][T10065] workingset_refault_anon 0 [ 287.084078][T10065] workingset_refault_file 0 [ 287.084086][T10065] swap 0 [ 287.084093][T10065] swapcached 0 [ 287.084100][T10065] pgpgin 0 [ 287.084106][T10065] pgpgout 0 [ 287.084113][T10065] pgfault 0 [ 287.084119][T10065] pgmajfault 0 [ 287.084126][T10065] inactive_anon 0 [ 287.084133][T10065] active_anon 0 [ 287.084140][T10065] inactive_file 0 [ 287.084147][T10065] active_file 0 [ 287.084154][T10065] unevictable 0 [ 287.084161][T10065] hierarchical_memory_limit 8192 [ 287.084169][T10065] hierarchical_memsw_limit 9223372036854771712 [ 287.084178][T10065] total_cache 0 [ 287.084185][T10065] total_rss 0 [ 287.084192][T10065] total_rss_huge 0 [ 287.084199][T10065] total_shmem 0 [ 287.084206][T10065] total_mapped_file 0 [ 287.084213][T10065] total_dirty 0 [ 287.084220][T10065] total_writeback 0 [ 287.084227][T10065] total_workingset_refault_anon 0 [ 287.084236][T10065] total_workingset_refault_file 0 [ 287.084244][T10065] total_swap 0 [ 287.084251][T10065] total_swapcached 0 [ 287.084258][T10065] total_pgpgin 0 [ 287.084265][T10065] total_pgpgout 0 [ 287.084273][T10065] total_pgfault 0 [ 287.250767][T10065] total_pgmajfault 0 [ 287.272834][T10065] total_inactive_anon 0 [ 287.299572][T10065] total_active_anon 0 [ 287.321454][T10065] total_inactive_file 0 [ 287.341112][T10065] total_active_file 0 [ 287.365402][T10065] total_unevictable 0 [ 287.395161][T10065] anon_cost 0 [ 287.418810][T10065] file_cost 0 [ 287.428805][T10065] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz9/test,task_memcg=/syz9/test,task=syz.9.1225,pid=10064,uid=0 [ 287.455103][T10065] Memory cgroup out of memory: Killed process 10064 (syz.9.1225) total-vm:102180kB, anon-rss:1416kB, file-rss:22992kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 288.235165][T10098] Failed to initialize the IGMP6 control socket (err -105) [ 288.407259][ T5611] Bluetooth: hci8: command tx timeout [ 288.455859][T10111] ip_tables: iptables: counters copy to user failed while replacing table [ 288.896748][T10120] lo speed is unknown, defaulting to 1000 [ 288.910140][T10035] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.930450][T10035] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.957964][T10035] bridge_slave_0: entered allmulticast mode [ 288.970055][T10135] netlink: 'syz.9.1254': attribute type 2 has an invalid length. [ 288.983016][T10136] netlink: 4564 bytes leftover after parsing attributes in process `syz.1.1255'. [ 288.992635][T10035] bridge_slave_0: entered promiscuous mode [ 289.012809][T10120] xfrm0 speed is unknown, defaulting to 1000 [ 289.014346][T10035] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.039374][T10035] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.055919][T10035] bridge_slave_1: entered allmulticast mode [ 289.076129][T10035] bridge_slave_1: entered promiscuous mode [ 289.141595][T10135] : entered promiscuous mode [ 289.275933][T10035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.331022][T10035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.427256][T10035] team0: Port device team_slave_0 added [ 289.452938][T10035] team0: Port device team_slave_1 added [ 289.540932][ T5704] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 289.541066][T10035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.571374][T10035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.638547][T10035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.664192][T10035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.673044][T10035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.707835][T10035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.726201][ T5704] usb 2-1: not running at top speed; connect to a high speed hub [ 289.762776][ T5704] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 289.785406][ T5704] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.806591][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.866109][ T5704] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 289.896648][ T5704] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 289.912365][ T5704] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 289.937048][ T5704] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 289.961364][ T5704] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 289.997058][ T5704] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 290.039679][ T5704] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 290.058439][ T5704] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 290.059947][T10035] hsr_slave_0: entered promiscuous mode [ 290.116935][T10035] hsr_slave_1: entered promiscuous mode [ 290.124497][ T5704] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 290.141613][T10035] debugfs: 'hsr0' already exists in 'hsr' [ 290.154082][ T5704] usb 2-1: USB disconnect, device number 12 [ 290.160170][T10035] Cannot create hsr debugfs directory [ 290.194611][ T5704] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 290.254560][ T5704] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 290.281153][ T5704] keyspan 2-1:1.0: device disconnected [ 290.598722][T10035] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.661693][ T5611] Bluetooth: hci8: command tx timeout [ 290.903031][T10035] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.142600][T10035] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.157042][T10187] netlink: 'syz.1.1277': attribute type 2 has an invalid length. [ 291.329609][T10035] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.837629][T10206] netlink: 'syz.3.1288': attribute type 3 has an invalid length. [ 291.862119][T10206] netlink: 'syz.3.1288': attribute type 3 has an invalid length. [ 291.898348][T10206] netlink: 'syz.3.1288': attribute type 3 has an invalid length. [ 291.919712][T10206] netlink: 'syz.3.1288': attribute type 3 has an invalid length. [ 291.938901][T10206] netlink: 'syz.3.1288': attribute type 3 has an invalid length. [ 291.960367][T10206] netlink: 'syz.3.1288': attribute type 3 has an invalid length. [ 291.978335][T10206] netlink: 'syz.3.1288': attribute type 3 has an invalid length. [ 291.998224][T10206] netlink: 'syz.3.1288': attribute type 3 has an invalid length. [ 292.125840][T10212] lo speed is unknown, defaulting to 1000 [ 292.187193][T10212] xfrm0 speed is unknown, defaulting to 1000 [ 292.209624][T10035] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 292.241449][T10035] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 292.279642][T10035] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 292.329805][T10035] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 292.358555][T10035] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 292.384084][T10035] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 292.405862][T10035] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 292.436809][T10035] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 292.728297][T10035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.744791][T10245] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1302'. [ 292.770113][T10245] openvswitch: netlink: Key type 16135 is out of range max 32 [ 292.886553][T10250] overlayfs: failed to clone upperpath [ 292.906202][T10035] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.913243][ T5611] Bluetooth: hci8: command tx timeout [ 292.938381][T10241] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 293.087697][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.094926][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.146468][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.153648][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.191899][T10256] netlink: 49920 bytes leftover after parsing attributes in process `syz.7.1307'. [ 293.769614][T10274] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1313'. [ 293.802617][T10274] openvswitch: netlink: Key type 16135 is out of range max 32 [ 294.053884][T10035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.443081][T10306] overlayfs: failed to resolve './bus': -2 [ 294.684430][T10319] netlink: zone id is out of range [ 294.744934][T10035] veth0_vlan: entered promiscuous mode [ 294.864437][T10035] veth1_vlan: entered promiscuous mode [ 294.967223][T10035] veth0_macvtap: entered promiscuous mode [ 294.971938][T10329] fuse: fd is not a fuse device [ 295.173407][ T5611] Bluetooth: hci8: command tx timeout [ 295.380247][T10035] veth1_macvtap: entered promiscuous mode [ 295.452586][T10035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.507297][T10035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.598747][T10338] overlayfs: failed to resolve './bus': -2 [ 295.650156][ T76] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.759361][ T6320] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.792622][ T6320] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.910150][ T137] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.988475][T10350] validate_nla: 40 callbacks suppressed [ 295.988493][T10350] netlink: 'syz.3.1343': attribute type 3 has an invalid length. [ 296.011896][T10350] netlink: 'syz.3.1343': attribute type 3 has an invalid length. [ 296.022943][T10350] netlink: 'syz.3.1343': attribute type 3 has an invalid length. [ 296.031571][T10350] netlink: 'syz.3.1343': attribute type 3 has an invalid length. [ 296.050318][T10350] netlink: 'syz.3.1343': attribute type 3 has an invalid length. [ 296.062995][T10350] netlink: 'syz.3.1343': attribute type 3 has an invalid length. [ 296.083957][T10350] netlink: 'syz.3.1343': attribute type 3 has an invalid length. [ 296.107273][T10350] netlink: 'syz.3.1343': attribute type 3 has an invalid length. [ 296.110152][ T29] audit: type=1400 audit(1786299373.272:780): avc: denied { read } for pid=10352 comm="syz.7.1345" name="file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 296.127371][T10350] netlink: 'syz.3.1343': attribute type 3 has an invalid length. [ 296.166464][T10350] netlink: 'syz.3.1343': attribute type 3 has an invalid length. [ 296.187615][ T29] audit: type=1400 audit(1786299373.309:781): avc: denied { open } for pid=10352 comm="syz.7.1345" path="/126/file0/file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 296.196621][ T6324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.249494][T10348] lo speed is unknown, defaulting to 1000 [ 296.304208][ T6324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.330964][ T29] audit: type=1400 audit(1786299373.327:782): avc: denied { write } for pid=10356 comm="syz.9.1346" name="g1" dev="configfs" ino=10825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 296.358718][T10348] xfrm0 speed is unknown, defaulting to 1000 [ 296.368124][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1348'. [ 296.417894][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.439142][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.428222][ T29] audit: type=1400 audit(1786299375.414:783): avc: denied { read } for pid=10447 comm="syz.7.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 299.610313][ T5812] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 299.803151][ T5812] usb 10-1: unable to get BOS descriptor or descriptor too short [ 299.837725][ T5812] usb 10-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 299.872030][ T5812] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.905632][ T5812] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 299.932963][ T5812] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 299.948907][T10520] bridge0: port 1(syz_tun) entered blocking state [ 299.956637][T10520] bridge0: port 1(syz_tun) entered forwarding state [ 299.981046][ T5812] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 300.032857][ T5812] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.071508][ T5812] usb 10-1: Product: syz [ 300.086040][ T5812] usb 10-1: Manufacturer: syz [ 300.093532][T10520] bridge0: port 1(syz_tun) entered disabled state [ 300.101062][ T5812] usb 10-1: SerialNumber: syz [ 300.113176][ T5812] usb 10-1: config 0 descriptor?? [ 300.134932][T10489] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 300.204497][ C0] usb 10-1: NFC: Urb failure (status -71) [ 300.205264][ T5812] usb 10-1: NFC: Unable to get FW version [ 300.205791][ T5812] pn533_usb 10-1:0.0: probe with driver pn533_usb failed with error -90 [ 300.325445][T10523] Failed to initialize the IGMP6 autojoin socket (err -105) [ 300.404947][ T29] audit: type=1400 audit(1786299377.241:784): avc: denied { ioctl } for pid=10485 comm="syz.9.1407" path="socket:[32538]" dev="sockfs" ino=32538 ioctlcmd=0x6e8b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 300.411378][ T5812] usb 10-1: USB disconnect, device number 3 [ 300.758052][T10551] tipc: Enabling of bearer rejected, failed to enable media [ 301.366177][T10580] tipc: Enabling of bearer rejected, already enabled [ 302.292433][T10603] lo speed is unknown, defaulting to 1000 [ 302.322526][T10603] xfrm0 speed is unknown, defaulting to 1000 [ 302.344829][T10607] tipc: Enabling of bearer rejected, failed to enable media [ 303.251051][T10636] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 303.329800][T10641] netlink: get zone limit has 4 unknown bytes [ 303.627014][T10650] smc: net device lo applied user defined pnetid SYZ0 [ 305.421763][ T29] audit: type=1400 audit(1786299381.867:785): avc: denied { ioctl } for pid=10679 comm="syz.7.1496" path="/dev/ptyr2" dev="devtmpfs" ino=137 ioctlcmd=0x5439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 305.706577][T10691] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1501'. [ 305.723407][ T29] audit: type=1400 audit(1786299382.153:786): avc: denied { mounton } for pid=10692 comm="syz.7.1502" path="/171/file0" dev="tmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 305.801026][ T29] audit: type=1400 audit(1786299382.190:787): avc: denied { read } for pid=10692 comm="syz.7.1502" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 305.909450][ T29] audit: type=1400 audit(1786299382.190:788): avc: denied { open } for pid=10692 comm="syz.7.1502" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 305.999187][ T29] audit: type=1400 audit(1786299382.190:789): avc: denied { ioctl } for pid=10692 comm="syz.7.1502" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 306.966038][T10736] lo speed is unknown, defaulting to 1000 [ 306.985765][T10736] xfrm0 speed is unknown, defaulting to 1000 [ 307.775805][T10772] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 307.813721][T10772] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 308.045616][T10782] fuse: fd is not a fuse device [ 308.313067][T10793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1546'. [ 309.325068][T10831] scsi_strcpy_devinfo: vendor string '‰˜b~žs–bÉñ%`Q¤ÿìÊ® õ~…G|©\»D½5©X¡Â™ú2õËa¹ÐE' is too long [ 309.894607][ T5696] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 309.923051][T10855] binder_alloc: 10854: binder_alloc_buf, no vma [ 309.985587][T10859] jffs2: notice: (10859) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 5 of xref (0 dead, 1 orphan) found. [ 310.018192][T10861] binder_alloc: 10854: binder_alloc_buf, no vma [ 310.088657][ T5696] usb 10-1: Using ep0 maxpacket: 32 [ 310.105484][ T5696] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 310.136535][ T5696] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 310.155074][ T5696] usb 10-1: config 0 has no interface number 0 [ 310.173780][ T5696] usb 10-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 310.197701][ T5696] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.216769][ T5696] usb 10-1: Product: syz [ 310.224646][ T5696] usb 10-1: Manufacturer: syz [ 310.239595][ T5696] usb 10-1: SerialNumber: syz [ 310.270973][ T5696] usb 10-1: config 0 descriptor?? [ 310.289236][ T5696] em28xx 10-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 310.311688][ T5696] em28xx 10-1:0.132: Video interface 132 found: [ 310.732122][ T5696] em28xx 10-1:0.132: unknown em28xx chip ID (0) [ 310.832888][ T5696] em28xx 10-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 310.865030][ T5696] em28xx 10-1:0.132: board has no eeprom [ 310.945873][ T5696] em28xx 10-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 310.982830][ T5696] em28xx 10-1:0.132: analog set to bulk mode. [ 311.007787][ T5812] em28xx 10-1:0.132: Registering V4L2 extension [ 311.028431][ T29] audit: type=1400 audit(1786299387.046:790): avc: denied { setattr } for pid=10876 comm="syz.7.1583" name="NETLINK" dev="sockfs" ino=34407 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 311.073349][ T5696] usb 10-1: USB disconnect, device number 4 [ 311.105311][ T5696] em28xx 10-1:0.132: Disconnecting em28xx [ 311.329605][ T5812] em28xx 10-1:0.132: Config register raw data: 0xffffffed [ 311.343533][T10886] lo speed is unknown, defaulting to 1000 [ 311.355320][ T5812] em28xx 10-1:0.132: AC97 chip type couldn't be determined [ 311.376186][T10886] xfrm0 speed is unknown, defaulting to 1000 [ 311.387339][ T5812] em28xx 10-1:0.132: No AC97 audio processor [ 311.554162][ T5812] usb 10-1: Decoder not found [ 311.576255][ T5812] em28xx 10-1:0.132: failed to create media graph [ 311.601825][ T5812] em28xx 10-1:0.132: V4L2 device video103 deregistered [ 311.683679][T10906] overlayfs: failed to resolve './file1': -2 [ 311.696182][ T5812] em28xx 10-1:0.132: Remote control support is not available for this card. [ 311.708446][T10908] overlayfs: missing 'lowerdir' [ 311.731061][ T5696] em28xx 10-1:0.132: Closing input extension [ 311.781765][ T5696] em28xx 10-1:0.132: Freeing device [ 311.907146][ T5602] Bluetooth: hci0: hardware error 0x04 [ 312.383079][T10928] fuse: Bad value for 'fd' [ 312.527757][T10934] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1606'. [ 312.662543][T10939] overlayfs: missing 'lowerdir' [ 313.120126][ T29] audit: type=1400 audit(1786299388.975:791): avc: denied { setopt } for pid=10958 comm="syz.5.1617" lport=41176 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 313.702158][T10986] overlayfs: failed to resolve './file1': -2 [ 314.148541][ T5602] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 314.208172][ T29] audit: type=1400 audit(1786299389.982:792): avc: denied { create } for pid=11004 comm="syz.3.1637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 314.255110][ T29] audit: type=1400 audit(1786299390.009:793): avc: denied { setopt } for pid=11004 comm="syz.3.1637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 314.561638][ T29] audit: type=1400 audit(1786299390.305:794): avc: denied { read write } for pid=11020 comm="syz.9.1645" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 314.591149][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 314.646324][ T29] audit: type=1400 audit(1786299390.305:795): avc: denied { open } for pid=11020 comm="syz.9.1645" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 314.789872][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 314.813354][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.843486][ T10] usb 2-1: Product: syz [ 314.850951][ T10] usb 2-1: Manufacturer: syz [ 314.868990][ T10] usb 2-1: SerialNumber: syz [ 315.337273][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 315.391041][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 315.763841][ T29] audit: type=1400 audit(1786299391.413:796): avc: denied { append } for pid=11069 comm="syz.5.1669" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 315.860975][ T29] audit: type=1400 audit(1786299391.459:797): avc: denied { connect } for pid=11069 comm="syz.5.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 315.931091][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 316.786346][T11090] socket: no more sockets [ 316.806787][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 316.813574][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 316.821854][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 316.828431][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 316.834956][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 316.841534][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 316.848110][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 316.854636][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 316.861215][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 316.867740][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 316.874295][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 316.880846][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 316.887389][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 316.919768][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 316.943041][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 316.960139][ T10] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 317.015791][ T10] usb 2-1: USB disconnect, device number 13 [ 317.867523][ T29] audit: type=1400 audit(1786299393.370:798): avc: denied { read } for pid=11133 comm="syz.7.1698" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 317.947475][ T29] audit: type=1400 audit(1786299393.388:799): avc: denied { open } for pid=11133 comm="syz.7.1698" path="/193/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 317.973404][ T29] audit: type=1400 audit(1786299393.388:800): avc: denied { ioctl } for pid=11133 comm="syz.7.1698" path="/193/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 318.338492][T11152] validate_nla: 37 callbacks suppressed [ 318.338509][T11152] netlink: 'syz.3.1705': attribute type 2 has an invalid length. [ 318.394187][T11152] netlink: 'syz.3.1705': attribute type 8 has an invalid length. [ 318.423141][T11152] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1705'. [ 318.484641][ T29] audit: type=1400 audit(1786299393.924:801): avc: denied { read write } for pid=11157 comm="syz.1.1708" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 318.583093][ T29] audit: type=1400 audit(1786299393.924:802): avc: denied { open } for pid=11157 comm="syz.1.1708" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 318.788597][ T30] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 318.992984][ T30] usb 2-1: Using ep0 maxpacket: 8 [ 319.009807][ T30] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 319.030109][ T30] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.051931][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.088105][ T30] usb 2-1: config 0 descriptor?? [ 319.109983][ T30] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 319.581710][ T29] audit: type=1400 audit(1786299394.948:803): avc: denied { connect } for pid=11157 comm="syz.1.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 319.697838][ T30] gspca_vc032x: reg_w err -71 [ 319.708443][ T30] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 319.727657][ T30] usb 2-1: USB disconnect, device number 14 [ 319.943783][T11207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1728'. [ 322.104462][ T29] audit: type=1400 audit(1786299397.266:804): avc: denied { ioctl } for pid=11231 comm="syz.9.1737" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x4d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 323.868943][T11254] fuse: Bad value for 'fd' [ 323.956856][T11257] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 324.462408][ T5704] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 324.648107][ T5704] usb 2-1: unable to get BOS descriptor or descriptor too short [ 324.668778][ T5704] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 324.693020][ T5704] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.713669][ T5704] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 324.739681][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 324.771402][ T5704] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 324.807325][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.834365][ T5704] usb 2-1: Product: syz [ 324.853229][ T5704] usb 2-1: Manufacturer: syz [ 324.872322][ T5704] usb 2-1: SerialNumber: syz [ 324.902427][ T5704] usb 2-1: config 0 descriptor?? [ 324.916692][T11267] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 324.940619][ C1] usb 2-1: NFC: Urb failure (status -71) [ 324.947292][ T5704] usb 2-1: NFC: Unable to get FW version [ 324.956098][ T5704] pn533_usb 2-1:0.0: probe with driver pn533_usb failed with error -90 [ 325.185523][ T5704] usb 2-1: USB disconnect, device number 15 [ 325.518844][T11309] fuse: Bad value for 'fd' [ 326.636738][ T5696] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 326.827473][ T5696] usb 2-1: unable to get BOS descriptor or descriptor too short [ 326.844807][ T5696] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 326.857117][ T5696] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.878751][ T5696] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 326.900673][ T5696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 326.940274][ T5696] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 326.968168][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.990481][ T5696] usb 2-1: Product: syz [ 327.011873][ T5696] usb 2-1: Manufacturer: syz [ 327.026397][ T5696] usb 2-1: SerialNumber: syz [ 327.048028][ T5696] usb 2-1: config 0 descriptor?? [ 327.065801][T11349] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 327.092414][ C0] usb 2-1: NFC: Urb failure (status -71) [ 327.109535][ T5696] usb 2-1: NFC: Unable to get FW version [ 327.128405][ T5696] pn533_usb 2-1:0.0: probe with driver pn533_usb failed with error -90 [ 327.327484][ T30] usb 2-1: USB disconnect, device number 16 [ 328.448518][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 329.420663][ T29] audit: type=1400 audit(1786299404.023:805): avc: denied { append } for pid=11420 comm="syz.1.1820" name="001" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 329.482714][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 329.489205][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.858254][ T5696] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 330.059598][ T5696] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 330.128270][ T5696] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.183544][ T5696] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 330.274588][ T5696] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 330.299678][ T5696] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 330.328063][ T5696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.376857][T11427] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 330.405756][T11427] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 330.438705][ T5696] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 330.479415][ T5696] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 330.512656][ T5696] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 330.548888][ T5696] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 330.590423][ T5696] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 330.611576][ T5696] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 331.537369][ T5696] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 331.889113][ T5696] usb 2-1: USB disconnect, device number 17 [ 331.913092][ T5696] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 331.951701][ T5696] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 331.979316][ T5696] keyspan 2-1:1.0: device disconnected [ 332.889833][T11502] overlayfs: missing 'lowerdir' [ 333.446178][T11527] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 333.564375][T11531] overlayfs: missing 'lowerdir' [ 334.162964][ T29] audit: type=1400 audit(1786299408.409:806): avc: denied { create } for pid=11558 comm="syz.7.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 334.362645][ T5704] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 334.411156][T11565] netlink: 'syz.1.1879': attribute type 10 has an invalid length. [ 334.440718][T11565] syz_tun: entered promiscuous mode [ 334.488353][T11565] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 334.546960][ T5704] usb 6-1: Using ep0 maxpacket: 8 [ 334.575291][ T5704] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 334.616619][ T5704] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.646876][ T5704] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.701654][ T5704] usb 6-1: config 0 descriptor?? [ 334.740474][ T5704] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 335.297578][ T5704] gspca_vc032x: reg_w err -71 [ 335.312930][ T5704] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 335.345504][ T5704] usb 6-1: USB disconnect, device number 4 [ 335.415856][T11591] bond1: entered promiscuous mode [ 336.802036][T11630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1906'. [ 336.825088][T11630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1906'. [ 336.861670][T11630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1906'. [ 337.272870][T11651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1915'. [ 337.301690][T11651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1915'. [ 338.502429][ T29] audit: type=1326 audit(1786299411.981:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11660 comm="syz.7.1922" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586a59e0d9 code=0x7ffc0000 [ 338.600816][ T29] audit: type=1326 audit(1786299411.981:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11660 comm="syz.7.1922" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586a59e0d9 code=0x7ffc0000 [ 338.666331][ T29] audit: type=1326 audit(1786299412.000:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11660 comm="syz.7.1922" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586a59e0d9 code=0x7ffc0000 [ 338.741243][ T29] audit: type=1326 audit(1786299412.000:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11660 comm="syz.7.1922" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586a59e0d9 code=0x7ffc0000 [ 338.818344][ T29] audit: type=1326 audit(1786299412.000:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11660 comm="syz.7.1922" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f586a59e0d9 code=0x7ffc0000 [ 339.054237][ T29] audit: type=1326 audit(1786299412.000:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11660 comm="syz.7.1922" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586a59e0d9 code=0x7ffc0000 [ 339.136284][ T29] audit: type=1326 audit(1786299412.000:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11660 comm="syz.7.1922" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586a59e0d9 code=0x7ffc0000 [ 339.222495][ T29] audit: type=1326 audit(1786299412.000:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11660 comm="syz.7.1922" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586a59e0d9 code=0x7ffc0000 [ 339.306868][ T29] audit: type=1326 audit(1786299412.000:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11660 comm="syz.7.1922" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586a59e0d9 code=0x7ffc0000 [ 339.413490][ T29] audit: type=1326 audit(1786299412.000:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11660 comm="syz.7.1922" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f586a59e0d9 code=0x7ffc0000 [ 340.299477][T11710] overlayfs: missing 'workdir' [ 340.820583][T11718] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 340.830351][T11718] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 340.838767][T11718] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 341.238187][T11726] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1951'. [ 341.457944][T11733] loop4: detected capacity change from 0 to 7 [ 341.489475][T11733] Dev loop4: unable to read RDB block 7 [ 341.511357][T11733] loop4: unable to read partition table [ 341.541407][T11733] loop4: partition table beyond EOD, truncated [ 341.574227][T11733] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 341.670762][T11739] fuse: Bad value for 'group_id' [ 341.702744][T11739] fuse: Bad value for 'group_id' [ 341.856298][T11743] lo speed is unknown, defaulting to 1000 [ 341.891978][T11743] xfrm0 speed is unknown, defaulting to 1000 [ 342.013975][T11752] netlink: 'syz.9.1963': attribute type 3 has an invalid length. [ 342.112956][T11755] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1964'. [ 342.483167][T11769] fuse: Bad value for 'group_id' [ 342.497338][T11769] fuse: Bad value for 'group_id' [ 346.469725][T11866] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2011'. [ 346.967890][T11885] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 347.008350][T11885] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 347.214247][ T5611] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 347.235902][ T5611] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 347.246628][ T5611] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 347.259377][ T5611] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 347.273419][ T5611] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 347.943104][T11890] lo speed is unknown, defaulting to 1000 [ 347.972114][T11890] xfrm0 speed is unknown, defaulting to 1000 [ 348.008583][ T5704] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 348.193009][ T5704] usb 10-1: Using ep0 maxpacket: 32 [ 348.293761][T11905] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2024'. [ 348.331258][ T9215] syz_tun (unregistering): left allmulticast mode [ 348.349281][ T9215] syz_tun (unregistering): left promiscuous mode [ 348.366280][ T9215] bridge0: port 1(syz_tun) entered disabled state [ 348.443728][ T5704] usb 10-1: unable to get BOS descriptor or descriptor too short [ 348.456287][T11923] sg_write: data in/out 155732/136 bytes for SCSI command 0x0-- guessing data in; [ 348.456287][T11923] program syz.1.2030 not setting count and/or reply_len properly [ 348.457453][ T5704] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 348.528264][ T5704] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 348.561386][ T5704] usb 10-1: can't read configurations, error -71 [ 348.782869][ T1165] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.795538][T11927] input: syz1 as /devices/virtual/input/input23 [ 349.101170][ T1165] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.136343][T11938] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 349.156193][T11938] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 349.365058][T11945] Bluetooth: MGMT ver 1.23 [ 349.401861][ T1165] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.497914][ T5602] Bluetooth: hci9: command tx timeout [ 349.562711][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 349.562726][ T29] audit: type=1400 audit(1786299422.626:1065): avc: denied { write } for pid=11949 comm="syz.1.2042" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 350.269524][T11973] jffs2: notice: (11973) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 5 of xref (0 dead, 1 orphan) found. [ 350.297708][ T29] audit: type=1326 audit(1786299423.300:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11974 comm="syz.5.2052" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281c79e0d9 code=0x7ffc0000 [ 350.421265][ T29] audit: type=1326 audit(1786299423.337:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11974 comm="syz.5.2052" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281c79e0d9 code=0x7ffc0000 [ 350.492413][ T29] audit: type=1326 audit(1786299423.337:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11974 comm="syz.5.2052" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281c79e0d9 code=0x7ffc0000 [ 350.668972][ T29] audit: type=1326 audit(1786299423.337:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11974 comm="syz.5.2052" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f281c79e0d9 code=0x7ffc0000 [ 350.697018][ T29] audit: type=1326 audit(1786299423.337:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11974 comm="syz.5.2052" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281c79e0d9 code=0x7ffc0000 [ 350.724895][ T29] audit: type=1326 audit(1786299423.337:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11974 comm="syz.5.2052" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281c79e0d9 code=0x7ffc0000 [ 350.773848][ T29] audit: type=1326 audit(1786299423.346:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11974 comm="syz.5.2052" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281c79e0d9 code=0x7ffc0000 [ 350.801035][ T29] audit: type=1326 audit(1786299423.346:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11974 comm="syz.5.2052" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281c79e0d9 code=0x7ffc0000 [ 350.829488][ T29] audit: type=1326 audit(1786299423.346:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11974 comm="syz.5.2052" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f281c79e0d9 code=0x7ffc0000 [ 350.905943][T11995] binder: 11994:11995 ioctl 4018620d 0 returned -22 [ 351.107768][T11890] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.129647][T11890] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.147666][T11890] bridge_slave_0: entered allmulticast mode [ 351.167853][T11890] bridge_slave_0: entered promiscuous mode [ 351.199257][T11890] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.216456][T11890] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.226190][T11890] bridge_slave_1: entered allmulticast mode [ 351.251948][T11890] bridge_slave_1: entered promiscuous mode [ 351.295518][ T1165] vlan2: left promiscuous mode [ 351.310761][ T1165] bridge0: port 3(vlan2) entered disabled state [ 351.350866][ T1165] pim6reg: left allmulticast mode [ 351.748912][ T5602] Bluetooth: hci9: command tx timeout [ 352.138893][ T1165] gretap0 (unregistering): left promiscuous mode [ 354.087280][ T5602] Bluetooth: hci9: command tx timeout [ 354.609234][ T1165] bond0 (unregistering): left promiscuous mode [ 354.659207][ T1165] bond0 (unregistering): Released all slaves [ 354.672634][ T10] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 354.689297][T12054] jffs2: notice: (12054) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 5 of xref (0 dead, 1 orphan) found. [ 354.703220][T12040] lo: entered allmulticast mode [ 354.753686][ T5258] 8021q: adding VLAN 0 to HW filter on device eth6 [ 354.813165][ T10] usb 10-1: device descriptor read/64, error -71 [ 354.835732][T11890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.899987][T11890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.074600][ T10] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 355.152114][T11890] team0: Port device team_slave_0 added [ 355.173677][T11890] team0: Port device team_slave_1 added [ 355.224807][ T10] usb 10-1: device descriptor read/64, error -71 [ 355.324869][T11890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.342957][T11890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.376518][ T10] usb usb10-port1: attempt power cycle [ 355.413472][T11890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.454520][T11890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.468997][T11890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.519124][T11890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.613096][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 355.613111][ T29] audit: type=1400 audit(1786299428.202:1082): avc: denied { write } for pid=12062 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.759330][ T10] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 355.801667][ T10] usb 10-1: device descriptor read/8, error -71 [ 355.840821][ T29] audit: type=1400 audit(1786299428.414:1083): avc: denied { write } for pid=12079 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.904319][T11890] hsr_slave_0: entered promiscuous mode [ 355.927807][T11890] hsr_slave_1: entered promiscuous mode [ 355.964562][T11890] debugfs: 'hsr0' already exists in 'hsr' [ 355.979235][T11890] Cannot create hsr debugfs directory [ 356.022778][ T1165] virt_wifi0: left promiscuous mode [ 356.028470][ T1165] veth1_vlan: left promiscuous mode [ 356.035133][ T1165] veth0_vlan: left promiscuous mode [ 356.070006][ T10] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 356.114784][ T10] usb 10-1: device descriptor read/8, error -71 [ 356.126788][ T29] audit: type=1400 audit(1786299428.682:1084): avc: denied { bind } for pid=12083 comm="syz.5.2084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 356.233162][ T10] usb usb10-port1: unable to enumerate USB device [ 356.341849][ T5611] Bluetooth: hci9: command tx timeout [ 356.372428][T12092] netlink: 'syz.1.2088': attribute type 18 has an invalid length. [ 356.581735][T12095] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2089'. [ 356.662871][ T5258] 8021q: adding VLAN 0 to HW filter on device eth5 [ 357.484947][ T1165] IPVS: stop unused estimator thread 0... [ 357.621773][ T29] audit: type=1400 audit(1786299430.058:1085): avc: denied { write } for pid=12101 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 357.878962][T12129] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2098'. [ 357.948367][ T29] audit: type=1400 audit(1786299430.362:1086): avc: denied { write } for pid=12130 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 358.085350][ T30] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 358.267167][ T30] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 358.286686][ T30] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.333505][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 359.406319][ T30] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 359.417743][ T30] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 359.432868][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.443855][ T30] usb 6-1: Product: syz [ 359.448143][ T30] usb 6-1: Manufacturer: syz [ 359.452843][ T30] usb 6-1: SerialNumber: syz [ 359.479858][T12127] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 359.491026][ T30] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 359.508611][ T30] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 359.523305][ T30] usbserial_generic 6-1:1.0: generic converter detected [ 359.534100][ T30] usb 6-1: generic converter now attached to ttyUSB0 [ 359.769726][ T5704] usb 6-1: USB disconnect, device number 5 [ 359.823226][ T5704] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 359.867813][ T5704] usbserial_generic 6-1:1.0: device disconnected [ 360.436689][T11890] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 360.518629][T11890] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 360.554698][T11890] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 360.623354][ T29] audit: type=1400 audit(1786299432.837:1087): avc: denied { write } for pid=12151 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.652224][ T5704] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 360.666357][T11890] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 360.719502][T11890] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 360.780205][T11890] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 360.821596][T11890] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 360.840206][ T5704] usb 10-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 360.873998][ T5704] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.875056][T11890] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 360.920771][ T29] audit: type=1400 audit(1786299433.104:1088): avc: denied { write } for pid=12172 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.953267][ T5704] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 360.996450][ T5704] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 361.027315][ T5704] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 361.084628][ T5704] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.101477][T12186] jffs2: notice: (12186) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 5 of xref (0 dead, 1 orphan) found. [ 361.252111][T11890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.335435][T11890] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.351864][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.351970][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.371670][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.371758][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.002964][ T29] audit: type=1400 audit(1786299434.101:1089): avc: denied { write } for pid=12187 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 362.047332][ T5704] gud 10-1:1.0: Failed to get connectors (error=-71) [ 362.081634][ T5704] gud 10-1:1.0: probe with driver gud failed with error -71 [ 362.124632][ T5704] usb 10-1: USB disconnect, device number 11 [ 362.251204][ T29] audit: type=1400 audit(1786299434.332:1090): avc: denied { write } for pid=12223 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 362.477777][T12239] sg_write: data in/out 352340/136 bytes for SCSI command 0x0-- guessing data in; [ 362.477777][T12239] program syz.5.2128 not setting count and/or reply_len properly [ 362.774029][T11890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.015025][T11890] veth0_vlan: entered promiscuous mode [ 363.073219][T12269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2138'. [ 363.099937][T11890] veth1_vlan: entered promiscuous mode [ 363.113815][T12269] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2138'. [ 363.159832][T12269] ip6erspan0: entered promiscuous mode [ 363.210635][ T29] audit: type=1400 audit(1786299435.218:1091): avc: denied { write } for pid=12234 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 363.254003][T11890] veth0_macvtap: entered promiscuous mode [ 363.302695][T11890] veth1_macvtap: entered promiscuous mode [ 363.316261][ T5765] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 363.389369][T11890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.433002][T11890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.456116][ T29] audit: type=1400 audit(1786299435.449:1092): avc: denied { write } for pid=12280 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 363.487228][ T30] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 363.511385][ T52] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.513585][ T5765] usb 10-1: Using ep0 maxpacket: 8 [ 363.546326][ T52] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.562233][ T5765] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 363.599333][ T52] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.601319][ T5765] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.662313][ T5765] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.687736][ T6320] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.695310][ T30] usb 6-1: device descriptor read/64, error -71 [ 363.703508][ T5765] usb 10-1: config 0 descriptor?? [ 363.777149][ T5765] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 363.848114][T12294] gretap0: entered promiscuous mode [ 363.848172][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.848188][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.962186][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2147'. [ 364.009478][ T30] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 364.022313][T12298] gretap0: left promiscuous mode [ 364.081147][ T6320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.103527][ T6320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.173493][ T30] usb 6-1: device descriptor read/64, error -71 [ 364.205544][ T5765] gspca_vc032x: reg_w err -71 [ 364.222250][ T5765] vc032x 10-1:0.0: probe with driver vc032x failed with error -71 [ 364.258373][ T5765] usb 10-1: USB disconnect, device number 12 [ 364.314784][ T30] usb usb6-port1: attempt power cycle [ 364.338381][ T29] audit: type=1400 audit(1786299436.262:1093): avc: denied { write } for pid=12288 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.562114][ T29] audit: type=1400 audit(1786299436.474:1094): avc: denied { write } for pid=12316 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.747315][ T30] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 364.792102][ T30] usb 6-1: device descriptor read/8, error -71 [ 365.060148][ T30] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 365.106536][ T30] usb 6-1: device descriptor read/8, error -71 [ 365.115153][ T1211] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 365.202380][ T29] audit: type=1400 audit(1786299437.065:1095): avc: denied { write } for pid=12327 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 365.246965][ T30] usb usb6-port1: unable to enumerate USB device [ 365.320807][ T1211] usb 4-1: Using ep0 maxpacket: 16 [ 365.332995][ T1211] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 365.366816][ T1211] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.411142][ T1211] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 365.437453][ T29] audit: type=1400 audit(1786299437.277:1096): avc: denied { write } for pid=12354 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 365.444110][ T1211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.532565][T12358] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2165'. [ 365.545630][ T1211] usb 4-1: Product: syz [ 365.559700][ T1211] usb 4-1: Manufacturer: syz [ 365.575763][T12358] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 365.586207][ T1211] usb 4-1: SerialNumber: syz [ 365.617794][ T1211] usb 4-1: 0:2 : does not exist [ 365.781494][T12360] lo speed is unknown, defaulting to 1000 [ 365.788963][T12360] xfrm0 speed is unknown, defaulting to 1000 [ 365.843480][ T1211] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 365.977498][ T1211] usb 4-1: USB disconnect, device number 3 [ 366.154426][ T5598] udevd[5598]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 366.637738][T12370] jffs2: notice: (12370) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 5 of xref (0 dead, 1 orphan) found. [ 367.419088][T12390] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2176'. [ 367.458191][T12390] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 368.093068][ T5696] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 368.122411][T12412] Mass Storage Function, version: 2009/09/11 [ 368.129748][ T29] audit: type=1400 audit(1786299439.751:1097): avc: denied { write } for pid=12411 comm="syz.9.2187" name="functions" dev="configfs" ino=10826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 368.172868][T12412] LUN: removable file: (no medium) [ 368.199585][ T29] audit: type=1800 audit(1786299439.825:1098): pid=12420 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.2187" name="file" dev="configfs" ino=43140 res=0 errno=0 [ 368.332130][ T5696] usb 2-1: Using ep0 maxpacket: 8 [ 368.348031][ T5696] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 368.388562][ T5696] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.396943][T12425] sg_write: data in/out 301408/136 bytes for SCSI command 0x0-- guessing data in; [ 368.396943][T12425] program syz.3.2193 not setting count and/or reply_len properly [ 368.439709][ T5696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.464891][ T5696] usb 2-1: config 0 descriptor?? [ 368.503574][ T5696] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 368.920123][ T5696] gspca_vc032x: reg_w err -71 [ 368.930709][ T5696] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 368.961969][ T5696] usb 2-1: USB disconnect, device number 18 [ 368.973161][ T1211] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 369.534121][ T1211] usb 4-1: unable to get BOS descriptor or descriptor too short [ 369.554058][ T1211] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 369.583846][ T1211] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.620071][ T1211] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 369.647797][ T1211] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 369.672500][ T1211] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 369.698674][ T1211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.715194][ T1211] usb 4-1: Product: syz [ 369.728650][ T1211] usb 4-1: Manufacturer: syz [ 369.738391][ T1211] usb 4-1: SerialNumber: syz [ 369.773878][ T1211] usb 4-1: config 0 descriptor?? [ 369.794252][T12432] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 369.803651][ C1] usb 4-1: NFC: Urb failure (status -71) [ 369.828237][ T1211] usb 4-1: NFC: Unable to get FW version [ 369.852774][ T1211] pn533_usb 4-1:0.0: probe with driver pn533_usb failed with error -90 [ 370.046240][ T5696] usb 4-1: USB disconnect, device number 4 [ 370.508547][ T5329] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 370.693917][ T5329] usb 10-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 370.721426][ T5329] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 370.753924][ T5329] usb 10-1: config 0 has no interface number 0 [ 370.781572][ T5329] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.797256][ T5329] usb 10-1: Product: syz [ 370.807020][ T5329] usb 10-1: Manufacturer: syz [ 370.825171][ T5329] usb 10-1: SerialNumber: syz [ 370.846052][ T5329] usb 10-1: config 0 descriptor?? [ 370.872577][ T5329] usb 10-1: selecting invalid altsetting 1 [ 370.927856][ T5329] dvb_ttusb_budget: ttusb_init_controller: error [ 370.955722][ T5329] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 371.068132][ T5329] DVB: Unable to find symbol stv0299_attach() [ 371.192490][ T5329] DVB: Unable to find symbol tda8083_attach() [ 371.211202][ T5329] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 371.245167][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 371.260703][ T5329] usb 10-1: USB disconnect, device number 13 [ 371.418491][ T9] usb 6-1: device descriptor read/64, error -71 [ 371.689454][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 371.866458][ T9] usb 6-1: device descriptor read/64, error -71 [ 372.021751][ T9] usb usb6-port1: attempt power cycle [ 372.331699][ T5329] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 372.406166][ T29] audit: type=1400 audit(1786299443.712:1099): avc: denied { read } for pid=12541 comm="syz.3.2243" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 372.443490][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 372.480676][ T9] usb 6-1: device descriptor read/8, error -71 [ 372.525426][ T5329] usb 10-1: Using ep0 maxpacket: 8 [ 372.542562][ T5329] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 372.568914][ T5329] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 372.609055][ T5329] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.644529][ T5329] usb 10-1: config 0 descriptor?? [ 372.761631][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 372.799962][ T9] usb 6-1: device descriptor read/8, error -71 [ 372.935321][ T9] usb usb6-port1: unable to enumerate USB device [ 372.960200][ T5329] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 373.279718][T12569] Cannot find set identified by id 0 to match [ 373.286557][T12570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.372782][T12572] syz_tun: entered allmulticast mode [ 373.395737][T12572] syz_tun: left allmulticast mode [ 374.734482][T12600] fuse: Bad value for 'fd' [ 375.027536][T12608] lo speed is unknown, defaulting to 1000 [ 375.042176][ T29] audit: type=1326 audit(1786299446.149:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12609 comm="syz.1.2274" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681679e0d9 code=0x7ffc0000 [ 375.050462][T12608] xfrm0 speed is unknown, defaulting to 1000 [ 375.107084][ T29] audit: type=1326 audit(1786299446.158:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12609 comm="syz.1.2274" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681679e0d9 code=0x7ffc0000 [ 375.164721][ T29] audit: type=1326 audit(1786299446.149:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12609 comm="syz.1.2274" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681679e0d9 code=0x7ffc0000 [ 375.225533][ T29] audit: type=1326 audit(1786299446.186:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12609 comm="syz.1.2274" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681679e0d9 code=0x7ffc0000 [ 375.280879][ T5696] usb 10-1: USB disconnect, device number 14 [ 375.287204][ T29] audit: type=1326 audit(1786299446.186:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12609 comm="syz.1.2274" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f681679e0d9 code=0x7ffc0000 [ 375.316397][ T29] audit: type=1326 audit(1786299446.186:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12609 comm="syz.1.2274" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681679e0d9 code=0x7ffc0000 [ 375.344267][ T29] audit: type=1326 audit(1786299446.186:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12609 comm="syz.1.2274" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681679e0d9 code=0x7ffc0000 [ 375.373160][ T29] audit: type=1326 audit(1786299446.186:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12609 comm="syz.1.2274" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f681679e0d9 code=0x7ffc0000 [ 375.400235][ T29] audit: type=1326 audit(1786299446.186:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12609 comm="syz.1.2274" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f681679e0d9 code=0x7ffc0000 [ 376.033181][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 377.019861][ T5696] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 377.824545][ T5696] usb 4-1: unable to get BOS descriptor or descriptor too short [ 377.836330][ T5696] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 377.859830][ T5696] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.899215][ T5696] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 377.934439][ T5696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 377.977172][ T5696] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 378.022326][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.044222][ T5696] usb 4-1: Product: syz [ 378.052928][ T5696] usb 4-1: Manufacturer: syz [ 378.064037][ T5696] usb 4-1: SerialNumber: syz [ 378.079932][ T5696] usb 4-1: config 0 descriptor?? [ 378.091733][T12637] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 378.106273][ C0] usb 4-1: NFC: Urb failure (status -71) [ 378.112121][ T5696] usb 4-1: NFC: Unable to get FW version [ 378.120029][ T5696] pn533_usb 4-1:0.0: probe with driver pn533_usb failed with error -90 [ 378.270046][T12654] fuse: Invalid rootmode [ 378.341941][ T5696] usb 4-1: USB disconnect, device number 5 [ 378.599721][T12664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.806320][ T29] audit: type=1400 audit(1786299449.620:1109): avc: denied { write } for pid=12671 comm="syz.7.2301" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 378.948168][T12679] fuse: Invalid rootmode [ 379.777355][T12710] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2319'. [ 379.799751][T12710] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 380.926800][ T29] audit: type=1400 audit(1786299451.578:1110): avc: denied { write } for pid=12757 comm="syz.7.2340" name="usbmon6" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 381.116911][T12768] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 381.178015][ T5696] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 381.351744][ T5696] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 381.397772][ T5696] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.416373][ T5696] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 381.436287][ T5696] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 381.461521][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.474481][ T5696] usb 4-1: Product: syz [ 381.483766][ T5696] usb 4-1: Manufacturer: syz [ 381.502962][ T5696] usb 4-1: SerialNumber: syz [ 381.517823][ T5696] cdc_mbim 4-1:1.0: skipping garbage [ 381.534711][ T5696] cdc_mbim 4-1:1.0: CDC Union missing and no IAD found [ 381.543718][ T5696] cdc_mbim 4-1:1.0: bind() failure [ 381.761069][ T5696] usb 4-1: USB disconnect, device number 6 [ 381.992368][T12787] socket: no more sockets [ 382.198317][T12792] jffs2: notice: (12792) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 5 of xref (0 dead, 1 orphan) found. [ 382.597764][ T5696] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 382.753548][T12803] netlink: 'syz.5.2360': attribute type 1 has an invalid length. [ 382.821208][ T5696] usb 10-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 382.867460][ T5696] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 382.888891][ T5696] usb 10-1: config 0 has no interface number 0 [ 382.912578][ T5696] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.928323][ T5696] usb 10-1: Product: syz [ 382.942962][ T5696] usb 10-1: Manufacturer: syz [ 382.955662][ T5696] usb 10-1: SerialNumber: syz [ 382.983097][ T5696] usb 10-1: config 0 descriptor?? [ 383.013966][ T5696] usb 10-1: selecting invalid altsetting 1 [ 383.032676][ T5696] dvb_ttusb_budget: ttusb_init_controller: error [ 383.048616][ T5696] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 383.066175][T12811] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2363'. [ 383.095416][T12811] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 383.181574][ T5696] DVB: Unable to find symbol stv0299_attach() [ 383.363101][T12815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2364'. [ 383.492106][ T5696] DVB: Unable to find symbol tda8083_attach() [ 383.502891][T12818] Failed to initialize the IGMP6 control socket (err -105) [ 383.521500][ T5696] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 383.579574][ T5696] usb 10-1: USB disconnect, device number 15 [ 384.118133][T12834] siw: device registration error -23 [ 384.477179][ T5696] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 385.165036][ T5696] usb 10-1: Using ep0 maxpacket: 32 [ 385.383974][ T5696] usb 10-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 385.698398][T12841] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2375'. [ 385.707854][T12841] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 385.823495][ T5696] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.851243][ T5696] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.876519][ T5696] usb 10-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 385.900648][ T5696] usb 10-1: config 0 interface 0 has no altsetting 0 [ 385.920315][ T5696] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.040582][ T5696] usb 10-1: config 0 descriptor?? [ 386.601191][ T5696] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 386.611336][ T5696] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 386.619761][ T5696] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 386.637664][ T5696] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 386.669388][ T5696] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 386.716685][ T5696] corsair-cpro 0003:1B1C:0C10.000F: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.9-1/input0 [ 386.826469][ C0] usb 10-1: input irq status -75 received [ 386.845570][ T5696] corsair-cpro 0003:1B1C:0C10.000F: probe with driver corsair-cpro failed with error -38 [ 387.060869][ T5696] usb 10-1: USB disconnect, device number 16 [ 387.135660][ T30] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 387.320444][ T30] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 387.344597][ T30] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 387.379039][ T30] usb 2-1: config 0 has no interface number 0 [ 387.408641][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.436877][ T30] usb 2-1: Product: syz [ 387.455052][ T30] usb 2-1: Manufacturer: syz [ 387.471654][ T30] usb 2-1: SerialNumber: syz [ 387.495174][ T30] usb 2-1: config 0 descriptor?? [ 387.521196][ T30] usb 2-1: selecting invalid altsetting 1 [ 387.543343][ T30] dvb_ttusb_budget: ttusb_init_controller: error [ 387.572403][ T30] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 387.649985][ T30] DVB: Unable to find symbol stv0299_attach() [ 387.759487][ T30] DVB: Unable to find symbol tda8083_attach() [ 387.774538][ T30] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 387.810308][ T30] usb 2-1: USB disconnect, device number 19 [ 387.829900][T12876] ICMPv6: NDISC: Failed to initialize the control socket (err -105) [ 388.643505][T12885] jffs2: notice: (12885) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 5 of xref (0 dead, 1 orphan) found. [ 388.724500][ T29] audit: type=1400 audit(1786299458.778:1111): avc: denied { write } for pid=12884 comm="syz.9.2392" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 388.818838][ T29] audit: type=1400 audit(1786299458.778:1112): avc: denied { create } for pid=12884 comm="syz.9.2392" name="mtd0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 388.845077][T12895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.685307][T12910] libceph: resolve '.' (ret=-3): failed [ 390.382094][T12936] fuse: Unknown parameter 'user_id00000000000000000000' [ 390.897461][ T5704] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 391.107961][ T5704] usb 10-1: unable to get BOS descriptor or descriptor too short [ 391.132470][ T5704] usb 10-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 391.157724][ T5704] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.177896][ T5704] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 391.203282][ T5704] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 391.226439][ T5704] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 391.250769][ T5704] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.266873][ T5704] usb 10-1: Product: syz [ 391.282162][ T5704] usb 10-1: Manufacturer: syz [ 391.287182][ T5704] usb 10-1: SerialNumber: syz [ 391.302815][ T5704] usb 10-1: config 0 descriptor?? [ 391.320055][T12942] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 391.346348][ C1] usb 10-1: NFC: Urb failure (status -71) [ 391.353614][ T5704] usb 10-1: NFC: Unable to get FW version [ 391.364206][ T5704] pn533_usb 10-1:0.0: probe with driver pn533_usb failed with error -90 [ 391.375282][T12959] Cannot find set identified by id 0 to match [ 391.541369][T12963] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2426'. [ 391.587753][T12963] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 391.638177][ T5704] usb 10-1: USB disconnect, device number 17 [ 392.371931][T12986] Cannot find set identified by id 0 to match [ 392.395787][T12985] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 393.039146][T13018] ip_tables: iptables: counters copy to user failed while replacing table [ 394.059640][T13047] [U]  [ 394.160176][T13052] ip_tables: iptables: counters copy to user failed while replacing table [ 395.699915][T13078] ip_tables: iptables: counters copy to user failed while replacing table [ 396.042017][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 396.053552][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 396.121205][T13091] lo speed is unknown, defaulting to 1000 [ 396.145328][T13091] xfrm0 speed is unknown, defaulting to 1000 [ 396.211754][T13093] Failed to initialize the IGMP6 autojoin socket (err -105) [ 396.975085][ T29] audit: type=1400 audit(1786299466.192:1113): avc: denied { write } for pid=13099 comm="syz.9.2488" name="functions" dev="configfs" ino=10826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 397.379447][ T29] audit: type=1400 audit(1786299466.709:1114): avc: denied { write } for pid=13099 comm="syz.9.2488" name="header" dev="configfs" ino=46049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 397.769877][ T29] audit: type=1400 audit(1786299466.856:1115): avc: denied { write } for pid=13099 comm="syz.9.2488" name="header" dev="configfs" ino=46062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 398.588020][T13112] jffs2: notice: (13112) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 1 orphan) and 6 of xref (0 dead, 1 orphan) found. [ 399.734795][T13146] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 400.663392][T13148] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2500'. [ 401.184640][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 401.358044][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 401.371339][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 401.394306][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 401.427221][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.466455][ T9] usb 6-1: config 0 descriptor?? [ 401.809437][T13189] fuse: Unknown parameter 'fd0x0000000000000003' [ 402.203673][ T5765] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 402.386888][ T5765] usb 10-1: Using ep0 maxpacket: 8 [ 402.394703][ T5765] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 402.420568][ T5765] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.441034][ T5765] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.464900][ T5765] usb 10-1: config 0 descriptor?? [ 402.484911][ T5765] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 402.912833][ T5765] gspca_vc032x: reg_w err -71 [ 402.936030][ T5765] vc032x 10-1:0.0: probe with driver vc032x failed with error -71 [ 402.967394][ T5765] usb 10-1: USB disconnect, device number 18 [ 403.249781][ T29] audit: type=1400 audit(1786299472.183:1116): avc: denied { write } for pid=13206 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 403.458245][ T29] audit: type=1400 audit(1786299472.377:1117): avc: denied { write } for pid=13229 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 404.144987][ T29] audit: type=1400 audit(1786299473.014:1118): avc: denied { write } for pid=13241 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 404.276435][ T9] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 404.333826][ T9] usb 6-1: USB disconnect, device number 14 [ 404.365197][ T29] audit: type=1400 audit(1786299473.217:1119): avc: denied { write } for pid=13263 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 404.391656][ T5696] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 404.566685][ T5696] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 404.593418][T13272] jffs2: notice: (13272) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 1 orphan) and 6 of xref (0 dead, 1 orphan) found. [ 404.604501][ T5696] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 404.675784][ T5696] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 404.706877][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.723669][ T5696] usb 2-1: Product: syz [ 404.737367][ T5696] usb 2-1: Manufacturer: syz [ 404.761860][ T5696] usb 2-1: SerialNumber: syz [ 404.921879][ T5765] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 405.009826][ T5704] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 405.127380][ T5765] usb 6-1: Using ep0 maxpacket: 16 [ 405.133985][ T5765] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 405.158211][ T5765] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.178214][ T5765] usb 6-1: Product: syz [ 405.189023][ T5765] usb 6-1: Manufacturer: syz [ 405.195262][ T5704] usb 4-1: Using ep0 maxpacket: 8 [ 405.205869][ T5765] usb 6-1: SerialNumber: syz [ 405.211751][ T5704] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 405.239874][ T5704] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 405.258895][ T5704] usb 4-1: config 0 has no interface number 0 [ 405.276551][ T5704] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 405.311170][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.334167][ T5704] usb 4-1: config 0 descriptor?? [ 405.387617][ T1211] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 405.404471][ T5704] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 405.458499][ T5696] usb 2-1: failed to send ARPC request 1: -71 [ 405.465011][ T5765] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 405.474762][ T5765] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 405.495086][ T5765] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 405.516060][ T5765] usb 6-1: media controller created [ 405.523028][ T5696] usb 2-1: failed to execute ARPC: -71 [ 405.546631][ T5765] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 405.547277][ T5696] usb 2-1: failed to set connected state for cport 0: -71 [ 405.566063][ T5696] greybus greybus1: 0/0:0: failed to set connected state: -71 [ 405.575637][ T5696] usb 2-1: failed to send ARPC request 3: -71 [ 405.597686][ T1211] usb 10-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 405.607169][ T5696] usb 2-1: failed to execute ARPC: -71 [ 405.626989][ T5704] usb 4-1: USB disconnect, device number 7 [ 405.630667][ T5696] usb 2-1: failed to clear cport 0: -71 [ 405.635802][ T1211] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 405.666041][ T5696] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 405.677364][ T1211] usb 10-1: config 0 has no interface number 0 [ 405.708646][ T1211] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.738999][ T1211] usb 10-1: Product: syz [ 405.744554][ T5696] es2_ap_driver 2-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 405.752496][ T1211] usb 10-1: Manufacturer: syz [ 405.780407][ T1211] usb 10-1: SerialNumber: syz [ 405.791147][ T5696] usb 2-1: USB disconnect, device number 20 [ 405.807967][ T1211] usb 10-1: config 0 descriptor?? [ 405.841980][ T1211] usb 10-1: selecting invalid altsetting 1 [ 405.854971][ T1211] dvb_ttusb_budget: ttusb_init_controller: error [ 405.872922][ T1211] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 405.912762][ T5765] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 405.953699][ T5765] usb 6-1: USB disconnect, device number 15 [ 406.022329][ T1211] DVB: Unable to find symbol stv0299_attach() [ 406.129499][ T1211] DVB: Unable to find symbol tda8083_attach() [ 406.153151][ T1211] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 406.187196][ T1211] usb 10-1: USB disconnect, device number 19 [ 406.296834][ T29] audit: type=1326 audit(1786299474.999:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13303 comm="syz.7.2562" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586a59e0d9 code=0x7ffc0000 [ 406.329186][T13304] jffs2: notice: (13304) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 1 orphan) and 6 of xref (0 dead, 1 orphan) found. [ 406.392206][ T29] audit: type=1326 audit(1786299475.027:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13303 comm="syz.7.2562" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586a59e0d9 code=0x7ffc0000 [ 406.480437][ T29] audit: type=1326 audit(1786299475.027:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13303 comm="syz.7.2562" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586a59e0d9 code=0x7ffc0000 [ 406.578986][ T29] audit: type=1326 audit(1786299475.027:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13303 comm="syz.7.2562" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586a59e0d9 code=0x7ffc0000 [ 406.647877][ T29] audit: type=1326 audit(1786299475.055:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13303 comm="syz.7.2562" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f586a59e0d9 code=0x7ffc0000 [ 406.735372][ T29] audit: type=1326 audit(1786299475.055:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13303 comm="syz.7.2562" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586a59e0d9 code=0x7ffc0000 [ 407.058072][ T5696] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 407.085622][T13339] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2578'. [ 407.117092][T13339] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2578'. [ 407.239560][ T5696] usb 10-1: Using ep0 maxpacket: 8 [ 407.255809][ T5696] usb 10-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 407.286326][ T5696] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 407.314877][ T5696] usb 10-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 407.326167][ T5696] usb 10-1: Product: syz [ 407.335928][ T5696] usb 10-1: Manufacturer: syz [ 407.350305][ T5696] usb 10-1: SerialNumber: syz [ 407.595125][ T5696] usb 10-1: palm_os_3_probe - error -71 getting connection information [ 407.635069][ T5696] visor 10-1:1.0: probe with driver visor failed with error -71 [ 407.659263][T13355] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2584'. [ 407.685557][ T5696] usb 10-1: USB disconnect, device number 20 [ 408.280933][ T5596] Bluetooth: hci6: unexpected event for opcode 0x4ad0 [ 409.325088][ T5765] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 409.373670][ T5596] Bluetooth: hci7: command 0x0406 tx timeout [ 409.525111][ T5765] usb 2-1: Using ep0 maxpacket: 8 [ 409.557098][ T5765] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 409.593346][ T5765] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 409.610999][ T5765] usb 2-1: config 0 has no interface number 0 [ 409.628481][ T5765] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 409.654130][ T5765] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.667297][ T5765] usb 2-1: config 0 descriptor?? [ 409.705873][ T5765] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 409.904333][ T1211] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 411.031704][ T1211] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 411.062874][ T1211] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 411.089252][ T1211] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.137133][ T1211] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.150216][ T1211] usb 10-1: Product: syz [ 411.160812][ T1211] usb 10-1: Manufacturer: syz [ 411.168849][ T1211] usb 10-1: SerialNumber: syz [ 411.189251][ T1211] cdc_mbim 10-1:1.0: skipping garbage [ 411.215206][ T1211] usb 10-1: selecting invalid altsetting 1 [ 411.412263][ T1211] cdc_mbim 10-1:1.0: bind() failure [ 411.450582][ T1211] usb 10-1: USB disconnect, device number 21 [ 411.528286][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 411.528302][ T29] audit: type=1400 audit(1786299479.827:1137): avc: denied { watch } for pid=13456 comm="syz.3.2631" path="/101" dev="tmpfs" ino=529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 411.589737][ T29] audit: type=1400 audit(1786299479.827:1138): avc: denied { watch_sb } for pid=13456 comm="syz.3.2631" path="/101" dev="tmpfs" ino=529 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 412.333322][ T1211] usb 2-1: USB disconnect, device number 21 [ 412.818817][T13483] ftl_cs: FTL header not found. [ 413.209759][T13483] block2mtd: mtd1: [/dev/loop0] erase_size = 4KiB [4096] [ 414.655670][ T29] audit: type=1400 audit(1786299482.708:1139): avc: denied { remount } for pid=13517 comm="syz.5.2658" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 416.594661][T13576] netlink: 'syz.3.2682': attribute type 12 has an invalid length. [ 416.619003][T13576] netlink: 'syz.3.2682': attribute type 29 has an invalid length. [ 416.662920][T13576] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2682'. [ 416.676015][T13579] openvswitch: netlink: Message has 4 unknown bytes. [ 416.824470][T13586] netlink: zone id is out of range [ 416.841941][T13588] netlink: 144 bytes leftover after parsing attributes in process `syz.9.2686'. [ 416.845892][T13586] netlink: zone id is out of range [ 416.875609][T13586] netlink: zone id is out of range [ 416.885406][ T5329] libceph: connect (1)[c::]:6789 error -101 [ 416.894844][T13586] netlink: zone id is out of range [ 416.902059][ T5329] libceph: mon0 (1)[c::]:6789 connect error [ 416.909585][T13586] netlink: zone id is out of range [ 416.926856][T13586] netlink: zone id is out of range [ 416.952917][ T5329] libceph: connect (1)[c::]:6789 error -101 [ 416.973069][T13580] ceph: No mds server is up or the cluster is laggy [ 416.992071][ T5329] libceph: mon0 (1)[c::]:6789 connect error [ 417.193390][ T29] audit: type=1400 audit(1786299485.044:1140): avc: denied { append } for pid=13593 comm="syz.3.2689" name="event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 417.451570][T13608] openvswitch: netlink: Message has 4 unknown bytes. [ 417.683991][T13618] syz_tun: entered allmulticast mode [ 417.800396][T13621] jffs2: notice: (13621) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 1 orphan) and 6 of xref (0 dead, 1 orphan) found. [ 417.863088][ T9] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 418.132638][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 418.145023][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 418.169731][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.198144][ T9] usb 4-1: config 0 has no interfaces? [ 418.210938][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.239815][ T9] usb 4-1: config 0 descriptor?? [ 418.324693][ T29] audit: type=1400 audit(1786299486.105:1141): avc: denied { append } for pid=13631 comm="syz.1.2705" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 418.492214][ T9] usb 4-1: USB disconnect, device number 8 [ 418.775432][ T10] usb 10-1: new full-speed USB device number 22 using dummy_hcd [ 418.963266][ T10] usb 10-1: unable to get BOS descriptor or descriptor too short [ 418.986294][ T10] usb 10-1: not running at top speed; connect to a high speed hub [ 419.003136][ T10] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 419.021504][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.122394][ T10] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 419.137060][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.149326][ T10] usb 10-1: Product: syz [ 419.153598][ T10] usb 10-1: Manufacturer: syz [ 419.158697][ T10] usb 10-1: SerialNumber: syz [ 419.413265][ T10] cdc_ncm 10-1:1.0: bind() failure [ 419.437971][ T10] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 419.444880][ T10] cdc_ncm 10-1:1.1: bind() failure [ 419.479566][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 419.509602][ T10] usb 10-1: USB disconnect, device number 22 [ 419.696154][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 419.703067][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 419.728544][ T9] usb 6-1: New USB device found, idVendor=10c4, idProduct=89fb, bcdDevice= 5.0a [ 419.769494][ T9] usb 6-1: config 3 has an invalid interface number: 64 but max is 1 [ 419.791631][ T9] usb 6-1: config 3 has an invalid interface number: 217 but max is 1 [ 419.806062][ T9] usb 6-1: config 3 has no interface number 0 [ 419.825103][ T9] usb 6-1: config 3 has no interface number 1 [ 419.835483][ T9] usb 6-1: config 3 interface 64 altsetting 76 endpoint 0xB has an invalid bInterval 80, changing to 10 [ 419.852578][ T9] usb 6-1: config 3 interface 64 has no altsetting 0 [ 419.879179][ T9] usb 6-1: config 3 interface 217 has no altsetting 0 [ 419.898542][ T9] usb 6-1: string descriptor 0 read error: -22 [ 419.904945][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.933154][T13680] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 419.954698][ T9] cp210x 6-1:3.64: cp210x converter detected [ 420.050261][ T29] audit: type=1400 audit(1786299487.693:1142): avc: denied { listen } for pid=13681 comm="syz.7.2727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 420.371115][ T9] cp210x 6-1:3.64: failed to get vendor val 0x370b size 1: -32 [ 420.380991][ T9] cp210x 6-1:3.64: querying part number failed [ 420.403954][ T9] usb 6-1: cp210x converter now attached to ttyUSB0 [ 420.488162][ T5602] Bluetooth: hci8: command 0x0406 tx timeout [ 420.532925][ T9] cp210x 6-1:3.217: cp210x converter detected [ 420.533435][ T1211] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 420.550123][ T9] cp210x 6-1:3.217: failed to get vendor val 0x370b size 1: -71 [ 420.567757][ T9] cp210x 6-1:3.217: querying part number failed [ 420.592326][ T9] usb 6-1: cp210x converter now attached to ttyUSB1 [ 420.628887][ T9] usb 6-1: USB disconnect, device number 16 [ 420.645881][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 420.661942][ T9] cp210x 6-1:3.64: device disconnected [ 420.673509][ T9] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 420.692392][ T9] cp210x 6-1:3.217: device disconnected [ 420.742287][ T1211] usb 2-1: not running at top speed; connect to a high speed hub [ 420.769814][ T1211] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 420.790387][ T1211] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.801779][ T1211] usb 2-1: config 0 has no interfaces? [ 420.809357][ T1211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.827809][ T1211] usb 2-1: config 0 descriptor?? [ 421.078448][ T5329] usb 2-1: USB disconnect, device number 22 [ 421.104338][ T1211] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 421.313188][ T1211] usb 10-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 421.338336][ T1211] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 421.349685][ T1211] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 421.372315][ T1211] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.381144][ T1211] usb 10-1: Product: syz [ 421.385562][ T1211] usb 10-1: Manufacturer: syz [ 421.400514][ T1211] usb 10-1: SerialNumber: syz [ 421.465481][T13711] kvm: emulating exchange as write [ 421.635104][ T30] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 421.820189][ T30] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 421.834054][ T30] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 421.845964][ T30] usb 6-1: config 1 has no interface number 0 [ 421.855360][ T30] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 421.862542][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 421.865474][ T30] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 421.884761][ T30] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x8 has invalid maxpacket 1463, setting to 1024 [ 421.896173][ T30] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1024 [ 421.909302][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.918650][ T30] usb 6-1: Product: syz [ 421.922832][ T30] usb 6-1: Manufacturer: syz [ 421.928093][ T30] usb 6-1: SerialNumber: syz [ 421.936840][T13709] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 421.947186][ T30] usb 6-1: Error in usbnet_get_endpoints (-22) [ 421.956086][ T5765] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 422.046691][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 422.052255][ T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 422.066429][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 422.090034][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.105998][ T29] audit: type=1400 audit(1786299489.595:1143): avc: denied { write } for pid=13695 comm="syz.9.2731" name="functions" dev="configfs" ino=10826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 422.107364][ T1211] usb 10-1: failed to send ARPC request 1: -71 [ 422.138204][ T5765] usb 2-1: Using ep0 maxpacket: 8 [ 422.145494][ T1211] usb 10-1: failed to execute ARPC: -71 [ 422.147040][ T10] usb 4-1: config 0 descriptor?? [ 422.152598][ T1211] usb 10-1: failed to set connected state for cport 0: -71 [ 422.166586][ T5765] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 422.179423][ T1211] greybus greybus1: 0/0:0: failed to set connected state: -71 [ 422.196742][ T30] usb 6-1: USB disconnect, device number 17 [ 422.203132][ T5765] usb 2-1: config 0 interface 0 has no altsetting 0 [ 422.218798][ T5765] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.235532][ T1211] usb 10-1: failed to send ARPC request 3: -71 [ 422.247626][ T1211] usb 10-1: failed to execute ARPC: -71 [ 422.255380][ T5765] usb 2-1: config 0 descriptor?? [ 422.261817][ T1211] usb 10-1: failed to clear cport 0: -71 [ 422.276593][ T1211] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 422.304814][ T1211] es2_ap_driver 10-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 422.325434][ T1211] usb 10-1: USB disconnect, device number 23 [ 422.405102][ T10] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 422.622124][ T10] usb 4-1: USB disconnect, device number 9 [ 422.701317][ T5765] usbhid 2-1:0.0: can't add hid device: -71 [ 422.708225][ T5765] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 422.724445][ T5765] usb 2-1: USB disconnect, device number 23 [ 423.557672][ T29] audit: type=1400 audit(1786299490.934:1144): avc: denied { watch_sb watch_reads } for pid=13731 comm="syz.9.2747" path="/319/file1" dev="tmpfs" ino=1696 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 423.669574][ T29] audit: type=1400 audit(1786299491.035:1145): avc: denied { watch_mount } for pid=13731 comm="syz.9.2747" path="/319/file1" dev="tmpfs" ino=1696 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 424.007888][ T5329] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 424.396693][ T5329] usb 6-1: not running at top speed; connect to a high speed hub [ 424.477846][ T5329] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 424.641772][ T5329] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.733436][ T5329] usb 6-1: config 0 has no interfaces? [ 424.800219][ T5329] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.132085][ T5329] usb 6-1: config 0 descriptor?? [ 425.199582][T13751] syz.1.2753 (13751) used greatest stack depth: 16816 bytes left [ 425.350492][T13758] jffs2: notice: (13758) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 1 orphan) and 6 of xref (0 dead, 1 orphan) found. [ 425.400119][ T9] usb 6-1: USB disconnect, device number 18 [ 426.265106][ T29] audit: type=1400 audit(1786299493.426:1146): avc: denied { name_connect } for pid=13782 comm="syz.3.2766" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 426.379539][ T5718] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 426.554585][ T5718] usb 6-1: unable to get BOS descriptor or descriptor too short [ 426.573375][ T5718] usb 6-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 426.594927][ T5718] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.617427][ T5718] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 426.639829][ T5718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.651546][ T5718] usb 6-1: Product: syz [ 426.660169][ T5718] usb 6-1: Manufacturer: syz [ 426.669807][ T5718] usb 6-1: SerialNumber: syz [ 426.692476][ T5718] usb 6-1: config 0 descriptor?? [ 426.736891][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 426.899410][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 426.910745][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 426.924581][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.948672][ T5783] usb 6-1: USB disconnect, device number 19 [ 426.948673][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.975176][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 426.987678][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.010482][ T10] usb 4-1: config 0 descriptor?? [ 427.477658][ T10] hid (null): bogus close delimiter [ 427.484587][ T5765] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 427.681843][ T5765] usb 2-1: not running at top speed; connect to a high speed hub [ 427.706700][ T5765] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 427.707944][ T29] audit: type=1400 audit(1786299494.765:1147): avc: denied { setopt } for pid=13802 comm="syz.5.2775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 427.716232][ T1211] usb 4-1: USB disconnect, device number 10 [ 427.768437][ T5765] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.780468][ T5765] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 427.815520][ T5765] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.071712][ T10] usb 2-1: USB disconnect, device number 24 [ 428.483361][T13811] netlink: 'syz.7.2778': attribute type 1 has an invalid length. [ 428.500212][T13811] netlink: 'syz.7.2778': attribute type 4 has an invalid length. [ 428.517319][T13811] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.2778'. [ 429.285576][ T1211] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 429.401987][ T5783] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 429.488326][ T1211] usb 6-1: Using ep0 maxpacket: 8 [ 429.497456][ T1211] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 429.518584][ T1211] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 429.544254][ T1211] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.565702][ T1211] usb 6-1: config 0 descriptor?? [ 429.581183][ T5783] usb 4-1: not running at top speed; connect to a high speed hub [ 429.590050][ T5783] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 429.603065][ T5783] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.615419][ T5783] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 429.624989][ T5783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.795822][ T1211] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 429.882832][ T5783] usb 4-1: USB disconnect, device number 11 [ 430.037210][ T1211] usb 6-1: USB disconnect, device number 20 [ 431.228583][ T29] audit: type=1400 audit(1786299498.014:1148): avc: denied { nlmsg_read } for pid=13887 comm="syz.1.2814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 431.373470][ T5765] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 431.558656][ T5765] usb 4-1: not running at top speed; connect to a high speed hub [ 431.588741][ T5765] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 431.615618][ T5765] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.638562][ T5765] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 431.658162][ T5765] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.933085][ T10] usb 4-1: USB disconnect, device number 12 [ 433.626399][ T5765] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 433.880108][ T5765] usb 6-1: Using ep0 maxpacket: 8 [ 433.969420][ T5765] usb 6-1: unable to get BOS descriptor or descriptor too short [ 434.047370][ T5765] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice= 8.96 [ 434.151748][ T5765] usb 6-1: config 6 has an invalid interface number: 247 but max is 0 [ 434.157279][ T31] INFO: task syz-executor:7480 blocked for more than 143 seconds. [ 434.298869][ T5765] usb 6-1: config 6 has no interface number 0 [ 434.430681][ T5765] usb 6-1: config 6 interface 247 has no altsetting 0 [ 434.673945][ T5765] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.872113][ T5765] usb 6-1: Product: syz [ 434.968579][ T5765] usb 6-1: Manufacturer: syz [ 434.980870][ T31] Tainted: G L syzkaller #0 [ 434.993135][ T31] Blocked by coredump. [ 434.997731][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 435.006650][ T31] task:syz-executor state:D stack:23304 pid:7480 tgid:7480 ppid:1 task_flags:0x40054c flags:0x00080003 [ 435.011762][ T5765] usb 6-1: SerialNumber: syz [ 435.018646][ T31] Call Trace: [ 435.018658][ T31] [ 435.018669][ T31] __schedule+0x125c/0x6730 [ 435.018702][ T31] ? do_raw_spin_lock+0x128/0x260 [ 435.018738][ T31] ? __pfx___schedule+0x10/0x10 [ 435.018758][ T31] ? find_held_lock+0x2b/0x80 [ 435.018776][ T31] ? schedule+0x225/0x2c0 [ 435.018801][ T31] schedule+0xdd/0x2c0 [ 435.018822][ T31] schedule_preempt_disabled+0x13/0x30 [ 435.018844][ T31] __mutex_lock+0xccc/0x1bd0 [ 435.018869][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 435.074376][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 435.079531][ T31] ? net_generic+0xea/0x2a0 [ 435.084076][ T31] ? net_generic+0xea/0x2a0 [ 435.089572][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 435.094905][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 435.100255][ T31] nfsd_umount+0x3b/0x60 [ 435.104539][ T31] deactivate_locked_super+0xc1/0x1b0 [ 435.110473][ T31] deactivate_super+0xe7/0x110 [ 435.115361][ T31] cleanup_mnt+0x21f/0x450 [ 435.119801][ T31] task_work_run+0x150/0x240 [ 435.124482][ T31] ? __pfx_task_work_run+0x10/0x10 [ 435.129606][ T31] do_exit+0x951/0x2ae0 [ 435.133823][ T31] ? __pfx_do_exit+0x10/0x10 [ 435.138406][ T31] ? do_raw_spin_lock+0x128/0x260 [ 435.143477][ T31] ? find_held_lock+0x2b/0x80 [ 435.148148][ T31] ? get_signal+0x7e0/0x21e0 [ 435.154244][ T31] do_group_exit+0xd5/0x2a0 [ 435.158778][ T31] get_signal+0x1ec7/0x21e0 [ 435.163295][ T31] ? __pfx_get_signal+0x10/0x10 [ 435.168449][ T31] ? __fput+0x68d/0xb50 [ 435.172792][ T31] arch_do_signal_or_restart+0x91/0x7e0 [ 435.178875][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 435.185325][ T31] ? __fput+0x692/0xb50 [ 435.189722][ T31] ? fput_close_sync+0x11d/0x250 [ 435.194796][ T31] exit_to_user_mode_loop+0x139/0x6f0 [ 435.201023][ T31] ? rcu_is_watching+0x12/0xc0 [ 435.205830][ T31] do_syscall_64+0x666/0x870 [ 435.210728][ T31] ? clear_bhb_loop+0x70/0xc0 [ 435.215437][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.228469][ T31] RIP: 0033:0x7fb41db5e90e [ 435.233420][ T31] RSP: 002b:00007ffd8c4e0578 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 435.242133][ T31] RAX: 0000000000000000 RBX: 000055555a393500 RCX: 00007fb41db5e90e [ 435.250383][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 435.258839][ T31] RBP: 00007ffd8c4e0690 R08: 0000000000000000 R09: 0000000000000000 [ 435.269303][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8c4e1780 [ 435.277571][ T31] R13: 00007fb41dc34474 R14: 000055555a3934e8 R15: 0000000000000006 [ 435.288564][ T31] [ 435.291689][ T31] INFO: task syz.2.994:9336 blocked for more than 144 seconds. [ 435.300285][ T31] Tainted: G L syzkaller #0 [ 435.308401][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 435.317954][ T5765] visor 6-1:6.247: Sony Clie 3.5 converter detected [ 435.319590][ T31] task:syz.2.994 state:D stack:28776 pid:9336 tgid:9334 ppid:5601 task_flags:0x400140 flags:0x00080002 [ 435.339302][ T5765] usb 6-1: clie_3_5_startup: get config number failed: -71 [ 435.346647][ T31] Call Trace: [ 435.350204][ T31] [ 435.353488][ T31] __schedule+0x125c/0x6730 [ 435.358066][ T31] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 435.359154][ T5765] visor 6-1:6.247: probe with driver visor failed with error -71 [ 435.364853][ T31] ? __pfx___schedule+0x10/0x10 [ 435.378358][ T31] ? find_held_lock+0x2b/0x80 [ 435.384474][ T31] ? schedule+0x225/0x2c0 [ 435.388864][ T31] schedule+0xdd/0x2c0 [ 435.393583][ T31] schedule_preempt_disabled+0x13/0x30 [ 435.399136][ T31] __mutex_lock+0xccc/0x1bd0 [ 435.399836][ T5765] usb 6-1: USB disconnect, device number 21 [ 435.410170][ T31] ? write_ports+0xa5/0xcc0 [ 435.421087][ T31] ? nfsctl_transaction_write+0xcd/0x1a0 [ 435.429433][ T31] ? ksys_write+0x12a/0x250 [ 435.434389][ T31] ? do_syscall_64+0x115/0x870 [ 435.446426][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 435.451562][ T31] ? write_ports+0xa5/0xcc0 [ 435.461633][ T31] ? __lock_acquire+0x49f/0x1a40 [ 435.466638][ T31] write_ports+0xa5/0xcc0 [ 435.471282][ T31] ? __pfx_write_ports+0x10/0x10 [ 435.476276][ T31] ? find_held_lock+0x2b/0x80 [ 435.481228][ T31] ? __might_fault+0xc5/0x140 [ 435.488549][ T31] ? __might_fault+0xc5/0x140 [ 435.493591][ T31] ? __pfx_write_ports+0x10/0x10 [ 435.498648][ T31] ? __pfx_write_ports+0x10/0x10 [ 435.503865][ T31] ? _copy_from_user+0x59/0xd0 [ 435.508684][ T31] ? __pfx_write_ports+0x10/0x10 [ 435.513929][ T31] nfsctl_transaction_write+0x106/0x1a0 [ 435.519536][ T31] vfs_write+0x2aa/0x1050 [ 435.529180][ T31] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 435.535493][ T31] ? __pfx_vfs_write+0x10/0x10 [ 435.540334][ T31] ? __fget_files+0x215/0x3d0 [ 435.548716][ T31] ? __fget_files+0x21f/0x3d0 [ 435.553485][ T31] ksys_write+0x12a/0x250 [ 435.558200][ T31] ? __pfx_ksys_write+0x10/0x10 [ 435.563108][ T31] do_syscall_64+0x115/0x870 [ 435.568030][ T31] ? clear_bhb_loop+0x70/0xc0 [ 435.572757][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.579122][ T31] RIP: 0033:0x7fd07f59e0d9 [ 435.583584][ T31] RSP: 002b:00007fd080502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 435.592314][ T31] RAX: ffffffffffffffda RBX: 00007fd07f826090 RCX: 00007fd07f59e0d9 [ 435.602010][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 435.610258][ T31] RBP: 00007fd07f635024 R08: 0000000000000000 R09: 0000000000000000 [ 435.618272][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.626673][ T31] R13: 00007fd07f826128 R14: 00007fd07f826090 R15: 00007ffdcaaa0998 [ 435.635113][ T31] [ 435.638234][ T31] INFO: task syz.8.1088:9606 blocked for more than 144 seconds. [ 435.649758][ T31] Tainted: G L syzkaller #0 [ 435.689803][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 435.698957][ T31] task:syz.8.1088 state:D stack:28776 pid:9606 tgid:9605 ppid:8844 task_flags:0x400140 flags:0x00080002 [ 435.712686][ T31] Call Trace: [ 435.716012][ T31] [ 435.719506][ T31] __schedule+0x125c/0x6730 [ 435.724104][ T31] ? do_raw_spin_lock+0x128/0x260 [ 435.729477][ T31] ? __pfx___schedule+0x10/0x10 [ 435.734471][ T31] ? find_held_lock+0x2b/0x80 [ 435.739536][ T31] ? schedule+0x225/0x2c0 [ 435.743924][ T31] schedule+0xdd/0x2c0 [ 435.748031][ T31] schedule_preempt_disabled+0x13/0x30 [ 435.753898][ T31] __mutex_lock+0xccc/0x1bd0 [ 435.758537][ T31] ? write_ports+0xa5/0xcc0 [ 435.763465][ T31] ? nfsctl_transaction_write+0xcd/0x1a0 [ 435.769194][ T31] ? ksys_write+0x12a/0x250 [ 435.774231][ T31] ? do_syscall_64+0x115/0x870 [ 435.779065][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 435.784488][ T31] ? write_ports+0xa5/0xcc0 [ 435.789046][ T31] ? __lock_acquire+0x49f/0x1a40 [ 435.794281][ T31] write_ports+0xa5/0xcc0 [ 435.798702][ T31] ? __pfx_write_ports+0x10/0x10 [ 435.804044][ T31] ? find_held_lock+0x2b/0x80 [ 435.808761][ T31] ? __might_fault+0xc5/0x140 [ 435.813503][ T31] ? __might_fault+0xc5/0x140 [ 435.820182][ T31] ? __pfx_write_ports+0x10/0x10 [ 435.825428][ T31] ? _copy_from_user+0x59/0xd0 [ 435.830276][ T31] ? __pfx_write_ports+0x10/0x10 [ 435.835298][ T31] nfsctl_transaction_write+0x106/0x1a0 [ 435.841368][ T31] vfs_write+0x2aa/0x1050 [ 435.845765][ T31] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 435.852267][ T31] ? __pfx_vfs_write+0x10/0x10 [ 435.857077][ T31] ? __fget_files+0x215/0x3d0 [ 435.862086][ T31] ? __fget_files+0x21f/0x3d0 [ 435.866843][ T31] ksys_write+0x12a/0x250 [ 435.871538][ T31] ? __pfx_ksys_write+0x10/0x10 [ 435.876474][ T31] do_syscall_64+0x115/0x870 [ 435.881378][ T31] ? clear_bhb_loop+0x70/0xc0 [ 435.886114][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.893606][ T31] RIP: 0033:0x7f2afbf9e0d9 [ 435.898082][ T31] RSP: 002b:00007f2afcde8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 435.906988][ T31] RAX: ffffffffffffffda RBX: 00007f2afc225fa0 RCX: 00007f2afbf9e0d9 [ 435.915187][ T31] RDX: 0000000000000005 RSI: 0000200000000300 RDI: 0000000000000003 [ 435.923417][ T31] RBP: 00007f2afc035024 R08: 0000000000000000 R09: 0000000000000000 [ 435.934610][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.942665][ T31] R13: 00007f2afc226038 R14: 00007f2afc225fa0 R15: 00007ffe5cc0a198 [ 435.950991][ T31] [ 435.954088][ T31] [ 435.954088][ T31] Showing all locks held in the system: [ 435.969450][ T31] 1 lock held by khungtaskd/31: [ 435.974385][ T31] #0: ffffffff8ebe8200 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 435.984771][ T31] 2 locks held by syz-executor/7480: [ 436.010219][ T31] #0: ffff88807c6de0d8 (&type->s_umount_key#83){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 436.025300][ T31] #1: ffffffff8f0724c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 436.035203][ T31] 3 locks held by syz.2.994/9335: [ 436.041672][ T31] #0: ffff8880381a09b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 436.050778][ T31] #1: ffff88807b78a450 (sb_writers#26){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 436.060734][ T31] #2: ffffffff8f0724c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 436.070938][ T31] 3 locks held by syz.2.994/9336: [ 436.076026][ T31] #0: ffff8880381a1970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 436.085154][ T31] #1: ffff88807b78a450 (sb_writers#26){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 436.094228][ T31] #2: ffffffff8f0724c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 436.103121][ T31] 3 locks held by syz.8.1088/9606: [ 436.108384][ T31] #0: ffff88807c4ceb70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 436.117533][ T31] #1: ffff8880635d2450 (sb_writers#26){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 436.126601][ T31] #2: ffffffff8f0724c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 436.135537][ T31] 1 lock held by syz.9.2747/13734: [ 436.141375][ T31] #0: ffff88807c6de0d8 (&type->s_umount_key#83){++++}-{4:4}, at: super_lock+0x320/0x3f0 [ 436.153833][ T31] [ 436.156188][ T31] ============================================= [ 436.156188][ T31] [ 436.164688][ T31] NMI backtrace for cpu 0 [ 436.164703][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 436.164725][ T31] Tainted: [L]=SOFTLOCKUP [ 436.164731][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 436.164741][ T31] Call Trace: [ 436.164746][ T31] [ 436.164752][ T31] dump_stack_lvl+0x100/0x190 [ 436.164778][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 436.164799][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 436.164823][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 436.164843][ T31] sys_info+0x141/0x190 [ 436.164858][ T31] watchdog+0xcb1/0x1030 [ 436.164882][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 436.164909][ T31] ? __pfx_watchdog+0x10/0x10 [ 436.164929][ T31] ? __kthread_parkme+0x18c/0x230 [ 436.164955][ T31] ? kthread+0x13a/0x450 [ 436.164969][ T31] ? __pfx_watchdog+0x10/0x10 [ 436.164986][ T31] kthread+0x370/0x450 [ 436.165001][ T31] ? __pfx_kthread+0x10/0x10 [ 436.165019][ T31] ret_from_fork+0x72b/0xd50 [ 436.165043][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 436.165067][ T31] ? __switch_to+0x800/0x10f0 [ 436.165085][ T31] ? __pfx_kthread+0x10/0x10 [ 436.165103][ T31] ret_from_fork_asm+0x1a/0x30 [ 436.165140][ T31] [ 436.165147][ T31] Sending NMI from CPU 0 to CPUs 1: [ 436.298488][ C1] NMI backtrace for cpu 1 [ 436.298506][ C1] CPU: 1 UID: 0 PID: 5352 Comm: getty Tainted: G L syzkaller #0 PREEMPT(full) [ 436.298525][ C1] Tainted: [L]=SOFTLOCKUP [ 436.298530][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 436.298538][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0x20 [ 436.298561][ C1] Code: bf 03 00 00 00 e9 58 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <89> f2 89 fe bf 05 00 00 00 e9 2a fe ff ff 66 2e 0f 1f 84 00 00 00 [ 436.298574][ C1] RSP: 0018:ffffc90003aefa48 EFLAGS: 00000246 [ 436.298587][ C1] RAX: 0000000000000000 RBX: 0000000000000004 RCX: ffffffff84d30762 [ 436.298596][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 436.298604][ C1] RBP: 000000000000000b R08: 0000000000000001 R09: 0000000000000000 [ 436.298611][ C1] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000 [ 436.298619][ C1] R13: 0000000000000091 R14: 000000000000005e R15: ffffc90003aefac8 [ 436.298627][ C1] FS: 00007fe4e94c9c80(0000) GS:ffff888123eec000(0000) knlGS:0000000000000000 [ 436.298642][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 436.298650][ C1] CR2: 00007f586a7ef2f8 CR3: 0000000022ab3000 CR4: 00000000003526f0 [ 436.298659][ C1] Call Trace: [ 436.298664][ C1] [ 436.298669][ C1] avc_has_perm_noaudit+0x132/0x3b0 [ 436.298687][ C1] avc_has_perm+0xbd/0x1e0 [ 436.298702][ C1] ? __pfx_avc_has_perm+0x10/0x10 [ 436.298717][ C1] ? __lock_acquire+0x49f/0x1a40 [ 436.298735][ C1] inode_has_perm+0x166/0x1d0 [ 436.298751][ C1] __file_has_perm+0x39c/0x460 [ 436.298769][ C1] ? __pfx___file_has_perm+0x10/0x10 [ 436.298788][ C1] ? find_held_lock+0x2b/0x80 [ 436.298800][ C1] ? file_tty_write.isra.0+0x5ea/0x890 [ 436.298817][ C1] selinux_file_permission+0x4ac/0x6d0 [ 436.298838][ C1] security_file_permission+0x91/0x210 [ 436.298859][ C1] rw_verify_area+0xb8/0x6d0 [ 436.298878][ C1] vfs_write+0x146/0x1050 [ 436.298890][ C1] ? __pfx_tty_write+0x10/0x10 [ 436.298905][ C1] ? __pfx_vfs_write+0x10/0x10 [ 436.298918][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 436.298938][ C1] ? irqentry_exit+0x24d/0xa00 [ 436.298956][ C1] ksys_write+0x12a/0x250 [ 436.298968][ C1] ? __pfx_ksys_write+0x10/0x10 [ 436.298982][ C1] do_syscall_64+0x115/0x870 [ 436.298998][ C1] ? clear_bhb_loop+0x70/0xc0 [ 436.299013][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.299027][ C1] RIP: 0033:0x7fe4e9619407 [ 436.299038][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 436.299050][ C1] RSP: 002b:00007ffe8149fa10 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 436.299061][ C1] RAX: ffffffffffffffda RBX: 00007fe4e94c9c80 RCX: 00007fe4e9619407 [ 436.299070][ C1] RDX: 0000000000000001 RSI: 00007fe4e9814c06 RDI: 0000000000000001 [ 436.299077][ C1] RBP: 00007fe4e9814c06 R08: 0000000000000000 R09: 0000000000000000 [ 436.299085][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 436.299093][ C1] R13: 00007fe4e94c9c08 R14: 0000000000000002 R15: 0000000000000002 [ 436.299106][ C1] [ 436.620535][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 436.627385][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 436.638227][ T31] Tainted: [L]=SOFTLOCKUP [ 436.642536][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 436.652579][ T31] Call Trace: [ 436.655848][ T31] [ 436.658768][ T31] dump_stack_lvl+0x100/0x190 [ 436.663447][ T31] vpanic+0x552/0x970 [ 436.667418][ T31] ? __pfx_vpanic+0x10/0x10 [ 436.671916][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 436.678072][ T31] panic+0xd1/0xe0 [ 436.681784][ T31] ? __pfx_panic+0x10/0x10 [ 436.686196][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 436.692333][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 436.698482][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 436.704615][ T31] ? watchdog.cold+0x1ec/0x234 [ 436.709388][ T31] ? watchdog+0xcc1/0x1030 [ 436.713792][ T31] watchdog.cold+0x1fd/0x234 [ 436.718368][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 436.724158][ T31] ? __pfx_watchdog+0x10/0x10 [ 436.728816][ T31] ? __kthread_parkme+0x18c/0x230 [ 436.733834][ T31] ? kthread+0x13a/0x450 [ 436.738055][ T31] ? __pfx_watchdog+0x10/0x10 [ 436.742728][ T31] kthread+0x370/0x450 [ 436.746777][ T31] ? __pfx_kthread+0x10/0x10 [ 436.751348][ T31] ret_from_fork+0x72b/0xd50 [ 436.755930][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 436.761028][ T31] ? __switch_to+0x800/0x10f0 [ 436.765684][ T31] ? __pfx_kthread+0x10/0x10 [ 436.770257][ T31] ret_from_fork_asm+0x1a/0x30 [ 436.775018][ T31] [ 436.778227][ T31] Kernel Offset: disabled [ 436.782523][ T31] Rebooting in 86400 seconds..