last executing test programs: 5m17.228210008s ago: executing program 32 (id=1042): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x4044044) r0 = openat(0xffffffffffffff9c, 0x0, 0x40040, 0x0) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_io_uring_setup(0x760a, &(0x7f0000000040)={0x0, 0x74d3, 0x400, 0x0, 0x24a}, &(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0xf2, 0x1, 0x0, 0x0, &(0x7f0000000200)}, 0x20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x48004) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)) sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) close(r6) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001a0)='./nfsd/max_block_size\x00', 0x1, 0x0) write(r7, &(0x7f0000000200)='dummy_hcd.0', 0xb) 3m47.69648991s ago: executing program 5 (id=1312): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x19, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000feffffff181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000885000000a71d00009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) r3 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f00000020c0)='smaps\x00') mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r4, &(0x7f0000000300)=[{&(0x7f00000005c0)="6e9e8a", 0x3}], 0x1) syz_usb_control_io$uac1(r3, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0x30, 0x2a, {0x2a, 0x11, "781177f2ccbf016d93c658342fad9585c9e4d1c188aeb95380919304b88bf4f5a417c60721ed18f1"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}}, &(0x7f0000000600)={0x44, &(0x7f0000000200)={0x40, 0xe, 0xde, "163da9721d09e0f7ce10ce94a904fdd929852bb7f6fe887a21f1f384f852822e7326e47cf32a72c1651a540e2d64e4d2104ae3056738ddeaaeabe65178e095256b262ffd2a0132ec1b96c7793044cce11fe126fc89ef0a46a62850220eddc493e3719afe34aa641aba7d193656ae0628c4acc5d62cdd8e92f3ddf89300587fec5b7b021be794f202094aa5a660e16a8d45af7b002e70ee0a7cb8bc6c1bc5aa237bc97fcac011489429a26cbcf31bd68812323532abfa44e2e51c0021c80d012724a0d889943afdb82b9e87680e9cd3ee9c9d6d505c69c45ff4a5e4be92ed"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000400)={0x20, 0x81, 0x1, '\\'}, &(0x7f0000000440)={0x20, 0x82, 0x3, "8489b0"}, &(0x7f0000000500)={0x20, 0x83, 0x2, "3419"}, &(0x7f0000000540)={0x20, 0x84, 0x1, "a1"}, &(0x7f0000000580)={0x20, 0x85, 0x3, "62a4c6"}}) r5 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x5963, 0x80, 0x0, 0x10000051}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x12, 0x1}) r9 = eventfd2(0x5, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000040)=r9, 0x1) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xc, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x7, 0xf989, "feff98"}]}}}}}}}}, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x808c, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000080)=0x1) ioctl$PPPIOCSMRU1(r11, 0x40047452, &(0x7f0000000040)=0xce) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r10, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r12, @ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x48804}, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="97eb01001800000000000000500000005000000002000000090000000000000e030000"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) r13 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_type(r13, &(0x7f00000006c0), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3m9.200503431s ago: executing program 33 (id=1322): socket(0x10, 0x80002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000080)) r0 = socket(0x10, 0x803, 0x0) timer_getoverrun(0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 3m9.087598293s ago: executing program 34 (id=1312): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x19, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000feffffff181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000885000000a71d00009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) r3 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f00000020c0)='smaps\x00') mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r4, &(0x7f0000000300)=[{&(0x7f00000005c0)="6e9e8a", 0x3}], 0x1) syz_usb_control_io$uac1(r3, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0x30, 0x2a, {0x2a, 0x11, "781177f2ccbf016d93c658342fad9585c9e4d1c188aeb95380919304b88bf4f5a417c60721ed18f1"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}}, &(0x7f0000000600)={0x44, &(0x7f0000000200)={0x40, 0xe, 0xde, "163da9721d09e0f7ce10ce94a904fdd929852bb7f6fe887a21f1f384f852822e7326e47cf32a72c1651a540e2d64e4d2104ae3056738ddeaaeabe65178e095256b262ffd2a0132ec1b96c7793044cce11fe126fc89ef0a46a62850220eddc493e3719afe34aa641aba7d193656ae0628c4acc5d62cdd8e92f3ddf89300587fec5b7b021be794f202094aa5a660e16a8d45af7b002e70ee0a7cb8bc6c1bc5aa237bc97fcac011489429a26cbcf31bd68812323532abfa44e2e51c0021c80d012724a0d889943afdb82b9e87680e9cd3ee9c9d6d505c69c45ff4a5e4be92ed"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000400)={0x20, 0x81, 0x1, '\\'}, &(0x7f0000000440)={0x20, 0x82, 0x3, "8489b0"}, &(0x7f0000000500)={0x20, 0x83, 0x2, "3419"}, &(0x7f0000000540)={0x20, 0x84, 0x1, "a1"}, &(0x7f0000000580)={0x20, 0x85, 0x3, "62a4c6"}}) r5 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x5963, 0x80, 0x0, 0x10000051}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x12, 0x1}) r9 = eventfd2(0x5, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000040)=r9, 0x1) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xc, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x7, 0xf989, "feff98"}]}}}}}}}}, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x808c, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000080)=0x1) ioctl$PPPIOCSMRU1(r11, 0x40047452, &(0x7f0000000040)=0xce) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r10, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r12, @ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x48804}, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="97eb01001800000000000000500000005000000002000000090000000000000e030000"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) r13 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_type(r13, &(0x7f00000006c0), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3m8.956656229s ago: executing program 35 (id=1323): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x200, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, 0x0) 3m8.91665516s ago: executing program 36 (id=1318): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x300) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x5, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000380)={0x48, 0x16, 0x0, 0x0, 0xe160, 0x0, 0x0}) fchdir(0xffffffffffffffff) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) (fail_nth: 2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) 3m8.802522718s ago: executing program 37 (id=1324): mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0xb) r0 = open(0x0, 0x80000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x402) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x6, 0x4) connect$inet6(r2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 1m31.818032404s ago: executing program 8 (id=1464): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)=@newae={0x184, 0x1e, 0x100, 0x70bd28, 0x25dfdbfd, {{@in6=@mcast1, 0x4d5, 0x2, 0x2b}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9, 0x3500}, [@address_filter={0x28, 0x1a, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast2, 0xa, 0x1, 0xc}}, @algo_crypt={0x4f, 0x2, {{'ecb-cast5-avx\x00'}, 0x38, "9425cc16f10b0b"}}, @XFRMA_SET_MARK={0x8}, @algo_auth={0xbb, 0x1, {{'streebog512\x00'}, 0x398, "17c3d572f3de55729bc18c02f442d406c55fc34f732cb7d4ceb5f469431d46d741d3692bbcc22a5f5314a51d37f94beae58b5a1fe509c270ce55af07aba6af3e1899b464c3dcf1e1986a4ee04134f58984ff81cedf2beaee479268789b746e5e9c20f14a3ee2a246c66d8e5b6ac09456ad9aae"}}, @replay_thresh={0x8, 0xb, 0x3}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000001}, 0x801) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3) unshare(0x68040000) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'erspan0\x00', 0x2000}) 1m30.721486771s ago: executing program 8 (id=1465): socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000380)) 1m30.608365043s ago: executing program 6 (id=1466): mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0xb) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x80000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x6, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) semctl$SEM_INFO(0x0, 0x2, 0x13, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 1m30.194318264s ago: executing program 9 (id=1468): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) fsopen(&(0x7f00000005c0)='aufs\x00', 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) memfd_create(&(0x7f0000000400)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Kp\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec2D\xf7\xb4\xa4\xb9\x06\xfc\xa7\x86\xb4Bxf\xd8\'\x17N\x1ar\xf9+%vm\t\x9f#yN\xb8k\xf6\xc0\xcbW8o\x92\xc7\xffo\xd3\xdc+\x84\x91\x13Ss\xb2h\x12C\xba\x02B\x92\xfeZ\b\xac\xb6[\x86\xbb\xdf\x8b\x7f\xfa\xc2\x8a\x13BW\'3\xa3m{\xd2\xc1p\xf9\xbf\xc5\xcb\xee', 0x6) pipe2$watch_queue(&(0x7f0000000300), 0x80) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060003000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r3 = socket(0x10, 0x3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) prctl$PR_GET_TSC(0x19, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) preadv2(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000500)=""/61, 0x3d}], 0x20, 0x40, 0x4, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x4cf40) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) socket(0x10, 0x803, 0x0) 1m27.760714774s ago: executing program 8 (id=1473): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) setns(0xc9, 0x0) syz_open_procfs(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000200)={0x9, 0x8b, 0x6, 0x0, 0x1, 0x1, 0x0, &(0x7f00000000c0)=[{0x19, 0x1ff, 0x1ff}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write(r0, &(0x7f0000000080), 0x0) 1m26.581731539s ago: executing program 6 (id=1474): r0 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r2, 0xc) pipe2$watch_queue(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003700)=""/4111, 0x100f}], 0x5a) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x38) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x21}, 0x20) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0xcd) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000000)={0x10000, 0x5, 0x8001, 0x8000, 0x507, 0x4, 0x4}) 1m25.512103921s ago: executing program 8 (id=1475): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) fsopen(&(0x7f00000005c0)='aufs\x00', 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) memfd_create(&(0x7f0000000400)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Kp\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec2D\xf7\xb4\xa4\xb9\x06\xfc\xa7\x86\xb4Bxf\xd8\'\x17N\x1ar\xf9+%vm\t\x9f#yN\xb8k\xf6\xc0\xcbW8o\x92\xc7\xffo\xd3\xdc+\x84\x91\x13Ss\xb2h\x12C\xba\x02B\x92\xfeZ\b\xac\xb6[\x86\xbb\xdf\x8b\x7f\xfa\xc2\x8a\x13BW\'3\xa3m{\xd2\xc1p\xf9\xbf\xc5\xcb\xee', 0x6) pipe2$watch_queue(&(0x7f0000000300), 0x80) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060003000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r3 = socket(0x10, 0x3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) prctl$PR_GET_TSC(0x19, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) preadv2(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000500)=""/61, 0x3d}], 0x20, 0x40, 0x4, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x4cf40) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) socket(0x10, 0x803, 0x0) 1m25.138628877s ago: executing program 9 (id=1477): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x48810) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) lsm_set_self_attr(0x67, &(0x7f0000000040)={0x65, 0x0, 0x20}, 0x20, 0x0) ftruncate(r1, 0x1000006) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) socket(0x15, 0xa, 0x5) semop(0x0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) fcntl$addseals(r1, 0x409, 0x7) syz_open_dev$video4linux(&(0x7f00000001c0), 0x2, 0x60180) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000}) rseq(&(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x9, 0xfffffffffffffffc}}, 0x20, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000340)=0x1, 0x4) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000100)=0x2) 1m25.02063746s ago: executing program 6 (id=1478): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7dc) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00') r2 = socket$inet_smc(0x2b, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x286200a, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(r0, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x20) write(r3, &(0x7f0000000380)='100000', 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000040)) write(r4, &(0x7f0000000200)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = dup3(0xffffffffffffffff, r5, 0x80000) read$FUSE(r7, &(0x7f0000004040)={0x2020}, 0x2020) 1m23.960555482s ago: executing program 6 (id=1479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x34, 0x64, 0xf31, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) r5 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000001ec0)={0x2c, &(0x7f0000001c40), 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r5, 0x81, 0x1, &(0x7f0000000340)="ab") pread64(r6, 0x0, 0x0, 0xd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000040000000400000001"], 0x48) r8 = socket$inet(0x2, 0x1, 0x0) listen(r8, 0x7) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x11e, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r9 = syz_io_uring_setup(0x34b8, &(0x7f00000024c0)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10d) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000040)=@IORING_OP_SENDMSG_ZC={0x30, 0x50, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x1, {0xfffe}}) io_uring_enter(r9, 0x1, 0x1, 0x1, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r7, 0x5000940a, &(0x7f0000000380)={{}, "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"}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1m22.953758076s ago: executing program 9 (id=1480): r0 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) pipe2$watch_queue(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003700)=""/4111, 0x100f}], 0x5a) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x38) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x21}, 0x20) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0xcd) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x10000, 0x5, 0x8001, 0x8000, 0x507, 0x4, 0x4}) add_key$fscrypt_provisioning(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x2}, &(0x7f0000002ac0)={0x2, 0x0, @b}, 0x48, r0) 1m22.776883636s ago: executing program 7 (id=1481): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES8=r0], 0x0, 0x9, 0xba, &(0x7f0000000480)=""/186, 0x41100, 0x76, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(0x0, 0xa99, &(0x7f0000001800)='GPL\x00') fstat(r2, 0x0) init_module(0x0, 0x2ef, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) madvise(&(0x7f00005cf000/0x3000)=nil, 0x3000, 0x16) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000002900)={0xfffffffffffffffa, r4, 0x0, {0x200, 0x81}, 0x4b}, 0x1) mount(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000000)='binfmt_misc\x00', 0x2140c0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/locks\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.1\x00', 0x1ff) 1m21.511020931s ago: executing program 7 (id=1483): socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000380)) 1m21.164819226s ago: executing program 7 (id=1484): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r0, @ANYRESOCT=0x0], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0xe, 0x9, 0x3, 0xd, "0062ba7d8200000016001b000200f705096604"}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x7b408477ebd014ef) add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x8800000, 0x101, 0x1000000) 1m21.080577351s ago: executing program 9 (id=1485): socket$nl_sock_diag(0x10, 0x3, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000500)="26ef26da06fcc43959ccc53ee926b47804ba3281fcac63bf954c857621deb501478081", 0x23}, {&(0x7f0000001c40)="65e3d6347d4e5a56100bf4c4f9e05214c8f2d4656aea29151d3ca7f936d66855822d51bf7deed302d625ab319825893b4a84e477c08f8f7afbc81b14", 0x3c}], 0x2}}], 0x1, 0xc840) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c9702", 0x5e, 0x5e, 0x0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf2501000000080002000000000005000500000000000800030001000000480001800500020020000000"], 0x84}}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0x14, 0x30, 0xb}, 0x14}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) close_range(r2, r4, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r6, &(0x7f0000000540)=[{&(0x7f0000001680)='0', 0x1}, {&(0x7f00000007c0)="89", 0x1}], 0x2) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$rfkill(r7, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000600), 0x3008804, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x3}}]}}) 1m21.073680339s ago: executing program 1 (id=1486): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r0, @ANYRESOCT=0x0], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0xe, 0x9, 0x3, 0xd, "0062ba7d8200000016001b000200f705096604"}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x7b408477ebd014ef) r5 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x1f) keyctl$revoke(0x3, r5) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x3f00000000000000) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x8800000, 0x101, 0x1000000) 1m19.373623264s ago: executing program 6 (id=1487): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x48810) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) lsm_set_self_attr(0x67, &(0x7f0000000040)={0x65, 0x0, 0x20}, 0x20, 0x0) ftruncate(r1, 0x1000006) r2 = semget$private(0x0, 0x6, 0x0) semtimedop(r2, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r2, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) fcntl$addseals(r1, 0x409, 0x7) syz_open_dev$video4linux(&(0x7f00000001c0), 0x2, 0x60180) r3 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000}) rseq(&(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x9, 0xfffffffffffffffc}}, 0x20, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000340)=0x1, 0x4) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000100)=0x2) 1m19.192203868s ago: executing program 9 (id=1488): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)=@newae={0x184, 0x1e, 0x100, 0x70bd28, 0x25dfdbfd, {{@in6=@mcast1, 0x4d5, 0x2, 0x2b}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9, 0x3500}, [@address_filter={0x28, 0x1a, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast2, 0xa, 0x1, 0xc}}, @algo_crypt={0x4f, 0x2, {{'ecb-cast5-avx\x00'}, 0x38, "9425cc16f10b0b"}}, @XFRMA_SET_MARK={0x8}, @algo_auth={0xbb, 0x1, {{'streebog512\x00'}, 0x398, "17c3d572f3de55729bc18c02f442d406c55fc34f732cb7d4ceb5f469431d46d741d3692bbcc22a5f5314a51d37f94beae58b5a1fe509c270ce55af07aba6af3e1899b464c3dcf1e1986a4ee04134f58984ff81cedf2beaee479268789b746e5e9c20f14a3ee2a246c66d8e5b6ac09456ad9aae"}}, @replay_thresh={0x8, 0xb, 0x3}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000001}, 0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3) unshare(0x68040000) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'erspan0\x00', 0x2000}) 1m19.044507972s ago: executing program 7 (id=1489): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7dc) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00') r2 = socket$inet_smc(0x2b, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x286200a, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(r0, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x20) write(r3, &(0x7f0000000380)='100000', 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000040)) write(r4, &(0x7f0000000200)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = dup3(0xffffffffffffffff, r5, 0x80000) read$FUSE(r7, &(0x7f0000004040)={0x2020}, 0x2020) 1m18.187020869s ago: executing program 9 (id=1490): mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0xb) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x80000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x402) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x6, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) semctl$SEM_INFO(0x0, 0x2, 0x13, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 1m17.811407734s ago: executing program 8 (id=1491): mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0xb) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x80000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x402) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x6, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) semctl$SEM_INFO(0x0, 0x2, 0x13, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 1m17.328649382s ago: executing program 7 (id=1492): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000016c0)=[{{&(0x7f0000007b00)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffff54}}, {{&(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000900000000000000000007000000890704e000000200110000000000000000000001000000000000001c000000000000000000000034"], 0x50}}], 0x2, 0x20000844) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x420000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0x1, 0x5d, 0x9d}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x106f) 1m17.226754671s ago: executing program 1 (id=1493): mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0xb) r0 = open(0x0, 0x80000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x402) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x6, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, 0x0, 0x0) 1m16.785704938s ago: executing program 1 (id=1494): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) fsync(r2) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') dup2(r2, r0) getresgid(&(0x7f0000002ec0), &(0x7f0000002f00), &(0x7f0000002f40)) 1m16.580797087s ago: executing program 1 (id=1495): r0 = dup(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, &(0x7f0000000380)) 1m16.460060604s ago: executing program 1 (id=1496): epoll_create1(0x0) r0 = socket$unix(0x1, 0x1, 0x0) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x3e000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_ublk_setup_io_uring(0x45da, &(0x7f0000000580)={0x0, 0xa355, 0x400, 0xa, 0x15a}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, 0x0, r8, &(0x7f0000000080)='./file0\x00', 0x120) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) socketpair$unix(0x1, 0x2, 0x0, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) listen(r9, 0x3) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18) 1m16.372593875s ago: executing program 7 (id=1497): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2703) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r2, 0x4, 0x1) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000280)={0x0, 0x10, 0x3, &(0x7f0000000080)={0x12, "b3d92cdddf96c2069064264ccfc6000000fa00008c00"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x2, 0xd7, &(0x7f00000003c0)="59fb079a3106f4b90d6cb8d5fddf8c68252ea99ba756acfe104e9549b06bd60cb2a6ac98c9f7d2bfc8ad65d2c3c1fd1bb5ea2ebf1c062235e361e177be82ad6272ec4afbb126d17a9944c402164ca3fb6b86e5812a680e56dbcdc47b5fdb33d23b5d16b1e8a2d68d06e6f5e38589461f6f4e9f7ae055855d13c94e5e2f5be4048572d5d7e2895ee9dc868fbdd7074330ec9d680397a585b9aadbc76cdab5430997103442b973172ba8195c842c9b58634dd9ee436b94ff3db7679ef4192de7bafd746e550dc84cd078a423e82ca1f5a175e14fb546f479") mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) close(0x3) userfaultfd(0x80001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, 0xffffffffffffffff, 0x0, 0xf03a0005) 1m15.462491684s ago: executing program 1 (id=1498): mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0xb) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x80000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x6, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) semctl$SEM_INFO(0x0, 0x2, 0x13, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 1m15.386860075s ago: executing program 6 (id=1499): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r0, @ANYRESOCT=0x0], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0xe, 0x9, 0x3, 0xd, "0062ba7d8200000016001b000200f705096604"}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x7b408477ebd014ef) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x8800000, 0x101, 0x1000000) 1m15.177041652s ago: executing program 8 (id=1500): r0 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r2, 0xc) pipe2$watch_queue(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003700)=""/4111, 0x100f}], 0x5a) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x38) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x21}, 0x20) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0xcd) add_key$fscrypt_provisioning(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x2}, &(0x7f0000002ac0)={0x2, 0x0, @b}, 0x48, r0) 52.816733882s ago: executing program 38 (id=1499): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r0, @ANYRESOCT=0x0], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0xe, 0x9, 0x3, 0xd, "0062ba7d8200000016001b000200f705096604"}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x7b408477ebd014ef) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x8800000, 0x101, 0x1000000) 52.684183552s ago: executing program 39 (id=1497): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2703) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r2, 0x4, 0x1) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000280)={0x0, 0x10, 0x3, &(0x7f0000000080)={0x12, "b3d92cdddf96c2069064264ccfc6000000fa00008c00"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x2, 0xd7, &(0x7f00000003c0)="59fb079a3106f4b90d6cb8d5fddf8c68252ea99ba756acfe104e9549b06bd60cb2a6ac98c9f7d2bfc8ad65d2c3c1fd1bb5ea2ebf1c062235e361e177be82ad6272ec4afbb126d17a9944c402164ca3fb6b86e5812a680e56dbcdc47b5fdb33d23b5d16b1e8a2d68d06e6f5e38589461f6f4e9f7ae055855d13c94e5e2f5be4048572d5d7e2895ee9dc868fbdd7074330ec9d680397a585b9aadbc76cdab5430997103442b973172ba8195c842c9b58634dd9ee436b94ff3db7679ef4192de7bafd746e550dc84cd078a423e82ca1f5a175e14fb546f479") mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) close(0x3) userfaultfd(0x80001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, 0xffffffffffffffff, 0x0, 0xf03a0005) 51.736071447s ago: executing program 40 (id=1500): r0 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r2, 0xc) pipe2$watch_queue(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003700)=""/4111, 0x100f}], 0x5a) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x38) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x21}, 0x20) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0xcd) add_key$fscrypt_provisioning(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x2}, &(0x7f0000002ac0)={0x2, 0x0, @b}, 0x48, r0) 51.585844084s ago: executing program 41 (id=1490): mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0xb) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x80000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x402) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x6, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) semctl$SEM_INFO(0x0, 0x2, 0x13, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 51.497749594s ago: executing program 42 (id=1498): mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0xb) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x80000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x6, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) semctl$SEM_INFO(0x0, 0x2, 0x13, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 21.583046413s ago: executing program 3 (id=1513): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000bc0)=@filter={'filter\x00', 0x4, 0x4, 0x398, 0xffffffff, 0x0, 0x118, 0x118, 0xfeffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote, [0xffffffff, 0xff, 0xffffff00, 0xff000000], 0x4e24, 0x4e24, 0x4e21, 0x4e24, 0x1d, 0x8, 0x0, 0x1, 0x5}}}, {{@ipv6={@private0, @loopback, [0xffffff00, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) syz_open_dev$usbfs(0x0, 0x4, 0x208441) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 21.120647779s ago: executing program 4 (id=1516): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xaa7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x4800) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'hsr0\x00'}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3, 0x3}}, 0x2e) ioctl$PPPIOCGMRU(r7, 0x80047453, 0x0) 20.120564581s ago: executing program 4 (id=1518): socket$inet6_udp(0xa, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x420000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) 19.098357782s ago: executing program 4 (id=1519): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) fsopen(&(0x7f00000005c0)='aufs\x00', 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) memfd_create(&(0x7f0000000400)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Kp\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec2D\xf7\xb4\xa4\xb9\x06\xfc\xa7\x86\xb4Bxf\xd8\'\x17N\x1ar\xf9+%vm\t\x9f#yN\xb8k\xf6\xc0\xcbW8o\x92\xc7\xffo\xd3\xdc+\x84\x91\x13Ss\xb2h\x12C\xba\x02B\x92\xfeZ\b\xac\xb6[\x86\xbb\xdf\x8b\x7f\xfa\xc2\x8a\x13BW\'3\xa3m{\xd2\xc1p\xf9\xbf\xc5\xcb\xee', 0x6) pipe2$watch_queue(&(0x7f0000000300), 0x80) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060003000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r3 = socket(0x10, 0x3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) prctl$PR_GET_TSC(0x19, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x4cf40) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="40000000100039042cbd7000eaff9772bfa803e4", @ANYRES32=0x0, @ANYBLOB="93200400040000002000128008000100736974001400028008000300e00000010500040009000000"], 0x40}, 0x1, 0x0, 0x0, 0x24048014}, 0x8010) 18.61070352s ago: executing program 3 (id=1520): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x3, 0x900) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1358}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r2) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r8, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r8, 0x26, &(0x7f0000000140)={0x1}) fcntl$lock(r8, 0x26, &(0x7f0000000180)) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r5, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="03002cbd70000e0000000100000008000100", @ANYRES32=r5, @ANYBLOB="0800020000000023"], 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x20008080) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@gettfilter={0x44, 0x2e, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x10, 0x4}, {0x5, 0xfff2}, {0xfff3}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000880) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000380)={[0x2]}, 0x8, 0x80000) read$FUSE(r9, &(0x7f0000003b80)={0x2020}, 0x2020) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x4, 0x8, 0x2e, 0x7, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x7800, 0x0, 0xac, 0x4}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x87c, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}}]}, &(0x7f0000000580)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x4, '\x00', r10, 0x25, r9, 0x8, &(0x7f0000000700)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000740)=[r9, r9, r9], &(0x7f0000000780)=[{0x5, 0x1, 0x6, 0x5}, {0x3, 0x5, 0x2, 0xb}, {0x4, 0x2, 0xf, 0x8}, {0x5, 0x1, 0xb, 0x9}], 0x10, 0x40}, 0x94) 17.807033533s ago: executing program 5 (id=1502): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x5420, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x76e0}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xe) r4 = dup(r3) read$FUSE(r4, 0x0, 0x600) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff000000070581024000000705010240"], 0x0) mkdir(&(0x7f00000000c0)='mnt\x00', 0x10d) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) munmap$IORING_OFF_CQ_RING(r0, 0xea08) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='team0\x00', 0x10) ioctl$TCSETSF2(r5, 0x402c542d, 0x0) unshare(0x2000000) 16.134808718s ago: executing program 4 (id=1523): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x2) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000300)=0x9, 0x4) r6 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x4, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x8, 0x61, 0x7, 0x95, 0x4}}) add_key$fscrypt_provisioning(&(0x7f00000004c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000580)=ANY=[@ANYRESDEC=r3, @ANYRESOCT=r0, @ANYBLOB="58e1a192964f91b2b2b082e5b2d36bfb79"]) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40450d1) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) symlinkat(&(0x7f0000000340)='./file0/../file0/file0\x00', r7, &(0x7f0000000540)='./file0/../file0/file0\x00') syz_usb_control_io$cdc_ecm(r9, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 15.936549511s ago: executing program 2 (id=1524): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, 0x0) 15.688883129s ago: executing program 2 (id=1525): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) 15.640980911s ago: executing program 0 (id=1526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_emit_ethernet(0xa0, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x6a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) openat$userio(0xffffffffffffff9c, &(0x7f0000000400), 0x101202, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="700000f6ffffffffffffaaaaaaaaaabb86dd627b46b90014060100000000000000000000000000000000ff0200000000000000000000000000014e204e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="4b86808ee09caab6e669195010000090780025"], 0x4e) connect$pppl2tp(r1, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e22, @multicast1}, 0x3, 0x3, 0x2, 0x2}}, 0x2e) r8 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x50d1, 0xa140afb4a7eb4d98, 0x0, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f00000006c0)=@IORING_OP_MKDIRAT={0x25, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x1}) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xfffffffffffffea3}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}]}}}]}, 0x48}, 0x9}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00"], 0x48}}, 0x0) sendmmsg$alg(r12, &(0x7f00000000c0), 0x492492492492627, 0x0) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r12) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000d00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10008}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000980)={0x334, r13, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0x71, 0x3, "2f8091304609b135607a47b020f82ab9ba91c3c6a563488a5a708229183a46aa976d74301c5c504b86e167592325bed0a8a6b61fb143b553ccfe89893d20da4f92fde9940b1399d6ca02bde79472b5ec46092f87e685a25314d647be2261f3f97a029c5e00841c90dd38680f49"}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5845}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "4636033c63cd81d864d2223b99be89e2036f439e2d65e25a56"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "39320b6fa4fe45cb11f7d98305071d6b24873519aa8594c3241b83bf8ab7747df641"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "407ff86f10ce5d664457e31e36a63e6cfc9f3b8736610184ede481b2ebf7307e732431"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xf5}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x140, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xe0, 0x3, "025ae56c0537da255086cabb837f4b19b5e288efe1230523923811e610b3d963e025bd25ae03bcdf6dfca41c15288f7398cca6e87712ae6812bab9a29ab1cf3bd2f3c65e2374514913252973f8030de0edd893fd1072f8bc17ab7985f9dadfbeec25a4383fbe406e1b8f1fe15c14c0fe59c9945799c2059b4fb9fdc7d6c14b96e02da4282b617b9092e8119e9930e104df47594d523f774b0d17c3ece821994b98f0a03412508dcaaaf8fd77dc9210a0651e2dfe0d0a2d7be4522a0e883bd25bcc077217b9999597ef7540844e716fea77dd94ce04ade2741fbecb87"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1d3ee2d6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "49c8fdf2ab9b070513b85a298cfdf41d2893c9ef72d4"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) io_uring_enter(r8, 0x788b, 0x84b, 0x68, 0x0, 0x0) 15.356547134s ago: executing program 2 (id=1527): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x48810) lsm_set_self_attr(0x67, &(0x7f0000000040)={0x65, 0x0, 0x20}, 0x20, 0x0) ftruncate(0xffffffffffffffff, 0x1000006) r1 = semget$private(0x0, 0x6, 0x0) semtimedop(r1, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) socket(0x15, 0xa, 0x5) semop(r1, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) syz_open_dev$video4linux(&(0x7f00000001c0), 0x2, 0x60180) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x1000000}) rseq(&(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x9, 0xfffffffffffffffc}}, 0x20, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000340)=0x1, 0x4) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000100)=0x2) 15.328415189s ago: executing program 5 (id=1528): socket$nl_sock_diag(0x10, 0x3, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000500)="26ef26da06fcc43959ccc53ee926b47804ba3281fcac63bf954c857621deb501478081", 0x23}, {&(0x7f0000001c40)="65e3d6347d4e5a56100bf4c4f9e05214c8f2d4656aea29151d3ca7f936d66855822d51bf7deed302d625ab319825893b4a84e477c08f8f7afbc81b14", 0x3c}], 0x2}}], 0x1, 0xc840) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c9702", 0x5e, 0x5e, 0x0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf2501000000080002000000000005000500000000000800030001000000480001800500020020000000"], 0x84}}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0x14, 0x30, 0xb}, 0x14}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) close_range(r2, r4, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r6, &(0x7f0000000540)=[{&(0x7f0000001680)='0', 0x1}, {&(0x7f00000007c0)="89", 0x1}], 0x2) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000600), 0x3008804, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 15.099805116s ago: executing program 3 (id=1529): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2703) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r2, 0x4, 0x1) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000280)={0x0, 0x10, 0x3, &(0x7f0000000080)={0x12, "b3d92cdddf96c2069064264ccfc6000000fa00008c00"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x2, 0xd7, &(0x7f00000003c0)="59fb079a3106f4b90d6cb8d5fddf8c68252ea99ba756acfe104e9549b06bd60cb2a6ac98c9f7d2bfc8ad65d2c3c1fd1bb5ea2ebf1c062235e361e177be82ad6272ec4afbb126d17a9944c402164ca3fb6b86e5812a680e56dbcdc47b5fdb33d23b5d16b1e8a2d68d06e6f5e38589461f6f4e9f7ae055855d13c94e5e2f5be4048572d5d7e2895ee9dc868fbdd7074330ec9d680397a585b9aadbc76cdab5430997103442b973172ba8195c842c9b58634dd9ee436b94ff3db7679ef4192de7bafd746e550dc84cd078a423e82ca1f5a175e14fb546f479") mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_init_net_socket$x25(0x9, 0x5, 0x0) close(0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, 0xffffffffffffffff, 0x0, 0xf03a0005) 13.397891304s ago: executing program 0 (id=1530): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0xfffffff7, 0x0, 0xffffffffffffffff, 0x815, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x8, 0xc58, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000740)=[r0], &(0x7f0000000780)=[{0x2, 0x4, 0x3, 0x3}]}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) socket$nl_xfrm(0x10, 0x3, 0x6) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x9, 0x8000, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}}, 0x0) 13.314029296s ago: executing program 5 (id=1531): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r0, @ANYRESOCT=0x0], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0xe, 0x9, 0x3, 0xd, "0062ba7d8200000016001b000200f705096604"}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x7b408477ebd014ef) r5 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x1f) keyctl$revoke(0x3, r5) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x3f00000000000000) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xa0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a31000000000800054000000002090002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 12.180751827s ago: executing program 0 (id=1532): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_emit_ethernet(0xad, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x77, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "00e9ff06ffffaf64000000a2"}, {0x0, 0x0, "fe906d26ef"}]}}}}}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) openat$userio(0xffffffffffffff9c, &(0x7f0000000400), 0x101202, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="700000f6ffffffffffffaaaaaaaaaabb86dd627b46b90014060100000000000000000000000000000000ff0200000000000000000000000000014e204e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="4b86808ee09caab6e669195010000090780025"], 0x4e) connect$pppl2tp(r1, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e22, @multicast1}, 0x3, 0x3, 0x2, 0x2}}, 0x2e) r8 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x50d1, 0xa140afb4a7eb4d98, 0x0, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f00000006c0)=@IORING_OP_MKDIRAT={0x25, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x1}) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xfffffffffffffea3}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}]}}}]}, 0x48}, 0x9}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00"], 0x48}}, 0x0) sendmmsg$alg(r12, &(0x7f00000000c0), 0x492492492492627, 0x0) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r12) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000d00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10008}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000980)={0x334, r13, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0x71, 0x3, "2f8091304609b135607a47b020f82ab9ba91c3c6a563488a5a708229183a46aa976d74301c5c504b86e167592325bed0a8a6b61fb143b553ccfe89893d20da4f92fde9940b1399d6ca02bde79472b5ec46092f87e685a25314d647be2261f3f97a029c5e00841c90dd38680f49"}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5845}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "4636033c63cd81d864d2223b99be89e2036f439e2d65e25a56"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "39320b6fa4fe45cb11f7d98305071d6b24873519aa8594c3241b83bf8ab7747df641"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "407ff86f10ce5d664457e31e36a63e6cfc9f3b8736610184ede481b2ebf7307e732431"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xf5}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x140, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xe0, 0x3, "025ae56c0537da255086cabb837f4b19b5e288efe1230523923811e610b3d963e025bd25ae03bcdf6dfca41c15288f7398cca6e87712ae6812bab9a29ab1cf3bd2f3c65e2374514913252973f8030de0edd893fd1072f8bc17ab7985f9dadfbeec25a4383fbe406e1b8f1fe15c14c0fe59c9945799c2059b4fb9fdc7d6c14b96e02da4282b617b9092e8119e9930e104df47594d523f774b0d17c3ece821994b98f0a03412508dcaaaf8fd77dc9210a0651e2dfe0d0a2d7be4522a0e883bd25bcc077217b9999597ef7540844e716fea77dd94ce04ade2741fbecb87"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1d3ee2d6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "49c8fdf2ab9b070513b85a298cfdf41d2893c9ef72d4"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) io_uring_enter(r8, 0x788b, 0x84b, 0x68, 0x0, 0x0) 11.932709962s ago: executing program 2 (id=1533): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xaa7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x4800) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3, 0x3}}, 0x2e) ioctl$PPPIOCGMRU(r6, 0x80047453, 0x0) 11.880529619s ago: executing program 3 (id=1534): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) fsopen(&(0x7f00000005c0)='aufs\x00', 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) memfd_create(&(0x7f0000000400)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Kp\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec2D\xf7\xb4\xa4\xb9\x06\xfc\xa7\x86\xb4Bxf\xd8\'\x17N\x1ar\xf9+%vm\t\x9f#yN\xb8k\xf6\xc0\xcbW8o\x92\xc7\xffo\xd3\xdc+\x84\x91\x13Ss\xb2h\x12C\xba\x02B\x92\xfeZ\b\xac\xb6[\x86\xbb\xdf\x8b\x7f\xfa\xc2\x8a\x13BW\'3\xa3m{\xd2\xc1p\xf9\xbf\xc5\xcb\xee', 0x6) pipe2$watch_queue(&(0x7f0000000300), 0x80) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060003000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r3 = socket(0x10, 0x3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) prctl$PR_GET_TSC(0x19, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) preadv2(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000500)=""/61, 0x3d}], 0x20, 0x40, 0x4, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x4cf40) ioctl$USBDEVFS_FORBID_SUSPEND(r4, 0x5521) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="40000000100039042cbd7000eaff9772bfa803e4", @ANYRES32=0x0, @ANYBLOB="93200400040000002000128008000100736974001400028008000300e00000010500040009000000"], 0x40}, 0x1, 0x0, 0x0, 0x24048014}, 0x8010) 11.571242377s ago: executing program 4 (id=1535): r0 = open(&(0x7f00000001c0)='./bus\x00', 0x80000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x402) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x6, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) semctl$SEM_INFO(0x0, 0x2, 0x13, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 11.106245851s ago: executing program 5 (id=1536): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0xfa0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) modify_ldt$write2(0x11, &(0x7f0000000000)={0x3, 0x20000800, 0x2000, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080)={0x101, 0x100000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500fc000000000000000000000000000001000000003c000000000000007f000001000000000000000000000000020000000400"/180], 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="bc0000002100010004000000000000007f000001000000000000000000000000ff02000000000000000000000000000100000000000000020a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fc0000000000000000000000000000017f00000100d300ce0000000000000000fc0200230000f6ff0010000000010001ac1414aa000000000000fbffffffffff3b0400000200000002000a001c000400ffff4e2459a90000fc0000000000000000000000000000004a48d9fffa878e376f93a3b48f1772f1c7d2a5bef4505d6a25592792151fd614ca461aaa53f50fa4b9642cdb822b76cd227539dc19504d35f3fd21fb30707636d95b70131c3603e688b31a00c4f1ce106e1d01f094d2b4285534f413cfda682908d140501cc721"], 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYRESOCT=r7, @ANYRES32=r7, @ANYRES16=r0], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x10380) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) write$vhost_msg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1200000004000000080000000280000018000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000010000000000000ead8993e3324f9ecd21f1e6fcd7828997021b04ca7037c0a39a168a6133267cc205c75bde43fbb8468dea7ec50f40c134ac370cb0d61b4e803e4929a04dfabea049b422166dc71044dd5de7fe4b3"], 0x50) 10.923084535s ago: executing program 2 (id=1537): r0 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r2, 0xc) pipe2$watch_queue(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003700)=""/4111, 0x100f}], 0x5a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x21}, 0x20) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0xcd) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000000)={0x10000, 0x5, 0x8001, 0x8000, 0x507, 0x4, 0x4}) add_key$fscrypt_provisioning(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x2}, &(0x7f0000002ac0)={0x2, 0x0, @b}, 0x48, r0) 2.642465774s ago: executing program 4 (id=1538): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x5420, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x76e0}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xe) r4 = dup(r3) read$FUSE(r4, 0x0, 0x600) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff000000070581024000000705010240"], 0x0) mkdir(&(0x7f00000000c0)='mnt\x00', 0x10d) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) munmap$IORING_OFF_CQ_RING(r0, 0xea08) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='team0\x00', 0x10) ioctl$TCSETSF2(r5, 0x402c542d, 0x0) unshare(0x2000000) 2.621643025s ago: executing program 0 (id=1539): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8, 0x3}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) nanosleep(&(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000240)) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000280), 0xff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0xfffffffe, 0x81, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}, 0x1ff}) write$nbd(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="01"], 0x40) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) writev(r4, &(0x7f0000001500)=[{&(0x7f0000000400)='8', 0x1}, {&(0x7f0000000440)="10", 0x1}], 0x2) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)={0x18, 0x24, 0x29, 0x70bd2a, 0xfffffff9, {0x11}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x88811}, 0x4040840) 2.536692508s ago: executing program 5 (id=1540): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) fsopen(&(0x7f00000005c0)='aufs\x00', 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) memfd_create(&(0x7f0000000400)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Kp\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec2D\xf7\xb4\xa4\xb9\x06\xfc\xa7\x86\xb4Bxf\xd8\'\x17N\x1ar\xf9+%vm\t\x9f#yN\xb8k\xf6\xc0\xcbW8o\x92\xc7\xffo\xd3\xdc+\x84\x91\x13Ss\xb2h\x12C\xba\x02B\x92\xfeZ\b\xac\xb6[\x86\xbb\xdf\x8b\x7f\xfa\xc2\x8a\x13BW\'3\xa3m{\xd2\xc1p\xf9\xbf\xc5\xcb\xee', 0x6) pipe2$watch_queue(&(0x7f0000000300), 0x80) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060003000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r3 = socket(0x10, 0x3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) prctl$PR_GET_TSC(0x19, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) preadv2(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000500)=""/61, 0x3d}], 0x20, 0x40, 0x4, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x4cf40) ioctl$USBDEVFS_FORBID_SUSPEND(r4, 0x5521) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) 1.223216455s ago: executing program 0 (id=1541): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xaa7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x4800) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'hsr0\x00'}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3, 0x3}}, 0x2e) ioctl$PPPIOCGMRU(r6, 0x80047453, 0x0) 1.198068995s ago: executing program 2 (id=1542): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) fsopen(&(0x7f00000005c0)='aufs\x00', 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) memfd_create(&(0x7f0000000400)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Kp\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec2D\xf7\xb4\xa4\xb9\x06\xfc\xa7\x86\xb4Bxf\xd8\'\x17N\x1ar\xf9+%vm\t\x9f#yN\xb8k\xf6\xc0\xcbW8o\x92\xc7\xffo\xd3\xdc+\x84\x91\x13Ss\xb2h\x12C\xba\x02B\x92\xfeZ\b\xac\xb6[\x86\xbb\xdf\x8b\x7f\xfa\xc2\x8a\x13BW\'3\xa3m{\xd2\xc1p\xf9\xbf\xc5\xcb\xee', 0x6) pipe2$watch_queue(&(0x7f0000000300), 0x80) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060003000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r3 = socket(0x10, 0x3, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) prctl$PR_GET_TSC(0x19, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) preadv2(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000500)=""/61, 0x3d}], 0x20, 0x40, 0x4, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x4cf40) ioctl$USBDEVFS_FORBID_SUSPEND(r4, 0x5521) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="40000000100039042cbd7000eaff9772bfa803e4", @ANYRES32=0x0, @ANYBLOB="93200400040000002000128008000100736974001400028008000300e00000010500040009000000"], 0x40}, 0x1, 0x0, 0x0, 0x24048014}, 0x8010) 403.328595ms ago: executing program 3 (id=1543): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b702000000000000260000000000000085"], 0x0, 0x8}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) r3 = syz_io_uring_setup(0xf00, &(0x7f00000007c0)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x20e6, 0x0, @empty}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000030000000000000000010000850000000e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000002f5d13d1852a7873b70300000800350000000000000000008d47c6dc85000000c30100"/76], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010530000a002800060000006000000000301140fe800000000000000000000000000001fe80000000000000000000000000000220e620e60012", @ANYRES16], 0x64) 240.938866ms ago: executing program 0 (id=1544): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x48810) lsm_set_self_attr(0x67, &(0x7f0000000040)={0x65, 0x0, 0x20}, 0x20, 0x0) ftruncate(0xffffffffffffffff, 0x1000006) r1 = semget$private(0x0, 0x6, 0x0) semtimedop(r1, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) socket(0x15, 0xa, 0x5) semop(r1, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) syz_open_dev$video4linux(&(0x7f00000001c0), 0x2, 0x60180) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x1000000}) rseq(&(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x9, 0xfffffffffffffffc}}, 0x20, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000340)=0x1, 0x4) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000100)=0x2) 0s ago: executing program 3 (id=1545): mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x402) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x6, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) semctl$SEM_INFO(0x0, 0x2, 0x13, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) kernel console output (not intermixed with test programs): .523626][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.547852][T10936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.569757][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.616724][T10936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.629374][T11340] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 555.725281][ T8598] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.786992][ T8598] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.800339][ T29] audit: type=1400 audit(1787038567.021:3243): avc: denied { append } for pid=11334 comm="syz.8.1327" name="event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 555.996229][ T8598] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.035781][T11128] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 556.053129][ T29] audit: type=1400 audit(1787038567.271:3244): avc: denied { write } for pid=11330 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 556.100156][ T8598] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.225610][ T29] audit: type=1326 audit(1787038567.381:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11349 comm="syz.7.1326" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa32519e0d9 code=0x0 [ 556.282946][T11128] usb 10-1: Using ep0 maxpacket: 16 [ 556.314763][T11128] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 556.358164][T11128] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.382865][ T29] audit: type=1400 audit(1787038567.531:3246): avc: denied { write } for pid=11353 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 556.410323][ T8603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.433704][T11128] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 556.476336][ T8603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.513402][T11128] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.537548][ T5259] 8021q: adding VLAN 0 to HW filter on device eth14 [ 556.558725][T11128] usb 10-1: Product: syz [ 556.596238][T11128] usb 10-1: Manufacturer: syz [ 556.721060][T11128] usb 10-1: SerialNumber: syz [ 556.755072][T11128] usb 10-1: 0:2 : does not exist [ 557.531988][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.538537][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.573217][ T8600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.622507][ T8600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.844967][T11128] usb 10-1: USB disconnect, device number 2 [ 562.204115][T11389] xt_HMARK: spi-set and port-set can't be combined [ 564.698061][ T29] audit: type=1400 audit(1787038575.911:3247): avc: denied { write } for pid=11365 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 565.009723][ T29] audit: type=1400 audit(1787038576.231:3248): avc: denied { write } for pid=11404 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 565.194765][ T5259] 8021q: adding VLAN 0 to HW filter on device eth15 [ 565.355192][T11128] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 565.627432][T11128] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 566.417004][T11128] usb 9-1: config 0 has no interfaces? [ 566.463649][T11128] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.618823][T11128] usb 9-1: config 0 descriptor?? [ 566.855331][ T29] audit: type=1400 audit(1787038578.071:3249): avc: denied { ioctl } for pid=11422 comm="syz.6.1347" path="/dev/rtc0" dev="devtmpfs" ino=920 ioctlcmd=0x7014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 567.192128][ T29] audit: type=1400 audit(1787038578.071:3250): avc: granted { setsecparam } for pid=11422 comm="syz.6.1347" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 567.308745][T11128] usb 9-1: USB disconnect, device number 2 [ 567.341510][ T29] audit: type=1400 audit(1787038578.071:3251): avc: granted { setsecparam } for pid=11422 comm="syz.6.1347" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 567.495114][ T5727] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 568.615128][ T29] audit: type=1400 audit(1787038578.241:3252): avc: denied { read } for pid=11422 comm="syz.6.1347" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 568.795902][ T5727] usb 7-1: Using ep0 maxpacket: 16 [ 568.802478][ T29] audit: type=1400 audit(1787038578.241:3253): avc: denied { open } for pid=11422 comm="syz.6.1347" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 568.857374][ T5727] usb 7-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 568.933314][ T5727] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.011923][ T5727] usb 7-1: config 0 has no interfaces? [ 569.053958][ T29] audit: type=1400 audit(1787038578.381:3254): avc: denied { search } for pid=11432 comm="sed" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 569.101434][ T5727] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.130656][T11446] audit: audit_backlog=65 > audit_backlog_limit=64 [ 569.147090][T11450] audit: audit_backlog=65 > audit_backlog_limit=64 [ 569.179696][ T5727] usb 7-1: config 0 descriptor?? [ 569.248857][T11446] netlink: 'syz.8.1350': attribute type 7 has an invalid length. [ 569.346329][ T8603] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.396517][ T8603] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.339323][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 570.339336][ T29] audit: type=1400 audit(1787038581.561:3328): avc: denied { allowed } for pid=11434 comm="syz.6.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 570.408402][ T8596] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.468295][ T5259] 8021q: adding VLAN 0 to HW filter on device eth16 [ 570.507300][ T8602] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.520854][ T29] audit: type=1400 audit(1787038581.561:3329): avc: denied { create } for pid=11434 comm="syz.6.1349" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 570.702194][ T29] audit: type=1400 audit(1787038581.561:3330): avc: denied { map } for pid=11434 comm="syz.6.1349" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40499 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 570.757528][T11459] audit: audit_backlog=65 > audit_backlog_limit=64 [ 570.794173][T11459] audit: audit_lost=35 audit_rate_limit=0 audit_backlog_limit=64 [ 570.834867][T11459] audit: backlog limit exceeded [ 570.843522][T11462] audit: audit_backlog=65 > audit_backlog_limit=64 [ 570.857353][T11460] audit: audit_backlog=65 > audit_backlog_limit=64 [ 570.878378][ T29] audit: type=1400 audit(1787038581.561:3331): avc: denied { read write } for pid=11434 comm="syz.6.1349" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40499 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 570.916698][T11459] audit: audit_backlog=65 > audit_backlog_limit=64 [ 570.957749][T11435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.988830][T11128] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 571.013749][T11435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.156217][T11128] usb 9-1: Using ep0 maxpacket: 8 [ 571.192368][T11128] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 571.238106][T11128] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.292735][T11128] pvrusb2: Hardware description: Terratec Grabster AV400 [ 571.338997][T11128] pvrusb2: ********** [ 571.377871][T11128] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 571.430039][T11128] pvrusb2: Important functionality might not be entirely working. [ 571.465487][T11128] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 571.520145][T11128] pvrusb2: ********** [ 571.549795][ T2352] pvrusb2: Invalid write control endpoint [ 572.462589][ T2352] pvrusb2: Invalid write control endpoint [ 572.471315][T11128] usb 9-1: USB disconnect, device number 3 [ 572.527083][ T983] usb 7-1: USB disconnect, device number 2 [ 572.536340][ T2352] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 572.619044][ T2352] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 572.679462][ T2352] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 572.776857][ T2352] pvrusb2: Device being rendered inoperable [ 572.847334][ T2352] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 572.928307][ T2352] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 573.011418][ T2352] pvrusb2: Attached sub-driver cx25840 [ 573.090116][ T2352] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 573.211117][ T2352] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 575.056876][T11515] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1364'. [ 575.126606][T11515] l2tp_ppp: sess 2/0: no socket in recv [ 575.251688][T11519] netlink: 'syz.8.1364': attribute type 7 has an invalid length. [ 575.361943][ T29] kauditd_printk_skb: 410 callbacks suppressed [ 575.361958][ T29] audit: type=1400 audit(1787038586.491:3676): avc: denied { execmem } for pid=11522 comm="syz.7.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 575.557462][T11524] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1366'. [ 575.700236][ T29] audit: type=1400 audit(1787038586.621:3677): avc: denied { search } for pid=11521 comm="sed" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 575.881118][ T29] audit: type=1400 audit(1787038586.631:3678): avc: denied { read } for pid=11521 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 577.488821][ T29] audit: type=1400 audit(1787038586.631:3679): avc: denied { open } for pid=11521 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 578.752636][T11535] audit: audit_backlog=65 > audit_backlog_limit=64 [ 578.760248][T11535] audit: audit_lost=59 audit_rate_limit=0 audit_backlog_limit=64 [ 578.768059][T11535] audit: backlog limit exceeded [ 578.772939][T11535] audit: audit_backlog=65 > audit_backlog_limit=64 [ 578.779479][T11535] audit: audit_lost=60 audit_rate_limit=0 audit_backlog_limit=64 [ 578.787312][T11535] audit: backlog limit exceeded [ 578.925924][T11540] CacheFiles: No cache directory specified [ 579.023458][T11548] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=464 sclass=netlink_xfrm_socket pid=11548 comm=syz.8.1371 [ 579.153571][T11548] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1371'. [ 579.466098][ T5727] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 579.659897][ T5727] usb 9-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00 [ 579.711246][ T5727] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 580.620602][T11574] CacheFiles: No cache directory specified [ 580.647924][ T5727] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.678975][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 580.678988][ T29] audit: type=1400 audit(1787038591.901:3897): avc: denied { prog_load } for pid=11568 comm="syz.1.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 580.909824][ T29] audit: type=1400 audit(1787038591.901:3898): avc: denied { bpf } for pid=11568 comm="syz.1.1376" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 582.077577][ T29] audit: type=1400 audit(1787038591.901:3899): avc: denied { perfmon } for pid=11568 comm="syz.1.1376" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 582.271447][ T983] usb 9-1: USB disconnect, device number 4 [ 582.277462][T10927] Bluetooth: hci0: Reading Intel version command failed (-71) [ 582.311186][T10928] audit: audit_backlog=65 > audit_backlog_limit=64 [ 582.324587][T11589] audit: audit_backlog=65 > audit_backlog_limit=64 [ 582.390054][T10928] audit: audit_lost=71 audit_rate_limit=0 audit_backlog_limit=64 [ 582.403667][T11593] audit: audit_backlog=65 > audit_backlog_limit=64 [ 582.413607][ T29] audit: type=1400 audit(1787038591.971:3900): avc: denied { ioctl } for pid=11547 comm="syz.8.1371" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 582.443090][T11594] audit: audit_backlog=65 > audit_backlog_limit=64 [ 582.496146][T10928] audit: backlog limit exceeded [ 582.550478][T11589] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1379'. [ 582.809059][T11594] netlink: 'syz.7.1379': attribute type 7 has an invalid length. [ 583.287807][ T8599] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.360317][ T8599] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.458158][ T8599] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.655143][ T8603] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.761194][ T983] IPVS: starting estimator thread 0... [ 583.886584][T11613] IPVS: using max 78 ests per chain, 187200 per kthread [ 584.517722][T11623] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1385'. [ 584.585331][ T983] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 584.768578][ T983] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 584.809139][ T983] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.855359][ T983] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 584.914459][ T983] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 584.933916][T11629] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1383'. [ 585.028904][ T983] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 585.135112][ T983] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.196530][T11617] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 585.774485][ T29] kauditd_printk_skb: 443 callbacks suppressed [ 585.774500][ T29] audit: type=1400 audit(1787038596.991:4218): avc: denied { search } for pid=11601 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 586.235534][T11617] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 586.636167][ T983] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 586.698961][ T983] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 586.752857][ T29] audit: type=1400 audit(1787038597.241:4219): avc: denied { write } for pid=11607 comm="syz.7.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 586.800598][ T983] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 586.878655][ T983] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 586.958826][ T29] audit: type=1400 audit(1787038597.461:4220): avc: denied { ioctl } for pid=11616 comm="syz.6.1384" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 586.986714][ T983] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 587.049438][T11640] audit: audit_backlog=65 > audit_backlog_limit=64 [ 587.064708][ T983] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 587.080786][T10929] audit: audit_backlog=65 > audit_backlog_limit=64 [ 587.106745][T11640] audit: audit_lost=115 audit_rate_limit=0 audit_backlog_limit=64 [ 587.137628][T10929] audit: audit_lost=116 audit_rate_limit=0 audit_backlog_limit=64 [ 587.150880][ T983] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 587.174264][T11640] audit: backlog limit exceeded [ 587.201123][ T29] audit: type=1400 audit(1787038597.561:4221): avc: denied { prog_load } for pid=11607 comm="syz.7.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 587.224189][T10929] audit: backlog limit exceeded [ 587.738072][ T188] usb 7-1: USB disconnect, device number 3 [ 587.829626][ T188] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 587.926959][ T188] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 587.994091][ T188] keyspan 7-1:1.0: device disconnected [ 588.029622][T10927] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci8/hci8:201' [ 588.039505][T10927] CPU: 0 UID: 0 PID: 10927 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 588.039526][T10927] Tainted: [L]=SOFTLOCKUP [ 588.039530][T10927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 588.039537][T10927] Workqueue: hci8 hci_rx_work [ 588.039555][T10927] Call Trace: [ 588.039561][T10927] [ 588.039567][T10927] dump_stack_lvl+0x100/0x190 [ 588.039585][T10927] sysfs_warn_dup.cold+0x1c/0x28 [ 588.039604][T10927] sysfs_create_dir_ns+0x24b/0x2b0 [ 588.039623][T10927] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 588.039638][T10927] ? find_held_lock+0x2b/0x80 [ 588.039651][T10927] ? kobject_add_internal+0x25f/0x930 [ 588.039668][T10927] ? kobject_add_internal+0x25f/0x930 [ 588.039686][T10927] ? do_raw_spin_unlock+0x145/0x1e0 [ 588.039705][T10927] kobject_add_internal+0x2c8/0x930 [ 588.039725][T10927] kobject_add+0x16a/0x1e0 [ 588.039742][T10927] ? __pfx_kobject_add+0x10/0x10 [ 588.039758][T10927] ? class_to_subsys+0x10f/0x150 [ 588.039778][T10927] ? kobject_put+0xb9/0x640 [ 588.039793][T10927] ? _raw_spin_unlock+0x28/0x50 [ 588.039808][T10927] device_add+0x294/0x1970 [ 588.039825][T10927] ? __pfx_dev_set_name+0x10/0x10 [ 588.039837][T10927] ? __pfx_device_add+0x10/0x10 [ 588.039854][T10927] ? mgmt_send_event_skb+0x2fb/0x460 [ 588.039871][T10927] hci_conn_add_sysfs+0x1a3/0x260 [ 588.039887][T10927] le_conn_complete_evt+0x11eb/0x1f60 [ 588.039904][T10927] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 588.039916][T10927] ? hci_event_packet+0x186/0xcd0 [ 588.039931][T10927] hci_le_conn_complete_evt+0x23c/0x3a0 [ 588.039944][T10927] ? skb_pull_data+0x15f/0x1e0 [ 588.039957][T10927] hci_le_meta_evt+0x34a/0x5f0 [ 588.039971][T10927] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 588.039986][T10927] hci_event_packet+0x51c/0xcd0 [ 588.039998][T10927] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 588.040012][T10927] ? __pfx_hci_event_packet+0x10/0x10 [ 588.040026][T10927] ? kcov_remote_start+0x384/0x670 [ 588.040041][T10927] ? lockdep_hardirqs_on+0x78/0x100 [ 588.040057][T10927] hci_rx_work+0x451/0xfc0 [ 588.040071][T10927] process_one_work+0xa23/0x1940 [ 588.040090][T10927] ? __pfx_process_one_work+0x10/0x10 [ 588.040116][T10927] ? __pfx_hci_rx_work+0x10/0x10 [ 588.040130][T10927] worker_thread+0x5ef/0xe50 [ 588.040147][T10927] ? __pfx_worker_thread+0x10/0x10 [ 588.040161][T10927] ? kthread+0x13a/0x450 [ 588.040172][T10927] ? __pfx_worker_thread+0x10/0x10 [ 588.040185][T10927] kthread+0x370/0x450 [ 588.040197][T10927] ? __pfx_kthread+0x10/0x10 [ 588.040210][T10927] ret_from_fork+0x72b/0xd50 [ 588.040229][T10927] ? __pfx_ret_from_fork+0x10/0x10 [ 588.040245][T10927] ? rcu_is_watching+0x12/0xc0 [ 588.040262][T10927] ? __switch_to+0x800/0x10f0 [ 588.040274][T10927] ? __pfx_kthread+0x10/0x10 [ 588.040286][T10927] ret_from_fork_asm+0x1a/0x30 [ 588.040310][T10927] [ 588.040326][T10927] kobject: kobject_add_internal failed for hci8:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 588.354097][T10927] Bluetooth: hci8: failed to register connection device [ 588.864509][T11663] xt_HMARK: spi-set and port-set can't be combined [ 590.229818][T11669] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1393'. [ 590.305481][T11669] l2tp_ppp: sess 2/0: no socket in recv [ 590.449641][T11677] netlink: 'syz.6.1393': attribute type 7 has an invalid length. [ 590.697659][ T1145] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.748626][ T1145] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.835939][ T1145] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.874858][ T29] kauditd_printk_skb: 283 callbacks suppressed [ 590.874872][ T29] audit: type=1400 audit(1787038602.091:4457): avc: denied { read write } for pid=10923 comm="syz-executor" name="loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 590.923799][T11686] xt_HMARK: spi-set and port-set can't be combined [ 590.947780][ T1145] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.152108][T11690] audit: audit_backlog=65 > audit_backlog_limit=64 [ 592.166642][T11691] audit: audit_backlog=65 > audit_backlog_limit=64 [ 592.273074][ T29] audit: type=1400 audit(1787038602.091:4458): avc: denied { open } for pid=10923 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 592.300672][T11690] audit: audit_lost=133 audit_rate_limit=0 audit_backlog_limit=64 [ 592.310072][T11691] audit: audit_lost=134 audit_rate_limit=0 audit_backlog_limit=64 [ 593.349769][T11690] audit: backlog limit exceeded [ 593.414634][T11691] audit: backlog limit exceeded [ 593.423282][T11690] audit: audit_backlog=65 > audit_backlog_limit=64 [ 593.449699][T11691] audit: audit_backlog=65 > audit_backlog_limit=64 [ 596.559045][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 596.559056][ T29] audit: type=1400 audit(1787038607.781:4584): avc: denied { module_request } for pid=11714 comm="syz.9.1404" kmod="fs-aufs" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 596.835667][ T29] audit: type=1400 audit(1787038607.851:4585): avc: denied { search } for pid=11718 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 597.016499][ T29] audit: type=1400 audit(1787038607.851:4586): avc: denied { search } for pid=11718 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 597.226333][ T29] audit: type=1400 audit(1787038607.851:4587): avc: denied { search } for pid=11718 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 597.388585][T11727] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1405'. [ 597.524198][ T29] audit: type=1400 audit(1787038607.851:4588): avc: denied { search } for pid=11718 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 597.553838][T11731] audit: audit_backlog=65 > audit_backlog_limit=64 [ 597.560570][T11731] audit: audit_lost=148 audit_rate_limit=0 audit_backlog_limit=64 [ 597.568644][T11731] audit: backlog limit exceeded [ 597.573861][T11731] audit: audit_backlog=65 > audit_backlog_limit=64 [ 597.581192][T11731] audit: audit_lost=149 audit_rate_limit=0 audit_backlog_limit=64 [ 597.663986][T11727] l2tp_ppp: sess 2/0: no socket in recv [ 597.772263][T11733] netlink: 'syz.8.1405': attribute type 7 has an invalid length. [ 598.127602][T11741] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1407'. [ 598.263960][T11741] l2tp_ppp: sess 2/0: no socket in recv [ 598.615197][ T5727] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 598.992009][T11757] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1410'. [ 599.037470][ T5727] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 599.121558][ T5727] usb 2-1: config 0 has no interfaces? [ 599.243338][ T5727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.109934][ T5727] usb 2-1: config 0 descriptor?? [ 601.095573][ T5727] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 601.444327][ T5727] usb 9-1: Using ep0 maxpacket: 32 [ 601.600812][ T29] kauditd_printk_skb: 361 callbacks suppressed [ 601.600824][ T29] audit: type=1400 audit(1787038612.821:4895): avc: denied { map_create } for pid=11775 comm="syz.9.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 602.229883][ T5727] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 602.296486][ T5727] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 602.332136][ T5727] usb 9-1: config 0 has no interface number 0 [ 602.372296][ T29] audit: type=1400 audit(1787038612.821:4896): avc: denied { prog_load } for pid=11775 comm="syz.9.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 602.419220][ T5727] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.466321][ T5727] usb 9-1: Product: syz [ 602.494251][ T5727] usb 9-1: Manufacturer: syz [ 602.522594][ T5727] usb 9-1: SerialNumber: syz [ 602.528337][ T29] audit: type=1400 audit(1787038612.821:4897): avc: denied { bpf } for pid=11775 comm="syz.9.1415" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 602.583579][ T5727] usb 9-1: config 0 descriptor?? [ 602.620321][ T5727] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 602.662746][ T29] audit: type=1400 audit(1787038612.821:4898): avc: denied { perfmon } for pid=11775 comm="syz.9.1415" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 602.743264][ T5259] 8021q: adding VLAN 0 to HW filter on device eth2 [ 602.781400][ T29] audit: type=1400 audit(1787038613.451:4899): avc: denied { ioctl } for pid=11768 comm="syz.8.1413" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 602.838328][ T5727] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 602.901306][ T5727] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 602.947781][ T29] audit: type=1400 audit(1787038613.471:4900): avc: denied { ioctl } for pid=11768 comm="syz.8.1413" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 603.123523][ T5870] usb 2-1: USB disconnect, device number 34 [ 603.149314][T11771] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1413'. [ 603.198083][ T29] audit: type=1400 audit(1787038613.511:4901): avc: denied { ioctl } for pid=11768 comm="syz.8.1413" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 603.388821][T10929] audit: audit_backlog=65 > audit_backlog_limit=64 [ 603.396707][T11789] audit: audit_backlog=65 > audit_backlog_limit=64 [ 603.438878][T10919] audit: audit_backlog=65 > audit_backlog_limit=64 [ 605.456791][ C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 605.464497][ T188] usb 9-1: USB disconnect, device number 5 [ 605.534728][ T188] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 605.572267][T11798] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1418'. [ 605.644568][ T188] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 605.777603][T11798] l2tp_ppp: sess 2/0: no socket in recv [ 605.996955][T11810] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1420'. [ 606.091434][T11815] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1421'. [ 606.152524][ T188] quatech2 9-1:0.51: device disconnected [ 606.220976][T11798] netlink: 'syz.6.1418': attribute type 7 has an invalid length. [ 606.646458][T11823] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1422'. [ 606.674157][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 606.674172][ T29] audit: type=1400 audit(1787038617.781:5077): avc: denied { execmem } for pid=11822 comm="syz.7.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 607.083866][ T29] audit: type=1400 audit(1787038617.871:5078): avc: denied { create } for pid=11822 comm="syz.7.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 607.987894][T11829] audit: audit_backlog=65 > audit_backlog_limit=64 [ 608.014946][T11835] audit: audit_backlog=65 > audit_backlog_limit=64 [ 608.032497][ T29] audit: type=1400 audit(1787038617.871:5079): avc: denied { write } for pid=11822 comm="syz.7.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 608.185068][ T188] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 608.501314][T11829] audit: audit_lost=196 audit_rate_limit=0 audit_backlog_limit=64 [ 608.764798][T11835] audit: audit_lost=197 audit_rate_limit=0 audit_backlog_limit=64 [ 608.946292][T11832] audit: audit_backlog=65 > audit_backlog_limit=64 [ 608.984089][T11829] audit: backlog limit exceeded [ 608.989350][T11835] audit: backlog limit exceeded [ 609.189498][ T188] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 609.262147][ T188] usb 7-1: config 0 has no interfaces? [ 609.293399][ T188] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.319740][ T5259] 8021q: adding VLAN 0 to HW filter on device eth3 [ 609.348410][ T188] usb 7-1: config 0 descriptor?? [ 609.669469][T11845] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=464 sclass=netlink_xfrm_socket pid=11845 comm=syz.1.1428 [ 610.423166][ T188] usb 7-1: USB disconnect, device number 4 [ 610.599305][T11851] xt_HMARK: spi-set and port-set can't be combined [ 610.613338][T11845] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1428'. [ 611.485027][ T983] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 611.800386][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 611.800397][ T29] audit: type=1400 audit(1787038623.021:5239): avc: denied { getattr } for pid=11853 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 612.780019][ T983] usb 2-1: device descriptor read/all, error -71 [ 613.668900][ T29] audit: type=1400 audit(1787038623.021:5240): avc: denied { search } for pid=11853 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 613.948944][T11860] audit: audit_backlog=65 > audit_backlog_limit=64 [ 613.973503][T11867] audit: audit_backlog=65 > audit_backlog_limit=64 [ 613.991058][T11865] audit: audit_backlog=65 > audit_backlog_limit=64 [ 614.006429][T10928] audit: audit_backlog=65 > audit_backlog_limit=64 [ 614.022400][T11868] audit: audit_backlog=65 > audit_backlog_limit=64 [ 614.039546][T11867] audit: audit_lost=207 audit_rate_limit=0 audit_backlog_limit=64 [ 614.052264][T11860] audit: audit_lost=208 audit_rate_limit=0 audit_backlog_limit=64 [ 614.061951][T11870] audit: audit_backlog=65 > audit_backlog_limit=64 [ 614.980980][T11878] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1434'. [ 617.092918][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 617.092929][ T29] audit: type=1400 audit(1787038628.311:5348): avc: denied { read write } for pid=10928 comm="syz-executor" name="loop8" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 617.207441][T11888] CacheFiles: No cache directory specified [ 617.368510][ T29] audit: type=1400 audit(1787038628.351:5349): avc: denied { read write open } for pid=10928 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 617.437016][T10927] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci9/hci9:201' [ 617.449103][T10927] CPU: 0 UID: 0 PID: 10927 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 617.449126][T10927] Tainted: [L]=SOFTLOCKUP [ 617.449131][T10927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 617.449141][T10927] Workqueue: hci9 hci_rx_work [ 617.449160][T10927] Call Trace: [ 617.449166][T10927] [ 617.449172][T10927] dump_stack_lvl+0x100/0x190 [ 617.449191][T10927] sysfs_warn_dup.cold+0x1c/0x28 [ 617.449209][T10927] sysfs_create_dir_ns+0x24b/0x2b0 [ 617.449228][T10927] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 617.449244][T10927] ? find_held_lock+0x2b/0x80 [ 617.449255][T10927] ? kobject_add_internal+0x25f/0x930 [ 617.449274][T10927] ? kobject_add_internal+0x25f/0x930 [ 617.449293][T10927] ? do_raw_spin_unlock+0x145/0x1e0 [ 617.449311][T10927] kobject_add_internal+0x2c8/0x930 [ 617.449331][T10927] kobject_add+0x16a/0x1e0 [ 617.449351][T10927] ? __pfx_kobject_add+0x10/0x10 [ 617.449366][T10927] ? class_to_subsys+0x10f/0x150 [ 617.449388][T10927] ? kobject_put+0xb9/0x640 [ 617.449403][T10927] ? _raw_spin_unlock+0x28/0x50 [ 617.449418][T10927] device_add+0x294/0x1970 [ 617.449436][T10927] ? __pfx_dev_set_name+0x10/0x10 [ 617.449449][T10927] ? __pfx_device_add+0x10/0x10 [ 617.449465][T10927] ? mgmt_send_event_skb+0x2fb/0x460 [ 617.449482][T10927] hci_conn_add_sysfs+0x1a3/0x260 [ 617.449499][T10927] le_conn_complete_evt+0x11eb/0x1f60 [ 617.449518][T10927] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 617.449530][T10927] ? hci_event_packet+0x186/0xcd0 [ 617.449545][T10927] hci_le_conn_complete_evt+0x23c/0x3a0 [ 617.449559][T10927] ? skb_pull_data+0x15f/0x1e0 [ 617.449572][T10927] hci_le_meta_evt+0x34a/0x5f0 [ 617.449586][T10927] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 617.449601][T10927] hci_event_packet+0x51c/0xcd0 [ 617.449614][T10927] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 617.449627][T10927] ? __pfx_hci_event_packet+0x10/0x10 [ 617.449642][T10927] ? kcov_remote_start+0x384/0x670 [ 617.449655][T10927] ? lockdep_hardirqs_on+0x78/0x100 [ 617.449673][T10927] hci_rx_work+0x451/0xfc0 [ 617.449689][T10927] process_one_work+0xa23/0x1940 [ 617.449710][T10927] ? __pfx_process_one_work+0x10/0x10 [ 617.449728][T10927] ? __pfx_hci_rx_work+0x10/0x10 [ 617.449743][T10927] worker_thread+0x5ef/0xe50 [ 617.449760][T10927] ? __pfx_worker_thread+0x10/0x10 [ 617.449775][T10927] ? kthread+0x13a/0x450 [ 617.449786][T10927] ? __pfx_worker_thread+0x10/0x10 [ 617.449798][T10927] kthread+0x370/0x450 [ 617.449810][T10927] ? __pfx_kthread+0x10/0x10 [ 617.449823][T10927] ret_from_fork+0x72b/0xd50 [ 617.449842][T10927] ? __pfx_ret_from_fork+0x10/0x10 [ 617.449859][T10927] ? rcu_is_watching+0x12/0xc0 [ 617.449877][T10927] ? __switch_to+0x800/0x10f0 [ 617.449890][T10927] ? __pfx_kthread+0x10/0x10 [ 617.449903][T10927] ret_from_fork_asm+0x1a/0x30 [ 617.449929][T10927] [ 617.451500][T10927] kobject: kobject_add_internal failed for hci9:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 617.776774][T10927] Bluetooth: hci9: failed to register connection device [ 618.116004][ T29] audit: type=1400 audit(1787038628.351:5350): avc: denied { ioctl } for pid=10928 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 618.207488][T11899] audit: audit_backlog=65 > audit_backlog_limit=64 [ 618.248385][T11899] audit: audit_lost=219 audit_rate_limit=0 audit_backlog_limit=64 [ 618.268025][T10928] audit: audit_backlog=65 > audit_backlog_limit=64 [ 618.291539][ T29] audit: type=1400 audit(1787038628.421:5351): avc: denied { search } for pid=11890 comm="sed" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 618.322770][T11899] audit: backlog limit exceeded [ 618.333735][T10928] audit: audit_lost=220 audit_rate_limit=0 audit_backlog_limit=64 [ 618.376622][T10928] audit: backlog limit exceeded [ 618.561681][ T5259] 8021q: adding VLAN 0 to HW filter on device eth4 [ 618.935168][ T983] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 618.968522][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.975592][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 619.125687][ T5727] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 619.167105][ T983] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 619.245737][ T983] usb 9-1: config 0 has no interfaces? [ 619.281580][ T983] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.335260][ T5727] usb 7-1: Using ep0 maxpacket: 32 [ 620.201079][ T5727] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 620.437603][ T983] usb 9-1: config 0 descriptor?? [ 620.494572][ T5727] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 620.543008][ T5727] usb 7-1: config 0 has no interface number 0 [ 620.587426][ T5727] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.633104][ T5727] usb 7-1: Product: syz [ 620.663778][ T5727] usb 7-1: Manufacturer: syz [ 620.703764][ T5727] usb 7-1: SerialNumber: syz [ 620.724329][ T983] usb 9-1: USB disconnect, device number 6 [ 620.843596][ T5727] usb 7-1: config 0 descriptor?? [ 620.892997][ T5727] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 621.104134][ T5727] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 621.144812][ T5727] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 621.513408][T11917] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1445'. [ 622.614626][ T29] kauditd_printk_skb: 301 callbacks suppressed [ 622.614637][ T29] audit: type=1400 audit(1787038633.831:5647): avc: denied { create } for pid=11946 comm="syz.9.1449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 622.961539][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 622.971311][ T983] usb 7-1: USB disconnect, device number 5 [ 623.033652][ T5259] 8021q: adding VLAN 0 to HW filter on device eth17 [ 623.072218][ T983] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 623.102874][T11951] CacheFiles: No cache directory specified [ 623.132270][ T29] audit: type=1400 audit(1787038634.081:5648): avc: denied { create } for pid=11944 comm="syz.1.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 623.165237][T11128] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 623.245545][ T983] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 623.405016][T11128] usb 2-1: Using ep0 maxpacket: 16 [ 624.189512][ T29] audit: type=1400 audit(1787038634.121:5649): avc: denied { bind } for pid=11944 comm="syz.1.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 624.209386][ T983] quatech2 7-1:0.51: device disconnected [ 624.229148][T11128] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 624.268907][T11959] audit: audit_backlog=65 > audit_backlog_limit=64 [ 624.277520][T10927] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 624.287698][T10927] CPU: 0 UID: 0 PID: 10927 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 624.287719][T10927] Tainted: [L]=SOFTLOCKUP [ 624.287725][T10927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 624.287734][T10927] Workqueue: hci6 hci_rx_work [ 624.287766][T10927] Call Trace: [ 624.287770][T10927] [ 624.287776][T10927] dump_stack_lvl+0x100/0x190 [ 624.287793][T10927] sysfs_warn_dup.cold+0x1c/0x28 [ 624.287811][T10927] sysfs_create_dir_ns+0x24b/0x2b0 [ 624.287827][T10927] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 624.287842][T10927] ? find_held_lock+0x2b/0x80 [ 624.287854][T10927] ? kobject_add_internal+0x25f/0x930 [ 624.287872][T10927] ? kobject_add_internal+0x25f/0x930 [ 624.287889][T10927] ? do_raw_spin_unlock+0x145/0x1e0 [ 624.287907][T10927] kobject_add_internal+0x2c8/0x930 [ 624.287926][T10927] kobject_add+0x16a/0x1e0 [ 624.287944][T10927] ? __pfx_kobject_add+0x10/0x10 [ 624.287959][T10927] ? class_to_subsys+0x10f/0x150 [ 624.287979][T10927] ? kobject_put+0xb9/0x640 [ 624.287994][T10927] ? _raw_spin_unlock+0x28/0x50 [ 624.288009][T10927] device_add+0x294/0x1970 [ 624.288025][T10927] ? __pfx_dev_set_name+0x10/0x10 [ 624.288037][T10927] ? __pfx_device_add+0x10/0x10 [ 624.288054][T10927] ? mgmt_send_event_skb+0x2fb/0x460 [ 624.288071][T10927] hci_conn_add_sysfs+0x1a3/0x260 [ 624.288086][T10927] le_conn_complete_evt+0x11eb/0x1f60 [ 624.288103][T10927] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 624.288115][T10927] ? hci_event_packet+0x186/0xcd0 [ 624.288132][T10927] hci_le_conn_complete_evt+0x23c/0x3a0 [ 624.288145][T10927] ? skb_pull_data+0x15f/0x1e0 [ 624.288158][T10927] hci_le_meta_evt+0x34a/0x5f0 [ 624.288171][T10927] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 624.288186][T10927] hci_event_packet+0x51c/0xcd0 [ 624.288198][T10927] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 624.288211][T10927] ? __pfx_hci_event_packet+0x10/0x10 [ 624.288225][T10927] ? kcov_remote_start+0x384/0x670 [ 624.288238][T10927] ? lockdep_hardirqs_on+0x78/0x100 [ 624.288254][T10927] hci_rx_work+0x451/0xfc0 [ 624.288269][T10927] process_one_work+0xa23/0x1940 [ 624.288287][T10927] ? __pfx_process_one_work+0x10/0x10 [ 624.288304][T10927] ? __pfx_hci_rx_work+0x10/0x10 [ 624.288317][T10927] worker_thread+0x5ef/0xe50 [ 624.288333][T10927] ? __pfx_worker_thread+0x10/0x10 [ 624.288345][T10927] ? kthread+0x13a/0x450 [ 624.288355][T10927] ? __pfx_worker_thread+0x10/0x10 [ 624.288367][T10927] kthread+0x370/0x450 [ 624.288377][T10927] ? __pfx_kthread+0x10/0x10 [ 624.288389][T10927] ret_from_fork+0x72b/0xd50 [ 624.288406][T10927] ? __pfx_ret_from_fork+0x10/0x10 [ 624.288422][T10927] ? rcu_is_watching+0x12/0xc0 [ 624.288439][T10927] ? __switch_to+0x800/0x10f0 [ 624.288451][T10927] ? __pfx_kthread+0x10/0x10 [ 624.288462][T10927] ret_from_fork_asm+0x1a/0x30 [ 624.288486][T10927] [ 624.288499][T10927] kobject: kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 624.591447][T11968] audit: audit_backlog=65 > audit_backlog_limit=64 [ 624.613901][T10927] Bluetooth: hci6: failed to register connection device [ 624.639251][T11965] audit: audit_backlog=65 > audit_backlog_limit=64 [ 624.670290][T11968] audit: audit_lost=223 audit_rate_limit=0 audit_backlog_limit=64 [ 624.679092][T11959] audit: audit_lost=224 audit_rate_limit=0 audit_backlog_limit=64 [ 624.694346][T11128] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 624.720088][T11965] audit: audit_lost=225 audit_rate_limit=0 audit_backlog_limit=64 [ 624.732422][ T29] audit: type=1400 audit(1787038634.121:5650): avc: denied { setopt } for pid=11944 comm="syz.1.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 624.763796][T11128] usb 2-1: can't read configurations, error -71 [ 627.721818][ T29] kauditd_printk_skb: 283 callbacks suppressed [ 627.721831][ T29] audit: type=1400 audit(1787038638.941:5763): avc: denied { search } for pid=11995 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 627.911894][ T29] audit: type=1400 audit(1787038638.941:5764): avc: denied { search } for pid=11995 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 628.124293][ T29] audit: type=1400 audit(1787038638.941:5765): avc: denied { search } for pid=11995 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 628.311017][ T29] audit: type=1400 audit(1787038638.981:5766): avc: denied { read write } for pid=11992 comm="syz.6.1459" name="cec6" dev="devtmpfs" ino=988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 628.405498][ T188] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 628.480663][T12008] audit: audit_backlog=65 > audit_backlog_limit=64 [ 628.523860][T12005] audit: audit_backlog=65 > audit_backlog_limit=64 [ 628.553346][T12008] audit: audit_lost=282 audit_rate_limit=0 audit_backlog_limit=64 [ 628.578214][ T29] audit: type=1400 audit(1787038638.981:5767): avc: denied { ioctl open } for pid=11992 comm="syz.6.1459" path="/dev/cec6" dev="devtmpfs" ino=988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 628.612890][T12015] audit: audit_backlog=65 > audit_backlog_limit=64 [ 628.641687][T12008] audit: backlog limit exceeded [ 628.838308][ T188] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 628.883516][ T188] usb 2-1: config 0 has no interfaces? [ 628.905074][T11128] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 628.920916][ T188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.978086][ T188] usb 2-1: config 0 descriptor?? [ 629.107258][T11128] usb 7-1: Using ep0 maxpacket: 32 [ 629.136489][T11128] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 629.187246][T11128] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 629.239850][T11128] usb 7-1: config 0 has no interface number 0 [ 629.280738][T11128] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.324732][T11128] usb 7-1: Product: syz [ 629.356111][T11128] usb 7-1: Manufacturer: syz [ 629.392384][T11128] usb 7-1: SerialNumber: syz [ 629.432278][T11128] usb 7-1: config 0 descriptor?? [ 629.588576][T11128] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 629.800542][T11128] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 629.862857][T11128] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 630.220718][T12015] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1462'. [ 631.455086][ T5727] usb 2-1: USB disconnect, device number 39 [ 631.653803][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 631.664881][ T983] usb 7-1: USB disconnect, device number 6 [ 631.773693][ T983] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 631.893909][ T983] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 632.048666][ T983] quatech2 7-1:0.51: device disconnected [ 632.847117][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 632.847130][ T29] audit: type=1400 audit(1787038644.071:6040): avc: denied { append } for pid=12051 comm="syz.9.1468" name="001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 633.120256][ T29] audit: type=1400 audit(1787038644.121:6041): avc: denied { read write } for pid=10923 comm="syz-executor" name="loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 634.111595][ T29] audit: type=1400 audit(1787038644.121:6042): avc: denied { open } for pid=10923 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 634.345074][ T29] audit: type=1400 audit(1787038644.121:6043): avc: denied { ioctl } for pid=10923 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 634.566711][ T29] audit: type=1400 audit(1787038644.121:6044): avc: denied { search } for pid=12062 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 634.822386][ T29] audit: type=1400 audit(1787038644.211:6045): avc: denied { create } for pid=12063 comm="syz.7.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 635.478701][ T29] audit: type=1400 audit(1787038644.221:6046): avc: denied { setopt } for pid=12063 comm="syz.7.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 635.644729][ T29] audit: type=1400 audit(1787038644.221:6047): avc: denied { bind } for pid=12063 comm="syz.7.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 635.817157][ T29] audit: type=1400 audit(1787038644.221:6048): avc: denied { name_bind } for pid=12063 comm="syz.7.1469" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 636.784815][ T29] audit: type=1400 audit(1787038644.221:6049): avc: denied { node_bind } for pid=12063 comm="syz.7.1469" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 637.626213][ T5835] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 637.828976][ T5835] usb 10-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 637.869153][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 637.869165][ T29] audit: type=1400 audit(1787038649.091:6190): avc: denied { search } for pid=12119 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 637.938508][ T5835] usb 10-1: config 0 has no interfaces? [ 637.971035][ T5835] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.029203][ T5835] usb 10-1: config 0 descriptor?? [ 638.084388][ T29] audit: type=1400 audit(1787038649.131:6191): avc: denied { read } for pid=12119 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 638.252222][ T29] audit: type=1400 audit(1787038649.131:6192): avc: denied { open } for pid=12119 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 638.369353][ T5835] usb 10-1: USB disconnect, device number 3 [ 638.450753][T12126] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1479'. [ 638.504564][ T29] audit: type=1400 audit(1787038649.131:6193): avc: denied { search } for pid=12119 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 638.608842][T12133] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1479'. [ 638.729181][ T29] audit: type=1400 audit(1787038649.131:6194): avc: denied { search } for pid=12119 comm="cmp" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 638.863867][ T29] audit: type=1400 audit(1787038649.131:6195): avc: denied { search } for pid=12119 comm="cmp" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 638.945794][ T5835] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 639.007399][ T29] audit: type=1400 audit(1787038649.131:6196): avc: denied { read } for pid=12119 comm="cmp" name="resolv.conf.eth5.ipv4ll" dev="tmpfs" ino=7902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 639.147664][ T5835] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 639.164731][ T29] audit: type=1400 audit(1787038649.131:6197): avc: denied { open } for pid=12119 comm="cmp" path="/run/dhcpcd/hook-state/resolv.conf.eth5.ipv4ll" dev="tmpfs" ino=7902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 639.225588][ T5835] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 639.281977][ T5835] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 639.357890][ T29] audit: type=1400 audit(1787038649.131:6198): avc: denied { getattr } for pid=12119 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 639.417480][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.478411][ T5835] usb 7-1: Product: syz [ 639.513649][ T5835] usb 7-1: Manufacturer: syz [ 640.345525][ T5835] usb 7-1: SerialNumber: syz [ 640.371800][ T29] audit: type=1400 audit(1787038649.151:6199): avc: denied { ioctl } for pid=12104 comm="syz.9.1477" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 640.878486][ T5835] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 641.588158][ T188] usb 7-1: USB disconnect, device number 7 [ 641.730983][ T188] usblp0: removed [ 642.920831][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 642.920842][ T29] audit: type=1400 audit(1787038654.141:6304): avc: denied { read write } for pid=10919 comm="syz-executor" name="loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 643.142054][ T29] audit: type=1400 audit(1787038654.181:6305): avc: denied { open } for pid=10919 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 644.145803][ T5835] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 644.170619][ T29] audit: type=1400 audit(1787038654.181:6306): avc: denied { ioctl } for pid=10919 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 644.385767][ T29] audit: type=1400 audit(1787038654.271:6307): avc: denied { read write } for pid=12175 comm="syz.6.1487" name="udmabuf" dev="devtmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 644.426737][ T5835] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 644.521094][ T5835] usb 7-1: config 0 has no interfaces? [ 644.567308][ T5835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.613007][T12190] audit: audit_backlog=65 > audit_backlog_limit=64 [ 644.630320][ T29] audit: type=1400 audit(1787038654.271:6308): avc: denied { open } for pid=12175 comm="syz.6.1487" path="/dev/udmabuf" dev="devtmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 644.689349][ T5835] usb 7-1: config 0 descriptor?? [ 644.698038][T12190] audit: audit_lost=301 audit_rate_limit=0 audit_backlog_limit=64 [ 644.711572][T12192] audit: audit_backlog=65 > audit_backlog_limit=64 [ 644.745468][T12178] audit: audit_backlog=65 > audit_backlog_limit=64 [ 644.755704][T12190] audit: backlog limit exceeded [ 646.233675][T10927] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 646.246289][T10927] CPU: 0 UID: 0 PID: 10927 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 646.246320][T10927] Tainted: [L]=SOFTLOCKUP [ 646.246324][T10927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 646.246332][T10927] Workqueue: hci3 hci_rx_work [ 646.246351][T10927] Call Trace: [ 646.246356][T10927] [ 646.246363][T10927] dump_stack_lvl+0x100/0x190 [ 646.246380][T10927] sysfs_warn_dup.cold+0x1c/0x28 [ 646.246399][T10927] sysfs_create_dir_ns+0x24b/0x2b0 [ 646.246418][T10927] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 646.246433][T10927] ? find_held_lock+0x2b/0x80 [ 646.246445][T10927] ? kobject_add_internal+0x25f/0x930 [ 646.246465][T10927] ? kobject_add_internal+0x25f/0x930 [ 646.246486][T10927] ? do_raw_spin_unlock+0x145/0x1e0 [ 646.246503][T10927] kobject_add_internal+0x2c8/0x930 [ 646.246521][T10927] kobject_add+0x16a/0x1e0 [ 646.246538][T10927] ? __pfx_kobject_add+0x10/0x10 [ 646.246553][T10927] ? class_to_subsys+0x10f/0x150 [ 646.246574][T10927] ? kobject_put+0xb9/0x640 [ 646.246589][T10927] ? _raw_spin_unlock+0x28/0x50 [ 646.246603][T10927] device_add+0x294/0x1970 [ 646.246620][T10927] ? __pfx_dev_set_name+0x10/0x10 [ 646.246631][T10927] ? __pfx_device_add+0x10/0x10 [ 646.246649][T10927] ? mgmt_send_event_skb+0x2fb/0x460 [ 646.246665][T10927] hci_conn_add_sysfs+0x1a3/0x260 [ 646.246680][T10927] le_conn_complete_evt+0x11eb/0x1f60 [ 646.246697][T10927] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 646.246708][T10927] ? hci_event_packet+0x186/0xcd0 [ 646.246723][T10927] hci_le_conn_complete_evt+0x23c/0x3a0 [ 646.246740][T10927] ? skb_pull_data+0x15f/0x1e0 [ 646.246753][T10927] hci_le_meta_evt+0x34a/0x5f0 [ 646.246767][T10927] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 646.246782][T10927] hci_event_packet+0x51c/0xcd0 [ 646.246794][T10927] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 646.246808][T10927] ? __pfx_hci_event_packet+0x10/0x10 [ 646.246822][T10927] ? kcov_remote_start+0x384/0x670 [ 646.246835][T10927] ? lockdep_hardirqs_on+0x78/0x100 [ 646.246852][T10927] hci_rx_work+0x451/0xfc0 [ 646.246866][T10927] process_one_work+0xa23/0x1940 [ 646.246885][T10927] ? __pfx_process_one_work+0x10/0x10 [ 646.246902][T10927] ? __pfx_hci_rx_work+0x10/0x10 [ 646.246915][T10927] worker_thread+0x5ef/0xe50 [ 646.246931][T10927] ? __pfx_worker_thread+0x10/0x10 [ 646.246944][T10927] ? kthread+0x13a/0x450 [ 646.246955][T10927] ? __pfx_worker_thread+0x10/0x10 [ 646.246967][T10927] kthread+0x370/0x450 [ 646.246977][T10927] ? __pfx_kthread+0x10/0x10 [ 646.246993][T10927] ret_from_fork+0x72b/0xd50 [ 646.247010][T10927] ? __pfx_ret_from_fork+0x10/0x10 [ 646.247025][T10927] ? rcu_is_watching+0x12/0xc0 [ 646.247043][T10927] ? __switch_to+0x800/0x10f0 [ 646.247056][T10927] ? __pfx_kthread+0x10/0x10 [ 646.247068][T10927] ret_from_fork_asm+0x1a/0x30 [ 646.247092][T10927] [ 646.247219][T10927] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 646.554546][T10927] Bluetooth: hci3: failed to register connection device [ 646.594520][ T5835] usb 7-1: USB disconnect, device number 8 [ 668.405604][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 668.405618][ T29] audit: type=1400 audit(1787038658.591:6529): avc: denied { create } for pid=12230 comm="syz.6.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 670.405084][T12239] Bluetooth: hci3: command 0x0406 tx timeout [ 670.411594][T12239] Bluetooth: hci6: command 0x0406 tx timeout [ 670.422787][T12239] Bluetooth: hci7: command 0x0406 tx timeout [ 670.485303][T12249] Bluetooth: hci8: command 0x0406 tx timeout [ 670.491301][T12237] Bluetooth: hci9: command 0x0406 tx timeout [ 670.615101][ T29] audit: type=1400 audit(1787038680.741:6530): avc: denied { read write } for pid=10936 comm="syz-executor" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 670.997936][ T29] audit: type=1400 audit(1787038680.741:6531): avc: denied { open } for pid=10936 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 671.267579][ T5606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 671.292689][ T5606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 671.302345][ T5606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 671.316528][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 671.327224][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 671.366925][ T29] audit: type=1400 audit(1787038680.741:6532): avc: denied { ioctl } for pid=10936 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 671.462452][ T5597] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 671.483502][ T5597] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 671.508132][ T5597] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 671.521119][ T5597] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 671.531902][T10927] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 671.539473][ T5597] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 671.554065][ T5597] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 671.561210][T10927] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 671.574192][T10927] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 671.581791][T10927] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 671.652592][T12262] audit: audit_backlog=65 > audit_backlog_limit=64 [ 671.678220][T12256] audit: audit_backlog=65 > audit_backlog_limit=64 [ 671.713205][T12258] audit: audit_backlog=65 > audit_backlog_limit=64 [ 671.773531][T12264] audit: audit_backlog=65 > audit_backlog_limit=64 [ 671.782422][T12262] audit: audit_lost=328 audit_rate_limit=0 audit_backlog_limit=64 [ 671.799195][T12256] audit: audit_lost=329 audit_rate_limit=0 audit_backlog_limit=64 [ 671.885412][T10926] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 671.899601][T10926] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 671.907591][T10926] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 671.915012][T10926] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 671.922543][T10926] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 671.996664][T10927] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 672.010817][T10927] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 672.020575][T10927] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 672.043963][T10927] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 672.097572][T10927] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 673.365448][T10927] Bluetooth: hci0: command tx timeout [ 673.469868][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 673.469879][ T29] audit: type=1400 audit(1787038684.691:6694): avc: denied { search } for pid=12300 comm="sed" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 673.518005][ T8598] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.547648][ T8598] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.565821][ T29] audit: type=1400 audit(1787038684.691:6695): avc: denied { read } for pid=12300 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 673.672926][ T29] audit: type=1400 audit(1787038684.691:6696): avc: denied { open } for pid=12300 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 673.705626][T10927] Bluetooth: hci1: command tx timeout [ 673.712786][T10927] Bluetooth: hci2: command tx timeout [ 673.909031][ T8598] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.931669][ T29] audit: type=1400 audit(1787038684.691:6697): avc: denied { getattr } for pid=12300 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 673.989875][ T8598] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.008477][T10927] Bluetooth: hci4: command tx timeout [ 674.099590][ T29] audit: type=1400 audit(1787038684.791:6698): avc: denied { search } for pid=12305 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 674.158827][ T8598] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.171723][T10927] Bluetooth: hci5: command tx timeout [ 674.188947][ T29] audit: type=1400 audit(1787038684.791:6699): avc: denied { search } for pid=12305 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 674.219688][ T8598] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.266900][ T29] audit: type=1400 audit(1787038684.791:6700): avc: denied { search } for pid=12305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 674.319517][ T29] audit: type=1400 audit(1787038684.791:6701): avc: denied { search } for pid=12305 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 674.360738][ T8598] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.371473][ T29] audit: type=1400 audit(1787038684.841:6702): avc: denied { module_request } for pid=12255 comm="syz-executor" kmod="netdev-rose5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 674.393650][ T8598] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.445741][ T29] audit: type=1400 audit(1787038684.961:6703): avc: denied { sys_module } for pid=12262 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 675.093378][ T8598] bridge_slave_1: left allmulticast mode [ 675.112993][ T8598] bridge_slave_1: left promiscuous mode [ 675.126688][ T8598] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.146964][ T8598] bridge_slave_0: left allmulticast mode [ 675.156043][ T8598] bridge_slave_0: left promiscuous mode [ 675.170538][ T8598] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.321722][ T8598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 675.331780][ T8598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 675.342454][ T8598] bond0 (unregistering): Released all slaves [ 675.446193][T10927] Bluetooth: hci0: command tx timeout [ 675.767084][T10927] Bluetooth: hci2: command tx timeout [ 675.773845][T10926] Bluetooth: hci1: command tx timeout [ 675.823138][ T8598] hsr_slave_0: left promiscuous mode [ 675.841278][ T8598] hsr_slave_1: left promiscuous mode [ 675.865466][ T8598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 675.885168][ T8598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 675.900244][ T8598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 675.914441][ T8598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 675.952305][ T8598] veth1_macvtap: left promiscuous mode [ 675.968426][ T8598] veth0_macvtap: left promiscuous mode [ 675.982227][ T8598] veth1_vlan: left promiscuous mode [ 675.992999][ T8598] veth0_vlan: left promiscuous mode [ 676.085101][T10927] Bluetooth: hci4: command tx timeout [ 676.245150][T10927] Bluetooth: hci5: command tx timeout [ 676.269728][ T8598] team0 (unregistering): Port device team_slave_1 removed [ 676.307909][ T8598] team0 (unregistering): Port device team_slave_0 removed [ 676.444333][T12262] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.463034][T12262] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.474180][T12262] bridge_slave_0: entered allmulticast mode [ 676.491350][T12262] bridge_slave_0: entered promiscuous mode [ 676.595939][T12262] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.611499][T12262] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.635774][T12262] bridge_slave_1: entered allmulticast mode [ 676.647803][T12262] bridge_slave_1: entered promiscuous mode [ 676.717734][T12258] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.745599][T12258] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.768232][T12258] bridge_slave_0: entered allmulticast mode [ 676.784332][T12258] bridge_slave_0: entered promiscuous mode [ 676.843803][T12258] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.865869][T12258] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.889339][T12258] bridge_slave_1: entered allmulticast mode [ 676.910875][T12258] bridge_slave_1: entered promiscuous mode [ 676.981441][T12262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.036788][T12264] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.054391][T12264] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.074253][T12264] bridge_slave_0: entered allmulticast mode [ 677.081750][T12264] bridge_slave_0: entered promiscuous mode [ 677.090740][T12264] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.097971][T12264] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.105897][T12264] bridge_slave_1: entered allmulticast mode [ 677.112671][T12264] bridge_slave_1: entered promiscuous mode [ 677.137642][T12262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.159428][T12258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.182163][T12258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.200485][T12255] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.208535][T12255] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.216267][T12255] bridge_slave_0: entered allmulticast mode [ 677.223086][T12255] bridge_slave_0: entered promiscuous mode [ 677.268758][T12264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.297073][T12256] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.309835][T12256] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.325516][T12256] bridge_slave_0: entered allmulticast mode [ 677.341960][T12256] bridge_slave_0: entered promiscuous mode [ 677.370362][T12255] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.386766][T12255] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.407980][T12255] bridge_slave_1: entered allmulticast mode [ 677.422035][T12255] bridge_slave_1: entered promiscuous mode [ 677.525545][T10927] Bluetooth: hci0: command tx timeout [ 677.544462][ T8598] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.576079][ T8598] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.642660][T12264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.669354][T12256] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.686364][T12256] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.700338][T12256] bridge_slave_1: entered allmulticast mode [ 677.716328][T12256] bridge_slave_1: entered promiscuous mode [ 677.746864][T12262] team0: Port device team_slave_0 added [ 677.778127][T12258] team0: Port device team_slave_0 added [ 677.809388][T12256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.819921][T12262] team0: Port device team_slave_1 added [ 677.830985][T12255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.845605][T10927] Bluetooth: hci2: command tx timeout [ 677.851002][T10926] Bluetooth: hci1: command tx timeout [ 677.872188][ T8598] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.882952][ T8598] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.902143][T12258] team0: Port device team_slave_1 added [ 677.919452][T12256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.949202][T12255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.967133][T12264] team0: Port device team_slave_0 added [ 677.975431][T12264] team0: Port device team_slave_1 added [ 677.988279][T12262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.999673][T12262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.029677][T12262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.066111][ T8598] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.077020][ T8598] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.125673][T12262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.138985][T12262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.175115][T10927] Bluetooth: hci4: command tx timeout [ 678.197396][T12262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.240244][T12258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.256056][T12258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.305274][T12258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.325646][T10927] Bluetooth: hci5: command tx timeout [ 678.347003][T12258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.365189][T12258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.418853][T12258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.457653][T12256] team0: Port device team_slave_0 added [ 678.474191][T12255] team0: Port device team_slave_0 added [ 678.510746][ T29] kauditd_printk_skb: 488 callbacks suppressed [ 678.510757][ T29] audit: type=1400 audit(1787038689.731:7192): avc: denied { search } for pid=12419 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 678.549969][ T8598] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.576588][ T8598] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.589021][ T29] audit: type=1400 audit(1787038689.731:7193): avc: denied { search } for pid=12419 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 678.636326][T12264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.655309][T12264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.681533][ T29] audit: type=1400 audit(1787038689.731:7194): avc: denied { search } for pid=12419 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 678.729083][ T29] audit: type=1400 audit(1787038689.731:7195): avc: denied { getattr } for pid=12419 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 678.758595][T12264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.782803][T12264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.793560][T12264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.820020][ T29] audit: type=1400 audit(1787038689.731:7196): avc: denied { write } for pid=12419 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 678.847910][T12264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.858745][ T29] audit: type=1400 audit(1787038689.731:7197): avc: denied { add_name } for pid=12419 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 678.883309][T12256] team0: Port device team_slave_1 added [ 678.899649][ T29] audit: type=1400 audit(1787038689.731:7198): avc: denied { create } for pid=12419 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 678.931773][T12262] hsr_slave_0: entered promiscuous mode [ 678.938786][T12262] hsr_slave_1: entered promiscuous mode [ 678.946800][ T29] audit: type=1400 audit(1787038689.731:7199): avc: denied { write open } for pid=12419 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=8053 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 678.981193][T12255] team0: Port device team_slave_1 added [ 678.997044][ T5259] 8021q: adding VLAN 0 to HW filter on device eth1 [ 679.035307][ T29] audit: type=1400 audit(1787038689.771:7200): avc: denied { append } for pid=12419 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=8053 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 679.066024][T12256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.073355][T12256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.101368][ T29] audit: type=1400 audit(1787038689.771:7201): avc: denied { append open } for pid=12419 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=8053 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 679.129676][T12256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.153935][T12255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.161380][T12255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.189004][T12255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.241349][T12256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.257240][T12256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.309903][T12256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.336061][T12255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.353589][T12255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.399076][T12255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.436134][T12264] hsr_slave_0: entered promiscuous mode [ 679.462317][T12264] hsr_slave_1: entered promiscuous mode [ 679.475934][T12264] debugfs: 'hsr0' already exists in 'hsr' [ 679.495788][T12264] Cannot create hsr debugfs directory [ 679.606130][T10927] Bluetooth: hci0: command tx timeout [ 679.683122][T12258] hsr_slave_0: entered promiscuous mode [ 679.698459][T12258] hsr_slave_1: entered promiscuous mode [ 679.716299][T12258] debugfs: 'hsr0' already exists in 'hsr' [ 679.723380][T12258] Cannot create hsr debugfs directory [ 679.801867][T12255] hsr_slave_0: entered promiscuous mode [ 679.808198][T12255] hsr_slave_1: entered promiscuous mode [ 679.814133][T12255] debugfs: 'hsr0' already exists in 'hsr' [ 679.820717][T12255] Cannot create hsr debugfs directory [ 679.911530][T12256] hsr_slave_0: entered promiscuous mode [ 679.920333][T12256] hsr_slave_1: entered promiscuous mode [ 679.927557][T10927] Bluetooth: hci2: command tx timeout [ 679.932980][T10926] Bluetooth: hci1: command tx timeout [ 679.942486][T12256] debugfs: 'hsr0' already exists in 'hsr' [ 679.948530][T12256] Cannot create hsr debugfs directory [ 680.245970][T10927] Bluetooth: hci4: command tx timeout [ 680.263262][ T8598] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.415723][T10927] Bluetooth: hci5: command tx timeout [ 680.424147][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.431756][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.677136][ T8598] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.708376][ T5259] 8021q: adding VLAN 0 to HW filter on device eth18 [ 680.781504][ T8598] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.872363][ T8598] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.157000][T12264] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.183833][T12264] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.438887][T12264] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.466310][T12264] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.569211][T12264] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.580528][T12264] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.629182][ T8598] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.652639][ T5259] 8021q: adding VLAN 0 to HW filter on device eth19 [ 681.684086][T12264] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.696114][T12264] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.728231][ T8598] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.876446][ T8598] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.017299][ T8598] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.257149][T12264] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 682.282961][T12264] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 682.306681][T12264] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 682.331263][T12264] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 682.373743][T12264] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 682.386859][T12264] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 682.394914][T12264] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 682.406741][T12264] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 682.614721][ T8598] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.653193][ T8598] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.787308][ T8598] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.810261][ T8598] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.869153][T12264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.917829][ T8598] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.941211][ T8598] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.060600][ T8598] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.071980][ T8598] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.089156][T12264] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.166396][ T8596] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.173490][ T8596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.279176][ T8596] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.286310][ T8596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.513200][ T8598] bridge_slave_1: left allmulticast mode [ 683.521960][ T29] kauditd_printk_skb: 447 callbacks suppressed [ 683.521971][ T29] audit: type=1400 audit(1787038694.751:7649): avc: denied { module_request } for pid=12264 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 683.556643][ T8598] bridge_slave_1: left promiscuous mode [ 683.570275][ T8598] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.600795][ T8598] bridge_slave_0: left allmulticast mode [ 683.621629][ T8598] bridge_slave_0: left promiscuous mode [ 683.631073][ T29] audit: type=1400 audit(1787038694.811:7650): avc: denied { search } for pid=12508 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 683.667588][ T8598] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.700870][ T8598] bridge_slave_1: left allmulticast mode [ 683.723679][ T29] audit: type=1400 audit(1787038694.811:7651): avc: denied { search } for pid=12508 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 683.750883][ T8598] bridge_slave_1: left promiscuous mode [ 683.770525][ T8598] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.789192][ T8598] bridge_slave_0: left allmulticast mode [ 683.807530][ T8598] bridge_slave_0: left promiscuous mode [ 683.813142][ T29] audit: type=1400 audit(1787038694.811:7652): avc: denied { search } for pid=12508 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 683.845321][ T8598] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.867257][ T8598] bridge_slave_1: left allmulticast mode [ 683.889934][ T8598] bridge_slave_1: left promiscuous mode [ 683.896373][ T29] audit: type=1400 audit(1787038694.811:7653): avc: denied { search } for pid=12508 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 683.919007][ T8598] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.928285][ T8598] bridge_slave_0: left allmulticast mode [ 683.933926][ T8598] bridge_slave_0: left promiscuous mode [ 683.939973][ T29] audit: type=1400 audit(1787038694.811:7654): avc: denied { search } for pid=12508 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 683.965176][ T8598] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.976981][ T8598] bridge_slave_1: left allmulticast mode [ 683.982645][ T8598] bridge_slave_1: left promiscuous mode [ 683.990380][ T8598] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.000489][ T29] audit: type=1400 audit(1787038694.811:7655): avc: denied { search } for pid=12508 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 684.026141][ T8598] bridge_slave_0: left allmulticast mode [ 684.031793][ T8598] bridge_slave_0: left promiscuous mode [ 684.038661][ T8598] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.046196][ T29] audit: type=1400 audit(1787038694.811:7656): avc: denied { getattr } for pid=12508 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 684.102290][ T29] audit: type=1400 audit(1787038694.811:7657): avc: denied { write } for pid=12508 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 684.152926][ T29] audit: type=1400 audit(1787038694.811:7658): avc: denied { add_name } for pid=12508 comm="dhcpcd-run-hook" name="resolv.conf.eth14.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 684.268411][ T8598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 684.280373][ T8598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 684.290482][ T8598] bond0 (unregistering): Released all slaves [ 684.377175][ T8598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 684.389204][ T8598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 684.401868][ T8598] bond0 (unregistering): Released all slaves [ 684.478095][ T8598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 684.491823][ T8598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 684.501402][ T8598] bond0 (unregistering): Released all slaves [ 684.588331][ T8598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 684.601136][ T8598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 684.610738][ T8598] bond0 (unregistering): Released all slaves [ 685.279235][T12258] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 685.319953][T12258] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 685.355911][T12258] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 685.393035][T12258] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 685.432369][T12258] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 685.473997][T12258] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 685.508217][T12258] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 685.552411][T12258] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 685.788233][T12264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.807732][ T5259] 8021q: adding VLAN 0 to HW filter on device eth20 [ 686.164379][ T8598] hsr_slave_0: left promiscuous mode [ 686.192583][ T8598] hsr_slave_1: left promiscuous mode [ 686.211597][ T8598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.239646][ T8598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.269176][ T8598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 686.284662][ T8598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.301847][ T8598] hsr_slave_0: left promiscuous mode [ 686.315441][ T8598] hsr_slave_1: left promiscuous mode [ 686.329376][ T8598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.345162][ T8598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.361472][ T8598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 686.379978][ T8598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.396731][ T8598] hsr_slave_0: left promiscuous mode [ 686.408304][ T8598] hsr_slave_1: left promiscuous mode [ 686.426911][ T8598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.439982][ T8598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.453639][ T8598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 686.473370][ T8598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.497690][ T8598] hsr_slave_0: left promiscuous mode [ 686.513543][ T8598] hsr_slave_1: left promiscuous mode [ 686.527041][ T8598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.545191][ T8598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.559683][ T8598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 686.577975][ T8598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.639691][ T8598] veth1_macvtap: left promiscuous mode [ 686.648530][ T8598] veth0_macvtap: left promiscuous mode [ 686.654034][ T8598] veth1_vlan: left promiscuous mode [ 686.659757][ T8598] veth0_vlan: left promiscuous mode [ 686.666619][ T8598] veth1_macvtap: left promiscuous mode [ 686.672074][ T8598] veth0_macvtap: left promiscuous mode [ 686.677861][ T8598] veth1_vlan: left promiscuous mode [ 686.683068][ T8598] veth0_vlan: left promiscuous mode [ 686.689516][ T8598] veth1_macvtap: left promiscuous mode [ 686.695046][ T8598] veth0_macvtap: left promiscuous mode [ 686.700578][ T8598] veth1_vlan: left promiscuous mode [ 686.706091][ T8598] veth0_vlan: left promiscuous mode [ 686.711793][ T8598] veth1_macvtap: left promiscuous mode [ 686.717685][ T8598] veth0_macvtap: left promiscuous mode [ 686.723175][ T8598] veth1_vlan: left promiscuous mode [ 686.728827][ T8598] veth0_vlan: left promiscuous mode [ 686.954864][ T8598] team0 (unregistering): Port device team_slave_1 removed [ 686.971013][ T8598] team0 (unregistering): Port device team_slave_0 removed [ 687.120604][ T8598] team0 (unregistering): Port device team_slave_1 removed [ 687.136249][ T8598] team0 (unregistering): Port device team_slave_0 removed [ 687.281088][ T8598] team0 (unregistering): Port device team_slave_1 removed [ 687.297446][ T8598] team0 (unregistering): Port device team_slave_0 removed [ 687.452192][ T8598] team0 (unregistering): Port device team_slave_1 removed [ 687.470810][ T8598] team0 (unregistering): Port device team_slave_0 removed [ 687.550625][ T5259] 8021q: adding VLAN 0 to HW filter on device eth21 [ 687.803379][T12258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.831527][T12264] veth0_vlan: entered promiscuous mode [ 687.870474][T12258] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.938854][T12264] veth1_vlan: entered promiscuous mode [ 687.963472][ T8596] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.970578][ T8596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.051981][T12264] veth0_macvtap: entered promiscuous mode [ 688.073245][ T8596] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.080356][ T8596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.141217][T12264] veth1_macvtap: entered promiscuous mode [ 688.208239][T12262] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 688.246493][T12262] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 688.265171][T12262] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 688.281749][T12262] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 688.300261][T12264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 688.327075][T12262] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 688.355890][T12262] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 688.374355][T12262] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 688.391048][T12262] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 688.413793][T12264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.544190][ T29] kauditd_printk_skb: 407 callbacks suppressed [ 688.544202][ T29] audit: type=1400 audit(1787038699.761:8066): avc: denied { read } for pid=12262 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 688.655102][ T8603] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.692087][ T8596] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.702529][ T29] audit: type=1400 audit(1787038699.801:8067): avc: denied { module_request } for pid=12258 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 688.757814][ T8596] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.807872][ T29] audit: type=1400 audit(1787038699.861:8068): avc: denied { search } for pid=5259 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 688.854551][ T29] audit: type=1400 audit(1787038699.861:8069): avc: denied { search } for pid=5259 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 688.877754][ T8599] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.922029][ T8598] IPVS: stop unused estimator thread 0... [ 688.960969][ T29] audit: type=1400 audit(1787038699.861:8070): avc: denied { search } for pid=5259 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 689.042406][ T29] audit: type=1400 audit(1787038699.861:8071): avc: denied { search } for pid=5259 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 689.152579][ T29] audit: type=1400 audit(1787038699.861:8072): avc: denied { search } for pid=5259 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 689.233578][ T29] audit: type=1400 audit(1787038699.861:8073): avc: denied { search } for pid=5259 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 689.290902][ T8603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.318382][ T8603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.373682][ T29] audit: type=1400 audit(1787038699.861:8074): avc: denied { read } for pid=5259 comm="dhcpcd" name="n17" dev="tmpfs" ino=1156 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 689.442648][ T8598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.475542][ T5259] audit: audit_backlog=65 > audit_backlog_limit=64 [ 689.486664][ T8598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.523888][T12262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.661071][T12262] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.860006][ T8596] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.867142][ T8596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.914647][T12258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.933184][ T8596] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.940289][ T8596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.088014][T12256] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 690.114599][T12256] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 690.158620][T12256] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 690.194923][T12256] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 690.220401][T12258] veth0_vlan: entered promiscuous mode [ 690.375551][T12256] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 690.430229][T12256] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 690.468554][T12256] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 690.522560][T12256] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 690.596699][T12258] veth1_vlan: entered promiscuous mode [ 690.760213][T12255] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 690.798384][T12255] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 690.831523][T12255] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 690.873071][T12255] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 690.892868][T12258] veth0_macvtap: entered promiscuous mode [ 690.916284][T12255] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 690.943705][T12255] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 690.973959][T12255] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 691.002714][T12255] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 691.030551][T12258] veth1_macvtap: entered promiscuous mode [ 691.144798][T12258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 691.193424][T12258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.260607][T12262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.354422][T12256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.427760][ T8596] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.554139][T12256] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.648310][ T8603] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.655515][ T8603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.703118][ T8603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.747554][ T8603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.764299][T12262] veth0_vlan: entered promiscuous mode [ 691.800297][ T8598] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.807420][ T8598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.863123][T12255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.994872][T12262] veth1_vlan: entered promiscuous mode [ 692.039174][ T8596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.083540][T12255] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.093427][ T8596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.136382][ T8603] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.203612][ T8599] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.210744][ T8599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.291544][ T8602] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.298655][ T8602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.368624][T12262] veth0_macvtap: entered promiscuous mode [ 692.457507][T12262] veth1_macvtap: entered promiscuous mode [ 692.525240][ T8599] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.608995][T12262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.657102][ T8599] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.690148][T12262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.806564][ T8596] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.867678][ T8603] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.971098][ T1145] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.195595][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.358827][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.429601][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.583935][ T29] kauditd_printk_skb: 623 callbacks suppressed [ 693.583946][ T29] audit: type=1400 audit(1787038704.801:8681): avc: denied { module_request } for pid=12256 comm="syz-executor" kmod="netdev-caif0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 694.136360][ T8602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.803669][ T8602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.891452][ T29] audit: type=1400 audit(1787038704.841:8682): avc: denied { read } for pid=12262 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 694.964194][T12671] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1511'. [ 695.082883][ T29] audit: type=1400 audit(1787038704.841:8683): avc: denied { write } for pid=12262 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 695.113933][T12671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1511'. [ 695.191256][T12262] audit: audit_backlog=65 > audit_backlog_limit=64 [ 695.202982][T12674] audit: audit_backlog=65 > audit_backlog_limit=64 [ 695.231271][T12256] audit: audit_backlog=65 > audit_backlog_limit=64 [ 695.247051][T12255] audit: audit_backlog=65 > audit_backlog_limit=64 [ 695.255216][T12262] audit: audit_lost=357 audit_rate_limit=0 audit_backlog_limit=64 [ 695.266408][T12674] audit: audit_lost=358 audit_rate_limit=0 audit_backlog_limit=64 [ 695.277383][ T29] audit: type=1400 audit(1787038704.841:8684): avc: denied { allowed } for pid=12658 comm="syz.4.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 695.445740][ T5854] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 695.459252][T12256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.640618][ T5854] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 695.706452][ T5854] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 696.900236][ T5854] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 700.627739][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 700.627752][ T29] audit: type=1400 audit(1787038711.851:8769): avc: denied { search } for pid=12685 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 700.719520][T12256] veth0_vlan: entered promiscuous mode [ 700.845104][ T5854] usb 5-1: string descriptor 0 read error: -71 [ 700.919455][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.951889][T12255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.000186][ T5854] usb 5-1: can't set config #1, error -71 [ 701.017059][ T29] audit: type=1400 audit(1787038711.851:8770): avc: denied { search } for pid=12685 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 701.047826][T12256] veth1_vlan: entered promiscuous mode [ 701.081701][ T5854] usb 5-1: USB disconnect, device number 9 [ 701.249889][T12256] veth0_macvtap: entered promiscuous mode [ 701.256527][ T29] audit: type=1400 audit(1787038711.851:8771): avc: denied { search } for pid=12685 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 701.342153][T12256] veth1_macvtap: entered promiscuous mode [ 701.654895][T12715] audit: audit_backlog=65 > audit_backlog_limit=64 [ 701.661473][T12715] audit: audit_lost=382 audit_rate_limit=0 audit_backlog_limit=64 [ 701.669346][T12715] audit: backlog limit exceeded [ 701.683007][T12712] audit: audit_backlog=65 > audit_backlog_limit=64 [ 701.700568][T12710] audit: audit_backlog=65 > audit_backlog_limit=64 [ 701.719547][T12712] audit: audit_lost=383 audit_rate_limit=0 audit_backlog_limit=64 [ 701.728829][ T29] audit: type=1400 audit(1787038711.851:8772): avc: denied { search } for pid=12685 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 701.753143][T12256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.763444][ T5854] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 701.808987][T12256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.855511][ T8595] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.895734][ T8595] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.945704][ T5854] usb 3-1: Using ep0 maxpacket: 32 [ 701.955579][T12691] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.970462][ T5854] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 701.996846][T12691] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.014395][ T5854] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 702.050836][ T5854] usb 3-1: config 0 has no interface number 0 [ 702.180573][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.264400][ T5854] usb 3-1: Product: syz [ 702.302295][ T5854] usb 3-1: Manufacturer: syz [ 702.443107][ T5854] usb 3-1: SerialNumber: syz [ 702.624897][ T8600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.649637][ T5854] usb 3-1: config 0 descriptor?? [ 702.677436][ T5854] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 702.687672][ T8600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.780038][T12255] veth0_vlan: entered promiscuous mode [ 702.813718][ T8600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.841495][T12255] veth1_vlan: entered promiscuous mode [ 702.850277][ T8600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.941778][ T5854] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 703.007432][T12255] veth0_macvtap: entered promiscuous mode [ 703.014384][ T5854] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 703.050291][T12255] veth1_macvtap: entered promiscuous mode [ 703.247896][T12255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.369538][T12255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.487789][T12691] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.562519][T12691] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.601379][T12742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1517'. [ 703.646374][ T8600] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.868118][ T8596] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.041158][ T8596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.080379][ T5854] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 704.104890][ T8596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.203137][ T8600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.251649][ T8600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.275564][ T5854] usb 4-1: Using ep0 maxpacket: 32 [ 704.303968][ T5854] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 704.366836][ T5854] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 704.415539][ T5854] usb 4-1: config 0 has no interface number 0 [ 704.453069][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.502755][ T5854] usb 4-1: Product: syz [ 704.544633][ T5854] usb 4-1: Manufacturer: syz [ 704.580042][ T5854] usb 4-1: SerialNumber: syz [ 704.628932][ T5854] usb 4-1: config 0 descriptor?? [ 704.676636][ T5854] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 704.836246][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 704.846970][ T983] usb 3-1: USB disconnect, device number 45 [ 704.925588][ T188] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 704.938045][ T983] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 704.977761][ T5854] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 705.102199][ T5854] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3 [ 705.119601][ T983] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 705.166209][ T188] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 705.234243][ T983] quatech2 3-1:0.51: device disconnected [ 705.272062][ T188] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 705.360476][ T188] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 705.472732][ T188] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 705.561578][T12751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1520'. [ 705.581929][ T188] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 705.752697][ T29] kauditd_printk_skb: 468 callbacks suppressed [ 705.752711][ T29] audit: type=1400 audit(1787038716.861:9211): avc: denied { execmem } for pid=12767 comm="syz.2.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 705.989270][ T188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.053819][T12759] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 706.108821][T12759] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 706.121579][ T29] audit: type=1400 audit(1787038717.181:9212): avc: denied { create } for pid=12767 comm="syz.2.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 706.190638][ T188] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 706.256537][ T188] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 706.274252][ T29] audit: type=1400 audit(1787038717.181:9213): avc: denied { connect } for pid=12767 comm="syz.2.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 706.398295][ T188] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 706.496884][ T188] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 706.525719][ T29] audit: type=1400 audit(1787038717.181:9214): avc: denied { ioctl } for pid=12767 comm="syz.2.1522" path="socket:[47837]" dev="sockfs" ino=47837 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 706.598557][ T188] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 706.614227][T12258] audit: audit_backlog=65 > audit_backlog_limit=64 [ 706.655088][T12256] audit: audit_backlog=65 > audit_backlog_limit=64 [ 706.667803][ T188] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 706.682332][T12258] audit: audit_lost=394 audit_rate_limit=0 audit_backlog_limit=64 [ 706.692881][T12778] audit: audit_backlog=65 > audit_backlog_limit=64 [ 706.706044][T12782] audit: audit_backlog=65 > audit_backlog_limit=64 [ 706.718934][T12256] audit: audit_lost=395 audit_rate_limit=0 audit_backlog_limit=64 [ 706.736580][ T188] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 706.818686][ T188] usb 6-1: USB disconnect, device number 6 [ 706.825053][ T5727] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 706.878083][ T188] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 706.984200][ T188] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 707.015176][ T5727] usb 5-1: Using ep0 maxpacket: 16 [ 707.042261][ T5727] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 707.096288][ T188] keyspan 6-1:1.0: device disconnected [ 707.103362][T12787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1526'. [ 707.140806][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 707.163525][ T5727] usb 5-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 707.195873][T11128] usb 4-1: USB disconnect, device number 50 [ 707.256306][T11128] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 707.272833][ T5727] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 707.377793][ T5727] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 707.389081][T11128] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3 [ 707.406801][T12787] netlink: 'syz.0.1526': attribute type 7 has an invalid length. [ 707.505007][ T983] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 708.538103][ T5727] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 708.571746][T11128] quatech2 4-1:0.51: device disconnected [ 708.605113][ T8595] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.620523][ T5727] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 708.657074][ T8595] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.688791][ T5727] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 708.697338][ T983] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 708.724309][ T5727] usb 5-1: Manufacturer: syz [ 708.734681][ T983] usb 3-1: config 0 has no interfaces? [ 708.748731][ T5727] usb 5-1: config 0 descriptor?? [ 708.756943][ T983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.800172][ T8596] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.856482][ T8596] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.867352][ T983] usb 3-1: config 0 descriptor?? [ 708.935033][T11128] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 709.155748][T11128] usb 4-1: Using ep0 maxpacket: 32 [ 709.176797][T11128] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 709.893081][ T983] IPVS: starting estimator thread 0... [ 709.950061][T11128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.232354][T12811] IPVS: using max 76 ests per chain, 182400 per kthread [ 710.274042][T11128] usb 4-1: Product: syz [ 710.300460][ T983] usb 3-1: USB disconnect, device number 46 [ 710.320741][T11128] usb 4-1: Manufacturer: syz [ 710.325502][ T5727] rc_core: IR keymap rc-hauppauge not found [ 710.380985][T11128] usb 4-1: SerialNumber: syz [ 710.387248][ T5727] Registered IR keymap rc-empty [ 710.425385][T11128] usb 4-1: config 0 descriptor?? [ 710.434160][ T5727] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 710.489794][T11128] usb 4-1: can't set config #0, error -71 [ 710.525459][ T5727] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 710.674927][T11128] usb 4-1: USB disconnect, device number 51 [ 710.715742][ T5727] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 710.873778][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 710.873790][ T29] audit: type=1400 audit(1787038722.091:9501): avc: denied { create } for pid=12821 comm="syz.2.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 710.979123][T12820] netlink: 'syz.0.1532': attribute type 7 has an invalid length. [ 711.002313][ T5727] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input39 [ 711.147152][ T29] audit: type=1400 audit(1787038722.091:9502): avc: denied { connect } for pid=12821 comm="syz.2.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 711.208005][ T5727] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 711.286770][ T5727] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 719.539947][ T29] audit: type=1400 audit(1787038722.091:9503): avc: denied { ioctl } for pid=12821 comm="syz.2.1533" path="socket:[48112]" dev="sockfs" ino=48112 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 719.615073][ T5727] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 719.725452][ T5727] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 720.356688][T12846] audit: audit_backlog=65 > audit_backlog_limit=64 [ 720.568074][ T5727] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 720.602607][T12847] audit: audit_backlog=65 > audit_backlog_limit=64 [ 720.639893][ T29] audit: type=1400 audit(1787038722.131:9504): avc: denied { create } for pid=12818 comm="syz.0.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 720.677849][T12846] audit: audit_lost=408 audit_rate_limit=0 audit_backlog_limit=64 [ 720.685831][ T5727] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 720.699418][T12843] audit: audit_backlog=65 > audit_backlog_limit=64 [ 720.714886][T12851] audit: audit_backlog=65 > audit_backlog_limit=64 [ 720.749795][T12847] audit: audit_lost=409 audit_rate_limit=0 audit_backlog_limit=64 [ 720.757746][ T5727] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 720.765865][T12850] audit: audit_backlog=65 > audit_backlog_limit=64 [ 720.808378][T12843] audit: audit_lost=410 audit_rate_limit=0 audit_backlog_limit=64 [ 720.846866][ T5727] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 720.908139][ T5727] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 720.975064][ T5727] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 721.037105][ T5727] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 721.113500][ T5727] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 721.200282][ T5727] usb 5-1: USB disconnect, device number 10 [ 721.825084][ T5727] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 722.058028][ T5727] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 722.117564][ T5727] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 722.179500][ T5727] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 722.248008][ T5727] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 722.319804][ T5727] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 722.402086][ T5727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.465089][ T983] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 722.511124][T12850] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 722.552193][T12850] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 757.155787][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 760.973373][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 828.374908][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 828.382637][ C0] rcu: (detected by 0, t=10502 jiffies, g=109325, q=784 ncpus=1) [ 828.390964][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 4222 (4295019981-4295015759), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 828.404245][ C0] rcu: rcu_preempt kthread starved for 4222 jiffies! g109325 f0x2 RCU_GP_DOING_FQS(6) ->state=0x0 ->cpu=0 [ 828.416910][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 828.426960][ C0] rcu: RCU grace-period kthread stack dump: [ 828.432932][ C0] task:rcu_preempt state:R running task stack:27592 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 828.446920][ C0] Call Trace: [ 828.450207][ C0] [ 828.454698][ C0] __schedule+0x125c/0x6730 [ 828.460597][ C0] ? preempt_schedule_irq+0x7b/0x90 [ 828.466494][ C0] ? irqentry_exit+0x24d/0xa10 [ 828.471629][ C0] ? __pfx___schedule+0x10/0x10 [ 828.476717][ C0] ? rcu_is_watching+0x12/0xc0 [ 828.481462][ C0] preempt_schedule_irq+0x50/0x90 [ 828.486460][ C0] irqentry_exit+0x205/0xa10 [ 828.491044][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 828.497009][ C0] RIP: 0010:rcu_gp_kthread+0x179/0x230 [ 828.502538][ C0] Code: 89 d8 48 c1 e8 03 42 80 3c 20 00 0f 85 99 00 00 00 48 8b 03 a8 02 0f 84 1b ff ff ff 90 0f 0b 90 e9 12 ff ff ff e8 e7 e0 ff ff 07 00 00 00 66 89 05 f5 e3 ef 0c e8 c6 c6 ff ff ba 08 00 00 00 [ 828.522140][ C0] RSP: 0018:ffffc90000157da8 EFLAGS: 00000292 [ 828.528198][ C0] RAX: 0000000000000000 RBX: ffff88801f280000 RCX: 0000000000000006 [ 828.536146][ C0] RDX: 1ffffffff1d41e50 RSI: 0000000000000005 RDI: ffff88801f280b38 [ 828.544105][ C0] RBP: ffffc90000157dc8 R08: 0000000000000001 R09: ffffffff8edf3b40 [ 828.552073][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 828.560034][ C0] R13: ffffed1003e5009e R14: ffff88801f2804f0 R15: ffffffff8ea0f280 [ 828.567997][ C0] ? rcu_gp_kthread+0x179/0x230 [ 828.572841][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 828.578226][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 828.584033][ C0] ? __kthread_parkme+0x18c/0x230 [ 828.589037][ C0] ? kthread+0x13a/0x450 [ 828.593252][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 828.598427][ C0] kthread+0x370/0x450 [ 828.602466][ C0] ? __pfx_kthread+0x10/0x10 [ 828.607033][ C0] ret_from_fork+0x72b/0xd50 [ 828.611609][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 828.616697][ C0] ? __switch_to+0x800/0x10f0 [ 828.621353][ C0] ? __pfx_kthread+0x10/0x10 [ 828.625913][ C0] ret_from_fork_asm+0x1a/0x30 [ 828.630667][ C0] [ 828.633656][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 828.639947][ C0] CPU: 0 UID: 0 PID: 3184 Comm: kworker/R-ipv6_ Tainted: G L syzkaller #0 PREEMPT(full) [ 828.651205][ C0] Tainted: [L]=SOFTLOCKUP [ 828.655496][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 828.665538][ C0] Workqueue: 0x0 (ipv6_addrconf) [ 828.670553][ C0] RIP: 0010:finish_task_switch.isra.0+0x2cd/0x10c0 [ 828.677029][ C0] Code: ab 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 8d 7f 48 e8 d0 24 ea 09 e8 eb b0 3c 00 fb 48 8d bb 00 17 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 828.696613][ C0] RSP: 0018:ffffc9000dadfa38 EFLAGS: 00000202 [ 828.702659][ C0] RAX: 000000000002061f RBX: ffff8880227b2580 RCX: 0000000000000040 [ 828.710605][ C0] RDX: 0000000000000000 RSI: ffffffff8e3a6afe RDI: ffff8880227b3c80 [ 828.718549][ C0] RBP: ffffc9000dadfa90 R08: 0000000000000001 R09: 0000000000000000 [ 828.726491][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888037610000 [ 828.734461][ C0] R13: 0000000000000000 R14: ffffffff91421aa4 R15: ffff8880b843b6c0 [ 828.742410][ C0] FS: 0000000000000000(0000) GS:ffff888123bdc000(0000) knlGS:0000000000000000 [ 828.751320][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 828.757876][ C0] CR2: 0000200000000058 CR3: 0000000074223000 CR4: 00000000003526f0 [ 828.765821][ C0] Call Trace: [ 828.769082][ C0] [ 828.771990][ C0] __schedule+0x1264/0x6730 [ 828.776482][ C0] ? __pfx___schedule+0x10/0x10 [ 828.781310][ C0] ? mark_held_locks+0x40/0x70 [ 828.786082][ C0] preempt_schedule_irq+0x50/0x90 [ 828.791080][ C0] irqentry_exit+0x205/0xa10 [ 828.795646][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 828.801600][ C0] RIP: 0010:__mutex_unlock_slowpath+0x0/0x930 [ 828.807637][ C0] Code: 91 e8 74 5c bc f6 e9 2b ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <41> 57 41 56 41 55 41 54 55 48 bd 00 00 00 00 00 fc ff df 53 48 89 [ 828.827213][ C0] RSP: 0018:ffffc9000dadfd10 EFLAGS: 00000292 [ 828.833253][ C0] RAX: dffffc0000000000 RBX: ffff88801c0a3000 RCX: ffffffff81cefecc [ 828.841212][ C0] RDX: 1ffff1100676996c RSI: ffffffff81cfac83 RDI: ffffffff8ec90580 [ 828.849613][ C0] RBP: ffff888033b4cb00 R08: 0000000000000001 R09: 0000000000000000 [ 828.857857][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 828.865813][ C0] R13: ffff888033b03ca0 R14: 0000000000000000 R15: ffff888033b03c98 [ 828.873764][ C0] ? worker_attach_to_pool+0x21c/0x420 [ 828.879196][ C0] ? rescuer_thread+0x403/0x14a0 [ 828.884108][ C0] rescuer_thread+0x403/0x14a0 [ 828.888858][ C0] ? rescuer_thread+0x240/0x14a0 [ 828.893765][ C0] ? rescuer_thread+0x118/0x14a0 [ 828.898673][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 828.903854][ C0] ? __kthread_parkme+0x18c/0x230 [ 828.908856][ C0] ? kthread+0x13a/0x450 [ 828.913067][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 828.918233][ C0] kthread+0x370/0x450 [ 828.922273][ C0] ? __pfx_kthread+0x10/0x10 [ 828.926837][ C0] ret_from_fork+0x72b/0xd50 [ 828.931415][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 828.936522][ C0] ? __switch_to+0x800/0x10f0 [ 828.941192][ C0] ? __pfx_kthread+0x10/0x10 [ 828.946124][ C0] ret_from_fork_asm+0x1a/0x30 [ 828.950883][ C0] [ 829.933663][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 829.951178][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 829.966381][ T5727] usb 5-1: can't set config #1, error -110 [ 830.047105][ T29] kauditd_printk_skb: 315 callbacks suppressed [ 830.047132][ T29] audit: type=1400 audit(1787038841.231:9804): avc: denied { ioctl } for pid=12842 comm="syz.4.1538" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 830.204950][ T983] usb 1-1: device descriptor read/all, error -71 SYZFAIL: failed to send rpc fd=3 want=159568 sent=0 n=-1 (errno 32: Broken pipe) [ 830.448606][ T5854] usb 5-1: USB disconnect, device number 11 [ 830.551514][ T29] audit: type=1400 audit(1787038841.241:9805): avc: denied { read write } for pid=12262 comm="syz-executor" name="loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 830.829623][ T29] audit: type=1400 audit(1787038841.241:9806): avc: denied { open } for pid=12262 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 831.042312][ T29] audit: type=1400 audit(1787038841.241:9807): avc: denied { ioctl } for pid=12262 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 831.263189][ T29] audit: type=1400 audit(1787038841.471:9808): avc: denied { read write } for pid=12264 comm="syz-executor" name="loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 831.481014][ T29] audit: type=1400 audit(1787038841.471:9809): avc: denied { open } for pid=12264 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 831.674282][ T29] audit: type=1400 audit(1787038841.471:9810): avc: denied { ioctl } for pid=12264 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 831.827129][ T29] audit: type=1400 audit(1787038841.511:9811): avc: denied { search } for pid=12886 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 831.974579][ T29] audit: type=1400 audit(1787038841.511:9812): avc: denied { search } for pid=12886 comm="rm" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 832.000928][T12889] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 832.098537][T12889] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.124269][ T29] audit: type=1400 audit(1787038841.521:9813): avc: denied { search } for pid=12886 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 832.377853][T12889] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 832.416310][T12889] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.624139][T12889] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 832.666427][T12889] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.799718][T12889] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 832.836042][T12889] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.154851][T12889] bridge_slave_1: left allmulticast mode [ 833.171091][T12889] bridge_slave_1: left promiscuous mode [ 833.184432][T12889] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.209541][T12889] bridge_slave_0: left allmulticast mode [ 833.223123][T12889] bridge_slave_0: left promiscuous mode [ 833.231387][T12889] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.468488][T12889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 833.483972][T12889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 833.499695][T12889] bond0 (unregistering): Released all slaves [ 833.624697][T12889] hsr_slave_0: left promiscuous mode [ 833.647073][T12889] hsr_slave_1: left promiscuous mode [ 833.666052][T12889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 833.687774][T12889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 833.703433][T12889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 833.717418][T12889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 833.744396][T12889] veth1_macvtap: left promiscuous mode [ 833.758471][T12889] veth0_macvtap: left promiscuous mode [ 833.770284][T12889] veth1_vlan: left promiscuous mode [ 833.781290][T12889] veth0_vlan: left promiscuous mode [ 834.062528][T12889] team0 (unregistering): Port device team_slave_1 removed [ 834.091472][T12889] team0 (unregistering): Port device team_slave_0 removed [ 834.370182][T12889] IPVS: stop unused estimator thread 0... [ 834.530674][T12889] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.651162][T12889] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.766315][T12889] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.823894][T12889] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.067768][ T29] kauditd_printk_skb: 404 callbacks suppressed [ 835.067778][ T29] audit: type=1400 audit(1787038846.291:10218): avc: denied { search } for pid=12972 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 835.159014][ T29] audit: type=1400 audit(1787038846.321:10219): avc: denied { search } for pid=12972 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 835.237667][ T29] audit: type=1400 audit(1787038846.321:10220): avc: denied { search } for pid=12972 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 835.269560][T12889] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.315145][ T29] audit: type=1400 audit(1787038846.321:10221): avc: denied { search } for pid=12972 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 835.374834][ T29] audit: type=1400 audit(1787038846.331:10222): avc: denied { search } for pid=12973 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 835.446869][T12889] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.462061][ T29] audit: type=1400 audit(1787038846.331:10223): avc: denied { search } for pid=12973 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 835.535048][ T29] audit: type=1400 audit(1787038846.331:10224): avc: denied { search } for pid=12973 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 835.566016][T12889] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.606748][ T29] audit: type=1400 audit(1787038846.331:10225): avc: denied { read } for pid=12973 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 835.649149][T12983] audit: audit_backlog=65 > audit_backlog_limit=64 [ 835.656521][T12889] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.667511][T12983] audit: audit_lost=416 audit_rate_limit=0 audit_backlog_limit=64 [ 836.013169][T12889] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.122351][T12889] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.203740][T12889] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.309140][T12889] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.648218][T12889] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.767683][T12889] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.847423][T12889] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.917425][T12889] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.157273][T12889] bridge_slave_1: left allmulticast mode [ 837.166610][T12889] bridge_slave_1: left promiscuous mode [ 837.183835][T12889] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.206652][T12889] bridge_slave_0: left allmulticast mode [ 837.216840][T12889] bridge_slave_0: left promiscuous mode [ 837.229035][T12889] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.254350][T12889] bridge_slave_1: left allmulticast mode [ 837.275830][T12889] bridge_slave_1: left promiscuous mode [ 837.282855][T12889] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.300275][T12889] bridge_slave_0: left allmulticast mode [ 837.310914][T12889] bridge_slave_0: left promiscuous mode [ 837.322908][T12889] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.349254][T12889] bridge_slave_1: left allmulticast mode [ 837.368332][T12889] bridge_slave_1: left promiscuous mode [ 837.380948][T12889] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.397977][T12889] bridge_slave_0: left allmulticast mode [ 837.408554][T12889] bridge_slave_0: left promiscuous mode [ 837.426735][T12889] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.444821][T12889] bridge_slave_1: left allmulticast mode [ 837.461021][T12889] bridge_slave_1: left promiscuous mode [ 837.473506][T12889] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.493536][T12889] bridge_slave_0: left allmulticast mode [ 837.506482][T12889] bridge_slave_0: left promiscuous mode [ 837.520125][T12889] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.773386][T12889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.784722][T12889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.797282][T12889] bond0 (unregistering): Released all slaves [ 837.880098][T12889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.889948][T12889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.902234][T12889] bond0 (unregistering): Released all slaves [ 837.986892][T12889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.998540][T12889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 838.009555][T12889] bond0 (unregistering): Released all slaves [ 838.094371][T12889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 838.108115][T12889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 838.117652][T12889] bond0 (unregistering): Released all slaves