last executing test programs: 18m9.846976495s ago: executing program 32 (id=2186): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) timer_create(0x2, 0x0, &(0x7f0000000440)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x12, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 18m9.771847624s ago: executing program 33 (id=2189): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) timer_create(0x2, 0x0, &(0x7f0000000440)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x12, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 13m6.260176748s ago: executing program 34 (id=3717): r0 = socket(0x0, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f0000ffe000/0x1000)=nil, 0xffffffffdf001fff) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), r1) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a80)={'wpan0\x00', 0x0}) (async, rerun: 64) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) (rerun: 64) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000040)) (async) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, &(0x7f0000000080)="303030303a303073075585bf323f7c7f2553a6cf6223", 0x16) (async) close(r5) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async) rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00') r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r9, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000019080)={&(0x7f0000019100)=ANY=[@ANYRESDEC, @ANYRES16, @ANYBLOB="010027bd7000ffdbdf251700000008000300", @ANYRES8=r7, @ANYBLOB="01000000", @ANYRES32=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x20000804) 10m58.328113982s ago: executing program 35 (id=4306): openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x0, 0x162) mount(0x0, 0x0, &(0x7f0000000200)='configfs\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)="0100000007058102400000", 0xb) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = eventfd2(0x74a6, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="00ffffffffffffff", 0x8}], 0x1) 2m12.928716008s ago: executing program 36 (id=7337): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000e00)={0x1, 0x0, 0x1a, 0x16, 0x155, &(0x7f0000000a00)}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x0, 0x3, 0x70, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x20, 0x8000, 0x5, 0x6}}) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = getpid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000005c0)=0x0) r6 = getpgrp(0xffffffffffffffff) r7 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) syz_clone3(&(0x7f0000000680)={0x20000800, &(0x7f0000000280), &(0x7f0000000380), &(0x7f00000003c0), {0x19}, &(0x7f0000000440)=""/164, 0xa4, &(0x7f0000000500)=""/153, &(0x7f0000000600)=[r4, r5, 0xffffffffffffffff, r6], 0x4, {r7}}, 0x58) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000000c0)=0x21820, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="540000001900010026bd7000fddbdf2580341001fe00fd0400050000080010000000008008000200e000000108000700e000000208000400", @ANYRES32=r9, @ANYBLOB="08000400", @ANYRES32=r9, @ANYBLOB="007109f807a40077ab50018231afa3ce2f000000", @ANYRES32=r2, @ANYBLOB="0800100008000000"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000100)=0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) 1m57.451423748s ago: executing program 37 (id=7385): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000e00)={0x1, 0x0, 0x1a, 0x16, 0x155, &(0x7f0000000a00)}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x0, 0x3, 0x70, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x20, 0x8000, 0x5, 0x6}}) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = getpid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000005c0)=0x0) r6 = getpgrp(0xffffffffffffffff) r7 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) syz_clone3(&(0x7f0000000680)={0x20000800, &(0x7f0000000280), &(0x7f0000000380), &(0x7f00000003c0), {0x19}, &(0x7f0000000440)=""/164, 0xa4, &(0x7f0000000500)=""/153, &(0x7f0000000600)=[r4, r5, 0xffffffffffffffff, r6], 0x4, {r7}}, 0x58) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000000c0)=0x21820, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="540000001900010026bd7000fddbdf2580341001fe00fd0400050000080010000000008008000200e000000108000700e000000208000400", @ANYRES32=r9, @ANYBLOB="08000400", @ANYRES32=r9, @ANYBLOB="007109f807a40077ab50018231afa3ce2f000000", @ANYRES32=r2, @ANYBLOB="0800100008000000"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000100)=0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) 1m18.024974553s ago: executing program 1 (id=7529): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14) r1 = syz_open_dev$vcsa(&(0x7f0000000280), 0x7, 0x4281) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x40) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000003c0)={0x2b, 0xa, 0x0, 0x1e, 0xa, 0x0, 0x1, 0x62}) recvmsg$kcm(r1, &(0x7f0000000b00)={&(0x7f0000000400)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000480)=""/161, 0xa1}, {&(0x7f0000000540)=""/9, 0x9}, {&(0x7f0000000580)=""/58, 0x3a}, {&(0x7f00000005c0)=""/4, 0x4}, {&(0x7f0000000600)=""/156, 0x9c}, {&(0x7f00000006c0)=""/152, 0x98}, {&(0x7f0000000780)=""/157, 0x9d}, {&(0x7f0000000840)=""/16, 0x10}, {&(0x7f0000000880)=""/99, 0x63}, {&(0x7f0000000900)=""/37, 0x25}], 0xa, &(0x7f0000000a00)=""/238, 0xee}, 0x2000) lseek(r1, 0x4, 0x4) ioctl$SNDCTL_SEQ_RESETSAMPLES(r1, 0x40045109, &(0x7f0000000b40)=0x4) ioctl$SNDCTL_TMR_STOP(r1, 0x5403) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000003340)={0x9, &(0x7f0000000b80)=""/4096, &(0x7f0000003240)=[{0x16b, 0x38, 0x7, &(0x7f0000001b80)=""/56}, {0x400, 0xf3, 0x4b2b1a56, &(0x7f0000001bc0)=""/243}, {0x7fffffff, 0xa4, 0x4, &(0x7f0000001cc0)=""/164}, {0x5, 0x4, 0x9, &(0x7f0000001d80)=""/4}, {0x8, 0x1000, 0x8, &(0x7f0000001dc0)=""/4096}, {0xc, 0xf1, 0x2, &(0x7f0000002dc0)=""/241}, {0x3, 0xd2, 0xde05, &(0x7f0000002ec0)=""/210}, {0x1, 0x6d, 0x7, &(0x7f0000002fc0)=""/109}, {0xb59, 0xe2, 0x7ef8, &(0x7f0000003040)=""/226}]}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$l2tp(&(0x7f0000003380), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000003580)={'ip_vti0\x00', &(0x7f0000003500)={'sit0\x00', 0x0, 0x8, 0x7, 0x5, 0x2, {{0x11, 0x4, 0x3, 0x36, 0x44, 0x64, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @rand_addr=0x64010101, {[@generic={0x88, 0xe, "8bca23b09e9217396e1a3d14"}, @noop, @timestamp_prespec={0x44, 0xc, 0x7d, 0x3, 0x2, [{@multicast1, 0x6}]}, @end, @cipso={0x86, 0x14, 0x1, [{0x6, 0x3, "0f"}, {0x0, 0xb, "230b992a3634c775e8"}]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003700)={0x11, 0x0, &(0x7f00000033c0), &(0x7f0000003400)='GPL\x00', 0x9, 0x9b, &(0x7f0000003440)=""/155, 0x0, 0x8, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000035c0)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000003600)=[r1, r1, r1, r1, r1, r1], &(0x7f0000003640)=[{0x0, 0x4, 0x6, 0x2}, {0x1, 0x2, 0xa, 0x2}, {0x5, 0x4, 0x0, 0x3}, {0x3, 0x4, 0x10, 0x1}, {0x1, 0x3, 0xc, 0xa}, {0x1, 0x1, 0x3, 0x2}, {0x3, 0x3, 0x8, 0xb}, {0x3, 0x5, 0x7, 0x8}, {0x2, 0x2, 0x1, 0x8}, {0x2, 0x2, 0x4, 0x4}], 0x10, 0x6}, 0x94) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000037c0), &(0x7f0000003800)=0x40) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003900)={&(0x7f0000003880)={0x5c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2fb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2af}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xb2}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xe6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000039c0), r1) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000003b80)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x40484520}, 0xc, &(0x7f0000003b40)={&(0x7f0000003a00)={0x138, r4, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000003cc0)={r0, &(0x7f0000003bc0)='\x00', 0x42000, &(0x7f0000003c00)={@align=0x4, {0xc, 0x9, 0x2}}, 0x24072537, &(0x7f0000003c40)={@_ha_fsid}, &(0x7f0000003c80)=0x9}) getsockname$packet(r5, &(0x7f0000003d40), &(0x7f0000003d80)=0x14) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000003dc0)={@dev}, &(0x7f0000003e00)=0x14) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000003e40)=0x0, &(0x7f0000003e80)=0x4) sendmsg$nl_route(r5, &(0x7f00000041c0)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)=@setlink={0x3c, 0x13, 0x4, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x40100, 0x46e0}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000840}, 0x8040) 1m17.77809426s ago: executing program 1 (id=7534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x20, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1m17.362980026s ago: executing program 1 (id=7538): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) close(0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xc, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)="4eb7627d651221dfe543962df18dd93e7a2359215df6d5f727cb368e8141290f4edd61ac885a27e5c5184995dc53ab918a6e26713db29a", &(0x7f0000000680)="4352228044cf0dffd6360c5b1650292e9f86c0f8f99b0479163bee4a816e13694fb7329f6f4aa78c21b85e7b8435028f1c51907ff9c9eca0cf3f7710ee7d6d74ed0cd6dc14faa9d4c3e720a0390b7e62753023f8c62254b1847a7c6d04749d86d22bfed856672ee1a66e40528d8a4ae309e4425cf88e4a2de1b61fe231a0ee4cbe3cf3ddbd4c9ca7595baeda80e297e35a3a37bb52258180c165d4aa21b1dd409c553c1c23bb80bf66d0cd25d3fdce1d8cb86423f0247d08ce3ef75718d6a20f62c0", 0x76, r1, 0x4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x4, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x1}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x40}, {}, {}, {}, {}, {0x20, 0xf1}, {}, {}, {0x3}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f00000001c0)={0x1, 0x10, &(0x7f00000024c0)="739c17c2c2cc029eecad068741dfda99"}) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xfff3, 0xb}, {0x5, 0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xf, [0xb, 0x4, 0xc, 0x0, 0x7, 0x5, 0xc, 0x3, 0x7, 0x8, 0xd, 0xc, 0xe, 0xf, 0xb, 0x8], 0x0, [0x7, 0x3, 0x2, 0x2, 0x823, 0x8000, 0x9, 0x7, 0x9, 0xeaf, 0x8, 0x8, 0x0, 0x100, 0x3ff, 0x9], [0xe, 0x7, 0x2, 0x0, 0x3, 0x2, 0x7, 0x7, 0x7, 0x3, 0x8, 0x3, 0x8, 0x8, 0x4bc3, 0xff]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24004070}, 0x24000890) write$char_usb(r4, &(0x7f0000000040)="e2", 0xff0f) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x11) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffd, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3f) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x8, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0xfffffc01, 0x0, r11}, 0x48) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x48e300, 0x0) 1m15.855221761s ago: executing program 1 (id=7543): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='secret\x00', &(0x7f0000000200)='AQB1234567890123456789012345678901234567890=\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='key\x00', &(0x7f0000000400)='AQB1234567890123456789012345678901234567890=\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000500)='name\x00', &(0x7f0000000600)='admin\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='fsid\x00', &(0x7f0000000800)='00000000-0000-0000-0000-000000000000\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000900)='source\x00', &(0x7f0000000a00)='127.0.0.1:6789:/\x00', 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x4000010, 0xffffffffffffffff, 0xec776000) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000f40)=""/4096, 0x1000}], 0x1) 1m15.420698867s ago: executing program 1 (id=7546): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x22f, &(0x7f0000000140)={0x0, 0x1a75, 0x100, 0x0, 0x25c}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) 1m14.786771642s ago: executing program 1 (id=7550): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0xf4, 0x0, 0x0, 0xfffffffd}, 0x28) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) process_vm_readv(r5, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/225, 0xe1}], 0x1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/92, 0x5c}, {&(0x7f0000000780)=""/116, 0x74}], 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000000100)=[{{&(0x7f0000000200)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x4) ioctl$GIO_UNIMAP(r6, 0x4b66, 0x0) 1m7.083722329s ago: executing program 2 (id=7575): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf0c, &(0x7f0000000400)={0x0, 0x595d, 0x8, 0x1, 0x1000051}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3208}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) pause() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0xa) r6 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r6, 0x2007ffb) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x8000003d) fcntl$setsig(r7, 0xa, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 1m5.805331561s ago: executing program 2 (id=7577): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x48c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r6 = openat(r5, &(0x7f0000000400)='test\x00', 0x42, 0x1ff) write(r6, &(0x7f0000000500)='A', 0x1000) setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', 0x0, 0x0, 0x0) 1m4.722710208s ago: executing program 2 (id=7583): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl(r0, 0x3b92, &(0x7f0000000000)="10") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000003640)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)='i', 0x1}], 0x1, 0x0, 0x0, 0x2200c004}], 0x1, 0x8010) recvmsg(r3, 0x0, 0x0) syz_open_dev$media(0x0, 0x10, 0x101000) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfbdf, 0x400, 0x2100, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) r11 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r11, &(0x7f00000071c0)={0x0, 0x0, &(0x7f0000007180)={&(0x7f0000007080)=@upd={0xe0, 0x12, 0x1, 0x70bd2d, 0x25dfdbff, {{'ghash-generic\x00'}, '\x00', '\x00', 0x2400, 0x3c00}}, 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) r12 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, 0x12, 0x301, 0x0, 0x1000000, {0x23, 0x6, 0x0, 0xfb, {0x4e23, 0x0, [0x7fff, 0x2, 0x81, 0xfffffffe], [0x1, 0xfffffffd, 0x10000, 0xaf9e], 0x0, [0x0, 0x7fff]}, 0x7}}, 0x6d}, 0x1, 0x0, 0x0, 0x20044190}, 0x40004) 1m3.742744733s ago: executing program 2 (id=7586): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b03000000000001090222000101008032090400000103000000092111010001221700070581034000"], 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000000)="02c0") 1m1.685041717s ago: executing program 2 (id=7597): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, 0x0) 59.568026961s ago: executing program 38 (id=7550): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0xf4, 0x0, 0x0, 0xfffffffd}, 0x28) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) process_vm_readv(r5, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/225, 0xe1}], 0x1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/92, 0x5c}, {&(0x7f0000000780)=""/116, 0x74}], 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000000100)=[{{&(0x7f0000000200)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x4) ioctl$GIO_UNIMAP(r6, 0x4b66, 0x0) 59.39560876s ago: executing program 4 (id=7604): mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002500)=ANY=[@ANYBLOB], 0x198) r1 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, 0x0) memfd_create(0x0, 0x0) fsopen(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1, 0x0, 0x0, 0xb5b, 0x9, 0xfffffffffffffff7, 0x1ff, 0x3e}, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x9, 0xffffffffffffffff, 0x0, 0x0}) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) r10 = dup(r8) syz_ublk_setup_queues(r10, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdca5, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1ce, 0x0, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 58.895304471s ago: executing program 2 (id=7607): syz_open_dev$dri(0x0, 0xa, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffffa2048000, 0x0, 0x40, 0xc, 0x0, 0x0, 0x0, 0x10, 0x8}}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x2000000) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) socket$inet_sctp(0x2, 0x5, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$MEMWRITEOOB64(r0, 0xc0184d15, &(0x7f00000010c0)={0x4, 0x0, 0x41, &(0x7f0000001040)="12f0dc054390ebbc6c6315129238caf6d50970e2add9e03c868948c5819ac3b9dfefc538a26132341475abc5f3c80247358bafcec07fa2bc78b8ad2536e9f7312f"}) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2000000}}}, 0x88) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x4, 0x0, 0xffffffffffffffff}, {@in6=@empty, 0x0, 0x6c}, @in6=@private0, {0x0, 0x9, 0x0, 0x0, 0x8, 0x0, 0x3, 0x8}, {0x0, 0x0, 0x7b6a, 0x9}, {0x0, 0x1}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x14}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x100}, 0x1, 0x0, 0x0, 0xc1}, 0x4000) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="0203f602310000002cbd7000fbdbdf2502000900080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c000001fc05000500000000000a00000000000000fc0100000000000000000000000000010700000000000000210008000008"], 0x188}, 0x1, 0x7}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x312) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) 58.389853888s ago: executing program 4 (id=7609): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x48c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat(r5, &(0x7f0000000400)='test\x00', 0x42, 0x1ff) setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', 0x0, 0x0, 0x0) 58.054926683s ago: executing program 4 (id=7612): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x400, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x200000, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f00000082c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) close(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 57.639219426s ago: executing program 4 (id=7613): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfb}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x2, 0x77, 0x1, {0x22, 0xeb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 55.957175703s ago: executing program 4 (id=7619): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008004) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a80)={0x53, 0xfffffffffffffffd, 0x6d, 0xb, @scatter={0x5, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f00000003c0)=""/165, 0xa5}, {&(0x7f0000000480)=""/63, 0x3f}, {&(0x7f00000004c0)=""/60, 0x3c}, {&(0x7f0000000540)=""/243, 0xf3}]}, &(0x7f00000006c0)="3d3dc83099784c839f5d5196152eb35d1c641ebeff28bfb543ae6a33e78bef38d0d63d1082f6e01a5b1a47a93f76ef417bbd26a09e41581d4bdb071dced493941e746c5c3b89c6c350052631d5d808d29d5bddcfacdbf2d01577a30cdab17e3aa5d184b9983f1e7b1dc8bb458a", &(0x7f0000000740)=""/85, 0x10000, 0x24, 0x2, &(0x7f00000007c0)}) syz_clone3(0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000840)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x3, [{{0x2, 0x0, @empty}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @empty}}]}, 0x1fffc) r4 = dup(r1) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000340)='ip6gretap0\x00', 0x10) shutdown(r1, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001400)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x404c000}, 0x40) 55.514734047s ago: executing program 4 (id=7621): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000e00)={0x1, 0x0, 0x1a, 0x16, 0x155, &(0x7f0000000a00)}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x0, 0x3, 0x70, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x20, 0x8000, 0x5, 0x6}}) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = getpid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000005c0)=0x0) r6 = getpgrp(0xffffffffffffffff) r7 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) syz_clone3(&(0x7f0000000680)={0x20000800, &(0x7f0000000280), &(0x7f0000000380), &(0x7f00000003c0), {0x19}, &(0x7f0000000440)=""/164, 0xa4, &(0x7f0000000500)=""/153, &(0x7f0000000600)=[r4, r5, 0xffffffffffffffff, r6], 0x4, {r7}}, 0x58) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000000c0)=0x21820, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="540000001900010026bd7000fddbdf2580341001fe00fd0400050000080010000000008008000200e000000108000700e000000208000400", @ANYRES32=r9, @ANYBLOB="08000400", @ANYBLOB="007109f807a40077ab50018231afa3ce2f000000", @ANYRES32=r2, @ANYBLOB="08001000080000"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000100)=0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) 52.219329907s ago: executing program 3 (id=7601): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf0c, &(0x7f0000000400)={0x0, 0x595d, 0x8, 0x1, 0x1000051}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3208}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) pause() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r6 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r6, 0x2007ffb) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x8000003d) fcntl$setsig(r7, 0xa, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 50.360267078s ago: executing program 3 (id=7628): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x194, 0x52, 0x510, 0x100, 0x4, {0xa}, [@typed={0x8, 0xcd, 0x0, 0x0, @pid}, @generic="bbfa6cad9cf18b064394abe64c2752cb35010318adba4179f5d8f4d56bf37eac7c87dbae260b7de6f2b3410798b61029180370920e4f800152324ed6677c221b3f0222f3591ce8474f9ddc170ef50f2af6e4b6796fd14a117bcaad921bffa2b614cfd64977818b2027a0fa4c31d8d0e2a9a9acf27e429687de555bbbb27ec8c094319b812b75c68eff65e8a67445093e982ff553e663c36a671366e536a1f96e77113d3fe2bb472115621674fa87", @generic="3e2b0ee15d993019b5e259c1cd17e980f9aebd4073084bc96454a18fbb51b2854c571987053e52367b437c36475de220221559ffc38e27241191a1beb74ecac9755a70f1e59e4cf83621833844819e997ee9a68540cebc86716847d851b4dbee35281c2520ad3d0a5fdc21c6cca6652ff0af46a4108322d92cb04b22e2d00e1a02dcba55007c8f750b7f19026870652f571bc8df86c5aa7356f9fa6a304f8b44b7c97cf0f0bc1f332522344ee915e3bc180efd123e25a8255619ff2df8df4af4780305807cd634"]}, 0x194}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 50.006363605s ago: executing program 3 (id=7630): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'batadv0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) 49.491977734s ago: executing program 3 (id=7632): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000440)={@local, 0x1}) r1 = syz_io_uring_setup(0x36b7, &(0x7f0000000200)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000001900)={&(0x7f00000014c0)={{@local, 0x4e4f}, {@local, 0x5485}, 0x400, "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"}, 0x418, 0x40}) syz_usb_connect(0x5, 0x78, &(0x7f0000001b80)={{0x12, 0x1, 0x201, 0xdc, 0x86, 0xb1, 0x8, 0x97b, 0x61f6, 0xd49a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x1, 0xa, 0xff, 0xb0, 0x1, "", [{{0x9, 0x4, 0x5b, 0x1, 0x1, 0xe, 0x1, 0x1, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x40, 0x1f}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x202, 0x6, 0x9, 0x3, 0xf, 0x41}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x300, 0x1, 0x6, 0xa}]}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x9, 0x5, 0x7}, [@mdlm={0x15, 0x24, 0x12, 0x1}]}], [{{0x9, 0x5, 0xd, 0x10, 0x10, 0x0, 0x1, 0x6}}]}}]}}]}}, &(0x7f00000025c0)={0xa, &(0x7f0000002240)={0xa, 0x6, 0x201, 0x6, 0x0, 0x4, 0x10, 0x5e}, 0x8, &(0x7f0000002280)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x0, 0x0}, {0xaf, &(0x7f00000023c0)=@string={0xaf, 0x3, "c5c9b2b1d0a696b468672bb1bfef3dabc1b42a39f87cb226cf8aa9efe948a9b252bcf901ff4ca4cc8e6a3158e5c90d842799057476e83b5bf4a7ae30e8599cf3a1ace36b3aaffd99068be2bc3530d381be0b145b725bd0c69fd097a34e18f9446511e0e9bb67545e47556d47a1d5216d9518b6505157f81dc753722112b29ab2e5814ba9c32eea8b9fac3070b4023b5c76a5e7de3f44e1c003482f90e26bb2be0279c4d8e1643f847a0a5558fa"}}, {0xdc, &(0x7f00000024c0)=@string={0xdc, 0x3, "82805ec0b009e49e78a6f67b8c0975ee01ae8b560a190de5a7ac4c79f899fc2530a2db8bd5dfca6760febec0adeaaa142d02cf28ff44a7aeba663e9bafcf997fbaf48d2f3577697dd60633a2246f45ffd93379e4fe9204f184378b1222fcf66235087265d17bd1c9be1ed849739b31716896864726e13f334660451d55a05a52bdb555b03557e8a8c6f5f20f703675eaec58beebe9f4060518c0cf36060da486447e1037fe20f6efaab3666050bd2c24761ad314f83bd106521687ec75e9296e1aade1e82b2123516c5561cc218e41b8bba506b2c7bf4b7810d9"}}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 48.222825879s ago: executing program 3 (id=7634): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x40, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 48.055342682s ago: executing program 3 (id=7636): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000e00)={0x1, 0x0, 0x1a, 0x16, 0x155, &(0x7f0000000a00)}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x0, 0x3, 0x70, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x20, 0x8000, 0x5, 0x6}}) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = getpid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000005c0)=0x0) r6 = getpgrp(0xffffffffffffffff) r7 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) syz_clone3(&(0x7f0000000680)={0x20000800, &(0x7f0000000280), &(0x7f0000000380), &(0x7f00000003c0), {0x19}, &(0x7f0000000440)=""/164, 0xa4, &(0x7f0000000500)=""/153, &(0x7f0000000600)=[r4, r5, 0xffffffffffffffff, r6], 0x4, {r7}}, 0x58) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000000c0)=0x21820, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="540000001900010026bd7000fddbdf2580341001fe00fd0400050000080010000000008008000200e000000108000700e000000208000400", @ANYRES32=r9, @ANYBLOB="08000400", @ANYRES32=r9, @ANYBLOB="007109f807a40077ab50018231afa3ce2f0000", @ANYRES32=r2, @ANYBLOB="08001000080000"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000100)=0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) 43.864112647s ago: executing program 39 (id=7607): syz_open_dev$dri(0x0, 0xa, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffffa2048000, 0x0, 0x40, 0xc, 0x0, 0x0, 0x0, 0x10, 0x8}}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x2000000) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) socket$inet_sctp(0x2, 0x5, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$MEMWRITEOOB64(r0, 0xc0184d15, &(0x7f00000010c0)={0x4, 0x0, 0x41, &(0x7f0000001040)="12f0dc054390ebbc6c6315129238caf6d50970e2add9e03c868948c5819ac3b9dfefc538a26132341475abc5f3c80247358bafcec07fa2bc78b8ad2536e9f7312f"}) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2000000}}}, 0x88) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x4, 0x0, 0xffffffffffffffff}, {@in6=@empty, 0x0, 0x6c}, @in6=@private0, {0x0, 0x9, 0x0, 0x0, 0x8, 0x0, 0x3, 0x8}, {0x0, 0x0, 0x7b6a, 0x9}, {0x0, 0x1}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x14}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x100}, 0x1, 0x0, 0x0, 0xc1}, 0x4000) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="0203f602310000002cbd7000fbdbdf2502000900080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c000001fc05000500000000000a00000000000000fc0100000000000000000000000000010700000000000000210008000008"], 0x188}, 0x1, 0x7}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x312) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) 42.600288981s ago: executing program 8 (id=7644): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', 0x0, 0x0, 0x0) 42.451337151s ago: executing program 8 (id=7645): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) syz_io_uring_setup(0x39f6, &(0x7f0000000100)={0x0, 0xf921, 0x8, 0x0, 0x3c1, 0x0, r1}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000007000000004000000018060000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb7020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x11000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x176b90bd46832ffe}, {0xfff3, 0xe}, {0xd, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000000)=0x40c, 0x11) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100034b7ec740"], 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000016c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_open_dev$loop(&(0x7f00000026c0), 0xf, 0x40) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)=ANY=[@ANYRES8=r4], 0x0) 40.772624871s ago: executing program 8 (id=7650): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)='!w', 0x2}], 0x9}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)="be6297f399e9cbe17ad033f857e3ea56382b0543823c3030dfd9fdc33d86205f1245b5e102aa60e34a1b2589a5841c2610f26b4611d523f80f24929568448fc593df67b89c69f4f6fc99fef0fc05823c4f7b825fb32e061b92f3bacef50286d8896fd2bbe57c41609bfa06665dddf0bdb0aca4cbf06efc24eb046a890d22d4a4c7f089d5f54653603ef573876622475dadf1ffbf774f4f5baa61785e556a2a13a37b183e28878fa180556a31c861bea00a547ea4", 0xb4}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4400c004) r1 = io_uring_setup(0x653, &(0x7f0000000000)={0x0, 0x804, 0x0, 0x4}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0xf, &(0x7f0000000540)={0x1002, 0x0, 0x0, 0x0, 0x28}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000440)={'rti802\x00', [0x100, 0x1f, 0x1, 0x8, 0x7, 0xfd, 0x3, 0x30000000, 0xa, 0x2000000e, 0x2, 0xb51, 0x4, 0x6, 0x10001, 0x2, 0xfff, 0x7, 0x9, 0x401, 0x20000009, 0x3, 0x19, 0x2, 0x48, 0x9, 0x8, 0x423b, 0x2, 0x7, 0xa]}) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100000}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="58deff000206050000000000000000000400e3000500010006000000050005000201000100000000000000000900020073797a31000000000c000780080012400000000611000300686173683a69702c6d61726b00000037"], 0x58}}, 0x0) 40.433282198s ago: executing program 8 (id=7651): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1e, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000300200000000000010000000630119000000000095000000000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000440)={0x24, &(0x7f0000000040)={0x40, 0x23, 0x2, {0x2, 0x24}}, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xb, {[@local=@item_012={0x0, 0x2, 0x8}, @main=@item_4={0x3, 0x0, 0x9, "0400"}, @local=@item_4={0x3, 0x2, 0xbac736aab15b0356, "108b8283"}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8000, 0x9, 0x1, {0x22, 0xa4d}}}}, 0x0) 40.321633344s ago: executing program 40 (id=7621): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000e00)={0x1, 0x0, 0x1a, 0x16, 0x155, &(0x7f0000000a00)}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x0, 0x3, 0x70, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x20, 0x8000, 0x5, 0x6}}) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = getpid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000005c0)=0x0) r6 = getpgrp(0xffffffffffffffff) r7 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) syz_clone3(&(0x7f0000000680)={0x20000800, &(0x7f0000000280), &(0x7f0000000380), &(0x7f00000003c0), {0x19}, &(0x7f0000000440)=""/164, 0xa4, &(0x7f0000000500)=""/153, &(0x7f0000000600)=[r4, r5, 0xffffffffffffffff, r6], 0x4, {r7}}, 0x58) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000000c0)=0x21820, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="540000001900010026bd7000fddbdf2580341001fe00fd0400050000080010000000008008000200e000000108000700e000000208000400", @ANYRES32=r9, @ANYBLOB="08000400", @ANYBLOB="007109f807a40077ab50018231afa3ce2f000000", @ANYRES32=r2, @ANYBLOB="08001000080000"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000100)=0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) 38.362869437s ago: executing program 8 (id=7655): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0xf0c, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3208}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) pause() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0xa) fchdir(r6) r7 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r7, 0x2007ffb) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x8000003d) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 35.203133693s ago: executing program 8 (id=7660): semget$private(0x0, 0x4000000009, 0x77c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x104b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0xfffffffd) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x200010, 0x40, 0x3, 0x41}, 0x50) socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(0x0, 0x175) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) acct(0x0) listen(0xffffffffffffffff, 0x5) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r4 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_setup_queues(r4, 0x0, &(0x7f0000000340)={0x0, 0xfb7e, 0x800, 0x2, 0x321, 0x0, r3}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x278, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60e, 0x1000, 0x1, 0x321, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9b3, 0x200, 0x3, 0x92}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) socket$kcm(0xa, 0x5, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r5) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x14, r6, 0xb1b, 0x70bd2a, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x800) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) 32.878574357s ago: executing program 41 (id=7636): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000e00)={0x1, 0x0, 0x1a, 0x16, 0x155, &(0x7f0000000a00)}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x0, 0x3, 0x70, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x20, 0x8000, 0x5, 0x6}}) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = getpid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000005c0)=0x0) r6 = getpgrp(0xffffffffffffffff) r7 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) syz_clone3(&(0x7f0000000680)={0x20000800, &(0x7f0000000280), &(0x7f0000000380), &(0x7f00000003c0), {0x19}, &(0x7f0000000440)=""/164, 0xa4, &(0x7f0000000500)=""/153, &(0x7f0000000600)=[r4, r5, 0xffffffffffffffff, r6], 0x4, {r7}}, 0x58) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000000c0)=0x21820, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="540000001900010026bd7000fddbdf2580341001fe00fd0400050000080010000000008008000200e000000108000700e000000208000400", @ANYRES32=r9, @ANYBLOB="08000400", @ANYRES32=r9, @ANYBLOB="007109f807a40077ab50018231afa3ce2f0000", @ANYRES32=r2, @ANYBLOB="08001000080000"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000100)=0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) 20.132646197s ago: executing program 42 (id=7660): semget$private(0x0, 0x4000000009, 0x77c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"a2e3ad09ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a41c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78a57a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420800000000000000c1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1212e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b8393dee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x104b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0xfffffffd) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x200010, 0x40, 0x3, 0x41}, 0x50) socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(0x0, 0x175) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) acct(0x0) listen(0xffffffffffffffff, 0x5) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r4 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_setup_queues(r4, 0x0, &(0x7f0000000340)={0x0, 0xfb7e, 0x800, 0x2, 0x321, 0x0, r3}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x278, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60e, 0x1000, 0x1, 0x321, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9b3, 0x200, 0x3, 0x92}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) socket$kcm(0xa, 0x5, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r5) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x14, r6, 0xb1b, 0x70bd2a, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x800) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) 16.398475679s ago: executing program 0 (id=7698): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x255}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x27e}, &(0x7f0000001240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x988a, 0x5420, 0x0, 0x10000003, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5240, 0x800, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbd15, 0x10, 0x1, 0x262}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x3, 0x1a8, 0x0, r1}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r5, '\x00', {0x0, 0x5, 0x0, 0x0}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r9, 0xc0385869, &(0x7f00000003c0)={r7, 0x0, 0x400000, 0x0, 0x7, 0x0, &(0x7f0000000340)=0x36}) socket(0x2c, 0x2, 0x3) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r11, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r11, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, 0x0, 0x0) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) r16 = dup(r15) syz_ublk_setup_queues(r16, r14, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 15.160273449s ago: executing program 0 (id=7702): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xa9, 0x79, 0xb5, 0x20, 0xe41, 0x4159, 0xb8da, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xd1, 0x50, 0x60, "", [{{0x9, 0x4, 0x0, 0x1, 0x0, 0x25, 0x1c, 0xde, 0x2}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf, 0x82, 0xbc, 0x40, 0xaf7, 0x101, 0xccda, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x2, 0x77, 0x1, {0x22, 0xeb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, 0x0) 14.1931369s ago: executing program 0 (id=7704): epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000600)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x4082172, 0xffffffffffffffff, 0x418a6000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000500)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x40090}, 0x20008040) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x4840) close(0x3) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 12.518369055s ago: executing program 0 (id=7708): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x48c0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) 12.359811472s ago: executing program 0 (id=7709): mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002500)=ANY=[@ANYBLOB], 0x198) r1 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, 0x0) memfd_create(0x0, 0x0) fsopen(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1, 0x0, 0x0, 0xb5b, 0x9, 0xfffffffffffffff7, 0x1ff, 0x3e}, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x9, 0xffffffffffffffff, 0x0, 0x0}) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f0000002180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) r10 = dup(r8) syz_ublk_setup_queues(r10, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 11.017886802s ago: executing program 0 (id=7713): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000340)={0x7d, 0x6, 0xbb, 0xfffffff7, 0x1, "4d0009000000000000f7fa2d90b92000000008", 0xfffffffd, 0xd}) ppoll(&(0x7f0000000100)=[{r0, 0x280}], 0x1, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000000)=ANY=[@ANYBLOB="4c3f700001"]) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0x40045010, &(0x7f0000000040)=0x5f) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) write$dsp(r2, &(0x7f0000000200)="4b0f186b51515fac57cbd8304f6c21ff711a5ecd2dace57e96976bd34b19628956c548b0d46698da5bf7a5da412b2c952421ddee06c6d1c91c4b4308ddce19c8de0a32873db9a32aed21c2c7f165159baca8e0f63b54f05ed1edef64803a5c6198b48460f54eac25291b6f96e74b816b8603dfcfe74b1ebcddb53dd119b15273a6119f1b805278b229c01336a6954c609cb9ebe9149edbba563bdb35ea03838fc9eada4883a00ec4fa37964a5515a8831716739511277cc40b69e74e4538cb91a36fc4cda8593c8f9120385710daef6754892e4f3f393c4792653db75b43a856fa381bc9ff6d645342eb269805beaf1398f36ecc081be6", 0xf7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vxcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1ff003, 0x4, 0x10001, 0x1, 0xffffffffffffffff, 0x8000, '\x00', r3, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write$sysctl(r4, &(0x7f0000000100)='0\x00', 0x2) r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0xffffffff, 0x4, 0x2}}) mount$bpf(0x0, &(0x7f00000003c0)='.\x00', &(0x7f0000000080), 0x320c8d4, &(0x7f0000000480)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303030342c636f6e289b56b0d82eb4722574657874", @ANYRESHEX=r1, @ANYRES64=r1]) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_USERDATA={0x8, 0x7, 0x1, 0x0, "ae5d4a31"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x400001c}, 0x4000000) ioctl$VIDIOC_S_JPEGCOMP(r6, 0x408c563e, &(0x7f00000000c0)={0x6, 0x5, 0x27, "a47dc6764cc32cab001939704e16e257551cac8e98cafda82331ec61d8f30223ee341674db544a06bbd87460e4a3f961cc46d43f88afd0d349055d86", 0x33, "0bdad97eb388d7b66dd904c6792b607d55ab5a347c71f4954a9b260be9f9c95f4b57bcb7378cd094b4bdf45ec18b2ab785c915bb183b99708792dc73", 0x28}) ioctl$NBD_SET_FLAGS(r6, 0xab0a, 0x3) 7.520865627s ago: executing program 6 (id=7722): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000140)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) epoll_create1(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x4a8, 0x1e0, 0x0, 0xffffffff, 0x288, 0x0, 0x410, 0x410, 0xffffffff, 0x410, 0x410, 0x5, 0x0, {[{{@uncond, 0x0, 0x198, 0x1e0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xf, 'kmp\x00', "4801d3e4c6b2bfd89286ae9b13d39b99407a9b6abe75a728baa18da576811985de44110b8602005e1298ea55f1c5087ab16f67b18ca90ac6040b3d6a068f727f7d23ab794d9ba59a5da2ff7f000000000000ae63e26b6fe772493180cfda2c9d49412e9469d85abdb467ba000000000000000000000000deffffff00", 0x79, 0x2, {0x1}}}, @common=@unspec=@rateest={{0x68}, {'wg0\x00', 'ip6tnl0\x00', 0x12, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @icmp_id=0x68, @icmp_id=0x68}}}, {{@ip={@empty, @private=0xa010101, 0xffffffff, 0xff, 'wlan1\x00', 'wlan1\x00', {0xff}, {}, 0x6, 0x2, 0x4}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @loopback, @icmp_id=0x64, @port=0x4e20}}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {0xff}, 0x0, 0x3}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @icmp_id=0x67}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x508) fsmount(0xffffffffffffffff, 0x0, 0x5) truncate(&(0x7f00000000c0)='./file0\x00', 0xd) socket(0x1e, 0x5, 0xfff) 5.416670035s ago: executing program 5 (id=7727): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x255}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x27e}, &(0x7f0000001240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x988a, 0x5420, 0x0, 0x10000003, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5240, 0x800, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbd15, 0x10, 0x1, 0x262}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x3, 0x1a8, 0x0, r1}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r5, '\x00', {0x0, 0x5, 0x0, 0x0}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r9, 0xc0385869, &(0x7f00000003c0)={r7, 0x0, 0x400000, 0x0, 0x7, 0x0, &(0x7f0000000340)=0x36}) socket(0x2c, 0x2, 0x3) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r11, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r11, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) r16 = dup(r15) syz_ublk_setup_queues(r16, r14, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.398338562s ago: executing program 5 (id=7730): r0 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x8082) r1 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000540)={0x0, 0x2, 0x0, &(0x7f00000009c0)=[{}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000b00)={{0x80000000, 0x0, 0x3, [0x1c]}, {0x80000000, 0x0, 0x2, [0x7, 0x7]}, 0x0, [0x7, 0xe13]}) 4.280115931s ago: executing program 5 (id=7732): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x4, 0x1, 0x2, {0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xc01}}}, 0x3a) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x4, 0x1, 0x5, 0xffffffff}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendfile(r2, r2, 0x0, 0x10000000) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @local}, 0x2}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x8000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfs_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./nfs_mnt\x00', &(0x7f0000000300)='nfs\x00', 0x0, &(0x7f0000000140)='addr=127.0.0.1,proto=tcp,port=2049,mountport=2049,mountproto=tcp,mountvers=3,vers=127.0.0.1\x00') ioctl$int_in(r7, 0x40000000af01, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x0, 0x7000}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="013fffffffffffe000006700000008000300", @ANYRES32=r11, @ANYBLOB="0c00990002000000210000000800c400010000000800c3007413"], 0x70}}, 0x880) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r12, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r12, 0x400455c8, 0x4) ioctl$TIOCSTI(r12, 0x5412, &(0x7f0000000080)=0x33) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, 0x0) r13 = dup(r8) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000040)={0x0, r13}) 4.160995073s ago: executing program 6 (id=7734): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x0}, 0x68) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x5, 0x5}, &(0x7f00000001c0)=0x18) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={r1, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe2}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xd400, 0x2, 0x234}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x4a4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000300), 0x0) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r4, &(0x7f0000000900)='0x1d6b\x00', 0x6) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r5, &(0x7f0000000b00)='0x0102\x00', 0x6) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') 3.782247009s ago: executing program 6 (id=7738): socket(0x8, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x1, 0x0, 0x9, 0x6, 0xfffffe0000000001, 0x320, 0xffffffff}, 0x0) r2 = socket(0x5, 0x8e64e1fef3b78ab8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x2, &(0x7f0000000080)=0x1, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@getqdisc={0x48, 0x26, 0x300, 0x70bd2b, 0x25df9c00, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff2}, {0xc, 0xc}, {0x7, 0x9}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_disconnect(r5) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r6, 0x5b01, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000020000100dcec51ecfbdbdf2502101004090000060620010008000200ac14142a08000b0006000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r8}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r8, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="50000000030801030000000000000000000000000000048008000640000000900800084000000005642230146d14a3b6fd29171aa75aba7c0800084000000b08000740000000050800094000008001050003002f0000000e4454a5b357bdbc62632d19119f160c1ef1bbd31bd93d0da876291719ef9dcb73d429b7b1accd856a733569cf7a074b65096d04bea6907f38a080cb7aeaac0b9c2c667570eec8268e6ee8a800233db4e38cdfc09d5f27cbb6feed17d456ebdf4d09aadd255ea32e3356e62a8d60d6edb0e228000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040884) 1.906519408s ago: executing program 5 (id=7745): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x10, 0x4, 0x0, 0x0, @sint}]}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000140)={0x10, 0x1}) 1.834570489s ago: executing program 9 (id=7747): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000500)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x98, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) 1.796594381s ago: executing program 5 (id=7748): syz_usb_connect(0x5, 0x36, 0x0, 0x0) 1.758872015s ago: executing program 9 (id=7749): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000002180), 0x7b0c, 0x40000) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs$namespace(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x10, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0xc}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.715613683s ago: executing program 9 (id=7750): openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) (async) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) readv(r0, &(0x7f0000001500)=[{&(0x7f00000000c0)=""/216, 0xd8}, {&(0x7f0000000280)=""/209, 0xd1}, {&(0x7f0000000380)=""/182, 0xb6}, {&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000ffff26bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="791001002b0c00000a0001000180c200000000001c0012800b00010067726574617000000c00028006000e0000000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 1.627336826s ago: executing program 9 (id=7751): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) syz_io_uring_setup(0x39f6, &(0x7f0000000100)={0x0, 0xf921, 0x8, 0x0, 0x3c1, 0x0, r1}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x11000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x176b90bd46832ffe}, {0xfff3, 0xe}, {0xd, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000000)=0x40c, 0x11) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100034b7ec740"], 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000016c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)=ANY=[@ANYRES8=r3], 0x0) 1.27866934s ago: executing program 7 (id=7753): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000500)=ANY=[@ANYRES64=r1, @ANYRES8=r1, @ANYBLOB="01002bbd7200fbdbdf250100000008000300", @ANYRES32, @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x40880) r2 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)={0x1}) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x73}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x2c008090}, 0x4000) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000000)=r7, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002380)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0x10, 0x2}, {0x1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000014}, 0xc010) sendmmsg$inet6(r4, &(0x7f0000003b40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x51, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000080)="d31fe8e89454975afe568d22792d499fde09f61ec7bf4251a69cb1fce22ee991dbfd36a487d35cf278e01975a2ff5c5d282f9312ec709ec1bb342545", 0x3c}, {&(0x7f00000001c0)="74b296b861a76b191d044a55d0e7dc327d781923374124a4e7699526ca7dc843d946de2e0e59c4ecb4b40b71766c4e8197c12cb3a10d76a4a4c68ca3e3e3f040787ec45db84ff39282bbd0846b9f5d358aa49c715dfe3b80c2140b09227cac2e676b2b61760757ec5f34b5544dc53d559c58eff1f713581be8495e", 0x7b}], 0x45}}], 0x1, 0x20048015) listen(r4, 0x8000) getsockopt$llc_int(r3, 0x10c, 0x68278a5f5c49abfb, &(0x7f0000000000), &(0x7f0000000080)=0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r10) 1.129311717s ago: executing program 5 (id=7754): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000000)="02c0") 1.093195157s ago: executing program 7 (id=7755): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a30000000050a015c0000000000000000020000020900010073797a30000000000900030073797a3200000000040004"], 0x58}, 0x1, 0x0, 0x0, 0x2800c005}, 0x4) 1.05188004s ago: executing program 7 (id=7756): r0 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x8082) r1 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000540)={0x0, 0x2, 0x0, &(0x7f00000009c0)=[{0x80000000}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000b00)={{0x80000000, 0x0, 0x3, [0x1c]}, {r2, 0x0, 0x2, [0x7, 0x7]}, 0x0, [0x7, 0xe13]}) 965.086075ms ago: executing program 7 (id=7757): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 964.526604ms ago: executing program 7 (id=7758): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x10, 0x4, 0x0, 0x0, @sint}]}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000140)={0x10, 0x1}) 847.020615ms ago: executing program 7 (id=7759): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008080}, 0x18015) socket$nl_netfilter(0x10, 0x3, 0xc) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x34, 0x1c, 0x114236db3b607435, 0x70bd2d, 0x25dfd3fe, {0x2, 0x0, 0x0, r3, 0x3d, 0x26, 0x3}, [@NDA_LLADDR={0xa, 0x2, @broadcast}, @NDA_DST_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040011}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) timerfd_create(0x2, 0x800) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) recvmsg(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/68, 0x44}, {&(0x7f0000000200)=""/145, 0x91}, {&(0x7f00000002c0)=""/51, 0x33}], 0x3}, 0x40000100) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}, @TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$xdp(r4, &(0x7f00000035c0)={&(0x7f0000000240)={0x2c, 0x4, r6, 0x19}, 0x10, &(0x7f0000003540)=[{&(0x7f0000000500)="3bf27a4626817a364079f5f1f2882316528b410685ec466168dfa6b74982d3b0c81b99f9564986473ba4accb", 0x2c}, {&(0x7f00000021c0)="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", 0x1000}, {&(0x7f00000031c0)="b812ac2398c45fd3a5963db0592210d360ed9ae0adfce8ccffb1e983e74ede45d6497bc51f8b0dedc678f8acd0cdd5c1403b408df02c155e6a1442cf5c6c857feccfd7594520456c6e162f9a47a482fcf7030207401f9647a7ced361585e2bd03f7c31b7a303bfe33d3510a7a2458b071767624ab962b9f8d43e19d5e7b785cea3cecd9f96b28af5cf4d3b2e427a7fdbce8b529fe4a0b5bb8c54d686a209debb58a2ee21fd6740b0a521e31245d8cd2ec7da8019985cab33199b2487d1d038b6b849667e4a8d4ea0a0aad97c", 0xcc}, {&(0x7f00000032c0)="f832a1a8f3", 0x5}, {&(0x7f0000003300)="aef6a3938158748d999067630eff9de9d6b9b48ab4e88a0e2a2ba4091e8d4ce0841e0fcb1ca3841094527aa2901c7aed8512e20a1b974a3f6c48c4b20684f7755c74669e371ae5267a7d65c941c6767bac79b0b9def81307c701d5d7efd846b883433a25f89683bc7fcd582e3aa32c445a2115d8989a48671dc2d64773e5fcfbb47cb66baaec9b36e6093d0ef1b32479a9df617465df824b6f366c499ea54cd1649dac5a1c44e8a8fa3cb44f8075079c465844a0de04a6312b100b7da419b160c0f21355aa3bda250306b57511d1768b4d0c00153ee8ce46aed90639", 0xdc}, {&(0x7f0000003400)="012779bc569dfb43b0a7b72a30399ff5173d571555303d0edf0224d0ed3777c7e7ce4a9715ab47", 0x27}, {&(0x7f0000003440)="5ac0a0ac91d463ecde11e9b6fd3f0bd60be4e23cb0893c081c1671de29c043b68609d4082e746474a5e0138bccbc14e022592ea3cf2ae6bdf9ad20547844664ae277d331c603f1b2f20bb349a74938b79c123c03f05403c4bdd74bbb40a9b0bb7024b23bd570eb9a405167b0cf6350fe97c0b13e24e87696032d3829086114202f6ef9e03744d0a04bba67c5cdfc6e97d3a41ebcee9cf0785ac8e45cb3bec721b9b1316929b23a97dd95592bea1aa9e9357d4140ac8a65065b9a14fd4b89261dfbe765c2c45e1dced622ae9c4fbdd61d0709bdb53068bd321be0616d9c139e852a0abdddf7300b3e5d8964f9e2", 0xed}], 0x7, 0x0, 0x0, 0x4000014}, 0x15) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x64) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000180)={0x5, 0x7, 0x1, 0x0, 0xe4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000280)='ntfs\x00', 0x8, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x0) write(r8, &(0x7f00000000c0)='1\x00', 0x2) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x1512, &(0x7f0000000c80)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @dccp_packet={0x9, 0x6, "06c854", 0x14dc, 0x21, 0xff, @mcast2, @loopback, {[@routing={0x33, 0x4, 0x0, 0x2, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @private1]}, @routing={0x2e, 0x12, 0x0, 0xda, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0]}, @fragment={0x33, 0x0, 0x10, 0x0, 0x0, 0x3, 0x64}, @routing={0x73, 0x14, 0x0, 0x3, 0x0, [@empty, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', @empty, @private1, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @fragment={0x3a, 0x0, 0x1, 0x1, 0x0, 0x4, 0x67}, @hopopts={0x0, 0x20, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x1, 0x1, [0xfffffffffffff13b, 0x9, 0x3d]}}, @ra={0x5, 0x2, 0x9}, @generic={0x5, 0xcb, "c0edc0e76678d4f67ba2f97a86f2f221f275d39f9f83ad5c2d5b848eb1d875eaba0faa66a00e53af4148ec187ec27b4e7c1b05d98756df39e61b504e085cf570a6b832ed69d12e3beb4d176002364fb5fe60ac089db95a951abded2bc6ff0a2ea6617af63fe59944dbd3e029606b49968fb25b147b15273eba0958a7e1efadf2980453a3223b2ace3025ac50d3b7e1ce344b2f2f771ee821c866a249360c75413cb258d2978f3885d24fb4111b6b82fa839290cd78e0607f66e3ce60351c54eec9b843625e74945c91fe2f"}, @jumbo={0xc2, 0x4, 0xfff}, @enc_lim, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @srh={0xc, 0x2, 0x4, 0x1, 0x1, 0x28, 0xf47e, [@ipv4={'\x00', '\xff\xff', @multicast1}]}, @dstopts={0x29, 0x225, '\x00', [@generic={0x3, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x3}, @generic={0x1, 0xd5, "933def826b1244514aecf6b9848d268413991a9d9e3f14dbbec3d040a0ffba3e38e8949557d982c802c6cb67c6809cb3377f2134c1e12b374c517bfdff5445c8aecd60ea572de0a3cb7dd37f69fdae9b09bdb7ce74c42e193b8c0c514887fc8b7aec82bcdd29393024a87fcd6eb3cfcdbf86530d1bc2db561a20121d1471528326953d1696dc083b55e10f3f99acd23e9cb63e244d577b229f6a191c7ec4b7592b7bbbf6c2710dc8e4a6e2b059d6740ec55a26de1b6a97f8f066cad7b9c4f3f76614591d5a0a33685d9ded12d6b6811a97fd6ec48c"}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x9e, 0x4a, "e8c6d8bdba602462fc7d849821e0acf1a1bd6131f005535c1452dc074ba4dfae5761a91940a7b2699efa928458e515f43d2ec1a81ea6def50a82f6c124aea22a657dacef5d6559242916"}]}, @hopopts={0x8, 0x2, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}]}], {{0x4e22, 0x4e22, 0x4, 0x1, 0x5, 0x0, 0x0, 0x8, 0x0, 'yY@', 0x1, '<)\r'}, "06e550fb7894743482687e5997084e240b99ddaa6ccd98736b61a67c7527a542e2a81559f02d04902d60ee746aed23f1a7030d5d7822b520edd4f2c66f1051e5bfa1f3e1e300e8a22a94009d9c1897c9b3c239fc2f861f1353706b858b452dd2db77077af2c44de20c08cbdd7cb51b606364f2824eef7ab0e163b73a910c9763300b27f011821d7de1cf2b46a9c039f620e59539785b72edeba2d1b4eb85eb8caba0f084693e00c9795a7fa826aa83f5329e2dd52683a7f0f988b72facd8f69d413c3c0733ea70c8969e3780674c5af8716e8f60"}}}}}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 505.883685ms ago: executing program 9 (id=7760): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x98, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) 424.721318ms ago: executing program 9 (id=7761): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1e, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000300200000000000010000000630119000000000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000440)={0x24, &(0x7f0000000040)={0x40, 0x23, 0x2, {0x2, 0x24}}, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x6, {[@local=@item_012={0x0, 0x2, 0x8}, @main=@item_4={0x3, 0x0, 0x9, "0400"}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8000, 0x9, 0x1, {0x22, 0xa4d}}}}, 0x0) 324.804938ms ago: executing program 6 (id=7762): close(0x3) 230.697371ms ago: executing program 6 (id=7763): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl(r0, 0x3b92, &(0x7f0000000000)="10") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000003640)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)='i', 0x1}], 0x1, 0x0, 0x0, 0x2200c004}], 0x1, 0x8010) recvmsg(r3, 0x0, 0x0) syz_open_dev$media(0x0, 0x10, 0x101000) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfbdf, 0x400, 0x2100, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) r11 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r11, &(0x7f00000071c0)={&(0x7f0000007040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000007180)={&(0x7f0000007080)=@upd={0xe0, 0x12, 0x1, 0x70bd2d, 0x25dfdbff, {{'ghash-generic\x00'}, '\x00', '\x00', 0x2400, 0x3c00}}, 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) r12 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044190}, 0x40004) 0s ago: executing program 6 (id=7764): syz_usb_connect(0x5, 0x36, 0x0, 0x0) kernel console output (not intermixed with test programs): ate" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1550.635125][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1550.635142][ C0] bridge0: topology change detected, propagating [ 1550.635251][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1550.635260][ C0] bridge0: topology change detected, propagating [ 1550.635844][ T5606] Bluetooth: hci4: command 0x0406 tx timeout [ 1550.635877][ T5606] Bluetooth: hci0: command 0x0406 tx timeout [ 1550.635942][T12684] Bluetooth: hci1: command 0x0406 tx timeout [ 1550.712532][T12684] Bluetooth: hci2: command 0x0c1a tx timeout [ 1550.872568][T12684] Bluetooth: hci3: command 0x0c1a tx timeout [ 1550.965446][T12684] Bluetooth: hci6: command 0x0c1a tx timeout [ 1550.989943][T26389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1550.989959][T26389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1551.127200][ T29] audit: type=1400 audit(1786050613.106:2110): avc: denied { write } for pid=11527 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1551.136768][ T29] audit: type=1400 audit(1786050613.116:2111): avc: denied { unmount } for pid=9900 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1551.152595][T26398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1551.152609][T26398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1551.282110][ T5700] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1551.469743][ T5700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1551.469765][ T5700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1551.469786][ T5700] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1551.469800][ T5700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.482371][ T5700] usb 3-1: config 0 descriptor?? [ 1551.901318][ T5700] hid-led 0003:1D34:000A.005B: item fetching failed at offset 1/3 [ 1551.901686][ T5700] hid-led 0003:1D34:000A.005B: probe with driver hid-led failed with error -22 [ 1551.913539][T12684] Bluetooth: hci5: command 0x0406 tx timeout [ 1551.996125][ T29] audit: type=1400 audit(1786050613.976:2112): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1551.997335][ T29] audit: type=1400 audit(1786050613.976:2113): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1552.095115][T11564] FAULT_INJECTION: forcing a failure. [ 1552.095115][T11564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1552.095138][T11564] CPU: 0 UID: 0 PID: 11564 Comm: syz.4.7456 Tainted: G L syzkaller #0 PREEMPT(full) [ 1552.095154][T11564] Tainted: [L]=SOFTLOCKUP [ 1552.095158][T11564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1552.095164][T11564] Call Trace: [ 1552.095168][T11564] [ 1552.095173][T11564] dump_stack_lvl+0x100/0x190 [ 1552.095190][T11564] should_fail_ex.cold+0x5/0xa [ 1552.095204][T11564] _copy_from_user+0x2e/0xd0 [ 1552.095218][T11564] __sys_bpf+0x2f5/0x4e80 [ 1552.095235][T11564] ? __pfx___sys_bpf+0x10/0x10 [ 1552.095245][T11564] ? find_held_lock+0x2b/0x80 [ 1552.095261][T11564] ? get_pid_task+0xfc/0x250 [ 1552.095278][T11564] ? get_pid_task+0xfc/0x250 [ 1552.095298][T11564] ? find_held_lock+0x2b/0x80 [ 1552.095317][T11564] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1552.095334][T11564] ? find_held_lock+0x2b/0x80 [ 1552.095349][T11564] ? ksys_write+0x190/0x250 [ 1552.095370][T11564] ? ksys_write+0x190/0x250 [ 1552.095396][T11564] ? fput+0x79/0x100 [ 1552.095410][T11564] ? __x64_sys_bpf+0xce/0x140 [ 1552.095424][T11564] __x64_sys_bpf+0xce/0x140 [ 1552.095435][T11564] ? do_syscall_64+0x90/0x870 [ 1552.095447][T11564] do_syscall_64+0x115/0x870 [ 1552.095457][T11564] ? clear_bhb_loop+0x40/0x90 [ 1552.095470][T11564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1552.095481][T11564] RIP: 0033:0x7f4327d9e0d9 [ 1552.095491][T11564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1552.095502][T11564] RSP: 002b:00007f4328bb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1552.095513][T11564] RAX: ffffffffffffffda RBX: 00007f4328026180 RCX: 00007f4327d9e0d9 [ 1552.095520][T11564] RDX: 0000000000000038 RSI: 00002000000001c0 RDI: 000000000000001a [ 1552.095527][T11564] RBP: 00007f4328bb8090 R08: 0000000000000000 R09: 0000000000000000 [ 1552.095533][T11564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1552.095539][T11564] R13: 00007f4328026218 R14: 00007f4328026180 R15: 00007fffeedeeba8 [ 1552.095552][T11564] [ 1552.120832][T22010] usb 3-1: USB disconnect, device number 117 [ 1552.705305][ T29] audit: type=1400 audit(1786050614.686:2114): avc: denied { write } for pid=11543 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1552.715539][T12684] Bluetooth: hci1: command 0x0406 tx timeout [ 1552.715564][T12684] Bluetooth: hci0: command 0x0406 tx timeout [ 1552.715580][T12684] Bluetooth: hci4: command 0x0406 tx timeout [ 1552.772876][T22010] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1552.794911][T30362] Bluetooth: hci2: command 0x0c1a tx timeout [ 1552.951713][T11587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11587 comm=syz.2.7458 [ 1552.952419][T30362] Bluetooth: hci3: command 0x0c1a tx timeout [ 1553.007022][T11589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1553.007298][T11589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1553.032689][T30362] Bluetooth: hci6: command 0x0c1a tx timeout [ 1553.212552][ T5700] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1553.364332][ T5700] usb 3-1: Using ep0 maxpacket: 32 [ 1553.371235][ T5700] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1553.375770][ T5700] usb 3-1: New USB device found, idVendor=0e41, idProduct=4159, bcdDevice=b8.da [ 1553.375789][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.375801][ T5700] usb 3-1: Product: syz [ 1553.375829][ T5700] usb 3-1: Manufacturer: syz [ 1553.375850][ T5700] usb 3-1: SerialNumber: syz [ 1553.377545][ T5700] usb 3-1: config 0 descriptor?? [ 1553.519855][T11602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1553.520117][T11602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1553.605785][T11587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1553.606035][T11587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1553.641277][ T5700] snd_usb_podhd 3-1:0.0: Line 6 POD HD500X found [ 1553.648455][ T5700] snd_usb_podhd 3-1:0.0: set_interface failed [ 1553.648582][ T5700] snd_usb_podhd 3-1:0.0: Line 6 POD HD500X now disconnected [ 1553.648663][ T5700] snd_usb_podhd 3-1:0.0: probe with driver snd_usb_podhd failed with error -71 [ 1553.650479][ T5700] usb 3-1: USB disconnect, device number 118 [ 1553.743074][ T5699] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 1553.918813][ T5699] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1553.918831][ T5699] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1553.924426][ T5699] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1553.924447][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1553.924460][ T5699] usb 2-1: SerialNumber: syz [ 1553.957284][ T5699] usb 2-1: 0:2 : does not exist [ 1554.120907][T11637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11637 comm=syz.4.7462 [ 1554.153085][ T5700] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1554.187424][T22010] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1554.187475][T22010] usb 10-1: no configurations [ 1554.187484][T22010] usb 10-1: can't read configurations, error -22 [ 1554.280316][ T5699] usb 2-1: USB disconnect, device number 123 [ 1554.305448][ T5700] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1554.314447][ T5700] usb 3-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=cc.da [ 1554.314464][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.314476][ T5700] usb 3-1: Product: syz [ 1554.314486][ T5700] usb 3-1: Manufacturer: syz [ 1554.314494][ T5700] usb 3-1: SerialNumber: syz [ 1554.316108][ T5700] usb 3-1: config 0 descriptor?? [ 1554.350925][T30108] udevd[30108]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1554.402421][T10502] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1554.445730][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1554.445742][ T29] audit: type=1400 audit(1786050616.426:2116): avc: denied { write } for pid=11603 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1554.561824][T10502] usb 5-1: Using ep0 maxpacket: 32 [ 1554.582658][T10502] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1554.603164][T10502] usb 5-1: New USB device found, idVendor=0e41, idProduct=4159, bcdDevice=b8.da [ 1554.603182][T10502] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.603194][T10502] usb 5-1: Product: syz [ 1554.603202][T10502] usb 5-1: Manufacturer: syz [ 1554.603211][T10502] usb 5-1: SerialNumber: syz [ 1554.606608][T10502] usb 5-1: config 0 descriptor?? [ 1554.619983][ T29] audit: type=1400 audit(1786050616.596:2117): avc: denied { write } for pid=11665 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1554.720327][T11587] netlink: 'syz.2.7458': attribute type 1 has an invalid length. [ 1554.860736][T11637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1554.861089][T11637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1554.869482][T11666] vlan2: entered allmulticast mode [ 1554.869499][T11666] bond5: entered allmulticast mode [ 1554.875481][T30362] Bluetooth: hci2: command 0x0c1a tx timeout [ 1554.894309][T10502] snd_usb_podhd 5-1:0.0: Line 6 POD HD500X found [ 1554.911948][T10502] snd_usb_podhd 5-1:0.0: set_interface failed [ 1554.912209][T10502] snd_usb_podhd 5-1:0.0: Line 6 POD HD500X now disconnected [ 1554.912311][T10502] snd_usb_podhd 5-1:0.0: probe with driver snd_usb_podhd failed with error -71 [ 1554.933542][T10502] usb 5-1: USB disconnect, device number 25 [ 1555.008507][T11719] netlink: 'syz.9.7464': attribute type 11 has an invalid length. [ 1555.038997][T30362] Bluetooth: hci3: command 0x0c1a tx timeout [ 1555.119452][T30362] Bluetooth: hci6: command 0x0c1a tx timeout [ 1555.122544][ T5700] flexcop_usb: set interface failed. [ 1555.122609][ T5700] b2c2_flexcop_usb 3-1:0.0: probe with driver b2c2_flexcop_usb failed with error -71 [ 1555.125787][ T5700] usb 3-1: USB disconnect, device number 119 [ 1555.412502][T22010] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1555.422183][T16671] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1555.580295][T22010] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1555.580460][T16671] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1555.580506][T16671] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1555.580526][T16671] usb 10-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1555.580539][T16671] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.582322][T16671] usb 10-1: config 0 descriptor?? [ 1555.590086][T22010] usb 5-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=cc.da [ 1555.590105][T22010] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.590117][T22010] usb 5-1: Product: syz [ 1555.590154][T22010] usb 5-1: Manufacturer: syz [ 1555.590163][T22010] usb 5-1: SerialNumber: syz [ 1555.592576][T22010] usb 5-1: config 0 descriptor?? [ 1555.944231][T11767] netlink: 'syz.4.7462': attribute type 1 has an invalid length. [ 1555.961881][T11767] vlan2: entered allmulticast mode [ 1555.979390][T11767] ip6gretap0: entered allmulticast mode [ 1555.984522][T11769] binder_alloc: 11765: pid 11765 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1555.986649][T11769] binder_alloc: 11765: pid 11765 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1555.986801][T11769] binder: 11765:11769 ioctl c0306201 0 returned -14 [ 1556.065618][T16671] steelseries 0003:1038:12B6.005C: unknown main item tag 0x0 [ 1556.065658][T16671] steelseries 0003:1038:12B6.005C: unknown main item tag 0x0 [ 1556.065671][T16671] steelseries 0003:1038:12B6.005C: unknown main item tag 0x0 [ 1556.065684][T16671] steelseries 0003:1038:12B6.005C: unknown main item tag 0x0 [ 1556.065698][T16671] steelseries 0003:1038:12B6.005C: unknown main item tag 0x0 [ 1556.065711][T16671] steelseries 0003:1038:12B6.005C: unknown main item tag 0x0 [ 1556.065725][T16671] steelseries 0003:1038:12B6.005C: unknown main item tag 0x0 [ 1556.086480][T16671] steelseries 0003:1038:12B6.005C: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.9-1/input0 [ 1556.149832][ T29] audit: type=1400 audit(1786050618.126:2118): avc: denied { recv } for pid=16671 comm="kworker/0:5" saddr=10.128.0.169 src=46968 daddr=10.128.0.72 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1556.365959][T22010] flexcop_usb: set interface failed. [ 1556.365998][T22010] b2c2_flexcop_usb 5-1:0.0: probe with driver b2c2_flexcop_usb failed with error -71 [ 1556.381528][T22010] usb 5-1: USB disconnect, device number 26 [ 1556.409986][ T29] audit: type=1400 audit(1786050618.386:2119): avc: denied { write } for pid=11722 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1556.806627][ T29] audit: type=1400 audit(1786050618.786:2120): avc: denied { write } for pid=11805 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1556.837934][ T5699] usb 10-1: USB disconnect, device number 14 [ 1556.882518][ T48] nvmet: connect request for invalid subsystem te%tnqn! [ 1556.884772][T11782] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "te%tnqn" [ 1557.518573][ T29] audit: type=1400 audit(1786050619.496:2121): avc: denied { getattr } for pid=11841 comm="syz.1.7473" path="/163/config/usb_gadget/g1/max_speed" dev="configfs" ino=135545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1557.758032][ T29] audit: type=1400 audit(1786050619.746:2122): avc: denied { unmount } for pid=2324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1557.768479][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1557.997867][T11867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1557.999758][T11867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1558.220896][T11876] jffs2: notice: (11876) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1558.347370][ T29] audit: type=1400 audit(1786050620.326:2123): avc: denied { write } for pid=11831 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1558.471729][ T29] audit: type=1400 audit(1786050620.456:2124): avc: denied { write } for pid=11875 comm="syz.2.7478" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1558.521307][ T29] audit: type=1400 audit(1786050620.496:2125): avc: denied { add_name } for pid=11875 comm="syz.2.7478" name="test" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1558.885063][T11891] binder_alloc: 11890: pid 11890 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1558.885335][T11891] binder_alloc: 11890: pid 11890 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1558.953356][T16671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1559.687677][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1559.687760][ T9] usb 5-1: no configurations [ 1559.687769][ T9] usb 5-1: can't read configurations, error -22 [ 1560.242255][T16671] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1560.304717][ T5699] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1560.442756][T11948] Config c/1 of g_uac2 needs at least one function. [ 1560.442869][T11948] udc usbip-vudc.0: failed to start g_uac2: -22 [ 1560.442882][T11948] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22 [ 1560.444276][T11948] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 1560.564243][ T5699] usb 10-1: Using ep0 maxpacket: 16 [ 1560.572952][ T5699] usb 10-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1560.572974][ T5699] usb 10-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1560.572988][ T5699] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1560.573005][ T5699] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1560.573018][ T5699] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.574516][ T5699] usb 10-1: config 0 descriptor?? [ 1561.360900][T11956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1561.361168][T11956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1561.369481][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1561.369492][ T29] audit: type=1800 audit(1786050623.346:2132): pid=11873 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.7476" name="bus" dev="ramfs" ino=135608 res=0 errno=0 [ 1561.410615][ T29] audit: type=1400 audit(1786050623.386:2133): avc: denied { write } for pid=11901 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1561.606339][ T5699] mcp2221 0003:04D8:00DD.005D: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 1561.747187][ T9] usb 9-1: new high-speed USB device number 104 using dummy_hcd [ 1561.858384][ T29] audit: type=1400 audit(1786050623.836:2134): avc: denied { write } for pid=11972 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1561.896660][ T5699] usb 10-1: USB disconnect, device number 15 [ 1561.899641][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1561.899667][ T9] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1561.903374][ T9] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1561.903411][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.903424][ T9] usb 9-1: Product: syz [ 1561.903432][ T9] usb 9-1: Manufacturer: syz [ 1561.903442][ T9] usb 9-1: SerialNumber: syz [ 1561.920706][ T9] cdc_mbim 9-1:1.0: skipping garbage [ 1561.970676][T16671] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1561.970712][T16671] usb 3-1: no configurations [ 1561.970720][T16671] usb 3-1: can't read configurations, error -22 [ 1562.193078][ T29] audit: type=1400 audit(1786050624.176:2135): avc: denied { watch watch_reads } for pid=11962 comm="syz.8.7490" path="/proc/62/task" dev="proc" ino=135890 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1562.266067][ T9] cdc_mbim 9-1:1.0: bind() failure [ 1562.305101][ T9] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 1562.305126][ T9] cdc_ncm 9-1:1.1: bind() failure [ 1562.347713][ T9] usb 9-1: USB disconnect, device number 104 [ 1562.568280][T11997] netlink: 'syz.4.7491': attribute type 4 has an invalid length. [ 1562.620759][T11997] netlink: 'syz.4.7491': attribute type 17 has an invalid length. [ 1562.722443][ T9] usb 9-1: new high-speed USB device number 105 using dummy_hcd [ 1562.940470][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 1562.949550][ T9] usb 9-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1562.949569][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.582268][T12034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=107 sclass=netlink_route_socket pid=12034 comm=syz.2.7495 [ 1563.746217][T12034] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1563.772188][ T9] usb 9-1: config 0 descriptor?? [ 1563.774789][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1565.087759][ T9] gspca_vc032x: reg_w err -110 [ 1565.087774][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.087801][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.087807][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.087812][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.087818][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.087823][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.087828][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.087834][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.087840][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.087845][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.087850][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.087856][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.087861][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.087866][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.087871][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.087877][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.087883][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.087888][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1565.087893][ T9] gspca_vc032x: Unknown sensor... [ 1565.087945][ T9] vc032x 9-1:0.0: probe with driver vc032x failed with error -22 [ 1565.145480][T16671] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1565.325587][T16671] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1565.325630][T16671] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1565.325650][T16671] usb 10-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1565.325663][T16671] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.350736][T16671] usb 10-1: config 0 descriptor?? [ 1565.370522][ T29] audit: type=1400 audit(1786050627.346:2136): avc: denied { write } for pid=12000 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1565.459522][T12027] netlink: 'syz.1.7492': attribute type 4 has an invalid length. [ 1565.468750][T12027] netlink: 'syz.1.7492': attribute type 17 has an invalid length. [ 1565.673022][ T29] audit: type=1400 audit(1786050627.646:2137): avc: denied { write } for pid=12072 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1565.759520][ T5699] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1565.846389][T16671] hid-led 0003:1D34:000A.005E: item fetching failed at offset 1/3 [ 1565.846735][T16671] hid-led 0003:1D34:000A.005E: probe with driver hid-led failed with error -22 [ 1565.980702][T12088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1565.980927][T12088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1566.097857][T16671] usb 10-1: USB disconnect, device number 16 [ 1566.219272][T22010] usb 9-1: USB disconnect, device number 105 [ 1566.387596][T12119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12119 comm=syz.8.7504 [ 1566.702635][T22010] usb 9-1: new high-speed USB device number 106 using dummy_hcd [ 1566.808267][ T29] audit: type=1400 audit(1786050628.786:2138): avc: denied { write } for pid=12081 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1566.948613][T22010] usb 9-1: Using ep0 maxpacket: 32 [ 1566.954236][T22010] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1566.957612][T22010] usb 9-1: New USB device found, idVendor=0e41, idProduct=4159, bcdDevice=b8.da [ 1566.957631][T22010] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.957643][T22010] usb 9-1: Product: syz [ 1566.957672][T22010] usb 9-1: Manufacturer: syz [ 1566.957681][T22010] usb 9-1: SerialNumber: syz [ 1566.959276][T22010] usb 9-1: config 0 descriptor?? [ 1566.991259][ T5699] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1566.991296][ T5699] usb 3-1: no configurations [ 1566.991305][ T5699] usb 3-1: can't read configurations, error -22 [ 1567.752880][T12144] xt_hashlimit: size too large, truncated to 1048576 [ 1567.914311][T12119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1567.914572][T12119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1567.949793][T22010] snd_usb_podhd 9-1:0.0: Line 6 POD HD500X found [ 1567.984744][T22010] snd_usb_podhd 9-1:0.0: set_interface failed [ 1567.984868][T22010] snd_usb_podhd 9-1:0.0: Line 6 POD HD500X now disconnected [ 1567.984968][T22010] snd_usb_podhd 9-1:0.0: probe with driver snd_usb_podhd failed with error -71 [ 1567.991702][T22010] usb 9-1: USB disconnect, device number 106 [ 1569.220108][ T191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1569.269569][ T29] audit: type=1400 audit(1786050631.246:2139): avc: denied { write } for pid=12163 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1569.272130][T22010] usb 9-1: new high-speed USB device number 107 using dummy_hcd [ 1569.518310][T22010] usb 9-1: device descriptor read/all, error -71 [ 1569.652796][T12176] 9p: Could not find request transport: rdma. [ 1569.804119][T12189] netlink: 84 bytes leftover after parsing attributes in process `syz.8.7510'. [ 1569.859174][ T29] audit: type=1400 audit(1786050631.836:2140): avc: denied { bind } for pid=12185 comm="syz.8.7510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1569.867178][T12166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7508'. [ 1569.964727][T12185] Process accounting resumed [ 1570.189494][T16671] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1570.352100][T16671] usb 10-1: Using ep0 maxpacket: 16 [ 1570.361501][T16671] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1570.363809][T16671] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1570.363852][T16671] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1570.370371][T16671] usb 10-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 1570.370390][T16671] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.370402][T16671] usb 10-1: Product: syz [ 1570.370412][T16671] usb 10-1: Manufacturer: syz [ 1570.370421][T16671] usb 10-1: SerialNumber: syz [ 1570.387777][ T191] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1570.533962][ T191] usb 3-1: Using ep0 maxpacket: 8 [ 1570.537299][ T191] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1570.537327][ T191] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1570.537361][ T191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.538879][ T191] usb 3-1: config 0 descriptor?? [ 1570.656743][T16671] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1570.656772][T16671] usb 10-1: MIDIStreaming interface descriptor not found [ 1570.688189][T22010] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1570.772950][ T191] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1570.793886][T12225] overlayfs: workdir and upperdir must reside under the same mount [ 1570.834065][T12225] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 1570.843931][T22010] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1570.843959][T22010] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 1570.843973][T22010] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.900069][T16671] usb 10-1: USB disconnect, device number 17 [ 1570.948575][ T29] audit: type=1400 audit(1786050632.926:2141): avc: denied { write } for pid=12186 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1571.040778][ T5700] usb 3-1: USB disconnect, device number 124 [ 1571.040808][ C0] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 1571.129395][T30193] udevd[30193]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1571.246273][T30362] Bluetooth: hci4: unexpected event for opcode 0x0c5b [ 1571.297411][ T29] audit: type=1400 audit(1786050633.276:2142): avc: denied { write } for pid=12280 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1571.315265][T22010] wacom 0003:056A:033B.005F: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 1571.353997][T22010] wacom 0003:056A:033B.005F: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0 [ 1571.355496][T22010] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:056A:033B.005F/input/input104 [ 1572.371151][T12303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12303 comm=syz.4.7521 [ 1572.468084][ T191] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1572.622433][T16671] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1572.623416][ T191] usb 10-1: Using ep0 maxpacket: 8 [ 1572.625328][ T191] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1572.625343][ T191] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1572.630351][ T191] usb 10-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 1572.630369][ T191] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.630381][ T191] usb 10-1: Product: syz [ 1572.630390][ T191] usb 10-1: Manufacturer: syz [ 1572.630399][ T191] usb 10-1: SerialNumber: syz [ 1572.690639][ T9] usb 2-1: USB disconnect, device number 124 [ 1572.784591][T16671] usb 5-1: Using ep0 maxpacket: 32 [ 1572.790507][T16671] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1572.807495][T16671] usb 5-1: New USB device found, idVendor=0e41, idProduct=4159, bcdDevice=b8.da [ 1572.807514][T16671] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.807526][T16671] usb 5-1: Product: syz [ 1572.807534][T16671] usb 5-1: Manufacturer: syz [ 1572.807544][T16671] usb 5-1: SerialNumber: syz [ 1572.811519][T16671] usb 5-1: config 0 descriptor?? [ 1572.885529][ T191] usb 10-1: unit 6 not found! [ 1572.943407][ T191] usb 10-1: USB disconnect, device number 18 [ 1573.815426][T12303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1573.815689][T12303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1573.848873][T16671] snd_usb_podhd 5-1:0.0: Line 6 POD HD500X found [ 1573.863887][T16671] snd_usb_podhd 5-1:0.0: set_interface failed [ 1573.864012][T16671] snd_usb_podhd 5-1:0.0: Line 6 POD HD500X now disconnected [ 1573.864094][T16671] snd_usb_podhd 5-1:0.0: probe with driver snd_usb_podhd failed with error -71 [ 1573.866165][T30108] udevd[30108]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1573.869081][T16671] usb 5-1: USB disconnect, device number 29 [ 1576.406111][T12420] random: crng reseeded on system resumption [ 1576.411260][ T29] audit: type=1400 audit(1786050638.376:2143): avc: denied { write } for pid=12411 comm="syz.4.7535" name="v4_end_grace" dev="nfsd" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 1576.411295][ T29] audit: type=1400 audit(1786050638.386:2144): avc: denied { open } for pid=12411 comm="syz.4.7535" path="/15/nfsd/v4_end_grace" dev="nfsd" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 1576.411316][ T29] audit: type=1400 audit(1786050638.386:2145): avc: denied { accept } for pid=12411 comm="syz.4.7535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1576.710933][T12431] syzkaller0: entered promiscuous mode [ 1576.710966][T12431] syzkaller0: entered allmulticast mode [ 1576.818570][T12441] usbip-vudc usbip-vudc.0: gadget not bound [ 1578.109177][T12476] binder: 12475:12476 ioctl c0306201 200000000240 returned -11 [ 1578.527749][T12470] netlink: 'syz.2.7544': attribute type 4 has an invalid length. [ 1578.546987][T12470] netlink: 'syz.2.7544': attribute type 17 has an invalid length. [ 1578.802569][ T9] usb 9-1: new high-speed USB device number 109 using dummy_hcd [ 1578.803796][ T191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1578.958701][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1578.958754][ T9] usb 9-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 1578.958769][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.261713][T16671] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1579.382662][ T9] wacom 0003:056A:033B.0060: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 1579.390684][ T9] wacom 0003:056A:033B.0060: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.8-1/input0 [ 1579.400144][ T9] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/0003:056A:033B.0060/input/input107 [ 1579.431287][T16671] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1579.431309][T16671] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1579.431325][T16671] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1579.431338][T16671] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1579.431361][T16671] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1579.431395][T16671] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.438859][T16671] usb 3-1: config 0 descriptor?? [ 1579.622228][ T9] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1579.778030][ T9] usb 10-1: config 0 has no interfaces? [ 1579.787859][ T9] usb 10-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 1579.787877][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.787888][ T9] usb 10-1: Product: syz [ 1579.787897][ T9] usb 10-1: Manufacturer: syz [ 1579.787927][ T9] usb 10-1: SerialNumber: syz [ 1579.789557][ T9] usb 10-1: config 0 descriptor?? [ 1579.851243][ T9] usb 9-1: USB disconnect, device number 109 [ 1579.865469][T16671] plantronics 0003:047F:FFFF.0061: unknown main item tag 0x0 [ 1579.865490][T16671] plantronics 0003:047F:FFFF.0061: unknown main item tag 0x0 [ 1579.865502][T16671] plantronics 0003:047F:FFFF.0061: unknown main item tag 0x0 [ 1579.865515][T16671] plantronics 0003:047F:FFFF.0061: unknown main item tag 0x0 [ 1579.865527][T16671] plantronics 0003:047F:FFFF.0061: unknown main item tag 0x0 [ 1579.865556][T16671] plantronics 0003:047F:FFFF.0061: unknown main item tag 0x0 [ 1579.865569][T16671] plantronics 0003:047F:FFFF.0061: unknown main item tag 0x0 [ 1579.865581][T16671] plantronics 0003:047F:FFFF.0061: unknown main item tag 0x0 [ 1579.865594][T16671] plantronics 0003:047F:FFFF.0061: unknown main item tag 0x0 [ 1579.867243][T16671] plantronics 0003:047F:FFFF.0061: unknown main item tag 0x0 [ 1579.924207][T16671] plantronics 0003:047F:FFFF.0061: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1580.001349][T16671] usb 10-1: USB disconnect, device number 19 [ 1580.068887][T12498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1580.069144][T12498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1580.177108][T16671] usb 3-1: USB disconnect, device number 125 [ 1581.990424][T12596] binder: BINDER_SET_CONTEXT_MGR already set [ 1581.990434][T12596] binder: 12593:12596 ioctl 4018620d 200000000040 returned -16 [ 1581.995649][T12596] binder: 12593:12596 ioctl c0306201 200000000240 returned -11 [ 1584.069891][T12627] geneve2: entered promiscuous mode [ 1584.082458][T26398] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 50554 - 0 [ 1584.084139][ T48] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 50554 - 0 [ 1584.084162][ T48] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 50554 - 0 [ 1584.092519][T26398] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 50554 - 0 [ 1584.395139][T12638] syz.9.7570 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1584.395212][T12638] CPU: 0 UID: 0 PID: 12638 Comm: syz.9.7570 Tainted: G L syzkaller #0 PREEMPT(full) [ 1584.395228][T12638] Tainted: [L]=SOFTLOCKUP [ 1584.395233][T12638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1584.395240][T12638] Call Trace: [ 1584.395244][T12638] [ 1584.395249][T12638] dump_stack_lvl+0x100/0x190 [ 1584.395270][T12638] dump_header+0xfb/0x606 [ 1584.395283][T12638] oom_kill_process.cold+0xd/0x330 [ 1584.395297][T12638] out_of_memory+0x340/0x14f0 [ 1584.395318][T12638] ? __pfx_out_of_memory+0x10/0x10 [ 1584.395339][T12638] mem_cgroup_out_of_memory+0xc6/0x130 [ 1584.395352][T12638] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1584.395363][T12638] ? find_held_lock+0x2b/0x80 [ 1584.395383][T12638] ? do_raw_spin_unlock+0x145/0x1e0 [ 1584.395398][T12638] ? _raw_spin_unlock+0x28/0x50 [ 1584.395416][T12638] try_charge_memcg+0x6e5/0xdf0 [ 1584.395434][T12638] ? __pfx_try_charge_memcg+0x10/0x10 [ 1584.395449][T12638] ? find_held_lock+0x2b/0x80 [ 1584.395465][T12638] ? rcu_read_unlock+0x17/0x60 [ 1584.395479][T12638] ? rcu_read_unlock+0x17/0x60 [ 1584.395499][T12638] __memcg_slab_post_alloc_hook+0x469/0x1160 [ 1584.395521][T12638] ? kasan_save_track+0x14/0x30 [ 1584.395535][T12638] kmem_cache_alloc_lru_noprof+0x583/0x6a0 [ 1584.395551][T12638] ? __d_alloc+0x35/0xa50 [ 1584.395567][T12638] __d_alloc+0x35/0xa50 [ 1584.395581][T12638] d_alloc_pseudo+0x1c/0xc0 [ 1584.395597][T12638] alloc_file_pseudo_noaccount+0x118/0x290 [ 1584.395613][T12638] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 1584.395629][T12638] ? iput+0x3a/0x40 [ 1584.395645][T12638] bdev_file_open_by_dev+0x13a/0x210 [ 1584.395660][T12638] bdev_file_open_by_path+0xed/0x330 [ 1584.395674][T12638] ? __pfx_bdev_file_open_by_path+0x10/0x10 [ 1584.395688][T12638] ? register_lock_class+0x40/0x560 [ 1584.395701][T12638] ? block2mtd_setup2.isra.0+0x2cb/0xc70 [ 1584.395716][T12638] block2mtd_setup2.isra.0+0x2ee/0xc70 [ 1584.395728][T12638] ? __pfx_block2mtd_setup2.isra.0+0x10/0x10 [ 1584.395742][T12638] ? rcu_is_watching+0x12/0xc0 [ 1584.395759][T12638] ? trace_contention_end+0x126/0x160 [ 1584.395773][T12638] ? __mutex_lock+0x26d/0x1bd0 [ 1584.395785][T12638] ? param_attr_store+0xec/0x300 [ 1584.395813][T12638] block2mtd_setup+0xbd/0xd0 [ 1584.395824][T12638] param_attr_store+0x199/0x300 [ 1584.395839][T12638] ? __pfx_param_attr_store+0x10/0x10 [ 1584.395854][T12638] module_attr_store+0x58/0x80 [ 1584.395867][T12638] ? __pfx_module_attr_store+0x10/0x10 [ 1584.395879][T12638] sysfs_kf_write+0xf2/0x150 [ 1584.395898][T12638] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1584.395912][T12638] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1584.395930][T12638] vfs_write+0x6ac/0x1050 [ 1584.395947][T12638] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1584.395963][T12638] ? __pfx_vfs_write+0x10/0x10 [ 1584.395989][T12638] ksys_write+0x12a/0x250 [ 1584.396006][T12638] ? __pfx_ksys_write+0x10/0x10 [ 1584.396027][T12638] do_syscall_64+0x115/0x870 [ 1584.396038][T12638] ? clear_bhb_loop+0x40/0x90 [ 1584.396053][T12638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1584.396064][T12638] RIP: 0033:0x7f33feb9e0d9 [ 1584.396076][T12638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1584.396086][T12638] RSP: 002b:00007f33ffa1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1584.396098][T12638] RAX: ffffffffffffffda RBX: 00007f33fee25fa0 RCX: 00007f33feb9e0d9 [ 1584.396105][T12638] RDX: 000000000000000a RSI: 00002000000000c0 RDI: 0000000000000003 [ 1584.396112][T12638] RBP: 00007f33fec35024 R08: 0000000000000000 R09: 0000000000000000 [ 1584.396125][T12638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1584.396132][T12638] R13: 00007f33fee26038 R14: 00007f33fee25fa0 R15: 00007fff991ecb68 [ 1584.396148][T12638] [ 1584.396174][T12638] memory: usage 0kB, limit 0kB, failcnt 19 [ 1584.396183][T12638] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1584.396191][T12638] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1584.396199][T12638] Memory cgroup stats for /syz9/test: [ 1584.396337][T12638] cache 0 [ 1584.396344][T12638] rss 0 [ 1584.396348][T12638] rss_huge 0 [ 1584.396353][T12638] shmem 0 [ 1584.396358][T12638] mapped_file 0 [ 1584.396362][T12638] dirty 0 [ 1584.396367][T12638] writeback 0 [ 1584.396371][T12638] workingset_refault_anon 0 [ 1584.396376][T12638] workingset_refault_file 0 [ 1584.396381][T12638] swap 0 [ 1584.396386][T12638] swapcached 0 [ 1584.396390][T12638] pgpgin 0 [ 1584.396395][T12638] pgpgout 0 [ 1584.396399][T12638] pgfault 0 [ 1584.396404][T12638] pgmajfault 0 [ 1584.396409][T12638] inactive_anon 0 [ 1584.396413][T12638] active_anon 0 [ 1584.396418][T12638] inactive_file 0 [ 1584.396423][T12638] active_file 0 [ 1584.396427][T12638] unevictable 0 [ 1584.396449][T12638] hierarchical_memory_limit 0 [ 1584.396455][T12638] hierarchical_memsw_limit 9223372036854771712 [ 1584.396462][T12638] total_cache 0 [ 1584.396467][T12638] total_rss 0 [ 1584.396471][T12638] total_rss_huge 0 [ 1584.396477][T12638] total_shmem 0 [ 1584.396482][T12638] total_mapped_file 0 [ 1584.396487][T12638] total_dirty 0 [ 1584.396492][T12638] total_writeback 0 [ 1584.396497][T12638] total_workingset_refault_anon 0 [ 1584.396503][T12638] total_workingset_refault_file 0 [ 1584.396508][T12638] total_swap 0 [ 1584.396513][T12638] total_swapcached 0 [ 1584.396517][T12638] total_pgpgin 0 [ 1584.396522][T12638] total_pgpgout 0 [ 1584.396527][T12638] total_pgfault 0 [ 1584.396532][T12638] total_pgmajfault 0 [ 1584.396536][T12638] total_inactive_anon 0 [ 1584.396541][T12638] total_active_anon 0 [ 1584.396546][T12638] total_inactive_file 0 [ 1584.396551][T12638] total_active_file 0 [ 1584.396556][T12638] total_unevictable 0 [ 1584.396560][T12638] anon_cost 0 [ 1584.396565][T12638] file_cost 0 [ 1584.396587][T12638] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz9/test,task_memcg=/syz9/test,task=syz.9.7570,pid=12637,uid=0 [ 1584.397374][T12638] Memory cgroup out of memory: Killed process 12637 (syz.9.7570) total-vm:102252kB, anon-rss:1436kB, file-rss:23120kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1584.461607][T12638] block2mtd: error: cannot open device /dev/loop0 [ 1584.656501][ T9] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1584.832237][ T191] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1584.880912][T12659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1584.881160][T12659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1584.991349][T16671] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1584.995800][ T191] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1584.995829][ T191] usb 10-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 1584.995842][ T191] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.175570][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1585.175607][ T9] usb 3-1: no configurations [ 1585.175616][ T9] usb 3-1: can't read configurations, error -22 [ 1585.262798][T12667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1585.263088][T12667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1585.444313][ T191] wacom 0003:056A:033B.0062: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 1585.455869][ T191] wacom 0003:056A:033B.0062: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.9-1/input0 [ 1585.468107][ T191] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/0003:056A:033B.0062/input/input110 [ 1585.642714][T16671] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1585.642775][T16671] usb 5-1: no configurations [ 1585.642784][T16671] usb 5-1: can't read configurations, error -22 [ 1585.796978][T12686] binder_alloc: 12685: binder_alloc_buf, no vma [ 1585.838482][ T191] usb 10-1: USB disconnect, device number 20 [ 1586.908811][T12709] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7576'. [ 1586.934012][T12709] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1587.290570][T12749] jffs2: notice: (12749) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1587.335121][ T29] audit: type=1400 audit(1786050649.316:2146): avc: denied { write } for pid=12752 comm="syz.9.7579" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1587.341675][ T29] audit: type=1400 audit(1786050649.316:2147): avc: denied { bind } for pid=12754 comm="syz.4.7580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1587.346673][ T29] audit: type=1400 audit(1786050649.326:2148): avc: denied { connect } for pid=12754 comm="syz.4.7580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1587.373816][ T29] audit: type=1400 audit(1786050649.346:2149): avc: denied { write } for pid=12752 comm="syz.9.7579" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1587.417363][ T29] audit: type=1400 audit(1786050649.396:2150): avc: denied { remove_name } for pid=12752 comm="syz.9.7579" name="test" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1587.506329][ T29] audit: type=1400 audit(1786050649.486:2151): avc: denied { unlink } for pid=12752 comm="syz.9.7579" name="test" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1587.593442][ T29] audit: type=1400 audit(1786050649.576:2152): avc: denied { write } for pid=12745 comm="syz.2.7577" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1587.664957][T16671] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1587.710525][T12773] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7582'. [ 1587.821288][T16671] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1587.821308][T16671] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.821320][T16671] usb 10-1: Product: syz [ 1587.821330][T16671] usb 10-1: Manufacturer: syz [ 1587.821338][T16671] usb 10-1: SerialNumber: syz [ 1588.122112][ T191] usb 9-1: new high-speed USB device number 110 using dummy_hcd [ 1588.276484][ T191] usb 9-1: config 0 has no interfaces? [ 1588.276507][ T191] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1588.276520][ T191] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.278149][ T191] usb 9-1: config 0 descriptor?? [ 1588.394800][ T191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1588.409768][T16671] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1588.726877][T22010] usb 9-1: USB disconnect, device number 110 [ 1588.821557][ T29] audit: type=1400 audit(1786050650.796:2153): avc: denied { write } for pid=12752 comm="syz.9.7579" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1588.832866][T10502] usb 10-1: USB disconnect, device number 21 [ 1589.053389][ T191] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1589.282748][T12812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1589.282980][T12812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1589.337268][ T191] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1589.337302][ T191] usb 5-1: no configurations [ 1589.337311][ T191] usb 5-1: can't read configurations, error -22 [ 1589.342173][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1589.509797][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1589.509828][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 1589.509841][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.513736][T16671] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 1589.513889][T16671] ath9k_htc: Failed to initialize the device [ 1589.523394][T10502] usb 10-1: ath9k_htc: USB layer deinitialized [ 1589.941234][ T9] wacom 0003:056A:033B.0063: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 1589.953006][ T9] wacom 0003:056A:033B.0063: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.2-1/input0 [ 1589.964566][ T9] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:056A:033B.0063/input/input113 [ 1590.463697][T12856] binder: 12854:12856 ioctl c0306201 200000000240 returned -11 [ 1590.527255][ T191] usb 3-1: USB disconnect, device number 2 [ 1590.770909][ T29] audit: type=1400 audit(1786050652.746:2154): avc: denied { setcurrent } for pid=12855 comm="syz.4.7592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1590.770941][ T29] audit: type=1401 audit(1786050652.746:2155): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 1590.778225][T12876] tipc: Started in network mode [ 1590.778245][T12876] tipc: Node identity b2dc428a3208, cluster identity 4711 [ 1590.778331][T12876] tipc: Enabled bearer , priority 0 [ 1590.779056][T12876] syzkaller0: entered promiscuous mode [ 1590.779069][T12876] syzkaller0: entered allmulticast mode [ 1590.809705][T12876] tipc: Resetting bearer [ 1590.914810][T12872] tipc: Resetting bearer [ 1591.003831][T12872] tipc: Disabling bearer [ 1591.452213][ T191] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1591.542556][T12899] netlink: 'syz.4.7595': attribute type 4 has an invalid length. [ 1591.573357][T12897] netlink: 'syz.4.7595': attribute type 17 has an invalid length. [ 1591.607203][ T191] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1591.607225][ T191] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1591.607238][ T191] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1591.607261][ T191] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1591.607274][ T191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.609001][ T191] usb 3-1: config 0 descriptor?? [ 1591.837007][T12906] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7598'. [ 1593.036126][T12910] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1593.036172][T12910] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1593.036183][T12910] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1593.059859][ T191] plantronics 0003:047F:FFFF.0064: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1593.135613][ T29] audit: type=1400 audit(1786050655.116:2156): avc: denied { append } for pid=12909 comm="syz.4.7599" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1593.137890][T12913] FAULT_INJECTION: forcing a failure. [ 1593.137890][T12913] name failslab, interval 1, probability 0, space 0, times 0 [ 1593.137932][T12913] CPU: 0 UID: 0 PID: 12913 Comm: syz.4.7599 Tainted: G L syzkaller #0 PREEMPT(full) [ 1593.137950][T12913] Tainted: [L]=SOFTLOCKUP [ 1593.137954][T12913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1593.137960][T12913] Call Trace: [ 1593.137964][T12913] [ 1593.137969][T12913] dump_stack_lvl+0x100/0x190 [ 1593.137986][T12913] should_fail_ex.cold+0x5/0xa [ 1593.138000][T12913] should_failslab+0xc2/0x120 [ 1593.138015][T12913] __kmalloc_cache_noprof+0x91/0x6c0 [ 1593.138033][T12913] ? ceph_create_client+0x68/0x370 [ 1593.138051][T12913] ceph_create_client+0x68/0x370 [ 1593.138066][T12913] ceph_get_tree+0x1a4/0x1fd0 [ 1593.138078][T12913] ? bpf_lsm_capable+0x9/0x10 [ 1593.138089][T12913] ? security_capable+0x80/0x260 [ 1593.138103][T12913] vfs_get_tree+0x92/0x320 [ 1593.138119][T12913] vfs_cmd_create+0xd7/0x2a0 [ 1593.138140][T12913] __do_sys_fsconfig+0x55a/0xcb0 [ 1593.138157][T12913] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1593.138178][T12913] do_syscall_64+0x115/0x870 [ 1593.138189][T12913] ? clear_bhb_loop+0x40/0x90 [ 1593.138203][T12913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.138214][T12913] RIP: 0033:0x7f4327d9e0d9 [ 1593.138224][T12913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1593.138235][T12913] RSP: 002b:00007f4328bd9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1593.138246][T12913] RAX: ffffffffffffffda RBX: 00007f4328026090 RCX: 00007f4327d9e0d9 [ 1593.138253][T12913] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 1593.138259][T12913] RBP: 00007f4328bd9090 R08: 0000000000000000 R09: 0000000000000000 [ 1593.138266][T12913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1593.138272][T12913] R13: 00007f4328026128 R14: 00007f4328026090 R15: 00007fffeedeeba8 [ 1593.138286][T12913] [ 1593.179637][ T191] usb 3-1: USB disconnect, device number 3 [ 1593.447522][T12922] fido_id[12922]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1593.649408][T12956] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7605'. [ 1593.665694][T12956] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7605'. [ 1593.713150][T10502] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1593.789548][T12684] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1593.797864][T12684] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1593.798664][T12684] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1593.799089][T12684] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1593.799936][T12684] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1593.864764][T10502] usb 10-1: config 2 has an invalid interface number: 174 but max is 0 [ 1593.864800][T10502] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1593.864813][T10502] usb 10-1: config 2 has no interface number 0 [ 1593.867601][T10502] usb 10-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 1593.867637][T10502] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.867649][T10502] usb 10-1: Product: syz [ 1593.867658][T10502] usb 10-1: Manufacturer: syz [ 1593.867667][T10502] usb 10-1: SerialNumber: syz [ 1593.893102][T12966] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7606'. [ 1594.049312][T12976] jffs2: notice: (12976) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 4 of xref (0 dead, 1 orphan) found. [ 1594.114781][T10502] usb 10-1: probing VID:PID(0424:012C) [ 1594.115599][T10502] usb 10-1: Could not find two sets of bulk-in/out endpoint pairs [ 1594.125464][T10502] vub300 10-1:2.174: probe with driver vub300 failed with error -22 [ 1594.129610][T10502] usb 10-1: USB disconnect, device number 22 [ 1594.265756][ T29] audit: type=1400 audit(1786050656.246:2157): avc: denied { write } for pid=12975 comm="syz.8.7608" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1595.058940][ T29] audit: type=1804 audit(1786050657.036:2158): pid=13035 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.7612" name="/newroot/33/file0" dev="fuse" ino=1 res=1 errno=0 [ 1595.261337][T13074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13074 comm=syz.4.7613 [ 1595.441402][T13023] SELinux: context truncated [ 1595.441421][T13023] SELinux: invalid ocon [ 1595.524699][T16671] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1595.693685][T16671] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1595.695442][T12958] bridge0: port 1(bridge_slave_0) entered blocking state [ 1595.695546][T12958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1595.695619][T12958] bridge_slave_0: entered allmulticast mode [ 1595.701016][T16671] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.40 [ 1595.701035][T16671] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.701047][T16671] usb 5-1: Product: syz [ 1595.701056][T16671] usb 5-1: Manufacturer: syz [ 1595.701065][T16671] usb 5-1: SerialNumber: syz [ 1595.724952][T12958] bridge_slave_0: entered promiscuous mode [ 1595.726259][T12958] bridge0: port 2(bridge_slave_1) entered blocking state [ 1595.726322][T12958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1595.726394][T12958] bridge_slave_1: entered allmulticast mode [ 1595.736941][T12958] bridge_slave_1: entered promiscuous mode [ 1595.836288][T12684] Bluetooth: hci7: command tx timeout [ 1595.839922][T12958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1595.844356][T12958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1595.874898][T13023] SELinux: failed to load policy [ 1595.921818][T13074] netlink: 'syz.4.7613': attribute type 1 has an invalid length. [ 1595.978028][T12958] team0: Port device team_slave_0 added [ 1595.986386][T12958] team0: Port device team_slave_1 added [ 1596.015754][T13210] vlan2: entered allmulticast mode [ 1596.015770][T13210] bond1: entered allmulticast mode [ 1596.186803][T12958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1596.186816][T12958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1596.186850][T12958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1596.187822][T12958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1596.187831][T12958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1596.187845][T12958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1596.278669][T16671] usbhid 5-1:1.0: can't add hid device: -71 [ 1596.278752][T16671] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1596.300212][T16671] usb 5-1: USB disconnect, device number 35 [ 1596.439593][T12958] hsr_slave_0: entered promiscuous mode [ 1596.446984][T12958] hsr_slave_1: entered promiscuous mode [ 1596.447419][T12958] debugfs: 'hsr0' already exists in 'hsr' [ 1596.447431][T12958] Cannot create hsr debugfs directory [ 1596.784256][ T9] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1596.916557][ T9] usb 10-1: device descriptor read/64, error -71 [ 1597.163255][ T9] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1597.169367][T12958] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.292432][ T9] usb 10-1: device descriptor read/64, error -71 [ 1597.331494][T16671] usb 9-1: new high-speed USB device number 111 using dummy_hcd [ 1597.346260][T12958] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.407429][ T9] usb usb10-port1: attempt power cycle [ 1597.457958][T12958] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.469555][T13364] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7621'. [ 1597.558685][T13370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1597.567157][T13370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1597.704936][T12958] bridge0: port 3(vlan2) entered disabled state [ 1597.710214][T12958] vlan2 (unregistering): left allmulticast mode [ 1597.710252][T12958] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 1597.710280][T12958] vlan2 (unregistering): left promiscuous mode [ 1597.710290][T12958] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 1597.712050][T12958] bridge0: port 3(vlan2) entered disabled state [ 1597.742365][ T9] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1597.765244][ T9] usb 10-1: device descriptor read/8, error -71 [ 1597.810818][T12958] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.890264][T16671] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1597.890302][T16671] usb 9-1: no configurations [ 1597.890311][T16671] usb 9-1: can't read configurations, error -22 [ 1597.915009][T12684] Bluetooth: hci7: command tx timeout [ 1597.994250][T10502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1598.005136][ T9] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1598.024583][ T9] usb 10-1: device descriptor read/8, error -71 [ 1598.134451][ T9] usb usb10-port1: unable to enumerate USB device [ 1598.421715][ T29] audit: type=1400 audit(1786050660.396:2159): avc: denied { write } for pid=13381 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1598.501569][T12958] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1598.511433][T12958] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1598.523010][T12958] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1598.546900][T12958] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1598.547420][T12958] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1598.566662][T12958] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1598.567159][T12958] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1598.581298][T12958] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1598.592149][T13414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13414 comm=syz.8.7622 [ 1598.688322][ T29] audit: type=1400 audit(1786050660.666:2160): avc: denied { write } for pid=13415 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1598.830237][T12958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1598.891320][T12958] 8021q: adding VLAN 0 to HW filter on device team0 [ 1598.907280][T12678] bridge0: port 1(bridge_slave_0) entered blocking state [ 1598.907328][T12678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1598.919064][T12678] bridge0: port 2(bridge_slave_1) entered blocking state [ 1598.919110][T12678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1598.923402][T16671] usb 9-1: new high-speed USB device number 112 using dummy_hcd [ 1599.073112][T16671] usb 9-1: Using ep0 maxpacket: 32 [ 1599.077447][T16671] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1599.078886][T16671] usb 9-1: New USB device found, idVendor=0e41, idProduct=4159, bcdDevice=b8.da [ 1599.078903][T16671] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.078915][T16671] usb 9-1: Product: syz [ 1599.078942][T16671] usb 9-1: Manufacturer: syz [ 1599.078952][T16671] usb 9-1: SerialNumber: syz [ 1599.081626][T16671] usb 9-1: config 0 descriptor?? [ 1599.289077][T13414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1599.289310][T13414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1599.301140][T16671] snd_usb_podhd 9-1:0.0: Line 6 POD HD500X found [ 1599.309527][T16671] snd_usb_podhd 9-1:0.0: set_interface failed [ 1599.313916][T16671] snd_usb_podhd 9-1:0.0: Line 6 POD HD500X now disconnected [ 1599.314026][T16671] snd_usb_podhd 9-1:0.0: probe with driver snd_usb_podhd failed with error -71 [ 1599.315317][T16671] usb 9-1: USB disconnect, device number 112 [ 1599.399176][ T29] audit: type=1400 audit(1786050661.376:2161): avc: denied { write } for pid=13426 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1599.579028][ T29] audit: type=1400 audit(1786050661.556:2162): avc: denied { write } for pid=13454 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1599.753697][T16671] usb 9-1: new high-speed USB device number 113 using dummy_hcd [ 1599.851292][T12958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1599.904985][T16671] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1599.906482][T16671] usb 9-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=cc.da [ 1599.906498][T16671] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.906510][T16671] usb 9-1: Product: syz [ 1599.906519][T16671] usb 9-1: Manufacturer: syz [ 1599.906528][T16671] usb 9-1: SerialNumber: syz [ 1599.910395][T16671] usb 9-1: config 0 descriptor?? [ 1599.937211][T12958] veth0_vlan: entered promiscuous mode [ 1599.950882][T12958] veth1_vlan: entered promiscuous mode [ 1599.992573][T12684] Bluetooth: hci7: command tx timeout [ 1600.001451][T12958] veth0_macvtap: entered promiscuous mode [ 1600.014904][T12958] veth1_macvtap: entered promiscuous mode [ 1600.039979][T12958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1600.051832][T12958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1600.118476][T16671] flexcop_usb: set interface failed. [ 1600.118536][T16671] b2c2_flexcop_usb 9-1:0.0: probe with driver b2c2_flexcop_usb failed with error -71 [ 1600.130655][T16671] usb 9-1: USB disconnect, device number 113 [ 1600.165417][ T3332] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1600.165484][ T3332] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1600.165504][ T3332] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1600.165521][ T3332] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1600.367617][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1600.367632][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1600.451084][T11787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1600.451099][T11787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1600.486580][ T29] audit: type=1400 audit(1786050662.466:2163): avc: denied { mounton } for pid=12958 comm="syz-executor" path="/root/syzkaller.SE1YCy/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1601.539412][T13501] raw_sendmsg: syz.9.7624 forgot to set AF_INET. Fix it! [ 1601.852906][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1602.072356][T12684] Bluetooth: hci7: command tx timeout [ 1602.446643][ T29] audit: type=1400 audit(1786050664.426:2164): avc: denied { write } for pid=13522 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1602.722922][ T29] audit: type=1400 audit(1786050664.696:2165): avc: denied { write } for pid=13542 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1603.023193][ T9] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1603.177256][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 1603.191741][ T9] usb 10-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1603.191761][ T9] usb 10-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1603.191777][ T9] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1603.197921][ T9] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1603.197939][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.197951][ T9] usb 10-1: Product: ӱ邲ࢨᒸﾎ탗ῐ읖ꍂ랤뿃肆㿙︊翪嘿蛛⌢艚骁耺朴摂杚鷡栓臂犇뗲턻쪎짐敵넓⪧ [ 1603.197964][ T9] usb 10-1: Manufacturer: 퓺 [ 1603.197973][ T9] usb 10-1: SerialNumber: 辩⿅㎶⛃엗迩흸Ả潶䍤Ⲣ䷾‽熭गၪꕯ豍맯豐୓ᥲ뇗낧ॗ腸徴怦ࡻ셰힟࢏鎇每摻䧓壳ꇁ஍㻪숴弮꺕Ⰸ憏⻔ꈑ瘳媯檜ⷑʽ镡㋯ [ 1603.199787][T13550] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1603.199840][T13550] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1603.403607][T22011] usb 9-1: new high-speed USB device number 114 using dummy_hcd [ 1603.469504][ T29] audit: type=1400 audit(1786050665.446:2166): avc: denied { write } for pid=13557 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1603.567534][ T29] audit: type=1400 audit(1786050665.546:2167): avc: denied { write } for pid=13587 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1603.614336][T22010] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1603.681132][T13595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1603.681400][T13595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1603.762643][T22010] usb 4-1: Using ep0 maxpacket: 8 [ 1603.765165][T22010] usb 4-1: config 10 has an invalid interface number: 91 but max is 0 [ 1603.765183][T22010] usb 4-1: config 10 has no interface number 0 [ 1603.765226][T22010] usb 4-1: config 10 interface 91 has no altsetting 0 [ 1603.767269][T22010] usb 4-1: string descriptor 0 read error: -22 [ 1603.767347][T22010] usb 4-1: New USB device found, idVendor=097b, idProduct=61f6, bcdDevice=d4.9a [ 1603.767361][T22010] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.771472][T22010] uvcvideo 4-1:10.91: Found Unit with invalid ID 0 [ 1603.771518][T22010] uvcvideo 4-1:10.91: Found UVC 0.40 device (097b:61f6) [ 1603.771567][T22010] uvcvideo 4-1:10.91: Entity type for entity Output 32771 was not initialized! [ 1603.771617][T22010] uvcvideo 4-1:10.91: Entity type for entity Media 2 was not initialized! [ 1603.830274][ T9] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 1603.844902][ T9] usb 10-1: USB disconnect, device number 27 [ 1603.846702][ T9] usblp0: removed [ 1604.001734][T22010] usb 4-1: USB disconnect, device number 59 [ 1604.107087][T22011] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1604.107122][T22011] usb 9-1: no configurations [ 1604.107131][T22011] usb 9-1: can't read configurations, error -22 [ 1605.146195][T13659] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7636'. [ 1605.531533][T13669] jffs2: notice: (13669) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 4 of xref (0 dead, 1 orphan) found. [ 1605.562025][ T29] audit: type=1400 audit(1786050667.536:2168): avc: denied { write } for pid=13668 comm="syz.9.7637" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1605.574062][T13673] netlink: 'syz.8.7635': attribute type 4 has an invalid length. [ 1605.711333][T13664] netlink: 'syz.8.7635': attribute type 17 has an invalid length. [ 1606.814692][T13680] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 1606.814735][T13680] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 1606.814748][T13680] netdevsim netdevsim9: Falling back to sysfs fallback for: . [ 1606.916398][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1606.916523][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1606.928643][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1606.928759][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1607.007521][ T29] audit: type=1400 audit(1786050668.986:2169): avc: denied { write } for pid=13666 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1607.074717][T13682] ceph: No mds server is up or the cluster is laggy [ 1607.244259][ T29] audit: type=1400 audit(1786050669.226:2170): avc: denied { write } for pid=13697 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1607.593432][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1607.815424][ T29] audit: type=1400 audit(1786050669.796:2171): avc: denied { write } for pid=13705 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1607.913499][ T29] audit: type=1400 audit(1786050669.896:2172): avc: denied { write } for pid=13723 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1608.009378][ T9] usb 9-1: new high-speed USB device number 116 using dummy_hcd [ 1608.176269][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1608.176315][ T9] usb 9-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 1608.176329][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.457032][T13730] netlink: 'syz.9.7641': attribute type 4 has an invalid length. [ 1608.476969][T13730] netlink: 'syz.9.7641': attribute type 17 has an invalid length. [ 1608.819150][ T9] usbhid 9-1:1.0: can't add hid device: -71 [ 1608.819212][ T9] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 1608.821026][ T9] usb 9-1: USB disconnect, device number 116 [ 1610.266577][T13747] jffs2: notice: (13747) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 4 of xref (0 dead, 1 orphan) found. [ 1610.286214][T13743] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7643'. [ 1610.291750][T30362] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1610.300797][T30362] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1610.303761][T30362] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1610.305206][T30362] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1610.305517][T30362] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1610.703691][ T9] usb 9-1: new high-speed USB device number 117 using dummy_hcd [ 1610.928894][T13780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1610.929770][T13780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1611.476126][ T9] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1611.476179][ T9] usb 9-1: no configurations [ 1611.476188][ T9] usb 9-1: can't read configurations, error -22 [ 1611.690024][T13744] bridge0: port 1(bridge_slave_0) entered blocking state [ 1611.690069][T13744] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.697165][T13744] bridge_slave_0: entered allmulticast mode [ 1611.698133][T13744] bridge_slave_0: entered promiscuous mode [ 1611.708052][T13744] bridge0: port 2(bridge_slave_1) entered blocking state [ 1611.708166][T13744] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.708269][T13744] bridge_slave_1: entered allmulticast mode [ 1611.711184][T13744] bridge_slave_1: entered promiscuous mode [ 1611.774011][T13744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1611.776631][T13744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1611.848557][T13744] team0: Port device team_slave_0 added [ 1611.850095][T13744] team0: Port device team_slave_1 added [ 1611.907114][T13744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1611.907126][T13744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1611.907140][T13744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1611.917759][T13744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1611.917772][T13744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1611.917787][T13744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1612.009497][T13744] hsr_slave_0: entered promiscuous mode [ 1612.010064][T13744] hsr_slave_1: entered promiscuous mode [ 1612.010446][T13744] debugfs: 'hsr0' already exists in 'hsr' [ 1612.010458][T13744] Cannot create hsr debugfs directory [ 1612.233278][T13986] comedi comedi3: rti802: I/O port conflict (0x100,4) [ 1612.392198][T30362] Bluetooth: hci8: command tx timeout [ 1613.024982][ T191] usb 9-1: new high-speed USB device number 119 using dummy_hcd [ 1613.161211][T12684] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1613.168676][T12684] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1613.175432][ T191] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1613.175453][ T191] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1613.175472][ T191] usb 9-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1613.175486][ T191] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.177076][ T191] usb 9-1: config 0 descriptor?? [ 1613.181702][T12684] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1613.187619][T12684] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1613.189041][T12684] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1613.555158][T13744] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.604584][ T191] hid-led 0003:1D34:000A.0065: item fetching failed at offset 1/3 [ 1613.607525][ T191] hid-led 0003:1D34:000A.0065: probe with driver hid-led failed with error -22 [ 1613.712709][ T9] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1613.769117][T13744] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.836305][T22011] usb 9-1: USB disconnect, device number 119 [ 1613.874928][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 1613.878436][ T9] usb 10-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1613.878456][ T9] usb 10-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1613.878470][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1613.878507][ T9] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1613.878520][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.879959][ T9] usb 10-1: config 0 descriptor?? [ 1613.948130][T13744] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.095123][T13744] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.328033][ T9] mcp2221 0003:04D8:00DD.0066: unknown main item tag 0x0 [ 1614.328052][ T9] mcp2221 0003:04D8:00DD.0066: unknown main item tag 0x0 [ 1614.328065][ T9] mcp2221 0003:04D8:00DD.0066: unknown main item tag 0x0 [ 1614.328078][ T9] mcp2221 0003:04D8:00DD.0066: unknown main item tag 0x0 [ 1614.328090][ T9] mcp2221 0003:04D8:00DD.0066: unknown main item tag 0x0 [ 1614.328453][ T9] mcp2221 0003:04D8:00DD.0066: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 1614.477428][T12684] Bluetooth: hci8: command tx timeout [ 1614.544015][T14069] i2c i2c-1: unsupported multi-msg i2c transaction [ 1614.545529][T22011] usb 10-1: USB disconnect, device number 28 [ 1615.063129][T13744] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1615.067144][T13744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1615.097135][T14057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1615.098419][T14057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1615.100662][T14057] bridge_slave_0: entered allmulticast mode [ 1615.101732][T14057] bridge_slave_0: entered promiscuous mode [ 1615.123530][T13744] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1615.143382][T13744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1615.146598][T14057] bridge0: port 2(bridge_slave_1) entered blocking state [ 1615.146643][T14057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1615.146816][T14057] bridge_slave_1: entered allmulticast mode [ 1615.147774][T14057] bridge_slave_1: entered promiscuous mode [ 1615.200075][T13744] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1615.206973][T13744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1615.207505][T13744] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1615.211886][T13744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1615.264704][T14057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1615.274187][T12684] Bluetooth: hci9: command tx timeout [ 1615.320367][T14057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1615.418175][T14057] team0: Port device team_slave_0 added [ 1615.431646][T14057] team0: Port device team_slave_1 added [ 1615.552659][T14057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1615.552674][T14057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1615.552688][T14057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1615.558246][T14057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1615.558257][T14057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1615.558272][T14057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1615.804910][T14057] hsr_slave_0: entered promiscuous mode [ 1615.805525][T14057] hsr_slave_1: entered promiscuous mode [ 1615.805918][T14057] debugfs: 'hsr0' already exists in 'hsr' [ 1615.805929][T14057] Cannot create hsr debugfs directory [ 1616.587069][T12684] Bluetooth: hci8: command tx timeout [ 1616.927690][T13744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1617.005464][T13744] 8021q: adding VLAN 0 to HW filter on device team0 [ 1617.046474][T11789] bridge0: port 1(bridge_slave_0) entered blocking state [ 1617.046530][T11789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1617.047434][T11789] bridge0: port 2(bridge_slave_1) entered blocking state [ 1617.047524][T11789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1617.133339][ T191] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1617.199033][T22010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1617.354448][T12684] Bluetooth: hci9: command tx timeout [ 1617.385547][T14410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1617.393162][T14410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1618.632570][T12684] Bluetooth: hci8: command tx timeout [ 1619.008844][ T29] audit: type=1400 audit(1786050680.986:2173): avc: denied { write } for pid=14408 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1619.065383][ T191] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1619.065443][ T191] usb 10-1: no configurations [ 1619.065453][ T191] usb 10-1: can't read configurations, error -22 [ 1619.234058][ T29] audit: type=1400 audit(1786050681.216:2174): avc: denied { write } for pid=14436 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1619.433625][T12684] Bluetooth: hci9: command tx timeout [ 1619.722581][T14457] jffs2: notice: (14457) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 4 of xref (0 dead, 1 orphan) found. [ 1619.767800][ T29] audit: type=1400 audit(1786050681.736:2175): avc: denied { write } for pid=14456 comm="syz.9.7661" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1620.419232][ T29] audit: type=1400 audit(1786050682.396:2176): avc: denied { write } for pid=14447 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1620.442480][T30362] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1620.459302][T30362] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1620.460500][T30362] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1620.460977][T30362] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1620.461277][T30362] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1620.471883][T13744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1620.759906][ T29] audit: type=1400 audit(1786050682.736:2177): avc: denied { write } for pid=14490 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1621.117381][T14057] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1621.126181][T14057] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1621.131939][T14057] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1621.160035][T14057] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1621.160553][T14057] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1621.512294][T30362] Bluetooth: hci9: command tx timeout [ 1621.732580][T14057] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1622.144957][T14057] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1622.158053][T14478] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7664'. [ 1622.216595][T14057] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1622.435126][T13744] veth0_vlan: entered promiscuous mode [ 1622.506358][T13744] veth1_vlan: entered promiscuous mode [ 1622.552232][T30362] Bluetooth: hci10: command tx timeout [ 1622.669574][T14057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1622.697108][T13744] veth0_macvtap: entered promiscuous mode [ 1622.742836][T13744] veth1_macvtap: entered promiscuous mode [ 1622.760770][T14057] 8021q: adding VLAN 0 to HW filter on device team0 [ 1622.768073][ T29] audit: type=1400 audit(1786050684.746:2178): avc: denied { write } for pid=14501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1622.806491][T11789] bridge0: port 1(bridge_slave_0) entered blocking state [ 1622.806552][T11789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1622.868976][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 1622.869031][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1622.890408][T13744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1622.944098][T14567] jffs2: notice: (14567) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 4 of xref (0 dead, 1 orphan) found. [ 1622.958625][T13744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1623.026289][ T29] audit: type=1400 audit(1786050685.006:2179): avc: denied { write } for pid=14572 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1623.125829][T14057] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1623.192927][T11787] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1623.194373][T26394] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1623.194567][T26394] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1623.194825][T26394] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1623.472572][ T191] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1623.483489][T26396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1623.483523][T26396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1623.699953][T14647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1623.700215][T14647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1623.809455][T26394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1623.809473][T26394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1623.856261][T14480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1623.856348][T14480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1623.856459][T14480] bridge_slave_0: entered allmulticast mode [ 1623.866153][T14480] bridge_slave_0: entered promiscuous mode [ 1623.891898][T14480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1623.896648][T14480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1623.896817][T14480] bridge_slave_1: entered allmulticast mode [ 1623.912255][T14480] bridge_slave_1: entered promiscuous mode [ 1624.077232][ T191] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1624.077268][ T191] usb 10-1: no configurations [ 1624.077277][ T191] usb 10-1: can't read configurations, error -22 [ 1624.087631][T14480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1624.108445][T14480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1624.199242][ T29] audit: type=1400 audit(1786050686.176:2180): avc: denied { write } for pid=14604 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1624.245945][T14480] team0: Port device team_slave_0 added [ 1624.254186][T14480] team0: Port device team_slave_1 added [ 1624.371342][T14480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1624.371355][T14480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1624.371369][T14480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1624.387287][T14480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1624.387300][T14480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1624.387315][T14480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1624.424319][ T29] audit: type=1400 audit(1786050686.406:2181): avc: denied { write } for pid=14741 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1624.463635][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1624.523635][T14480] hsr_slave_0: entered promiscuous mode [ 1624.524294][T14480] hsr_slave_1: entered promiscuous mode [ 1624.527470][T14480] debugfs: 'hsr0' already exists in 'hsr' [ 1624.527484][T14480] Cannot create hsr debugfs directory [ 1624.616039][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1624.625889][ T9] usb 7-1: config index 0 descriptor too short (expected 65, got 36) [ 1624.625917][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1624.625932][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1624.625948][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1624.625982][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1624.626004][ T9] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1624.626018][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.627470][ T9] usb 7-1: config 0 descriptor?? [ 1624.627810][T14718] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1624.632296][T12684] Bluetooth: hci10: command tx timeout [ 1624.639678][ T9] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input116 [ 1624.760099][T14057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1625.405800][ T29] audit: type=1326 audit(1786050687.386:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14716 comm="syz.6.7642" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9a39e0d9 code=0x7ffc0000 [ 1625.405834][ T29] audit: type=1326 audit(1786050687.386:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14716 comm="syz.6.7642" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9a39e0d9 code=0x7ffc0000 [ 1625.409214][ T29] audit: type=1326 audit(1786050687.386:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14716 comm="syz.6.7642" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9a39e0d9 code=0x7ffc0000 [ 1625.409264][ T29] audit: type=1326 audit(1786050687.386:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14716 comm="syz.6.7642" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9a39e0d9 code=0x7ffc0000 [ 1625.411771][ T29] audit: type=1326 audit(1786050687.386:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14716 comm="syz.6.7642" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4e9a39e0d9 code=0x7ffc0000 [ 1625.464498][ T29] audit: type=1326 audit(1786050687.446:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14716 comm="syz.6.7642" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9a39e0d9 code=0x7ffc0000 [ 1625.464533][ T29] audit: type=1326 audit(1786050687.446:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14716 comm="syz.6.7642" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9a39e0d9 code=0x7ffc0000 [ 1625.466208][ T29] audit: type=1326 audit(1786050687.446:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14716 comm="syz.6.7642" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f4e9a39e0d9 code=0x7ffc0000 [ 1626.712102][T12684] Bluetooth: hci10: command tx timeout [ 1626.878200][ T191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1627.117777][T14874] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7671'. [ 1627.204288][ T9] usb 7-1: USB disconnect, device number 3 [ 1627.406433][T14480] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.114472][T14480] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.323109][T14057] veth0_vlan: entered promiscuous mode [ 1628.339079][T14057] veth1_vlan: entered promiscuous mode [ 1628.538605][T14480] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.793359][T12684] Bluetooth: hci10: command tx timeout [ 1629.093139][T14480] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1629.191396][ T3332] Bluetooth: hci11: Frame reassembly failed (-84) [ 1629.209459][T14934] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1629.295735][T14057] veth0_macvtap: entered promiscuous mode [ 1629.315874][T14057] veth1_macvtap: entered promiscuous mode [ 1629.357447][T14057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1629.409769][T14057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1629.591186][ T1163] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.591240][ T1163] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.591260][ T1163] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.591297][ T1163] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.757087][T14948] binder: 14947:14948 ioctl 4018620d 0 returned -22 [ 1629.761504][T14948] binder: 14947:14948 ioctl c0306201 200000000240 returned -11 [ 1629.870585][T14952] binder: 14950:14952 ioctl c0306201 200000000240 returned -11 [ 1630.241493][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 1630.241504][ T29] audit: type=1400 audit(1786050692.216:2278): avc: denied { write } for pid=14940 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1630.291846][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1630.291857][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1630.340714][T14480] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1630.355803][T14480] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1630.356361][T14480] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1630.370284][T14480] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1630.390000][T14480] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1630.395081][T14980] binder: 14979:14980 ioctl c0306201 200000000240 returned -11 [ 1630.407540][T14480] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1630.408119][T14480] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1630.431534][T14480] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1630.471215][T11789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1630.471230][T11789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1630.507891][ T29] audit: type=1400 audit(1786050692.486:2279): avc: denied { write } for pid=14982 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1630.859484][T14480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1630.907207][T14480] 8021q: adding VLAN 0 to HW filter on device team0 [ 1630.919641][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 1630.919716][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1630.969097][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 1630.969159][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1631.193081][T30362] Bluetooth: hci11: command 0x1003 tx timeout [ 1631.193172][T12684] Bluetooth: hci11: Opcode 0x1003 failed: -110 [ 1631.790044][ T29] audit: type=1400 audit(1786050693.766:2280): avc: denied { write } for pid=15001 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1632.111262][T15032] jffs2: notice: (15032) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 4 of xref (0 dead, 1 orphan) found. [ 1632.147914][ T29] audit: type=1400 audit(1786050694.126:2281): avc: denied { write } for pid=15030 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1632.329559][ T29] audit: type=1400 audit(1786050694.306:2282): avc: denied { write } for pid=15031 comm="syz.7.7684" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1632.579684][T14480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1632.740028][T14480] veth0_vlan: entered promiscuous mode [ 1632.789329][T14480] veth1_vlan: entered promiscuous mode [ 1632.795194][T15053] jffs2: notice: (15053) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 4 of xref (0 dead, 1 orphan) found. [ 1632.905526][T14480] veth0_macvtap: entered promiscuous mode [ 1633.055279][T14480] veth1_macvtap: entered promiscuous mode [ 1633.974201][T14480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1633.991646][T14480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1634.097312][T11787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.098592][T12654] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.099338][T12654] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.099781][T12654] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.109034][T15065] binder: BINDER_SET_CONTEXT_MGR already set [ 1634.109046][T15065] binder: 15063:15065 ioctl 4018620d 200000000040 returned -16 [ 1634.114846][T15065] binder: 15063:15065 ioctl c0306201 200000000240 returned -11 [ 1634.283454][T30362] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1634.289368][T30362] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1634.290089][T30362] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1634.290545][T30362] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1634.292487][T30362] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1634.387474][ T29] audit: type=1800 audit(1786050696.366:2283): pid=15015 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.7682" name="bus" dev="ramfs" ino=141441 res=0 errno=0 [ 1634.475043][ T191] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1634.577449][ T29] audit: type=1400 audit(1786050696.556:2284): avc: denied { write } for pid=15042 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1634.680284][ T191] usb 7-1: Using ep0 maxpacket: 16 [ 1634.688213][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1634.688228][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1634.704448][ T191] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1634.704470][ T191] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1634.704483][ T191] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1634.704519][ T191] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1634.704532][ T191] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.725119][ T191] usb 7-1: config 0 descriptor?? [ 1634.798122][T11789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1634.798157][T11789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1634.928546][ T29] audit: type=1400 audit(1786050696.906:2285): avc: denied { write } for pid=15105 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1635.180306][ T191] mcp2221 0003:04D8:00DD.0067: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 1635.388781][ T191] usb 7-1: USB disconnect, device number 4 [ 1635.422357][T22010] usb 10-1: new full-speed USB device number 33 using dummy_hcd [ 1635.583687][T22010] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1635.583709][T22010] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1635.598646][T22010] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1635.598696][T22010] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.598708][T22010] usb 10-1: Product: syz [ 1635.598717][T22010] usb 10-1: Manufacturer: syz [ 1635.598726][T22010] usb 10-1: SerialNumber: syz [ 1635.600591][T22010] usb 10-1: config 0 descriptor?? [ 1635.607727][T22010] hub 10-1:0.0: bad descriptor, ignoring hub [ 1635.607742][T22010] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1635.619985][T22010] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input117 [ 1635.850787][ T29] audit: type=1400 audit(1786050697.826:2286): avc: denied { read write } for pid=15164 comm="syz.7.7693" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1635.850821][ T29] audit: type=1400 audit(1786050697.826:2287): avc: denied { open } for pid=15164 comm="syz.7.7693" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1636.358540][T15213] jffs2: notice: (15213) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 4 of xref (0 dead, 1 orphan) found. [ 1636.396827][T22010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1636.396997][T12684] Bluetooth: hci11: command tx timeout [ 1636.521524][ T29] audit: type=1400 audit(1786050698.496:2288): avc: denied { write } for pid=15125 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1636.848117][ T29] audit: type=1400 audit(1786050698.826:2289): avc: denied { write } for pid=15255 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1637.226648][T15072] bridge0: port 1(bridge_slave_0) entered blocking state [ 1637.226718][T15072] bridge0: port 1(bridge_slave_0) entered disabled state [ 1637.226933][T15072] bridge_slave_0: entered allmulticast mode [ 1637.233825][T15072] bridge_slave_0: entered promiscuous mode [ 1637.241258][T15072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1637.241347][T15072] bridge0: port 2(bridge_slave_1) entered disabled state [ 1637.241534][T15072] bridge_slave_1: entered allmulticast mode [ 1637.251893][T15072] bridge_slave_1: entered promiscuous mode [ 1637.418195][T15072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1637.437369][T15072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1637.616722][T15072] team0: Port device team_slave_0 added [ 1637.625772][T15072] team0: Port device team_slave_1 added [ 1637.806389][T15072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1637.806402][T15072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1637.806417][T15072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1637.807306][T15072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1637.807314][T15072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1637.807328][T15072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1637.833136][T15380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1637.833397][T15380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1637.838641][T15380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1637.838883][T15380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1637.897110][T15295] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1637.938064][ T191] usb 10-1: USB disconnect, device number 33 [ 1638.043285][T15072] hsr_slave_0: entered promiscuous mode [ 1638.043883][T15072] hsr_slave_1: entered promiscuous mode [ 1638.044280][T15072] debugfs: 'hsr0' already exists in 'hsr' [ 1638.044293][T15072] Cannot create hsr debugfs directory [ 1638.060726][T15380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1638.061001][T15380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1638.202508][ T191] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1638.258119][ T29] audit: type=1400 audit(1786050700.236:2290): avc: denied { write } for pid=15323 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1638.396809][ T191] usb 10-1: config 2 has an invalid interface number: 174 but max is 0 [ 1638.396848][ T191] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1638.396859][ T191] usb 10-1: config 2 has no interface number 0 [ 1638.396883][ T191] usb 10-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 1638.396898][ T191] usb 10-1: config 2 interface 174 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1638.396911][ T191] usb 10-1: config 2 interface 174 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1638.410723][ T191] usb 10-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 1638.410742][ T191] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.410754][ T191] usb 10-1: Product: syz [ 1638.410763][ T191] usb 10-1: Manufacturer: syz [ 1638.410772][ T191] usb 10-1: SerialNumber: syz [ 1638.454022][ T29] audit: type=1400 audit(1786050700.426:2291): avc: denied { write } for pid=15479 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1638.475940][T12684] Bluetooth: hci11: command tx timeout [ 1638.681948][ T191] usb 10-1: probing VID:PID(0424:012C) [ 1638.683139][ T191] usb 10-1: vub300 testing UNKNOWN EndPoint(0) 8E [ 1638.683155][ T191] usb 10-1: vub300 ignoring EndPoint(0) 8E [ 1638.683165][ T191] usb 10-1: Could not find two sets of bulk-in/out endpoint pairs [ 1638.705743][ T191] vub300 10-1:2.174: probe with driver vub300 failed with error -22 [ 1638.735291][ T191] usb 10-1: USB disconnect, device number 34 [ 1640.003936][T15520] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7704'. [ 1640.391371][T15546] binder: 15543:15546 ioctl c0306201 0 returned -14 [ 1640.552309][T12684] Bluetooth: hci11: command tx timeout [ 1640.842039][ T191] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1641.132228][ T191] usb 7-1: Using ep0 maxpacket: 16 [ 1641.133435][ T191] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1641.133475][ T191] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1641.133489][ T191] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1641.133506][ T191] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1641.133519][ T191] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.134979][ T191] usb 7-1: config 0 descriptor?? [ 1641.754926][ T29] audit: type=1400 audit(1786050703.736:2292): avc: denied { write } for pid=15511 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1641.899061][T15558] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7710'. [ 1641.931718][ T191] mcp2221 0003:04D8:00DD.0068: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 1642.068346][ T29] audit: type=1400 audit(1786050704.046:2293): avc: denied { write } for pid=15582 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1642.231050][ T191] usb 7-1: USB disconnect, device number 5 [ 1642.462714][ T9] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1642.637129][T12684] Bluetooth: hci11: command tx timeout [ 1642.646583][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 1642.656270][ T9] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1642.656301][ T9] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1642.656335][ T9] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1642.656350][ T9] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1642.671007][ T9] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1642.671044][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.671056][ T9] usb 10-1: Product: syz [ 1642.671065][ T9] usb 10-1: Manufacturer: syz [ 1642.671074][ T9] usb 10-1: SerialNumber: syz [ 1642.692357][ C0] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1642.877827][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/input/input118 [ 1643.904982][ T29] audit: type=1400 audit(1786050705.886:2294): avc: denied { write } for pid=15616 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1644.228428][ T29] audit: type=1400 audit(1786050706.206:2295): avc: denied { write } for pid=15659 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1644.586932][T15072] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1644.589261][T15072] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1644.589948][T15072] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1644.601855][T15072] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1644.607412][T15072] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1644.611419][T15072] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1644.612741][T15072] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1644.622352][T15072] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1644.733588][T15072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1644.741464][T15072] 8021q: adding VLAN 0 to HW filter on device team0 [ 1644.746581][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1644.746634][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1644.759144][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1644.759198][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1645.244775][T15719] binder: 15718:15719 ioctl c0306201 0 returned -14 [ 1645.441355][ T9] imon:send_packet: packet tx failed (-71) [ 1645.463214][ T9] imon 10-1:155.0: panel buttons/knobs setup failed [ 1645.463247][ T9] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1645.463255][ T9] (id 0x00) [ 1645.627623][ T9] rc_core: IR keymap rc-imon-pad not found [ 1645.627637][ T9] Registered IR keymap rc-empty [ 1645.627750][ T9] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1645.627762][ T9] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1645.627859][T22010] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1645.629447][ T9] imon:send_packet: packet tx failed (-71) [ 1645.645905][ T9] imon 10-1:155.0: remote input dev register failed [ 1645.645992][ T9] imon 10-1:155.0: imon_init_intf0: rc device setup failed [ 1645.759412][ T9] imon 10-1:155.0: unable to initialize intf0, err 0 [ 1645.759444][ T9] imon:imon_probe: failed to initialize context! [ 1645.759452][ T9] imon 10-1:155.0: unable to register, err -19 [ 1645.772318][T22010] usb 7-1: Using ep0 maxpacket: 32 [ 1645.773802][T22010] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1645.773820][T22010] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.780886][T22010] usb 7-1: config 0 descriptor?? [ 1645.782817][T22010] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1645.784872][ T9] usb 10-1: USB disconnect, device number 35 [ 1645.897814][T15072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1645.993563][T16671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1646.024475][T15762] jffs2: notice: (15762) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 4 of xref (0 dead, 1 orphan) found. [ 1646.028616][ T29] audit: type=1400 audit(1786050708.006:2296): avc: denied { write } for pid=15761 comm="syz.9.7725" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1646.069488][ T29] audit: type=1400 audit(1786050708.046:2297): avc: denied { write } for pid=15761 comm="syz.9.7725" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1646.268731][T15072] veth0_vlan: entered promiscuous mode [ 1646.273190][T15072] veth1_vlan: entered promiscuous mode [ 1646.311550][T15072] veth0_macvtap: entered promiscuous mode [ 1646.312581][ T9] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1646.317960][T15072] veth1_macvtap: entered promiscuous mode [ 1646.335583][T15072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1646.340218][T15072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1646.355931][T26398] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1646.356015][T26398] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1646.356061][T26398] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1646.356081][T26398] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1646.456588][T15072] ieee80211 phy60: Selected rate control algorithm 'minstrel_ht' [ 1646.481936][ T9] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1646.481955][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.481967][ T9] usb 10-1: Product: syz [ 1646.482092][ T9] usb 10-1: Manufacturer: syz [ 1646.482103][ T9] usb 10-1: SerialNumber: syz [ 1646.556714][T15072] ieee80211 phy61: Selected rate control algorithm 'minstrel_ht' [ 1646.557825][T11787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1646.557839][T11787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1646.598059][ T5700] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1646.659217][T26389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1646.659233][T26389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1646.764577][T15787] binder: BINDER_SET_CONTEXT_MGR already set [ 1646.764589][T15787] binder: 15786:15787 ioctl 4018620d 200000000040 returned -16 [ 1646.764912][T15787] binder: 15786:15787 ioctl c0306201 200000000240 returned -11 [ 1647.056128][ T29] audit: type=1400 audit(1786050709.036:2298): avc: denied { write } for pid=15761 comm="syz.9.7725" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1647.080020][T10502] usb 10-1: USB disconnect, device number 36 [ 1647.656399][T22010] gspca_vc032x: I2c Bus Busy Wait 00 [ 1647.675812][ T5700] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 1647.675901][ T5700] ath9k_htc: Failed to initialize the device [ 1647.676467][T10502] usb 10-1: ath9k_htc: USB layer deinitialized [ 1648.062464][T22010] gspca_vc032x: reg_w err -71 [ 1648.062478][T22010] gspca_vc032x: I2c Bus Busy Wait 00 [ 1648.062484][T22010] gspca_vc032x: I2c Bus Busy Wait 00 [ 1648.062489][T22010] gspca_vc032x: I2c Bus Busy Wait 00 [ 1648.062495][T22010] gspca_vc032x: I2c Bus Busy Wait 00 [ 1648.062500][T22010] gspca_vc032x: I2c Bus Busy Wait 00 [ 1648.062505][T22010] gspca_vc032x: I2c Bus Busy Wait 00 [ 1648.062511][T22010] gspca_vc032x: I2c Bus Busy Wait 00 [ 1648.062516][T22010] gspca_vc032x: I2c Bus Busy Wait 00 [ 1648.062521][T22010] gspca_vc032x: I2c Bus Busy Wait 00 [ 1648.062526][T22010] gspca_vc032x: I2c Bus Busy Wait 00 [ 1648.062549][T22010] gspca_vc032x: I2c Bus Busy Wait 00 [ 1648.062555][T22010] gspca_vc032x: I2c Bus Busy Wait 00 [ 1648.062561][T22010] gspca_vc032x: I2c Bus Busy Wait 00 [ 1648.062566][T22010] gspca_vc032x: I2c Bus Busy Wait 00 [ 1648.062571][T22010] gspca_vc032x: I2c Bus Busy Wait 00 [ 1648.062576][T22010] gspca_vc032x: I2c Bus Busy Wait 00 [ 1648.062581][T22010] gspca_vc032x: I2c Bus Busy Wait 00 [ 1648.062587][T22010] gspca_vc032x: Unknown sensor... [ 1648.062620][T22010] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 1648.065567][T22010] usb 7-1: USB disconnect, device number 6 [ 1648.132164][T10502] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1648.262191][T10502] usb 10-1: device descriptor read/64, error -71 [ 1648.543222][T10502] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1648.672989][T10502] usb 10-1: device descriptor read/64, error -71 [ 1648.754084][ T29] audit: type=1400 audit(1786050710.726:2299): avc: denied { write } for pid=15840 comm="syz.6.7734" name="functions" dev="configfs" ino=22929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1648.754378][T15841] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7732'. [ 1648.783096][T10502] usb usb10-port1: attempt power cycle [ 1648.783523][T15841] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1648.853599][ T29] audit: type=1400 audit(1786050710.826:2300): avc: denied { write } for pid=15840 comm="syz.6.7734" name="ss" dev="configfs" ino=143352 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1648.903857][ T29] audit: type=1400 audit(1786050710.886:2301): avc: denied { write } for pid=15840 comm="syz.6.7734" name="header" dev="configfs" ino=143355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1648.907784][ T29] audit: type=1400 audit(1786050710.886:2302): avc: denied { write } for pid=15840 comm="syz.6.7734" name="uncompressed" dev="configfs" ino=143356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1648.918324][ T29] audit: type=1400 audit(1786050710.896:2303): avc: denied { write } for pid=15840 comm="syz.6.7734" name="u" dev="configfs" ino=143369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1648.960290][T15844] [ 1648.960299][T15844] ====================================================== [ 1648.960303][T15844] WARNING: possible circular locking dependency detected [ 1648.960310][T15844] syzkaller #0 Tainted: G L [ 1648.960318][T15844] ------------------------------------------------------ [ 1648.960322][T15844] syz.6.7734/15844 is trying to acquire lock: [ 1648.960329][T15844] ffffffff901c7fa8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x7c/0x650 [ 1648.960363][T15844] [ 1648.960363][T15844] but task is already holding lock: [ 1648.960367][T15844] ffff888077634ac0 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0 [ 1648.960398][T15844] [ 1648.960398][T15844] which lock already depends on the new lock. [ 1648.960398][T15844] [ 1648.960402][T15844] [ 1648.960402][T15844] the existing dependency chain (in reverse order) is: [ 1648.960407][T15844] [ 1648.960407][T15844] -> #2 (&sb->s_type->i_mutex_key#25){++++}-{4:4}: [ 1648.960429][T15844] lock_acquire+0x1b9/0x370 [ 1648.960443][T15844] down_write+0x8b/0x1f0 [ 1648.960454][T15844] configfs_depend_item_unlocked+0xf3/0x6a0 [ 1648.960469][T15844] usbg_make_tpg+0x261/0x620 [ 1648.960478][T15844] target_fabric_make_tpg+0xab/0x8c0 [ 1648.960491][T15844] configfs_mkdir+0x51e/0xb70 [ 1648.960505][T15844] vfs_mkdir+0x361/0x850 [ 1648.960518][T15844] filename_mkdirat+0x48b/0x5e0 [ 1648.960530][T15844] __x64_sys_mkdir+0x6b/0x90 [ 1648.960543][T15844] do_syscall_64+0x115/0x870 [ 1648.960554][T15844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1648.960566][T15844] [ 1648.960566][T15844] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 1648.960581][T15844] lock_acquire+0x1b9/0x370 [ 1648.960593][T15844] __mutex_lock+0x1a4/0x1bd0 [ 1648.960603][T15844] tcm_set_name+0x29/0xb0 [ 1648.960617][T15844] function_make+0x21c/0x3f0 [ 1648.960628][T15844] configfs_mkdir+0x51e/0xb70 [ 1648.960642][T15844] vfs_mkdir+0x361/0x850 [ 1648.960655][T15844] filename_mkdirat+0x48b/0x5e0 [ 1648.960665][T15844] __x64_sys_mkdir+0x6b/0x90 [ 1648.960676][T15844] do_syscall_64+0x115/0x870 [ 1648.960686][T15844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1648.960696][T15844] [ 1648.960696][T15844] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 1648.960719][T15844] check_prev_add+0xeb/0xe60 [ 1648.960731][T15844] __lock_acquire+0x136c/0x1a40 [ 1648.960743][T15844] lock_acquire+0x1b9/0x370 [ 1648.960755][T15844] __mutex_lock+0x1a4/0x1bd0 [ 1648.960767][T15844] uvcg_streaming_header_allow_link+0x7c/0x650 [ 1648.960778][T15844] configfs_symlink+0x540/0x11f0 [ 1648.960793][T15844] vfs_symlink+0x178/0x4d0 [ 1648.960808][T15844] filename_symlinkat+0x2a6/0x560 [ 1648.960821][T15844] __x64_sys_symlinkat+0x9c/0xe0 [ 1648.960833][T15844] do_syscall_64+0x115/0x870 [ 1648.960844][T15844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1648.960856][T15844] [ 1648.960856][T15844] other info that might help us debug this: [ 1648.960856][T15844] [ 1648.960861][T15844] Chain exists of: [ 1648.960861][T15844] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#25 [ 1648.960861][T15844] [ 1648.960883][T15844] Possible unsafe locking scenario: [ 1648.960883][T15844] [ 1648.960887][T15844] CPU0 CPU1 [ 1648.960890][T15844] ---- ---- [ 1648.960894][T15844] lock(&sb->s_type->i_mutex_key#25); [ 1648.960904][T15844] lock(&opts->dep_lock); [ 1648.960912][T15844] lock(&sb->s_type->i_mutex_key#25); [ 1648.960924][T15844] lock(gadget_subsys.su_mutex); [ 1648.960932][T15844] [ 1648.960932][T15844] *** DEADLOCK *** [ 1648.960932][T15844] [ 1648.960935][T15844] 2 locks held by syz.6.7734/15844: [ 1648.960941][T15844] #0: ffff88801e3a6450 (sb_writers#19){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 1648.960973][T15844] #1: ffff888077634ac0 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0 [ 1648.961006][T15844] [ 1648.961006][T15844] stack backtrace: [ 1648.961013][T15844] CPU: 0 UID: 0 PID: 15844 Comm: syz.6.7734 Tainted: G L syzkaller #0 PREEMPT(full) [ 1648.961028][T15844] Tainted: [L]=SOFTLOCKUP [ 1648.961033][T15844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1648.961039][T15844] Call Trace: [ 1648.961043][T15844] [ 1648.961048][T15844] dump_stack_lvl+0x100/0x190 [ 1648.961061][T15844] print_circular_bug.cold+0x178/0x1c7 [ 1648.961080][T15844] check_noncircular+0x146/0x160 [ 1648.961093][T15844] check_prev_add+0xeb/0xe60 [ 1648.961105][T15844] __lock_acquire+0x136c/0x1a40 [ 1648.961120][T15844] lock_acquire+0x1b9/0x370 [ 1648.961131][T15844] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 1648.961146][T15844] ? __pfx___might_resched+0x10/0x10 [ 1648.961161][T15844] __mutex_lock+0x1a4/0x1bd0 [ 1648.961171][T15844] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 1648.961183][T15844] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 1648.961194][T15844] ? __lock_acquire+0x49f/0x1a40 [ 1648.961207][T15844] ? __pfx___mutex_lock+0x10/0x10 [ 1648.961219][T15844] ? __pfx___might_resched+0x10/0x10 [ 1648.961231][T15844] ? make_vfsgid+0xf1/0x140 [ 1648.961247][T15844] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 1648.961258][T15844] uvcg_streaming_header_allow_link+0x7c/0x650 [ 1648.961270][T15844] ? inode_permission+0x374/0x620 [ 1648.961283][T15844] ? mntput_no_expire+0xe7/0x220 [ 1648.961294][T15844] configfs_symlink+0x540/0x11f0 [ 1648.961310][T15844] ? __pfx_configfs_symlink+0x10/0x10 [ 1648.961327][T15844] vfs_symlink+0x178/0x4d0 [ 1648.961342][T15844] filename_symlinkat+0x2a6/0x560 [ 1648.961354][T15844] ? __pfx_filename_symlinkat+0x10/0x10 [ 1648.961366][T15844] ? strncpy_from_user+0x19d/0x2d0 [ 1648.961378][T15844] ? do_getname+0x191/0x390 [ 1648.961392][T15844] __x64_sys_symlinkat+0x9c/0xe0 [ 1648.961404][T15844] do_syscall_64+0x115/0x870 [ 1648.961414][T15844] ? clear_bhb_loop+0x40/0x90 [ 1648.961426][T15844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1648.961437][T15844] RIP: 0033:0x7f4e9a39e0d9 [ 1648.961446][T15844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1648.961458][T15844] RSP: 002b:00007f4e9b33f028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 1648.961469][T15844] RAX: ffffffffffffffda RBX: 00007f4e9a625fa0 RCX: 00007f4e9a39e0d9 [ 1648.961477][T15844] RDX: 0000200000001600 RSI: ffffffffffffff9c RDI: 0000200000001500 [ 1648.961484][T15844] RBP: 00007f4e9a435024 R08: 0000000000000000 R09: 0000000000000000 [ 1648.961491][T15844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1648.961497][T15844] R13: 00007f4e9a626038 R14: 00007f4e9a625fa0 R15: 00007fff8208b988 [ 1648.961508][T15844] [ 1648.961553][ T29] audit: type=1400 audit(1786050710.936:2304): avc: denied { write } for pid=15840 comm="syz.6.7734" name="h" dev="configfs" ino=143368 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1648.961582][ T29] audit: type=1400 audit(1786050710.936:2305): avc: denied { write } for pid=15840 comm="syz.6.7734" name="h" dev="configfs" ino=143368 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1648.982903][T15854] binder: BINDER_SET_CONTEXT_MGR already set [ 1648.982915][T15854] binder: 15853:15854 ioctl 4018620d 200000000040 returned -16 [ 1648.983060][T15854] binder: 15853:15854 ioctl c0306201 200000000240 returned -11 [ 1649.142047][T10502] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1649.164253][T10502] usb 10-1: device descriptor read/8, error -71 [ 1649.402229][T10502] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1649.422390][T10502] usb 10-1: device descriptor read/8, error -71 [ 1649.532135][T10502] usb usb10-port1: unable to enumerate USB device [ 1649.759688][T15866] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7739'. [ 1650.053053][ T5700] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1650.202120][ T5700] usb 7-1: Using ep0 maxpacket: 8 [ 1650.203115][ T5700] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1650.203135][ T5700] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1650.203148][ T5700] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1650.203178][ T5700] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1650.203192][ T5700] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1650.203211][ T5700] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1650.203224][ T5700] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.636497][ T5700] usb 7-1: usb_control_msg returned -32 [ 1650.636533][ T5700] usbtmc 7-1:16.0: can't read capabilities [ 1650.753705][T15884] netlink: 'syz.7.7742': attribute type 4 has an invalid length. [ 1650.770246][T15884] netlink: 'syz.7.7742': attribute type 17 has an invalid length. [ 1650.795146][T12684] Bluetooth: hci12: Opcode 0x1003 failed: -110 [ 1651.027160][T15912] binder: BINDER_SET_CONTEXT_MGR already set [ 1651.027172][T15912] binder: 15911:15912 ioctl 4018620d 200000000040 returned -16 [ 1651.027329][T15912] binder: 15911:15912 ioctl c0306201 200000000240 returned -11 [ 1651.204575][T15867] usbtmc 7-1:16.0: usb_control_msg returned -71 [ 1651.204878][ T191] usb 7-1: USB disconnect, device number 7 [ 1651.227240][T15863] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1651.442132][ T5700] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1651.660983][T15949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1651.661120][T15949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1651.774218][ T5700] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1651.774247][ T5700] usb 10-1: no configurations [ 1651.774255][ T5700] usb 10-1: can't read configurations, error -22 [ 1651.899474][T22010] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1652.035640][T22010] usb 6-1: device descriptor read/64, error -71 [ 1652.288907][T22010] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1652.366363][T15981] binder: 15980:15981 ioctl c0306201 0 returned -14 [ 1652.367187][T15981] binder: 15980:15981 ioctl c0306201 200000000240 returned -11 [ 1652.412869][T22010] usb 6-1: device descriptor read/64, error -71 [ 1652.526414][T22010] usb usb6-port1: attempt power cycle [ 1652.812269][ T5700] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1652.866751][T22010] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1652.889123][T22010] usb 6-1: device descriptor read/8, error -71 [ 1653.011406][ T5700] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1653.011426][ T5700] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1653.011443][ T5700] usb 10-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1653.011456][ T5700] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.012280][ T5700] usb 10-1: config 0 descriptor?? [ 1653.155515][T22010] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1653.196878][T22010] usb 6-1: device descriptor read/8, error -71 [ 1653.305241][T22010] usb usb6-port1: unable to enumerate USB device [ 1653.425266][ T5700] hid-led 0003:1D34:000A.0069: item fetching failed at offset 1/3 [ 1653.425479][ T5700] hid-led 0003:1D34:000A.0069: probe with driver hid-led failed with error -22 [ 1653.631043][ T5700] usb 10-1: USB disconnect, device number 42 [ 1654.725204][T26394] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.857532][T26394] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.019067][T26394] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.219782][T26394] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.335046][T26394] bridge_slave_1: left allmulticast mode [ 1655.366894][T26394] bridge_slave_1: left promiscuous mode [ 1655.377089][T26394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1655.408410][T26394] bridge_slave_0: left allmulticast mode [ 1655.421782][T26394] bridge_slave_0: left promiscuous mode [ 1655.455247][T26394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1655.550538][T26394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1655.573815][T26394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1655.594312][T10502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1655.609345][ T29] audit: type=1400 audit(1786050717.586:2306): avc: denied { write } for pid=16070 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1655.640313][T26394] bond0 (unregistering): Released all slaves [ 1655.655338][T26394] bond1 (unregistering): Released all slaves [ 1655.684317][T26394] bond2 (unregistering): Released all slaves [ 1655.697686][ T29] audit: type=1400 audit(1786050717.676:2307): avc: denied { write } for pid=16081 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1655.770257][ T5259] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1655.820651][T26394] hsr_slave_0: left promiscuous mode [ 1655.835721][T26394] hsr_slave_1: left promiscuous mode [ 1655.852844][T26394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1655.869779][T26394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1655.885325][T26394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1655.900208][T26394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1655.926777][T26394] veth1_macvtap: left promiscuous mode [ 1655.937885][T26394] veth0_macvtap: left promiscuous mode [ 1655.950764][T26394] veth1_vlan: left promiscuous mode [ 1655.965926][T26394] veth0_vlan: left promiscuous mode [ 1656.028190][ T29] audit: type=1400 audit(1786050718.006:2308): avc: denied { write } for pid=16090 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1656.113787][ T29] audit: type=1400 audit(1786050718.096:2309): avc: denied { write } for pid=16101 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1656.154261][T26394] team0 (unregistering): Port device team_slave_1 removed [ 1656.179055][T26394] team0 (unregistering): Port device team_slave_0 removed [ 1656.228565][ T5259] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1656.408153][T26394] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.455938][T26394] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.523121][T26394] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.577415][T26394] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.593536][ T29] audit: type=1400 audit(1786050718.576:2310): avc: denied { write } for pid=16104 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1656.686623][T26394] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.701130][ T29] audit: type=1400 audit(1786050718.686:2311): avc: denied { write } for pid=16116 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1656.746047][T26394] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.763488][ T5259] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1656.796297][T26394] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.837196][T26394] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.910019][T26394] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.947860][T26394] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.976959][ T29] audit: type=1400 audit(1786050718.956:2312): avc: denied { write } for pid=16131 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1657.006973][T26394] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.049409][ T29] audit: type=1400 audit(1786050719.026:2313): avc: denied { write } for pid=16154 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1657.075339][T26394] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.107643][ T5259] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1657.154818][T26394] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.186087][T26394] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.215199][T26394] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.247294][T26394] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.303325][T26394] bridge_slave_1: left allmulticast mode [ 1657.312894][T26394] bridge_slave_1: left promiscuous mode [ 1657.325154][T26394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.344368][T26394] bridge_slave_0: left allmulticast mode [ 1657.360967][T26394] bridge_slave_0: left promiscuous mode [ 1657.374838][T26394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1657.396781][T26394] bridge_slave_1: left allmulticast mode [ 1657.408255][T26394] bridge_slave_1: left promiscuous mode [ 1657.424982][T26394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.442437][T26394] bridge_slave_0: left allmulticast mode [ 1657.448121][T26394] bridge_slave_0: left promiscuous mode [ 1657.461298][ T29] audit: type=1400 audit(1786050719.446:2314): avc: denied { write } for pid=16170 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1657.485621][T26394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1657.504376][T26394] bridge_slave_1: left allmulticast mode [ 1657.524944][T26394] bridge_slave_1: left promiscuous mode [ 1657.538066][T26394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.556410][ T29] audit: type=1400 audit(1786050719.536:2315): avc: denied { write } for pid=16193 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1657.594081][T26394] bridge_slave_0: left allmulticast mode [ 1657.603124][T26394] bridge_slave_0: left promiscuous mode [ 1657.609020][T26394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1657.619414][T26394] bridge_slave_1: left allmulticast mode [ 1657.625267][T26394] bridge_slave_1: left promiscuous mode [ 1657.630881][T26394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.641661][T26394] bridge_slave_0: left allmulticast mode [ 1657.647472][T26394] bridge_slave_0: left promiscuous mode [ 1657.655509][T26394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1657.665273][T26394] bridge_slave_1: left allmulticast mode [ 1657.670942][T26394] bridge_slave_1: left promiscuous mode [ 1657.678310][T26394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.689884][T26394] bridge_slave_0: left allmulticast mode [ 1657.695849][T26394] bridge_slave_0: left promiscuous mode [ 1657.701467][T26394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1657.710422][T26394] bridge_slave_1: left allmulticast mode [ 1657.716214][T26394] bridge_slave_1: left promiscuous mode [ 1657.721834][T26394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.730865][T26394] bridge_slave_0: left allmulticast mode [ 1657.736639][T26394] bridge_slave_0: left promiscuous mode [ 1657.743521][T26394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1657.827377][T26394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1657.840946][T26394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1657.850640][T26394] bond0 (unregistering): Released all slaves [ 1657.860663][T26394] bond1 (unregistering): Released all slaves [ 1657.897869][T26394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1657.915396][T26394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1657.925150][T26394] bond0 (unregistering): Released all slaves [ 1657.933352][T26394] bond1 (unregistering): Released all slaves [ 1657.941738][T26394] bond2 (unregistering): Released all slaves [ 1657.950317][T26394] bond3 (unregistering): Released all slaves [ 1657.962878][T26394] bond4 (unregistering): Released all slaves [ 1657.971212][T26394] bond5 (unregistering): Released all slaves [ 1657.998276][T26394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1658.014031][T26394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1658.023501][T26394] bond0 (unregistering): Released all slaves [ 1658.031025][T26394] bond1 (unregistering): Released all slaves [ 1658.060128][T26394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1658.071932][T26394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1658.083148][T26394] bond0 (unregistering): Released all slaves [ 1658.160315][T26394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1658.173721][T26394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1658.183166][T26394] bond0 (unregistering): Released all slaves [ 1658.190478][T26394] bond1 (unregistering): Released all slaves [ 1658.199406][T26394] bond2 (unregistering): Released all slaves [ 1658.230085][T26394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1658.245865][T26394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1658.255374][T26394] bond0 (unregistering): Released all slaves [ 1658.263745][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1658.364439][T26394] tipc: Left network mode [ 1658.374649][T26394] tipc: Left network mode [ 1658.386693][T26394] tipc: Left network mode [ 1658.741108][ T5259] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1658.839386][T26394] hsr_slave_0: left promiscuous mode [ 1658.851591][T26394] hsr_slave_1: left promiscuous mode [ 1658.877997][T26394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1658.889883][T26394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1658.921958][T26394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1658.953187][T26394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1658.971456][T26394] hsr_slave_0: left promiscuous mode [ 1658.998584][T26394] hsr_slave_1: left promiscuous mode [ 1659.014227][T26394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1659.036816][T26394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1659.054162][T26394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1659.070663][T26394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1659.085298][T26394] hsr_slave_0: left promiscuous mode [ 1659.097216][T26394] hsr_slave_1: left promiscuous mode [ 1659.109417][T26394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1659.127421][T26394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1659.142771][T26394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1659.162243][T26394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1659.181187][T26394] hsr_slave_0: left promiscuous mode [ 1659.191568][T26394] hsr_slave_1: left promiscuous mode [ 1659.200602][T26394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1659.208249][T26394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1659.216559][T26394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1659.224131][T26394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1659.234164][T26394] hsr_slave_0: left promiscuous mode [ 1659.239744][T26394] hsr_slave_1: left promiscuous mode [ 1659.245879][T26394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1659.253835][T26394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1659.262521][T26394] hsr_slave_0: left promiscuous mode [ 1659.268514][T26394] hsr_slave_1: left promiscuous mode [ 1659.274439][T26394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1659.281833][T26394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1659.289710][T26394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1659.298761][T26394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1659.314968][T26394] veth1_macvtap: left promiscuous mode [ 1659.320507][T26394] veth0_macvtap: left promiscuous mode [ 1659.326749][T26394] veth1_vlan: left promiscuous mode [ 1659.332239][T26394] veth0_vlan: left promiscuous mode [ 1659.337787][T26394] veth1_macvtap: left promiscuous mode [ 1659.344837][T26394] veth0_macvtap: left promiscuous mode [ 1659.350354][T26394] veth1_vlan: left promiscuous mode [ 1659.356249][T26394] veth0_vlan: left promiscuous mode [ 1659.361816][T26394] veth1_macvtap: left promiscuous mode [ 1659.367630][T26394] veth0_macvtap: left promiscuous mode [ 1659.373244][T26394] veth1_vlan: left promiscuous mode [ 1659.378471][T26394] veth0_vlan: left promiscuous mode [ 1659.384207][T26394] veth1_macvtap: left promiscuous mode [ 1659.389704][T26394] veth0_macvtap: left promiscuous mode [ 1659.396539][T26394] veth1_vlan: left promiscuous mode [ 1659.401778][T26394] veth0_vlan: left promiscuous mode [ 1659.408118][T26394] veth1_macvtap: left promiscuous mode [ 1659.413896][T26394] veth0_macvtap: left promiscuous mode [ 1659.419405][T26394] veth1_vlan: left promiscuous mode [ 1659.424917][T26394] veth0_vlan: left promiscuous mode [ 1659.577324][T26394] team0 (unregistering): Port device team_slave_1 removed [ 1659.590885][T26394] team0 (unregistering): Port device team_slave_0 removed [ 1659.660542][T26394] team0 (unregistering): Port device team_slave_1 removed [ 1659.677488][T26394] team0 (unregistering): Port device team_slave_0 removed [ 1659.755519][T26394] team0 (unregistering): Port device team_slave_1 removed [ 1659.767815][T26394] team0 (unregistering): Port device team_slave_0 removed [ 1659.840483][T26394] team0 (unregistering): Port device team_slave_1 removed [ 1659.856121][T26394] team0 (unregistering): Port device team_slave_0 removed [ 1659.949313][T26394] team0 (unregistering): Port device team_slave_1 removed [ 1659.964921][T26394] team0 (unregistering): Port device team_slave_0 removed [ 1660.041048][T26394] team0 (unregistering): Port device team_slave_1 removed [ 1660.056131][T26394] team0 (unregistering): Port device team_slave_0 removed [ 1660.097641][ T5259] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1660.535520][ T5259] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1660.881601][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1660.881613][ T29] audit: type=1400 audit(1786050722.866:2322): avc: denied { write } for pid=16277 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1660.980874][ T29] audit: type=1400 audit(1786050722.966:2323): avc: denied { write } for pid=16294 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1661.035200][ T5259] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1661.271656][ T29] audit: type=1400 audit(1786050723.246:2324): avc: denied { write } for pid=16297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1661.346467][ T29] audit: type=1400 audit(1786050723.326:2325): avc: denied { write } for pid=16308 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1661.416475][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1661.673341][ T29] audit: type=1400 audit(1786050723.656:2326): avc: denied { write } for pid=16311 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1661.727131][ T29] audit: type=1400 audit(1786050723.706:2327): avc: denied { write } for pid=16322 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1661.773722][ T5259] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1661.891058][ T29] audit: type=1400 audit(1786050723.866:2328): avc: denied { write } for pid=16325 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1661.945990][ T29] audit: type=1400 audit(1786050723.926:2329): avc: denied { write } for pid=16336 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1661.990886][ T5259] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1662.129524][ T29] audit: type=1400 audit(1786050724.106:2330): avc: denied { write } for pid=16340 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1662.184840][ T29] audit: type=1400 audit(1786050724.166:2331): avc: denied { write } for pid=16351 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1662.229419][ T5259] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1662.399493][ T5259] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1662.579831][ T5259] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1662.754374][ T5259] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1662.927797][ T5259] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1663.098059][ T5259] 8021q: adding VLAN 0 to HW filter on device eth19