last executing test programs: 4m26.90952974s ago: executing program 3 (id=40): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) getpid() sendmmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x2090) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4008011}, 0x4) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x100d, 0xde8bef52389a5434) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, 0x0, &(0x7f0000000140)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={r3, &(0x7f0000000400), 0x0}, 0x20) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000280)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x2000000000, 0x4000000000000004, 0x0, 0x0, 0x12, 0x14, "996a78edc5cac93c3e473f65d9eb5297f0ca82d56dcddb164e29606b4f2cf0b60d9b92b3cf1597f6b7ff9c4fbf4326f66eccdbf05411d4a42e798491c54e3e6f", "3c54d63cef61aa187f941933694c882f4835e79819ddc15edb9ca42b19129e446327fbe58f617cc4617f5347a395cacecf34365db4d55dace1d4e9d56e6fa42e", "fd0000e7744b74eaa2317fdd9db2fea7e7d63f9a007866063c8c162b99d845fb", [0x60, 0x4]}}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x0) socket$key(0xf, 0x3, 0x2) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@ipv4_newaddr={0x18, 0x14, 0x100, 0x70bd2d, 0x25dfdbfb, {0x2, 0x0, 0xa6, 0xff}}, 0x18}}, 0x40000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xf) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x140, 0x10, 0x413, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x3b, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in6=@mcast2, {0x0, 0xfffffffffffffffb, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0, 0x20000000008, 0xfffffffffffffffd}, {0x4, 0x1, 0xcc}, {0x20f6}, 0x70bd2c, 0x0, 0xa, 0x1, 0x9}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x80, "6373d3"}}]}, 0x140}, 0x1, 0x0, 0x0, 0x200480c5}, 0x0) 4m26.265443093s ago: executing program 3 (id=44): syz_usb_connect(0x3, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0xca, 0x68, 0xa0, 0x10, 0x4cc, 0x8116, 0xe753, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x1, 0x10, 0x4, "", [{{0x9, 0x4, 0x0, 0x6, 0x0, 0xff, 0x5, 0x2, 0x3}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x20, 0x0}) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x1, 0x3, 0x0, 0x8000}, 0x30, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f0000000480)) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000000)={0x1400, r0}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000000140)={0x7ff, 0x20, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0]}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080006"], 0x40}, 0x1, 0x0, 0x0, 0x20044885}, 0x0) getrlimit(0xf, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = socket(0x11, 0xa, 0x0) getsockname$unix(r4, 0x0, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f000000a740)={0x0, 0x0}) recvmmsg(r1, &(0x7f000000a580)=[{{&(0x7f00000001c0)=@nfc, 0x80, &(0x7f0000002800)=[{&(0x7f0000000240)=""/68, 0x44}, {&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f00000004c0)=""/70, 0x46}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/190, 0xbe}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/191, 0xbf}], 0x7, &(0x7f0000002880)=""/224, 0xe0}, 0x80000000}, {{&(0x7f0000002980)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002a00)=""/26, 0x1a}, {&(0x7f0000002a40)=""/159, 0x9f}, {&(0x7f0000002b00)=""/48, 0x30}, {&(0x7f0000002b40)=""/91, 0x5b}, {&(0x7f0000002bc0)=""/127, 0x7f}, {&(0x7f0000002c40)=""/149, 0x95}, {&(0x7f0000002d00)=""/189, 0xbd}, {&(0x7f0000002dc0)=""/171, 0xab}], 0x8, &(0x7f0000002f00)=""/19, 0x13}, 0x3bf}, {{&(0x7f0000002f40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}}}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002fc0)=""/42, 0x2a}, {&(0x7f0000003000)=""/209, 0xd1}, {&(0x7f0000003100)=""/71, 0x47}, {&(0x7f0000003180)=""/233, 0xe9}, {&(0x7f0000003280)=""/6, 0x6}, {&(0x7f00000032c0)=""/75, 0x4b}, {&(0x7f0000003340)=""/100, 0x64}], 0x7, &(0x7f0000003440)=""/23, 0x17}, 0x1}, {{&(0x7f0000003480)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000003580)=[{&(0x7f0000003500)=""/91, 0x5b}], 0x1, &(0x7f00000035c0)=""/4096, 0x1000}, 0x7}, {{&(0x7f00000045c0)=@xdp, 0x80, &(0x7f0000004940)=[{&(0x7f0000004640)=""/61, 0x3d}, {&(0x7f0000004680)=""/139, 0x8b}, {&(0x7f0000004740)=""/73, 0x49}, {&(0x7f00000047c0)=""/189, 0xbd}, {&(0x7f0000004880)=""/148, 0x94}], 0x5, &(0x7f00000049c0)=""/90, 0x5a}, 0x6}, {{&(0x7f0000004a40)=@alg, 0x80, &(0x7f0000005f80)=[{&(0x7f0000004ac0)=""/1, 0x1}, {&(0x7f0000004b00)=""/148, 0x94}, {&(0x7f0000004bc0)=""/89, 0x59}, {&(0x7f0000004c40)=""/247, 0xf7}, {&(0x7f0000004d40)=""/238, 0xee}, {&(0x7f0000004e40)=""/45, 0x2d}, {&(0x7f0000004e80)=""/226, 0xe2}, {&(0x7f0000004f80)=""/4096, 0x1000}], 0x8, &(0x7f0000006000)=""/138, 0x8a}, 0x4d}, {{&(0x7f00000060c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f000000a440)=[{&(0x7f0000006140)=""/4096, 0x1000}, {&(0x7f0000007140)=""/4096, 0x1000}, {&(0x7f0000008140)=""/4096, 0x1000}, {&(0x7f0000009140)=""/26, 0x1a}, {&(0x7f0000009180)=""/91, 0x5b}, {&(0x7f0000009280)}, {&(0x7f00000092c0)=""/152, 0x98}, {&(0x7f0000009380)=""/192, 0xc0}, {&(0x7f0000009440)=""/4096, 0x1000}], 0x9, &(0x7f000000a500)=""/91, 0x5b}, 0x5}], 0x7, 0x12022, &(0x7f000000a780)={r5, r6+60000000}) 4m23.274403135s ago: executing program 3 (id=63): socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x100) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x68420, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x5, 0x0, 0x717e387b, 0x40, "1ae34e060100000000000000b240794233a5bd", 0x4, 0x2}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) r1 = fsopen(&(0x7f0000000340)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000300)=0xb3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x8) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000380)=0x27) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x11d402, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000050}, 0x880) syz_open_dev$loop(&(0x7f0000000280), 0x1, 0x40040) 4m19.439823216s ago: executing program 3 (id=67): socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) (async) r1 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) fcntl$setpipe(r1, 0x407, 0x34) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x22020600) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r6, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x3, 0x1, 0x4, 0x11, 0x9ca, 0x81}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x78, 0x66, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @broadcast}, {0x4e21, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x3, "1502162d50e683b140f1ebb9eadd5eabd9112d00dd0ee5a200", "1a6affff0e533d43dbceed833287627c", {"0e62979705f2c4e14fb2dce8dbce947d", "f30ad5c4381dd5c0efb87a7800004000"}}}}}, 0x86) (async) write$tun(r6, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x3, 0x1, 0x4, 0x11, 0x9ca, 0x81}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x78, 0x66, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @broadcast}, {0x4e21, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x3, "1502162d50e683b140f1ebb9eadd5eabd9112d00dd0ee5a200", "1a6affff0e533d43dbceed833287627c", {"0e62979705f2c4e14fb2dce8dbce947d", "f30ad5c4381dd5c0efb87a7800004000"}}}}}, 0x86) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x10, 0xd, {}, {0x0, 0x2, 0x7, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x3, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x20000038, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x4, 0x5, 0xca, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) 4m18.264827385s ago: executing program 3 (id=70): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_fd(0x0, 0x0, 0x0, 0x800, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid}]}}) r2 = open(&(0x7f00000002c0)='.\x00', 0x101800, 0x1d2) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x8}}]}}]}, 0x40}}, 0x0) 4m16.810876497s ago: executing program 3 (id=74): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x18) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:/\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='addr\x00', &(0x7f0000000500)='127.0.0.1\x00', 0x0) (async, rerun: 32) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='vers\x00', &(0x7f0000000540)='4\x00\b\f\x8b\xcb\x8d\x03\xe0o&NU_\x8bH\xca=\xf3s\xd3g\xb8Nw\xfc\xe7(\x9eA\xe8\x922\xb1\f#_ey\x9d\f\x8dN\xe3\xde\xa5\\-\x80\xa1\x91k\x11\xa3}\xe4\xff\nX\x1a\xb4\xfd!\xc3\xf2j\xef\xc1\xfd\xadik\xee39\"N\x81\xd9P\x83\xb7\bBh6\xbe\xb9\xaej\xa9\xb0#\x03\x06\xfcF\x13\x9ba\xc35\x99T\x93C\x94\xe5MD\x197\\3\xf1\x1b\xcc\x90!)\b)\xa2\x06\bb\xd3\xbb\xa3p\x97\xba\x81 \x8a\xaa\xcfI\xde\xcd', 0x0) (async, rerun: 32) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='xprtsec\x00', &(0x7f0000000b00)='tls\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 4m1.200608287s ago: executing program 32 (id=74): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x18) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:/\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='addr\x00', &(0x7f0000000500)='127.0.0.1\x00', 0x0) (async, rerun: 32) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='vers\x00', &(0x7f0000000540)='4\x00\b\f\x8b\xcb\x8d\x03\xe0o&NU_\x8bH\xca=\xf3s\xd3g\xb8Nw\xfc\xe7(\x9eA\xe8\x922\xb1\f#_ey\x9d\f\x8dN\xe3\xde\xa5\\-\x80\xa1\x91k\x11\xa3}\xe4\xff\nX\x1a\xb4\xfd!\xc3\xf2j\xef\xc1\xfd\xadik\xee39\"N\x81\xd9P\x83\xb7\bBh6\xbe\xb9\xaej\xa9\xb0#\x03\x06\xfcF\x13\x9ba\xc35\x99T\x93C\x94\xe5MD\x197\\3\xf1\x1b\xcc\x90!)\b)\xa2\x06\bb\xd3\xbb\xa3p\x97\xba\x81 \x8a\xaa\xcfI\xde\xcd', 0x0) (async, rerun: 32) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='xprtsec\x00', &(0x7f0000000b00)='tls\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 3m9.054142735s ago: executing program 0 (id=319): socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x100) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x68420, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x5, 0x0, 0x717e387b, 0x40, "1ae34e060100000000000000b240794233a5bd", 0x4, 0x2}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) r2 = fsopen(&(0x7f0000000340)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000300)=0xb3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x8) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000380)=0x27) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x11d402, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000050}, 0x880) syz_open_dev$loop(&(0x7f0000000280), 0x1, 0x40040) 3m7.34314665s ago: executing program 0 (id=324): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$kcm(0x11, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f0000019380)={'#! ', './file0'}, 0xb) close(r3) execve(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) 3m7.229486158s ago: executing program 5 (id=325): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x300) fchown(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x64, 0x4, 0x2c0, 0x100000c, 0x0, 0x1c0, 0xc0, 0xffffffff, 0xffffffff, 0x280, 0x1c0, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr, 0x0, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg0\x00', 'lo\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x0, 0x288, 0x358, 0xd0, 0x0, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xffffffff, 0xff, 0xff], [0xffffffff, 0xff, 0xff000000, 0xffffffff], 'xfrm0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x2f, 0x10, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) getsockopt$packet_int(r1, 0x107, 0x17, 0x0, &(0x7f0000000100)) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000580)={0x4, 0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000002060300000000000000000002001200050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e657400000000"], 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x9c}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xff}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x3a98}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x0) r3 = accept4$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14, 0x800) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000640)=0x50227f37, 0x4) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r4, 0x0, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xf57, 0x3ff, 0x3, 0x2}}}, ["", "", "", "", "", ""]}, 0x30}}, 0x0) 3m6.721956014s ago: executing program 5 (id=330): epoll_create1(0x0) semget(0x3, 0x2, 0x800) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) prlimit64(r0, 0x6, &(0x7f0000000300)={0x8, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000280)={0x9c0000, 0x6, 0x800, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x990902, 0x0, '\x00', @p_u8=&(0x7f0000000100)=0x10}}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x52, 0xffffffffffffffff, &(0x7f0000000000)=0xa) r5 = semget(0x2, 0x3, 0x33a) semtimedop(r5, 0x0, 0x0, 0x0) getpeername(r2, &(0x7f00000003c0)=@ax25={{0x3, @null}, [@default, @netrom, @netrom, @remote, @rose, @null, @rose]}, &(0x7f0000000440)=0x80) semctl$GETVAL(r5, 0x2, 0xc, 0x0) mount$fuseblk(&(0x7f0000000040), 0x0, &(0x7f00000000c0), 0x0, 0x0) mount(&(0x7f0000000040)=@filename='\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000240)='ubifs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10402, 0x89) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCOUTQ(r6, 0x5411, &(0x7f0000000340)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r7, 0x541c, &(0x7f0000000000)) syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f6003e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) 3m6.27140369s ago: executing program 0 (id=332): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x100, 0x0, 0x2, 0x3}, {0x0, 0x3, 0x200000000000, 0xfffffffffffffffe}, 0x7, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@broadcast, 0x2, 0x2b}, 0x0, @in6=@remote, 0x3503, 0x1, 0x0, 0x0, 0x0, 0xffffffff}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x40, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x800, 0x40, 0xa03, 0xa, 0x8001, 0xc3f]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0x1}]}]}]}]}, 0x40}}, 0x0) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 3m4.992050878s ago: executing program 0 (id=333): ftruncate(0xffffffffffffffff, 0x8008976) mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r1, 0x186a0, 0x0) 3m3.60027816s ago: executing program 0 (id=341): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, &(0x7f0000000180)) 3m3.389713529s ago: executing program 0 (id=342): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r2, 0xb1d, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x48850) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) socket(0x21, 0x1, 0x0) r4 = socket(0x40000000015, 0x805, 0x0) getsockopt(r4, 0x114, 0x271f, &(0x7f0000019440)=""/102400, &(0x7f00000000c0)=0x19000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f0000007880)=""/102400, 0x19000) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r6, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="40180000042c04001c0012800b00010062726964676500000c00028005002b0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4824) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x3) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) 3m2.855612443s ago: executing program 5 (id=344): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./nfsd_mnt\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd_mnt/threads\x00', 0x2000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r1, 0x40187013, &(0x7f00000005c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) lseek(r3, 0x1e1, 0x0) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000340)=0x5, 0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/bus/pci/devices/0000:00:06.0/driver/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000001100)='0000:00:06.0', 0xc) 3m1.734458131s ago: executing program 5 (id=348): socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) mkdirat(0xffffffffffffff9c, 0x0, 0x100) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x68420, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x5, 0x0, 0x717e387b, 0x40, "1ae34e060100000000000000b240794233a5bd", 0x4, 0x2}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) r1 = fsopen(&(0x7f0000000340)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000300)=0xb3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x8) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000380)=0x27) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x11d402, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000050}, 0x880) syz_open_dev$loop(&(0x7f0000000280), 0x1, 0x40040) 3m0.451631826s ago: executing program 5 (id=352): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, &(0x7f0000000180)) 3m0.208745052s ago: executing program 5 (id=354): bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x50009404, &(0x7f00000003c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20010090) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x40, 0x68, 0x1, 0x70bd2a, 0x7ffffffd, {0x0, 0x0, 0x3}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x14, 0x11, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x101}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) pipe2$9p(&(0x7f00000001c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x40000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$OCFS2_IOC_UNRESVSP64(0xffffffffffffffff, 0x4030582b, &(0x7f0000000000)={0x1, 0x2, 0x3, 0x3, 0x8, 0x2324}) 2m48.19915629s ago: executing program 33 (id=342): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r2, 0xb1d, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x48850) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) socket(0x21, 0x1, 0x0) r4 = socket(0x40000000015, 0x805, 0x0) getsockopt(r4, 0x114, 0x271f, &(0x7f0000019440)=""/102400, &(0x7f00000000c0)=0x19000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f0000007880)=""/102400, 0x19000) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r6, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="40180000042c04001c0012800b00010062726964676500000c00028005002b0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4824) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x3) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) 2m45.134634542s ago: executing program 34 (id=354): bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x50009404, &(0x7f00000003c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20010090) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x40, 0x68, 0x1, 0x70bd2a, 0x7ffffffd, {0x0, 0x0, 0x3}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x14, 0x11, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x101}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) pipe2$9p(&(0x7f00000001c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x40000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$OCFS2_IOC_UNRESVSP64(0xffffffffffffffff, 0x4030582b, &(0x7f0000000000)={0x1, 0x2, 0x3, 0x3, 0x8, 0x2324}) 2m15.20357017s ago: executing program 2 (id=487): syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x6, 0x1e5}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, r2, &(0x7f0000000180)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)='./file0\x00'}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a000000000000611174000000030000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r4, 0x6, 0x6, &(0x7f0000000740)=r3, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0xffffff14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002bc0)={0xa0, 0x0, 0x0, {{0xffffffffffffffff, 0x0, 0x5, 0x6, 0x80, 0x1000004, {0x3, 0x6, 0x5, 0x2, 0xa065, 0xfffffffffffffff9, 0x519e, 0x7ff, 0xfffffffd, 0x4000, 0x80, 0x0, 0xffffffffffffffff, 0x0, 0xf35a}}, {0x0, 0x1}}}, 0xa0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x10, 0x0, &(0x7f0000001500)=""/16, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4e2288bca9cf3ba, 0x0, 0xfffffffe}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00000000140000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r8}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r8, 0x58, &(0x7f0000000200)}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)='}', 0x1}], 0x1, &(0x7f0000000480)=ANY=[], 0x30, 0x4048080}}], 0x1, 0x4) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) 2m13.892613692s ago: executing program 2 (id=491): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000380)='6', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @loopback, 0xa8e}, 0x1c) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100030000009500000000000000b7080000000000007b8afbff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000020000b7050000080000001c20000000000000bf98000000000000560800000000000085000000bc000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) writev(r0, &(0x7f00000015c0)=[{&(0x7f0000000240)="537631cd8f15453372156c7871e645b4c41c12d72dc81185cf846e4e499e0ff6c9d86c1ecb3399bd8f37d34de75dc951733e485e4813bb8015c657891dc4f1c9ccca312384f1a20416061997e184eccd23851d06389056aeadb441315c94535be54b38960ffb343abf1ed0cb32e0b5bfe9804270df026713d47dad54f04b23fb82c57f1e76e6f83e47add165c9c6", 0x8e}, {&(0x7f0000000300)="cabd8fd217ec8c3aa41a6dc7c509b01d791b2ec3f478e01c747050451ed80a06f3066c9a00547c861d", 0x29}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="ba018cc2abb05ebf8c74f3bb2e1070a8706d8f0a8667456be17ce3b8302f0d4e01d90a6017524f6d8835c9f18690a3a911dea174e308c6f2292b7be94cf7ad8bd8ab5e02543cbbf5459e08ee524359f73e68091b482ac36c5d7931ae1b09719b8d869787a7d1f5c468ec6018a938f8ed2d548e9d00d6703b691eaa30cd6cef4a827fa0738ac053cda59cdeccac093de6c0d62828814511d29e18d7282d396912bb5db344e7f90c2be9b8ebef92426e73b983543175cc9ee0ba29eab9325b9320f5847bc94ecb1ad6bd7b226a8d282f83390a35cb9f4bdf", 0xd7}, {&(0x7f00000014c0)="51bd614968522d65204e5f7f62bafd9664422ce398f84d460b450f6faf76452c9e541438047a1bb6c568611e8119229b68177e4cf231fac4d5d9c52527d38a95c12cde5077ec3fb3476772cddc215b5279440f38d32b295f6c32822215552f8b2d116e2150c6bd6f554ba1d829ee2dd11bc3198797d7c297849a357869704239cf784de2241618f378f5faf33f9c682ada685d77779e443e3ff1856827934d7281dc4fff7305c14803a3d338a221e951556240d87a410840545e2a5700ee16003bdc17ab656a2b81e3c63f5aab4a610532db4e3aa7f738aff2f9b4e7cdd11ecd", 0xe0}], 0x5) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x22042, 0x0) ioctl$MEMREADOOB64(r6, 0xc0184d16, &(0x7f00000000c0)={0x8, 0x0, 0x37, &(0x7f0000000040)="d5d38aa88ae825e54bb7732909d5a4aa4d968525ed251d9bad0c4bf109c8623986dbc313156d8b951840d1cafb18e5c748c1f64e8d3483"}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) shutdown(r0, 0x1) 2m13.837242434s ago: executing program 2 (id=492): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 2m13.292632439s ago: executing program 2 (id=495): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000001740)=0x7ffffffd, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x0, 0x6b, &(0x7f0000001480)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a240102000502010209240703040001a53011240606040508000400050006000100050924030506030501f909240702020005cbad0924030601010303df092403fb020303", @ANYRES8], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, 0x0, 0xa5023fff) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x1, 0xa}) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x405, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, "04010200"}]}}]}, 0x170}}, 0x0) getpid() 2m9.204493107s ago: executing program 2 (id=507): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_fd(0x0, 0x0, 0x0, 0x800, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid}]}}) r1 = open(&(0x7f00000002c0)='.\x00', 0x101800, 0x1d2) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x8}}]}}]}, 0x40}}, 0x0) 2m7.912100921s ago: executing program 2 (id=511): keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000001340)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) r3 = request_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000000)={'syz', 0x1}, 0x0, r0) setreuid(0xee00, 0x0) keyctl$invalidate(0x15, r3) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000180)=':chain\x00', 0xfffffffffffffff8) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000180)) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r4, &(0x7f00000001c0)=[{&(0x7f0000000240)="00214796357e0e8d442441e991a56be1c97050feb9dbdbf8c798ab237470d6031589d6866865d8735403", 0x2a}], 0x1, 0x739, 0x2) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/10, 0xa}], 0x1, 0x6, 0x1) keyctl$read(0xb, r3, &(0x7f0000000640)=""/4096, 0x1000) 1m52.321770977s ago: executing program 35 (id=511): keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000001340)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) r3 = request_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000000)={'syz', 0x1}, 0x0, r0) setreuid(0xee00, 0x0) keyctl$invalidate(0x15, r3) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000180)=':chain\x00', 0xfffffffffffffff8) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000180)) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r4, &(0x7f00000001c0)=[{&(0x7f0000000240)="00214796357e0e8d442441e991a56be1c97050feb9dbdbf8c798ab237470d6031589d6866865d8735403", 0x2a}], 0x1, 0x739, 0x2) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/10, 0xa}], 0x1, 0x6, 0x1) keyctl$read(0xb, r3, &(0x7f0000000640)=""/4096, 0x1000) 54.71959736s ago: executing program 7 (id=724): socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x100) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x68420, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x5, 0x0, 0x717e387b, 0x40, "1ae34e060100000000000000b240794233a5bd", 0x4, 0x2}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) r2 = fsopen(&(0x7f0000000340)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000300)=0xb3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x8) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000380)=0x27) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x11d402, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000050}, 0x880) syz_open_dev$loop(&(0x7f0000000280), 0x1, 0x40040) 51.41853535s ago: executing program 7 (id=728): socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x10001, 0x20}, 0xc) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r4, &(0x7f00000000c0)='.\x00', 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000000280)={r4, r0, 0x1}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0xffffff01, 0x0, 0x54, 0x4, 0x73}, 0x9c) 49.696955984s ago: executing program 7 (id=733): openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x0, [0xffff, 0xffff133a, 0x4], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x4, 0x400ffff}, {}, {0x1}, {}, {}, {0x2, 0x2}, {0x200, 0x4}, {0x0, 0xffffffff}, {0x0, 0x1}], 0x12, 0x0, 0x0, 0x8000000}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0xffc4}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x8, 0x2, 0x9fb, 0x2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES32=r4, @ANYBLOB='\b\x00\n', @ANYBLOB="1500040004000000030300"], 0x44}, 0x1, 0x0, 0x0, 0x4040044}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) 46.790459908s ago: executing program 7 (id=738): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys\x00', 0x1ff) io_setup(0x45, &(0x7f0000000180)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x7fffffffffffffff, 0x4, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req={0x3, 0x9, 0x0, 0x4}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x40010020) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x9200000000000000) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000540)=0x7, 0x4) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00'}) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) getpeername(r3, 0x0, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) 45.185054264s ago: executing program 7 (id=744): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_fd(0x0, 0x0, 0x0, 0x800, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid}]}}) r2 = open(&(0x7f00000002c0)='.\x00', 0x101800, 0x1d2) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x8}}]}}]}, 0x40}}, 0x0) 43.574293801s ago: executing program 7 (id=748): openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x0, [0xffff, 0xffff133a, 0x4], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x4, 0x400ffff}, {}, {0x1}, {}, {}, {0x2, 0x2}, {0x200, 0x4}, {0x0, 0xffffffff}, {0x0, 0x1}], 0x12, 0x0, 0x0, 0x8000000}) socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0xffc4}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x8, 0x2, 0x9fb, 0x2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) 30.095398493s ago: executing program 6 (id=787): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x10001, 0x20}, 0xc) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r5, &(0x7f00000000c0)='.\x00', 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, &(0x7f0000000280)={r5, r1, 0x1}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0xffffff01, 0x0, 0x54, 0x4, 0x73}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r6, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400", @ANYRES16=r7, @ANYBLOB="110725bd7000f9dbdf2504000700"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c) 27.789834125s ago: executing program 36 (id=748): openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x0, [0xffff, 0xffff133a, 0x4], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x4, 0x400ffff}, {}, {0x1}, {}, {}, {0x2, 0x2}, {0x200, 0x4}, {0x0, 0xffffffff}, {0x0, 0x1}], 0x12, 0x0, 0x0, 0x8000000}) socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0xffc4}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x8, 0x2, 0x9fb, 0x2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) 27.671896248s ago: executing program 6 (id=794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="20000000010401000000000000000000020000000a0002000000ffff020000004304b9c3374691b3776fa9332ad3a77da12609474f01e060cde8998dcdc9eadf6d4fc31cf0b9ce276d5d7a2abc643ba18bd3c330d830afc43374c73914ff716ccd6f64744c452580176c73be62050fa56fe3764e8cebe960fcb287160c03cfb21fbbcaa21e444d30f199d0c87eafb1d040084496a0c8d3d8faf7a58e2542b8715f99781760c1068b063e63fddde3b8f8a9a77e4e333da6e78438c8922aae7359774fcb0cdc06695f707c6b9c8456f4402793ea4c498d56de7d88435d8fe995658e6d9a0aa268d78433e81920"], 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc4}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000600)="00112233445566778899", 0xa, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) close(0x3) 25.358707256s ago: executing program 6 (id=799): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) sendto$packet(r0, &(0x7f0000000300)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0x48, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 25.008114422s ago: executing program 6 (id=801): socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000380)={'batadv_slave_0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f00000002c0)={r1, &(0x7f0000000180)='#{)!!\\(-,]@-\x00', 0x4080, &(0x7f00000001c0)={@align=0xb0, {0x60c, 0x101, 0x9, 0x4}}, 0x0, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0xc38f}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x6232, @private0, 0x100}, @in6={0xa, 0x4e24, 0x81, @private2, 0xfffffffa}, @in6={0xa, 0x4e22, 0x400, @empty, 0x4}], 0x64) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x3, 0x7fff0006}]}) io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) r5 = socket(0x28, 0x5, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r6, 0x4) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvfrom$inet_nvme(r5, 0x0, 0x0, 0x40000002, 0x0, 0x0) 23.977407916s ago: executing program 6 (id=802): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_fd(0x0, 0x0, 0x0, 0x800, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid}]}}) r2 = open(&(0x7f00000002c0)='.\x00', 0x101800, 0x1d2) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x8}}]}}]}, 0x40}}, 0x0) 21.965007644s ago: executing program 6 (id=805): sendmmsg(0xffffffffffffffff, &(0x7f0000008940)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="e2a2306e3aae143c36cda74666adf3fdb2db4b52b324c1894418c07ea48281609b82f1535f3654343c6a6294198747a6add285337982814dc3050267f88bdce03dd93de2552dd5cae3e40aefc6ac82f941e4a99ca748d4512c5da4e2", 0x5c}, {0x0}], 0x2}}], 0x1, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 13.072139679s ago: executing program 4 (id=824): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x10001, 0x20}, 0xc) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r5, &(0x7f00000000c0)='.\x00', 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, &(0x7f0000000280)={r5, r1, 0x1}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0xffffff01, 0x0, 0x54, 0x4, 0x73}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r6, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYBLOB="110725bd7000f9dbdf2504000700"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 11.118969134s ago: executing program 4 (id=827): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x24040084) syz_clone3(&(0x7f0000001240)={0xa9004080, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102376, 0x18fe8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4$vsock_stream(r2, 0x0, 0xfffffffffffffda0, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@private0}}}, &(0x7f00000000c0)=0xe8) r4 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @remote}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x8080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2c0, &(0x7f0000000680)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d92028a3afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000180aa78ce54006598080a8030037004023493b87aafaffffffffffffff23"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) 9.629561566s ago: executing program 8 (id=829): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x10001, 0x20}, 0xc) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r5, &(0x7f00000000c0)='.\x00', 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, &(0x7f0000000280)={r5, r1, 0x1}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0xffffff01, 0x0, 0x54, 0x4, 0x73}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r6, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYBLOB="110725bd7000f9dbdf2504000700"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 7.882352599s ago: executing program 8 (id=832): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10ffff}, 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffff7fa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = inotify_init() inotify_add_watch(r4, 0x0, 0xa50003d1) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r5, 0xc008551b, &(0x7f0000000040)={0x6, 0x8, [0x0, 0x1000]}) readv(r4, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x9) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000240)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x36, 0x40000000788, 0x80000000002, 0x183, 0x400000004, 0x2000000000000000, 0xee, 0x80000001, 0x3, 0x1000045, 0xfffc, 0x9, 0xf, 0x6, 0x0, 0xab], 0x8000000, 0x3c4210}) 7.758136115s ago: executing program 1 (id=833): socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000380)={'batadv_slave_0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f00000002c0)={r1, &(0x7f0000000180)='#{)!!\\(-,]@-\x00', 0x4080, &(0x7f00000001c0)={@align=0xb0, {0x60c, 0x101, 0x9, 0x4}}, 0x0, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0xc38f}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x6232, @private0, 0x100}, @in6={0xa, 0x4e24, 0x81, @private2, 0xfffffffa}, @in6={0xa, 0x4e22, 0x400, @empty, 0x4}], 0x64) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x3, 0x7fff0006}]}) io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) r5 = socket(0x28, 0x5, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r6, 0x4) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvfrom$inet_nvme(r5, 0x0, 0x0, 0x40000002, 0x0, 0x0) 6.690433418s ago: executing program 37 (id=805): sendmmsg(0xffffffffffffffff, &(0x7f0000008940)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="e2a2306e3aae143c36cda74666adf3fdb2db4b52b324c1894418c07ea48281609b82f1535f3654343c6a6294198747a6add285337982814dc3050267f88bdce03dd93de2552dd5cae3e40aefc6ac82f941e4a99ca748d4512c5da4e2", 0x5c}, {0x0}], 0x2}}], 0x1, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 6.683404191s ago: executing program 1 (id=835): mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x1, 0x0) r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) syz_open_dev$radio(&(0x7f0000000400), 0x3, 0x2) syz_ublk_setup_io_uring(0x22cf, &(0x7f0000000240)={0x0, 0xd58c, 0x10, 0x3, 0x108}, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x200}, @restrict={0x3, 0x0, 0x0, 0xb, 0x5}]}}, 0x0, 0x26, 0x4d, 0x0, 0x6}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) socket(0x2b, 0x1, 0x1) syz_open_dev$vim2m(0x0, 0x0, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) close_range(r2, 0xffffffffffffffff, 0x0) 6.170449119s ago: executing program 1 (id=836): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x7, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001040)) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r1, @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) eventfd(0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) capset(&(0x7f0000002ffa)={0x20071026}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) socket$nl_netfilter(0x10, 0x3, 0xc) 6.120278004s ago: executing program 4 (id=837): syz_usb_connect(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f00000001c0)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000001c0)={{0x12, 0x1, 0x51, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x2, 0x0, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x81, 0x833, 0xef}, {0x6, 0x24, 0x1a, 0x40, 0x1c}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x2, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0x0, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7f, 0xf, 0x6}}}}}}}]}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, &(0x7f0000000240)="235913100000004a3525c373", 0x0, 0xc}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000007110f0ff0000000095000000000000003303c4f618fdd9c37afb2e246d90785453e824fdcd19b2147893062f0369232e356c42927ae7a51c1d1b3c8a0cb169ef1d5384c96c59257c19508a9e10529aeacbf090fcbf6fd81e54bd23a290a7e394a1d0457166797e46be8277428f0f199538b743dfd17c314566f596c51d3c5d28ac410d205152732271e0db24612857b07f361c07f9cbe3e06e68274a78205a1e130fbc16ce08710c439e0c7f08"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0xfec00000, 0x0, 0x0, 0x7, 0x7, 0x10, 0x4, 0x7, 0x0, 0x8, 0x9}, {0x50000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xdd, 0x0, 0x7, 0xff, 0x2}, {0x9000, 0xf066ce738b004ad5, 0xc, 0x0, 0x27, 0xc5, 0x0, 0x0, 0x8, 0x3, 0x40, 0x9}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x7f, 0x7, 0x8, 0xf, 0x4}, {0x80a0000, 0x8080000, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x3f, 0x6}, {0x26000, 0x0, 0x3, 0x9, 0x2, 0x1, 0x2, 0x80, 0x10, 0x1, 0x6}, {0x0, 0xeeee0000, 0x3, 0x4, 0x3, 0x7, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x2, 0x50000, 0xc, 0x3, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x1, 0x2}, {0x809fffb, 0x8cc}, {0xdddd1000}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xf, 0xf801, 0x3000, [0x80000004, 0x0, 0x10000, 0xfffffffffffdffff]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x24000090) 5.148545182s ago: executing program 1 (id=838): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00\t'], 0x28) 4.240249603s ago: executing program 1 (id=839): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x10001, 0x20}, 0xc) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r5, &(0x7f00000000c0)='.\x00', 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, &(0x7f0000000280)={r5, r1, 0x1}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0xffffff01, 0x0, 0x54, 0x4, 0x73}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r6, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYRES16=r7, @ANYBLOB="110725bd7000f9dbdf2504000700"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c) 3.819662384s ago: executing program 8 (id=840): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.64865992s ago: executing program 8 (id=841): r0 = socket$inet6(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x5, 0x6}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) setresuid(0xee01, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) socket(0x1e, 0x2, 0x0) setpgid(0x0, r4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x4, 0x20000, 0x4b, @ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x10, 0x7, 0x1, 0x804}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 2.928190491s ago: executing program 4 (id=842): r0 = socket$inet6(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x5, 0x6}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) setresuid(0xee01, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) socket(0x1e, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x4, 0x20000, 0x4b, @ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x10, 0x7, 0x1, 0x804}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 2.292214193s ago: executing program 8 (id=843): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x10001, 0x20}, 0xc) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r5, &(0x7f00000000c0)='.\x00', 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, &(0x7f0000000280)={r5, r1, 0x1}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0xffffff01, 0x0, 0x54, 0x4, 0x73}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r6, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYBLOB="110725bd7000f9dbdf2504000700"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.355222605s ago: executing program 4 (id=844): mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x1, 0x0) r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) syz_open_dev$radio(&(0x7f0000000400), 0x3, 0x2) syz_ublk_setup_io_uring(0x22cf, &(0x7f0000000240)={0x0, 0xd58c, 0x10, 0x3, 0x108}, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x200}, @restrict={0x3, 0x0, 0x0, 0xb, 0x5}]}}, 0x0, 0x26, 0x4d, 0x0, 0x6}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) socket(0x2b, 0x1, 0x1) syz_open_dev$vim2m(0x0, 0x0, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) close_range(r2, 0xffffffffffffffff, 0x0) 878.879981ms ago: executing program 8 (id=845): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_dbroot\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(r0, &(0x7f0000000400), 0x0) mkdir(&(0x7f0000000500)='./my_dbroot/alua\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000700)='./my_dbroot/alua/usb_gadget/naa.1234567890abcdef+1\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000240)=""/119, 0x77}], 0x1, 0x2, 0x800000) mkdir(&(0x7f0000000d00)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) syz_emit_ethernet(0x3c, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x48, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x22eb, 0x0, 0x0, [0x0, 0x0]}}}}}}}, 0x0) mkdir(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r2, &(0x7f0000001000)='rd_pages=8', 0xa) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x14) write(r3, &(0x7f0000001200)='1', 0x1) close(r3) mkdir(&(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000001400)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') mkdir(0x0, 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0) write(r4, &(0x7f0000001700)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000001800)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) 525.999379ms ago: executing program 1 (id=846): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x208000}) get_robust_list(r1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000000}) socket(0xa, 0x3, 0xff) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 0s ago: executing program 4 (id=847): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x17e) mount(0x0, &(0x7f0000000200)='./myconfig\x00', &(0x7f0000000300)='configfs\x00', 0x2000000, 0x0) syz_open_dev$video4linux(0x0, 0x205d, 0x0) lsetxattr$security_evm(&(0x7f0000000140)='./myconfig/usb_gadget/g1/functions/SourceSink.0/pattern\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[@ANYBLOB="f92c"], 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206030000000000000000000700000705000100070000000900020073797a31000000000c0007800800064000000000050005000200000005000400010000001200030068060000000000000016edc4823a311740db893d8db02c706f7274000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) gettid() r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000c00000000000002000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/222], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SIOCGSKNS(r3, 0x894c, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$MSR(&(0x7f0000000000), 0x10000, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r5, 0x40405514, &(0x7f0000000200)={0x9, 0x2, 0xfffffff9, 0x5, '\x00', 0x10}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x800, 0x10000, '\x00', 0x4000000}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000016080000000100000080000000b96177a2a42a8b28a12189ee9ee5afdd9af54b6329dbe6dbf60233063336f3f3fe4c113ac96d286daf30cd6eea15b9425cf43aa5ff1a80bdf2cedb0c9de57d697610c0a9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x7, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000021d80)={0x6cb941, 0x108, 0x6}, 0x18) kernel console output (not intermixed with test programs): k: 8 bytes leftover after parsing attributes in process `syz.2.349'. [ 185.796555][ T9] pwc: Sotec Afina Eye USB webcam detected. [ 185.839227][ T9] pwc: Failed to set LED on/off time (-71) [ 185.859623][ T9] pwc: send_video_command error -71 [ 185.881623][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 185.912434][ T9] Philips webcam 3-1:1.0: probe with driver Philips webcam failed with error -71 [ 185.954574][ T9] usb 3-1: USB disconnect, device number 9 [ 185.980174][ T30] audit: type=1400 audit(1785299285.007:565): avc: denied { create } for pid=7224 comm="syz.1.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 188.177866][ T30] audit: type=1400 audit(1785299287.207:566): avc: denied { append } for pid=7254 comm="syz.2.365" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 188.357476][ T7252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.502386][ T5722] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 188.652708][ T5722] usb 5-1: Using ep0 maxpacket: 16 [ 188.671050][ T5722] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.689659][ T5722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 188.709903][ T5722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 188.732548][ T5722] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 188.744754][ T5722] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.773565][ T5722] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 188.792372][ T5722] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 188.807364][ T5722] usb 5-1: Manufacturer: syz [ 188.817163][ T5722] usb 5-1: config 0 descriptor?? [ 189.421421][ T30] audit: type=1400 audit(1785299288.447:567): avc: denied { module_request } for pid=7272 comm="syz.2.370" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 189.480833][ T7273] netlink: 'syz.2.370': attribute type 1 has an invalid length. [ 190.882664][ T5722] rc_core: IR keymap rc-hauppauge not found [ 190.894718][ T5722] Registered IR keymap rc-empty [ 190.902165][ T5722] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 190.924514][ T5722] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 190.953035][ T5722] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 190.965753][ T5722] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input9 [ 190.986088][ T5722] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 191.012516][ T5722] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 191.042389][ T5722] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 191.073087][ T5722] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 191.090350][ T7298] libceph: resolve '4' (ret=-3): failed [ 191.096277][ T5722] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 191.124513][ T5722] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 191.152675][ T5722] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 191.182418][ T5722] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 191.202407][ T5722] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 191.222396][ T5722] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 191.246335][ T5722] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 191.254662][ T5722] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 191.267482][ T5722] usb 5-1: USB disconnect, device number 10 [ 191.653038][ T5722] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 192.362363][ T5722] usb 5-1: Using ep0 maxpacket: 8 [ 192.609467][ T5722] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 192.628779][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.645844][ T5722] usb 5-1: Product: syz [ 192.651873][ T5722] usb 5-1: Manufacturer: syz [ 192.654028][ T7313] netlink: 72 bytes leftover after parsing attributes in process `syz.2.384'. [ 192.656947][ T5722] usb 5-1: SerialNumber: syz [ 192.691641][ T5722] usb 5-1: config 0 descriptor?? [ 192.709458][ T5722] gspca_main: se401-2.14.0 probing 047d:5003 [ 193.307498][ T7326] netlink: 24 bytes leftover after parsing attributes in process `syz.1.389'. [ 193.354184][ T5722] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 193.577268][ T10] usb 5-1: USB disconnect, device number 11 [ 193.642762][ T5722] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 193.802400][ T5722] usb 3-1: Using ep0 maxpacket: 16 [ 193.809175][ T5722] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 193.818721][ T5722] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 193.826798][ T5722] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 193.842463][ T5722] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 193.851657][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.860137][ T5722] usb 3-1: Product: syz [ 193.864400][ T5722] usb 3-1: Manufacturer: syz [ 193.869011][ T5722] usb 3-1: SerialNumber: syz [ 193.964292][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.970733][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.515078][ T7330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.545197][ T9] usb 3-1: USB disconnect, device number 10 [ 196.149405][ T7352] No source specified [ 196.303729][ T7353] FAULT_INJECTION: forcing a failure. [ 196.303729][ T7353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.368108][ T7353] CPU: 0 UID: 0 PID: 7353 Comm: syz.2.397 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.368144][ T7353] Tainted: [L]=SOFTLOCKUP [ 196.368151][ T7353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 196.368164][ T7353] Call Trace: [ 196.368172][ T7353] [ 196.368181][ T7353] dump_stack_lvl+0x100/0x190 [ 196.368212][ T7353] should_fail_ex.cold+0x5/0xa [ 196.368243][ T7353] _copy_to_user+0x32/0xd0 [ 196.368275][ T7353] simple_read_from_buffer+0xcb/0x170 [ 196.368301][ T7353] proc_fail_nth_read+0x1af/0x230 [ 196.368335][ T7353] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.368371][ T7353] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.368404][ T7353] vfs_read+0x1e4/0xb40 [ 196.368442][ T7353] ? lockdep_hardirqs_on+0x78/0x100 [ 196.368468][ T7353] ? __pfx_vfs_read+0x10/0x10 [ 196.368519][ T7353] ksys_read+0x12a/0x250 [ 196.368551][ T7353] ? __pfx_ksys_read+0x10/0x10 [ 196.368592][ T7353] do_syscall_64+0x115/0x870 [ 196.368615][ T7353] ? clear_bhb_loop+0x40/0x90 [ 196.368642][ T7353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.368665][ T7353] RIP: 0033:0x7fcbf6b5e6ce [ 196.368683][ T7353] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 196.368704][ T7353] RSP: 002b:00007fcbf7b24fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 196.368724][ T7353] RAX: ffffffffffffffda RBX: 00007fcbf7b256c0 RCX: 00007fcbf6b5e6ce [ 196.368740][ T7353] RDX: 000000000000000f RSI: 00007fcbf7b250a0 RDI: 0000000000000004 [ 196.368753][ T7353] RBP: 00007fcbf7b25090 R08: 0000000000000000 R09: 0000000000000000 [ 196.368767][ T7353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.368780][ T7353] R13: 00007fcbf6e26038 R14: 00007fcbf6e25fa0 R15: 00007ffcce62cb38 [ 196.368811][ T7353] [ 196.645192][ T7355] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.028350][ T7358] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 197.035011][ T7358] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 197.043489][ T7358] vhci_hcd vhci_hcd.0: Device attached [ 197.055547][ T30] audit: type=1400 audit(1785299295.637:568): avc: denied { bind } for pid=7354 comm="syz.2.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 197.163523][ T7355] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.458515][ T7367] vivid-003: ================= START STATUS ================= [ 197.458759][ T7360] vhci_hcd: connection closed [ 197.475935][ T7355] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.508551][ T7367] vivid-003: Radio HW Seek Mode: Bounded [ 197.515544][ T6026] vhci_hcd vhci_hcd.2: stop threads [ 197.525089][ T6026] vhci_hcd vhci_hcd.2: release socket [ 197.542998][ T6026] vhci_hcd vhci_hcd.2: disconnect device [ 197.546783][ T7367] vivid-003: Radio Programmable HW Seek: false [ 197.601467][ T7355] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.615026][ T5743] usb 38-1: enqueue for inactive port 0 [ 197.621536][ T7367] vivid-003: RDS Rx I/O Mode: Block I/O [ 197.634971][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 197.646506][ T7367] vivid-003: Generate RBDS Instead of RDS: false [ 197.646742][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 197.661485][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 197.666547][ T7367] vivid-003: RDS Reception: [ 197.671309][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 197.673486][ T7367] true [ 197.684907][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 197.736218][ T48] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.753393][ T48] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.764149][ T7367] [ 197.771783][ T48] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.785733][ T7367] vivid-003: RDS Program Type: 0 inactive [ 197.792023][ T48] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.800352][ T5722] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 197.824524][ T7367] vivid-003: RDS PS Name: inactive [ 197.844415][ T7367] vivid-003: RDS Radio Text: inactive [ 197.862703][ T7367] vivid-003: RDS Traffic Announcement: false inactive [ 197.882355][ T7367] vivid-003: RDS Traffic Program: false inactive [ 197.889771][ T7367] vivid-003: RDS Music: false inactive [ 197.910180][ T7367] vivid-003: ================== END STATUS ================== [ 197.932439][ T5722] usb 5-1: device descriptor read/64, error -71 [ 198.172162][ T5743] usb usb38-port1: attempt power cycle [ 198.242565][ T5722] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 198.289612][ T6026] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.376341][ T6026] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.382369][ T5722] usb 5-1: device descriptor read/64, error -71 [ 198.451830][ T6026] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.502794][ T5722] usb usb5-port1: attempt power cycle [ 198.515741][ T6026] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.591962][ T7373] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.603570][ T7373] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.610731][ T7373] bridge_slave_0: entered allmulticast mode [ 198.619028][ T7373] bridge_slave_0: entered promiscuous mode [ 198.639887][ T7373] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.650723][ T7373] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.664190][ T7373] bridge_slave_1: entered allmulticast mode [ 198.678177][ T7373] bridge_slave_1: entered promiscuous mode [ 198.744962][ T5743] usb usb38-port1: unable to enumerate USB device [ 198.808317][ T7373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.834521][ T7373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.862412][ T5722] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 198.959855][ T5722] usb 5-1: device descriptor read/8, error -71 [ 199.027164][ T7373] team0: Port device team_slave_0 added [ 199.050790][ T7373] team0: Port device team_slave_1 added [ 199.077503][ T6026] bridge_slave_1: left allmulticast mode [ 199.100423][ T6026] bridge_slave_1: left promiscuous mode [ 199.113356][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.137382][ T6026] bridge_slave_0: left allmulticast mode [ 199.150082][ T6026] bridge_slave_0: left promiscuous mode [ 199.165196][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.223291][ T5722] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 199.342828][ T5722] usb 5-1: device descriptor read/8, error -71 [ 199.651374][ T5722] usb usb5-port1: unable to enumerate USB device [ 199.715993][ T30] audit: type=1400 audit(1785299298.737:569): avc: denied { write } for pid=7402 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.799902][ T6026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.808570][ T5624] Bluetooth: hci4: command tx timeout [ 199.820658][ T6026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.831050][ T6026] bond0 (unregistering): Released all slaves [ 199.841648][ T30] audit: type=1400 audit(1785299298.857:570): avc: denied { write } for pid=7420 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.890371][ T7373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.900087][ T30] audit: type=1400 audit(1785299298.927:571): avc: denied { read } for pid=5272 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 199.922988][ T7373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.949386][ T7373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.972272][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 199.986241][ T7373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.993554][ T7373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.021713][ T7373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.072831][ T7373] hsr_slave_0: entered promiscuous mode [ 200.079329][ T7373] hsr_slave_1: entered promiscuous mode [ 200.085751][ T7373] debugfs: 'hsr0' already exists in 'hsr' [ 200.091600][ T7373] Cannot create hsr debugfs directory [ 200.513304][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 200.712407][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 200.726631][ T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 200.745297][ T10] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 200.760048][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.778486][ T4926] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 200.791128][ T4926] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 200.804345][ T4926] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 200.813223][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.822661][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.830988][ T10] usb 3-1: Product: syz [ 200.835707][ T4926] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 200.843571][ T10] usb 3-1: Manufacturer: syz [ 200.848500][ T10] usb 3-1: SerialNumber: syz [ 200.853667][ T4926] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 201.066324][ T6026] hsr_slave_0: left promiscuous mode [ 201.089726][ T6026] hsr_slave_1: left promiscuous mode [ 201.110305][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.126786][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.150396][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.175107][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.217488][ T6026] veth0_macvtap: left promiscuous mode [ 201.223132][ T6026] veth1_vlan: left promiscuous mode [ 201.228386][ T6026] veth0_vlan: left promiscuous mode [ 201.686741][ T7446] FAULT_INJECTION: forcing a failure. [ 201.686741][ T7446] name failslab, interval 1, probability 0, space 0, times 0 [ 201.702540][ T7446] CPU: 0 UID: 0 PID: 7446 Comm: syz.4.413 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.702572][ T7446] Tainted: [L]=SOFTLOCKUP [ 201.702580][ T7446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 201.702593][ T7446] Call Trace: [ 201.702600][ T7446] [ 201.702608][ T7446] dump_stack_lvl+0x100/0x190 [ 201.702640][ T7446] should_fail_ex.cold+0x5/0xa [ 201.702668][ T7446] should_failslab+0xc2/0x120 [ 201.702696][ T7446] __kmalloc_noprof+0xfc/0x820 [ 201.702723][ T7446] ? tomoyo_encode2+0xfb/0x3c0 [ 201.702750][ T7446] tomoyo_encode2+0xfb/0x3c0 [ 201.702775][ T7446] tomoyo_encode+0x29/0x50 [ 201.702795][ T7446] tomoyo_realpath_from_path+0x18c/0x690 [ 201.702825][ T7446] tomoyo_path_number_perm+0x23c/0x580 [ 201.702853][ T7446] ? tomoyo_path_number_perm+0x22e/0x580 [ 201.702886][ T7446] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 201.702946][ T7446] ? find_held_lock+0x2b/0x80 [ 201.702979][ T7446] ? __fget_files+0x215/0x3d0 [ 201.703000][ T7446] ? hook_file_ioctl_common+0x140/0x440 [ 201.703024][ T7446] ? __fget_files+0x215/0x3d0 [ 201.703052][ T7446] ? __fget_files+0x21f/0x3d0 [ 201.703079][ T7446] security_file_ioctl+0xd3/0x230 [ 201.703114][ T7446] __x64_sys_ioctl+0xb7/0x210 [ 201.703147][ T7446] do_syscall_64+0x115/0x870 [ 201.703178][ T7446] ? clear_bhb_loop+0x40/0x90 [ 201.703205][ T7446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.703228][ T7446] RIP: 0033:0x7fd7abf9de99 [ 201.703246][ T7446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.703267][ T7446] RSP: 002b:00007fd7ace6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.703288][ T7446] RAX: ffffffffffffffda RBX: 00007fd7ac225fa0 RCX: 00007fd7abf9de99 [ 201.703303][ T7446] RDX: 0000000000000000 RSI: 00000000000007cb RDI: 0000000000000003 [ 201.703317][ T7446] RBP: 00007fd7ace6b090 R08: 0000000000000000 R09: 0000000000000000 [ 201.703330][ T7446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.703348][ T7446] R13: 00007fd7ac226038 R14: 00007fd7ac225fa0 R15: 00007ffce752d618 [ 201.703377][ T7446] [ 201.703394][ T7446] ERROR: Out of memory at tomoyo_realpath_from_path. [ 201.931537][ T5624] Bluetooth: hci4: command tx timeout [ 201.948748][ T10] usb 3-1: USB disconnect, device number 11 [ 202.104217][ T30] audit: type=1400 audit(1785299301.137:572): avc: denied { write } for pid=7435 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.645622][ T30] audit: type=1400 audit(1785299301.677:573): avc: denied { write } for pid=7462 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.769873][ T6026] team0 (unregistering): Port device team_slave_1 removed [ 202.944448][ T5624] Bluetooth: hci1: command tx timeout [ 203.095869][ T6026] team0 (unregistering): Port device team_slave_0 removed [ 204.018058][ T5624] Bluetooth: hci4: command tx timeout [ 204.156791][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 204.384946][ T4989] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 204.562448][ T4989] usb 3-1: Using ep0 maxpacket: 16 [ 204.581995][ T7373] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 204.596046][ T4989] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 204.606766][ T4989] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 204.617172][ T7373] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 204.626278][ T4989] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 204.642089][ T7373] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 204.664688][ T4989] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 204.680565][ T7373] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 204.691795][ T4989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.713920][ T4989] usb 3-1: Product: syz [ 204.735805][ T4989] usb 3-1: Manufacturer: syz [ 204.745968][ T4989] usb 3-1: SerialNumber: syz [ 204.773382][ T7373] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 204.811883][ T7373] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 204.929548][ T7373] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 204.979624][ T7373] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 205.002636][ T5624] Bluetooth: hci1: command tx timeout [ 205.183050][ T6026] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.200579][ T30] audit: type=1400 audit(1785299304.227:574): avc: denied { write } for pid=7487 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.445864][ T6026] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.497993][ T30] audit: type=1400 audit(1785299304.527:575): avc: denied { write } for pid=7515 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.679532][ T6026] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.728602][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7 [ 205.737641][ T7480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.769087][ T6026] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.815809][ T9] usb 3-1: USB disconnect, device number 12 [ 206.042361][ T5624] Bluetooth: hci4: command tx timeout [ 207.082364][ T5624] Bluetooth: hci1: command tx timeout [ 207.256385][ T7373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.870943][ T7373] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.891424][ T30] audit: type=1400 audit(1785299306.917:576): avc: denied { write } for pid=7524 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.453488][ T30] audit: type=1400 audit(1785299307.477:577): avc: denied { write } for pid=7551 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.504822][ T7555] SQUASHFS error: Failed to read block 0x0: -5 [ 208.511025][ T7555] unable to read squashfs_super_block [ 208.525290][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.532440][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.656320][ T6026] bridge_slave_1: left allmulticast mode [ 208.667320][ T6026] bridge_slave_1: left promiscuous mode [ 208.697705][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.770043][ T6026] bridge_slave_0: left allmulticast mode [ 208.799684][ T6026] bridge_slave_0: left promiscuous mode [ 208.850327][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.186445][ T5624] Bluetooth: hci1: command tx timeout [ 209.665993][ T6026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.684494][ T6026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.694572][ T6026] bond0 (unregistering): Released all slaves [ 209.702832][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 209.983042][ T5272] 8021q: adding VLAN 0 to HW filter on device eth8 [ 210.007351][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.014460][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.132349][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 210.141516][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.151745][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 210.165840][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 210.175936][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 210.186299][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.192623][ T7432] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.206774][ T7577] capability: warning: `syz.1.436' uses deprecated v2 capabilities in a way that may be insecure [ 210.207484][ T7432] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.229195][ T7432] bridge_slave_0: entered allmulticast mode [ 210.241730][ T7432] bridge_slave_0: entered promiscuous mode [ 210.707356][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 210.717995][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 210.726171][ T24] usb 5-1: Manufacturer: syz [ 210.736876][ T24] usb 5-1: config 0 descriptor?? [ 210.742765][ T7432] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.765846][ T7432] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.782549][ T7432] bridge_slave_1: entered allmulticast mode [ 210.790540][ T7432] bridge_slave_1: entered promiscuous mode [ 210.830585][ T7432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.006254][ T7432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.112634][ T24] rc_core: IR keymap rc-hauppauge not found [ 211.118868][ T7432] team0: Port device team_slave_0 added [ 211.130620][ T24] Registered IR keymap rc-empty [ 211.143578][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 211.172216][ T7432] team0: Port device team_slave_1 added [ 211.178258][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 211.226244][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 211.259986][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 211.307263][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 211.350809][ T30] audit: type=1400 audit(1785299310.377:578): avc: denied { ioctl } for pid=7588 comm="syz.1.439" path="socket:[16242]" dev="sockfs" ino=16242 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 211.912254][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 211.944120][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 211.964905][ T7432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.981638][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 211.996257][ T7432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.042623][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 212.070319][ T7432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.081177][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 212.109867][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 212.156562][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 212.204371][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 212.394783][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 212.502100][ T6026] hsr_slave_0: left promiscuous mode [ 212.520714][ T24] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 212.540150][ T6026] hsr_slave_1: left promiscuous mode [ 212.561715][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.568604][ T24] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 212.598988][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.635715][ T24] usb 5-1: USB disconnect, device number 16 [ 212.644429][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.704242][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.749050][ T6026] veth1_macvtap: left promiscuous mode [ 212.806649][ T6026] veth0_macvtap: left promiscuous mode [ 212.830229][ T6026] veth1_vlan: left promiscuous mode [ 212.870724][ T6026] veth0_vlan: left promiscuous mode [ 213.460505][ T30] audit: type=1400 audit(1785299312.487:579): avc: denied { write } for pid=7590 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.632205][ T30] audit: type=1400 audit(1785299312.657:580): avc: denied { write } for pid=7620 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.832047][ T30] audit: type=1400 audit(1785299312.857:581): avc: denied { bind } for pid=7616 comm="syz.2.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 213.862210][ T30] audit: type=1400 audit(1785299312.887:582): avc: denied { read } for pid=7616 comm="syz.2.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 213.898130][ T30] audit: type=1400 audit(1785299312.887:583): avc: denied { write } for pid=7616 comm="syz.2.444" path="socket:[16348]" dev="sockfs" ino=16348 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 213.937189][ T6026] team0 (unregistering): Port device team_slave_1 removed [ 213.959961][ T6026] team0 (unregistering): Port device team_slave_0 removed [ 214.053593][ T7432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.060554][ T7432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.086644][ T7432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.100994][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 214.185241][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 214.271079][ T7432] hsr_slave_0: entered promiscuous mode [ 214.297522][ T7432] hsr_slave_1: entered promiscuous mode [ 214.352618][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 214.366694][ T24] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 214.385553][ T24] usb 5-1: config 0 has no interface number 0 [ 214.404311][ T24] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 214.458561][ T24] usb 5-1: config 0 interface 85 has no altsetting 0 [ 214.516322][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 214.537134][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.545957][ T24] usb 5-1: Product: syz [ 214.555506][ T24] usb 5-1: Manufacturer: syz [ 214.562157][ T24] usb 5-1: SerialNumber: syz [ 214.575328][ T24] usb 5-1: config 0 descriptor?? [ 214.623338][ T6026] IPVS: stop unused estimator thread 0... [ 215.513748][ T24] appletouch 5-1:0.85: Geyser mode initialized. [ 215.522351][ T24] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input12 [ 215.624066][ T30] audit: type=1400 audit(1785299314.657:584): avc: denied { module_load } for pid=7626 comm="syz.4.447" path=2F6D656D66643A2D42D54E49C56A9A08202864656C6574656429 dev="tmpfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 215.624397][ T7652] Invalid ELF header len 16 [ 215.680225][ T7432] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 215.734532][ T7432] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 215.750443][ T7432] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 215.795653][ T7432] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 215.830321][ T7432] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 215.857409][ T7432] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 215.875043][ T7432] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 215.916475][ T7432] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 216.036400][ T7373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.098194][ T7432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.165637][ T7432] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.210037][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.217194][ T5994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.278579][ T30] audit: type=1400 audit(1785299315.307:585): avc: denied { write } for pid=7643 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.282067][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.308702][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.498288][ T30] audit: type=1400 audit(1785299315.527:586): avc: denied { bind } for pid=7668 comm="syz.1.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 217.107726][ T24] usb 5-1: USB disconnect, device number 17 [ 217.121847][ T30] audit: type=1400 audit(1785299315.527:587): avc: denied { node_bind } for pid=7668 comm="syz.1.451" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 217.229973][ T24] appletouch 5-1:0.85: input: appletouch disconnected [ 217.365410][ T7373] veth0_vlan: entered promiscuous mode [ 217.380080][ T30] audit: type=1400 audit(1785299316.407:588): avc: denied { write } for pid=7685 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.425468][ T7373] veth1_vlan: entered promiscuous mode [ 217.552606][ T7373] veth0_macvtap: entered promiscuous mode [ 217.613894][ T5272] 8021q: adding VLAN 0 to HW filter on device eth10 [ 217.741504][ T7373] veth1_macvtap: entered promiscuous mode [ 218.028876][ T7373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.063919][ T7373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.116517][ T136] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.150716][ T136] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.185510][ T136] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.201251][ T136] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.399813][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.428728][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.549145][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.580321][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.609830][ T7727] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 218.625821][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 218.625834][ T30] audit: type=1400 audit(1785299317.657:590): avc: denied { mounton } for pid=7373 comm="syz-executor" path="/root/syzkaller.p7J4Ty/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 218.662581][ T30] audit: type=1400 audit(1785299317.657:591): avc: denied { mounton } for pid=7373 comm="syz-executor" path="/root/syzkaller.p7J4Ty/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 218.692156][ T30] audit: type=1400 audit(1785299317.727:592): avc: denied { mounton } for pid=7373 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 218.714941][ T7432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.853124][ T5764] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 219.014293][ T5764] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 219.041292][ T5764] usb 5-1: config 0 interface 0 has no altsetting 0 [ 219.067778][ T5764] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 219.080552][ T7432] veth0_vlan: entered promiscuous mode [ 219.114739][ T7432] veth1_vlan: entered promiscuous mode [ 219.117893][ T5764] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.157406][ T5764] usb 5-1: config 0 descriptor?? [ 219.174909][ T7727] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 219.263264][ T30] audit: type=1400 audit(1785299318.287:593): avc: denied { write } for pid=7718 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.981546][ T30] audit: type=1400 audit(1785299319.007:594): avc: denied { append } for pid=7726 comm="syz.4.462" name="comedi1" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 220.340557][ T7432] veth0_macvtap: entered promiscuous mode [ 220.363269][ T5764] usbhid 5-1:0.0: can't add hid device: -71 [ 220.369366][ T5764] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 220.382965][ T7755] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 220.415548][ T5764] usb 5-1: USB disconnect, device number 18 [ 220.445883][ T7432] veth1_macvtap: entered promiscuous mode [ 220.790277][ T30] audit: type=1400 audit(1785299319.817:595): avc: denied { write } for pid=7756 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.801342][ T7432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.924766][ T7432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.981316][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.001262][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.027184][ T5272] 8021q: adding VLAN 0 to HW filter on device eth11 [ 221.046170][ T6026] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.061121][ T6026] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.102481][ T4989] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 221.203032][ T5722] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 221.270101][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.291842][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.299291][ T4989] usb 3-1: Using ep0 maxpacket: 16 [ 221.308726][ T4989] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.378970][ T4989] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 221.404524][ T5722] usb 7-1: Using ep0 maxpacket: 16 [ 221.448361][ T4989] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 221.462822][ T5722] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.497977][ T4989] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 221.509252][ T5722] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 221.747708][ T4989] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.765691][ T5722] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 221.801548][ T7783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.816399][ T6026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.824867][ T5722] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 221.838409][ T6026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.841242][ T4989] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 221.878501][ T5722] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.882567][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 221.894341][ T4989] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 221.925094][ T5722] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 221.943221][ T4989] usb 3-1: Manufacturer: syz [ 221.954134][ T4989] usb 3-1: config 0 descriptor?? [ 221.960612][ T5722] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 221.973612][ T5722] usb 7-1: Manufacturer: syz [ 222.005071][ T5722] usb 7-1: config 0 descriptor?? [ 222.062609][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 222.237922][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.289648][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 222.322099][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 222.336424][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 222.353829][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.372152][ T5722] rc_core: IR keymap rc-hauppauge not found [ 222.388994][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 222.391083][ T5722] Registered IR keymap rc-empty [ 222.404880][ T4989] rc_core: IR keymap rc-hauppauge not found [ 222.408888][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 222.410789][ T4989] Registered IR keymap rc-empty [ 222.410897][ T4989] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 222.431050][ T5722] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 222.447821][ T10] usb 5-1: Manufacturer: syz [ 222.457137][ T30] audit: type=1400 audit(1785299321.487:596): avc: denied { write } for pid=7785 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.483236][ T5722] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 222.484670][ T10] usb 5-1: config 0 descriptor?? [ 222.496999][ T4989] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 222.533433][ T5722] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc1 [ 222.547035][ T4989] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 222.573616][ T5722] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc1/input14 [ 222.591154][ T4989] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input13 [ 222.623775][ T5722] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 222.637859][ T4989] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 222.654791][ T30] audit: type=1400 audit(1785299321.687:597): avc: denied { write } for pid=7810 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.690672][ T5722] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 222.701302][ T4989] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 222.756311][ T5722] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 222.766675][ T4989] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 222.787625][ T5272] 8021q: adding VLAN 0 to HW filter on device eth12 [ 222.804619][ T5722] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 222.812642][ T4989] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 222.843538][ T5722] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 222.851910][ T4989] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 222.883480][ T5722] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 222.890796][ T4989] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 222.936430][ T10] rc_core: IR keymap rc-hauppauge not found [ 222.952397][ T5722] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 222.956420][ T10] Registered IR keymap rc-empty [ 222.960514][ T4989] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 222.978354][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 222.992421][ T5722] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 223.007313][ T4989] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 223.117082][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 223.132401][ T5722] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 226.389099][ T4989] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.412657][ T4989] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.420111][ T5722] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 226.468647][ T4989] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 226.567491][ T10] rc rc2: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc2 [ 226.581254][ T5722] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 226.632653][ T4989] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 226.653772][ T5722] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 226.699969][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc2/input15 [ 226.735482][ T4989] usb 3-1: USB disconnect, device number 13 [ 226.761669][ T5722] usb 7-1: USB disconnect, device number 2 [ 226.775835][ T7836] netlink: 76 bytes leftover after parsing attributes in process `syz.7.474'. [ 226.785118][ T30] audit: type=1400 audit(1785299325.807:598): avc: denied { map } for pid=7832 comm="syz.7.474" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 226.785180][ T30] audit: type=1400 audit(1785299325.807:599): avc: denied { execute } for pid=7832 comm="syz.7.474" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 226.843942][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 226.895797][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 226.969304][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 227.022768][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 227.062622][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 227.115482][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 227.166846][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 227.195211][ T30] audit: type=1800 audit(1785299326.227:600): pid=7842 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.4.478" name="/1//deleted" dev="devpts" ino=4 res=0 errno=0 [ 227.264575][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 227.404353][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 227.465276][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 227.512355][ T4989] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 227.518969][ T10] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 227.589734][ T10] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 227.639831][ T10] usb 5-1: USB disconnect, device number 19 [ 227.683060][ T4989] usb 3-1: Using ep0 maxpacket: 16 [ 227.711423][ T4989] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 227.763279][ T4989] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 228.072818][ T4989] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 228.088074][ T4989] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 228.123848][ T4989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.160707][ T4989] usb 3-1: Product: syz [ 228.172666][ T4989] usb 3-1: Manufacturer: syz [ 228.189957][ T4989] usb 3-1: SerialNumber: syz [ 229.203177][ T7831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.246685][ T806] usb 3-1: USB disconnect, device number 14 [ 229.353850][ T7865] mmap: syz.4.481 (7865): VmData 25837568 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 229.622687][ T4989] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 229.757579][ T30] audit: type=1400 audit(1785299328.787:601): avc: denied { write } for pid=7875 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.892451][ T4989] usb 8-1: Using ep0 maxpacket: 16 [ 229.917798][ T4989] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.947302][ T4989] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 230.072742][ T4989] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 230.092113][ T4989] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 230.102583][ T4989] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.612379][ T30] audit: type=1400 audit(1785299329.637:602): avc: denied { write } for pid=7896 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.933558][ T4989] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 230.990724][ T4989] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 231.031415][ T4989] usb 8-1: Manufacturer: syz [ 231.052680][ T4989] usb 8-1: config 0 descriptor?? [ 231.070587][ T5624] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 231.364016][ T4989] rc_core: IR keymap rc-hauppauge not found [ 231.390864][ T4989] Registered IR keymap rc-empty [ 231.410190][ T4989] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 231.442557][ T4989] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 231.464702][ T4989] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 231.496802][ T4989] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input16 [ 231.522217][ T4989] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 231.544138][ T4989] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 231.562429][ T5743] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 231.582497][ T4989] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 231.601291][ T30] audit: type=1400 audit(1785299330.627:603): avc: denied { write } for pid=7905 comm="syz.6.488" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 231.635214][ T4989] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 231.662440][ T4989] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 231.693148][ T4989] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 231.723927][ T4989] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 231.742487][ T4989] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 231.763067][ T5743] usb 5-1: unable to get BOS descriptor or descriptor too short [ 231.773307][ T4989] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 231.783518][ T5743] usb 5-1: not running at top speed; connect to a high speed hub [ 231.805503][ T5743] usb 5-1: config 1 has an invalid descriptor of length 192, skipping remainder of the config [ 231.827003][ T4989] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 231.832372][ T5743] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 231.868063][ T30] audit: type=1400 audit(1785299330.887:604): avc: denied { wake_alarm } for pid=7920 comm="syz.1.493" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 231.892341][ T4989] mceusb 8-1:0.0: Registered with mce emulator interface version 1 [ 231.904007][ T4989] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 231.912364][ T5743] usb 5-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 231.912397][ T5743] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.912418][ T5743] usb 5-1: Product: syz [ 231.912434][ T5743] usb 5-1: Manufacturer: syz [ 231.912449][ T5743] usb 5-1: SerialNumber: syz [ 231.980554][ T4989] usb 8-1: USB disconnect, device number 2 [ 232.156018][ T30] audit: type=1400 audit(1785299331.187:605): avc: denied { read } for pid=7927 comm="syz.2.495" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 232.222169][ T7931] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 232.416950][ T30] audit: type=1400 audit(1785299331.207:606): avc: denied { open } for pid=7927 comm="syz.2.495" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 232.666185][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 232.856293][ T5743] usb 5-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8213); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 232.974183][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 233.090706][ T5743] usb 5-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 233.175777][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 233.207853][ T10] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 233.255493][ T10] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 233.321953][ T10] usb 3-1: config 4 has no interface number 0 [ 233.368583][ T10] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 233.386533][ T5743] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 233.497497][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.536636][ T10] usb 3-1: Product: syz [ 234.331082][ T10] usb 3-1: Manufacturer: syz [ 234.338684][ T5743] usb 5-1: USB disconnect, device number 20 [ 234.344712][ T10] usb 3-1: SerialNumber: syz [ 234.455017][ T6801] udevd[6801]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.626211][ T30] audit: type=1400 audit(1785299333.657:607): avc: denied { ioctl } for pid=7958 comm="syz.4.501" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 234.914208][ T4989] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 235.011576][ T10] uvcvideo 3-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 235.034610][ T10] uvcvideo 3-1:4.147: No valid video chain found. [ 235.060354][ T10] usb 3-1: USB disconnect, device number 15 [ 235.072880][ T4989] usb 5-1: device descriptor read/64, error -71 [ 235.186249][ T30] audit: type=1400 audit(1785299334.217:608): avc: denied { write } for pid=7938 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.343567][ T30] audit: type=1400 audit(1785299334.377:609): avc: denied { read } for pid=7984 comm="syz.7.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 235.421692][ T30] audit: type=1400 audit(1785299334.417:610): avc: denied { write } for pid=7983 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.445446][ T4989] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 236.062375][ T4989] usb 5-1: device descriptor read/64, error -71 [ 236.282144][ T4989] usb usb5-port1: attempt power cycle [ 237.205598][ T4989] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 237.386661][ T4989] usb 5-1: device descriptor read/8, error -71 [ 237.750371][ T8023] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 237.756914][ T8023] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 237.972496][ T8023] vhci_hcd vhci_hcd.0: Device attached [ 237.988409][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 238.172514][ T4989] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 238.221334][ T4989] usb 5-1: Using ep0 maxpacket: 16 [ 238.292954][ T8026] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 238.326774][ T4989] usb 5-1: unable to get BOS descriptor or descriptor too short [ 238.395561][ T36] vhci_hcd vhci_hcd.4: stop threads [ 238.411953][ T4989] usb 5-1: no configurations [ 238.420547][ T36] vhci_hcd vhci_hcd.4: release socket [ 238.427737][ T4989] usb 5-1: can't read configurations, error -22 [ 238.434596][ T36] vhci_hcd vhci_hcd.4: disconnect device [ 238.441993][ T4989] usb usb5-port1: unable to enumerate USB device [ 238.582484][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 238.658856][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.673975][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 238.688370][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 238.698390][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 238.708365][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.834358][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 238.844908][ T10] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 238.853588][ T10] usb 7-1: Manufacturer: syz [ 239.267766][ T30] audit: type=1400 audit(1785299338.297:611): avc: denied { mmap_zero } for pid=8041 comm="syz.1.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 239.298071][ T10] usb 7-1: config 0 descriptor?? [ 239.914926][ T10] usb 7-1: can't set config #0, error -71 [ 239.954361][ T10] usb 7-1: USB disconnect, device number 3 [ 241.852383][ T10] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 241.907030][ T30] audit: type=1400 audit(1785299340.917:612): avc: denied { write } for pid=8046 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.030419][ T30] audit: type=1400 audit(1785299341.057:613): avc: denied { write } for pid=8081 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.067581][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 242.082923][ T10] usb 7-1: not running at top speed; connect to a high speed hub [ 242.107712][ T10] usb 7-1: config 1 has an invalid descriptor of length 192, skipping remainder of the config [ 242.140055][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.162440][ T10] usb 7-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 242.174404][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.182364][ T29] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 242.268254][ T10] usb 7-1: Product: syz [ 242.321484][ T10] usb 7-1: Manufacturer: syz [ 242.361870][ T10] usb 7-1: SerialNumber: syz [ 242.771777][ T10] usb 7-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8213); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 242.815264][ T10] usb 7-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 242.935542][ T10] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 242.972149][ T10] usb 7-1: USB disconnect, device number 4 [ 242.982859][ T30] audit: type=1400 audit(1785299342.017:614): avc: denied { connect } for pid=8097 comm="syz.7.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 243.043326][ T6801] udevd[6801]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.090222][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 243.103895][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.114406][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 243.131863][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 243.141575][ T29] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 243.645596][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 243.673403][ T29] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 243.683563][ T29] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 243.704499][ T29] usb 5-1: Manufacturer: syz [ 243.714951][ T29] usb 5-1: config 0 descriptor?? [ 243.861656][ T30] audit: type=1400 audit(1785299342.807:615): avc: denied { write } for pid=8087 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.948435][ T30] audit: type=1400 audit(1785299342.977:616): avc: denied { write } for pid=8111 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.107043][ T29] rc_core: IR keymap rc-hauppauge not found [ 244.110668][ T30] audit: type=1400 audit(1785299343.137:617): avc: denied { getopt } for pid=8120 comm="syz.1.533" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 244.150829][ T29] Registered IR keymap rc-empty [ 244.188840][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 244.277894][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 245.041732][ T29] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 245.447659][ T29] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input17 [ 245.461485][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 245.483810][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 245.512458][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 245.542830][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 245.582467][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 245.622630][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 245.672422][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 245.724601][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 245.754831][ T30] audit: type=1400 audit(1785299344.777:618): avc: denied { create } for pid=8144 comm="syz.1.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 245.772391][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 245.832456][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 245.878564][ T29] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 245.898573][ T29] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 246.733961][ T29] usb 5-1: USB disconnect, device number 25 [ 247.792325][ T30] audit: type=1400 audit(1785299346.817:619): avc: denied { write } for pid=8140 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.888292][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 248.017001][ T30] audit: type=1400 audit(1785299347.047:620): avc: denied { write } for pid=8175 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.044250][ T30] audit: type=1400 audit(1785299348.067:621): avc: denied { read } for pid=8181 comm="syz.4.545" name="usbmon6" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 249.157361][ T30] audit: type=1400 audit(1785299348.067:622): avc: denied { open } for pid=8181 comm="syz.4.545" path="/dev/usbmon6" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 249.163164][ T8186] libceph: resolve '.RHe'ˠ/1C~1WexEAeSb{~R' (ret=-3): failed [ 249.243182][ T30] audit: type=1400 audit(1785299348.077:623): avc: denied { ioctl } for pid=8181 comm="syz.4.545" path="/dev/usbmon6" dev="devtmpfs" ino=735 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 249.291374][ T30] audit: type=1400 audit(1785299348.127:624): avc: denied { watch } for pid=8181 comm="syz.4.545" path="/118/file5" dev="tmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 249.342170][ T30] audit: type=1400 audit(1785299348.127:625): avc: denied { watch_sb watch_reads } for pid=8181 comm="syz.4.545" path="/118/file5" dev="tmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 249.409574][ T30] audit: type=1400 audit(1785299348.127:626): avc: denied { watch_mount } for pid=8181 comm="syz.4.545" path="/118/file5" dev="tmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 249.739924][ T30] audit: type=1400 audit(1785299348.767:627): avc: denied { write } for pid=8203 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.991358][ T10] IPVS: starting estimator thread 0... [ 250.021836][ T8218] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 250.232474][ T8217] IPVS: using max 33 ests per chain, 79200 per kthread [ 250.957447][ T8235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.120365][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 251.120382][ T30] audit: type=1400 audit(1785299350.147:629): avc: denied { write } for pid=8227 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.989138][ T30] audit: type=1400 audit(1785299351.017:630): avc: denied { write } for pid=8257 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.345696][ T30] audit: type=1400 audit(1785299351.377:631): avc: denied { create } for pid=8263 comm="syz.7.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 252.496518][ T30] audit: type=1400 audit(1785299351.417:632): avc: denied { getopt } for pid=8263 comm="syz.7.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 253.500480][ T4926] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 253.510599][ T4926] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 253.532132][ T4926] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 253.551123][ T4926] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 253.559093][ T4926] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 253.687388][ T30] audit: type=1326 audit(1785299352.717:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.7.563" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff2d9de99 code=0x7ffc0000 [ 253.747580][ T30] audit: type=1326 audit(1785299352.717:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.7.563" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff2d9de99 code=0x7ffc0000 [ 253.828777][ T30] audit: type=1326 audit(1785299352.747:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.7.563" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff2d9de99 code=0x7ffc0000 [ 253.960159][ T30] audit: type=1326 audit(1785299352.747:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.7.563" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff2d9de99 code=0x7ffc0000 [ 254.069685][ T30] audit: type=1326 audit(1785299352.747:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.7.563" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff2d9de99 code=0x7ffc0000 [ 254.207418][ T8303] trusted_key: syz.6.565 sent an empty control message without MSG_MORE. [ 254.387262][ T30] audit: type=1326 audit(1785299352.767:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.7.563" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ff2d9de99 code=0x7ffc0000 [ 255.405351][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.444162][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.716542][ T4926] Bluetooth: hci5: command tx timeout [ 256.680152][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 256.680168][ T30] audit: type=1400 audit(1785299355.697:676): avc: denied { write } for pid=8320 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.118931][ T8337] (syz.7.571,8337,1):ocfs2_get_sector:1713 ERROR: status = -5 [ 257.130719][ T6026] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.166674][ T8337] (syz.7.571,8337,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 257.206012][ T8337] (syz.7.571,8337,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 257.215163][ T30] audit: type=1400 audit(1785299356.237:677): avc: denied { write } for pid=8336 comm="syz.7.571" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 257.292436][ T8337] (syz.7.571,8337,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 257.326070][ T6026] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.663212][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.695083][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.804121][ T4926] Bluetooth: hci5: command tx timeout [ 258.761691][ T30] audit: type=1400 audit(1785299357.527:678): avc: denied { bind } for pid=8345 comm="syz.7.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 259.230209][ T8283] bridge_slave_0: entered allmulticast mode [ 259.252663][ T8283] bridge_slave_0: entered promiscuous mode [ 259.283241][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.327497][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.355381][ T8283] bridge_slave_1: entered allmulticast mode [ 259.373554][ T8283] bridge_slave_1: entered promiscuous mode [ 259.432043][ T8353] netlink: 63 bytes leftover after parsing attributes in process `syz.7.573'. [ 259.465556][ T6026] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.540711][ T8283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.560836][ T8283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.574492][ T6026] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.674715][ T8283] team0: Port device team_slave_0 added [ 259.702638][ T8283] team0: Port device team_slave_1 added [ 259.742452][ T9] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 259.787042][ T8283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.803553][ T8283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.845327][ T8283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.892564][ T9] usb 8-1: device descriptor read/64, error -71 [ 259.899069][ T4926] Bluetooth: hci5: command tx timeout [ 259.971019][ T8283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.013855][ T8283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.071859][ T8283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.152808][ T9] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 260.218858][ T8283] hsr_slave_0: entered promiscuous mode [ 260.234665][ T8283] hsr_slave_1: entered promiscuous mode [ 260.247040][ T8283] debugfs: 'hsr0' already exists in 'hsr' [ 260.256671][ T8374] sctp: [Deprecated]: syz.6.581 (pid 8374) Use of int in max_burst socket option deprecated. [ 260.256671][ T8374] Use struct sctp_assoc_value instead [ 260.272473][ T8283] Cannot create hsr debugfs directory [ 260.305075][ T9] usb 8-1: device descriptor read/64, error -71 [ 260.443446][ T9] usb usb8-port1: attempt power cycle [ 260.500546][ T6026] bridge_slave_1: left allmulticast mode [ 260.512762][ T6026] bridge_slave_1: left promiscuous mode [ 260.519063][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.536830][ T6026] bridge_slave_0: left allmulticast mode [ 260.547764][ T6026] bridge_slave_0: left promiscuous mode [ 260.557734][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.762229][ T30] audit: type=1400 audit(1785299359.787:679): avc: denied { write } for pid=8375 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.813597][ T9] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 260.848363][ T9] usb 8-1: device descriptor read/8, error -71 [ 260.906742][ T30] audit: type=1400 audit(1785299359.937:680): avc: denied { write } for pid=8391 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.942823][ T6026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.965935][ T6026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.983437][ T6026] bond0 (unregistering): Released all slaves [ 261.070069][ T5272] 8021q: adding VLAN 0 to HW filter on device eth13 [ 261.102927][ T9] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 261.159362][ T9] usb 8-1: device descriptor read/8, error -71 [ 262.292601][ T4926] Bluetooth: hci5: command tx timeout [ 262.340125][ T9] usb usb8-port1: unable to enumerate USB device [ 262.708366][ T8406] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 262.733562][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 262.992865][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 263.008513][ T9] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 263.027388][ T9] usb 7-1: config 1 descriptor has 1 excess byte, ignoring [ 263.044941][ T9] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 263.559830][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 263.574520][ T8420] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 263.577852][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.603374][ T9] usb 7-1: Product: syz [ 263.616114][ T9] usb 7-1: Manufacturer: syz [ 263.713962][ T9] usb 7-1: SerialNumber: syz [ 263.786983][ T30] audit: type=1400 audit(1785299362.817:681): avc: denied { write } for pid=8404 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.816492][ T6026] hsr_slave_0: left promiscuous mode [ 263.846836][ T6026] hsr_slave_1: left promiscuous mode [ 263.855151][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.895594][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.929568][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.951995][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.007340][ T30] audit: type=1400 audit(1785299363.037:682): avc: denied { write } for pid=8434 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.060387][ T6026] veth1_macvtap: left promiscuous mode [ 264.081042][ T6026] veth0_macvtap: left promiscuous mode [ 264.104892][ T6026] veth1_vlan: left promiscuous mode [ 264.126769][ T6026] veth0_vlan: left promiscuous mode [ 264.557096][ T8400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.629356][ T10] usb 7-1: USB disconnect, device number 5 [ 267.592199][ T6026] team0 (unregistering): Port device team_slave_1 removed [ 267.799090][ T8462] ip6t_srh: unknown srh match flags FF3F [ 267.857080][ T6026] team0 (unregistering): Port device team_slave_0 removed [ 267.923619][ T30] audit: type=1400 audit(1785299366.957:683): avc: denied { getopt } for pid=8461 comm="syz.1.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 268.070445][ T30] audit: type=1326 audit(1785299367.097:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8464 comm="syz.7.599" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ff2d9de99 code=0x0 [ 268.254517][ T5272] 8021q: adding VLAN 0 to HW filter on device eth14 [ 268.454735][ T8283] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 268.484290][ T8283] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 268.520041][ T8283] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 268.563011][ T8283] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 268.592980][ T8283] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 268.625549][ T8283] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 268.637692][ T8283] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 268.657180][ T8283] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 268.922478][ T8283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.989717][ T8283] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.058646][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.065730][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.107350][ T6026] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.114447][ T6026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.241821][ T8500] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 272.557418][ T30] audit: type=1400 audit(1785299371.587:685): avc: denied { write } for pid=8479 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.710118][ T30] audit: type=1400 audit(1785299371.737:686): avc: denied { write } for pid=8530 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.866867][ T5272] 8021q: adding VLAN 0 to HW filter on device eth15 [ 272.963725][ T30] audit: type=1400 audit(1785299371.987:687): avc: denied { shutdown } for pid=8542 comm="syz.4.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 273.059497][ T8283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.364303][ T8550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 274.746972][ T5818] IPVS: starting estimator thread 0... [ 274.761333][ T8533] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 274.785087][ T8563] netlink: 52 bytes leftover after parsing attributes in process `syz.6.621'. [ 274.844588][ T8567] IPVS: using max 65 ests per chain, 156000 per kthread [ 275.002451][ T4989] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 275.253262][ T4989] usb 8-1: Using ep0 maxpacket: 16 [ 275.307265][ T4989] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 275.434776][ T4989] usb 8-1: config 1 descriptor has 1 excess byte, ignoring [ 275.467356][ T4989] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 275.500928][ T4989] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 275.525332][ T4989] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.552532][ T4989] usb 8-1: Product: syz [ 275.569305][ T4989] usb 8-1: Manufacturer: syz [ 275.583360][ T4989] usb 8-1: SerialNumber: syz [ 275.605390][ T8283] veth0_vlan: entered promiscuous mode [ 275.639275][ T8283] veth1_vlan: entered promiscuous mode [ 275.717686][ T8283] veth0_macvtap: entered promiscuous mode [ 275.744420][ T30] audit: type=1400 audit(1785299374.717:688): avc: denied { write } for pid=8548 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.793711][ T8283] veth1_macvtap: entered promiscuous mode [ 275.974380][ T8283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.989656][ T8283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.026220][ T7830] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.652814][ T7830] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.952465][ T6026] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.996980][ T6026] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.012833][ T30] audit: type=1400 audit(1785299376.027:689): avc: denied { write } for pid=8591 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.140965][ T8596] netlink: 'syz.1.627': attribute type 4 has an invalid length. [ 277.255064][ T30] audit: type=1400 audit(1785299376.257:690): avc: denied { write } for pid=8560 comm="syz.6.621" name="usb_gadget" dev="configfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 277.342543][ T5272] 8021q: adding VLAN 0 to HW filter on device eth16 [ 277.350110][ T5898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.915853][ T5898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.081621][ T30] audit: type=1400 audit(1785299376.257:691): avc: denied { create } for pid=8560 comm="syz.6.621" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 278.150098][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.182834][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.528081][ T30] audit: type=1400 audit(1785299377.557:692): avc: denied { read } for pid=8603 comm="syz.1.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 279.887378][ T30] audit: type=1400 audit(1785299378.857:693): avc: denied { connect } for pid=8616 comm="syz.4.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 284.630610][ T24] usb 8-1: USB disconnect, device number 7 [ 285.143857][ T30] audit: type=1400 audit(1785299384.177:694): avc: denied { write } for pid=8662 comm="syz.6.640" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 285.269263][ T30] audit: type=1400 audit(1785299384.177:695): avc: denied { open } for pid=8662 comm="syz.6.640" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 287.094769][ T4926] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 287.242960][ T30] audit: type=1400 audit(1785299386.087:696): avc: denied { append } for pid=8685 comm="syz.7.645" name="sg0" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 287.667840][ T30] audit: type=1400 audit(1785299386.697:697): avc: denied { write } for pid=8640 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.351944][ T8709] fuse: fd is not a fuse device [ 288.900415][ T30] audit: type=1400 audit(1785299387.927:698): avc: denied { write } for pid=8710 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.023758][ T8726] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 289.529809][ T8745] netlink: 28 bytes leftover after parsing attributes in process `syz.8.658'. [ 289.822475][ T8747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=8747 comm=syz.8.658 [ 290.139946][ T30] audit: type=1400 audit(1785299389.167:699): avc: denied { read } for pid=8737 comm="syz.8.658" name="event0" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 290.740632][ T8763] netlink: 63 bytes leftover after parsing attributes in process `syz.7.664'. [ 291.225750][ T4926] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 291.234386][ T4926] Bluetooth: hci1: Injecting HCI hardware error event [ 291.244271][ T4926] Bluetooth: hci1: hardware error 0x00 [ 292.349771][ T8766] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 292.357023][ T8766] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 292.989915][ T30] audit: type=1400 audit(1785299391.987:700): avc: denied { create } for pid=8771 comm="syz.6.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 293.011542][ T8776] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 293.030574][ T30] audit: type=1400 audit(1785299391.987:701): avc: denied { write } for pid=8771 comm="syz.6.666" path="socket:[21688]" dev="sockfs" ino=21688 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 293.686399][ T4926] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 293.882494][ T30] audit: type=1400 audit(1785299391.997:702): avc: denied { ioctl } for pid=8771 comm="syz.6.666" path="socket:[21688]" dev="sockfs" ino=21688 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 294.150976][ T30] audit: type=1400 audit(1785299393.177:703): avc: denied { write } for pid=8739 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.537741][ T30] audit: type=1400 audit(1785299393.567:704): avc: denied { write } for pid=8794 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.530434][ T30] audit: type=1400 audit(1785299396.557:705): avc: denied { ioctl } for pid=8839 comm="syz.7.682" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 297.550780][ T8840] input: syz0 as /devices/virtual/input/input18 [ 297.617303][ T8843] netlink: 28 bytes leftover after parsing attributes in process `syz.4.679'. [ 297.626336][ T8843] netlink: 28 bytes leftover after parsing attributes in process `syz.4.679'. [ 299.359339][ T8840] input: failed to attach handler evdev to device input18, error: -4 [ 300.865025][ T8870] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 301.882353][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 302.124929][ T8880] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 302.589988][ T30] audit: type=1400 audit(1785299401.617:706): avc: denied { write } for pid=8882 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.294458][ T30] audit: type=1400 audit(1785299402.317:707): avc: denied { mounton } for pid=8911 comm="syz.4.699" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 303.493671][ T30] audit: type=1400 audit(1785299402.497:708): avc: denied { write } for pid=8920 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.591946][ T8934] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 304.657174][ T8934] netlink: 'syz.7.701': attribute type 1 has an invalid length. [ 304.681803][ T8934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=8934 comm=syz.7.701 [ 304.739733][ T30] audit: type=1400 audit(1785299403.767:709): avc: denied { setopt } for pid=8933 comm="syz.7.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 304.836351][ T30] audit: type=1400 audit(1785299403.767:710): avc: denied { nlmsg_read } for pid=8933 comm="syz.7.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 305.473837][ T30] audit: type=1400 audit(1785299404.507:711): avc: denied { write } for pid=8938 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.667031][ T5764] IPVS: starting estimator thread 0... [ 305.712446][ T8968] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 305.963066][ T8967] IPVS: using max 35 ests per chain, 84000 per kthread [ 306.067407][ T7830] Bluetooth: (null): Invalid header checksum [ 306.137710][ T30] audit: type=1400 audit(1785299405.167:712): avc: denied { write } for pid=8970 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.172740][ T465] Bluetooth: (null): Invalid header checksum [ 306.283463][ T7830] Bluetooth: (null): Invalid header checksum [ 306.339415][ T8973] Cannot find set identified by id 0 to match [ 306.404596][ T7830] Bluetooth: (null): Invalid header checksum [ 308.578334][ T9004] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 308.964231][ T30] audit: type=1400 audit(1785299407.957:713): avc: denied { ioctl } for pid=9003 comm="syz.6.718" path="socket:[22055]" dev="sockfs" ino=22055 ioctlcmd=0x8954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 309.642338][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 310.335453][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 311.446938][ T9028] trusted_key: encrypted_key: master key parameter 's옼[׽oX4)yh͈cM2 [ 311.446938][ T9028] L,tjr['Wo6H7ҵMJIlq~7=ҮHwpR],y/^' is invalid [ 311.499527][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 311.505070][ T9002] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 311.588743][ T24] usb 9-1: device descriptor read/all, error -71 [ 313.129164][ T4926] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 313.152558][ T4926] Bluetooth: hci4: Injecting HCI hardware error event [ 313.166342][ T5624] Bluetooth: hci4: hardware error 0x00 [ 313.650313][ T30] audit: type=1400 audit(1785299411.867:714): avc: denied { write } for pid=8978 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.897623][ T30] audit: type=1400 audit(1785299413.917:715): avc: denied { write } for pid=9052 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 315.158885][ T9063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.729'. [ 315.339921][ T9066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.862903][ T806] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 316.043907][ T806] usb 5-1: Using ep0 maxpacket: 8 [ 316.097123][ T5624] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 316.130214][ T806] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 316.220690][ T806] usb 5-1: config 179 has no interface number 0 [ 316.230971][ T806] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 316.263054][ T806] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 316.300896][ T806] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 316.414820][ T806] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 316.686204][ T806] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 316.803812][ T806] usb 5-1: config 179 interface 65 has no altsetting 0 [ 316.811181][ T806] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 316.820259][ T806] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.851238][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.859432][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.122666][ T30] audit: type=1400 audit(1785299416.087:716): avc: denied { read } for pid=9091 comm="syz.8.734" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 317.917787][ T9100] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 317.982473][ T806] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input19 [ 318.556162][ T4961] input input19: unable to receive magic message: -71 [ 318.629001][ T4961] input input19: unable to receive magic message: -71 [ 318.681876][ T806] usb 5-1: USB disconnect, device number 26 [ 318.687903][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 318.687958][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 319.860152][ T9117] binder: 9107:9117 unknown command 0 [ 319.865819][ T30] audit: type=1400 audit(1785299418.877:717): avc: denied { map } for pid=9107 comm="syz.4.739" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 319.892008][ T9117] binder: 9107:9117 ioctl c0306201 2000000001c0 returned -22 [ 320.003103][ T9118] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 320.102782][ T30] audit: type=1400 audit(1785299418.887:718): avc: denied { call } for pid=9107 comm="syz.4.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 321.024594][ T29] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 321.082346][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 321.405223][ T29] usb 9-1: Using ep0 maxpacket: 16 [ 321.494030][ T30] audit: type=1400 audit(1785299418.887:719): avc: denied { transfer } for pid=9107 comm="syz.4.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 321.513136][ T30] audit: type=1400 audit(1785299419.387:720): avc: denied { append } for pid=9122 comm="syz.6.742" name="demux0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 321.538340][ T30] audit: type=1400 audit(1785299419.487:721): avc: denied { read } for pid=9122 comm="syz.6.742" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 321.542775][ T29] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.561314][ T30] audit: type=1400 audit(1785299419.487:722): avc: denied { open } for pid=9122 comm="syz.6.742" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 321.561362][ T30] audit: type=1400 audit(1785299419.517:723): avc: denied { ioctl } for pid=9122 comm="syz.6.742" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 321.707592][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 321.720218][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 321.769964][ T29] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 321.776082][ T30] audit: type=1400 audit(1785299420.407:724): avc: denied { mounton } for pid=9128 comm="syz.7.744" path="/62/file1/file0" dev="autofs" ino=22212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 321.781683][ T5624] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 321.813702][ T5624] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 321.822370][ T29] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 321.844731][ T29] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 321.854618][ T29] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 321.862704][ T29] usb 9-1: Manufacturer: syz [ 321.873301][ T29] usb 9-1: config 0 descriptor?? [ 322.062460][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 322.463538][ T9152] misc userio: Invalid payload size [ 322.503325][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 322.557179][ T30] audit: type=1400 audit(1785299420.847:725): avc: denied { write } for pid=9089 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.581526][ T30] audit: type=1400 audit(1785299421.397:726): avc: denied { write } for pid=9141 comm="syz.4.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 322.665970][ T9] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 323.118415][ T9] usb 7-1: config 1 descriptor has 1 excess byte, ignoring [ 323.126300][ T9] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 323.137325][ T30] audit: type=1400 audit(1785299421.587:727): avc: denied { write } for pid=9150 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 323.167560][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 323.176691][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.211751][ T9] usb 7-1: Product: syz [ 323.234503][ T9] usb 7-1: Manufacturer: syz [ 323.298110][ T9] usb 7-1: SerialNumber: syz [ 323.443568][ T29] rc_core: IR keymap rc-hauppauge not found [ 323.472445][ T29] Registered IR keymap rc-empty [ 323.578354][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 323.705230][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 323.938236][ T29] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 324.050641][ T29] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input20 [ 324.196622][ T9143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.224810][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 324.279165][ T806] usb 7-1: USB disconnect, device number 6 [ 324.286351][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 324.352824][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 324.423137][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 324.503783][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 324.587866][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 324.647316][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 324.725735][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 324.900022][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 324.969811][ T5817] udevd[5817]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 325.006039][ T29] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 325.056006][ T29] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 325.091950][ T29] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 325.211888][ T29] usb 9-1: USB disconnect, device number 4 [ 325.894626][ T5624] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 325.906894][ T5624] Bluetooth: hci0: Injecting HCI hardware error event [ 325.925857][ T4926] Bluetooth: hci0: hardware error 0x00 [ 325.954018][ T5764] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 326.135430][ T30] audit: type=1400 audit(1785299425.167:728): avc: denied { create } for pid=9196 comm="syz.1.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 326.224911][ T5764] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.235903][ T5764] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 326.248897][ T5764] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 326.259808][ T5764] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.270915][ T5764] usb 5-1: config 0 descriptor?? [ 326.485179][ T5764] Bluetooth: Can't get state to change to load ram patch err [ 326.499283][ T5764] Bluetooth: Loading patch file failed [ 326.516114][ T5764] ath3k 5-1:0.0: probe with driver ath3k failed with error -32 [ 327.212671][ T30] audit: type=1400 audit(1785299426.237:729): avc: denied { write } for pid=9207 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 327.852120][ T30] audit: type=1400 audit(1785299426.397:730): avc: denied { ioctl } for pid=9223 comm="syz.1.765" path="socket:[22760]" dev="sockfs" ino=22760 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 328.045315][ T30] audit: type=1400 audit(1785299426.407:731): avc: denied { write } for pid=9223 comm="syz.1.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 328.123359][ T4926] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 328.216459][ T9218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.232910][ T30] audit: type=1400 audit(1785299427.257:732): avc: denied { write } for pid=9234 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.420570][ T9218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.433990][ T5818] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 329.536246][ T5818] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.568637][ T5818] usb 7-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 329.605160][ T5818] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.695128][ T5818] usb 7-1: config 0 descriptor?? [ 329.961139][ T9254] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 330.073474][ T30] audit: type=1400 audit(1785299429.097:733): avc: denied { write } for pid=9244 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 330.538518][ T30] audit: type=1400 audit(1785299429.567:734): avc: denied { write } for pid=9262 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 330.589413][ T9233] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 330.668316][ T9230] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode [ 330.677861][ T9230] mac80211_hwsim hwsim15 wlan0: entered allmulticast mode [ 330.706628][ T5818] usb 7-1: string descriptor 0 read error: -71 [ 330.744120][ T5818] cypress_m8 7-1:0.0: DeLorme Earthmate USB converter detected [ 330.772945][ T5818] earthmate ttyUSB0: required endpoint is missing [ 330.811578][ T5818] usb 7-1: USB disconnect, device number 7 [ 330.835609][ T5818] cypress_m8 7-1:0.0: device disconnected [ 330.996059][ T806] usb 5-1: USB disconnect, device number 27 [ 337.532219][ T9318] autofs: Unknown parameter 'fd0x0000000000000000' [ 337.545332][ T9318] fuse: fd is not a fuse device [ 339.624901][ T9340] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 340.089869][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.104674][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.114268][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.129454][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.139735][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.401894][ T30] audit: type=1400 audit(1785299439.427:735): avc: denied { setopt } for pid=9351 comm="syz.1.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 341.263098][ T30] audit: type=1400 audit(1785299439.457:736): avc: denied { write } for pid=9351 comm="syz.1.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 341.794596][ T1340] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.521666][ T4926] Bluetooth: hci2: command tx timeout [ 343.456545][ T1340] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.317959][ T1340] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.454604][ T1340] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.602420][ T5624] Bluetooth: hci2: command tx timeout [ 345.560687][ T9400] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 345.678429][ T1340] bridge_slave_1: left allmulticast mode [ 345.693990][ T1340] bridge_slave_1: left promiscuous mode [ 345.712819][ T1340] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.867645][ T1340] bridge_slave_0: left allmulticast mode [ 345.883399][ T1340] bridge_slave_0: left promiscuous mode [ 345.890971][ T1340] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.602442][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 346.863597][ T5624] Bluetooth: hci2: command tx timeout [ 347.377584][ T9413] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 348.056379][ T1340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.074188][ T1340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.084144][ T1340] bond0 (unregistering): Released all slaves [ 348.268204][ T5743] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 348.362494][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 348.430090][ T1340] hsr_slave_0: left promiscuous mode [ 348.432576][ T5743] usb 9-1: Using ep0 maxpacket: 16 [ 348.440801][ T1340] hsr_slave_1: left promiscuous mode [ 348.446715][ T1340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.452345][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 348.454161][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.473604][ T1340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.482365][ T5743] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.493125][ T5743] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 348.494778][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.511054][ T5743] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 348.522070][ T5743] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 348.546984][ T5743] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 348.562498][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 348.580039][ T1340] veth1_macvtap: left promiscuous mode [ 348.587779][ T5743] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 348.591200][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.597700][ T1340] veth0_macvtap: left promiscuous mode [ 348.622224][ T1340] veth1_vlan: left promiscuous mode [ 348.622340][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 348.639364][ T1340] veth0_vlan: left promiscuous mode [ 348.640014][ T5743] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 348.655105][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 348.664891][ T5743] usb 9-1: Manufacturer: syz [ 349.375090][ T5624] Bluetooth: hci2: command tx timeout [ 349.378859][ T30] audit: type=1400 audit(1785299447.697:737): avc: denied { write } for pid=9435 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.411107][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 349.444058][ T5743] usb 9-1: config 0 descriptor?? [ 349.467270][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.482055][ T5743] usb 9-1: can't set config #0, error -71 [ 349.514247][ T5743] usb 9-1: USB disconnect, device number 5 [ 349.538255][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 349.566116][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 349.584729][ T9] usb 5-1: Manufacturer: syz [ 349.601344][ T9] usb 5-1: config 0 descriptor?? [ 349.606570][ T30] audit: type=1400 audit(1785299448.637:738): avc: denied { write } for pid=9453 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.809601][ T1340] team0 (unregistering): Port device team_slave_1 removed [ 349.827826][ T1340] team0 (unregistering): Port device team_slave_0 removed [ 349.990176][ T9341] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.997495][ T9341] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.010948][ T9341] bridge_slave_0: entered allmulticast mode [ 350.039063][ T9341] bridge_slave_0: entered promiscuous mode [ 350.067298][ T5272] 8021q: adding VLAN 0 to HW filter on device eth17 [ 350.076734][ T9341] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.101506][ T9341] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.109549][ T9341] bridge_slave_1: entered allmulticast mode [ 350.145738][ T9341] bridge_slave_1: entered promiscuous mode [ 350.223040][ T9341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.237704][ T9341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.103037][ T9341] team0: Port device team_slave_0 added [ 351.114173][ T9] rc_core: IR keymap rc-hauppauge not found [ 351.137689][ T9] Registered IR keymap rc-empty [ 351.155588][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 351.160935][ T9341] team0: Port device team_slave_1 added [ 351.212401][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 351.320398][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 351.523808][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input21 [ 352.222982][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 352.295850][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 352.430406][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 352.564790][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 352.662727][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 352.739188][ T9341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.776409][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 352.810145][ T9341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.892833][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 353.042238][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 353.057935][ T9341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.112813][ T9341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.119762][ T9341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.146124][ T9341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.158981][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 353.202717][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 354.161287][ T9341] hsr_slave_0: entered promiscuous mode [ 354.164009][ T9] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 354.181166][ T9] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 354.190618][ T9341] hsr_slave_1: entered promiscuous mode [ 354.230706][ T9] usb 5-1: USB disconnect, device number 28 [ 354.273729][ T30] audit: type=1400 audit(1785299453.207:739): avc: denied { write } for pid=9464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.525802][ T30] audit: type=1400 audit(1785299454.557:740): avc: denied { write } for pid=9515 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.663274][ T5272] 8021q: adding VLAN 0 to HW filter on device eth19 [ 355.806664][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 355.988448][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 356.027195][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.090802][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 356.147267][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 356.188868][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 356.219352][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 356.262089][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 356.320741][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 356.402063][ T9] usb 5-1: Manufacturer: syz [ 356.545780][ T9] usb 5-1: config 0 descriptor?? [ 357.168396][ T9341] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 357.179964][ T9341] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 357.187101][ T9] rc_core: IR keymap rc-hauppauge not found [ 357.195071][ T9] Registered IR keymap rc-empty [ 357.200435][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 357.228488][ T9341] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 357.235331][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 357.245739][ T9341] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 357.266010][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 357.295456][ T9341] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 357.308813][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input22 [ 357.329229][ T9341] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 357.349096][ T9341] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 357.364559][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 357.399433][ T9341] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 357.423921][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 357.452578][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 357.473753][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 357.523082][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 357.552564][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 357.581368][ T30] audit: type=1400 audit(1785299456.607:741): avc: denied { write } for pid=9524 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 357.722685][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 357.730108][ T9341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.581735][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 359.004782][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 359.016126][ T9341] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.059208][ T9341] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 359.077550][ T9341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 359.081474][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 359.160791][ T7830] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.167865][ T7830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.176788][ T9] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 359.199655][ T9] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 359.229344][ T30] audit: type=1400 audit(1785299458.227:742): avc: denied { write } for pid=9562 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.234942][ T7830] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.258289][ T7830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.330507][ T9] usb 5-1: USB disconnect, device number 29 [ 360.043013][ T5272] 8021q: adding VLAN 0 to HW filter on device eth18 [ 360.087133][ T30] audit: type=1400 audit(1785299458.597:743): avc: denied { read } for pid=9568 comm="syz.4.837" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 361.228146][ T4926] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 361.245336][ T4926] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 361.253468][ T4926] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 361.270614][ T4926] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 361.280687][ T4926] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 361.688088][ T5994] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.238169][ T5994] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.408903][ T30] audit: type=1400 audit(1785299461.437:744): avc: denied { write } for pid=9580 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 362.433542][ T9341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.850978][ T5994] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.108500][ T30] audit: type=1400 audit(1785299462.137:745): avc: denied { write } for pid=9623 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 363.147676][ T5994] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.355515][ T5624] Bluetooth: hci1: command tx timeout [ 365.045552][ T5272] 8021q: adding VLAN 0 to HW filter on device eth20 [ 365.060638][ T30] audit: type=1400 audit(1785299464.017:746): avc: denied { write } for pid=9641 comm="syz.8.845" name="dbroot" dev="configfs" ino=24298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 365.324643][ T30] audit: type=1400 audit(1785299464.037:747): avc: denied { open } for pid=9641 comm="syz.8.845" path="/47/my_configfs/target/dbroot" dev="configfs" ino=24298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 365.371727][ T9643] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN NOPTI [ 365.383811][ T9643] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 365.392217][ T9643] CPU: 1 UID: 0 PID: 9643 Comm: syz.8.845 Tainted: G L syzkaller #0 PREEMPT(full) [ 365.402976][ T9643] Tainted: [L]=SOFTLOCKUP [ 365.407283][ T9643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 365.417320][ T9643] RIP: 0010:configfs_depend_item_unlocked+0x24a/0x6a0 [ 365.424087][ T9643] Code: 06 fd 08 c7 44 24 1c fe ff ff ff e9 a6 02 00 00 e8 4b 5f 49 ff 48 8d 7d 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1d 04 00 00 48 bb 00 00 00 00 00 fc ff df 4c 8b [ 365.443685][ T9643] RSP: 0018:ffffc90006877b28 EFLAGS: 00010206 [ 365.449743][ T9643] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90010152000 [ 365.457698][ T9643] RDX: 000000000000000c RSI: ffffffff82c100f5 RDI: 0000000000000060 [ 365.465652][ T9643] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 365.473604][ T9643] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 365.481562][ T9643] R13: ffff88807e2c1800 R14: ffff88807e2c1800 R15: ffff88807e2c18b8 [ 365.489516][ T9643] FS: 00007ff6f68676c0(0000) GS:ffff888123edc000(0000) knlGS:0000000000000000 [ 365.498433][ T9643] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 365.505004][ T9643] CR2: 0000001b3361dff8 CR3: 00000000348b6000 CR4: 00000000003526f0 [ 365.512963][ T9643] Call Trace: [ 365.516222][ T9643] [ 365.519133][ T9643] ? __lock_acquire+0x49f/0x1a40 [ 365.524065][ T9643] usbg_make_tpg+0x261/0x620 [ 365.528646][ T9643] ? __pfx_usbg_make_tpg+0x10/0x10 [ 365.533748][ T9643] ? find_held_lock+0x2b/0x80 [ 365.538422][ T9643] ? __pfx_usbg_make_tpg+0x10/0x10 [ 365.543522][ T9643] target_fabric_make_tpg+0xab/0x8c0 [ 365.548801][ T9643] configfs_mkdir+0x51e/0xb70 [ 365.553472][ T9643] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 365.559357][ T9643] ? __pfx_configfs_mkdir+0x10/0x10 [ 365.564559][ T9643] ? inode_permission+0x374/0x620 [ 365.569595][ T9643] vfs_mkdir+0x361/0x850 [ 365.573839][ T9643] filename_mkdirat+0x48b/0x5e0 [ 365.578685][ T9643] ? __pfx_filename_mkdirat+0x10/0x10 [ 365.584044][ T9643] ? strncpy_from_user+0x19d/0x2d0 [ 365.589151][ T9643] ? do_getname+0x191/0x390 [ 365.593646][ T9643] __x64_sys_mkdir+0x6b/0x90 [ 365.598222][ T9643] do_syscall_64+0x115/0x870 [ 365.602804][ T9643] ? clear_bhb_loop+0x40/0x90 [ 365.607473][ T9643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.613351][ T9643] RIP: 0033:0x7ff6f599de99 [ 365.617754][ T9643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.637344][ T9643] RSP: 002b:00007ff6f6867028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 365.645749][ T9643] RAX: ffffffffffffffda RBX: 00007ff6f5c26090 RCX: 00007ff6f599de99 [ 365.653702][ T9643] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000c00 [ 365.661656][ T9643] RBP: 00007ff6f5a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 365.669609][ T9643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.677567][ T9643] R13: 00007ff6f5c26128 R14: 00007ff6f5c26090 R15: 00007fff025480d8 [ 365.685534][ T9643] [ 365.688545][ T9643] Modules linked in: [ 365.693478][ T9643] ---[ end trace 0000000000000000 ]--- [ 365.694217][ T5624] Bluetooth: hci1: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 365.699269][ T30] audit: type=1400 audit(1785299464.307:749): avc: denied { write } for pid=9641 comm="syz.8.845" name="target" dev="configfs" ino=2831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 365.705165][ T9643] RIP: 0010:configfs_depend_item_unlocked+0x24a/0x6a0 [ 365.733479][ T30] audit: type=1400 audit(1785299464.247:748): avc: denied { write } for pid=9641 comm="syz.8.845" name="functions" dev="configfs" ino=19397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 365.733946][ T9643] Code: 06 fd 08 c7 44 24 1c fe ff ff ff e9 a6 02 00 00 e8 4b 5f 49 ff 48 8d 7d 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1d 04 00 00 48 bb 00 00 00 00 00 fc ff df 4c 8b [ 365.776018][ T9643] RSP: 0018:ffffc90006877b28 EFLAGS: 00010206 [ 365.782108][ T9643] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90010152000 [ 365.804474][ T9643] RDX: 000000000000000c RSI: ffffffff82c100f5 RDI: 0000000000000060 [ 365.813549][ T9643] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 365.866757][ T30] audit: type=1400 audit(1785299464.327:750): avc: denied { write } for pid=9641 comm="syz.8.845" name="usb_gadget" dev="configfs" ino=24734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 365.889228][ T9643] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 365.971771][ T9643] R13: ffff88807e2c1800 R14: ffff88807e2c1800 R15: ffff88807e2c18b8 [ 365.979792][ T30] audit: type=1400 audit(1785299464.387:751): avc: denied { write } for pid=9641 comm="syz.8.845" name="naa.1234567890abcdef" dev="configfs" ino=24303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 365.979832][ T30] audit: type=1400 audit(1785299464.897:752): avc: denied { setopt } for pid=9646 comm="syz.4.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 365.979865][ T30] audit: type=1400 audit(1785299464.987:753): avc: denied { read } for pid=4958 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 366.056129][ T9643] FS: 00007ff6f68676c0(0000) GS:ffff888123edc000(0000) knlGS:0000000000000000 [ 366.066051][ T9643] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.072831][ T5994] bridge_slave_1: left allmulticast mode [ 366.078482][ T5994] bridge_slave_1: left promiscuous mode [ 366.084204][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.097512][ T9643] CR2: 0000563df33e44b0 CR3: 00000000348b6000 CR4: 00000000003526f0 [ 366.113889][ T9643] Kernel panic - not syncing: Fatal exception [ 366.120166][ T9643] Kernel Offset: disabled [ 366.124463][ T9643] Rebooting in 86400 seconds..