last executing test programs: 23.397911762s ago: executing program 4 (id=5): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f000200000009050502"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x99, &(0x7f0000000040)={@link_local, @broadcast, @val={@val={0x88a8, 0x6, 0x1, 0x1}, {0x8100, 0x4}}, {@x25={0x805, {0x0, 0x4, 0x13, "a4eee934ddc6525beb07f8e58745528b7292580cdccb3c4a71cc903c4f348b04a0b64c29a722aae66c5a663efa3900150f0eff713d33516ab1bea9ce8445a26ea3d41049a27970606e7002a9b95eaab75e9a12c205f14dfca6f93cf715130f3fcf92d4b5fbcb06883231783108c5ad0108a0bbeada442f5303e50b0e0ebf9d6f"}}}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r2, r3, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) 15.538338638s ago: executing program 3 (id=17): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="30000000240001040100000000000000000000000100000000000000ffffffff000000000a0001007465716c30000000", 0x30) r2 = socket$inet(0x2, 0x2, 0x0) ioctl(r2, 0x8914, &(0x7f0000000100)="7465716c3000000000000000000000000100"/40) ioctl(r2, 0x8914, &(0x7f0000000140)='teql0\x00'/40) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x120) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() syz_usb_connect(0x5, 0xdf, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x250, 0x6, 0x4, 0x0, 0xff, 0x5}, 0x19, &(0x7f0000000480)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "edc0078e0eb2199a57374be4a78b92fc"}]}, 0x1, [{0x44, &(0x7f0000000500)=@string={0x44, 0x3, "afbf192b0495313d78f7465681195e039461b4b4bfca5e55e8cc815cd275abd115389e3d5582265dc36b4065d1da0bd0f10d89bcff6ed0fab8a6776679d7c5f0a1bf"}}]}) socket$inet_mptcp(0x2, 0x1, 0x106) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14000000000101f70000000000000000"], 0x14}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000340)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @void}}}, {@grpquota}]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe8, 0x3, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x100}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xbf}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x81}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xff}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7f}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffb}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffe3f}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFACCT_FILTER={0x4}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x94}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x92000000}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 15.462377088s ago: executing program 0 (id=19): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x1, 0xb2, 0x5, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x4, [{0x0, 0x4}]}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x5a}, 0x28) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 15.189494658s ago: executing program 4 (id=21): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x400) socket(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r2, 0x0, 0x2) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(0x0, r7) fchdir(r6) lstat(&(0x7f00000001c0)='./file0\x00', 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 14.141486795s ago: executing program 2 (id=22): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x13, 0x20, 0xbc}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000002eef"], 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x44}}, 0x0) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x2, 0x18, 0x5, 0x6, 0x2, 0x0, 0x60bd27, 0x25dfdbfc}, 0x10}}, 0x24008880) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x30}}, 0x0) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, r0, 0x0, 0x20}, 0x38) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x200000e, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) readv(r4, &(0x7f0000000240)=[{0x0, 0x7002}, {&(0x7f0000000140)=""/222, 0xde}], 0x2) 13.664726266s ago: executing program 0 (id=23): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x400) socket(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) write$tun(r1, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r2, 0x0, 0x2) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(0x0, r7) fchdir(r6) lstat(&(0x7f00000001c0)='./file0\x00', 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 10.254574404s ago: executing program 2 (id=24): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x9, 0x80000001, 0x3, 0x4, 0xffff, 0x0, 0x300000}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf947b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', 0x0, 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}}) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setns(0xffffffffffffffff, 0x64000000) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r6, 0xff) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000180)={0x2, 0x5}, 0x8) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x4, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r8, &(0x7f0000000340)='hist:', 0x5) 10.207948162s ago: executing program 1 (id=25): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 10.129093242s ago: executing program 3 (id=26): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, 0x0, 0x0) connect$llc(r3, &(0x7f0000000400)={0x1a, 0x0, 0x1, 0x0, 0x0, 0x0, @broadcast}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 9.545422007s ago: executing program 0 (id=27): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x64) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x884, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x854, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x65, 0x2, 0x4d, {0x1, 0x2, 0x2, 0x3, 0x3, 0x4}, {0x5, 0x0, 0x400, 0xab, 0x0, 0x9}, 0x2, 0x6, 0x8000}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7fffffff, 0x8, 0x7ff, 0x3, 0x2, 0x1, 0x401, 0xb9, 0xace, 0x0, 0x1, 0x9, 0x43, 0x7, 0x2, 0x0, 0x1ce00000, 0x7, 0x6, 0x103, 0x3, 0x1c000, 0x1ff, 0x2, 0x6, 0x9b16, 0x6, 0x100, 0x15a, 0xe, 0x40, 0x5, 0x4, 0x80000001, 0x4a, 0x1, 0x8, 0x99a9, 0x340d, 0x3, 0x2, 0x7, 0xd, 0x400, 0xfffffffa, 0x6, 0x100, 0x0, 0x5, 0x5, 0x2, 0xffff0001, 0x2, 0xdd1, 0x9, 0xfb, 0x4, 0xf, 0x324, 0x6, 0x8, 0x6, 0xff, 0x8, 0x401, 0x7fffffff, 0x4, 0x5, 0x800, 0x8261, 0x3, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x6, 0x5, 0xf, 0x9, 0x38c8, 0x80000001, 0x4, 0xa11, 0x6, 0x8, 0x604, 0xfff, 0xab, 0x7, 0x5, 0x8, 0x1, 0x9, 0x401, 0x0, 0x4, 0x1ff, 0x4, 0x17, 0xffffff7f, 0x7c, 0x4, 0x4, 0xa42, 0xfffffff7, 0x4, 0x5b564ea6, 0xaa32, 0x2, 0x2, 0x4000008, 0x1ff, 0x5, 0x3, 0x7, 0x6, 0xfffff000, 0x12aeb60c, 0x4, 0xbb6, 0x1, 0x3, 0x5, 0x2, 0x3, 0x85, 0x10, 0x1, 0x5, 0x1, 0x10004, 0xb, 0xf65, 0x1d7, 0x9, 0x100, 0x0, 0x0, 0xc2, 0x1, 0x3, 0xffffffff, 0x1ff, 0x1, 0x30bb, 0x7, 0x40, 0xfffffff8, 0x5, 0x2, 0x1, 0x8, 0x8000, 0x5, 0x4, 0x31e, 0xffff8001, 0x6, 0xff, 0xa, 0x1ff, 0x9, 0x7, 0x7, 0x2, 0x412, 0x6, 0xf441, 0x6, 0x1, 0x7, 0x89, 0x3, 0x5, 0x0, 0x9, 0x7, 0x1, 0x4, 0x0, 0x4, 0x4, 0x200, 0x1, 0x720a, 0xff7f, 0xfff, 0x9, 0x7fff, 0x8, 0x3ac8efcb, 0x8, 0xf2c, 0x7, 0x80000000, 0x12, 0xfffff802, 0x2e4, 0x7, 0xfffffff9, 0x400, 0x4, 0x30, 0x10000, 0xfd, 0x4, 0x1, 0x5, 0x7, 0x0, 0x7, 0x47, 0x0, 0x0, 0x1, 0x7, 0x0, 0x8, 0x3, 0x6, 0x0, 0x10001, 0x0, 0xe9, 0x5, 0x1, 0x4, 0xaacc, 0x6f, 0x7fffffff, 0x5, 0x6, 0x2, 0xffff, 0x4, 0x10000, 0x9, 0xe, 0x45e8, 0x9, 0xfffffff8, 0x6, 0x100, 0x5, 0xe, 0x73d, 0x31, 0x3, 0x0, 0x2, 0x3, 0xb70, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff7, 0x5, 0x7, 0x4, 0x2, 0x6, 0x1, 0xfb0, 0x8, 0x3, 0x5, 0x3, 0x0, 0x4, 0x9a, 0x9, 0x7, 0xfff, 0x7, 0x40, 0x5, 0x7fff, 0x6c, 0x3, 0x5, 0x7ff, 0x4, 0x2, 0x7, 0x2, 0x83d, 0x2, 0x3b, 0x4, 0x0, 0x4, 0x9, 0xc, 0x1cabbb02, 0x4, 0x4, 0x2, 0x8001, 0x7fff, 0x80000000, 0x10000, 0xffff8906, 0x7fffffff, 0x0, 0x0, 0x9, 0xc0000000, 0x2, 0x6, 0x83, 0x3, 0x10000, 0x3, 0x1, 0x6, 0x0, 0x1, 0x100, 0xcc2, 0x3800, 0x6, 0x18, 0x0, 0xfffffe00, 0x3, 0x6, 0x4, 0x3, 0x7, 0x1, 0xfffffffc, 0x8e4, 0xf5c1, 0x1, 0x5077, 0x3, 0x5, 0x7fff, 0x2, 0x4, 0x2, 0x3, 0x401, 0x6, 0x40, 0x7, 0x95, 0x5, 0x200, 0x1, 0x2, 0x7ff, 0x4, 0x8, 0xb, 0x6, 0x2, 0x0, 0xd266, 0x4, 0x0, 0x10001, 0x2, 0x101, 0x401, 0x200, 0x6, 0x1, 0x4a, 0x8, 0x2, 0xfffffffe, 0x14e, 0x4, 0x3, 0x1, 0x2, 0x94e6, 0xfffffbff, 0x5, 0x2, 0xfffd, 0xc, 0x4, 0x2, 0x40800000, 0x1f, 0x4, 0xffffffff, 0x800, 0x401, 0x3ff, 0x7ff, 0x101, 0x10, 0x5, 0x374, 0xc2f, 0x3, 0xffffff81, 0xfffffff7, 0x6, 0x8000, 0x8, 0x1, 0x1, 0x200, 0xcae, 0xc64, 0xffff, 0x7fff, 0x1, 0x8, 0x3c0, 0x9, 0x0, 0x6d3, 0xfffffff3, 0x9, 0x476b3752, 0xff, 0x0, 0x9, 0x7ff, 0x4, 0x3, 0x4, 0x7, 0x7249, 0x7, 0xffff8001, 0x95f, 0x8, 0x0, 0x1000, 0x800, 0x0, 0xfff, 0xf2, 0x0, 0x3, 0xffff, 0x0, 0x0, 0x8000, 0x9, 0x4, 0xcc6, 0xffe01000, 0x22, 0xd56, 0xfffffff0, 0x3bb8, 0x10, 0x140, 0x81, 0x9, 0x40, 0x2, 0x2, 0x4, 0x3, 0x0, 0x3, 0xf, 0x0, 0xc527, 0x9, 0x8, 0x1, 0xffff86fd, 0x7, 0x2, 0x8, 0x3, 0x9, 0x5, 0x0, 0x4, 0xc12, 0x7f, 0x0, 0x0, 0x80000000, 0x6f3, 0x7, 0x9, 0x7, 0x9, 0x4, 0x2, 0xc9, 0xaf8, 0x3, 0x80000000, 0xad8c, 0x4, 0x2, 0xea9, 0x9a1, 0x5, 0x1, 0x4, 0x8, 0x5, 0x10000, 0x3, 0x7fb, 0xdbbb, 0x4, 0x2]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r6, 0x0, 0xcd, &(0x7f0000000140)={@remote, @remote, 0x1, "504d43545aa7668b6fbc1b4ac10deca98fe853ff35584a07dfed5a50a0aac260", 0x4, 0x7, 0x7fe00, 0x3}, 0x3c) 9.531559053s ago: executing program 4 (id=28): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) readlink(&(0x7f0000000180)='./config/usb_gadget/g1/UDC\x00', &(0x7f00000001c0)=""/130, 0x82) listen(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f000022b000/0x2000)=nil, 0x2000, 0x13) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, 0x0, 0x0) 9.09318959s ago: executing program 1 (id=29): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 9.089524278s ago: executing program 2 (id=30): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x2a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x4, [{0x0, 0x4}]}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x59}, 0x28) timer_create(0x8, &(0x7f0000000080)={0x0, 0x10}, 0x0) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x500000000000000, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 8.282080743s ago: executing program 3 (id=31): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) epoll_create1(0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) read$usbmon(r2, &(0x7f0000000240)=""/166, 0xa6) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000040)=0x1000000) 7.946063194s ago: executing program 1 (id=32): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) read$usbmon(r2, &(0x7f0000000240)=""/166, 0xa6) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000040)=0x1000000) 7.613654314s ago: executing program 4 (id=33): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x20c03, 0x0) r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009"], 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="7c2f0aec9d222ea5ee20e6b25cf191669d6293d87d67cbc22a8dca55b40c545d1439d9ab278a279afd807e25e3c9aacca664836fec718e063c9b06cd66442b6407fec5c3e5cd9d0f1001c90a801c4fadce8e13a5e0209edf5c5693acccefa24d4f5a2ef062e701d054d19e9e6340a1651e05fd87b70942c679234426f9b19c0723563d0e38ec970aec02a6154ab61081aae03050d00192bd9d59977bb2f1297a7cd0571a0dfc5688a8e3d5f4a226b7e397b43c186967c74821bc70005059ab5606c70045a6a9915285c8215b9abd839f50530dde8ad500d70d8f7c1a0093293e6d632f8e8939f3199ab4ec92caed14c26975b57578c8ea666a2e4253ca9516f3c07bdc5ad27c2ff29e1569795f9dfbd1b92919432e423ff4f9a35b77419d6a8540fc9431ca78e05e278bef5a21b1423a3c9f7c1e2bd16a1ecdfde51cfa4aef38e6afb92770bcefb5fcb277ccede1ddc8647db538661b3d10effa1b6f705ef1b74e5bea20b4f98421b7b4be4c5c6be101f5503a4ecaffae335ef565920d678ed5b41031122b21f9d9b7f270b95f94624a7ddc657c83d3722a8d01f321fd7f685fc74d61a4e1914dda6df4be639c4910c56a84c24a41b9ef07eee4083dd9a30a53a58b50186c12180da4186fe5845b6b325fd112378a82d53bee449bc9d4c2d4331a1323c69c99c778560fc2142d138b23000c5403156cd8223f07a73811ab5b81e287bd6ad95c2fefce002ac77a1ac74d5e868870f29277da69987652b0055b3072efab2fe56fe0fe287f7d51aa772b2e3ae77954a938be2792442e1ab2e6fc078d821c70222142568b6db9609f1db23e8a4a460b9fbbeb48469e6bf0acffd85af86e69535a95c02c30d5ad776002c48e19e134688780bbafaf81097358b0c8f63bcefb61d8f29aacb3dc1a485bb7343539387f1e83b9283674bdc0d7fe8bf86948439f4b4a20e2832c560c743e4c2d37eddbf341c47f71a93101a08a533e96601f98752531428944d88c836c7d7a082859a3120721afd99130e83f689720638e889ddf4a23228dc23e955ae67fe5447e134b63f4c72e5664d2ed8a7406568e08f3582661006cf5800615fc4a5ec88ef3361ea027d2a1a550ac3e017a212570cd145fcc2e1984e4fca28bf4110f33a5ac847fcd3605e546ee8ea49a7de5d4b599926a76028e9d5259db7fd6f908c7a8657d42f895380c88ac85cdc183f6b61172b966a41888ceae895eaf18cb8da8d1918411b297959a8abacf8c4cee15ca87048aae13ffe068dee23a9edc2b259aeb0595b7ed2633431067a999f915934aef1be5f360f0db726f24e8eb89adb8db535de6fd7c06678831d17e47c67cd22f047b92d8fba83a49a1285def4dfdf634408cb05ae73f24df76e7393d1e90d40c50bd388bb53e281b889084a1a19efdfa6be16aed1a621d964c1ac332b65765e7440ccc75ef44851409c458905127bd161bf98cb6a3681af073e3650f52d5ee691c347e86360c3aebae4a691b2485d68c57d09e269656b1efbfd3413d54c8d3e467c0bfa84669d0cc5e9cfd50b9c79171f8b6a5e66e8c6f66c0916083b8e8a464498aed3badd2f267fb56adb0953b9ebd0370f941d796abffa81722d502c8d1e9d844802f4197067598b2394dddf76641f9c2ec0403bd379e8f712668b98e1121a27888b227104875999cd562fa9833458879652bfeffabc6bbb5c354dc36ad91354ccb5050d69b28b562a72bbf277f96bd1d5dc6408329f6f850a96762a6aebf2a7b5bacbbc032be8b29c453867a47094289f6b8aa38f85051fc4d4478a02af664b3250a396583001a7971cfa6f5a4931e32e7bfb7b4c3f7be3bc5f91ba46554773b9102dbd4aba4344c6fe87bd050f79175d7918d57bc137cde33a884bba63a1adf6e7e71ba783eb1fe689b23d3ad18627b0b229c0d982631308a88c4bf1e2079eb0fcc486ef864e7c6a75cce17b133577fa88d62807398b8a795ae2bb7610f8b17cfc56ff11b8ffc4aa316e612fc76955dc44e66467c4d632657d4cac3cc1bda8c2c6207915a89f76bf1fd61c156ba8720bb8048601cd1221f6996e6f04e44b842e00a4487cd59501a65db1f6ade7f22ba5d7ee8e67125e284eef41ad5f2069a48cc71c621eb08d832ef8592874199c5c03249d3ee03422535c2be6919c43724277d56a885ab67753ae8d7f1317b7e534bb1a111a0edb5d298c1374c7824a80fb00ae268f2fd641f1b2a12f712d9a5e027957941ffb4218c6d8a8e7950dca0b4c9018dcfb67244a30080d54781b5111c85cd89e08f51c55975301ff389baf2242ef0fb662122a2eb89c1dcaf82d6391906a1b235635e6c484cd5fa32bc80ce68d505df9a9c6b21e222c3b9330243b8e02a3e661c20e0da633d88f7debaf6643654050ab73613dbea6176109b5c35c4d280739aee77f81a1b58efa9e606259f45745b69523bc81828cfcfffd185ad51b4b183b7a1ef86757172ef67a4f153b7c3a3e99f15ef5b09d81cd1ccec8016ecc9864ccf2efdbf7a79ff9ba814a4a9e3124d735a591c649cdefa98bd569c5f4db18a537c55544c671d398ec50d9fc2b1ca1f9b0278acc9a21779c3815fcb0ee1c66c774b6591e8f6b5c9828db8a5d104213cd4513974be404a50c11009c15a1e2aaa81abc6c706c341f145f975717819c4429007ee648f6c3fca45d714981cd9240beea8b02a19e0ddb083dc8115d64d75ab087c87e00792b8b83551ca82b311444067923656b0e70015ca4775da3d5e984ea8af20955f92d9cbd9acca8cd258df4276a118505d440b74e93bd0b97caeb0e24dbb09e7dbdfe0c3b4bdc0983a7d1eee02bee9c5d381bfbd7dfbb6329539698477f3a8bc7f82c01588d679a167e91487f150e5923cbf3030f09c8fb89cf178f5e953618887b7e56afdfd6a6b5e3003cecdbcba76ed86bc48907fada5e0178f9194970323ae9c818215ae2feb1ee56b289d83e8e9d2ab27056ede5651d2a92a93dd3d6c519ac128a44f1414f93e96c55485a73f3cb7e4750d0f2a2acef87e46a7012a30712f7cfe2ac9372af0efcb6475e3a1a8db1961040002915038412b892eee569aae8f38fb07c27aef5bbab7750a244a7c3b0193004246afa1a72368db45cd3649a89b54e880ea12c92beb59e366d7893f725bb8080aebcd35857ff686d03eddc33af248cecc5198bda6f395b55294821f6853232cb5bde67a4166a35224cd9c5b54e6b5a38376b1fdfaeb7563a8ea93148997e2bf490c67916f059e3e1992a986f96d2720a6418cf8c57d6e72eb90d7ca59a3a20fd414e404900aa4a45f381ff7828e15558b4862055bf795c9134836878999200e71e9ba9f83a2e28955c7b37244f3abc8f9d15a5e6c3d9b2f76620b3b2bcb13c0c44c63b9bddd51e339aedfc3a4d995df0eca66c6891ca9099923577e7cd84cb58cf0d6d6eda2baeb00775c4e717e31dbc881615d5f1a0898017954e882a444017e947b1fc05fdcf4495c5dbe3b7b4ce4c1535070fbc64d135df094fe4f6cdd452e7a5f844145af9b746dc5eecede9a834de1ff65525ea3017478ee08dc1bcff852a9d2ad94f46840bdcf1b6226fb0cdb620787692e52aae3b9b703f30b3ce6ca6dcaeb8b3a5884c30c570b29741c70ad99f5d7f463c7e5e1b4bbaafae33e789c0ae1114674732d50c0a799bfa6388365c392d47c3e0d2992a61d21e4ca034ed3d386fe959a94601a4007f1f2060b59359747635b076db7697ba5ad45af0423dbb9966113fa5eb59118cac394c2e2b17ebec1b7ce18ede120b1f56956b12a95de708e780ba7a1ac3a9e31267a2c195acfcb3b20c2f5d20de288846045211da53649a6d8b23008449b763fe6a58243cde95093a9755e5725307af09c997520f159f4ec7d1e687a0cf5148721062ecc6b080f65a550730da9257f1515a10830e29b85de3138a77ee8d2f0cb129c971417d7bbcd982d684b697364084c5764bafb4e2211a82e8c962eefb1f000ac8f5f2567b580931676943cea9b95977d842c247a98672b5c73594eb51f927ee5ec2b0c45eda29fb83a092880e542c60113ca653923aa0c16e2e1604e5f437876cb7fa7d1498584f8800ff80804d41c7b89e9cba341fed8d260a6abd0fc242ba6b3d624c91c468e269069d0a121f0951c3765f18693a2c547d9bc924058d0ecece5c7802126d293d3033d6bbf83d4b8b0144d27cbb985dba465d75b62a93bf7a438cce59f", @ANYRES64=r0]) 7.555410244s ago: executing program 0 (id=34): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) 7.511733552s ago: executing program 2 (id=35): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) write(r1, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165", 0x61) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x10000) sendfile(r1, r2, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 6.678335452s ago: executing program 3 (id=36): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="30000000240001040100000000000000000000000100000000000000ffffffff000000000a0001007465716c30000000", 0x30) r2 = socket$inet(0x2, 0x2, 0x0) ioctl(r2, 0x8914, &(0x7f0000000100)="7465716c3000000000000000000000000100"/40) ioctl(r2, 0x8914, &(0x7f0000000140)='teql0\x00'/40) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x120) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() syz_usb_connect(0x5, 0xdf, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x250, 0x6, 0x4, 0x0, 0xff, 0x5}, 0x19, &(0x7f0000000480)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "edc0078e0eb2199a57374be4a78b92fc"}]}, 0x1, [{0x44, &(0x7f0000000500)=@string={0x44, 0x3, "afbf192b0495313d78f7465681195e039461b4b4bfca5e55e8cc815cd275abd115389e3d5582265dc36b4065d1da0bd0f10d89bcff6ed0fab8a6776679d7c5f0a1bf"}}]}) socket$inet_mptcp(0x2, 0x1, 0x106) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14000000000101f70000000000000000"], 0x14}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000340)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @void}}}, {@grpquota}]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe8, 0x3, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x100}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xbf}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x81}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xff}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7f}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffb}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffe3f}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFACCT_FILTER={0x4}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x94}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x92000000}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 6.648790209s ago: executing program 1 (id=37): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="300000002400010401000000000000000000000001000000", 0x18) r2 = socket$inet(0x2, 0x2, 0x0) ioctl(r2, 0x8914, &(0x7f0000000100)="7465716c3000000000000000000000000100"/40) ioctl(r2, 0x8914, &(0x7f0000000140)='teql0\x00'/40) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x120) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() syz_usb_connect(0x5, 0xdf, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)={0x0, 0x0, 0x19, &(0x7f0000000480)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "edc0078e0eb2199a57374be4a78b92fc"}]}, 0x1, [{0x44, &(0x7f0000000500)=@string={0x44, 0x3, "afbf192b0495313d78f7465681195e039461b4b4bfca5e55e8cc815cd275abd115389e3d5582265dc36b4065d1da0bd0f10d89bcff6ed0fab8a6776679d7c5f0a1bf"}}]}) socket$inet_mptcp(0x2, 0x1, 0x106) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14000000000101f70000000000000000"], 0x14}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000340)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @void}}}, {@grpquota}]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 4.929903064s ago: executing program 2 (id=38): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x400) socket(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) write$tun(r1, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r2, 0x0, 0x2) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(0x0, r7) fchdir(r6) lstat(&(0x7f00000001c0)='./file0\x00', 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 3.18272148s ago: executing program 0 (id=39): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r5, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 3.131210288s ago: executing program 4 (id=40): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, 0x0, 0x0) connect$llc(r3, &(0x7f0000000400)={0x1a, 0x0, 0x1, 0x0, 0x0, 0x0, @broadcast}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 3.071804149s ago: executing program 3 (id=41): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x68}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.12649s ago: executing program 4 (id=42): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000440)={{r3, &(0x7f00000000c0)='/dev/sg#\x00', 0x201, &(0x7f0000000100)={@align, {0x1000, 0x3, 0x9, 0x2}}, 0xfffffff8, 0x0, &(0x7f00000001c0)=0x81}, {[0xd, 0x80000000, 0xa, 0x6]}, 0x1c7, 0x98, &(0x7f0000000380)=""/152}) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000200)={0xd01, 0xac}) connect$can_bcm(r4, &(0x7f00000004c0), 0x10) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @loopback}, 0x1c) accept(r1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000600), &(0x7f0000000700)=ANY=[@ANYBLOB="d00000000802110000000802110000010802110000000000070001"], 0x1b) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.271923004s ago: executing program 3 (id=43): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_open_dev$vcsu(0x0, 0x4, 0x8000) dup2(r0, r1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x10, 0x63db, 0x1007fff) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000000000)=@base={0xa, 0x8, 0x4932, 0x7f, 0x0, 0x1, 0x18, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18000000}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000200)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86f", 0x22, 0xfffffffffffffffd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000280)=ANY=[], 0x8) r3 = timerfd_create(0x0, 0x80800) readv(r3, &(0x7f0000000000)=[{&(0x7f00000020c0)=""/4106, 0x8}], 0x8) 1.254866303s ago: executing program 0 (id=44): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) setns(0xc9, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="30000000240001040100000000000000000000000100000000000000ffffffff000000000a0001007465716c30000000", 0x30) socket$inet(0x2, 0x2, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x120) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) r2 = gettid() socket$inet_mptcp(0x2, 0x1, 0x106) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) tkill(r2, 0xb) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14000000000101f70000000000000000"], 0x14}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000340)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @void}}}, {@grpquota}]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x4) 1.18802474s ago: executing program 1 (id=45): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, 0x0, 0x0) connect$llc(r3, &(0x7f0000000400)={0x1a, 0x0, 0x1, 0x0, 0x0, 0x0, @broadcast}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 1.080692208s ago: executing program 2 (id=46): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0xd, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x4040000) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0xffffffff, @local, 0x9}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe8800bd347ebe37c4f0fe0000000001ac14142500000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000000a0010000100000000000000"], 0xc4}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x14c}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f02000007683815b12e890300000a000000059afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000010007bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0000000", 0xb8) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'dummy0\x00', 0x0}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x113982, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r7}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r7}, 0x38) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 0s ago: executing program 1 (id=47): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x400) socket(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r3}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) write$tun(r1, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r2, 0x0, 0x2) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) fchdir(r5) lstat(&(0x7f00000001c0)='./file0\x00', 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.229' (ED25519) to the list of known hosts. [ 58.291836][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 58.291853][ T31] audit: type=1400 audit(1789634193.052:129): avc: denied { mounton } for pid=5585 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 58.293116][ T31] audit: type=1400 audit(1789634193.052:130): avc: denied { mount } for pid=5585 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.294640][ T5585] cgroup: Unknown subsys name 'net' [ 58.295645][ T31] audit: type=1400 audit(1789634193.052:131): avc: denied { unmount } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.460336][ T5585] cgroup: Unknown subsys name 'cpuset' [ 58.462272][ T5585] cgroup: Unknown subsys name 'rlimit' [ 58.567095][ T31] audit: type=1400 audit(1789634193.322:132): avc: denied { setattr } for pid=5585 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.567476][ T31] audit: type=1400 audit(1789634193.322:133): avc: denied { create } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.567664][ T31] audit: type=1400 audit(1789634193.322:134): avc: denied { write } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.567886][ T31] audit: type=1400 audit(1789634193.322:135): avc: denied { read } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.604750][ T31] audit: type=1400 audit(1789634193.332:136): avc: denied { mounton } for pid=5585 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 58.604793][ T31] audit: type=1400 audit(1789634193.332:137): avc: denied { mount } for pid=5585 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 58.711708][ T5587] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 58.712103][ T31] audit: type=1400 audit(1789634193.472:138): avc: denied { relabelto } for pid=5587 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 59.663474][ T5585] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.284282][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.284958][ T5612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.285822][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.286208][ T5612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.286331][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.286945][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.287608][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.287899][ T5612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.288913][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.289051][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.289298][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.290665][ T5612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.291536][ T5615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.292916][ T5615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.293359][ T5615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.293721][ T5615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.294122][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.294752][ T5612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.295121][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.295575][ T5615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.298529][ T5611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.311038][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 63.311051][ T31] audit: type=1400 audit(1789634198.072:147): avc: denied { read } for pid=5600 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.311085][ T31] audit: type=1400 audit(1789634198.072:148): avc: denied { open } for pid=5600 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.321380][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.321812][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.322799][ T31] audit: type=1400 audit(1789634198.082:149): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 63.337802][ T31] audit: type=1400 audit(1789634198.092:150): avc: denied { module_request } for pid=5600 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 63.392626][ T5612] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.392861][ T31] audit: type=1400 audit(1789634198.142:151): avc: denied { sys_module } for pid=5600 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.400851][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.625283][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.625350][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.625425][ T5597] bridge_slave_0: entered allmulticast mode [ 64.626574][ T5597] bridge_slave_0: entered promiscuous mode [ 64.630220][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.630285][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.630601][ T5597] bridge_slave_1: entered allmulticast mode [ 64.631736][ T5597] bridge_slave_1: entered promiscuous mode [ 64.652412][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.654520][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.672888][ T5597] team0: Port device team_slave_0 added [ 64.722993][ T5597] team0: Port device team_slave_1 added [ 64.781521][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.781606][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.781748][ T5596] bridge_slave_0: entered allmulticast mode [ 64.782468][ T5596] bridge_slave_0: entered promiscuous mode [ 64.784535][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.784636][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.784713][ T5596] bridge_slave_1: entered allmulticast mode [ 64.785777][ T5596] bridge_slave_1: entered promiscuous mode [ 64.839119][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.839129][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.839141][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.873244][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.873258][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.873276][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.905240][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.905308][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.905545][ T5600] bridge_slave_0: entered allmulticast mode [ 64.907317][ T5600] bridge_slave_0: entered promiscuous mode [ 64.909112][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.909192][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.909273][ T5598] bridge_slave_0: entered allmulticast mode [ 64.910353][ T5598] bridge_slave_0: entered promiscuous mode [ 64.913761][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.913823][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.913915][ T5598] bridge_slave_1: entered allmulticast mode [ 64.915038][ T5598] bridge_slave_1: entered promiscuous mode [ 64.979179][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.979314][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.979387][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.979466][ T5600] bridge_slave_1: entered allmulticast mode [ 64.980596][ T5600] bridge_slave_1: entered promiscuous mode [ 64.993180][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.995420][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.015133][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.039218][ T5597] hsr_slave_0: entered promiscuous mode [ 65.039907][ T5597] hsr_slave_1: entered promiscuous mode [ 65.061686][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.073587][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.073680][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.073921][ T5599] bridge_slave_0: entered allmulticast mode [ 65.075246][ T5599] bridge_slave_0: entered promiscuous mode [ 65.100382][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.118457][ T5598] team0: Port device team_slave_0 added [ 65.129227][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.129309][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.129389][ T5599] bridge_slave_1: entered allmulticast mode [ 65.130958][ T5599] bridge_slave_1: entered promiscuous mode [ 65.143538][ T5596] team0: Port device team_slave_0 added [ 65.145464][ T5596] team0: Port device team_slave_1 added [ 65.156953][ T5598] team0: Port device team_slave_1 added [ 65.183596][ T5600] team0: Port device team_slave_0 added [ 65.199332][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.206425][ T5600] team0: Port device team_slave_1 added [ 65.230084][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.230608][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.230616][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.230628][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.237461][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.237472][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.237488][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.288396][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.288409][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.288427][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.294902][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.294914][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.294931][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.302597][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.302609][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.302626][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.304934][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.304945][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.304962][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.336099][ T5607] Bluetooth: hci1: command tx timeout [ 65.336102][ T5612] Bluetooth: hci0: command tx timeout [ 65.336282][ T52] Bluetooth: hci4: command tx timeout [ 65.371796][ T5599] team0: Port device team_slave_0 added [ 65.408332][ T52] Bluetooth: hci3: command tx timeout [ 65.501119][ T52] Bluetooth: hci2: command tx timeout [ 65.564588][ T5599] team0: Port device team_slave_1 added [ 65.607121][ T5596] hsr_slave_0: entered promiscuous mode [ 65.607558][ T5596] hsr_slave_1: entered promiscuous mode [ 65.607850][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 65.607902][ T5596] Cannot create hsr debugfs directory [ 65.637354][ T5598] hsr_slave_0: entered promiscuous mode [ 65.637763][ T5598] hsr_slave_1: entered promiscuous mode [ 65.648315][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 65.648332][ T5598] Cannot create hsr debugfs directory [ 65.653247][ T5600] hsr_slave_0: entered promiscuous mode [ 65.654083][ T5600] hsr_slave_1: entered promiscuous mode [ 65.654555][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 65.654568][ T5600] Cannot create hsr debugfs directory [ 65.668328][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.668340][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.668359][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.670033][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.670043][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.670061][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.810054][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.810110][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.852994][ T5599] hsr_slave_0: entered promiscuous mode [ 65.853425][ T5599] hsr_slave_1: entered promiscuous mode [ 65.853708][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 65.853723][ T5599] Cannot create hsr debugfs directory [ 66.011590][ T5597] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.015069][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.038443][ T5597] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.040377][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.041256][ T5597] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.045156][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.087560][ T5597] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.093381][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.163431][ T5600] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.166775][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.167460][ T5600] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.184962][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.186287][ T5600] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.194077][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.203647][ T5600] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.214444][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.276032][ T5596] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.288463][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.294594][ T5596] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.297472][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.303381][ T5596] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.309525][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.312393][ T5596] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.316127][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.411965][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.425607][ T5598] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.427515][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.450713][ T5598] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.453572][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.477732][ T5598] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.487617][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.499107][ T5598] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.501702][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.521089][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.563934][ T5599] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.566926][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.567437][ T5599] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.591769][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.592937][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.593140][ T5599] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.595474][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.595985][ T5599] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.597721][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.636697][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.652193][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.654217][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.654324][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.690186][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.690231][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.691228][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.691268][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.735790][ T987] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.735869][ T987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.769872][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.772773][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.794734][ T987] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.794777][ T987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.836514][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.836586][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.869979][ T31] audit: type=1400 audit(1789634201.632:152): avc: denied { sys_module } for pid=5597 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 66.901457][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.952468][ T4225] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.952550][ T4225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.967481][ T4225] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.967552][ T4225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.084691][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.162141][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.193840][ T967] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.193923][ T967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.223625][ T987] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.223710][ T987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.409020][ T5607] Bluetooth: hci0: command tx timeout [ 67.409050][ T5607] Bluetooth: hci1: command tx timeout [ 67.409132][ T52] Bluetooth: hci4: command tx timeout [ 67.488862][ T5612] Bluetooth: hci3: command tx timeout [ 67.570131][ T5612] Bluetooth: hci2: command tx timeout [ 67.662053][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.822871][ T5597] veth0_vlan: entered promiscuous mode [ 67.838852][ T5597] veth1_vlan: entered promiscuous mode [ 67.906142][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.924034][ T5597] veth0_macvtap: entered promiscuous mode [ 67.942570][ T5597] veth1_macvtap: entered promiscuous mode [ 67.970718][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.000918][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.026726][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.060082][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.065142][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.089060][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.090175][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.090210][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.090240][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.144527][ T5598] veth0_vlan: entered promiscuous mode [ 68.192397][ T5598] veth1_vlan: entered promiscuous mode [ 68.275783][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.275802][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.297184][ T5599] veth0_vlan: entered promiscuous mode [ 68.323568][ T5600] veth0_vlan: entered promiscuous mode [ 68.334747][ T5598] veth0_macvtap: entered promiscuous mode [ 68.357839][ T5599] veth1_vlan: entered promiscuous mode [ 68.377757][ T5600] veth1_vlan: entered promiscuous mode [ 68.382277][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.382292][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.387463][ T5598] veth1_macvtap: entered promiscuous mode [ 68.405431][ T31] audit: type=1400 audit(1789634203.162:153): avc: denied { mounton } for pid=5597 comm="syz-executor" path="/root/syzkaller.7RM0o7/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.413221][ T31] audit: type=1400 audit(1789634203.172:154): avc: denied { mount } for pid=5597 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.416152][ T31] audit: type=1400 audit(1789634203.172:155): avc: denied { mounton } for pid=5597 comm="syz-executor" path="/root/syzkaller.7RM0o7/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.422918][ T31] audit: type=1400 audit(1789634203.182:156): avc: denied { mount } for pid=5597 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.437790][ T31] audit: type=1400 audit(1789634203.192:157): avc: denied { mounton } for pid=5597 comm="syz-executor" path="/root/syzkaller.7RM0o7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.439984][ T31] audit: type=1400 audit(1789634203.202:158): avc: denied { mounton } for pid=5597 comm="syz-executor" path="/root/syzkaller.7RM0o7/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 68.447149][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.466270][ T31] audit: type=1400 audit(1789634203.222:159): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.472472][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.484129][ T31] audit: type=1400 audit(1789634203.242:160): avc: denied { mounton } for pid=5597 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 68.492273][ T31] audit: type=1400 audit(1789634203.252:161): avc: denied { mount } for pid=5597 comm="syz-executor" name="/" dev="gadgetfs" ino=7148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 68.502348][ T31] audit: type=1400 audit(1789634203.262:162): avc: denied { mount } for pid=5597 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 68.548138][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.548184][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.559703][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.566315][ T5600] veth0_macvtap: entered promiscuous mode [ 68.591552][ T5599] veth0_macvtap: entered promiscuous mode [ 68.595710][ T5600] veth1_macvtap: entered promiscuous mode [ 68.612509][ T5599] veth1_macvtap: entered promiscuous mode [ 68.623347][ T5597] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.641935][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.756075][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.760993][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.763818][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.763832][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.775711][ T5596] veth0_vlan: entered promiscuous mode [ 68.785145][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.793024][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.833343][ T5596] veth1_vlan: entered promiscuous mode [ 68.897464][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.897505][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.938408][ T987] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.938454][ T987] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.938493][ T987] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.938524][ T987] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.938555][ T987] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.938585][ T987] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.938615][ T987] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.938645][ T987] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.107167][ T5596] veth0_macvtap: entered promiscuous mode [ 69.123950][ T5596] veth1_macvtap: entered promiscuous mode [ 69.126165][ T4225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.126180][ T4225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.275103][ T5800] Config c/1 of g1 needs at least one function. [ 69.275909][ T5800] udc dummy_udc.0: failed to start g1: -22 [ 69.275965][ T5800] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 69.281217][ T5800] UDC core: g1: couldn't find an available UDC or it's busy [ 69.489348][ T5612] Bluetooth: hci4: command tx timeout [ 69.489654][ T5612] Bluetooth: hci1: command tx timeout [ 69.490357][ T5612] Bluetooth: hci0: command tx timeout [ 69.568579][ T52] Bluetooth: hci3: command tx timeout [ 69.607543][ T4225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.607561][ T4225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.625049][ T987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.625068][ T987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.648238][ T52] Bluetooth: hci2: command tx timeout [ 69.649556][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.681462][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.710813][ T967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.710831][ T967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.760415][ T4225] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.760709][ T4225] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.875237][ T4225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.875256][ T4225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.898444][ T967] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.899997][ T967] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.617146][ T5806] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 70.618545][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.635403][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.635418][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.867525][ T5810] evm: overlay not supported [ 71.032091][ T9] usb 2-1: device descriptor read/64, error -71 [ 71.419839][ T30] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.568327][ T5607] Bluetooth: hci4: command tx timeout [ 71.568442][ T5612] Bluetooth: hci1: command tx timeout [ 71.568889][ T52] Bluetooth: hci0: command tx timeout [ 71.618467][ T30] usb 1-1: Using ep0 maxpacket: 16 [ 71.646290][ T30] usb 1-1: New USB device found, idVendor=16d8, idProduct=7213, bcdDevice=b8.83 [ 71.648652][ T52] Bluetooth: hci3: command tx timeout [ 71.729436][ T52] Bluetooth: hci2: command tx timeout [ 71.752610][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 71.810023][ T30] usb 1-1: config 4 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 71.811796][ T30] usb 1-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 71.918268][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.918293][ T30] usb 1-1: Product: syz [ 71.918667][ T30] usb 1-1: Manufacturer: syz [ 71.918729][ T30] usb 1-1: SerialNumber: syz [ 72.000832][ T9] usb 2-1: device descriptor read/64, error -71 [ 72.108214][ T9] usb usb2-port1: attempt power cycle [ 72.785860][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 72.880162][ T9] usb 2-1: device descriptor read/8, error -71 [ 73.066083][ T5824] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 73.066182][ T5824] block device autoloading is deprecated and will be removed. [ 73.177241][ T30] usb 1-1: USB disconnect, device number 2 [ 73.193125][ T192] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.388582][ T192] usb 5-1: Using ep0 maxpacket: 8 [ 73.391012][ T192] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 73.399664][ T192] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 73.399694][ T192] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 73.399811][ T192] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 73.399838][ T192] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 73.399863][ T192] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 73.399982][ T192] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.701249][ T192] usbtmc 5-1:16.0: bulk endpoints not found [ 74.843304][ T31] kauditd_printk_skb: 59 callbacks suppressed [ 74.843320][ T31] audit: type=1400 audit(1789634209.602:222): avc: denied { create } for pid=5842 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 75.023589][ T31] audit: type=1400 audit(1789634209.772:223): avc: denied { create } for pid=5831 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.053172][ T31] audit: type=1400 audit(1789634209.802:224): avc: denied { bind } for pid=5842 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 75.069385][ T31] audit: type=1400 audit(1789634209.832:225): avc: denied { setopt } for pid=5842 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 75.082745][ T31] audit: type=1400 audit(1789634209.842:226): avc: denied { accept } for pid=5842 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 75.092360][ T31] audit: type=1400 audit(1789634209.852:227): avc: denied { read } for pid=5842 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 75.099431][ T31] audit: type=1400 audit(1789634209.862:228): avc: denied { create } for pid=5844 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.110794][ T31] audit: type=1400 audit(1789634209.872:229): avc: denied { write } for pid=5844 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.113491][ T31] audit: type=1400 audit(1789634209.872:230): avc: denied { nlmsg_write } for pid=5844 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.145196][ T31] audit: type=1400 audit(1789634209.902:231): avc: denied { create } for pid=5844 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.060298][ T3213] cfg80211: failed to load regulatory.db [ 76.467019][ T5860] tmpfs: Bad value for 'mpol' [ 76.537057][ T5858] ceph: No mds server is up or the cluster is laggy [ 76.594788][ T30] libceph: connect (1)[c::]:6789 error -101 [ 76.630554][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 78.542014][ T10] usb 5-1: USB disconnect, device number 2 [ 78.568501][ T3213] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 78.708109][ T3213] usb 2-1: device descriptor read/64, error -71 [ 78.958090][ T3213] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 79.098024][ T3213] usb 2-1: device descriptor read/64, error -71 [ 79.208894][ T3213] usb usb2-port1: attempt power cycle [ 80.683020][ T3213] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 80.723625][ T3213] usb 2-1: device descriptor read/8, error -71 [ 80.940555][ T5877] overlayfs: missing 'workdir' [ 81.495947][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.019096][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 82.025035][ T10] usb 4-1: New USB device found, idVendor=16d8, idProduct=7213, bcdDevice=b8.83 [ 82.043675][ T10] usb 4-1: config 4 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 82.043733][ T10] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 82.062122][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.062151][ T10] usb 4-1: Product: syz [ 82.062255][ T10] usb 4-1: Manufacturer: syz [ 82.062290][ T10] usb 4-1: SerialNumber: syz [ 82.215086][ T31] kauditd_printk_skb: 15 callbacks suppressed [ 82.215164][ T31] audit: type=1400 audit(1789634216.962:247): avc: denied { create } for pid=5874 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.215362][ T31] audit: type=1400 audit(1789634216.962:248): avc: denied { setopt } for pid=5874 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.215457][ T31] audit: type=1400 audit(1789634216.962:249): avc: denied { bind } for pid=5874 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.215588][ T31] audit: type=1400 audit(1789634216.962:250): avc: denied { name_bind } for pid=5874 comm="syz.0.19" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 82.215731][ T31] audit: type=1400 audit(1789634216.962:251): avc: denied { node_bind } for pid=5874 comm="syz.0.19" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 82.215877][ T31] audit: type=1400 audit(1789634216.972:252): avc: denied { write } for pid=5874 comm="syz.0.19" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.216063][ T31] audit: type=1400 audit(1789634216.972:253): avc: denied { shutdown } for pid=5874 comm="syz.0.19" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.397937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 82.457931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 82.511224][ T3213] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 82.617351][ T5878] tmpfs: Bad value for 'mpol' [ 82.728753][ T3213] usb 2-1: Using ep0 maxpacket: 8 [ 82.747052][ T3213] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 82.753063][ T3213] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.780829][ T31] audit: type=1400 audit(1789634217.542:254): avc: denied { read } for pid=5889 comm="syz.2.22" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.780870][ T31] audit: type=1400 audit(1789634217.542:255): avc: denied { open } for pid=5889 comm="syz.2.22" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.833425][ T9] libceph: connect (1)[c::]:6789 error -101 [ 82.884371][ T31] audit: type=1400 audit(1789634217.642:256): avc: denied { create } for pid=5889 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 83.273199][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 85.770359][ T9] libceph: connect (1)[c::]:6789 error -101 [ 85.770489][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 85.777323][ T3213] usb 2-1: config 0 descriptor?? [ 85.818183][ T5877] ceph: No mds server is up or the cluster is laggy [ 85.830822][ T3213] usb 2-1: can't set config #0, error -71 [ 85.858469][ T3213] usb 2-1: USB disconnect, device number 10 [ 86.456173][ T5882] IPVS: starting estimator thread 0... [ 86.479131][ T10] usb 4-1: USB disconnect, device number 2 [ 86.558063][ T5915] IPVS: using max 41 ests per chain, 98400 per kthread [ 87.316743][ T31] kauditd_printk_skb: 15 callbacks suppressed [ 87.316762][ T31] audit: type=1400 audit(1789634222.072:272): avc: denied { create } for pid=5923 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.343761][ T31] audit: type=1400 audit(1789634222.112:273): avc: denied { setopt } for pid=5923 comm="syz.0.27" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.188531][ T31] audit: type=1400 audit(1789634222.932:274): avc: denied { write } for pid=5927 comm="syz.4.28" name="functions" dev="configfs" ino=8582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 88.697278][ T31] audit: type=1400 audit(1789634223.452:275): avc: denied { write } for pid=5892 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.716113][ T31] audit: type=1400 audit(1789634223.472:276): avc: denied { read append } for pid=5947 comm="syz.4.33" name="btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 88.716943][ T31] audit: type=1400 audit(1789634223.472:277): avc: denied { ioctl open } for pid=5947 comm="syz.4.33" path="/dev/btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 88.731651][ T31] audit: type=1400 audit(1789634223.492:278): avc: denied { ioctl } for pid=5942 comm="syz.3.31" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 88.886129][ T31] audit: type=1400 audit(1789634223.642:279): avc: denied { write } for pid=5960 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.957980][ T5783] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 88.988001][ T5792] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.108115][ T5783] usb 5-1: Using ep0 maxpacket: 16 [ 89.108831][ T5783] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 89.111004][ T5783] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.111045][ T5783] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 89.111070][ T5783] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 89.112101][ T5783] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 89.112122][ T5783] usb 5-1: Manufacturer: syz [ 89.114776][ T5783] usb 5-1: config 0 descriptor?? [ 89.139185][ T5792] usb 3-1: Using ep0 maxpacket: 8 [ 89.139661][ T5792] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 89.140567][ T5792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.143904][ T5792] usb 3-1: config 0 descriptor?? [ 89.150722][ T5792] usb 3-1: probing VID:PID(0424:012C) [ 89.153336][ T5792] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 89.153356][ T5792] usb 3-1: vub300 testing BULK OUT EndPoint(1) 02 [ 89.153371][ T5792] usb 3-1: vub300 testing BULK IN EndPoint(2) 83 [ 89.153386][ T5792] usb 3-1: vub300 testing BULK OUT EndPoint(3) 04 [ 89.153400][ T5792] usb 3-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 89.550723][ T5792] usb 3-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 89.705467][ T5968] overlayfs: missing 'workdir' [ 89.802238][ T5792] usb 3-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 89.959594][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.027878][ T31] audit: type=1400 audit(1789634224.782:280): avc: denied { name_bind } for pid=5953 comm="syz.2.35" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 90.028139][ T3213] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 90.031314][ T31] audit: type=1400 audit(1789634224.792:281): avc: denied { node_bind } for pid=5953 comm="syz.2.35" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 90.188129][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 90.191892][ T10] usb 4-1: New USB device found, idVendor=16d8, idProduct=7213, bcdDevice=b8.83 [ 90.195606][ T10] usb 4-1: config 4 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 90.195769][ T10] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 90.215521][ T3213] usb 2-1: Using ep0 maxpacket: 16 [ 90.246943][ T3213] usb 2-1: New USB device found, idVendor=16d8, idProduct=7213, bcdDevice=b8.83 [ 90.257966][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.257988][ T10] usb 4-1: Product: syz [ 90.266729][ T10] usb 4-1: Manufacturer: syz [ 90.266783][ T10] usb 4-1: SerialNumber: syz [ 90.299208][ T3213] usb 2-1: config 4 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 90.299388][ T3213] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 90.319906][ T3213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.330508][ T3213] usb 2-1: Product: syz [ 90.330533][ T3213] usb 2-1: Manufacturer: syz [ 90.331062][ T3213] usb 2-1: SerialNumber: syz [ 90.743632][ T5975] tmpfs: Bad value for 'mpol' [ 91.321851][ T5968] ceph: No mds server is up or the cluster is laggy [ 91.324579][ T192] libceph: connect (1)[c::]:6789 error -101 [ 91.325907][ T192] libceph: mon0 (1)[c::]:6789 connect error [ 91.421816][ T5978] tmpfs: Bad value for 'mpol' [ 91.487037][ T192] libceph: connect (1)[c::]:6789 error -101 [ 91.545744][ T192] libceph: mon0 (1)[c::]:6789 connect error [ 91.549414][ T5970] ceph: No mds server is up or the cluster is laggy [ 91.668570][ T192] libceph: connect (1)[c::]:6789 error -101 [ 91.723766][ T192] libceph: mon0 (1)[c::]:6789 connect error [ 92.089887][ T192] libceph: connect (1)[c::]:6789 error -101 [ 92.142953][ T192] libceph: mon0 (1)[c::]:6789 connect error [ 93.257069][ T5727] usb 5-1: USB disconnect, device number 3 [ 93.397666][ T10] usb 4-1: USB disconnect, device number 3 [ 93.687384][ T5792] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 93.701329][ T5783] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 93.725374][ T5783] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 93.877071][ T5783] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 94.056751][ T3213] usb 2-1: USB disconnect, device number 11 [ 94.961892][ T5792] usb 3-1: USB disconnect, device number 2 [ 95.012549][ T31] audit: type=1400 audit(1789634229.772:282): avc: denied { read } for pid=5998 comm="syz.4.42" name="sg0" dev="devtmpfs" ino=908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 95.012861][ T31] audit: type=1400 audit(1789634229.772:283): avc: denied { open } for pid=5998 comm="syz.4.42" path="/dev/sg0" dev="devtmpfs" ino=908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 95.049533][ T31] audit: type=1400 audit(1789634229.812:284): avc: denied { ioctl } for pid=5998 comm="syz.4.42" path="/dev/sg0" dev="devtmpfs" ino=908 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 95.806496][ T6015] tmpfs: Bad value for 'mpol' [ 95.919353][ T6000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.244982][ T5792] ------------[ cut here ]------------ [ 96.244992][ T5792] ODEBUG: free active (active state 0) object: ffff88807a0c9270 object type: timer_list hint: vub300_inactivity_timer_expired+0x0/0x550 [ 96.245018][ T5792] WARNING: lib/debugobjects.c:629 at debug_print_object+0x198/0x2b0, CPU#1: kworker/1:8/5792 [ 96.274777][ T5792] Modules linked in: [ 96.279481][ T5792] CPU: 1 UID: 0 PID: 5792 Comm: kworker/1:8 Not tainted syzkaller #0 PREEMPT(full) [ 96.290180][ T5792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 96.300854][ T5792] Workqueue: usb_hub_wq hub_event [ 96.305870][ T5792] RIP: 0010:debug_print_object+0x1a5/0x2b0 [ 96.311892][ T5792] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d b8 5a 1b 0c 41 56 48 8b 14 ed 40 40 62 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 c2 b5 10 0c 01 48 83 c4 18 5b 5d 41 5c 41 [ 96.318895][ T31] audit: type=1400 audit(1789634231.052:285): avc: denied { connect } for pid=6014 comm="syz.2.46" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.351800][ T5792] RSP: 0018:ffffc9000476f3c8 EFLAGS: 00010246 [ 96.357848][ T5792] RAX: dffffc0000000000 RBX: ffffc9000476f4b0 RCX: 0000000000000000 [ 96.362746][ T31] audit: type=1400 audit(1789634231.122:286): avc: denied { write } for pid=6014 comm="syz.2.46" path="socket:[8076]" dev="sockfs" ino=8076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.388816][ C1] ------------[ cut here ]------------ [ 96.394273][ C1] refcount_t: underflow; use-after-free. [ 96.400784][ C1] WARNING: lib/refcount.c:28 at refcount_warn_saturate+0xf4/0x130, CPU#1: kworker/1:8/5792 [ 96.410838][ C1] Modules linked in: [ 96.414731][ C1] CPU: 1 UID: 0 PID: 5792 Comm: kworker/1:8 Not tainted syzkaller #0 PREEMPT(full) [ 96.424133][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 96.434211][ C1] Workqueue: usb_hub_wq hub_event [ 96.439256][ C1] RIP: 0010:refcount_warn_saturate+0xf4/0x130 [ 96.445316][ C1] Code: cc e8 a0 81 e1 fc 48 8d 3d 39 5c 25 0c 67 48 0f b9 3a e8 8f 81 e1 fc 5b 5d e9 18 89 a9 06 e8 83 81 e1 fc 48 8d 3d 2c 5c 25 0c <67> 48 0f b9 3a e8 72 81 e1 fc 5b 5d c3 cc cc cc cc e8 66 81 e1 fc [ 96.464950][ C1] RSP: 0018:ffffc90000a18c18 EFLAGS: 00010246 [ 96.471028][ C1] RAX: 0000000000000000 RBX: ffff88807a0c8910 RCX: 0000000000000102 [ 96.479012][ C1] RDX: ffff888033a08000 RSI: ffffffff852a9dcd RDI: ffffffff914ffa00 [ 96.486965][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000004 [ 96.494936][ C1] R10: 0000000000000003 R11: 0000000000000001 R12: ffff88807a0c8910 [ 96.502901][ C1] R13: 0000000000000102 R14: 1ffff9200014318d R15: ffffffff88c9e820 [ 96.510861][ C1] FS: 0000000000000000(0000) GS:ffff888123c59000(0000) knlGS:0000000000000000 [ 96.519779][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.526336][ C1] CR2: 000020000003f030 CR3: 000000005b04c000 CR4: 00000000003526f0 [ 96.534321][ C1] Call Trace: [ 96.537592][ C1] [ 96.540427][ C1] vub300_inactivity_timer_expired+0x446/0x550 [ 96.546560][ C1] call_timer_fn+0x198/0x5f0 [ 96.551145][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 96.556232][ C1] ? lock_acquire+0x1d1/0x380 [ 96.560921][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 96.567579][ C1] ? mark_held_locks+0x40/0x70 [ 96.572339][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 96.579012][ C1] __run_timers+0x757/0xb00 [ 96.583494][ C1] ? __pfx___run_timers+0x10/0x10 [ 96.588519][ C1] ? clockevents_program_event+0x23e/0x820 [ 96.594327][ C1] ? lock_acquire+0x1d1/0x380 [ 96.598998][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 96.604000][ C1] run_timer_base+0x114/0x190 [ 96.608670][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 96.613848][ C1] run_timer_softirq+0x1a/0x50 [ 96.618597][ C1] handle_softirqs+0x1e6/0x9d0 [ 96.623336][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 96.628614][ C1] ? _raw_spin_unlock+0x28/0x50 [ 96.633440][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 96.639063][ C1] __irq_exit_rcu+0x16a/0x210 [ 96.643715][ C1] irq_exit_rcu+0x9/0x30 [ 96.647947][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 96.653556][ C1] [ 96.656459][ C1] [ 96.659381][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 96.665351][ C1] RIP: 0010:__nbcon_atomic_flush_pending_con+0x1fb/0x440 [ 96.672360][ C1] Code: 00 48 85 db 0f 85 ae 00 00 00 e8 00 a7 21 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 8e a1 21 00 48 85 db 0f 85 be 00 00 00 e0 a6 21 00 0f b6 44 24 48 31 ff 89 c3 88 04 24 83 e3 02 89 de [ 96.691956][ C1] RSP: 0018:ffffc9000476edb8 EFLAGS: 00000287 [ 96.698012][ C1] RAX: 0000000000072ac0 RBX: 0000000000000000 RCX: ffffc9001a3b4000 [ 96.705970][ C1] RDX: 0000000000100000 RSI: ffffffff81ea7923 RDI: ffff888033a08000 [ 96.713929][ C1] RBP: ffffc9000476edf0 R08: 0000000000000007 R09: 0000000000000000 [ 96.721888][ C1] R10: 0000000000000000 R11: 205d313354202020 R12: 0000000000000adc [ 96.729868][ C1] R13: ffffffff8fbd7300 R14: 0000000000000001 R15: ffffffff8fbd73a8 [ 96.737822][ C1] ? __nbcon_atomic_flush_pending_con+0x2b3/0x440 [ 96.744250][ C1] ? __nbcon_atomic_flush_pending_con+0x2b3/0x440 [ 96.750660][ C1] ? __pfx___nbcon_atomic_flush_pending_con+0x10/0x10 [ 96.757402][ C1] ? __pfx_prb_read_valid+0x10/0x10 [ 96.762611][ C1] ? printk_percpu_data_ready+0x9/0x20 [ 96.768075][ C1] ? nbcon_get_cpu_emergency_nesting+0x3b/0x50 [ 96.774210][ C1] __nbcon_atomic_flush_pending+0x39c/0x4a0 [ 96.780097][ C1] ? __pfx___nbcon_atomic_flush_pending+0x10/0x10 [ 96.786486][ C1] ? printk_percpu_data_ready+0x9/0x20 [ 96.791933][ C1] ? nbcon_get_cpu_emergency_nesting+0x3b/0x50 [ 96.798088][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 96.803961][ C1] vprintk_emit+0x3a6/0x6b0 [ 96.808456][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 96.813468][ C1] ? __pfx__printk+0x10/0x10 [ 96.818055][ C1] _printk+0xcf/0x110 [ 96.822027][ C1] ? __pfx__printk+0x10/0x10 [ 96.826588][ C1] ? show_opcodes+0xc2/0xe0 [ 96.831079][ C1] __show_regs.cold+0x93/0x554 [ 96.835819][ C1] ? dump_stack_print_info+0x18c/0x220 [ 96.841282][ C1] ? debug_print_object+0x198/0x2b0 [ 96.846469][ C1] show_regs+0x33/0x50 [ 96.850529][ C1] __warn.cold+0x185/0x318 [ 96.854922][ C1] __report_bug+0x30f/0x440 [ 96.859420][ C1] ? debug_print_object+0x198/0x2b0 [ 96.864607][ C1] ? __pfx___report_bug+0x10/0x10 [ 96.869716][ C1] ? stack_depot_save_flags+0x49a/0x9f0 [ 96.875421][ C1] report_bug_entry+0xe2/0x290 [ 96.880178][ C1] ? debug_print_object+0x1a5/0x2b0 [ 96.885357][ C1] handle_bug+0x1cd/0x2a0 [ 96.889724][ C1] exc_invalid_op+0x17/0x50 [ 96.894217][ C1] asm_exc_invalid_op+0x1a/0x20 [ 96.899057][ C1] RIP: 0010:debug_print_object+0x1a5/0x2b0 [ 96.904839][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d b8 5a 1b 0c 41 56 48 8b 14 ed 40 40 62 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 c2 b5 10 0c 01 48 83 c4 18 5b 5d 41 5c 41 [ 96.924448][ C1] RSP: 0018:ffffc9000476f3c8 EFLAGS: 00010246 [ 96.930502][ C1] RAX: dffffc0000000000 RBX: ffffc9000476f4b0 RCX: 0000000000000000 [ 96.938463][ C1] RDX: ffffffff8c623f80 RSI: ffffffff8c623b20 RDI: ffffffff915002f0 [ 96.946407][ C1] RBP: 0000000000000003 R08: ffff88807a0c9270 R09: ffffffff8bf312c0 [ 96.954363][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c623b20 [ 96.962330][ C1] R13: ffffffff8bf31300 R14: ffffffff88c9e820 R15: ffffc9000476f4c8 [ 96.970287][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 96.976955][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 96.983618][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 96.989413][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 96.994937][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 97.001003][ C1] ? ida_free+0x201/0x2f0 [ 97.005331][ C1] ? wakeup_source_unregister.part.0+0x360/0x540 [ 97.011676][ C1] ? device_release+0xd2/0x270 [ 97.016417][ C1] ? device_release+0xb0/0x270 [ 97.021169][ C1] kfree+0x3d6/0x6d0 [ 97.025044][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 97.031198][ C1] device_release+0xd2/0x270 [ 97.035779][ C1] kobject_put+0x1f7/0x640 [ 97.040181][ C1] put_device+0x1f/0x30 [ 97.044320][ C1] kref_put.constprop.0.isra.0+0x159/0x1d0 [ 97.050115][ C1] vub300_disconnect+0x136/0x170 [ 97.055026][ C1] usb_unbind_interface+0x1dd/0x9e0 [ 97.060217][ C1] ? __pfx_usb_unbind_interface+0x10/0x10 [ 97.065913][ C1] device_remove+0x12a/0x180 [ 97.070500][ C1] device_release_driver_internal+0x44e/0x620 [ 97.076543][ C1] bus_remove_device+0x2bc/0x560 [ 97.081466][ C1] ? __pfx_bus_remove_device+0x10/0x10 [ 97.086895][ C1] ? __pfx_device_remove_attrs+0x10/0x10 [ 97.092517][ C1] device_del+0x376/0x9b0 [ 97.096820][ C1] ? __pfx_device_del+0x10/0x10 [ 97.101653][ C1] ? kobject_put+0xb9/0x640 [ 97.106134][ C1] usb_disable_device+0x367/0x810 [ 97.111155][ C1] usb_disconnect+0x2e2/0x9a0 [ 97.115810][ C1] hub_event+0x1bb1/0x4420 [ 97.120220][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 97.125135][ C1] ? __pfx_hub_event+0x10/0x10 [ 97.129888][ C1] ? lockdep_count_backward_deps+0x1b0/0x200 [ 97.135842][ C1] ? lock_acquire+0x1d1/0x380 [ 97.140505][ C1] ? process_one_work+0xa2c/0x1b10 [ 97.145595][ C1] ? process_one_work+0x906/0x1b10 [ 97.150700][ C1] ? process_one_work+0x906/0x1b10 [ 97.155793][ C1] process_one_work+0xac7/0x1b10 [ 97.160750][ C1] ? __pfx_process_one_work+0x10/0x10 [ 97.166099][ C1] ? lock_acquire+0x1d1/0x380 [ 97.170770][ C1] ? __pfx_hub_event+0x10/0x10 [ 97.175512][ C1] worker_thread+0x5ef/0xe50 [ 97.180111][ C1] ? __pfx_worker_thread+0x10/0x10 [ 97.185203][ C1] ? kthread+0x13a/0x450 [ 97.189432][ C1] ? __pfx_worker_thread+0x10/0x10 [ 97.194517][ C1] kthread+0x373/0x450 [ 97.198573][ C1] ? __pfx_kthread+0x10/0x10 [ 97.203141][ C1] ret_from_fork+0x730/0xd60 [ 97.207721][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 97.212834][ C1] ? __switch_to+0x800/0x10f0 [ 97.217486][ C1] ? __pfx_kthread+0x10/0x10 [ 97.222062][ C1] ret_from_fork_asm+0x1a/0x30 [ 97.226805][ C1] [ 97.229806][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 97.237063][ C1] CPU: 1 UID: 0 PID: 5792 Comm: kworker/1:8 Not tainted syzkaller #0 PREEMPT(full) [ 97.246406][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 97.256442][ C1] Workqueue: usb_hub_wq hub_event [ 97.261447][ C1] Call Trace: [ 97.264710][ C1] [ 97.267528][ C1] dump_stack_lvl+0x100/0x190 [ 97.272184][ C1] vpanic+0x553/0x970 [ 97.276138][ C1] ? __pfx_vpanic+0x10/0x10 [ 97.280620][ C1] panic+0xd1/0xe0 [ 97.284316][ C1] ? __pfx_panic+0x10/0x10 [ 97.288728][ C1] check_panic_on_warn.cold+0x19/0x34 [ 97.294093][ C1] ? refcount_warn_saturate+0xf4/0x130 [ 97.299524][ C1] __warn.cold+0x191/0x318 [ 97.303911][ C1] __report_bug+0x30f/0x440 [ 97.308397][ C1] ? refcount_warn_saturate+0xf4/0x130 [ 97.313855][ C1] ? __pfx___report_bug+0x10/0x10 [ 97.318853][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 97.324630][ C1] ? refcount_warn_saturate+0xed/0x130 [ 97.330059][ C1] ? register_lock_class+0x3f/0x7b0 [ 97.335237][ C1] ? find_held_lock+0x2b/0x80 [ 97.339891][ C1] report_bug_entry+0xe2/0x290 [ 97.344630][ C1] ? refcount_warn_saturate+0xf4/0x130 [ 97.350058][ C1] handle_bug+0x1cd/0x2a0 [ 97.354363][ C1] exc_invalid_op+0x17/0x50 [ 97.358840][ C1] asm_exc_invalid_op+0x1a/0x20 [ 97.363661][ C1] RIP: 0010:refcount_warn_saturate+0xf4/0x130 [ 97.369698][ C1] Code: cc e8 a0 81 e1 fc 48 8d 3d 39 5c 25 0c 67 48 0f b9 3a e8 8f 81 e1 fc 5b 5d e9 18 89 a9 06 e8 83 81 e1 fc 48 8d 3d 2c 5c 25 0c <67> 48 0f b9 3a e8 72 81 e1 fc 5b 5d c3 cc cc cc cc e8 66 81 e1 fc [ 97.389286][ C1] RSP: 0018:ffffc90000a18c18 EFLAGS: 00010246 [ 97.395409][ C1] RAX: 0000000000000000 RBX: ffff88807a0c8910 RCX: 0000000000000102 [ 97.403352][ C1] RDX: ffff888033a08000 RSI: ffffffff852a9dcd RDI: ffffffff914ffa00 [ 97.411294][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000004 [ 97.419234][ C1] R10: 0000000000000003 R11: 0000000000000001 R12: ffff88807a0c8910 [ 97.427175][ C1] R13: 0000000000000102 R14: 1ffff9200014318d R15: ffffffff88c9e820 [ 97.435114][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 97.441766][ C1] ? refcount_warn_saturate+0xed/0x130 [ 97.447209][ C1] ? refcount_warn_saturate+0xed/0x130 [ 97.452636][ C1] vub300_inactivity_timer_expired+0x446/0x550 [ 97.458765][ C1] call_timer_fn+0x198/0x5f0 [ 97.463327][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 97.468408][ C1] ? lock_acquire+0x1d1/0x380 [ 97.473056][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 97.479700][ C1] ? mark_held_locks+0x40/0x70 [ 97.484434][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 97.491078][ C1] __run_timers+0x757/0xb00 [ 97.495556][ C1] ? __pfx___run_timers+0x10/0x10 [ 97.500549][ C1] ? clockevents_program_event+0x23e/0x820 [ 97.506332][ C1] ? lock_acquire+0x1d1/0x380 [ 97.510982][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 97.515980][ C1] run_timer_base+0x114/0x190 [ 97.520631][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 97.525801][ C1] run_timer_softirq+0x1a/0x50 [ 97.530536][ C1] handle_softirqs+0x1e6/0x9d0 [ 97.535273][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 97.540533][ C1] ? _raw_spin_unlock+0x28/0x50 [ 97.545356][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 97.550965][ C1] __irq_exit_rcu+0x16a/0x210 [ 97.555612][ C1] irq_exit_rcu+0x9/0x30 [ 97.559823][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 97.565428][ C1] [ 97.568330][ C1] [ 97.571234][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 97.577181][ C1] RIP: 0010:__nbcon_atomic_flush_pending_con+0x1fb/0x440 [ 97.584173][ C1] Code: 00 48 85 db 0f 85 ae 00 00 00 e8 00 a7 21 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 8e a1 21 00 48 85 db 0f 85 be 00 00 00 e0 a6 21 00 0f b6 44 24 48 31 ff 89 c3 88 04 24 83 e3 02 89 de [ 97.603748][ C1] RSP: 0018:ffffc9000476edb8 EFLAGS: 00000287 [ 97.609787][ C1] RAX: 0000000000072ac0 RBX: 0000000000000000 RCX: ffffc9001a3b4000 [ 97.617728][ C1] RDX: 0000000000100000 RSI: ffffffff81ea7923 RDI: ffff888033a08000 [ 97.625668][ C1] RBP: ffffc9000476edf0 R08: 0000000000000007 R09: 0000000000000000 [ 97.633607][ C1] R10: 0000000000000000 R11: 205d313354202020 R12: 0000000000000adc [ 97.641548][ C1] R13: ffffffff8fbd7300 R14: 0000000000000001 R15: ffffffff8fbd73a8 [ 97.649493][ C1] ? __nbcon_atomic_flush_pending_con+0x2b3/0x440 [ 97.655879][ C1] ? __nbcon_atomic_flush_pending_con+0x2b3/0x440 [ 97.662261][ C1] ? __pfx___nbcon_atomic_flush_pending_con+0x10/0x10 [ 97.669000][ C1] ? __pfx_prb_read_valid+0x10/0x10 [ 97.674177][ C1] ? printk_percpu_data_ready+0x9/0x20 [ 97.679606][ C1] ? nbcon_get_cpu_emergency_nesting+0x3b/0x50 [ 97.685731][ C1] __nbcon_atomic_flush_pending+0x39c/0x4a0 [ 97.691594][ C1] ? __pfx___nbcon_atomic_flush_pending+0x10/0x10 [ 97.697977][ C1] ? printk_percpu_data_ready+0x9/0x20 [ 97.703406][ C1] ? nbcon_get_cpu_emergency_nesting+0x3b/0x50 [ 97.709529][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 97.715393][ C1] vprintk_emit+0x3a6/0x6b0 [ 97.719870][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 97.724868][ C1] ? __pfx__printk+0x10/0x10 [ 97.729428][ C1] _printk+0xcf/0x110 [ 97.733378][ C1] ? __pfx__printk+0x10/0x10 [ 97.737941][ C1] ? show_opcodes+0xc2/0xe0 [ 97.742433][ C1] __show_regs.cold+0x93/0x554 [ 97.747181][ C1] ? dump_stack_print_info+0x18c/0x220 [ 97.752615][ C1] ? debug_print_object+0x198/0x2b0 [ 97.757786][ C1] show_regs+0x33/0x50 [ 97.761824][ C1] __warn.cold+0x185/0x318 [ 97.766210][ C1] __report_bug+0x30f/0x440 [ 97.770685][ C1] ? debug_print_object+0x198/0x2b0 [ 97.775857][ C1] ? __pfx___report_bug+0x10/0x10 [ 97.780856][ C1] ? stack_depot_save_flags+0x49a/0x9f0 [ 97.786388][ C1] report_bug_entry+0xe2/0x290 [ 97.791124][ C1] ? debug_print_object+0x1a5/0x2b0 [ 97.796293][ C1] handle_bug+0x1cd/0x2a0 [ 97.800595][ C1] exc_invalid_op+0x17/0x50 [ 97.805073][ C1] asm_exc_invalid_op+0x1a/0x20 [ 97.809892][ C1] RIP: 0010:debug_print_object+0x1a5/0x2b0 [ 97.815670][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d b8 5a 1b 0c 41 56 48 8b 14 ed 40 40 62 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 c2 b5 10 0c 01 48 83 c4 18 5b 5d 41 5c 41 [ 97.835245][ C1] RSP: 0018:ffffc9000476f3c8 EFLAGS: 00010246 [ 97.841299][ C1] RAX: dffffc0000000000 RBX: ffffc9000476f4b0 RCX: 0000000000000000 [ 97.849331][ C1] RDX: ffffffff8c623f80 RSI: ffffffff8c623b20 RDI: ffffffff915002f0 [ 97.857273][ C1] RBP: 0000000000000003 R08: ffff88807a0c9270 R09: ffffffff8bf312c0 [ 97.865216][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c623b20 [ 97.873157][ C1] R13: ffffffff8bf31300 R14: ffffffff88c9e820 R15: ffffc9000476f4c8 [ 97.881100][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 97.887768][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 97.894424][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 97.900204][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 97.905727][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 97.911763][ C1] ? ida_free+0x201/0x2f0 [ 97.916067][ C1] ? wakeup_source_unregister.part.0+0x360/0x540 [ 97.922377][ C1] ? device_release+0xd2/0x270 [ 97.927133][ C1] ? device_release+0xb0/0x270 [ 97.931880][ C1] kfree+0x3d6/0x6d0 [ 97.935764][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 97.941891][ C1] device_release+0xd2/0x270 [ 97.946461][ C1] kobject_put+0x1f7/0x640 [ 97.950850][ C1] put_device+0x1f/0x30 [ 97.954979][ C1] kref_put.constprop.0.isra.0+0x159/0x1d0 [ 97.960755][ C1] vub300_disconnect+0x136/0x170 [ 97.965663][ C1] usb_unbind_interface+0x1dd/0x9e0 [ 97.970846][ C1] ? __pfx_usb_unbind_interface+0x10/0x10 [ 97.976540][ C1] device_remove+0x12a/0x180 [ 97.981103][ C1] device_release_driver_internal+0x44e/0x620 [ 97.987153][ C1] bus_remove_device+0x2bc/0x560 [ 97.992062][ C1] ? __pfx_bus_remove_device+0x10/0x10 [ 97.997490][ C1] ? __pfx_device_remove_attrs+0x10/0x10 [ 98.003104][ C1] device_del+0x376/0x9b0 [ 98.007406][ C1] ? __pfx_device_del+0x10/0x10 [ 98.012227][ C1] ? kobject_put+0xb9/0x640 [ 98.016704][ C1] usb_disable_device+0x367/0x810 [ 98.021707][ C1] usb_disconnect+0x2e2/0x9a0 [ 98.026372][ C1] hub_event+0x1bb1/0x4420 [ 98.030772][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 98.035681][ C1] ? __pfx_hub_event+0x10/0x10 [ 98.040428][ C1] ? lockdep_count_backward_deps+0x1b0/0x200 [ 98.046392][ C1] ? lock_acquire+0x1d1/0x380 [ 98.051038][ C1] ? process_one_work+0xa2c/0x1b10 [ 98.056127][ C1] ? process_one_work+0x906/0x1b10 [ 98.061213][ C1] ? process_one_work+0x906/0x1b10 [ 98.066301][ C1] process_one_work+0xac7/0x1b10 [ 98.071218][ C1] ? __pfx_process_one_work+0x10/0x10 [ 98.076565][ C1] ? lock_acquire+0x1d1/0x380 [ 98.081215][ C1] ? __pfx_hub_event+0x10/0x10 [ 98.085954][ C1] worker_thread+0x5ef/0xe50 [ 98.090523][ C1] ? __pfx_worker_thread+0x10/0x10 [ 98.095611][ C1] ? kthread+0x13a/0x450 [ 98.099836][ C1] ? __pfx_worker_thread+0x10/0x10 [ 98.104932][ C1] kthread+0x373/0x450 [ 98.108984][ C1] ? __pfx_kthread+0x10/0x10 [ 98.113556][ C1] ret_from_fork+0x730/0xd60 [ 98.118117][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 98.123199][ C1] ? __switch_to+0x800/0x10f0 [ 98.127850][ C1] ? __pfx_kthread+0x10/0x10 [ 98.132416][ C1] ret_from_fork_asm+0x1a/0x30 [ 98.137159][ C1] [ 98.140350][ C1] Kernel Offset: disabled [ 98.144649][ C1] Rebooting in 86400 seconds..