last executing test programs: 12m4.031304087s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000001c0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000044000f800800034000000006080002400000000108000340000000ce08000240000000030800034058696a8c0800024000000001080001"], 0xd8}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) (async) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x4, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) (async) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) 12m2.889504245s ago: executing program 1 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80010100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x60) setsockopt$ALG_SET_KEY(r3, 0x117, 0x7, &(0x7f0000000100)="04000000", 0x4) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r7, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)="207c045b0c2afbb0ed2835b8442f86d73546550b47454490516a934bba8416d73c24680cc44dc15c", 0x28}], 0x1}}], 0x1, 0x4000000) 11m47.684345702s ago: executing program 32 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80010100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x60) setsockopt$ALG_SET_KEY(r3, 0x117, 0x7, &(0x7f0000000100)="04000000", 0x4) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r7, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)="207c045b0c2afbb0ed2835b8442f86d73546550b47454490516a934bba8416d73c24680cc44dc15c", 0x28}], 0x1}}], 0x1, 0x4000000) 19.08617666s ago: executing program 0 (id=1647): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4], &(0x7f00000001c0)=[0x4], 0x0, 0x1, 0x1}}, 0x40) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000002480)=0x3) getsockopt$inet_tcp_int(r5, 0x11e, 0x17, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000001700)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f0000000340)={0x20, r7, 0x0, 0x0, 0x0}) r8 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r9 = openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff) r10 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r10, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r10, &(0x7f0000001f00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8011}, 0x4008000) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r9, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001640)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000016c0)={&(0x7f0000000400)="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", &(0x7f0000001440)=""/103, &(0x7f00000014c0)="973937bfe5574d71f1c97df0e9b715562d437af625d17d136363e67fb431937b4bd973f99010df11583e4b39d14335418adabf3fbd47c3f9386e63af597109c49039e673813819c2140db8425a811f6b4ffa4ef1abe4720d4bd8849844496a3e9ca7515b6f721ae1161671150e35e32e576a30f29ca6edfd8823021cd9aeeea919142ee32c8ec15688ab8cf5900adae909f29c0034e4e54cb676dc96b43e2d527d97d368286a61abe9", &(0x7f0000001580)="95370146a671238b4c5e545409aa558024e7b646aa67cb3560ccd87000a32d005999f5fa2b9bc78095d1f80044530bb4bcc933fd01ee3d571dec5321269f84e267a54dcdf035d8ee7b3a03eed05ded61cee6bae15d995e2dd75d93ac60a0389ade5c2c1617af523cf9ae01ea1c88e71ac4faffcb02973264d17ae26f504cf414440aa7b751373743a904e34d48579823", 0x0, r11}, 0x38) close_range(r3, r3, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r12, 0x0, 0x0) 17.717027443s ago: executing program 4 (id=1655): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x5, 0x57e, 0x4, 0x3, 0xfffffffc, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201"], 0x0) write$UHID_INPUT2(r0, &(0x7f00000006c0)={0xc, {0x2, ' \x00'}}, 0x8) 14.261807773s ago: executing program 5 (id=1662): openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setitimer(0x3, &(0x7f0000000040)={{}, {0x0, 0xea60}}, &(0x7f0000000380)) recvmmsg(0xffffffffffffffff, &(0x7f0000001680), 0x0, 0x2, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x0, 0x4000000000000000}) 14.14958173s ago: executing program 2 (id=1663): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x404c844}, 0x40000) (fail_nth: 2) 13.936666554s ago: executing program 2 (id=1665): socket$can_bcm(0x1d, 0x2, 0x2) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load ecryptfs trusted:tr'], 0x35, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syz_emit_ethernet(0x66, &(0x7f0000000340)={@local, @random="42238e910adb", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @private0, {[@fragment={0x21}, @dstopts={0x0, 0x3, '\x00', [@generic={0x0, 0x17, "3e090e541b64f22a8982d3f5aaacd21a0ca186608b74f1"}, @pad1]}]}}}}}, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x8048, 0x2, 0x48, 0x5}, {0x6, 0x27, 0x2, 0x207}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendto$packet(r4, &(0x7f0000000140)="09000000e7001400000000803500008100000088a80000000000504e7c6a59e468", 0x21, 0x4044804, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) 12.660974254s ago: executing program 2 (id=1667): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000a40)={0x34, 0x0, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000940)={0x20, 0x0, 0x3e, {0x3c, "afd94766ebc6fc1563edc22a9174ad03881490b5ad533ecd3f559212abdedd9f8b94d0f18ea28cf2ed3f103188254784217473456ca5daae36f6c45b"}}, &(0x7f00000009c0)={0x20, 0x1, 0x1, 0xff}, &(0x7f0000000a00)={0x20, 0x0, 0x1, 0x2}}) socket$nl_route(0x10, 0x3, 0x0) 12.566810965s ago: executing program 4 (id=1668): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0xf809, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540), 0x0}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="2f026d8c1bc8b4972fc69ccce2e728568564b452324e4cf079f1091bf9a1a25c4e195eb9273620db52e22cad116606e840762840a14557ffd51ac4de1879aca764e80590d88b98349765c8de2fe65f5cc4f463307509d276222076dd80f4319da868a56fe1f5081f1a263e2a19004bcc354dfdaf20ec70"], 0x1c}}, 0x39db77225c63fa4c) 12.521705799s ago: executing program 5 (id=1669): openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x191000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffffff, 0x0, 0x600402, 0x2b) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8) 12.457794892s ago: executing program 3 (id=1670): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xa1, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004e04009300680000ff069078e000000100000000940a9b40f51983638a388917740000000000000000ac1e00017f000001e00000018303204e224e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e10a0008907800801e10230c0400000000000000fe06e2d4c3d90104020000003b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca00"/79], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 11.077060659s ago: executing program 3 (id=1671): r0 = socket(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x17d) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000100)={'bond0\x00', @ifru_flags}) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00', @ifru_names='bond_slave_0\x00'}) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000010000000000000000000000000000006aab158ea5bfdd8da4a181a3dd717a275a59f0ec30ba633bf9e3af71c70507968cdf3f9db56543294910b488f63ebfc7915d45c36bdf596fbbe8b485d851471257f00c91e4d2f48b77da8df8491a055dd87b6a9a5c858b718357635582e5fd93d32247513a045a9b8ee51afdd72308dbde2c38e77ef52384cd2a8869b3bf7753bb45db7e9b053a63b526d2d724fed5", @ANYRES32=r4, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800500010004000000"], 0x3c}}, 0x0) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000300)={'dummy0\x00', @ifru_flags}) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000340)={'bond0\x00', @ifru_names='dummy0\x00'}) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x100) write(r5, &(0x7f0000000000)='3', 0x4e) socket$kcm(0x10, 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0xf503, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x200400, 0x0) write(r1, &(0x7f0000000500)='md0', 0x3) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x1, r8}, 0xc) 10.381260209s ago: executing program 0 (id=1672): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002080)={0x2020, 0x0, 0x0}, 0x2020) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x40000010}) write$FUSE_ENTRY(r0, &(0x7f0000004200)={0x90, 0x0, r1, {0x2, 0x0, 0x9, 0x7f, 0x8, 0x1, {0x6, 0x8000000000000001, 0x79, 0x1, 0x1000000000000, 0xffffffffffffffff, 0x8b5, 0x5, 0xf3d, 0x8000, 0x5, 0x0, 0x0, 0x9, 0x5}}}, 0x90) syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000002a80)={0x1, 0x0, [{0x0, 0xfffffffffffffceb, &(0x7f0000002700)=""/262}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f00000000c0)=0x1) shutdown(0xffffffffffffffff, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r8 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000580)={&(0x7f0000000100)=@tipc=@id={0x1e, 0x3, 0x2}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x220}, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x11) capset(&(0x7f0000000000)={0x19980330}, 0x0) 9.959981889s ago: executing program 5 (id=1673): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b72040150000000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000280)={0x14, &(0x7f0000000040)={0x40, 0x6, 0x82, {0x82, 0xa, "37ca101b3a0e314fff205d17276797b3717d1f92ed5f1566e98a7fb7d65d8763e3ecc1b2f218d2e84da1d98f94508859bc655ab93889e039398f7cb500617b0a90530969c8b8b1516166c6a1074ae47a5d359d13edd81c0591bc7ea8d62dde99df118aa55a7b26944fd34e3549a7648ca252f60aab2849103d2c037a15909bfa"}}, &(0x7f00000001c0)={0x0, 0x3, 0xab, @string={0xab, 0x3, "becd21430c08c86ed80e06134f7c8b9f9a4ce5cfc7242becb3959e0ab24ebab0e8157ce64120ee9cfa4aae69cd2daa9a53e89562b5f1f8ba29f85cd08a6cdd220edfbf58d2374642dd4c1eea52b0b27ef5df8f3a3e8f53bccdf627244293522a217bdfabe6c611dab29d6289d064e3019253aed19d3884fd614f5cfad52d072a97e7b2c4a53913cd5d30c0ec97ffaaee8e39261884dc8601d95a76dba94503447a211c595a64c30c39"}}}, &(0x7f0000000580)={0x44, &(0x7f00000002c0)={0x20, 0xe, 0x5b, "765b43726b8433fc5690da53219ab2042ec4dc96529ee9632eb2a45581691562562684147925559043c4e65e65f3f5384b8996e9ae38800c78478e5d6d4c3aae7c140befc1d20c335227c7f475ff644920b9925ba5ac58f795d0f3"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000003c0)={0x20, 0x81, 0x3, "576701"}, &(0x7f0000000400)={0x20, 0x82, 0x3, "ce2f3f"}, &(0x7f0000000440)={0x20, 0x83, 0x1, 'q'}, &(0x7f0000000480)={0x20, 0x84, 0x2, ')J'}, &(0x7f0000000540)={0x20, 0x85, 0x3, "d41243"}}) 9.941535884s ago: executing program 4 (id=1674): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x40000010}) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000002a80)={0x1, 0x0, [{0x0, 0xfffffffffffffceb, &(0x7f0000002700)=""/262}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000000c0)=0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r7 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000580)={&(0x7f0000000100)=@tipc=@id={0x1e, 0x3, 0x2}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x220}, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x11) capset(&(0x7f0000000000)={0x19980330}, 0x0) 9.116171161s ago: executing program 0 (id=1675): keyctl$dh_compute(0x15, &(0x7f0000000200), 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040)='pvfs2\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c800000010102030109022e0001010080fa0904"], 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$I2C_FUNCS(r1, 0x705, &(0x7f00000000c0)=0x5) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="c00108"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = dup(r2) write$UHID_INPUT(r5, &(0x7f00000010c0)={0xb, {"a2e3ad21ed9b52f91b5d360987f70e06d038e7ff7fc6e5539b3247298b089b3208356d090890e0878f0e1ac6e7049b3350959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b31070d074b0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a49179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b9ed8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a6e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3937f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042890324659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe5ad58bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdee6fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a0148f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d60e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1c8cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @local}}, 0x100, 0x6}, &(0x7f00000000c0)=0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r7 = socket$kcm(0x23, 0x5, 0x0) listen(r7, 0x800) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r9, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) sendto$phonet(r9, 0x0, 0x0, 0x80, 0x0, 0x0) accept4(r7, 0x0, 0x0, 0x80000) read(r2, &(0x7f0000000480)=""/266, 0x10a) 8.913210579s ago: executing program 3 (id=1676): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/trace_clock\x00', 0x201, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r1, &(0x7f0000000600)='dir .', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) acct(&(0x7f0000000000)='./bus\x00') syz_ublk_setup_io_uring(0x19, 0x0, &(0x7f0000001080), &(0x7f0000000040), 0x0) open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_setup_queues(r2, 0x0, &(0x7f00000010c0)={0x0, 0xfb7d, 0x4, 0x4, 0x27f}, 0x0, 0x4, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) close(r4) socket$kcm(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) socket$kcm(0xa, 0x5, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r5, &(0x7f0000001500)=[{&(0x7f0000000080)=""/4080, 0x1044}], 0x1, 0x1, 0x1) write(r1, &(0x7f0000000700)='bind', 0x4) writev(r0, &(0x7f0000000640)=[{&(0x7f00000003c0)="eca08c5eb32064d0acf903f0bbed1e", 0xf}], 0x1) 8.889116179s ago: executing program 4 (id=1677): syz_usb_connect$uac2(0x4, 0xec, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x582, 0x16, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xda, 0x3, 0x1, 0x4d, 0x0, 0x3, {0x8, 0xb, 0x0, 0x0, 0x1, 0x5, 0x20, 0xb}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0xff, 0x3a, 0xc}, [@sample_rate={0x9, 0x24, 0xd, 0x4, 0x0, 0x6, [0x1]}, @source_unit={0x8, 0x24, 0xa, 0x7f, 0x0, 0x0, 0x4, 0x1}, @input_terminal={0x10, 0x24, 0x2, 0x3, 0x403, 0x3, 0xa0, 0x8, 0x4, 0xb1, 0x9, 0x2}, @effect_unit={0x9, 0x24, 0x7, 0x2, 0x2, 0x1, [0x0]}, @feature_unit={0x7, 0x24, 0x6, 0x1, 0x1, [0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x3, 0xfa, {0x8, 0x25, 0x1, 0x2, 0x3f, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x9, 0x1, 0x89, 0x8, "9b"}, @as_header={0x10, 0x24, 0x1, 0x5, 0xb2, 0x3, 0x1, 0x5, 0x6, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xffff, 0x8, 0x3, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x49, 0x9, 0x56, 0x3, 0x40}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x82dc, 0x0, 0xef}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x4, 0x9, 0x2, "02", 'A'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x1, 0x8, {0x8, 0x25, 0x1, 0x81, 0x3f, 0xc, 0x8}}}}}}}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f"], 0x0) syz_usb_ep_read(r0, 0xf, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x2, 0xc7, &(0x7f0000000100)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d2401000134000000000001011224020101020000000000000000030000000924030201010003000c24050301000002000000000705810310000609040100000e0200000e240101470082000200000001001b240401015955593200001000800000aa00389b711001000000001e2405", @ANYBLOB="81bd01512929d4d96a975f7c4ad0bbc711b1d0b7a63708"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1555555555555746}) recvmmsg(0xffffffffffffffff, &(0x7f0000005300)=[{{&(0x7f0000000640), 0x80, &(0x7f0000000700)=[{&(0x7f00000006c0)}], 0x1}, 0x3}, {{&(0x7f0000000740)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000007c0)=""/145, 0x91}, {&(0x7f0000000880)=""/151, 0x97}, {&(0x7f0000000940)=""/47, 0x2f}, {&(0x7f0000000980)=""/44, 0x2c}, {&(0x7f00000009c0)=""/84, 0x54}], 0x5, &(0x7f0000000ac0)=""/227, 0xe3}, 0x7}, {{&(0x7f0000000bc0)=@qipcrtr, 0x80, &(0x7f0000001040)=[{&(0x7f0000000c40)=""/72, 0x48}, {&(0x7f0000000cc0)=""/68, 0x44}, {&(0x7f0000000d40)=""/89, 0x59}, {&(0x7f0000000dc0)=""/225, 0xe1}, {&(0x7f0000000ec0)=""/220, 0xdc}, {&(0x7f0000000fc0)=""/31, 0x1f}, {&(0x7f0000001000)=""/21, 0x15}], 0x7, &(0x7f00000010c0)}, 0x1000}, {{&(0x7f0000001100)=@sco={0x1f, @none}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001180)=""/223, 0xdf}, {&(0x7f0000001280)=""/136, 0x88}, {&(0x7f0000001340)=""/128, 0x80}], 0x3, &(0x7f0000001400)=""/126, 0x7e}, 0x800}, {{&(0x7f0000001480)=@l2tp6, 0x80, &(0x7f0000002600)=[{&(0x7f0000001500)=""/222, 0xde}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x2, &(0x7f0000002640)=""/185, 0xb9}, 0x1}, {{&(0x7f0000002700), 0x80, &(0x7f0000002940)=[{&(0x7f0000002780)=""/14, 0xe}, {&(0x7f00000027c0)=""/79, 0x4f}, {&(0x7f0000002840)=""/46, 0x2e}, {&(0x7f0000002880)=""/126, 0x7e}, {&(0x7f0000002900)=""/46, 0x2e}], 0x5, &(0x7f00000029c0)=""/139, 0x8b}, 0x4}, {{&(0x7f0000002a80)=@sco, 0x80, &(0x7f0000004e40)=[{&(0x7f0000002b00)=""/210, 0xd2}, {&(0x7f0000002c00)=""/6, 0x6}, {&(0x7f0000002c40)=""/126, 0x7e}, {&(0x7f0000002cc0)=""/192, 0xc0}, {&(0x7f0000002d80)=""/137, 0x89}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000003e40)=""/4096, 0x1000}], 0x7, &(0x7f0000004ec0)}, 0x17}, {{&(0x7f0000004f00)=@hci, 0x80, &(0x7f00000050c0)=[{&(0x7f0000004f80)=""/49, 0x31}, {&(0x7f0000004fc0)=""/235, 0xeb}], 0x2}, 0x7962}, {{&(0x7f0000005100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f00000051c0)=[{&(0x7f0000005180)=""/45, 0x2d}], 0x1, &(0x7f0000005200)=""/253, 0xfd}, 0xc9d}], 0x9, 0x40, &(0x7f0000005540)) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @local, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b9312948f6651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267513308a3d40aa1c788df6"}, 0xd8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2, 0x1, {0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, 0x8}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000080)="2eb55ed580b105fbfa496e5fcef4e5a736cc4297e3", 0x15}, {&(0x7f00000001c0)="e624fe32cc9a969df727d1122edfb2320dc24a0cf0d04e07599a274923a0a4a2212a74dc70286a73095387e314c8c01ee08de60069f2e9af5149205457653c3c27cf676dc6dcdc60d7cf4ec83853eb1fd7af4c0438763323833a6926bbafd7d81f1ea702903679e522ea4823f46f5bc83e3aa413b992765752703b89f4d38ae67204543fff5d27af6ccd49a2ef43b5ff057a67003253f38a0ef783aa42e468d22d7d40f92718756665d73947638948af885d7298a0968a9dd64b63e5b98acea34402878d3a81e5e829d554fbd6a30f283916891fe63e51a74c17339587fb859a5b1b89b7785fd9a34db19a", 0xeb}, {&(0x7f00000002c0)="b8f66963c69d928555f1a9d89cc1dd5f4baf32b65800a975fe25f9d0fa5b6c0817b20e68543a7f1fce0f61717305386cfef855abf0d5658016eeecd59f959747e18c8bbcacb5903ede93f13629e9d6558b54d43855f6dc15ede1ee887aaef7d62c640d3b0c331f7de3477bee406b9b8ac83e8ea079a9d8a268e6d94e4988fb79dc7cdc6d5ddbd45d6ea7c9402d77f7d11566c8adc5ee3abb9c361105564bc28cbcd9b0883c5c1024", 0xa8}, {&(0x7f0000000380)="1790d69f65813593f17f5ceee2db0b951ba5f3afcfb90226e84b9b1b7500e2c11870190fc582de0ab8484ba6f161582fb3d7b5f3726f8cadc4cc19c001ccd28fed1ae392faec34aaf9db5c3216ed55869aa2f9d8b6e573abbefbdcaede8a3695d697d21dcfc531812ee365afec65d3bf8689dca9fc761309777d635cb98f10b2ed1ed0de82055c9ce15126165435308a7dc04b5b3002e7abcf6a6c9b42a2cc4c866a56c6d623928d77f2565a2a540d49500ba99adc51869d429723ebc1bc24ae311f5e5d", 0xc4}], 0x4, &(0x7f00000004c0)=[{0x80, 0x114, 0x7f, "4a4dbdd500d9ac697a26a9c18001976c299f1cfea75049cd043ed077fb5023423fb7eff5f3afad2ee0236bee803259adb0fec9e4a918f60239ec846e0613dfc9298a8459e5e0f5b7d321055f45ff4160a386a8d921cdebdbd1945b23cc093b65896a8ec018afcc01dd1c48b4c96b3c"}, {0x88, 0x112, 0x9, "e7b1389fd88f092748faf2ae12fa0eaf26a1fc4c0a44e5de408812f1ecb722f42444f00ece1dfb5c657e4e8ef3c784fb39893b1e236b4266789fbb159104b7e441a2b8e607e9f573edaa3e732601376568fb8148be134847e0ca5e023586e3cc74e5f07ee659b3fe7fcc8cf5541585dcb01bfde5e612e9"}], 0x108}, 0x0) 7.542917071s ago: executing program 3 (id=1678): socket$can_bcm(0x1d, 0x2, 0x2) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load ecryptfs trusted:trusted:'], 0x35, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syz_emit_ethernet(0x66, &(0x7f0000000340)={@local, @random="42238e910adb", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @private0, {[@fragment={0x21}, @dstopts={0x0, 0x3, '\x00', [@generic={0x0, 0x17, "3e090e541b64f22a8982d3f5aaacd21a0ca186608b74f1"}, @pad1]}]}}}}}, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x8048, 0x2, 0x48, 0x5}, {0x6, 0x27, 0x2, 0x207}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendto$packet(r4, &(0x7f0000000140)="09000000e7001400000000803500008100000088a80000000000504e7c6a59e468", 0x21, 0x4044804, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) 6.46662495s ago: executing program 3 (id=1679): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x400000e0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0x4e4, 0x0, 0x0, 0x1000, 0x9, r3, 0x0, 0xa4}}}, &(0x7f0000000300)=0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x8000, 0x3, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ced, 0x2, 0x1, 0x334, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff, 0x0, r6}}], 0x1, 0x0, 0x0) 6.181211505s ago: executing program 5 (id=1680): socket$can_bcm(0x1d, 0x2, 0x2) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load ecryptfs trusted:truste'], 0x35, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syz_emit_ethernet(0x66, &(0x7f0000000340)={@local, @random="42238e910adb", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @private0, {[@fragment={0x21}, @dstopts={0x0, 0x3, '\x00', [@generic={0x0, 0x17, "3e090e541b64f22a8982d3f5aaacd21a0ca186608b74f1"}, @pad1]}]}}}}}, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x8048, 0x2, 0x48, 0x5}, {0x6, 0x27, 0x2, 0x207}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendto$packet(r4, &(0x7f0000000140)="09000000e7001400000000803500008100000088a80000000000504e7c6a59e468", 0x21, 0x4044804, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) 4.500757495s ago: executing program 5 (id=1681): syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYRES32=0x0], 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00040'], 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) mprotect(&(0x7f0000add000/0x3000)=nil, 0x3000, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x3) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x23, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaa1a94cdaaaaaa451578a8bd65080000000002a81b008100fbf70805020205ace34edb522738196284e671e0de93ef4cb1284e996e49aa3afcddda5d2d0d76302741cb7968ef364a"], 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r5, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000280000000000069078640100000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000990780000"], 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48c}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) 4.080521396s ago: executing program 4 (id=1682): write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="fc86412c39e0d962e93d945ec9c4efb361054cb62b021fe03fac64aa509b86dbdd99526d384786deb6", 0x29) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d0000090582020000000000090503"], 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x3e, 0x684401) r2 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100102000040"], 0x0) syz_usb_disconnect(r2) syz_usb_disconnect(r1) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, &(0x7f0000000240), &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x800, 0x8, 0x1, {0x22, 0x29e}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x40, 0x30, 0x69, "4531d43b97c68be403a0255667867e6fe895104bc3ec7d40d034dff231a2fd4a42f362d3f4da35772e620576d45142fae212a12e68dd389dee275695ba0af44a9732ccc2fdb4ddfde8756f88aff1558a363e4e379f6d747c9d48057ad41157376f6eb0bf5cc91be89b"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000400)={0x20, 0x1, 0x43, "80287a71f5c7b9b2c46232ab727540d7969640f2e7aced173eebd041a098eadb37a69a8fe1d089ac0022feaa105671ef29d4f5826c4a145dfc6353075921c4493ab767"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0xf1}}) syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405205105500000102000109023e00010100803209040000040806620007050102000200042401000705820200020004240200070583020002000424030007050402000200042404"], 0x0) 3.96159417s ago: executing program 0 (id=1683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000900)=@filename='mtd1\x00', &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000a00)='jffs2\x00', 0x0, 0x0) 3.890665769s ago: executing program 3 (id=1684): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x0, 0x38, 0x20f}) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="b01580a4adbca05484ce4cf952e7de459890096a46ec7ad05cc75fec21d3a7a2d3a6a0a32150d10340b2195dd8bb984556a9b44cb98ead0d40c29c06b289ed4f6b73e1d93020a4665550a3a7794917b2dc1f1ee35c68e3e6c5712cb0943439916c03aa2004f2307b7f7c14d0dfa206d7dafb4575be5ec9695a2854b2e7811f3f984aeb073ab570963d", @ANYRES32=r1, @ANYBLOB], 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000001a00)=[{&(0x7f00000003c0)=""/135, 0x87}, {&(0x7f0000000480)=""/125, 0x7d}, {&(0x7f0000000540)=""/197, 0xc5}, {&(0x7f0000000640)=""/235, 0xeb}, {&(0x7f0000000740)=""/30, 0x1e}, {&(0x7f0000000780)=""/60, 0x3c}, {&(0x7f0000001b40)=""/221, 0xdd}, {&(0x7f00000008c0)=""/166, 0xa6}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/106, 0x6a}], 0xa}, 0x60) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x3000) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000001b00), 0x0, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x322) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, 0x0) getsockopt(r4, 0x111, 0x1, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_setup(0x483f, &(0x7f00000001c0)={0x0, 0x1ffffe, 0x2000, 0x3, 0x40}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "47920010", {0x1, 0x8, 0x5, 0x40, 0xb}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="0c00004e15", @ANYRESOCT=r0]) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa}}, './file0\x00'}) r9 = openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000100)={0x8040, 0x2820764ece5507e5, 0x12}, 0x18) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) ppoll(&(0x7f0000000140)=[{r8, 0x102}, {r9, 0xa000}, {r10, 0x2591}], 0x3, &(0x7f0000000200), &(0x7f0000000240)={[0x7]}, 0x8) 2.711022795s ago: executing program 0 (id=1685): pipe2(&(0x7f0000000180)={0x0, 0x0}, 0x84000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0xb, 0xc4}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="9101000000112233445500"/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000400)="840100"/64) setns(0xc9, 0x40000000) r1 = socket(0x8, 0x2, 0x0) setsockopt(r1, 0x108, 0x42020054, &(0x7f0000000500)="0100000000000000000000000000000000000000ffff0000000000000000000000000000000000000100000000000000000000000000000000000000ffff00000000000000000000000000000000000005000000", 0x54) connect(r1, &(0x7f0000000200), 0xc) write(r1, &(0x7f0000000600)="11223344", 0x4) close(r1) 2.481121481s ago: executing program 5 (id=1686): r0 = socket(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x17d) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000100)={'bond0\x00', @ifru_flags}) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00', @ifru_names='bond_slave_0\x00'}) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000010000000000000000000000000000006aab158ea5bfdd8da4a181a3dd717a275a59f0ec30ba633bf9e3af71c70507968cdf3f9db56543294910b488f63ebfc7915d45c36bdf596fbbe8b485d851471257f00c91e4d2f48b77da8df8491a055dd87b6a9a5c858b718357635582e5fd93d32247513a045a9b8ee51afdd72308dbde2c38e77ef52384cd2a8869b3bf7753bb45db7e9b053a63b526d2d724fed5", @ANYRES32=r4, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800500010004000000"], 0x3c}}, 0x0) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000300)={'dummy0\x00', @ifru_flags}) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000340)={'bond0\x00', @ifru_names='dummy0\x00'}) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x100) write(r5, &(0x7f0000000000)='3', 0x4e) socket$kcm(0x10, 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0xf503, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x200400, 0x0) write(r1, &(0x7f0000000500)='md0', 0x3) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x1, r8}, 0xc) 2.3508455s ago: executing program 2 (id=1687): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x1d, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000075510000000000000100000018110000bf0100000066e8", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008004000850000000600000018110000", @ANYRES32, @ANYRESDEC=0x0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f0000000d40)='./file0\x00', 0x446c3, 0x43) open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c00000000000000000000010400000020000000050000000100000404000000010000000100000000000000180080000200000408000000130000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0xfffffffa}, 0x28) r0 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, 0x0}) timer_create(0x0, 0x0, 0x0) r1 = io_uring_setup(0x3c72, &(0x7f00000006c0)={0x0, 0x800000, 0x4000, 0x2, 0x12a}) syz_open_dev$dri(0x0, 0x1000000000000000, 0x410000) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r4, 0x400455c8, 0x2) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r5}) bind$xdp(r6, &(0x7f0000000040)={0x2d, 0x0, 0x0, 0xd}, 0x3) close(r6) 1.057448937s ago: executing program 2 (id=1688): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x5f]}}, 0x0, 0x1c}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x4}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010800000000000000", @ANYRES32=0x0], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x1, @remote}, 0xa, 0x0, 0x3}}, 0x26) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) socket$kcm(0x29, 0x5, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/udp_port\x00', 0x1, 0x0) write(r7, &(0x7f0000000140)='9', 0x1) 675.382449ms ago: executing program 4 (id=1689): r0 = socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000001480)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001440)={&(0x7f0000000500)={0xf08, 0x3f7, 0x300, 0x70bd2a, 0x25dfdbfc, {0xee8, 0x7, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}, [""]}, 0xf08}, 0x1, 0x0, 0x0, 0x8000}, 0x6040) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000014003927000000000000000028001100fa00"], 0x28}}, 0xc8c0) recvfrom(r2, 0x0, 0x0, 0x8100, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000000101015f0d0000000000000200000204000e80240001801400018008000100e000000108000200e00000010c0002800500010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) read$FUSE(r3, &(0x7f0000004440)={0x2020}, 0x2020) 260.132584ms ago: executing program 0 (id=1690): socket$can_bcm(0x1d, 0x2, 0x2) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load ecryptfs trusted:trusted:'], 0x35, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syz_emit_ethernet(0x66, &(0x7f0000000340)={@local, @random="42238e910adb", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @private0, {[@fragment={0x21}, @dstopts={0x0, 0x3, '\x00', [@generic={0x0, 0x17, "3e090e541b64f22a8982d3f5aaacd21a0ca186608b74f1"}, @pad1]}]}}}}}, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x8048, 0x2, 0x48, 0x5}, {0x6, 0x27, 0x2, 0x207}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendto$packet(r4, &(0x7f0000000140)="09000000e7001400000000803500008100000088a80000000000504e7c6a59e468", 0x21, 0x4044804, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) 0s ago: executing program 2 (id=1691): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) epoll_create(0x5) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000002a80)={0x1, 0x0, [{0x0, 0xfffffffffffffceb, &(0x7f0000002700)=""/262}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r6 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000580)={&(0x7f0000000100)=@tipc=@id={0x1e, 0x3, 0x2}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x220}, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11) capset(&(0x7f0000000000)={0x19980330}, 0x0) kernel console output (not intermixed with test programs): 0: j1939_tp_rxtimer: 0xffff888036cbc400: abort rx timeout. Force session deactivation [ 669.208671][T11711] trusted_key: encrypted_key: hex blob is missing [ 669.239700][ T4926] Bluetooth: hci1: command 0x0406 tx timeout [ 669.252437][T11695] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 669.625421][T11695] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 669.776018][T11695] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 669.776092][T11695] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 669.813757][T11695] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 669.814495][T11695] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 669.854283][T11695] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 669.854371][T11695] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 670.046793][ T31] kauditd_printk_skb: 32 callbacks suppressed [ 670.046851][ T31] audit: type=1400 audit(2000000563.608:4283): avc: denied { unmount } for pid=5621 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 670.181216][T11051] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 670.229378][ T31] audit: type=1400 audit(2000000563.788:4284): avc: denied { mount } for pid=11723 comm="syz.4.1411" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 670.774742][T11051] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 670.775669][T11051] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.804853][ T31] audit: type=1400 audit(2000000564.358:4285): avc: denied { unmount } for pid=5621 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 670.921936][ T31] audit: type=1400 audit(2000000564.478:4286): avc: denied { read } for pid=11728 comm="syz.4.1412" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 670.922161][ T31] audit: type=1400 audit(2000000564.478:4287): avc: denied { open } for pid=11728 comm="syz.4.1412" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 670.998241][T11722] trusted_key: encrypted_key: hex blob is missing [ 671.224467][ T31] audit: type=1400 audit(2000000564.638:4288): avc: denied { ioctl } for pid=11728 comm="syz.4.1412" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=38065 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 671.272387][T11051] usb 3-1: Firmware: major: 0, minor: 64, hardware type: UNKNOWN (183) [ 671.314301][ T4926] Bluetooth: hci1: command 0x0406 tx timeout [ 671.389978][ T5705] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 671.475861][T11051] usb 3-1: Firmware: build v[Crk„3üVÚS!š².ÄÜ–Ržéc.²¤UibV&„y%UCÄæ^eóõ8K‰–é®8€ xGŽ]mL:®| ïÁÒ 3R'ÇôuÿdI ¹’[¥¬X÷•Ðó [ 671.575057][ T5705] usb 6-1: Using ep0 maxpacket: 8 [ 671.575728][ T5705] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 671.576811][ T5705] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 671.576828][ T5705] usb 6-1: config 0 has no interface number 0 [ 671.576859][ T5705] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 671.576893][ T5705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.581358][ T5705] usb 6-1: config 0 descriptor?? [ 671.609722][ T5705] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 671.682026][T11051] usb 3-1: failed to fetch extended address, random address set [ 671.682054][T11051] usb 3-1: atusb_probe: initialization failed, error = -524 [ 671.682213][T11051] atusb 3-1:1.0: probe with driver atusb failed with error -524 [ 671.708045][ T30] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 671.730118][T11051] usb 3-1: USB disconnect, device number 48 [ 671.808474][ T4926] Bluetooth: hci3: command 0x0406 tx timeout [ 671.826281][ T5704] usb 6-1: USB disconnect, device number 58 [ 671.859556][ T31] audit: type=1400 audit(2000000565.418:4289): avc: denied { create } for pid=11736 comm="syz.4.1414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 671.864094][ T31] audit: type=1400 audit(2000000565.418:4290): avc: denied { write } for pid=11736 comm="syz.4.1414" name="vbi6" dev="devtmpfs" ino=990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 671.884641][ T4926] Bluetooth: hci5: command 0x0406 tx timeout [ 671.884675][ T4926] Bluetooth: hci4: command 0x0406 tx timeout [ 671.924492][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 671.925294][ T30] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 671.926292][ T30] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 671.926335][ T30] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 671.926359][ T30] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 671.926383][ T30] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 671.928073][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.928096][ T30] usb 4-1: Product: syz [ 671.928110][ T30] usb 4-1: Manufacturer: syz [ 671.928125][ T30] usb 4-1: SerialNumber: syz [ 671.962162][ T31] audit: type=1400 audit(2000000565.498:4291): avc: denied { create } for pid=11740 comm="syz.0.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 671.962213][ T31] audit: type=1400 audit(2000000565.498:4292): avc: denied { write } for pid=11740 comm="syz.0.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 672.065344][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 672.075134][ T30] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input59 [ 672.364684][ T5704] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 672.517253][ T5704] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 672.522357][ T5704] usb 6-1: config index 0 descriptor too short (expected 92, got 76) [ 672.522417][ T5704] usb 6-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 672.522445][ T5704] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 672.522603][ T5704] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 672.608117][ T5704] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.608176][ T5704] usb 6-1: Product: syz [ 672.608245][ T5704] usb 6-1: Manufacturer: syz [ 672.608308][ T5704] usb 6-1: SerialNumber: syz [ 673.287002][ T5704] usb 6-1: USB disconnect, device number 59 [ 673.755978][ T30] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 673.756005][ T30] (id 0x00) [ 673.875202][T11738] Bluetooth: hci3: command 0x0406 tx timeout [ 673.954301][T11738] Bluetooth: hci4: command 0x0406 tx timeout [ 673.954338][T11738] Bluetooth: hci5: command 0x0406 tx timeout [ 674.274832][ T30] rc_core: IR keymap rc-imon-pad not found [ 674.274860][ T30] Registered IR keymap rc-empty [ 674.274916][ T30] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 674.274933][ T30] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 674.275734][ T30] imon:send_packet: packet tx failed (-71) [ 674.322910][ T30] imon 4-1:155.0: remote input dev register failed [ 674.323038][ T30] imon 4-1:155.0: imon_init_intf0: rc device setup failed [ 674.329811][ T5704] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 674.369413][ T30] imon 4-1:155.0: unable to initialize intf0, err 0 [ 674.369440][ T30] imon:imon_probe: failed to initialize context! [ 674.369454][ T30] imon 4-1:155.0: unable to register, err -19 [ 674.395744][ T30] usb 4-1: USB disconnect, device number 59 [ 674.497270][T11755] 9p: Bad value for 'rfdno' [ 674.498971][T11755] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1417'. [ 674.544601][ T5704] usb 6-1: Using ep0 maxpacket: 8 [ 674.552577][ T5704] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 674.594216][ T5704] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 674.594594][ T5704] usb 6-1: config 0 has no interface number 0 [ 674.595744][ T5704] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 674.596885][ T5704] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.706301][ T5704] usb 6-1: config 0 descriptor?? [ 675.069109][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 675.069156][ T31] audit: type=1400 audit(2000000568.588:4302): avc: denied { create } for pid=11751 comm="syz.2.1416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 675.246650][ T31] audit: type=1400 audit(2000000568.808:4303): avc: denied { write } for pid=11751 comm="syz.2.1416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 675.309673][ T5704] usb 6-1: can't set config #0, error -71 [ 675.320817][ T5704] usb 6-1: USB disconnect, device number 60 [ 675.363603][ T31] audit: type=1400 audit(2000000568.918:4304): avc: denied { mount } for pid=11761 comm="syz.2.1420" name="/" dev="gadgetfs" ino=7141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 675.790090][ T31] audit: type=1400 audit(2000000569.298:4305): avc: denied { append } for pid=11761 comm="syz.2.1420" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 675.790250][ T31] audit: type=1400 audit(2000000569.298:4306): avc: denied { open } for pid=11761 comm="syz.2.1420" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 675.790371][ T31] audit: type=1400 audit(2000000569.298:4307): avc: denied { ioctl } for pid=11761 comm="syz.2.1420" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 675.790555][ T31] audit: type=1400 audit(2000000569.348:4308): avc: denied { mount } for pid=11761 comm="syz.2.1420" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 676.422800][T11763] trusted_key: encrypted_key: hex blob is missing [ 676.805817][ T5704] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 677.086761][ T31] audit: type=1400 audit(2000000570.648:4309): avc: denied { unmount } for pid=5622 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 677.104874][T11051] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 677.151891][ T31] audit: type=1400 audit(2000000570.708:4310): avc: denied { unmount } for pid=5622 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 677.265229][ T5704] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 677.303173][ T5704] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 677.303204][ T5704] usb 4-1: config 0 has no interface number 0 [ 677.384847][T11051] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 678.845189][T11051] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.869260][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.869287][ T5704] usb 4-1: Product: syz [ 678.869301][ T5704] usb 4-1: Manufacturer: syz [ 678.869316][ T5704] usb 4-1: SerialNumber: syz [ 679.217581][ T5704] usb 4-1: config 0 descriptor?? [ 679.574306][ T31] audit: type=1400 audit(2000000573.078:4311): avc: denied { read } for pid=11784 comm="syz.0.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 679.751389][ T5704] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 679.752443][ T5704] usb 4-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 679.752971][ T5704] usb 4-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 679.754045][T11051] usb 6-1: Firmware version (0.0) predates our first public release. [ 679.754070][T11051] usb 6-1: Please update to version 0.2 or newer [ 679.809659][T11051] usb 6-1: Firmware: build v[Crk„3üVÚS!š².ÄÜ–Ržéc.²¤UibV&„y%UCÄæ^eóõ8K‰–é®8€ xGŽ]mL:®| ïÁÒ 3R'ÇôuÿdI ¹’[¥¬X÷•Ðó [ 680.015680][T11771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.016053][T11771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.038378][T11051] usb 6-1: USB disconnect, device number 61 [ 680.178319][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 680.178350][ T31] audit: type=1400 audit(2000000573.738:4322): avc: denied { cmd } for pid=11794 comm="syz.0.1429" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 680.198099][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.198144][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.228259][ T5705] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 680.240685][ T31] audit: type=1400 audit(2000000573.798:4323): avc: denied { ioctl } for pid=11794 comm="syz.0.1429" path="socket:[38251]" dev="sockfs" ino=38251 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 680.304329][ T3109] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 680.384720][ T5705] usb 3-1: Using ep0 maxpacket: 8 [ 680.385188][ T5705] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 680.386004][ T5705] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 680.386024][ T5705] usb 3-1: config 0 has no interface number 0 [ 680.386057][ T5705] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 680.386112][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.387701][ T5705] usb 3-1: config 0 descriptor?? [ 680.409156][ T5705] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 680.558273][ T31] audit: type=1400 audit(2000000574.118:4324): avc: denied { create } for pid=11806 comm="syz.5.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 680.560059][ T31] audit: type=1400 audit(2000000574.118:4325): avc: denied { bind } for pid=11806 comm="syz.5.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 680.560449][ T31] audit: type=1400 audit(2000000574.118:4326): avc: denied { setopt } for pid=11806 comm="syz.5.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 680.560801][ T31] audit: type=1400 audit(2000000574.118:4327): avc: denied { accept } for pid=11806 comm="syz.5.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 680.636388][T11051] usb 3-1: USB disconnect, device number 49 [ 681.116772][T11811] trusted_key: encrypted_key: insufficient parameters specified [ 681.821819][ T31] audit: type=1400 audit(2000000575.378:4328): avc: denied { map } for pid=11815 comm="syz.3.1435" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 682.879611][T11051] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 683.286072][T11051] usb 3-1: device descriptor read/all, error -71 [ 683.345022][T11830] can0: slcan on ttyS3. [ 683.385796][ T31] audit: type=1400 audit(2000000576.948:4329): avc: denied { read } for pid=11832 comm="syz.4.1441" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 683.462269][ T31] audit: type=1400 audit(2000000577.018:4330): avc: denied { getopt } for pid=11834 comm="syz.2.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 683.462320][ T31] audit: type=1400 audit(2000000577.018:4331): avc: denied { bind } for pid=11834 comm="syz.2.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 683.810053][T11835] infiniband syz2: set down [ 683.810076][T11835] infiniband syz2: added ipvlan0 [ 683.907702][T11835] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 683.907744][T11835] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 683.907782][T11835] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 684.625902][T11861] geneve2: entered promiscuous mode [ 684.625951][T11861] geneve2: entered allmulticast mode [ 684.650140][T11826] can0 (unregistered): slcan off ttyS3. [ 686.390758][T11835] RDS/IB: syz2: added [ 686.528469][T11835] smc: adding ib device syz2 with port count 1 [ 686.580237][T11835] smc: ib device syz2 port 1 has no pnetid [ 687.556427][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 687.556444][ T31] audit: type=1400 audit(2000000581.118:4339): avc: denied { write } for pid=11841 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 687.556539][ T31] audit: type=1400 audit(2000000581.118:4340): avc: denied { add_name } for pid=11841 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 687.556651][ T31] audit: type=1400 audit(2000000581.118:4341): avc: denied { create } for pid=11841 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 687.556912][ T31] audit: type=1400 audit(2000000581.118:4342): avc: denied { write } for pid=11841 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=4048 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 687.557161][ T31] audit: type=1400 audit(2000000581.118:4343): avc: denied { append } for pid=11841 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=4048 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 687.777861][T11880] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1449'. [ 688.134171][ T31] audit: type=1400 audit(2000000581.668:4344): avc: denied { write } for pid=11881 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 688.134251][ T31] audit: type=1400 audit(2000000581.668:4345): avc: denied { remove_name } for pid=11881 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=4048 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 688.134288][ T31] audit: type=1400 audit(2000000581.668:4346): avc: denied { unlink } for pid=11881 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=4048 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 688.304989][ T31] audit: type=1400 audit(2000000581.868:4347): avc: denied { search } for pid=11885 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 688.305467][ T31] audit: type=1400 audit(2000000581.868:4348): avc: denied { search } for pid=11885 comm="rm" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 689.284315][ T3109] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 689.454590][ T3109] usb 1-1: Using ep0 maxpacket: 8 [ 689.456255][ T3109] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 689.458318][ T3109] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 689.458340][ T3109] usb 1-1: config 0 has no interface number 0 [ 689.458371][ T3109] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 689.458407][ T3109] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.461912][ T3109] usb 1-1: config 0 descriptor?? [ 689.533679][ T3109] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 689.669101][ T3109] usb 1-1: USB disconnect, device number 66 [ 690.185234][ T3109] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 690.335771][ T3109] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 690.338382][ T3109] usb 1-1: config index 0 descriptor too short (expected 92, got 76) [ 690.338416][ T3109] usb 1-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 690.338443][ T3109] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 690.338542][ T3109] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 690.343440][ T3109] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.343469][ T3109] usb 1-1: Product: syz [ 690.343508][ T3109] usb 1-1: Manufacturer: syz [ 690.343583][ T3109] usb 1-1: SerialNumber: syz [ 690.708384][ T3109] usb 1-1: USB disconnect, device number 67 [ 691.514307][T11051] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 691.612084][T11917] 9pnet_fd: p9_fd_create_tcp (11917): problem connecting socket to 127.0.0.1 [ 691.732089][ T5705] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 691.767139][T11051] usb 1-1: Using ep0 maxpacket: 8 [ 691.768237][T11051] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 691.769066][T11051] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 691.769086][T11051] usb 1-1: config 0 has no interface number 0 [ 691.769118][T11051] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 691.769149][T11051] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.771721][T11051] usb 1-1: config 0 descriptor?? [ 691.793843][T11051] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 692.000201][T11932] geneve2: entered promiscuous mode [ 692.000252][T11932] geneve2: entered allmulticast mode [ 692.314849][ T5705] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 692.318724][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.318768][ T5705] usb 3-1: Product: syz [ 692.318783][ T5705] usb 3-1: Manufacturer: syz [ 692.318796][ T5705] usb 3-1: SerialNumber: syz [ 692.322150][ T5705] usb 3-1: config 0 descriptor?? [ 692.323753][ T5705] hub 3-1:0.0: bad descriptor, ignoring hub [ 692.323776][ T5705] hub 3-1:0.0: probe with driver hub failed with error -5 [ 692.391753][T11936] xt_hashlimit: max too large, truncated to 1048576 [ 692.392130][T11936] xt_IDLETIMER: timeout value is zero [ 692.586379][ T5705] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 692.587518][ T31] kauditd_printk_skb: 51 callbacks suppressed [ 692.587533][ T31] audit: type=1400 audit(2000000586.148:4400): avc: denied { firmware_load } for pid=5705 comm="kworker/0:4" path="/lib/firmware/dvb-usb-dib0700-1.20.fw" dev="sda1" ino=414 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 692.587765][ T5705] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 692.587797][ T5705] dib0700: firmware download failed at 7 with -22 [ 692.655319][ T5705] usb 3-1: USB disconnect, device number 52 [ 692.686457][T11943] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1459'. [ 692.728661][ T31] audit: type=1400 audit(2000000586.228:4401): avc: denied { sqpoll } for pid=11940 comm="syz.5.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 692.728819][ T31] audit: type=1400 audit(2000000586.228:4402): avc: denied { map } for pid=11940 comm="syz.5.1459" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=37446 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 692.729022][ T31] audit: type=1400 audit(2000000586.228:4403): avc: denied { read write } for pid=11940 comm="syz.5.1459" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=37446 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 692.876308][T11934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.900542][T11934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.949642][ T31] audit: type=1400 audit(2000000586.508:4404): avc: denied { map_create } for pid=11945 comm="syz.3.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 692.949970][ T31] audit: type=1400 audit(2000000586.508:4405): avc: denied { map_read map_write } for pid=11945 comm="syz.3.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 692.953887][ T31] audit: type=1400 audit(2000000586.508:4406): avc: denied { setopt } for pid=11945 comm="syz.3.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 692.992610][ T31] audit: type=1400 audit(2000000586.538:4407): avc: denied { read } for pid=11945 comm="syz.3.1461" dev="nsfs" ino=4026532900 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 692.994395][ T31] audit: type=1400 audit(2000000586.538:4408): avc: denied { open } for pid=11945 comm="syz.3.1461" path="net:[4026532900]" dev="nsfs" ino=4026532900 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 692.995434][ T31] audit: type=1400 audit(2000000586.538:4409): avc: denied { create } for pid=11945 comm="syz.3.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 694.046566][T11955] FAULT_INJECTION: forcing a failure. [ 694.046566][T11955] name failslab, interval 1, probability 0, space 0, times 0 [ 694.046600][T11955] CPU: 0 UID: 0 PID: 11955 Comm: syz.5.1464 Tainted: G L syzkaller #0 PREEMPT(full) [ 694.046628][T11955] Tainted: [L]=SOFTLOCKUP [ 694.046636][T11955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 694.046648][T11955] Call Trace: [ 694.046657][T11955] [ 694.046665][T11955] dump_stack_lvl+0x100/0x190 [ 694.046700][T11955] should_fail_ex.cold+0x5/0xa [ 694.046731][T11955] should_failslab+0xc2/0x120 [ 694.046760][T11955] __kmalloc_noprof+0xfc/0x840 [ 694.046786][T11955] ? handler_new_ref+0x1ab/0xc60 [ 694.046814][T11955] handler_new_ref+0x1ab/0xc60 [ 694.046842][T11955] v4l2_ctrl_new+0xe67/0x23a0 [ 694.046875][T11955] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 694.046910][T11955] v4l2_ctrl_new_std+0x1bb/0x290 [ 694.046941][T11955] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 694.046962][T11955] ? rcu_is_watching+0x13/0xc0 [ 694.046997][T11955] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 694.047034][T11955] ? media_request_object_init+0x105/0x180 [ 694.047082][T11955] vicodec_open+0x1b2/0xf70 [ 694.047109][T11955] ? kobject_get_unless_zero+0x156/0x200 [ 694.047144][T11955] v4l2_open+0x1d2/0x490 [ 694.047166][T11955] ? __pfx_v4l2_open+0x10/0x10 [ 694.047189][T11955] chrdev_open+0x234/0x6a0 [ 694.047218][T11955] ? __pfx_chrdev_open+0x10/0x10 [ 694.047247][T11955] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 694.047274][T11955] do_dentry_open+0x6ab/0x14d0 [ 694.047299][T11955] ? __pfx_chrdev_open+0x10/0x10 [ 694.047333][T11955] vfs_open+0x82/0x3f0 [ 694.047367][T11955] path_openat+0x19fa/0x2440 [ 694.047401][T11955] ? __pfx_path_openat+0x10/0x10 [ 694.047437][T11955] do_file_open+0x20e/0x430 [ 694.047469][T11955] ? __pfx_do_file_open+0x10/0x10 [ 694.047516][T11955] ? _raw_spin_unlock+0x28/0x50 [ 694.047536][T11955] ? alloc_fd+0x471/0x7a0 [ 694.047570][T11955] do_sys_openat2+0x10f/0x1e0 [ 694.047604][T11955] ? __pfx_do_sys_openat2+0x10/0x10 [ 694.047634][T11955] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 694.047672][T11955] __x64_sys_openat+0x12d/0x210 [ 694.047704][T11955] ? __pfx___x64_sys_openat+0x10/0x10 [ 694.047746][T11955] do_syscall_64+0x123/0x790 [ 694.047773][T11955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.047795][T11955] RIP: 0033:0x7f3d3175e9ce [ 694.047812][T11955] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 694.047832][T11955] RSP: 002b:00007f3d3268fb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 694.047853][T11955] RAX: ffffffffffffffda RBX: 00007f3d326906c0 RCX: 00007f3d3175e9ce [ 694.047868][T11955] RDX: 0000000000000002 RSI: 00007f3d3268fc00 RDI: ffffffffffffff9c [ 694.047882][T11955] RBP: 00007f3d3268fc00 R08: 0000000000000000 R09: 0000000000000000 [ 694.047894][T11955] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 694.047907][T11955] R13: 00007f3d31a26038 R14: 00007f3d31a25fa0 R15: 00007ffc1a9a9da8 [ 694.047935][T11955] [ 694.060991][T11051] usb 1-1: USB disconnect, device number 68 [ 694.202217][T11958] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1466'. [ 694.548461][T11966] Device name not specified. [ 694.548461][T11966] [ 695.216607][T11051] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 695.444281][T11051] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 695.445163][T11051] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 695.448341][T11051] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.448364][T11051] usb 3-1: Product: syz [ 695.448378][T11051] usb 3-1: Manufacturer: syz [ 695.448393][T11051] usb 3-1: SerialNumber: syz [ 695.645175][T11975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1471'. [ 695.700096][T11051] snd-usb-6fire 3-1:1.0: unable to receive device firmware state. [ 695.700206][T11051] snd-usb-6fire 3-1:1.0: probe with driver snd-usb-6fire failed with error -121 [ 696.027504][T11966] netlink: 'syz.2.1469': attribute type 2 has an invalid length. [ 696.327784][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802cac3800: rx timeout, send abort [ 696.827824][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802cac3800: abort rx timeout. Force session deactivation [ 696.828015][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802cac3400: rx timeout, send abort [ 697.171192][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1475'. [ 697.328052][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802cac3400: abort rx timeout. Force session deactivation [ 697.600854][T11051] usb 3-1: USB disconnect, device number 53 [ 697.614516][ T5705] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 697.764333][ T5705] usb 1-1: Using ep0 maxpacket: 8 [ 697.765167][ T5705] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 697.766113][ T5705] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 697.766127][ T5705] usb 1-1: config 0 has no interface number 0 [ 697.766146][ T5705] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 697.766174][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.772560][ T5705] usb 1-1: config 0 descriptor?? [ 697.835001][ T5705] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 697.864322][ T3109] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 697.908053][ T31] kauditd_printk_skb: 59 callbacks suppressed [ 697.908072][ T31] audit: type=1400 audit(2000000591.468:4469): avc: denied { read } for pid=12003 comm="syz.4.1479" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 697.908258][ T31] audit: type=1400 audit(2000000591.468:4470): avc: denied { open } for pid=12003 comm="syz.4.1479" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 698.134021][ T31] audit: type=1400 audit(2000000591.578:4471): avc: denied { create } for pid=12003 comm="syz.4.1479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 698.154779][ T31] audit: type=1400 audit(2000000591.578:4472): avc: denied { accept } for pid=12003 comm="syz.4.1479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 698.216394][ T30] usb 1-1: USB disconnect, device number 69 [ 698.234417][T11051] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 698.384783][ T3109] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 698.385674][ T3109] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.435645][T11051] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 698.436750][T11051] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.706952][ T31] audit: type=1400 audit(2000000592.268:4473): avc: denied { read write } for pid=12007 comm="syz.3.1480" name="vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 698.708367][ T31] audit: type=1400 audit(2000000592.268:4474): avc: denied { open } for pid=12007 comm="syz.3.1480" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 698.710821][ T31] audit: type=1400 audit(2000000592.268:4475): avc: denied { ioctl } for pid=12007 comm="syz.3.1480" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 698.781509][ T31] audit: type=1400 audit(2000000592.338:4476): avc: denied { create } for pid=12007 comm="syz.3.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 698.782669][ T31] audit: type=1400 audit(2000000592.338:4477): avc: denied { write } for pid=12007 comm="syz.3.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 698.831748][T12011] can0: slcan on ttyS3. [ 698.858827][ T31] audit: type=1400 audit(2000000592.418:4478): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 699.017688][ T30] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 699.139602][T11051] usb 3-1: Firmware: major: 118, minor: 91, hardware type: UNKNOWN (67) [ 699.259544][ T30] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 699.289761][ T30] usb 1-1: config index 0 descriptor too short (expected 92, got 76) [ 699.290011][ T30] usb 1-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 699.290061][ T30] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 699.290327][ T30] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 699.356637][ T3109] usb 6-1: Firmware: major: 118, minor: 91, hardware type: UNKNOWN (67) [ 699.376777][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.377191][ T30] usb 1-1: Product: syz [ 699.377716][ T30] usb 1-1: Manufacturer: syz [ 699.377857][ T30] usb 1-1: SerialNumber: syz [ 699.416762][T11051] usb 3-1: failed to fetch extended address, random address set [ 699.417183][T11051] usb 3-1: atusb_probe: initialization failed, error = -524 [ 699.419853][T11051] atusb 3-1:1.0: probe with driver atusb failed with error -524 [ 699.481756][T11051] usb 3-1: USB disconnect, device number 54 [ 699.547597][T12007] can0 (unregistered): slcan off ttyS3. [ 699.562326][ T3109] usb 6-1: failed to fetch extended address, random address set [ 699.562353][ T3109] usb 6-1: atusb_probe: initialization failed, error = -524 [ 699.562506][ T3109] atusb 6-1:1.0: probe with driver atusb failed with error -524 [ 699.570421][ T3109] usb 6-1: USB disconnect, device number 62 [ 699.755941][ T30] usb 1-1: USB disconnect, device number 70 [ 700.354712][ T30] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 700.374379][ T3109] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 700.504748][ T30] usb 6-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 700.505812][ T30] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 700.505840][ T30] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 700.505862][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.534297][ T3109] usb 1-1: Using ep0 maxpacket: 8 [ 700.534918][ T3109] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 700.535732][ T3109] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 700.535751][ T3109] usb 1-1: config 0 has no interface number 0 [ 700.535779][ T3109] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 700.535809][ T3109] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.539447][ T3109] usb 1-1: config 0 descriptor?? [ 700.548780][ T3109] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 700.714369][T12052] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1487'. [ 701.309190][T12061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.311113][T12061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.969886][T11051] usb 1-1: USB disconnect, device number 71 [ 702.044315][ T3109] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 702.045565][ T30] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 702.045593][ T30] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 702.358700][ T30] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 702.363044][ T30] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 702.389115][ T30] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 702.418255][ T30] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 702.423362][ T30] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 702.448222][ T30] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 702.448535][ T30] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 702.449488][ T30] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 702.449858][ T30] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 702.450153][ T30] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 702.450407][ T30] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 702.450657][ T30] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 702.450901][ T30] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 702.451192][ T30] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 702.451442][ T30] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 702.451686][ T30] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 702.451930][ T30] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 702.452175][ T30] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 702.452434][ T30] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 702.452717][ T30] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 702.452966][ T30] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 702.453208][ T30] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 702.453463][ T30] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 702.514788][ T3109] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 702.517797][ T3109] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.517817][ T3109] usb 3-1: Product: syz [ 702.517829][ T3109] usb 3-1: Manufacturer: syz [ 702.517846][ T3109] usb 3-1: SerialNumber: syz [ 702.519926][ T3109] usb 3-1: config 0 descriptor?? [ 702.523320][ T3109] hub 3-1:0.0: bad descriptor, ignoring hub [ 702.525515][ T3109] hub 3-1:0.0: probe with driver hub failed with error -5 [ 702.707408][ T30] ax88179_178a 6-1:1.0 eth6: register 'ax88179_178a' at usb-dummy_hcd.5-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, b6:a5:5d:c2:a4:a3 [ 702.710309][ T30] usb 6-1: USB disconnect, device number 63 [ 702.712525][ T30] ax88179_178a 6-1:1.0 eth6: unregister 'ax88179_178a' usb-dummy_hcd.5-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 702.727284][ T3109] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 702.732476][ T3109] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 702.732511][ T3109] dib0700: firmware download failed at 7 with -22 [ 702.967303][ T31] kauditd_printk_skb: 29 callbacks suppressed [ 702.967325][ T31] audit: type=1400 audit(2000000596.528:4508): avc: denied { unmount } for pid=6050 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 703.149954][ T31] audit: type=1400 audit(2000000596.668:4509): avc: denied { create } for pid=12073 comm="syz.0.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 703.150010][ T31] audit: type=1400 audit(2000000596.668:4510): avc: denied { mmap_zero } for pid=12073 comm="syz.0.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 703.150047][ T31] audit: type=1400 audit(2000000596.678:4511): avc: denied { map } for pid=12073 comm="syz.0.1493" path="socket:[38645]" dev="sockfs" ino=38645 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 703.350032][ T5705] usb 3-1: USB disconnect, device number 55 [ 703.378489][ T31] audit: type=1400 audit(2000000596.938:4512): avc: denied { mount } for pid=12085 comm="syz.4.1496" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 703.415106][T12087] bond0: (slave bond_slave_0): Releasing backup interface [ 703.418315][T12087] bond0: (slave bond_slave_1): Releasing backup interface [ 703.422075][T12087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=12087 comm=syz.4.1496 [ 703.465239][T12087] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 703.467063][T12087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.491640][T12087] FAULT_INJECTION: forcing a failure. [ 703.491640][T12087] name failslab, interval 1, probability 0, space 0, times 0 [ 703.491682][T12087] CPU: 1 UID: 0 PID: 12087 Comm: syz.4.1496 Tainted: G L syzkaller #0 PREEMPT(full) [ 703.491711][T12087] Tainted: [L]=SOFTLOCKUP [ 703.491719][T12087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 703.491731][T12087] Call Trace: [ 703.491739][T12087] [ 703.491748][T12087] dump_stack_lvl+0x100/0x190 [ 703.491786][T12087] should_fail_ex.cold+0x5/0xa [ 703.491815][T12087] should_failslab+0xc2/0x120 [ 703.491846][T12087] kmem_cache_alloc_noprof+0x92/0x6a0 [ 703.491874][T12087] ? mempool_init_node+0x2f7/0x6f0 [ 703.491899][T12087] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 703.491920][T12087] mempool_init_node+0x2f7/0x6f0 [ 703.491947][T12087] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 703.491966][T12087] ? __pfx_mempool_free_slab+0x10/0x10 [ 703.491987][T12087] mempool_init_noprof+0x3a/0x50 [ 703.492011][T12087] bioset_init+0x37e/0x8a0 [ 703.492042][T12087] ? __pfx_bioset_init+0x10/0x10 [ 703.492070][T12087] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 703.492091][T12087] ? percpu_ref_init+0xec/0x3f0 [ 703.492116][T12087] ? percpu_ref_init+0x244/0x3f0 [ 703.492138][T12087] mddev_init+0x102/0x820 [ 703.492170][T12087] md_alloc+0xc7/0x10a0 [ 703.492196][T12087] md_alloc_and_put+0x16/0xb0 [ 703.492218][T12087] add_named_array+0x27d/0x3a0 [ 703.492240][T12087] ? __pfx_add_named_array+0x10/0x10 [ 703.492277][T12087] param_attr_store+0x199/0x300 [ 703.492303][T12087] ? __pfx_param_attr_store+0x10/0x10 [ 703.492324][T12087] module_attr_store+0x58/0x80 [ 703.492343][T12087] ? __pfx_module_attr_store+0x10/0x10 [ 703.492362][T12087] sysfs_kf_write+0xf2/0x150 [ 703.492392][T12087] kernfs_fop_write_iter+0x3e0/0x5f0 [ 703.492422][T12087] ? __pfx_sysfs_kf_write+0x10/0x10 [ 703.492452][T12087] vfs_write+0x6af/0x1050 [ 703.492480][T12087] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 703.492508][T12087] ? __pfx_vfs_write+0x10/0x10 [ 703.492530][T12087] ? find_held_lock+0x2b/0x80 [ 703.492576][T12087] ksys_write+0x12a/0x250 [ 703.492599][T12087] ? __pfx_ksys_write+0x10/0x10 [ 703.492631][T12087] do_syscall_64+0x123/0x790 [ 703.492656][T12087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.492675][T12087] RIP: 0033:0x7f8de9f9e199 [ 703.492693][T12087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 703.492713][T12087] RSP: 002b:00007f8deae77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 703.492734][T12087] RAX: ffffffffffffffda RBX: 00007f8dea225fa0 RCX: 00007f8de9f9e199 [ 703.492748][T12087] RDX: 0000000000000003 RSI: 0000200000000500 RDI: 0000000000000004 [ 703.492762][T12087] RBP: 00007f8dea035888 R08: 0000000000000000 R09: 0000000000000000 [ 703.492779][T12087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 703.492793][T12087] R13: 00007f8dea226038 R14: 00007f8dea225fa0 R15: 00007ffc4b9deff8 [ 703.492822][T12087] [ 703.493017][T12087] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 703.623586][ T31] audit: type=1400 audit(2000000597.178:4513): avc: denied { unmount } for pid=5621 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 703.875700][ T30] libceph: connect (1)[c::]:6789 error -101 [ 703.878311][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 703.899843][T12096] ceph: No mds server is up or the cluster is laggy [ 703.903330][ T31] audit: type=1400 audit(2000000597.458:4514): avc: denied { mount } for pid=12094 comm="syz.2.1500" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 703.903449][ T5616] Bluetooth: hci4: unexpected event for opcode 0x200a [ 703.945202][ T5705] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 703.959560][T12099] overlayfs: failed to resolve './bus': -2 [ 704.694264][ T5705] usb 6-1: Using ep0 maxpacket: 16 [ 704.705059][ T5705] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 704.770257][ T5705] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 704.770290][ T5705] usb 6-1: config 0 interface 0 has no altsetting 0 [ 705.192604][ T5705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.192630][ T5705] usb 6-1: Product: syz [ 705.192644][ T5705] usb 6-1: Manufacturer: syz [ 705.192659][ T5705] usb 6-1: SerialNumber: syz [ 705.231735][ T5705] usb 6-1: config 0 descriptor?? [ 705.337447][ T31] audit: type=1400 audit(2000000598.898:4515): avc: denied { map } for pid=12107 comm="syz.0.1503" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 706.646042][ T31] audit: type=1400 audit(2000000600.208:4516): avc: denied { perfmon } for pid=12113 comm="syz.3.1506" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 706.652469][ T31] audit: type=1400 audit(2000000600.208:4517): avc: denied { prog_run } for pid=12113 comm="syz.3.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 706.856345][ T3109] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 707.444937][ T3109] usb 3-1: not running at top speed; connect to a high speed hub [ 707.444970][ T3109] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 707.512596][ T3109] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 707.512642][ T3109] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 707.512684][ T3109] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.080848][ T5705] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 708.080932][ T5705] imon 6-1:0.0: unable to initialize intf0, err -19 [ 708.080949][ T5705] imon:imon_probe: failed to initialize context! [ 708.080960][ T5705] imon 6-1:0.0: unable to register, err -19 [ 708.084937][ T3109] uvcvideo 3-1:1.0: Found UVC 1.00 device (046d:0825) [ 708.085039][ T3109] uvcvideo 3-1:1.0: Failed to create links for entity 32769 [ 708.085053][ T3109] uvcvideo 3-1:1.0: Failed to register entities (-22). [ 708.085066][ T3109] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770. [ 708.087990][ T5705] usb 6-1: USB disconnect, device number 64 [ 708.161450][ T3109] usb 3-1: USB disconnect, device number 56 [ 709.127564][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 709.127584][ T31] audit: type=1400 audit(2000000602.218:4519): avc: denied { create } for pid=12118 comm="syz.3.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 709.127627][ T31] audit: type=1400 audit(2000000602.228:4520): avc: denied { setopt } for pid=12118 comm="syz.3.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 709.127660][ T31] audit: type=1400 audit(2000000602.238:4521): avc: denied { write } for pid=12118 comm="syz.3.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 709.343831][ T31] audit: type=1400 audit(2000000602.898:4522): avc: denied { write } for pid=12122 comm="syz.4.1509" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 709.343880][ T31] audit: type=1400 audit(2000000602.898:4523): avc: denied { open } for pid=12122 comm="syz.4.1509" path="/dev/input/mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 709.435375][ T31] audit: type=1400 audit(2000000602.998:4524): avc: denied { mount } for pid=12124 comm="syz.5.1510" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 709.438004][ T31] audit: type=1400 audit(2000000602.998:4525): avc: denied { search } for pid=12124 comm="syz.5.1510" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 709.438284][ T31] audit: type=1400 audit(2000000602.998:4526): avc: denied { write } for pid=12124 comm="syz.5.1510" name="trace_clock" dev="tracefs" ino=3968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 709.438627][ T31] audit: type=1400 audit(2000000602.998:4527): avc: denied { open } for pid=12124 comm="syz.5.1510" path="/298/tracing/trace_clock" dev="tracefs" ino=3968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 709.441764][ T31] audit: type=1400 audit(2000000602.998:4528): avc: denied { read write } for pid=12124 comm="syz.5.1510" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 709.567511][T12125] CacheFiles: Failed to register: -95 [ 709.612365][T12124] Process accounting resumed [ 710.136724][T12133] trusted_key: encrypted_key: insufficient parameters specified [ 710.878396][ T30] libceph: connect (1)[c::]:6789 error -101 [ 710.879181][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 710.881536][ T30] libceph: connect (1)[c::]:6789 error -101 [ 710.882234][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 710.909659][ T5616] Bluetooth: hci4: unexpected event for opcode 0x200a [ 710.912627][T12141] overlayfs: failed to resolve './bus': -2 [ 711.136021][ T30] libceph: connect (1)[c::]:6789 error -101 [ 711.138976][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 711.646524][ T30] libceph: connect (1)[c::]:6789 error -101 [ 711.657183][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 712.805638][T12157] can0: slcan on ttyS3. [ 712.949047][T12138] ceph: No mds server is up or the cluster is laggy [ 713.868000][ T30] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 713.925299][T12186] CacheFiles: Failed to register: -95 [ 713.953618][T12183] geneve3: entered promiscuous mode [ 713.953642][T12183] geneve3: entered allmulticast mode [ 714.007663][T12155] can0 (unregistered): slcan off ttyS3. [ 714.095877][ T30] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 714.096735][ T30] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 714.096760][ T30] usb 6-1: config 0 has no interface number 0 [ 714.096793][ T30] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 714.096817][ T30] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 714.098564][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.098584][ T30] usb 6-1: Product: syz [ 714.098599][ T30] usb 6-1: Manufacturer: syz [ 714.098614][ T30] usb 6-1: SerialNumber: syz [ 714.138380][ T30] usb 6-1: config 0 descriptor?? [ 714.177075][T12177] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 714.178951][ T30] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 714.215155][ T30] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 714.321874][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 714.321890][ T5616] Bluetooth: hci3: unexpected event for opcode 0x200a [ 714.321897][ T31] audit: type=1400 audit(2000000607.858:4548): avc: denied { write } for pid=12188 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 714.370215][T12193] overlayfs: failed to resolve './bus': -2 [ 714.398239][T12191] ceph: No mds server is up or the cluster is laggy [ 714.443754][ T5798] libceph: connect (1)[c::]:6789 error -101 [ 714.443958][ T5798] libceph: mon0 (1)[c::]:6789 connect error [ 714.463769][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 714.576110][T12198] CacheFiles: Failed to register: -95 [ 714.696437][ T30] libceph: connect (1)[c::]:6789 error -101 [ 714.697496][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 715.223684][T12198] Process accounting resumed [ 715.254538][ T30] libceph: connect (1)[c::]:6789 error -101 [ 715.281290][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 715.686525][T12203] ceph: No mds server is up or the cluster is laggy [ 715.686863][ T3109] libceph: connect (1)[c::]:6789 error -101 [ 715.687010][ T3109] libceph: mon0 (1)[c::]:6789 connect error [ 715.890065][ T5616] Bluetooth: hci1: unexpected event for opcode 0x200a [ 715.902553][T12202] overlayfs: failed to resolve './bus': -2 [ 716.353041][ T31] audit: type=1400 audit(2000000609.908:4549): avc: denied { read } for pid=12218 comm="syz.4.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 716.672336][ T31] audit: type=1400 audit(2000000610.228:4550): avc: denied { write } for pid=12209 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 716.822285][ T5616] Bluetooth: hci1: unexpected event for opcode 0x200a [ 716.826419][T12236] overlayfs: failed to resolve './bus': -2 [ 716.826819][ T30] libceph: connect (1)[c::]:6789 error -101 [ 716.827685][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 717.156817][ T30] libceph: connect (1)[c::]:6789 error -101 [ 717.157867][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 717.667460][ T30] libceph: connect (1)[c::]:6789 error -101 [ 717.668867][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 717.891100][ T31] audit: type=1400 audit(2000000611.448:4551): avc: denied { read } for pid=12239 comm="syz.4.1531" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 718.447865][ T31] audit: type=1400 audit(2000000612.008:4552): avc: denied { create } for pid=12239 comm="syz.4.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 718.509389][ T31] audit: type=1400 audit(2000000612.068:4553): avc: denied { ioctl } for pid=12239 comm="syz.4.1531" path="socket:[38908]" dev="sockfs" ino=38908 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 718.554339][ T31] audit: type=1400 audit(2000000612.108:4554): avc: denied { bind } for pid=12239 comm="syz.4.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 718.688815][T12232] ceph: No mds server is up or the cluster is laggy [ 718.823087][ T31] audit: type=1400 audit(2000000612.378:4555): avc: denied { write } for pid=12244 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 718.889758][ T31] audit: type=1400 audit(2000000612.438:4556): avc: denied { map_read map_write } for pid=12217 comm="syz.2.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 719.275396][T12253] geneve2: entered promiscuous mode [ 719.275448][T12253] geneve2: entered allmulticast mode [ 720.216417][T12259] trusted_key: encrypted_key: insufficient parameters specified [ 720.740039][T12261] Device name not specified. [ 720.740039][T12261] [ 721.502206][ T31] audit: type=1400 audit(2000000615.058:4557): avc: denied { setopt } for pid=12264 comm="syz.4.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 721.573438][ T31] audit: type=1400 audit(2000000615.128:4558): avc: denied { setopt } for pid=12264 comm="syz.4.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 721.581897][T11051] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 721.691735][ T3109] usb 6-1: USB disconnect, device number 65 [ 722.049800][T11051] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 722.178662][T11051] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 722.318468][ T3109] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 722.388017][T11051] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.388061][T11051] usb 3-1: Product: syz [ 722.388078][T11051] usb 3-1: Manufacturer: syz [ 722.388093][T11051] usb 3-1: SerialNumber: syz [ 722.507365][ T3109] cyberjack 6-1:0.69: device disconnected [ 722.786415][T11051] usb 3-1: can't set config #1, error -71 [ 722.787781][T11051] usb 3-1: USB disconnect, device number 57 [ 723.164371][ T31] audit: type=1400 audit(2000000616.718:4559): avc: denied { create } for pid=12275 comm="syz.2.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 723.195658][ T30] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 723.200417][ T31] audit: type=1400 audit(2000000616.728:4560): avc: denied { bind } for pid=12275 comm="syz.2.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 723.241116][ T31] audit: type=1400 audit(2000000616.798:4561): avc: denied { name_bind } for pid=12275 comm="syz.2.1542" src=12816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 723.272201][ T31] audit: type=1400 audit(2000000616.828:4562): avc: denied { node_bind } for pid=12275 comm="syz.2.1542" saddr=172.20.0.1 src=12816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 723.311091][ T31] audit: type=1400 audit(2000000616.868:4563): avc: denied { listen } for pid=12275 comm="syz.2.1542" laddr=172.20.0.1 lport=12816 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 723.355492][ T30] usb 1-1: Using ep0 maxpacket: 32 [ 723.358322][ T30] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 723.369733][ T30] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 723.369838][ T30] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 723.369867][ T30] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 723.369928][ T30] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 723.466823][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.466853][ T30] usb 1-1: Product: syz [ 723.466914][ T30] usb 1-1: Manufacturer: syz [ 723.467018][ T30] usb 1-1: SerialNumber: syz [ 723.540305][ T31] audit: type=1400 audit(2000000617.098:4564): avc: denied { ioctl } for pid=12275 comm="syz.2.1542" path="socket:[38964]" dev="sockfs" ino=38964 ioctlcmd=0xaf20 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 723.690849][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 724.157753][T12282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1540'. [ 724.185151][ T30] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input61 [ 724.499443][ T31] audit: type=1400 audit(2000000618.058:4565): avc: denied { read } for pid=4961 comm="acpid" name="mouse1" dev="devtmpfs" ino=3453 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 724.544988][ T31] audit: type=1400 audit(2000000618.108:4566): avc: denied { open } for pid=4961 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3453 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 725.864727][ T30] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 725.864749][ T30] (id 0x00) [ 726.608519][ T30] rc_core: IR keymap rc-imon-pad not found [ 726.608540][ T30] Registered IR keymap rc-empty [ 726.608607][ T30] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 726.608622][ T30] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 726.661997][ T30] imon:send_packet: packet tx failed (-71) [ 726.676737][ T30] imon 1-1:155.0: remote input dev register failed [ 726.676864][ T30] imon 1-1:155.0: imon_init_intf0: rc device setup failed [ 726.682529][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 726.682547][ T31] audit: type=1400 audit(2000000620.238:4569): avc: denied { bind } for pid=12294 comm="syz.2.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 726.737717][ T30] imon 1-1:155.0: unable to initialize intf0, err 0 [ 726.737740][ T30] imon:imon_probe: failed to initialize context! [ 726.737751][ T30] imon 1-1:155.0: unable to register, err -19 [ 726.740655][ T30] usb 1-1: USB disconnect, device number 72 [ 726.783781][ T31] audit: type=1400 audit(2000000620.338:4570): avc: denied { listen } for pid=12294 comm="syz.2.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 726.785169][ T31] audit: type=1400 audit(2000000620.348:4571): avc: denied { accept } for pid=12294 comm="syz.2.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 727.014620][T12295] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1545'. [ 727.224405][ T3109] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 727.324957][ T30] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 727.464263][ T3109] usb 6-1: Using ep0 maxpacket: 16 [ 727.465199][ T3109] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 727.473279][ T3109] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.491728][ T30] usb 3-1: Using ep0 maxpacket: 8 [ 727.531573][ T30] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 727.575898][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.576405][ T30] usb 3-1: Product: syz [ 727.576628][ T30] usb 3-1: Manufacturer: syz [ 727.576793][ T30] usb 3-1: SerialNumber: syz [ 727.660739][ T30] usb 3-1: config 0 descriptor?? [ 727.738827][ T3109] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.738854][ T3109] usb 6-1: Product: syz [ 727.738867][ T3109] usb 6-1: Manufacturer: syz [ 727.738880][ T3109] usb 6-1: SerialNumber: syz [ 727.801519][ T30] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 727.801688][ T30] pctv452e: pctv452e_power_ctrl: 1 [ 727.801688][ T30] [ 727.831272][ T30] usb 3-1: selecting invalid altsetting 3 [ 727.831300][ T30] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 727.831300][ T30] [ 727.831364][ T30] dvb-usb: bulk message failed: -22 (5/0) [ 728.033347][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 728.060348][ T30] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 728.061100][ T30] usb 3-1: media controller created [ 728.221818][ T30] dvb-usb: bulk message failed: -22 (8/0) [ 728.222419][ T30] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 728.260085][ T30] dvb-usb: MAC address reading failed. [ 728.413094][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 728.439525][T12297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1545'. [ 728.502999][ T31] audit: type=1400 audit(2000000622.058:4572): avc: denied { write } for pid=12298 comm="syz.5.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 728.543683][ T31] audit: type=1400 audit(2000000622.098:4573): avc: denied { ioctl } for pid=12309 comm="syz.4.1549" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 728.570470][ T30] DVB: Unable to find symbol stb0899_attach() [ 728.570484][ T30] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 729.331029][ T5719] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 729.526218][ T5719] usb 1-1: Using ep0 maxpacket: 8 [ 729.528596][ T5719] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 729.580555][ T5719] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 729.580608][ T5719] usb 1-1: config 0 has no interface number 0 [ 729.580744][ T5719] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 729.580841][ T5719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.752315][ T5719] usb 1-1: config 0 descriptor?? [ 730.298200][ T5719] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 730.464298][ T30] rc_core: IR keymap rc-tt-1500 not found [ 730.464316][ T30] Registered IR keymap rc-empty [ 730.465209][ T30] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 730.563901][ T5719] usb 1-1: USB disconnect, device number 73 [ 730.632703][ T3109] cdc_ncm 6-1:1.0: bind() failure [ 730.823307][ T30] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input63 [ 730.995061][ T3109] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 730.995224][ T3109] cdc_ncm 6-1:1.1: bind() failure [ 731.296510][ T3109] usb 6-1: USB disconnect, device number 66 [ 731.298896][ T30] dvb-usb: schedule remote query interval to 100 msecs. [ 731.298915][ T30] pctv452e: pctv452e_power_ctrl: 0 [ 731.298915][ T30] [ 731.298926][ T30] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 731.406508][ T5798] dvb-usb: bulk message failed: -22 (4/0) [ 731.406532][ T5798] dvb-usb: error -22 while querying for an remote control event. [ 731.495726][ T5719] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 731.514287][ T5798] dvb-usb: bulk message failed: -22 (4/0) [ 731.514341][ T5798] dvb-usb: error -22 while querying for an remote control event. [ 731.624255][ T5798] dvb-usb: bulk message failed: -22 (4/0) [ 731.624283][ T5798] dvb-usb: error -22 while querying for an remote control event. [ 731.629239][ T30] usb 3-1: USB disconnect, device number 58 [ 731.658824][ T31] audit: type=1400 audit(2000000625.198:4574): avc: denied { ioctl } for pid=12321 comm="syz.5.1552" path="socket:[39020]" dev="sockfs" ino=39020 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 731.771961][ T31] audit: type=1400 audit(2000000625.328:4575): avc: denied { sys_module } for pid=12321 comm="syz.5.1552" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 731.851128][ T30] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 736.088907][T12349] Device name not specified. [ 736.088907][T12349] [ 736.274369][T12352] can0: slcan on ttyS3. [ 736.842052][T12351] trusted_key: encrypted_key: hex blob is missing [ 736.845377][ T5719] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 736.945662][T12347] can0 (unregistered): slcan off ttyS3. [ 737.050117][ T31] audit: type=1400 audit(2000000630.608:4576): avc: denied { mount } for pid=12357 comm="syz.4.1551" name="/" dev="gadgetfs" ino=7141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 737.198325][ T5719] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 737.201476][ T5719] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 737.212652][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.212674][ T5719] usb 1-1: Product: syz [ 737.212687][ T5719] usb 1-1: Manufacturer: syz [ 737.212699][ T5719] usb 1-1: SerialNumber: syz [ 737.252040][ T31] audit: type=1400 audit(2000000630.808:4577): avc: denied { append } for pid=12357 comm="syz.4.1551" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 737.635686][ T5719] snd-usb-6fire 1-1:1.0: unable to receive device firmware state. [ 737.635716][ T5719] snd-usb-6fire 1-1:1.0: probe with driver snd-usb-6fire failed with error -121 [ 737.972767][ T31] audit: type=1400 audit(2000000631.528:4578): avc: denied { write } for pid=12361 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 737.973144][T12349] netlink: 'syz.0.1558': attribute type 2 has an invalid length. [ 738.536430][ T31] audit: type=1400 audit(2000000632.098:4579): avc: denied { unmount } for pid=5621 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 738.756024][ T31] audit: type=1400 audit(2000000632.318:4580): avc: denied { write } for pid=12379 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.046941][ T31] audit: type=1400 audit(2000000632.598:4581): avc: denied { read write } for pid=12382 comm="syz.5.1565" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 739.047313][ T31] audit: type=1400 audit(2000000632.608:4582): avc: denied { open } for pid=12382 comm="syz.5.1565" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 739.207198][ T30] usb 1-1: USB disconnect, device number 75 [ 740.399115][ T30] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 740.603818][ T30] usb 1-1: Using ep0 maxpacket: 8 [ 740.674538][ T30] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 740.677777][ T30] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.677815][ T30] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 740.677831][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 740.677846][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 740.677862][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 740.677875][ T30] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 740.680042][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.680066][ T30] usb 1-1: Product: syz [ 740.680079][ T30] usb 1-1: Manufacturer: syz [ 740.680093][ T30] usb 1-1: SerialNumber: syz [ 740.790665][ T30] usb 1-1: config 0 descriptor?? [ 740.792632][T12401] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 740.816030][ T30] ati_remote 1-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 742.059709][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 742.059783][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 742.226012][T12401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.226218][T12401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.301541][ T5798] usb 1-1: USB disconnect, device number 76 [ 742.331465][ T31] audit: type=1400 audit(2000000635.888:4583): avc: denied { write } for pid=12392 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.399758][ T5704] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 742.399820][ T5704] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 742.440858][ T5704] usb 4-1: USB disconnect, device number 60 [ 742.554255][ T30] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 742.703884][ T31] audit: type=1400 audit(2000000636.258:4584): avc: denied { write } for pid=12429 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.744248][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 742.744719][ T30] usb 6-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 742.745489][ T30] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.745507][ T30] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 742.745521][ T30] usb 6-1: config 0 interface 0 has no altsetting 0 [ 742.745537][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.749391][ T30] usb 6-1: config 0 descriptor?? [ 742.817377][ T5798] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 742.862982][T12430] trusted_key: encrypted_key: hex blob is missing [ 743.025555][ T5798] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 743.173445][ T5798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.430962][T12427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.431375][T12427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.443856][T12422] FAULT_INJECTION: forcing a failure. [ 743.443856][T12422] name failslab, interval 1, probability 0, space 0, times 0 [ 743.443884][T12422] CPU: 0 UID: 0 PID: 12422 Comm: syz.5.1572 Tainted: G L syzkaller #0 PREEMPT(full) [ 743.443907][T12422] Tainted: [L]=SOFTLOCKUP [ 743.443914][T12422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 743.443924][T12422] Call Trace: [ 743.443930][T12422] [ 743.443938][T12422] dump_stack_lvl+0x100/0x190 [ 743.443967][T12422] should_fail_ex.cold+0x5/0xa [ 743.443991][T12422] should_failslab+0xc2/0x120 [ 743.444015][T12422] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 743.444037][T12422] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 743.444062][T12422] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 743.444082][T12422] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 743.444104][T12422] alloc_inode+0x68/0x250 [ 743.444122][T12422] new_inode+0x22/0x1c0 [ 743.444142][T12422] hugetlbfs_get_inode+0x39a/0x700 [ 743.444162][T12422] ? security_capable+0x80/0x260 [ 743.444187][T12422] hugetlb_file_setup+0x3cc/0x5b0 [ 743.444212][T12422] newseg+0xaf0/0xed0 [ 743.444238][T12422] ? __pfx_newseg+0x10/0x10 [ 743.444259][T12422] ? down_write+0x146/0x1f0 [ 743.444281][T12422] ? ksys_write+0x190/0x250 [ 743.444303][T12422] ipcget+0xee/0xf50 [ 743.444327][T12422] ? __pfx_do_futex+0x10/0x10 [ 743.444352][T12422] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 743.444373][T12422] ? __pfx_ipcget+0x10/0x10 [ 743.444396][T12422] ? __x64_sys_futex+0x34f/0x4d0 [ 743.444417][T12422] ? __x64_sys_futex+0x358/0x4d0 [ 743.444444][T12422] __x64_sys_shmget+0x13b/0x1b0 [ 743.444467][T12422] ? __pfx___x64_sys_shmget+0x10/0x10 [ 743.444497][T12422] do_syscall_64+0x123/0x790 [ 743.444517][T12422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.444534][T12422] RIP: 0033:0x7f3d3179e199 [ 743.444548][T12422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 743.444564][T12422] RSP: 002b:00007f3d32690028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 743.444580][T12422] RAX: ffffffffffffffda RBX: 00007f3d31a25fa0 RCX: 00007f3d3179e199 [ 743.444592][T12422] RDX: 0000000078001900 RSI: 0000000000001000 RDI: 0000000000000000 [ 743.444602][T12422] RBP: 00007f3d31835888 R08: 0000000000000000 R09: 0000000000000000 [ 743.444612][T12422] R10: 0000200000ffe000 R11: 0000000000000246 R12: 0000000000000000 [ 743.444622][T12422] R13: 00007f3d31a26038 R14: 00007f3d31a25fa0 R15: 00007ffc1a9a9da8 [ 743.444645][T12422] [ 743.545984][T12427] jffs2: notice: (12427) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 743.556523][ T31] audit: type=1400 audit(2000000637.118:4585): avc: denied { mount } for pid=12426 comm="syz.2.1574" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 743.830092][ T30] usbhid 6-1:0.0: can't add hid device: -71 [ 743.830186][ T30] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 743.838641][ T5798] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 743.946811][ T31] audit: type=1400 audit(2000000637.508:4586): avc: denied { getopt } for pid=12439 comm="syz.4.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 743.994423][ T30] usb 6-1: USB disconnect, device number 67 [ 744.015655][ T5798] usb 3-1: USB disconnect, device number 59 [ 744.617903][T12453] FAULT_INJECTION: forcing a failure. [ 744.617903][T12453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 744.617935][T12453] CPU: 1 UID: 0 PID: 12453 Comm: syz.4.1578 Tainted: G L syzkaller #0 PREEMPT(full) [ 744.617960][T12453] Tainted: [L]=SOFTLOCKUP [ 744.617967][T12453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 744.617978][T12453] Call Trace: [ 744.617985][T12453] [ 744.617993][T12453] dump_stack_lvl+0x100/0x190 [ 744.618024][T12453] should_fail_ex.cold+0x5/0xa [ 744.618052][T12453] _copy_to_iter+0x5a4/0x1720 [ 744.618082][T12453] ? __pfx__copy_to_iter+0x10/0x10 [ 744.618103][T12453] ? ptype_seq_start+0x2a/0x150 [ 744.618122][T12453] ? find_held_lock+0x2b/0x80 [ 744.618148][T12453] ? ptype_seq_stop+0x31/0xb0 [ 744.618162][T12453] ? ptype_seq_stop+0x31/0xb0 [ 744.618178][T12453] ? __pfx_canxl_rcv+0x10/0x10 [ 744.618208][T12453] seq_read_iter+0xdab/0x1270 [ 744.618246][T12453] seq_read+0x344/0x4d0 [ 744.618277][T12453] ? __pfx_seq_read+0x10/0x10 [ 744.618299][T12453] ? get_pid_task+0x2a/0x250 [ 744.618330][T12453] ? lock_acquire+0x1d1/0x380 [ 744.618351][T12453] ? fdget_pos+0x2aa/0x380 [ 744.618380][T12453] ? selinux_file_permission+0x8f/0x6d0 [ 744.618411][T12453] ? __pfx_seq_read+0x10/0x10 [ 744.618435][T12453] proc_reg_read+0x240/0x330 [ 744.618455][T12453] ? __pfx_proc_reg_read+0x10/0x10 [ 744.618475][T12453] vfs_read+0x1e4/0xb40 [ 744.618498][T12453] ? lock_acquire+0x1d1/0x380 [ 744.618518][T12453] ? __fget_files+0x34/0x3d0 [ 744.618543][T12453] ? __pfx_vfs_read+0x10/0x10 [ 744.618562][T12453] ? find_held_lock+0x2b/0x80 [ 744.618589][T12453] ? __fget_files+0x215/0x3d0 [ 744.618619][T12453] ? __fget_files+0x21f/0x3d0 [ 744.618652][T12453] ksys_read+0x12a/0x250 [ 744.618673][T12453] ? __pfx_ksys_read+0x10/0x10 [ 744.618703][T12453] do_syscall_64+0x123/0x790 [ 744.618727][T12453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.618747][T12453] RIP: 0033:0x7f8de9f9e199 [ 744.618763][T12453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.618781][T12453] RSP: 002b:00007f8deae35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 744.618801][T12453] RAX: ffffffffffffffda RBX: 00007f8dea226180 RCX: 00007f8de9f9e199 [ 744.618813][T12453] RDX: 0000000000002020 RSI: 0000200000001280 RDI: 0000000000000005 [ 744.618825][T12453] RBP: 00007f8deae35090 R08: 0000000000000000 R09: 0000000000000000 [ 744.618836][T12453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.618850][T12453] R13: 00007f8dea226218 R14: 00007f8dea226180 R15: 00007ffc4b9deff8 [ 744.618877][T12453] [ 744.696887][T12454] FAULT_INJECTION: forcing a failure. [ 744.696887][T12454] name failslab, interval 1, probability 0, space 0, times 0 [ 744.696930][T12454] CPU: 1 UID: 0 PID: 12454 Comm: syz.0.1579 Tainted: G L syzkaller #0 PREEMPT(full) [ 744.696956][T12454] Tainted: [L]=SOFTLOCKUP [ 744.696963][T12454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 744.696974][T12454] Call Trace: [ 744.696981][T12454] [ 744.696989][T12454] dump_stack_lvl+0x100/0x190 [ 744.697022][T12454] should_fail_ex.cold+0x5/0xa [ 744.697049][T12454] should_failslab+0xc2/0x120 [ 744.697076][T12454] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 744.697099][T12454] ? preempt_schedule_thunk+0x16/0x40 [ 744.697123][T12454] ? __alloc_skb+0x140/0x710 [ 744.697153][T12454] __alloc_skb+0x140/0x710 [ 744.697176][T12454] ? __alloc_skb+0x5b7/0x710 [ 744.697200][T12454] ? __pfx___alloc_skb+0x10/0x10 [ 744.697232][T12454] pfkey_sendmsg+0x161/0x840 [ 744.697264][T12454] ____sys_sendmsg+0xa4d/0xbe0 [ 744.697283][T12454] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 744.697304][T12454] ? __pfx_____sys_sendmsg+0x10/0x10 [ 744.697330][T12454] ? __css_rstat_updated+0x1ce/0x590 [ 744.697360][T12454] ___sys_sendmsg+0x190/0x1e0 [ 744.697383][T12454] ? __pfx____sys_sendmsg+0x10/0x10 [ 744.697404][T12454] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 744.697437][T12454] ? find_held_lock+0x2b/0x80 [ 744.697481][T12454] __sys_sendmsg+0x160/0x210 [ 744.697508][T12454] ? __pfx___sys_sendmsg+0x10/0x10 [ 744.697541][T12454] ? trace_hardirqs_off+0x70/0x170 [ 744.697574][T12454] do_syscall_64+0x123/0x790 [ 744.697598][T12454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.697618][T12454] RIP: 0033:0x7fc471d9e199 [ 744.697634][T12454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.697650][T12454] RSP: 002b:00007fc46fff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 744.697669][T12454] RAX: ffffffffffffffda RBX: 00007fc472026180 RCX: 00007fc471d9e199 [ 744.697681][T12454] RDX: 0000000000000010 RSI: 00002000000020c0 RDI: 0000000000000005 [ 744.697692][T12454] RBP: 00007fc46fff6090 R08: 0000000000000000 R09: 0000000000000000 [ 744.697704][T12454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.697714][T12454] R13: 00007fc472026218 R14: 00007fc472026180 R15: 00007ffd2f4dadd8 [ 744.697740][T12454] [ 746.208411][T12466] ip_tables: iptables: counters copy to user failed while replacing table [ 746.402669][ T31] audit: type=1400 audit(2000000639.658:4587): avc: denied { read } for pid=12462 comm="syz.0.1582" name="set_event" dev="tracefs" ino=3954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 746.402715][ T31] audit: type=1400 audit(2000000639.768:4588): avc: denied { write } for pid=12462 comm="syz.0.1582" name="igmp" dev="proc" ino=4026533142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 747.284298][ T3109] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 747.440813][ T3109] usb 6-1: not running at top speed; connect to a high speed hub [ 747.440847][ T3109] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 747.443354][ T3109] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 747.443376][ T3109] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 747.443418][ T3109] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.444330][ T5719] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 747.485652][ T3109] uvcvideo 6-1:1.0: Found UVC 1.00 device (046d:0825) [ 747.485746][ T3109] uvcvideo 6-1:1.0: Failed to create links for entity 32769 [ 747.485761][ T3109] uvcvideo 6-1:1.0: Failed to register entities (-22). [ 747.485774][ T3109] uvcvideo 6-1:1.0: No streaming interface found for terminal 32770. [ 747.604311][ T5719] usb 3-1: Using ep0 maxpacket: 8 [ 747.608301][ T5719] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 747.611039][ T5719] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 747.611077][ T5719] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 747.611100][ T5719] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 747.611122][ T5719] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 747.611145][ T5719] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 747.611164][ T5719] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 747.703588][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.703605][ T5719] usb 3-1: Product: syz [ 747.703613][ T5719] usb 3-1: Manufacturer: syz [ 747.703622][ T5719] usb 3-1: SerialNumber: syz [ 747.714476][ T5719] usb 3-1: config 0 descriptor?? [ 747.727250][T12478] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 747.750755][ T5719] ati_remote 3-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 747.803356][ T5719] usb 6-1: USB disconnect, device number 68 [ 747.993724][T12481] can0: slcan on ttyS3. [ 748.573334][T12474] can0 (unregistered): slcan off ttyS3. [ 748.607615][T12478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.607822][T12478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.610009][ T5798] usb 3-1: USB disconnect, device number 60 [ 752.030156][T12510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1592'. [ 752.030174][T12510] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1592'. [ 752.030189][T12510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1592'. [ 752.066919][ T31] audit: type=1400 audit(2000000645.628:4589): avc: denied { write } for pid=12486 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.118046][T12510] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1592'. [ 752.357066][T12505] trusted_key: encrypted_key: hex blob is missing [ 752.742339][ T31] audit: type=1400 audit(2000000646.298:4590): avc: denied { write } for pid=12521 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 753.196941][T12523] trusted_key: encrypted_key: keylen parameter is missing [ 754.598636][ T31] audit: type=1400 audit(2000000648.158:4591): avc: denied { listen } for pid=12542 comm="syz.4.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 754.600416][T12543] FAULT_INJECTION: forcing a failure. [ 754.600416][T12543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 754.600444][T12543] CPU: 1 UID: 0 PID: 12543 Comm: syz.4.1598 Tainted: G L syzkaller #0 PREEMPT(full) [ 754.600472][T12543] Tainted: [L]=SOFTLOCKUP [ 754.600478][T12543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 754.600489][T12543] Call Trace: [ 754.600496][T12543] [ 754.600503][T12543] dump_stack_lvl+0x100/0x190 [ 754.600534][T12543] should_fail_ex.cold+0x5/0xa [ 754.600561][T12543] _copy_from_user+0x2e/0xd0 [ 754.600585][T12543] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 754.600616][T12543] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 754.600647][T12543] ? tcp_setsockopt+0xae/0x100 [ 754.600683][T12543] smc_setsockopt+0x299/0xa40 [ 754.600708][T12543] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 754.600732][T12543] ? __pfx_smc_setsockopt+0x10/0x10 [ 754.600757][T12543] ? __fget_files+0x215/0x3d0 [ 754.600784][T12543] ? selinux_socket_setsockopt+0x6a/0x80 [ 754.600807][T12543] ? __pfx_smc_setsockopt+0x10/0x10 [ 754.600835][T12543] do_sock_setsockopt+0xf3/0x1d0 [ 754.600858][T12543] __sys_setsockopt+0x195/0x220 [ 754.600888][T12543] __x64_sys_setsockopt+0xbd/0x160 [ 754.600912][T12543] ? do_syscall_64+0xae/0x790 [ 754.600933][T12543] ? lockdep_hardirqs_on+0x7d/0x110 [ 754.600953][T12543] do_syscall_64+0x123/0x790 [ 754.600976][T12543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.600996][T12543] RIP: 0033:0x7f8de9f9e199 [ 754.601011][T12543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.601028][T12543] RSP: 002b:00007f8deae77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 754.601047][T12543] RAX: ffffffffffffffda RBX: 00007f8dea225fa0 RCX: 00007f8de9f9e199 [ 754.601058][T12543] RDX: 0000000000000001 RSI: 0000000000000006 RDI: 0000000000000003 [ 754.601068][T12543] RBP: 00007f8deae77090 R08: 0000000000000004 R09: 0000000000000000 [ 754.601078][T12543] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 754.601088][T12543] R13: 00007f8dea226038 R14: 00007f8dea225fa0 R15: 00007ffc4b9deff8 [ 754.601113][T12543] [ 755.120855][ T5616] Bluetooth: hci1: unexpected event for opcode 0x200a [ 755.132717][ T3109] libceph: connect (1)[c::]:6789 error -101 [ 755.132937][T12558] overlayfs: failed to resolve './bus': -2 [ 755.137497][ T3109] libceph: mon0 (1)[c::]:6789 connect error [ 755.460603][ T5719] libceph: connect (1)[c::]:6789 error -101 [ 755.487470][ T5719] libceph: mon0 (1)[c::]:6789 connect error [ 756.061986][ T5719] libceph: connect (1)[c::]:6789 error -101 [ 756.062810][ T5719] libceph: mon0 (1)[c::]:6789 connect error [ 756.620118][T12555] ceph: No mds server is up or the cluster is laggy [ 756.720882][T12568] FAULT_INJECTION: forcing a failure. [ 756.720882][T12568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 756.720905][T12568] CPU: 0 UID: 0 PID: 12568 Comm: syz.5.1601 Tainted: G L syzkaller #0 PREEMPT(full) [ 756.720920][T12568] Tainted: [L]=SOFTLOCKUP [ 756.720925][T12568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 756.720931][T12568] Call Trace: [ 756.720935][T12568] [ 756.720940][T12568] dump_stack_lvl+0x100/0x190 [ 756.720960][T12568] should_fail_ex.cold+0x5/0xa [ 756.720976][T12568] _copy_from_iter+0x1f4/0x1690 [ 756.720993][T12568] ? __lock_acquire+0x5c0/0x1f40 [ 756.721006][T12568] ? __pfx__copy_from_iter+0x10/0x10 [ 756.721024][T12568] ? iov_iter_advance+0xac/0x6d0 [ 756.721037][T12568] ? lock_acquire+0x1d1/0x380 [ 756.721051][T12568] vhost_chr_write_iter+0x21a/0x1240 [ 756.721065][T12568] ? get_pid_task+0xfc/0x250 [ 756.721083][T12568] ? __pfx_vhost_chr_write_iter+0x10/0x10 [ 756.721097][T12568] ? avc_policy_seqno+0x9/0x20 [ 756.721110][T12568] ? bpf_lsm_file_permission+0x9/0x10 [ 756.721126][T12568] ? security_file_permission+0x76/0x210 [ 756.721142][T12568] ? rw_verify_area+0xce/0x6d0 [ 756.721161][T12568] vfs_write+0x6af/0x1050 [ 756.721174][T12568] ? __pfx_vhost_net_chr_write_iter+0x10/0x10 [ 756.721188][T12568] ? __pfx_vfs_write+0x10/0x10 [ 756.721200][T12568] ? find_held_lock+0x2b/0x80 [ 756.721225][T12568] ksys_write+0x12a/0x250 [ 756.721237][T12568] ? __pfx_ksys_write+0x10/0x10 [ 756.721254][T12568] do_syscall_64+0x123/0x790 [ 756.721269][T12568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.721281][T12568] RIP: 0033:0x7f3d3179e199 [ 756.721290][T12568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 756.721301][T12568] RSP: 002b:00007f3d32690028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 756.721312][T12568] RAX: ffffffffffffffda RBX: 00007f3d31a25fa0 RCX: 00007f3d3179e199 [ 756.721320][T12568] RDX: 0000000000000048 RSI: 00002000000003c0 RDI: 0000000000000003 [ 756.721326][T12568] RBP: 00007f3d32690090 R08: 0000000000000000 R09: 0000000000000000 [ 756.721333][T12568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.721340][T12568] R13: 00007f3d31a26038 R14: 00007f3d31a25fa0 R15: 00007ffc1a9a9da8 [ 756.721354][T12568] [ 756.890260][ T31] audit: type=1400 audit(2000000650.448:4592): avc: denied { write } for pid=12545 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 757.219426][T12583] netlink: 'syz.5.1606': attribute type 1 has an invalid length. [ 757.345806][T12585] can0: slcan on ttyS3. [ 757.648186][ T31] audit: type=1400 audit(2000000651.208:4593): avc: denied { write } for pid=12580 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 758.565593][T12579] can0 (unregistered): slcan off ttyS3. [ 759.039689][T12608] CacheFiles: Failed to register: -95 [ 759.794882][ T31] audit: type=1400 audit(2000000653.348:4594): avc: denied { create } for pid=12604 comm="syz.4.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 759.857021][ T31] audit: type=1400 audit(2000000653.418:4595): avc: denied { ioctl } for pid=12604 comm="syz.4.1611" path="socket:[39557]" dev="sockfs" ino=39557 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 759.968335][T12603] Process accounting resumed [ 760.931512][T12613] bond0: (slave bond_slave_0): Releasing backup interface [ 760.957625][T12613] bond0: (slave bond_slave_1): Releasing backup interface [ 760.978176][T12613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=12613 comm=syz.5.1613 [ 761.006426][T12613] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 761.010637][T12613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.060902][ T31] audit: type=1400 audit(2000000654.618:4596): avc: denied { create } for pid=12617 comm="syz.4.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 761.061277][ T31] audit: type=1400 audit(2000000654.618:4597): avc: denied { connect } for pid=12617 comm="syz.4.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 761.061659][ T31] audit: type=1400 audit(2000000654.618:4598): avc: denied { read } for pid=12617 comm="syz.4.1615" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 761.061853][ T31] audit: type=1400 audit(2000000654.618:4599): avc: denied { open } for pid=12617 comm="syz.4.1615" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 761.063089][ T31] audit: type=1400 audit(2000000654.618:4600): avc: denied { ioctl } for pid=12617 comm="syz.4.1615" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 761.067606][ T31] audit: type=1400 audit(2000000654.628:4601): avc: denied { map } for pid=12617 comm="syz.4.1615" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 761.067645][ T31] audit: type=1400 audit(2000000654.628:4602): avc: denied { execute } for pid=12617 comm="syz.4.1615" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 761.182581][ T5798] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 761.314404][ T5798] usb 1-1: device descriptor read/64, error -71 [ 761.557022][ T5798] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 761.794298][ T5798] usb 1-1: device descriptor read/64, error -71 [ 761.809236][T12636] usbip-vudc usbip-vudc.0: gadget not bound [ 761.924574][ T5798] usb usb1-port1: attempt power cycle [ 762.549218][ T5798] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 762.566670][ T5798] usb 1-1: device descriptor read/8, error -71 [ 762.724295][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 762.724331][ T31] audit: type=1400 audit(2000000656.208:4617): avc: denied { unmount } for pid=5622 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 762.855334][ T5798] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 762.877467][ T5798] usb 1-1: device descriptor read/8, error -71 [ 762.989416][ T5798] usb usb1-port1: unable to enumerate USB device [ 763.416638][T12647] trusted_key: encrypted_key: keylen parameter is missing [ 763.834131][T12642] can0: slcan on ttyS3. [ 763.955125][T12642] can0 (unregistered): slcan off ttyS3. [ 768.279873][ T31] audit: type=1400 audit(2000000661.838:4618): avc: denied { read } for pid=12676 comm="syz.4.1634" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 768.280211][ T31] audit: type=1400 audit(2000000661.838:4619): avc: denied { open } for pid=12676 comm="syz.4.1634" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 768.368838][ T31] audit: type=1400 audit(2000000661.928:4620): avc: denied { setopt } for pid=12676 comm="syz.4.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 768.371499][ T31] audit: type=1400 audit(2000000661.928:4621): avc: denied { connect } for pid=12676 comm="syz.4.1634" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 768.372232][ T31] audit: type=1400 audit(2000000661.928:4622): avc: denied { name_connect } for pid=12676 comm="syz.4.1634" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 768.455440][T12679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1634'. [ 768.478233][ T31] audit: type=1400 audit(2000000662.018:4623): avc: denied { create } for pid=12676 comm="syz.4.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 768.489422][ T31] audit: type=1400 audit(2000000662.048:4624): avc: denied { create } for pid=12676 comm="syz.4.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 768.516972][ T31] audit: type=1400 audit(2000000662.078:4625): avc: denied { connect } for pid=12676 comm="syz.4.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 768.582143][ T31] audit: type=1400 audit(2000000662.128:4626): avc: denied { create } for pid=12676 comm="syz.4.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 768.854397][T12681] FAULT_INJECTION: forcing a failure. [ 768.854397][T12681] name failslab, interval 1, probability 0, space 0, times 0 [ 768.854859][T12681] CPU: 0 UID: 0 PID: 12681 Comm: syz.2.1624 Tainted: G L syzkaller #0 PREEMPT(full) [ 768.854886][T12681] Tainted: [L]=SOFTLOCKUP [ 768.854893][T12681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 768.854903][T12681] Call Trace: [ 768.854910][T12681] [ 768.854918][T12681] dump_stack_lvl+0x100/0x190 [ 768.854950][T12681] should_fail_ex.cold+0x5/0xa [ 768.854981][T12681] should_failslab+0xc2/0x120 [ 768.855009][T12681] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 768.855032][T12681] ? preempt_schedule_thunk+0x16/0x40 [ 768.855056][T12681] ? __alloc_skb+0x140/0x710 [ 768.855087][T12681] __alloc_skb+0x140/0x710 [ 768.855111][T12681] ? __alloc_skb+0x5b7/0x710 [ 768.855135][T12681] ? __pfx___alloc_skb+0x10/0x10 [ 768.855168][T12681] netlink_alloc_large_skb+0x69/0x150 [ 768.855195][T12681] netlink_sendmsg+0x680/0xda0 [ 768.855224][T12681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 768.855252][T12681] ? selinux_socket_sendmsg+0x198/0x2f0 [ 768.855278][T12681] ____sys_sendmsg+0xa4d/0xbe0 [ 768.855298][T12681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 768.855324][T12681] ? __pfx_____sys_sendmsg+0x10/0x10 [ 768.855349][T12681] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 768.855375][T12681] ___sys_sendmsg+0x190/0x1e0 [ 768.855399][T12681] ? __pfx____sys_sendmsg+0x10/0x10 [ 768.855433][T12681] ? find_held_lock+0x2b/0x80 [ 768.855483][T12681] __sys_sendmsg+0x160/0x210 [ 768.855511][T12681] ? __pfx___sys_sendmsg+0x10/0x10 [ 768.855553][T12681] do_syscall_64+0x123/0x790 [ 768.855578][T12681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.855597][T12681] RIP: 0033:0x7f2bfed9e199 [ 768.855614][T12681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.855631][T12681] RSP: 002b:00007f2bffcea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 768.855650][T12681] RAX: ffffffffffffffda RBX: 00007f2bff025fa0 RCX: 00007f2bfed9e199 [ 768.855662][T12681] RDX: 0000000004000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 768.855674][T12681] RBP: 00007f2bffcea090 R08: 0000000000000000 R09: 0000000000000000 [ 768.855685][T12681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.855696][T12681] R13: 00007f2bff026038 R14: 00007f2bff025fa0 R15: 00007ffcb59210b8 [ 768.855722][T12681] [ 769.526230][ T31] audit: type=1326 audit(2000000663.088:4627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12684 comm="syz.4.1636" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8de9f9e199 code=0x0 [ 769.754249][ T5798] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 769.815696][T12698] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 49 (only 8 groups) [ 769.884422][ T5798] usb 3-1: device descriptor read/64, error -71 [ 771.013237][ T5798] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 771.985564][ T5798] usb 3-1: device descriptor read/64, error -71 [ 772.268273][ T5798] usb usb3-port1: attempt power cycle [ 773.106151][T12716] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1644'. [ 774.010317][T12723] bond0: (slave bond_slave_0): Releasing backup interface [ 774.274063][T12723] bond0: (slave bond_slave_1): Releasing backup interface [ 774.351934][T12731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=12731 comm=syz.2.1646 [ 774.815912][T12732] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 774.816751][T12723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.861132][T12723] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 774.889400][T12723] syz_tun: entered allmulticast mode [ 774.890399][T12721] syz_tun: left allmulticast mode [ 775.896024][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 775.896046][ T31] audit: type=1400 audit(2000000669.448:4634): avc: denied { read write } for pid=12749 comm="syz.4.1655" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 775.900900][ T31] audit: type=1400 audit(2000000669.458:4635): avc: denied { open } for pid=12749 comm="syz.4.1655" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 776.080179][ T5798] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 776.244797][ T5798] usb 3-1: device descriptor read/64, error -71 [ 776.308831][ T30] input: syz0 as /devices/virtual/misc/uhid/0005:057E:0004.0020/input/input64 [ 777.063394][ T30] hid-generic 0005:057E:0004.0020: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 777.075657][ T5798] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 777.224310][ T5798] usb 3-1: device descriptor read/64, error -71 [ 777.663354][ T5798] usb usb3-port1: attempt power cycle [ 777.974647][ T30] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 778.014809][ T5798] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 778.046607][ T5798] usb 3-1: device descriptor read/8, error -71 [ 778.210661][ T30] usb 1-1: Using ep0 maxpacket: 32 [ 778.220312][ T30] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 778.223122][ T30] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 778.223147][ T30] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 778.223162][ T30] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 778.223176][ T30] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 778.255787][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.255814][ T30] usb 1-1: Product: syz [ 778.255828][ T30] usb 1-1: Manufacturer: syz [ 778.255843][ T30] usb 1-1: SerialNumber: syz [ 778.320315][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 778.336287][ T5798] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 778.362432][ T30] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input65 [ 778.379920][ T5798] usb 3-1: device descriptor read/8, error -71 [ 778.484480][ T5798] usb usb3-port1: unable to enumerate USB device [ 778.782798][T12778] FAULT_INJECTION: forcing a failure. [ 778.782798][T12778] name failslab, interval 1, probability 0, space 0, times 0 [ 778.782829][T12778] CPU: 0 UID: 0 PID: 12778 Comm: syz.2.1663 Tainted: G L syzkaller #0 PREEMPT(full) [ 778.782852][T12778] Tainted: [L]=SOFTLOCKUP [ 778.782859][T12778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 778.782868][T12778] Call Trace: [ 778.782874][T12778] [ 778.782881][T12778] dump_stack_lvl+0x100/0x190 [ 778.782910][T12778] should_fail_ex.cold+0x5/0xa [ 778.782936][T12778] should_failslab+0xc2/0x120 [ 778.782961][T12778] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 778.782983][T12778] ? __alloc_skb+0x5b7/0x710 [ 778.783006][T12778] ? __alloc_skb+0x140/0x710 [ 778.783032][T12778] __alloc_skb+0x140/0x710 [ 778.783053][T12778] ? __alloc_skb+0x5b7/0x710 [ 778.783074][T12778] ? __pfx___alloc_skb+0x10/0x10 [ 778.783102][T12778] netlink_alloc_large_skb+0x69/0x150 [ 778.783127][T12778] netlink_sendmsg+0x680/0xda0 [ 778.783154][T12778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 778.783178][T12778] ? selinux_socket_sendmsg+0x198/0x2f0 [ 778.783204][T12778] ____sys_sendmsg+0xa4d/0xbe0 [ 778.783221][T12778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 778.783245][T12778] ? __pfx_____sys_sendmsg+0x10/0x10 [ 778.783269][T12778] ? lock_acquire+0x1d1/0x380 [ 778.783288][T12778] ? get_pid_task+0x2a/0x250 [ 778.783313][T12778] ___sys_sendmsg+0x190/0x1e0 [ 778.783334][T12778] ? __pfx____sys_sendmsg+0x10/0x10 [ 778.783352][T12778] ? get_pid_task+0x106/0x250 [ 778.783384][T12778] ? find_held_lock+0x2b/0x80 [ 778.783424][T12778] __sys_sendmsg+0x160/0x210 [ 778.783449][T12778] ? __pfx___sys_sendmsg+0x10/0x10 [ 778.783486][T12778] do_syscall_64+0x123/0x790 [ 778.783509][T12778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.783526][T12778] RIP: 0033:0x7f2bfed9e199 [ 778.783551][T12778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.783569][T12778] RSP: 002b:00007f2bffcea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 778.783587][T12778] RAX: ffffffffffffffda RBX: 00007f2bff025fa0 RCX: 00007f2bfed9e199 [ 778.783598][T12778] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 778.783609][T12778] RBP: 00007f2bffcea090 R08: 0000000000000000 R09: 0000000000000000 [ 778.783620][T12778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.783630][T12778] R13: 00007f2bff026038 R14: 00007f2bff025fa0 R15: 00007ffcb59210b8 [ 778.783653][T12778] [ 779.496188][T12784] trusted_key: encrypted_key: keylen parameter is missing [ 780.170274][ T30] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 780.170292][ T30] (id 0x00) [ 780.324314][ T30] rc_core: IR keymap rc-imon-pad not found [ 780.324332][ T30] Registered IR keymap rc-empty [ 780.324405][ T30] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 780.324422][ T30] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 780.328743][ T30] imon:send_packet: packet tx failed (-71) [ 780.354322][ T30] imon 1-1:155.0: remote input dev register failed [ 780.354448][ T30] imon 1-1:155.0: imon_init_intf0: rc device setup failed [ 780.617066][ T30] imon 1-1:155.0: unable to initialize intf0, err 0 [ 780.617090][ T30] imon:imon_probe: failed to initialize context! [ 780.617101][ T30] imon 1-1:155.0: unable to register, err -19 [ 780.692213][T12798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1668'. [ 780.984850][ T30] usb 1-1: USB disconnect, device number 81 [ 782.899740][T12808] bond0: (slave bond_slave_0): Releasing backup interface [ 782.925928][T12810] can0: slcan on ttyS3. [ 782.951356][T12808] bond0: (slave bond_slave_1): Releasing backup interface [ 782.970140][T12808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=12808 comm=syz.3.1671 [ 783.116756][T12811] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 783.130699][T12808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.576043][T12808] FAULT_INJECTION: forcing a failure. [ 783.576043][T12808] name failslab, interval 1, probability 0, space 0, times 0 [ 783.576082][T12808] CPU: 1 UID: 0 PID: 12808 Comm: syz.3.1671 Tainted: G L syzkaller #0 PREEMPT(full) [ 783.576109][T12808] Tainted: [L]=SOFTLOCKUP [ 783.576117][T12808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 783.576128][T12808] Call Trace: [ 783.576135][T12808] [ 783.576144][T12808] dump_stack_lvl+0x100/0x190 [ 783.576177][T12808] should_fail_ex.cold+0x5/0xa [ 783.576204][T12808] should_failslab+0xc2/0x120 [ 783.576233][T12808] __kmalloc_noprof+0xfc/0x840 [ 783.576255][T12808] ? trace_kmalloc+0xeb/0x110 [ 783.576281][T12808] ? lsm_blob_alloc+0x68/0x90 [ 783.576312][T12808] lsm_blob_alloc+0x68/0x90 [ 783.576330][T12808] security_sk_alloc+0x2d/0x290 [ 783.576356][T12808] sk_prot_alloc+0x12a/0x2a0 [ 783.576381][T12808] sk_alloc+0x36/0xe80 [ 783.576411][T12808] __netlink_create+0x5e/0x2c0 [ 783.576433][T12808] ? __wake_up+0x3f/0x60 [ 783.576452][T12808] netlink_create+0x29b/0x610 [ 783.576474][T12808] ? __pfx_rtnetlink_bind+0x10/0x10 [ 783.576504][T12808] __sock_create+0x339/0x860 [ 783.576531][T12808] __sys_socket+0x14d/0x260 [ 783.576555][T12808] ? __pfx___sys_socket+0x10/0x10 [ 783.576585][T12808] __x64_sys_socket+0x72/0xb0 [ 783.576607][T12808] ? lockdep_hardirqs_on+0x7d/0x110 [ 783.576630][T12808] do_syscall_64+0x123/0x790 [ 783.576654][T12808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.576675][T12808] RIP: 0033:0x7f7385d9e199 [ 783.576692][T12808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.576711][T12808] RSP: 002b:00007f7386cc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 783.576730][T12808] RAX: ffffffffffffffda RBX: 00007f7386025fa0 RCX: 00007f7385d9e199 [ 783.576743][T12808] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 783.576754][T12808] RBP: 00007f7385e35888 R08: 0000000000000000 R09: 0000000000000000 [ 783.576765][T12808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 783.576776][T12808] R13: 00007f7386026038 R14: 00007f7386025fa0 R15: 00007ffd509f4b48 [ 783.576801][T12808] [ 783.820215][ T30] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 783.885057][T12812] can0 (unregistered): slcan off ttyS3. [ 783.896660][T12821] Device name not specified. [ 783.896660][T12821] [ 784.007803][ T30] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 784.007920][ T30] usb 6-1: no configurations [ 784.007957][ T30] usb 6-1: can't read configurations, error -22 [ 784.091033][T12825] CacheFiles: Failed to register: -95 [ 784.234524][ T30] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 784.254641][ T5798] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 784.357663][T12726] Process accounting resumed [ 784.401832][ T30] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 784.402313][ T30] usb 6-1: no configurations [ 784.402450][ T30] usb 6-1: can't read configurations, error -22 [ 784.442014][ T30] usb usb6-port1: attempt power cycle [ 784.450344][ T5798] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 784.492277][ T5798] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 784.567372][ T5798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.567469][ T5798] usb 1-1: Product: syz [ 784.567705][ T5798] usb 1-1: Manufacturer: syz [ 784.568688][ T5798] usb 1-1: SerialNumber: syz [ 784.945779][ T30] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 784.987913][ T30] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 784.988060][ T30] usb 6-1: no configurations [ 784.988094][ T30] usb 6-1: can't read configurations, error -22 [ 785.103575][ T5798] snd-usb-6fire 1-1:1.0: unable to receive device firmware state. [ 785.103663][ T5798] snd-usb-6fire 1-1:1.0: probe with driver snd-usb-6fire failed with error -121 [ 785.124877][ T30] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 785.171150][ T30] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 785.171386][ T30] usb 6-1: no configurations [ 785.171420][ T30] usb 6-1: can't read configurations, error -22 [ 785.191350][ T30] usb usb6-port1: unable to enumerate USB device [ 785.462173][T12821] netlink: 'syz.0.1675': attribute type 2 has an invalid length. [ 785.906971][T12837] trusted_key: encrypted_key: keylen parameter is missing [ 787.556857][T12851] trusted_key: encrypted_key: keylen parameter is missing [ 787.986984][ T5719] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 788.331574][ T5719] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 788.379280][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.379341][ T5719] usb 3-1: Product: syz [ 788.379406][ T5719] usb 3-1: Manufacturer: syz [ 788.379470][ T5719] usb 3-1: SerialNumber: syz [ 788.501304][ T5719] usb 3-1: config 0 descriptor?? [ 788.539639][ T5719] hub 3-1:0.0: bad descriptor, ignoring hub [ 788.539701][ T5719] hub 3-1:0.0: probe with driver hub failed with error -5 [ 788.694635][ T31] audit: type=1400 audit(2000000682.258:4636): avc: denied { write } for pid=12824 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 788.748863][ T5719] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 788.763392][ T31] audit: type=1400 audit(2000000682.318:4637): avc: denied { write } for pid=12855 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 788.787564][ T5719] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 788.799871][ T5719] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 788.799919][ T5719] usb 3-1: media controller created [ 788.889438][ T5719] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 788.989075][ T3109] usb 1-1: USB disconnect, device number 82 [ 789.287290][T12869] MTDSB: Device #1 doesn't appear to exist [ 789.287290][T12869] [ 789.288580][ T31] audit: type=1400 audit(2000000682.838:4638): avc: denied { connect } for pid=12862 comm="syz.0.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 789.288615][ T31] audit: type=1400 audit(2000000682.838:4639): avc: denied { write } for pid=12862 comm="syz.0.1683" laddr=fe80::b850:5eff:fec3:a408 lport=57023 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 789.596708][T12870] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1681'. [ 789.597832][T12870] unsupported nlmsg_type 40 [ 790.121996][ T31] audit: type=1400 audit(2000000683.108:4640): avc: denied { create } for pid=12863 comm="syz.5.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 790.122044][ T31] audit: type=1400 audit(2000000683.148:4641): avc: denied { write } for pid=12863 comm="syz.5.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 790.122075][ T31] audit: type=1400 audit(2000000683.158:4642): avc: denied { nlmsg_write } for pid=12863 comm="syz.5.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 790.375014][ T5719] DVB: Unable to find symbol dib7000p_attach() [ 790.375031][ T5719] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 790.525490][ T10] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 790.554404][ T5719] rc_core: IR keymap rc-dib0700-rc5 not found [ 790.554420][ T5719] Registered IR keymap rc-empty [ 790.554624][ T5719] dvb-usb: could not initialize remote control. [ 790.554632][ T5719] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 790.561145][ T5719] usb 3-1: USB disconnect, device number 68 [ 790.622894][ T31] audit: type=1400 audit(2000000684.178:4643): avc: denied { write } for pid=12858 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 790.660860][ T5719] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 790.674299][ T30] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 790.684654][ T10] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 790.685812][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 790.685855][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 790.685879][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 790.685913][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.874929][ T30] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 791.177899][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.177928][ T30] usb 4-1: Product: syz [ 791.177943][ T30] usb 4-1: Manufacturer: syz [ 791.177959][ T30] usb 4-1: SerialNumber: syz [ 791.442070][ T31] audit: type=1400 audit(2000000684.998:4644): avc: denied { create } for pid=12873 comm="syz.0.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 791.488743][ T31] audit: type=1400 audit(2000000685.048:4645): avc: denied { setopt } for pid=12873 comm="syz.0.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 791.743154][T12889] cxacru 1-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 791.743346][T12889] cxacru 1-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 791.868839][ T10] usb 1-1: USB disconnect, device number 83 [ 791.872316][ T30] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 792.046052][T12894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1688'. [ 792.911183][ T5719] usb 4-1: USB disconnect, device number 61 [ 793.366784][T12900] trusted_key: encrypted_ke ** replaying previous printk message ** [ 793.366784][T12900] trusted_key: encrypted_key: keylen parameter is missing [ 793.750664][ T30] usb 4-1: Service connection timeout for: 256 [ 793.750682][ T30] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 793.752047][ C1] ================================================================== [ 793.752060][ C1] BUG: KFENCE: use-after-free read in tasklet_action_common+0x113/0x3d0 [ 793.752060][ C1] [ 793.752090][ C1] Use-after-free read at 0xffff88823bfd2158 (in kfence-#232): [ 793.752102][ C1] tasklet_action_common+0x113/0x3d0 [ 793.752121][ C1] handle_softirqs+0x1e6/0x9d0 [ 793.752137][ C1] __irq_exit_rcu+0x16a/0x210 [ 793.752153][ C1] irq_exit_rcu+0x9/0x30 [ 793.752168][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 793.752186][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 793.752203][ C1] _raw_spin_unlock_irqrestore+0x31/0x80 [ 793.752219][ C1] cfg80211_dev_free+0x6e/0x3d0 [ 793.752245][ C1] device_release+0xd2/0x270 [ 793.752262][ C1] kobject_put+0x1f7/0x640 [ 793.752281][ C1] put_device+0x1f/0x30 [ 793.752296][ C1] ath9k_htc_probe_device+0x1a6/0x1f80 [ 793.752314][ C1] ath9k_htc_hw_init+0x33/0x60 [ 793.752331][ C1] ath9k_hif_usb_firmware_cb+0x25c/0x510 [ 793.752350][ C1] request_firmware_work_func+0x13f/0x440 [ 793.752370][ C1] process_one_work+0xac7/0x1b10 [ 793.752393][ C1] worker_thread+0x5ef/0xe50 [ 793.752406][ C1] kthread+0x373/0x450 [ 793.752427][ C1] ret_from_fork+0x730/0xd60 [ 793.752444][ C1] ret_from_fork_asm+0x1a/0x30 [ 793.752461][ C1] [ 793.752466][ C1] kfence-#232: 0xffff88823bfd2000-0xffff88823bfd25f7, size=1528, cache=kmalloc-2k [ 793.752466][ C1] [ 793.752481][ C1] allocated by task 30 on cpu 1 at 792.539042s (1.213438s ago): [ 793.752509][ C1] ath9k_init_wmi+0x43/0x300 [ 793.752526][ C1] ath9k_htc_probe_device+0x203/0x1f80 [ 793.752542][ C1] ath9k_htc_hw_init+0x33/0x60 [ 793.752558][ C1] ath9k_hif_usb_firmware_cb+0x25c/0x510 [ 793.752576][ C1] request_firmware_work_func+0x13f/0x440 [ 793.752595][ C1] process_one_work+0xac7/0x1b10 [ 793.752616][ C1] worker_thread+0x5ef/0xe50 [ 793.752629][ C1] kthread+0x373/0x450 [ 793.752650][ C1] ret_from_fork+0x730/0xd60 [ 793.752665][ C1] ret_from_fork_asm+0x1a/0x30 [ 793.752680][ C1] [ 793.752684][ C1] freed by task 30 on cpu 1 at 793.751914s (0.000769s ago): [ 793.752714][ C1] ath9k_htc_probe_device+0x293/0x1f80 [ 793.752731][ C1] ath9k_htc_hw_init+0x33/0x60 [ 793.752746][ C1] ath9k_hif_usb_firmware_cb+0x25c/0x510 [ 793.752765][ C1] request_firmware_work_func+0x13f/0x440 [ 793.752784][ C1] process_one_work+0xac7/0x1b10 [ 793.752806][ C1] worker_thread+0x5ef/0xe50 [ 793.752819][ C1] kthread+0x373/0x450 [ 793.752838][ C1] ret_from_fork+0x730/0xd60 [ 793.752854][ C1] ret_from_fork_asm+0x1a/0x30 [ 793.752869][ C1] [ 793.752880][ C1] CPU: 1 UID: 0 PID: 30 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 793.752903][ C1] Tainted: [L]=SOFTLOCKUP [ 793.752910][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 793.752921][ C1] Workqueue: events request_firmware_work_func [ 793.752942][ C1] RIP: 0010:tasklet_action_common+0x113/0x3d0 [ 793.752962][ C1] Code: 4a 4a 00 fb 4d 85 e4 0f 84 a9 01 00 00 4d 89 e7 4c 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 06 02 00 00 49 8d 5f 08 be 08 00 00 00 <4d> 8b 27 48 89 df e8 82 76 b5 00 f0 49 0f ba 6f 08 01 72 57 4d 8d [ 793.752977][ C1] RSP: 0018:ffffc90000a18ec8 EFLAGS: 00010246 [ 793.752990][ C1] RAX: 1ffff110477fa42b RBX: ffff88823bfd2160 RCX: 0000000000000004 [ 793.753002][ C1] RDX: 0000000000000101 RSI: 0000000000000008 RDI: ffffffff8c623a80 [ 793.753013][ C1] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 793.753023][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000040 [ 793.753033][ C1] R13: ffff8880b8524200 R14: 1ffff110170a4841 R15: ffff88823bfd2158 [ 793.753045][ C1] FS: 0000000000000000(0000) GS:ffff888123c4e000(0000) knlGS:0000000000000000 [ 793.753062][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 793.753074][ C1] CR2: ffff88823bfd2158 CR3: 000000000eb96000 CR4: 00000000003526f0 [ 793.753085][ C1] Call Trace: [ 793.753090][ C1] [ 793.753099][ C1] handle_softirqs+0x1e6/0x9d0 [ 793.753119][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 793.753136][ C1] ? _raw_spin_unlock+0x28/0x50 [ 793.753151][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 793.753169][ C1] __irq_exit_rcu+0x16a/0x210 [ 793.753186][ C1] irq_exit_rcu+0x9/0x30 [ 793.753203][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 793.753220][ C1] [ 793.753225][ C1] [ 793.753236][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 793.753254][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 793.753271][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 76 9e 11 f6 48 89 df e8 fe f4 11 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 15 d8 00 f6 65 48 83 3d b4 43 b7 08 00 74 16 5b [ 793.753285][ C1] RSP: 0018:ffffc90000a578f0 EFLAGS: 00000246 [ 793.753298][ C1] RAX: 0000000000000006 RBX: ffff888049720748 RCX: 0000000000000040 [ 793.753309][ C1] RDX: 0000000000000001 RSI: ffffffff8e38f6ca RDI: ffffffff8c623a80 [ 793.753320][ C1] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000000 [ 793.753330][ C1] R10: 0000000000000001 R11: 000000000000763b R12: ffff888049720748 [ 793.753341][ C1] R13: ffff888049720000 R14: ffff888077c71440 R15: 0000000000000000 [ 793.753358][ C1] cfg80211_dev_free+0x6e/0x3d0 [ 793.753394][ C1] ? kfree+0x22b/0x6d0 [ 793.753409][ C1] ? __pfx_wiphy_dev_release+0x10/0x10 [ 793.753432][ C1] device_release+0xd2/0x270 [ 793.753449][ C1] kobject_put+0x1f7/0x640 [ 793.753471][ C1] put_device+0x1f/0x30 [ 793.753487][ C1] ath9k_htc_probe_device+0x1a6/0x1f80 [ 793.753508][ C1] ? __pfx_ath9k_htc_probe_device+0x10/0x10 [ 793.753527][ C1] ? usb_submit_urb+0x82e/0x19b0 [ 793.753550][ C1] ? usb_free_urb.part.0+0x4c/0x110 [ 793.753571][ C1] ? usb_free_urb+0x24/0x30 [ 793.753591][ C1] ? ath9k_hif_usb_alloc_urbs+0xb5f/0xfa0 [ 793.753613][ C1] ath9k_htc_hw_init+0x33/0x60 [ 793.753631][ C1] ath9k_hif_usb_firmware_cb+0x25c/0x510 [ 793.753651][ C1] ? reacquire_held_locks+0xdd/0x1f0 [ 793.753671][ C1] ? __pfx_ath9k_hif_usb_firmware_cb+0x10/0x10 [ 793.753692][ C1] request_firmware_work_func+0x13f/0x440 [ 793.753712][ C1] ? process_one_work+0xa2c/0x1b10 [ 793.753737][ C1] ? __pfx_request_firmware_work_func+0x10/0x10 [ 793.753758][ C1] ? process_one_work+0x906/0x1b10 [ 793.753783][ C1] ? process_one_work+0x906/0x1b10 [ 793.753809][ C1] process_one_work+0xac7/0x1b10 [ 793.753836][ C1] ? __pfx_process_one_work+0x10/0x10 [ 793.753862][ C1] ? lock_acquire+0x1d1/0x380 [ 793.753882][ C1] ? __pfx_request_firmware_work_func+0x10/0x10 [ 793.753905][ C1] worker_thread+0x5ef/0xe50 [ 793.753924][ C1] ? kthread+0x13a/0x450 [ 793.753945][ C1] ? __pfx_worker_thread+0x10/0x10 [ 793.753959][ C1] kthread+0x373/0x450 [ 793.753981][ C1] ? __pfx_kthread+0x10/0x10 [ 793.754004][ C1] ret_from_fork+0x730/0xd60 [ 793.754023][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 793.754041][ C1] ? __switch_to+0x800/0x10f0 [ 793.754063][ C1] ? __pfx_kthread+0x10/0x10 [ 793.754086][ C1] ret_from_fork_asm+0x1a/0x30 [ 793.754108][ C1] [ 793.754114][ C1] ================================================================== [ 793.754123][ C1] Kernel panic - not syncing: KFENCE: panic_on_warn set ... [ 794.473706][ C1] CPU: 1 UID: 0 PID: 30 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 794.484465][ C1] Tainted: [L]=SOFTLOCKUP [ 794.488791][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 794.498851][ C1] Workqueue: events request_firmware_work_func [ 794.505024][ C1] Call Trace: [ 794.508309][ C1] [ 794.511139][ C1] dump_stack_lvl+0x100/0x190 [ 794.515811][ C1] vpanic+0x553/0x970 [ 794.519790][ C1] ? __pfx_vpanic+0x10/0x10 [ 794.524276][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 794.529303][ C1] panic+0xd1/0xe0 [ 794.533013][ C1] ? __pfx_panic+0x10/0x10 [ 794.537419][ C1] check_panic_on_warn.cold+0x19/0x34 [ 794.542773][ C1] kfence_report_error.cold+0x308/0xac5 [ 794.548316][ C1] ? __pfx_kfence_report_error+0x10/0x10 [ 794.553940][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 794.558878][ C1] ? tasklet_action_common+0x113/0x3d0 [ 794.564322][ C1] ? handle_softirqs+0x1e6/0x9d0 [ 794.569238][ C1] ? __irq_exit_rcu+0x16a/0x210 [ 794.574068][ C1] ? irq_exit_rcu+0x9/0x30 [ 794.578465][ C1] ? sysvec_apic_timer_interrupt+0xa3/0xc0 [ 794.584254][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 794.590389][ C1] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 794.596176][ C1] ? cfg80211_dev_free+0x6e/0x3d0 [ 794.601188][ C1] ? device_release+0xd2/0x270 [ 794.605955][ C1] ? kobject_put+0x1f7/0x640 [ 794.610531][ C1] ? put_device+0x1f/0x30 [ 794.614843][ C1] ? ath9k_htc_probe_device+0x1a6/0x1f80 [ 794.620462][ C1] ? ath9k_htc_hw_init+0x33/0x60 [ 794.625380][ C1] ? ath9k_hif_usb_firmware_cb+0x25c/0x510 [ 794.631171][ C1] ? request_firmware_work_func+0x13f/0x440 [ 794.637051][ C1] ? process_one_work+0xac7/0x1b10 [ 794.642150][ C1] ? worker_thread+0x5ef/0xe50 [ 794.646893][ C1] ? kthread+0x373/0x450 [ 794.651122][ C1] ? ret_from_fork+0x730/0xd60 [ 794.655876][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 794.660824][ C1] kfence_handle_page_fault+0x238/0x5a0 [ 794.666364][ C1] page_fault_oops+0x168/0x820 [ 794.671119][ C1] ? __pfx_page_fault_oops+0x10/0x10 [ 794.676392][ C1] ? find_held_lock+0x2b/0x80 [ 794.681057][ C1] ? search_bpf_extables+0x145/0x290 [ 794.686332][ C1] ? search_bpf_extables+0x145/0x290 [ 794.691607][ C1] ? is_prefetch.isra.0+0x9f/0x530 [ 794.696704][ C1] ? tasklet_action_common+0x113/0x3d0 [ 794.702146][ C1] ? __pfx_is_prefetch.isra.0+0x10/0x10 [ 794.707679][ C1] ? fixup_exception+0x119/0xff0 [ 794.712609][ C1] kernelmode_fixup_or_oops.isra.0+0xbd/0xf0 [ 794.718576][ C1] __bad_area_nosemaphore+0x35b/0x3f0 [ 794.723948][ C1] ? spurious_kernel_fault+0x3fc/0x4b0 [ 794.729394][ C1] do_kern_addr_fault+0x5b/0x80 [ 794.734240][ C1] exc_page_fault+0xc3/0xd0 [ 794.738730][ C1] asm_exc_page_fault+0x26/0x30 [ 794.743564][ C1] RIP: 0010:tasklet_action_common+0x113/0x3d0 [ 794.749620][ C1] Code: 4a 4a 00 fb 4d 85 e4 0f 84 a9 01 00 00 4d 89 e7 4c 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 06 02 00 00 49 8d 5f 08 be 08 00 00 00 <4d> 8b 27 48 89 df e8 82 76 b5 00 f0 49 0f ba 6f 08 01 72 57 4d 8d [ 794.769213][ C1] RSP: 0018:ffffc90000a18ec8 EFLAGS: 00010246 [ 794.775270][ C1] RAX: 1ffff110477fa42b RBX: ffff88823bfd2160 RCX: 0000000000000004 [ 794.783225][ C1] RDX: 0000000000000101 RSI: 0000000000000008 RDI: ffffffff8c623a80 [ 794.791176][ C1] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 794.799129][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000040 [ 794.807080][ C1] R13: ffff8880b8524200 R14: 1ffff110170a4841 R15: ffff88823bfd2158 [ 794.815052][ C1] ? tasklet_action_common+0x75/0x3d0 [ 794.820417][ C1] handle_softirqs+0x1e6/0x9d0 [ 794.825167][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 794.830434][ C1] ? _raw_spin_unlock+0x28/0x50 [ 794.835264][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 794.840881][ C1] __irq_exit_rcu+0x16a/0x210 [ 794.845541][ C1] irq_exit_rcu+0x9/0x30 [ 794.849764][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 794.855380][ C1] [ 794.858293][ C1] [ 794.861203][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 794.867172][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 794.873570][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 76 9e 11 f6 48 89 df e8 fe f4 11 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 15 d8 00 f6 65 48 83 3d b4 43 b7 08 00 74 16 5b [ 794.893159][ C1] RSP: 0018:ffffc90000a578f0 EFLAGS: 00000246 [ 794.899222][ C1] RAX: 0000000000000006 RBX: ffff888049720748 RCX: 0000000000000040 [ 794.907172][ C1] RDX: 0000000000000001 RSI: ffffffff8e38f6ca RDI: ffffffff8c623a80 [ 794.915124][ C1] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000000 [ 794.923075][ C1] R10: 0000000000000001 R11: 000000000000763b R12: ffff888049720748 [ 794.931033][ C1] R13: ffff888049720000 R14: ffff888077c71440 R15: 0000000000000000 [ 794.939018][ C1] cfg80211_dev_free+0x6e/0x3d0 [ 794.943871][ C1] ? kfree+0x22b/0x6d0 [ 794.947926][ C1] ? __pfx_wiphy_dev_release+0x10/0x10 [ 794.953381][ C1] device_release+0xd2/0x270 [ 794.957957][ C1] kobject_put+0x1f7/0x640 [ 794.962363][ C1] put_device+0x1f/0x30 [ 794.966502][ C1] ath9k_htc_probe_device+0x1a6/0x1f80 [ 794.971952][ C1] ? __pfx_ath9k_htc_probe_device+0x10/0x10 [ 794.977831][ C1] ? usb_submit_urb+0x82e/0x19b0 [ 794.982762][ C1] ? usb_free_urb.part.0+0x4c/0x110 [ 794.987961][ C1] ? usb_free_urb+0x24/0x30 [ 794.992449][ C1] ? ath9k_hif_usb_alloc_urbs+0xb5f/0xfa0 [ 794.998159][ C1] ath9k_htc_hw_init+0x33/0x60 [ 795.002909][ C1] ath9k_hif_usb_firmware_cb+0x25c/0x510 [ 795.008525][ C1] ? reacquire_held_locks+0xdd/0x1f0 [ 795.013799][ C1] ? __pfx_ath9k_hif_usb_firmware_cb+0x10/0x10 [ 795.019940][ C1] request_firmware_work_func+0x13f/0x440 [ 795.025651][ C1] ? process_one_work+0xa2c/0x1b10 [ 795.030753][ C1] ? __pfx_request_firmware_work_func+0x10/0x10 [ 795.036980][ C1] ? process_one_work+0x906/0x1b10 [ 795.042079][ C1] ? process_one_work+0x906/0x1b10 [ 795.047184][ C1] process_one_work+0xac7/0x1b10 [ 795.052123][ C1] ? __pfx_process_one_work+0x10/0x10 [ 795.057489][ C1] ? lock_acquire+0x1d1/0x380 [ 795.062168][ C1] ? __pfx_request_firmware_work_func+0x10/0x10 [ 795.068412][ C1] worker_thread+0x5ef/0xe50 [ 795.072992][ C1] ? kthread+0x13a/0x450 [ 795.077222][ C1] ? __pfx_worker_thread+0x10/0x10 [ 795.082311][ C1] kthread+0x373/0x450 [ 795.086377][ C1] ? __pfx_kthread+0x10/0x10 [ 795.090958][ C1] ret_from_fork+0x730/0xd60 [ 795.095533][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 795.100630][ C1] ? __switch_to+0x800/0x10f0 [ 795.105299][ C1] ? __pfx_kthread+0x10/0x10 [ 795.109888][ C1] ret_from_fork_asm+0x1a/0x30 [ 795.114651][ C1] [ 795.117860][ C1] Kernel Offset: disabled [ 795.122168][ C1] Rebooting in 86400 seconds..