last executing test programs: 8.347860248s ago: executing program 0 (id=188): r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) r2 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x118, 0x8, {{0xfffffffc, 0x1}, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x200010000000}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x70}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) ioctl$sock_inet_SIOCGARP(r2, 0x8954, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rf', @ANYRESHEX=r8]) ioctl$vim2m_VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000440)={0x2, @sliced={0x2, [0x2, 0xb, 0x8, 0x8, 0x2, 0x4, 0x6, 0x1, 0x7, 0x7, 0xb84, 0x7, 0x200, 0x2, 0x6, 0x8fee, 0x8, 0x6, 0x1, 0x8000, 0x1, 0x78e5, 0x3, 0x8, 0xae4, 0x300, 0x4, 0x9, 0x7fff, 0x401, 0xd874, 0x100, 0x9, 0x9, 0x4, 0x67, 0x1, 0xfff8, 0x58f, 0x3a4, 0xfff, 0x4, 0x7, 0x7, 0xbdcf, 0x9, 0x0, 0x93], 0xfffffa6a}}) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r9, 0x6, 0x19, &(0x7f00000001c0)=0x8, 0x4) sendmmsg$inet(r9, &(0x7f0000000240)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r9, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000004f37ea30f5e6dc290c54acf7c91d450702777fb6650f7da88f07755b5738e49186f1490de575054f77aaa828ba3b4dbd67549a9fa1b608b089"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 8.299208732s ago: executing program 2 (id=190): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) read(r0, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) 7.138306027s ago: executing program 0 (id=195): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x5, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x7ffe}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0x5, 0x2, 0x0, {0xfffffffffffffffd, 0xfffffffffffffffe, 0x4, 0x0, 0x8, 0xffffffff, 0x8, 0x0, 0x80000, 0x8000, 0x0, 0x0, r2, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) fsync(r3) 7.016057341s ago: executing program 2 (id=196): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a80)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, 0x0, 0x800) 6.807909874s ago: executing program 1 (id=198): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1a, 0x4, 0x4, 0xb9, 0x6120, 0x1}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_INUMBERS(0xffffffffffffffff, 0x80405880, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @local}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x3, 0x9, 0x0, 0x6}, 0x20) setresuid(0x0, 0xee01, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x300, 0x0, 0x3, 0x9, 0x3, 0x6}, 0x20) 6.731359594s ago: executing program 0 (id=199): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404705352200000102030109022000010100c0010904000002000000000705020200020007058202000200"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='0547 2235\n\x00', 0xa) 5.543281855s ago: executing program 1 (id=200): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x17b3\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0004', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='ACME\n\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000300)='ACMESynth\n\x00', 0xa) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000680)='nonexistent_udc\n\x00', 0x10) close(r3) 5.351740212s ago: executing program 4 (id=202): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) setrlimit(0x1, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x5c39d53d76e37746) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r3, 0x0, 0x3b) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 5.350740413s ago: executing program 2 (id=203): socket$kcm(0x10, 0x2, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='illinois', 0x4b225cdc61248344) sendto$inet6(0xffffffffffffffff, &(0x7f0000000380)="ae", 0x1, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x6}, 0x1c) 4.82990142s ago: executing program 4 (id=205): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xffff, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0x2, 0x3, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x4, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x3, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x0, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x75e, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x8, 0x1000, 0x2, 0x292], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x2c, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x9, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x2200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x4, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x7, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x3, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x4020) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.758562344s ago: executing program 1 (id=206): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8003, @loopback, 0x4}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) shutdown(r0, 0x1) 4.615863759s ago: executing program 2 (id=207): request_key(&(0x7f0000000c40)='encrypted\x00', &(0x7f0000000c80)={'syz', 0x0}, 0x0, 0x0) r0 = add_key(&(0x7f00000000c0)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000001, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, 0x0) ioctl$PTP_CLOCK_GETCAPS(r5, 0x40043d14, &(0x7f0000000040)) io_setup(0x3, &(0x7f0000000600)) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x4040000) keyctl$negate(0xd, 0x0, 0x8000000000000000, r0) 3.560935527s ago: executing program 0 (id=208): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='illinois', 0x4b225cdc61248344) sendto$inet6(0xffffffffffffffff, &(0x7f0000000380)="ae", 0x1, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x6}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x400dc) 3.481052859s ago: executing program 0 (id=209): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000001c0)='functionfs\x00', 0xb) read(0xffffffffffffffff, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) 3.322952282s ago: executing program 3 (id=211): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x40, 0x1040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x4}]}}}]}, 0x3c}}, 0x0) 3.204030224s ago: executing program 0 (id=212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r2, &(0x7f00000001c0)=""/64, 0xfdef) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 3.011189042s ago: executing program 3 (id=213): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r1, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x20005, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x5, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x1, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x9, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0xb, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x1000005, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x4, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x8, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x80000001, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xbc, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x200, 0xfffffffa, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) 2.864051827s ago: executing program 2 (id=214): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f00000009c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) 2.814692134s ago: executing program 4 (id=215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) setrlimit(0x1, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x5c39d53d76e37746) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r3, 0x0, 0x3b) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 2.744780309s ago: executing program 3 (id=216): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x17b3\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0004', 0x6) close(r1) write(0xffffffffffffffff, &(0x7f0000000280)='ACME\n\x00', 0x5) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='ACMESynth\n\x00', 0xa) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000680)='nonexistent_udc\n\x00', 0x10) close(r3) 2.283576161s ago: executing program 4 (id=217): socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$kcm(0x29, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00d100, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x5, 0x0, 0xfffffffe, 0x257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x20000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.924853606s ago: executing program 2 (id=218): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404705352200000102030109022000010100c0010904000002000000000705020200020007058202000200"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='0547 2235\n\x00', 0xa) 1.508044426s ago: executing program 3 (id=219): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='illinois', 0x4b225cdc61248344) sendto$inet6(0xffffffffffffffff, &(0x7f0000000380)="ae", 0x1, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x6}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x400dc) 1.347056999s ago: executing program 3 (id=220): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) memfd_create(0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.210116923s ago: executing program 4 (id=221): syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fa0500", 0x48, 0x11, 0x0, @local, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e138060072381f41e5fff9620915b6f78670dfaf9a195fcb2a79cf6b7931c9b4"}}}}}}}, 0x0) 326.842966ms ago: executing program 1 (id=222): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000001c0)='functionfs\x00', 0xb) read(0xffffffffffffffff, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) 259.978301ms ago: executing program 3 (id=223): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x6fcd, 0x1, 0xf06, 0x3, 0x95, 0x7c, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 217.809176ms ago: executing program 1 (id=224): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r0, &(0x7f00000001c0)='functionfs\x00', 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)="010000002b0000000100000002000000090400000000000000090400000000000000090401000000000000", 0x2b) 165.439535ms ago: executing program 4 (id=225): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x1) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40, 0x1040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x4}]}}}]}, 0x3c}}, 0x0) 0s ago: executing program 1 (id=226): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x20005, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x5, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x1, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x9, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0xb, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x1000005, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x4, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x8, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x80000001, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xbc, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x200, 0xfffffffa, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.177' (ED25519) to the list of known hosts. [ 61.355685][ T30] audit: type=1400 audit(1784932614.635:129): avc: denied { mounton } for pid=5607 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 61.379440][ T30] audit: type=1400 audit(1784932614.655:130): avc: denied { mount } for pid=5607 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 61.382111][ T5607] cgroup: Unknown subsys name 'net' [ 61.408996][ T30] audit: type=1400 audit(1784932614.685:131): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 61.547903][ T5607] cgroup: Unknown subsys name 'cpuset' [ 61.555631][ T5607] cgroup: Unknown subsys name 'rlimit' [ 61.675473][ T30] audit: type=1400 audit(1784932614.945:132): avc: denied { setattr } for pid=5607 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.699348][ T30] audit: type=1400 audit(1784932614.955:133): avc: denied { create } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.753641][ T30] audit: type=1400 audit(1784932614.955:134): avc: denied { write } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.774327][ T30] audit: type=1400 audit(1784932614.955:135): avc: denied { read } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.794871][ T30] audit: type=1400 audit(1784932614.955:136): avc: denied { mounton } for pid=5607 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 61.822126][ T30] audit: type=1400 audit(1784932614.955:137): avc: denied { mount } for pid=5607 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 61.841962][ T5610] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 61.855166][ T30] audit: type=1400 audit(1784932615.125:138): avc: denied { relabelto } for pid=5610 comm="mkswap" name="swap-file" dev="sda1" ino=2028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 62.799676][ T5607] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.731311][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.739483][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.752959][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.760389][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.768029][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.776700][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.777059][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.784368][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.801674][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.804062][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.809173][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.817187][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.832629][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.840402][ T4927] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.849608][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.852459][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.857954][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.865617][ T5634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.871625][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.879408][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.893203][ T5634] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.906926][ T5634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.914856][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.923785][ T5634] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.930956][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.817879][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.825042][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.110800][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.121892][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.129502][ T5624] bridge_slave_0: entered allmulticast mode [ 66.137562][ T5624] bridge_slave_0: entered promiscuous mode [ 66.163382][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.171153][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.178384][ T5624] bridge_slave_1: entered allmulticast mode [ 66.185086][ T5624] bridge_slave_1: entered promiscuous mode [ 66.266864][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.282899][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.290308][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.298053][ T5620] bridge_slave_0: entered allmulticast mode [ 66.304779][ T5620] bridge_slave_0: entered promiscuous mode [ 66.323584][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.342264][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.349535][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.357620][ T5620] bridge_slave_1: entered allmulticast mode [ 66.364523][ T5620] bridge_slave_1: entered promiscuous mode [ 66.371458][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.379022][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.386377][ T5619] bridge_slave_0: entered allmulticast mode [ 66.393343][ T5619] bridge_slave_0: entered promiscuous mode [ 66.425052][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.432287][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.439736][ T5619] bridge_slave_1: entered allmulticast mode [ 66.446746][ T5619] bridge_slave_1: entered promiscuous mode [ 66.459127][ T5624] team0: Port device team_slave_0 added [ 66.492567][ T5624] team0: Port device team_slave_1 added [ 66.512490][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.523525][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.551888][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.559285][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.566603][ T5631] bridge_slave_0: entered allmulticast mode [ 66.573453][ T5631] bridge_slave_0: entered promiscuous mode [ 66.587768][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.597133][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.604202][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.611452][ T5629] bridge_slave_0: entered allmulticast mode [ 66.618290][ T5629] bridge_slave_0: entered promiscuous mode [ 66.625735][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.632729][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.658656][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.670395][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.677855][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.685006][ T5631] bridge_slave_1: entered allmulticast mode [ 66.692259][ T5631] bridge_slave_1: entered promiscuous mode [ 66.707167][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.716440][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.723522][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.730930][ T5629] bridge_slave_1: entered allmulticast mode [ 66.737717][ T5629] bridge_slave_1: entered promiscuous mode [ 66.744556][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.751714][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.777837][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.796152][ T5620] team0: Port device team_slave_0 added [ 66.830732][ T5620] team0: Port device team_slave_1 added [ 66.846539][ T5634] Bluetooth: hci1: command tx timeout [ 66.854476][ T5619] team0: Port device team_slave_0 added [ 66.862031][ T5619] team0: Port device team_slave_1 added [ 66.869538][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.893983][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.911860][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.926155][ T5630] Bluetooth: hci0: command tx timeout [ 66.932119][ T5634] Bluetooth: hci2: command tx timeout [ 66.940380][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.947649][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.973652][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.986553][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.005576][ T5634] Bluetooth: hci4: command tx timeout [ 67.015496][ T5634] Bluetooth: hci3: command tx timeout [ 67.028035][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.035078][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.061411][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.078841][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.085985][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.112309][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.133895][ T5624] hsr_slave_0: entered promiscuous mode [ 67.140218][ T5624] hsr_slave_1: entered promiscuous mode [ 67.157447][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.164491][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.190412][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.202789][ T5631] team0: Port device team_slave_0 added [ 67.210349][ T5631] team0: Port device team_slave_1 added [ 67.227545][ T5629] team0: Port device team_slave_0 added [ 67.265643][ T5629] team0: Port device team_slave_1 added [ 67.285575][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.292600][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.318559][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.350962][ T5620] hsr_slave_0: entered promiscuous mode [ 67.357692][ T5620] hsr_slave_1: entered promiscuous mode [ 67.363565][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 67.369484][ T5620] Cannot create hsr debugfs directory [ 67.376002][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.382937][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.408951][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.430004][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.436987][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.463011][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.474940][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.482162][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.508184][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.557156][ T5619] hsr_slave_0: entered promiscuous mode [ 67.563640][ T5619] hsr_slave_1: entered promiscuous mode [ 67.570023][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 67.575832][ T5619] Cannot create hsr debugfs directory [ 67.606997][ T5629] hsr_slave_0: entered promiscuous mode [ 67.613058][ T5629] hsr_slave_1: entered promiscuous mode [ 67.619137][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 67.624857][ T5629] Cannot create hsr debugfs directory [ 67.684084][ T5631] hsr_slave_0: entered promiscuous mode [ 67.691050][ T5631] hsr_slave_1: entered promiscuous mode [ 67.697238][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 67.702963][ T5631] Cannot create hsr debugfs directory [ 67.995652][ T5624] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.007277][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.016715][ T5624] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.026775][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.039834][ T5624] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.048652][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.056505][ T5624] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.065937][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.133165][ T5619] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.146324][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.165283][ T5619] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.176341][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.184017][ T5619] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.193057][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.206688][ T5619] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.217477][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.264490][ T5620] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.274188][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.289742][ T5620] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.299329][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.317512][ T5620] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.329447][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.346306][ T5620] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.354796][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.412496][ T5629] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.422172][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.438597][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.452898][ T5629] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.464942][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.474106][ T5629] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.482473][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.490892][ T5629] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.499504][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.582712][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.597152][ T5631] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.605825][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.620073][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.627493][ T5631] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.636440][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.644130][ T5631] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.652949][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.661169][ T5631] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.669936][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.678972][ T1020] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.686688][ T1020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.708366][ T1020] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.715510][ T1020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.749733][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.761233][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.788860][ T91] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.796009][ T91] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.828774][ T1020] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.835907][ T1020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.858747][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.894084][ T1020] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.901272][ T1020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.936506][ T5634] Bluetooth: hci1: command tx timeout [ 68.959574][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.966928][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.016905][ T5630] Bluetooth: hci0: command tx timeout [ 69.022395][ T5634] Bluetooth: hci2: command tx timeout [ 69.024777][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.073389][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.085604][ T5634] Bluetooth: hci3: command tx timeout [ 69.091376][ T5630] Bluetooth: hci4: command tx timeout [ 69.092117][ T5620] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.115638][ T5620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.140115][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.160125][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.167306][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.209511][ T1020] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.216682][ T1020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.250418][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.276799][ T1020] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.283946][ T1020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.318123][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.325252][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.657836][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.822301][ T5624] veth0_vlan: entered promiscuous mode [ 69.851644][ T5624] veth1_vlan: entered promiscuous mode [ 69.876815][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.973968][ T5624] veth0_macvtap: entered promiscuous mode [ 70.013777][ T5624] veth1_macvtap: entered promiscuous mode [ 70.034354][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.050260][ T5619] veth0_vlan: entered promiscuous mode [ 70.108553][ T5619] veth1_vlan: entered promiscuous mode [ 70.128377][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.159468][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.191575][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.228050][ T1020] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.253390][ T1020] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.288402][ T1020] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.297839][ T1020] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.309677][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.344532][ T5619] veth0_macvtap: entered promiscuous mode [ 70.382713][ T5619] veth1_macvtap: entered promiscuous mode [ 70.428540][ T5629] veth0_vlan: entered promiscuous mode [ 70.473262][ T5631] veth0_vlan: entered promiscuous mode [ 70.484316][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.501073][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.515944][ T5629] veth1_vlan: entered promiscuous mode [ 70.525263][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.557026][ T5631] veth1_vlan: entered promiscuous mode [ 70.570746][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.577654][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.588182][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.590373][ T5620] veth0_vlan: entered promiscuous mode [ 70.619072][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 70.619089][ T30] audit: type=1400 audit(1784932623.895:154): avc: denied { mounton } for pid=5624 comm="syz-executor" path="/root/syzkaller.fGjKVm/syz-tmp" dev="sda1" ino=2044 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 70.635884][ T5629] veth0_macvtap: entered promiscuous mode [ 70.668264][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.693011][ T5620] veth1_vlan: entered promiscuous mode [ 70.693868][ T30] audit: type=1400 audit(1784932623.925:155): avc: denied { mount } for pid=5624 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.711428][ T5629] veth1_macvtap: entered promiscuous mode [ 70.723214][ T30] audit: type=1400 audit(1784932623.935:156): avc: denied { mounton } for pid=5624 comm="syz-executor" path="/root/syzkaller.fGjKVm/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 70.757672][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.767706][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.776709][ T30] audit: type=1400 audit(1784932623.935:157): avc: denied { mount } for pid=5624 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 70.799548][ T30] audit: type=1400 audit(1784932623.935:158): avc: denied { mounton } for pid=5624 comm="syz-executor" path="/root/syzkaller.fGjKVm/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 70.831103][ T5624] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 70.837271][ T5631] veth0_macvtap: entered promiscuous mode [ 70.858250][ T30] audit: type=1400 audit(1784932623.935:159): avc: denied { mounton } for pid=5624 comm="syz-executor" path="/root/syzkaller.fGjKVm/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 70.887104][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.895949][ T30] audit: type=1400 audit(1784932623.955:160): avc: denied { unmount } for pid=5624 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 70.916172][ T30] audit: type=1400 audit(1784932623.955:161): avc: denied { mounton } for pid=5624 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 70.940929][ T30] audit: type=1400 audit(1784932623.955:162): avc: denied { mount } for pid=5624 comm="syz-executor" name="/" dev="gadgetfs" ino=7851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 70.953057][ T5620] veth0_macvtap: entered promiscuous mode [ 70.970756][ T30] audit: type=1400 audit(1784932623.965:163): avc: denied { mount } for pid=5624 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 70.978961][ T5631] veth1_macvtap: entered promiscuous mode [ 71.006972][ T5630] Bluetooth: hci1: command tx timeout [ 71.050305][ T5620] veth1_macvtap: entered promiscuous mode [ 71.082902][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.090809][ T5630] Bluetooth: hci2: command tx timeout [ 71.096534][ T5634] Bluetooth: hci0: command tx timeout [ 71.123653][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.132686][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.164366][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.175560][ T5634] Bluetooth: hci4: command tx timeout [ 71.180984][ T5630] Bluetooth: hci3: command tx timeout [ 71.186537][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.221897][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.239828][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.243077][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.258309][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.277875][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.304948][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.367284][ T3346] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.427453][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.484283][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.503116][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.512699][ T3346] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.091571][ T3346] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.456714][ T3346] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.471024][ T3346] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.505958][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.543352][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.564045][ T3346] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.599324][ T3346] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.640928][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.656945][ T3346] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.673488][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.767902][ T3346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.793191][ T3346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.804606][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.820959][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.897804][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.907763][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.082730][ T3346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.101919][ T5634] Bluetooth: hci1: command tx timeout [ 73.118047][ T3346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.166863][ T5634] Bluetooth: hci0: command tx timeout [ 73.172387][ T5634] Bluetooth: hci2: command tx timeout [ 73.245406][ T5634] Bluetooth: hci4: command tx timeout [ 73.250894][ T5630] Bluetooth: hci3: command tx timeout [ 73.913783][ T5843] binder: BINDER_SET_CONTEXT_MGR already set [ 73.934019][ T5843] binder: 5842:5843 ioctl 4018620d 200000000040 returned -16 [ 74.327805][ T5853] 9pnet_fd: Insufficient options for proto=fd [ 74.335558][ T5853] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 74.449016][ T5344] IPVS: starting estimator thread 0... [ 74.636107][ T5854] IPVS: using max 40 ests per chain, 96000 per kthread [ 75.090470][ T5844] infiniband syz1: set active [ 75.095517][ T5844] infiniband syz1: added syz_tun [ 75.117977][ T5844] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 75.140999][ T5844] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 75.158631][ T5844] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 75.194549][ T5844] RDS/IB: syz1: added [ 75.199174][ T5844] smc: adding ib device syz1 with port count 1 [ 75.205977][ T5844] smc: ib device syz1 port 1 has no pnetid [ 75.478293][ T5884] file system registered [ 75.507811][ T5884] read descriptors [ 75.528040][ T5886] Zero length message leads to an empty skb [ 75.581635][ T5631] ffs_data_put(): freeing [ 76.043207][ T30] kauditd_printk_skb: 193 callbacks suppressed [ 76.043238][ T30] audit: type=1400 audit(1784932629.315:357): avc: denied { write } for pid=5891 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.598097][ T30] audit: type=1400 audit(1784932629.845:358): avc: denied { ioctl } for pid=5895 comm="syz.3.33" path="socket:[8901]" dev="sockfs" ino=8901 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.453867][ T5909] 9pnet_fd: Insufficient options for proto=fd [ 77.461117][ T5909] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 77.942703][ T5913] netlink: 'syz.1.38': attribute type 4 has an invalid length. [ 78.200210][ T30] audit: type=1400 audit(1784932631.475:359): avc: denied { create } for pid=5914 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.222118][ T30] audit: type=1400 audit(1784932631.475:360): avc: denied { bind } for pid=5914 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.264504][ T30] audit: type=1400 audit(1784932631.535:361): avc: denied { read write } for pid=5923 comm="syz.1.43" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.291445][ T30] audit: type=1400 audit(1784932631.535:362): avc: denied { open } for pid=5923 comm="syz.1.43" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.318415][ T30] audit: type=1400 audit(1784932631.535:363): avc: denied { ioctl } for pid=5923 comm="syz.1.43" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.656974][ T5720] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.868179][ T5720] usb 2-1: New USB device found, idVendor=0547, idProduct=2235, bcdDevice= 0.00 [ 78.899211][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.928914][ T5720] usb 2-1: Product: syz [ 78.945198][ T5720] usb 2-1: Manufacturer: syz [ 78.954870][ T5720] usb 2-1: SerialNumber: syz [ 79.084775][ T5720] usbtest 2-1:1.0: EZ-USB device [ 79.089934][ T5720] usbtest 2-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 79.615548][ T5735] usb 2-1: USB disconnect, device number 2 [ 79.795414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 79.952608][ T30] audit: type=1400 audit(1784932633.225:364): avc: denied { read write } for pid=5941 comm="syz.2.49" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 80.036196][ T30] audit: type=1400 audit(1784932633.225:365): avc: denied { open } for pid=5941 comm="syz.2.49" path="/dev/uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 80.042996][ T5942] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 80.113757][ T5942] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 80.124376][ T5942] udc dummy_udc.0: failed to start g1: -22 [ 80.159342][ T5942] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 80.179479][ T30] audit: type=1400 audit(1784932633.255:366): avc: denied { ioctl } for pid=5941 comm="syz.2.49" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 80.266801][ T5942] UDC core: g1: couldn't find an available UDC or it's busy [ 80.389271][ T5952] 9pnet_fd: Insufficient options for proto=fd [ 80.396436][ T5952] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 80.454419][ T5954] netlink: 'syz.3.52': attribute type 10 has an invalid length. [ 80.475564][ T5720] IPVS: starting estimator thread 0... [ 80.741980][ T5954] syz_tun: entered promiscuous mode [ 80.825850][ T5953] IPVS: using max 56 ests per chain, 134400 per kthread [ 80.835616][ T5954] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 81.195511][ T188] cfg80211: failed to load regulatory.db [ 81.422384][ T5972] 9pnet_fd: Insufficient options for proto=fd [ 82.721757][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 82.721774][ T30] audit: type=1400 audit(1784932635.305:380): avc: denied { read } for pid=5973 comm="syz.0.58" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 82.755440][ T30] audit: type=1400 audit(1784932635.305:381): avc: denied { open } for pid=5973 comm="syz.0.58" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 82.779623][ T30] audit: type=1400 audit(1784932635.345:382): avc: denied { create } for pid=5973 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.804286][ T30] audit: type=1400 audit(1784932635.415:383): avc: denied { bind } for pid=5973 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.823738][ T30] audit: type=1400 audit(1784932635.415:384): avc: denied { listen } for pid=5973 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.853701][ T30] audit: type=1400 audit(1784932635.415:385): avc: denied { read } for pid=5973 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.931114][ T30] audit: type=1400 audit(1784932637.205:386): avc: denied { write } for pid=5995 comm="syz.2.66" name="strings" dev="configfs" ino=6986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.994624][ T5996] UDC core: g1: couldn't find an available UDC or it's busy [ 84.031242][ T30] audit: type=1400 audit(1784932637.245:387): avc: denied { write } for pid=5995 comm="syz.2.66" name="strings" dev="configfs" ino=7879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 84.140963][ T30] audit: type=1400 audit(1784932637.245:388): avc: denied { write } for pid=5995 comm="syz.2.66" name="functions" dev="configfs" ino=6984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 84.202711][ T30] audit: type=1400 audit(1784932637.265:389): avc: denied { write } for pid=5995 comm="syz.2.66" name="c.1" dev="configfs" ino=7878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 84.325718][ T6007] UDC core: g1: couldn't find an available UDC or it's busy [ 84.653135][ T5619] ffs_data_put(): freeing [ 84.680258][ T5630] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 84.692783][ T5630] CPU: 0 UID: 0 PID: 5630 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) [ 84.692814][ T5630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 84.692827][ T5630] Workqueue: hci3 hci_rx_work [ 84.692850][ T5630] Call Trace: [ 84.692856][ T5630] [ 84.692864][ T5630] dump_stack_lvl+0x100/0x190 [ 84.692892][ T5630] sysfs_warn_dup.cold+0x1c/0x28 [ 84.692920][ T5630] sysfs_create_dir_ns+0x24b/0x2b0 [ 84.692949][ T5630] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 84.692975][ T5630] ? find_held_lock+0x2b/0x80 [ 84.693003][ T5630] ? kobject_add_internal+0x25f/0x930 [ 84.693028][ T5630] ? kobject_add_internal+0x25f/0x930 [ 84.693056][ T5630] ? do_raw_spin_unlock+0x145/0x1e0 [ 84.693083][ T5630] kobject_add_internal+0x2c8/0x930 [ 84.693113][ T5630] kobject_add+0x16a/0x1e0 [ 84.693138][ T5630] ? __pfx_kobject_add+0x10/0x10 [ 84.693162][ T5630] ? class_to_subsys+0x10f/0x150 [ 84.693193][ T5630] ? kobject_put+0xb9/0x640 [ 84.693215][ T5630] ? _raw_spin_unlock+0x28/0x50 [ 84.693251][ T5630] device_add+0x294/0x1970 [ 84.693279][ T5630] ? __pfx_dev_set_name+0x10/0x10 [ 84.693308][ T5630] ? __pfx_device_add+0x10/0x10 [ 84.693333][ T5630] ? mgmt_send_event_skb+0x2fb/0x460 [ 84.693360][ T5630] hci_conn_add_sysfs+0x1a3/0x260 [ 84.693383][ T5630] le_conn_complete_evt+0x11eb/0x1f60 [ 84.693409][ T5630] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 84.693426][ T5630] ? hci_event_packet+0x186/0xcd0 [ 84.693451][ T5630] hci_le_conn_complete_evt+0x23c/0x3a0 [ 84.693472][ T5630] ? skb_pull_data+0x15f/0x1e0 [ 84.693502][ T5630] hci_le_meta_evt+0x34a/0x5f0 [ 84.693524][ T5630] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 84.693547][ T5630] hci_event_packet+0x51c/0xcd0 [ 84.693570][ T5630] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 84.693591][ T5630] ? __pfx_hci_event_packet+0x10/0x10 [ 84.693613][ T5630] ? kcov_remote_start+0x384/0x670 [ 84.693635][ T5630] ? lockdep_hardirqs_on+0x78/0x100 [ 84.693660][ T5630] hci_rx_work+0x451/0xfc0 [ 84.693683][ T5630] process_one_work+0xa23/0x1940 [ 84.693713][ T5630] ? __pfx_process_one_work+0x10/0x10 [ 84.693741][ T5630] ? __pfx_hci_rx_work+0x10/0x10 [ 84.693761][ T5630] worker_thread+0x5ef/0xe50 [ 84.693793][ T5630] ? __pfx_worker_thread+0x10/0x10 [ 84.693816][ T5630] ? kthread+0x13a/0x450 [ 84.693835][ T5630] ? __pfx_worker_thread+0x10/0x10 [ 84.693854][ T5630] kthread+0x370/0x450 [ 84.693872][ T5630] ? __pfx_kthread+0x10/0x10 [ 84.693890][ T5630] ret_from_fork+0x72b/0xd50 [ 84.693915][ T5630] ? __pfx_ret_from_fork+0x10/0x10 [ 84.693939][ T5630] ? __switch_to+0x800/0x10f0 [ 84.693956][ T5630] ? __pfx_kthread+0x10/0x10 [ 84.693974][ T5630] ret_from_fork_asm+0x1a/0x30 [ 84.694015][ T5630] [ 84.694057][ T5630] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 84.972226][ T5630] Bluetooth: hci3: failed to register connection device [ 85.206261][ T5728] IPVS: starting estimator thread 0... [ 85.211997][ T6029] 9pnet_fd: Insufficient options for proto=fd [ 85.218727][ T6029] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 85.346390][ T6030] IPVS: using max 38 ests per chain, 91200 per kthread [ 85.917747][ T6036] UDC core: g1: couldn't find an available UDC or it's busy [ 88.232908][ T6088] 9pnet_fd: Insufficient options for proto=fd [ 88.240003][ T6088] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 88.663500][ T6090] netlink: 52 bytes leftover after parsing attributes in process `syz.4.99'. [ 89.834217][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 89.834249][ T30] audit: type=1400 audit(1784932642.335:399): avc: denied { shutdown } for pid=6093 comm="syz.4.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.022461][ T30] audit: type=1400 audit(1784932642.335:400): avc: denied { read } for pid=6093 comm="syz.4.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.364095][ T6103] netlink: 28 bytes leftover after parsing attributes in process `syz.1.104'. [ 91.252299][ T5631] ffs_data_put(): freeing [ 91.298249][ T6122] netlink: 52 bytes leftover after parsing attributes in process `syz.2.111'. [ 91.455240][ T30] audit: type=1400 audit(1784932644.725:401): avc: denied { create } for pid=6129 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 91.585035][ T30] audit: type=1400 audit(1784932644.755:402): avc: denied { create } for pid=6129 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 91.635620][ T5735] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 91.656363][ T6137] netlink: 28 bytes leftover after parsing attributes in process `syz.4.117'. [ 91.657681][ T30] audit: type=1400 audit(1784932644.935:403): avc: denied { mmap_zero } for pid=6129 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 91.761023][ T30] audit: type=1400 audit(1784932644.965:404): avc: denied { map } for pid=6129 comm="syz.0.115" path="socket:[10561]" dev="sockfs" ino=10561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 92.410331][ T5735] usb 2-1: unable to get BOS descriptor or descriptor too short [ 92.448382][ T5735] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 92.476272][ T5735] usb 2-1: can't read configurations, error -71 [ 93.771758][ T6167] netlink: 28 bytes leftover after parsing attributes in process `syz.4.129'. [ 94.167866][ T6177] 9pnet_fd: Insufficient options for proto=fd [ 94.174931][ T6177] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 94.200570][ T5822] IPVS: starting estimator thread 0... [ 94.393151][ T6178] IPVS: using max 41 ests per chain, 98400 per kthread [ 94.619316][ T6180] i2c i2c-0: new_device: Instantiated device stusb160x at 0x48 [ 94.708768][ T6180] rt1719 0-0049: probe with driver rt1719 failed with error -5 [ 94.752369][ T6180] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 94.792396][ T6181] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 94.960691][ T6181] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 95.211013][ T6200] UDC core: g1: couldn't find an available UDC or it's busy [ 95.650275][ T6204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.143'. [ 96.337100][ T6218] binder: BINDER_SET_CONTEXT_MGR already set [ 96.344391][ T6218] binder: 6217:6218 ioctl 4018620d 2000000002c0 returned -16 [ 97.365259][ T6240] netlink: 28 bytes leftover after parsing attributes in process `syz.3.155'. [ 98.951870][ T6270] netlink: 28 bytes leftover after parsing attributes in process `syz.4.169'. [ 99.328723][ T6285] 9pnet_fd: Insufficient options for proto=fd [ 99.839711][ T6288] binder: 6287:6288 ioctl 4018620d 0 returned -22 [ 100.148538][ T6300] i2c i2c-0: Failed to register i2c client stusb160x at 0x48 (-16) [ 100.173717][ T6300] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 100.445791][ T5822] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 100.610235][ T6318] clocksource: Switched to clocksource acpi_pm [ 100.618715][ T5822] usb 5-1: unable to get BOS descriptor or descriptor too short [ 100.638503][ T5822] usb 5-1: config 142 has an invalid interface number: 251 but max is 0 [ 100.657027][ T5822] usb 5-1: config 142 has no interface number 0 [ 100.669496][ T5822] usb 5-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 100.712165][ T5822] usb 5-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 100.748997][ T5822] usb 5-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 100.780204][ T30] audit: type=1400 audit(1784932654.048:405): avc: denied { listen } for pid=6320 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.814704][ T30] audit: type=1400 audit(1784932654.078:406): avc: denied { accept } for pid=6320 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.817652][ T5822] usb 5-1: config 142 interface 251 has no altsetting 0 [ 101.071353][ T6331] 9pnet_fd: Insufficient options for proto=fd [ 101.642929][ T6338] wlan0 speed is unknown, defaulting to 1000 [ 101.654497][ T6338] wlan0 speed is unknown, defaulting to 1000 [ 101.661574][ T6338] wlan0 speed is unknown, defaulting to 1000 [ 101.669211][ T6338] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 101.683495][ T6338] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 101.700529][ T6338] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 101.713237][ T6338] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 101.726321][ T6338] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 101.747445][ T6338] wlan0 speed is unknown, defaulting to 1000 [ 101.755123][ T6338] wlan0 speed is unknown, defaulting to 1000 [ 101.762575][ T6338] wlan0 speed is unknown, defaulting to 1000 [ 101.770053][ T6338] wlan0 speed is unknown, defaulting to 1000 [ 101.778861][ T6338] wlan0 speed is unknown, defaulting to 1000 [ 101.851117][ T6339] smc: removing ib device syz1 [ 101.906424][ T6339] smbdirect: ib_dev[syz1] removed [ 102.057426][ T30] audit: type=1400 audit(1784932655.328:407): avc: denied { mounton } for pid=6342 comm="syz.0.195" path="/27/file0" dev="tmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.197796][ T30] audit: type=1400 audit(1784932655.458:408): avc: denied { mount } for pid=6342 comm="syz.0.195" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 102.265032][ T30] audit: type=1400 audit(1784932655.528:409): avc: denied { unmount } for pid=5619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 102.505374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.861840][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'. [ 102.871040][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'. [ 102.879946][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'. [ 102.888884][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'. [ 102.897754][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'. [ 102.906611][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'. [ 102.921269][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'. [ 102.932701][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'. [ 102.944460][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'. [ 103.355358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 103.365368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.582863][ T5822] usb 5-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 103.637468][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.660144][ T6363] binder: 6361:6363 ioctl c0306201 0 returned -14 [ 103.695131][ T6364] UDC core: g1: couldn't find an available UDC or it's busy [ 103.696640][ T5822] usb 5-1: can't set config #142, error -71 [ 105.806753][ T6382] bond0: (slave bond_slave_0): interface is now down [ 105.814614][ T30] audit: type=1400 audit(1784932659.068:410): avc: denied { ioctl } for pid=6391 comm="syz.3.211" path="socket:[11223]" dev="sockfs" ino=11223 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.858060][ T6382] bond0: (slave bond_slave_1): interface is now down [ 105.874919][ T6382] bond0: (slave syz_tun): interface is now down [ 105.898432][ T6382] bond0: now running without any active interface! [ 105.929518][ T5822] usb 5-1: USB disconnect, device number 2 [ 106.261089][ T6401] binder: 6400:6401 ioctl c0306201 0 returned -14 [ 106.860738][ T6408] UDC core: g1: couldn't find an available UDC or it's busy [ 108.365329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 108.726644][ T5728] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 108.913340][ T5728] usb 3-1: New USB device found, idVendor=0547, idProduct=2235, bcdDevice= 0.00 [ 108.943489][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.955935][ T5728] usb 3-1: Product: syz [ 108.966984][ T5728] usb 3-1: Manufacturer: syz [ 108.980375][ T5728] usb 3-1: SerialNumber: syz [ 109.018347][ T5728] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI [ 109.030428][ T5728] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 109.038853][ T5728] CPU: 1 UID: 0 PID: 5728 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.049802][ T5728] Tainted: [L]=SOFTLOCKUP [ 109.054121][ T5728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 109.064297][ T5728] Workqueue: usb_hub_wq hub_event [ 109.069337][ T5728] RIP: 0010:usbtest_probe+0x3b9/0x1280 [ 109.074797][ T5728] Code: 1a 47 fa 45 85 ff 79 5e e8 c4 1f 47 fa 48 8b 84 24 80 00 00 00 48 8d 58 0a 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <0f> b6 04 02 48 89 da 83 e2 07 38 d0 7f 08 84 c0 0f 85 58 0d 00 00 [ 109.094414][ T5728] RSP: 0018:ffffc90004a2efc8 EFLAGS: 00010202 [ 109.100493][ T5728] RAX: dffffc0000000000 RBX: 000000000000000a RCX: ffffc9001b668000 [ 109.108475][ T5728] RDX: 0000000000000001 RSI: ffffffff87c33cdc RDI: ffff888037d9a540 [ 109.116447][ T5728] RBP: ffff888036263690 R08: 0000000000000005 R09: 0000000000000000 [ 109.124429][ T5728] R10: 00000000ffffffff R11: 000000000000758b R12: ffff888074f4a0b0 [ 109.132434][ T5728] R13: ffff888033f726d0 R14: ffff888033f72600 R15: 00000000ffffffff [ 109.140398][ T5728] FS: 0000000000000000(0000) GS:ffff888123ede000(0000) knlGS:0000000000000000 [ 109.149311][ T5728] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.155886][ T5728] CR2: 00007f4a59beb580 CR3: 0000000054499000 CR4: 00000000003526f0 [ 109.163839][ T5728] Call Trace: [ 109.167096][ T5728] [ 109.170013][ T5728] ? mark_held_locks+0x40/0x70 [ 109.174763][ T5728] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 109.180563][ T5728] ? lockdep_hardirqs_on+0x78/0x100 [ 109.185841][ T5728] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 109.191659][ T5728] usb_probe_interface+0x303/0x8f0 [ 109.196764][ T5728] ? __pfx_usb_probe_interface+0x10/0x10 [ 109.202391][ T5728] really_probe+0x241/0xa60 [ 109.206878][ T5728] __driver_probe_device+0x20e/0x450 [ 109.212151][ T5728] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 109.218035][ T5728] driver_probe_device+0x4a/0x140 [ 109.223046][ T5728] __device_attach_driver+0x1df/0x320 [ 109.228402][ T5728] ? __pfx___device_attach_driver+0x10/0x10 [ 109.234280][ T5728] bus_for_each_drv+0x159/0x1e0 [ 109.239127][ T5728] ? __pfx_bus_for_each_drv+0x10/0x10 [ 109.244492][ T5728] ? lockdep_hardirqs_on+0x78/0x100 [ 109.249674][ T5728] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 109.255468][ T5728] __device_attach+0x1e4/0x4d0 [ 109.260233][ T5728] ? __pfx___device_attach+0x10/0x10 [ 109.265522][ T5728] ? do_raw_spin_unlock+0x145/0x1e0 [ 109.270724][ T5728] device_initial_probe+0xaf/0xd0 [ 109.275734][ T5728] bus_probe_device+0x64/0x160 [ 109.280479][ T5728] device_add+0x121d/0x1970 [ 109.284971][ T5728] ? __pfx_device_add+0x10/0x10 [ 109.289807][ T5728] ? mark_held_locks+0x40/0x70 [ 109.294559][ T5728] usb_set_configuration+0xd97/0x1c60 [ 109.299921][ T5728] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 109.305970][ T5728] usb_generic_driver_probe+0xa1/0xe0 [ 109.311342][ T5728] usb_probe_device+0xef/0x400 [ 109.316102][ T5728] ? __pfx_usb_probe_device+0x10/0x10 [ 109.321477][ T5728] really_probe+0x241/0xa60 [ 109.325969][ T5728] __driver_probe_device+0x20e/0x450 [ 109.331243][ T5728] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 109.337121][ T5728] driver_probe_device+0x4a/0x140 [ 109.342131][ T5728] __device_attach_driver+0x1df/0x320 [ 109.347489][ T5728] ? __pfx___device_attach_driver+0x10/0x10 [ 109.353379][ T5728] bus_for_each_drv+0x159/0x1e0 [ 109.358220][ T5728] ? __pfx_bus_for_each_drv+0x10/0x10 [ 109.363579][ T5728] ? lockdep_hardirqs_on+0x78/0x100 [ 109.368760][ T5728] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 109.374571][ T5728] __device_attach+0x1e4/0x4d0 [ 109.379333][ T5728] ? __pfx___device_attach+0x10/0x10 [ 109.384618][ T5728] ? do_raw_spin_unlock+0x145/0x1e0 [ 109.389808][ T5728] device_initial_probe+0xaf/0xd0 [ 109.394817][ T5728] bus_probe_device+0x64/0x160 [ 109.399559][ T5728] device_add+0x121d/0x1970 [ 109.404046][ T5728] ? __pfx_device_add+0x10/0x10 [ 109.408878][ T5728] ? add_device_randomness+0xc9/0x110 [ 109.414237][ T5728] usb_new_device.cold+0x685/0x115c [ 109.419420][ T5728] ? _mutex_trylock_nest_lock+0x2e1/0x310 [ 109.425129][ T5728] ? do_raw_spin_lock+0x128/0x260 [ 109.430159][ T5728] ? __pfx_usb_new_device+0x10/0x10 [ 109.435350][ T5728] ? mark_held_locks+0x40/0x70 [ 109.440104][ T5728] hub_event+0x30a3/0x4a60 [ 109.444510][ T5728] ? __pfx_hub_event+0x10/0x10 [ 109.449262][ T5728] ? debug_object_deactivate+0x2e4/0x3b0 [ 109.454894][ T5728] ? rcu_is_watching+0x12/0xc0 [ 109.459647][ T5728] process_one_work+0xa23/0x1940 [ 109.464568][ T5728] ? __pfx_process_one_work+0x10/0x10 [ 109.469922][ T5728] ? __pfx_hub_event+0x10/0x10 [ 109.474690][ T5728] worker_thread+0x5ef/0xe50 [ 109.479261][ T5728] ? __pfx_worker_thread+0x10/0x10 [ 109.484352][ T5728] ? kthread+0x13a/0x450 [ 109.488574][ T5728] ? __pfx_worker_thread+0x10/0x10 [ 109.493665][ T5728] kthread+0x370/0x450 [ 109.497712][ T5728] ? __pfx_kthread+0x10/0x10 [ 109.502281][ T5728] ret_from_fork+0x72b/0xd50 [ 109.506855][ T5728] ? __pfx_ret_from_fork+0x10/0x10 [ 109.511952][ T5728] ? __switch_to+0x800/0x10f0 [ 109.516607][ T5728] ? __pfx_kthread+0x10/0x10 [ 109.521181][ T5728] ret_from_fork_asm+0x1a/0x30 [ 109.525935][ T5728] [ 109.528932][ T5728] Modules linked in: [ 109.534484][ T5728] ---[ end trace 0000000000000000 ]--- [ 109.585335][ T30] audit: type=1400 audit(1784932662.818:411): avc: denied { read } for pid=4959 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 109.615398][ T30] audit: type=1400 audit(1784932662.818:412): avc: denied { search } for pid=4959 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.637671][ T30] audit: type=1400 audit(1784932662.818:413): avc: denied { write search } for pid=4959 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.664411][ T30] audit: type=1400 audit(1784932662.818:414): avc: denied { add_name } for pid=4959 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.685948][ T30] audit: type=1400 audit(1784932662.818:415): avc: denied { create } for pid=4959 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.707523][ T30] audit: type=1400 audit(1784932662.818:416): avc: denied { append open } for pid=4959 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.733572][ T30] audit: type=1400 audit(1784932662.818:417): avc: denied { getattr } for pid=4959 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.756663][ T5728] RIP: 0010:usbtest_probe+0x3b9/0x1280 [ 109.762262][ T5728] Code: 1a 47 fa 45 85 ff 79 5e e8 c4 1f 47 fa 48 8b 84 24 80 00 00 00 48 8d 58 0a 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <0f> b6 04 02 48 89 da 83 e2 07 38 d0 7f 08 84 c0 0f 85 58 0d 00 00 [ 109.784415][ T5728] RSP: 0018:ffffc90004a2efc8 EFLAGS: 00010202 [ 109.790797][ T5728] RAX: dffffc0000000000 RBX: 000000000000000a RCX: ffffc9001b668000 [ 109.800893][ T5728] RDX: 0000000000000001 RSI: ffffffff87c33cdc RDI: ffff888037d9a540 [ 109.811060][ T30] audit: type=1400 audit(1784932663.088:418): avc: denied { bind } for pid=6438 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 109.833505][ T30] audit: type=1400 audit(1784932663.088:419): avc: denied { name_bind } for pid=6438 comm="syz.3.223" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 109.855373][ T5728] RBP: ffff888036263690 R08: 0000000000000005 R09: 0000000000000000 [ 109.863454][ T5728] R10: 00000000ffffffff R11: 000000000000758b R12: ffff888074f4a0b0 [ 109.872340][ T5728] R13: ffff888033f726d0 R14: ffff888033f72600 R15: 00000000ffffffff [ 109.881018][ T5728] FS: 0000000000000000(0000) GS:ffff888123ede000(0000) knlGS:0000000000000000 [ 109.902329][ T5728] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.909722][ T5728] CR2: 0000001b33f22ff8 CR3: 0000000072652000 CR4: 00000000003526f0 [ 109.926441][ T5728] Kernel panic - not syncing: Fatal exception [ 109.932721][ T5728] Kernel Offset: disabled [ 109.937025][ T5728] Rebooting in 86400 seconds..